last executing test programs: 9m12.667936549s ago: executing program 0 (id=367): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x300, 0x8004, 0x0, 0x0, 0x0, 0xffffff1f}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9m12.556350364s ago: executing program 0 (id=370): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x182, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(r1, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="f0", 0x1}], 0x1}, 0x0) 9m12.288861425s ago: executing program 0 (id=374): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000800)=ANY=[@ANYBLOB='b *:*'], 0x9) 9m11.336014596s ago: executing program 0 (id=378): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000cc0)='memory.stat\x00', 0x26e1, 0x0) close(r0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8b30, &(0x7f0000000080)={'wlan1\x00', @broadcast}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 9m11.112010296s ago: executing program 0 (id=381): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x2a609, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff, 0x7fffffff}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={0x0, 0x0, 0x4018}, 0x18) 9m9.455193827s ago: executing program 0 (id=388): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x8, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=0x1, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x10, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, r0}, 0x16) 9m9.454828387s ago: executing program 32 (id=387): perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB='/'], 0x20) 9m9.029184635s ago: executing program 33 (id=388): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x8, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=0x1, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x10, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, r0}, 0x16) 8m22.293122521s ago: executing program 4 (id=766): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000040)=""/47) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc0, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2616}, 0x80) write$cgroup_pid(r1, &(0x7f0000000000), 0x2a979d) 8m21.940431786s ago: executing program 5 (id=769): socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) write$cgroup_type(r0, &(0x7f0000000180), 0x40001) write$cgroup_type(r2, &(0x7f00000005c0), 0x9) 8m21.703797426s ago: executing program 5 (id=771): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x43840, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x48) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='blkio.reset_stats\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x1ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, 0x0, &(0x7f0000000240)}, 0x20) ioctl$SIOCSIFHWADDR(r4, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="030000000010"}) ioctl$SIOCSIFHWADDR(r0, 0x89a3, &(0x7f0000000040)={'bridge0\x00', @random="0b0000000010"}) 8m21.603925641s ago: executing program 4 (id=773): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0xe}, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x5, 0x20000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, @perf_config_ext={0xfffffffffffffff9, 0x4}, 0x1080a0, 0x40002, 0x0, 0x3, 0x5, 0x3, 0x9}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0xe, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x1, 0x2000000}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)) 8m21.423943908s ago: executing program 3 (id=776): bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000940), 0x83, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 8m21.334497632s ago: executing program 3 (id=777): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0xfffffffe, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000071180f000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8m21.224040847s ago: executing program 4 (id=779): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100000000000000000000000a000085000000af0000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x3, 0x87, &(0x7f0000000140)=""/135}, 0x80) 8m21.198107138s ago: executing program 5 (id=780): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="0202000400"}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82744, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x5, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unlink(&(0x7f0000000200)='./cgroup\x00') bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000140)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x5d}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8m21.078913763s ago: executing program 3 (id=781): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000001000003"], 0x2e) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x2, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100020, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r2) socketpair(0x1, 0x801, 0x0, &(0x7f0000000100)) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) 8m20.991623047s ago: executing program 4 (id=783): bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf3, 0x2}, 0x0, 0x5, 0x3, 0x8, 0x68bd, 0x7fff}, 0xffffffffffffffff, 0x1, r0, 0x8) r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x6, 0x0, 0x0, 0x203, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2af8, 0x8}, 0x0, 0x48182e53, 0x0, 0x9, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x36) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000003, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0xffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xe, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) openat$tun(0xffffffffffffff9c, 0x0, 0x3458c1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000f0000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@cgroup=r4, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x58, 0x1, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000010000000500080001"], 0x50) 8m20.987835457s ago: executing program 5 (id=784): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) getpid() perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x1) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0xb770b3f6ef8f772, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map, 0x24, 0x0, 0x7f, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x40) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffffff8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) sendmsg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)}, 0x20000c00) 8m20.957854478s ago: executing program 3 (id=785): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 8m20.827862274s ago: executing program 5 (id=786): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0xff, 0x7, 0x0, 0x7fffffff, 0x53091, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x0, 0x3, 0x1, 0x200000000081, 0x8, 0x2, 0x0, 0x2cb, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, 0x0, 0x0, 0x2}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8927, &(0x7f0000000040)='\xd0\xb4\'') 8m20.827637853s ago: executing program 3 (id=787): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x1e64, 0xc78, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="bdaa00000000000071101000000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) close(0x3) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='xdp_exception\x00', r0}, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000540)='cpuset.mems\x00', 0x2, 0x0) 8m20.800616985s ago: executing program 4 (id=788): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) 8m20.327977755s ago: executing program 5 (id=789): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000100)) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2d, 'blkio'}, {0x2b, 'rlimit'}, {0x6, 'pids'}]}, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d28", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001000)='memory.swap.current\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b33, &(0x7f0000000000)={'wlan1\x00', @dev}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 8m20.271945727s ago: executing program 4 (id=790): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r1, &(0x7f0000000340), 0x0}, 0x20) 8m19.894698024s ago: executing program 34 (id=790): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r1, &(0x7f0000000340), 0x0}, 0x20) 8m19.889530624s ago: executing program 3 (id=792): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x50, 0x1, 0x0, 0x0, 0x20, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x76}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 8m19.763922539s ago: executing program 35 (id=792): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x50, 0x1, 0x0, 0x0, 0x20, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x76}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 8m19.75696405s ago: executing program 36 (id=789): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000100)) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2d, 'blkio'}, {0x2b, 'rlimit'}, {0x6, 'pids'}]}, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d28", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001000)='memory.swap.current\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b33, &(0x7f0000000000)={'wlan1\x00', @dev}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 8m3.501227847s ago: executing program 8 (id=840): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 8m3.322363715s ago: executing program 8 (id=843): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8942, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000c0000003c00"], 0x0, 0x56}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002940)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000300008d00000000000000200000000400000008000000050000000000000000"], &(0x7f0000002840)=""/213, 0x4a, 0xd5, 0x1}, 0x28) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000000500)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000018c0)=[{0x0}, {&(0x7f0000000440)="727b4b11a9f4434ee9b831075a77705ae89b80c1be", 0x15}, {0x0}, {&(0x7f0000000600)="13f9bd310a56f57d39f8abfba9caa34006b8db29564e8f4a37433d65ffe20cfa409cf6a8e0ec19ab78e85eb623d104b8582bfddcd1564c5639d593f8d2aaae90506da0", 0x43}, {&(0x7f0000001800)}], 0x5, 0x0, 0x0, 0x4008040}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="18060000000000000000000000000000851000000200000044000000000000009500007b000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x6, 0x92, &(0x7f0000000300)=""/146, 0x0, 0x8}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_config_ext={0x8, 0x101}, 0xc58, 0x200, 0x5, 0x1, 0x9, 0x9, 0xfffb, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) 8m2.947985521s ago: executing program 8 (id=848): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x0, 0x0}) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000100)=r1, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, &(0x7f00000005c0)=""/247, 0x26, 0xf7, 0x1}, 0x28) socketpair(0x0, 0x1, 0x4, 0x0) 8m2.51161167s ago: executing program 8 (id=853): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x5, 0x7}, 0x0, 0xca, 0x0, 0x0, 0x16f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0xe, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe8, 0xe8, 0x2, [@enum64={0x8, 0x1, 0x0, 0x13, 0x0, 0x2, [{0xf, 0xc, 0x2}]}, @float={0xd, 0x0, 0x0, 0x10, 0x2}, @union={0x8, 0x7, 0x0, 0x5, 0x1, 0x4, [{0x8, 0x4, 0xd1fa}, {0xb, 0x4}, {0x8, 0x2, 0x3}, {0x5, 0x0, 0x5}, {0x6, 0x5, 0x3}, {0xf, 0x2, 0x92d}, {0xe, 0x5, 0x85}]}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x46, 0x0, 0x76, 0x1}, @var={0x5, 0x0, 0x0, 0xe, 0x1, 0x1}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0xd, 0x4}, {0x6, 0x1}, {0xe}, {0x2, 0x1}, {0x5, 0x5}, {0x9}, {0x7, 0x2}]}]}}, &(0x7f00000007c0)=""/118, 0x102, 0x76, 0x1, 0x0, 0x10000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000340)=ANY=[@ANYRES64], 0x2) 8m2.26591854s ago: executing program 8 (id=856): recvmsg(0xffffffffffffffff, 0x0, 0x40010140) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) getpid() sendmsg$unix(0xffffffffffffffff, 0x0, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x12000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000080), 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x1, 0x10000000}, 0x0, 0x0, 0xffffffffffffffff, 0xf) 8m1.848651098s ago: executing program 8 (id=861): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x600, 0x2}, @call={0x85, 0x0, 0x0, 0x5d}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 8m1.515995952s ago: executing program 37 (id=861): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x600, 0x2}, @call={0x85, 0x0, 0x0, 0x5d}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1m18.687925573s ago: executing program 7 (id=5362): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c01250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 1m18.596664346s ago: executing program 7 (id=5366): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m18.368006876s ago: executing program 7 (id=5370): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 1m17.851223139s ago: executing program 7 (id=5372): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a1, &(0x7f0000000080)) 1m16.64855399s ago: executing program 7 (id=5378): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x20, &(0x7f00000004c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xab4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) 1m16.446786119s ago: executing program 7 (id=5380): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x5}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@bloom_filter={0x1e, 0xa, 0x50, 0x2, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x9d1c, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x4}, r2, 0xafffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000001740)=ANY=[@ANYBLOB="9feb0100180000"], 0x0, 0x4d, 0x0, 0x3, 0x10000}, 0x28) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) gettid() r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) close(r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000ac0)={0x4, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1c, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="181100b3", @ANYRES32, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000852000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f0000000980)='GPL\x00', 0x8, 0x24, &(0x7f0000000a00)=""/36, 0x41100, 0x10, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, r7, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@generic={&(0x7f0000000640)='./file0\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1e, 0x26, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbd2}, [@snprintf, @call={0x85, 0x0, 0x0, 0x33}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffb}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @tail_call, @map_idx={0x18, 0x2, 0x5, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f00000003c0)='GPL\x00', 0x3, 0xf1, &(0x7f0000000840)=""/241, 0x41000, 0x9, '\x00', 0x0, @sk_lookup, r4, 0x8, &(0x7f0000000400)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, r8, r6, 0x0, &(0x7f00000006c0)=[r1, r1, 0x1, r9], 0x0, 0x10, 0x1}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="00bb21ff7cf3ca78bb2a00000000006f75a94e99c91ec1b4adcc5a67ebdca490242d64076c058abb054378d60ec540182cac3dd9ba050259105f384fa214ac7450dde8acfe39cb14b7c4154b3ed63e0231fcfe27048a8bbbd56bd55bd8b24764d1132187ed78cd397eff735d2e3d77c60b04d34ff3a7beb5efa2453debe0f46ad04507f6ee9f7452469797fcdc8c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000500"/25], 0x50) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x14}, 0x0) 1m1.311950029s ago: executing program 38 (id=5380): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x5}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@bloom_filter={0x1e, 0xa, 0x50, 0x2, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x9d1c, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x4}, r2, 0xafffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000001740)=ANY=[@ANYBLOB="9feb0100180000"], 0x0, 0x4d, 0x0, 0x3, 0x10000}, 0x28) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) gettid() r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) close(r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000ac0)={0x4, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1c, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="181100b3", @ANYRES32, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000852000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f0000000980)='GPL\x00', 0x8, 0x24, &(0x7f0000000a00)=""/36, 0x41100, 0x10, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, r7, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@generic={&(0x7f0000000640)='./file0\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1e, 0x26, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbd2}, [@snprintf, @call={0x85, 0x0, 0x0, 0x33}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffb}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @tail_call, @map_idx={0x18, 0x2, 0x5, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f00000003c0)='GPL\x00', 0x3, 0xf1, &(0x7f0000000840)=""/241, 0x41000, 0x9, '\x00', 0x0, @sk_lookup, r4, 0x8, &(0x7f0000000400)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, r8, r6, 0x0, &(0x7f00000006c0)=[r1, r1, 0x1, r9], 0x0, 0x10, 0x1}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="00bb21ff7cf3ca78bb2a00000000006f75a94e99c91ec1b4adcc5a67ebdca490242d64076c058abb054378d60ec540182cac3dd9ba050259105f384fa214ac7450dde8acfe39cb14b7c4154b3ed63e0231fcfe27048a8bbbd56bd55bd8b24764d1132187ed78cd397eff735d2e3d77c60b04d34ff3a7beb5efa2453debe0f46ad04507f6ee9f7452469797fcdc8c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000500"/25], 0x50) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x14}, 0x0) 2.016743554s ago: executing program 1 (id=5815): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x1f, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 1.843998511s ago: executing program 6 (id=5807): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 1.843500991s ago: executing program 1 (id=5809): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 1.64696071s ago: executing program 1 (id=5811): perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x34000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0xffffffffffffff9f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r3) openat$cgroup_devices(r3, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) 1.441129519s ago: executing program 2 (id=5816): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.3965419s ago: executing program 6 (id=5817): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000007100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="5fd6401c1db5051b3edbfd8a4a60", 0x0, 0x702, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 1.327921923s ago: executing program 9 (id=5818): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18010000110000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map, 0xffffffffffffffff, 0x34, 0x20}, 0x20) 1.310885334s ago: executing program 1 (id=5819): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x6, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0xecce}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.262006796s ago: executing program 9 (id=5820): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) r4 = getpid() write$cgroup_pid(r3, &(0x7f0000000340)=r4, 0x12) 1.119733342s ago: executing program 6 (id=5821): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='sched_kthread_work_queue_work\x00', r1}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) 1.119361172s ago: executing program 9 (id=5822): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.066187594s ago: executing program 1 (id=5823): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x80047456, 0x0) 1.061606955s ago: executing program 2 (id=5824): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000d25d0000000000000ee18110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 904.797281ms ago: executing program 6 (id=5825): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c01250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 892.307212ms ago: executing program 2 (id=5826): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 821.683835ms ago: executing program 9 (id=5827): perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x34000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0xffffffffffffff9f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r3) openat$cgroup_devices(r3, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) 682.44075ms ago: executing program 6 (id=5828): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18010000110000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map, 0xffffffffffffffff, 0x34, 0x20}, 0x20) 515.897888ms ago: executing program 6 (id=5829): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r1}, 0x10) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 498.909968ms ago: executing program 1 (id=5830): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r2}, 0x10) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 435.455351ms ago: executing program 9 (id=5831): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000070000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) 332.284926ms ago: executing program 2 (id=5832): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x6, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0xecce}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 203.804142ms ago: executing program 9 (id=5833): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1fd, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xf) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/44}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000680)=ANY=[@ANYRESHEX=r1, @ANYRESOCT, @ANYRES32, @ANYBLOB="fcd25db7905d41358b3056cfad958066a0861b4be7fde592fe99b8eb4a07e182fc8d952a364c49aa2cbf8e4f10bca14d6b7d3ac932ddfdf9cb864af5efd9c77e7add26218e567e8be3a5455f750edce5aefda243c3d151b11fa43c35046c80ca964d3ea06d3d408950bf84dd4493320624e68b00b87844807c05dee8c7035ca617dae055b1adea7a42d3946b0f30cea4d24d738d3726f9588941a707e3bdc03ca08a42b13acb7a629d522c3659b88d7c9ac52fff4ee78b2362b6b988658b936950597f1b8e1d"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) close(r4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r4, 0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'macsec0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) 142.204764ms ago: executing program 2 (id=5834): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xd, &(0x7f0000000b00)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x9, 0x100f, &(0x7f0000003d00)=""/4111, 0x41000}, 0x94) 0s ago: executing program 2 (id=5835): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000004c0), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000010c0)) kernel console output (not intermixed with test programs): attribute type 21 has an invalid length. [ 414.882811][ T8890] netlink: 128 bytes leftover after parsing attributes in process `syz.7.1226'. [ 414.892883][ T8890] netlink: 'syz.7.1226': attribute type 4 has an invalid length. [ 414.900772][ T8890] netlink: 'syz.7.1226': attribute type 5 has an invalid length. [ 414.909106][ T8890] netlink: 3 bytes leftover after parsing attributes in process `syz.7.1226'. [ 415.015699][ T8897] __sock_release: fasync list not empty! [ 416.405054][ T8936] mac80211_hwsim hwsim4 »»»»»»: renamed from wlan0 [ 417.510954][ T8976] netlink: 'syz.6.1264': attribute type 12 has an invalid length. [ 417.519023][ T8976] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1264'. [ 421.917460][ T9093] netlink: 'syz.7.1312': attribute type 21 has an invalid length. [ 421.939789][ T9093] netlink: 16154 bytes leftover after parsing attributes in process `syz.7.1312'. [ 422.423649][ T9115] netlink: 'syz.6.1320': attribute type 9 has an invalid length. [ 422.462747][ T9115] netlink: 154020 bytes leftover after parsing attributes in process `syz.6.1320'. [ 422.781433][ T9133] netlink: 'syz.6.1328': attribute type 1 has an invalid length. [ 422.799142][ T9133] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1328'. [ 422.957747][ T9140] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1331'. [ 423.571462][ T9167] netlink: 'syz.6.1343': attribute type 5 has an invalid length. [ 425.713373][ T9256] netlink: 'syz.7.1385': attribute type 39 has an invalid length. [ 426.467103][ T9284] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1394'. [ 426.975528][ T9284] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1394'. [ 427.020340][ T9285] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1394'. [ 428.556954][ T9331] netlink: 'syz.9.1416': attribute type 10 has an invalid length. [ 428.583767][ T9331] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 428.799435][ T9339] netlink: 65047 bytes leftover after parsing attributes in process `syz.7.1421'. [ 431.515573][ T9428] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1459'. [ 432.727020][ T9453] netlink: 'syz.7.1470': attribute type 1 has an invalid length. [ 432.773850][ T9453] netlink: 168864 bytes leftover after parsing attributes in process `syz.7.1470'. [ 434.402630][ T9513] netlink: 152 bytes leftover after parsing attributes in process `syz.9.1495'. [ 435.166391][ T9547] netlink: 'syz.7.1509': attribute type 10 has an invalid length. [ 435.203825][ T9547] veth1_macvtap: left promiscuous mode [ 435.938009][ T9569] IPv6: Can't replace route, no match found [ 437.706253][ T9626] syz.2.1545[9626] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 437.707094][ T9626] syz.2.1545[9626] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 437.727884][ T9626] syz.2.1545[9626] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 437.743704][ T9626] syz.2.1545[9626] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 439.425155][ T9642] netlink: 'syz.7.1552': attribute type 10 has an invalid length. [ 439.452973][ T9642] bridge_slave_1: left allmulticast mode [ 439.466855][ T9642] bridge_slave_1: left promiscuous mode [ 439.492801][ T9642] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.947748][ T9658] netlink: 26 bytes leftover after parsing attributes in process `syz.9.1561'. [ 440.076457][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.092346][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.560147][ T9680] netlink: 'syz.7.1570': attribute type 10 has an invalid length. [ 440.586738][ T9680] vlan0: entered allmulticast mode [ 440.602101][ T9680] veth0_vlan: entered allmulticast mode [ 440.700489][ T9680] team0: Port device vlan0 added [ 442.114636][ T9739] netlink: 'syz.2.1595': attribute type 29 has an invalid length. [ 445.046665][ T9805] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1625'. [ 445.060328][ T9805] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1625'. [ 445.071778][ T9805] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1625'. [ 445.107913][ T9805] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1625'. [ 445.619462][ T9817] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 446.882355][ T9852] netlink: 'syz.6.1647': attribute type 10 has an invalid length. [ 446.895721][ T9852] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1647'. [ 446.921024][ T9852] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 446.931811][ T9852] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 447.099696][ T5106] Bluetooth: hci3: Unknown advertising packet type: 0x70 [ 447.099767][ T5106] Bluetooth: hci3: Malformed LE Event: 0x0d [ 448.178064][ T9908] netlink: 'syz.2.1672': attribute type 10 has an invalid length. [ 448.409864][ T9908] team0: Port device geneve1 added [ 449.584939][ T9945] netlink: 'syz.2.1687': attribute type 10 has an invalid length. [ 449.622180][ T9945] vlan0: entered allmulticast mode [ 449.627784][ T9945] veth0_vlan: entered allmulticast mode [ 449.728502][ T9945] team0: Port device vlan0 added [ 449.883669][ T9954] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1691'. [ 450.047396][ T9956] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1692'. [ 452.640265][ T9978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.648413][ T9978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.656598][ T9978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.665701][ T9978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.456313][T10001] netlink: 'syz.9.1711': attribute type 10 has an invalid length. [ 453.891837][T10001] team0: Device hsr_slave_0 failed to register rx_handler [ 454.624661][T10026] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1720'. [ 455.234857][T10026] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.438378][T10026] bridge_slave_0 (unregistering): left allmulticast mode [ 455.454672][T10026] bridge_slave_0 (unregistering): left promiscuous mode [ 455.488732][T10026] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.941799][T10051] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1734'. [ 456.186940][T10056] bridge_slave_1: left allmulticast mode [ 456.197847][T10056] bridge_slave_1: left promiscuous mode [ 456.226843][T10056] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.238384][T10057] delete_channel: no stack [ 456.243952][ T5106] Bluetooth: hci3: Malformed LE Event: 0x02 [ 458.859356][T10056] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.241095][T10079] netlink: 199836 bytes leftover after parsing attributes in process `syz.9.1746'. [ 461.421796][T10120] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1762'. [ 461.436457][T10120] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1762'. [ 461.450061][T10120] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1762'. [ 461.462600][ T5106] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 461.932825][T10141] netlink: 'syz.2.1773': attribute type 5 has an invalid length. [ 462.402533][T10159] netlink: 'syz.9.1780': attribute type 29 has an invalid length. [ 462.410874][T10159] netlink: 'syz.9.1780': attribute type 29 has an invalid length. [ 462.423959][T10159] netlink: 'syz.9.1780': attribute type 29 has an invalid length. [ 462.600726][T10166] netlink: 132 bytes leftover after parsing attributes in process `syz.9.1782'. [ 462.821811][T10170] netlink: 'syz.7.1785': attribute type 1 has an invalid length. [ 462.829839][T10170] netlink: 'syz.7.1785': attribute type 2 has an invalid length. [ 462.841580][T10170] netlink: 11254 bytes leftover after parsing attributes in process `syz.7.1785'. [ 463.369887][T10182] netlink: 'syz.6.1791': attribute type 21 has an invalid length. [ 463.387000][T10182] netlink: 'syz.6.1791': attribute type 1 has an invalid length. [ 463.405579][T10182] netlink: 144 bytes leftover after parsing attributes in process `syz.6.1791'. [ 464.505706][T10189] netlink: 'syz.7.1794': attribute type 10 has an invalid length. [ 464.618879][T10193] netlink: 'syz.2.1795': attribute type 21 has an invalid length. [ 464.632609][T10193] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1795'. [ 465.227288][T10205] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 465.256131][T10208] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1801'. [ 465.269143][T10208] ipvlan1: entered promiscuous mode [ 465.280107][T10208] ipvlan1: entered allmulticast mode [ 465.289606][T10208] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 465.724895][T10223] delete_channel: no stack [ 465.884004][T10228] mac80211_hwsim hwsim21 wlan1: entered allmulticast mode [ 465.993002][T10228] netlink: 128 bytes leftover after parsing attributes in process `syz.9.1809'. [ 466.024616][T10228] netlink: 3 bytes leftover after parsing attributes in process `syz.9.1809'. [ 466.236254][ T5106] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 466.980231][T10256] validate_nla: 5 callbacks suppressed [ 466.980267][T10256] netlink: 'syz.2.1821': attribute type 1 has an invalid length. [ 467.018895][T10256] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.1821'. [ 467.064289][T10259] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.541012][ T5106] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 468.747392][T10305] mac80211_hwsim hwsim18 »»»»»»: renamed from wlan0 [ 469.756000][T10337] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1855'. [ 469.784193][T10337] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1855'. [ 469.802049][T10337] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1855'. [ 469.825235][T10337] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1855'. [ 470.368660][T10352] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 471.288726][T10378] netlink: 'syz.7.1874': attribute type 12 has an invalid length. [ 471.322921][T10378] netlink: 120 bytes leftover after parsing attributes in process `syz.7.1874'. [ 472.292061][T10395] netlink: 'syz.9.1881': attribute type 10 has an invalid length. [ 472.355245][T10395] vlan0: entered allmulticast mode [ 472.370187][T10395] veth0_vlan: entered allmulticast mode [ 472.423468][T10398] netlink: 199836 bytes leftover after parsing attributes in process `syz.9.1881'. [ 472.595187][T10395] vlan0: entered promiscuous mode [ 472.702811][T10395] team0: Port device vlan0 added [ 472.779923][T10403] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1885'. [ 473.336594][T10406] veth0_vlan: entered allmulticast mode [ 474.634194][ T5106] Bluetooth: hci0: command 0x0406 tx timeout [ 474.649673][T10427] netlink: 180 bytes leftover after parsing attributes in process `syz.7.1894'. [ 475.053272][T10434] netlink: 'syz.7.1897': attribute type 33 has an invalid length. [ 475.072369][T10434] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1897'. [ 475.662182][T10452] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1903'. [ 475.691865][T10452] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1903'. [ 475.702582][T10453] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1903'. [ 475.741302][T10450] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1903'. [ 476.373133][T10468] syz.7.1911 uses obsolete (PF_INET,SOCK_PACKET) [ 477.115587][ T51] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 477.993055][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 478.120820][T10505] netlink: 184 bytes leftover after parsing attributes in process `syz.9.1928'. [ 479.191722][ T51] Bluetooth: hci1: command tx timeout [ 480.746168][ T5106] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11 [ 480.965453][ T5106] Bluetooth: hci2: unexpected event 0x04 length: 151 > 10 [ 482.981236][T10532] netlink: 'syz.7.1939': attribute type 39 has an invalid length. [ 482.998974][T10538] netlink: 'syz.2.1942': attribute type 10 has an invalid length. [ 483.014680][T10538] geneve0: entered promiscuous mode [ 483.031740][ T5106] Bluetooth: hci2: command 0x0406 tx timeout [ 483.090907][T10544] netlink: 'syz.7.1945': attribute type 1 has an invalid length. [ 483.098872][T10544] netlink: 161700 bytes leftover after parsing attributes in process `syz.7.1945'. [ 483.099985][T10538] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 485.983563][T10621] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 486.306333][T10629] netlink: 'syz.7.1981': attribute type 12 has an invalid length. [ 486.333822][T10629] netlink: 120 bytes leftover after parsing attributes in process `syz.7.1981'. [ 486.392941][T10631] netlink: 'syz.2.1982': attribute type 21 has an invalid length. [ 486.431911][T10631] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1982'. [ 486.441070][T10631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1982'. [ 486.596376][T10635] veth0_vlan: left promiscuous mode [ 486.616946][T10635] veth0_vlan: entered promiscuous mode [ 486.676892][T10639] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1984'. [ 486.708769][T10639] hsr_slave_0: left promiscuous mode [ 486.716359][T10639] hsr_slave_1: left promiscuous mode [ 486.803769][T10638] netlink: 16186 bytes leftover after parsing attributes in process `syz.9.1985'. [ 486.814698][T10641] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.221941][T10654] netlink: 'syz.9.1991': attribute type 13 has an invalid length. [ 487.229820][T10654] netlink: 160 bytes leftover after parsing attributes in process `syz.9.1991'. [ 487.381775][T10654] erspan0: refused to change device tx_queue_len [ 487.412093][T10654] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 487.477012][T10663] netlink: 64859 bytes leftover after parsing attributes in process `syz.7.1996'. [ 487.775964][T10672] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2000'. [ 488.337804][T10690] netlink: 'syz.6.2007': attribute type 10 has an invalid length. [ 491.820661][T10706] netlink: 830 bytes leftover after parsing attributes in process `syz.6.2014'. [ 494.902895][T10717] syz.7.2019 (10717) used obsolete PPPIOCDETACH ioctl [ 495.223051][T10719] netlink: 'syz.9.2020': attribute type 12 has an invalid length. [ 495.230962][T10719] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2020'. [ 497.149662][T10755] netlink: 'syz.2.2034': attribute type 10 has an invalid length. [ 498.474910][ T5106] Bluetooth: hci1: command 0x0406 tx timeout [ 498.648962][T10804] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2054'. [ 499.404748][T10804] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.445051][T10804] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.488240][T10804] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 499.505348][T10804] bond0 (unregistering): Released all slaves [ 500.221276][T10845] netlink: 'syz.2.2069': attribute type 10 has an invalid length. [ 500.909385][T10860] netlink: 'syz.6.2076': attribute type 1 has an invalid length. [ 500.925735][T10862] netlink: 'syz.2.2077': attribute type 21 has an invalid length. [ 500.937125][T10862] IPv6: NLM_F_CREATE should be specified when creating new route [ 500.971810][T10860] netlink: 112865 bytes leftover after parsing attributes in process `syz.6.2076'. [ 501.523625][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.529996][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.929764][T10893] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.2089'. [ 502.095439][T10897] netlink: 'syz.2.2092': attribute type 2 has an invalid length. [ 502.111790][T10897] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2092'. [ 502.609492][T10918] syzkaller0: entered promiscuous mode [ 502.615262][T10918] syzkaller0: entered allmulticast mode [ 502.775579][T10923] netlink: 'syz.7.2104': attribute type 2 has an invalid length. [ 502.811550][T10923] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2104'. [ 502.948848][T10932] Â: renamed from pim6reg1 [ 503.119594][T10935] netlink: 14463 bytes leftover after parsing attributes in process `syz.6.2107'. [ 503.801024][T10955] netlink: 'syz.6.2118': attribute type 2 has an invalid length. [ 503.811981][T10955] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2118'. [ 503.941943][T10961] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2121'. [ 503.951240][T10961] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2121'. [ 503.964621][T10961] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2121'. [ 507.102686][T10975] netlink: 'syz.7.2128': attribute type 29 has an invalid length. [ 507.123059][T10975] netlink: 'syz.7.2128': attribute type 29 has an invalid length. [ 507.153170][T10975] netlink: 'syz.7.2128': attribute type 29 has an invalid length. [ 507.164178][T10975] netlink: 'syz.7.2128': attribute type 29 has an invalid length. [ 507.524630][T10984] netlink: 'syz.6.2132': attribute type 2 has an invalid length. [ 507.555899][T10984] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2132'. [ 507.762257][ T5106] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 507.771875][ T5106] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 507.780671][ T5106] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 507.793892][ T5106] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 507.801586][ T5106] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 507.810468][ T5106] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 508.143989][T11002] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2139'. [ 508.610840][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.640854][T11014] netlink: 'syz.9.2143': attribute type 2 has an invalid length. [ 508.652220][T11014] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2143'. [ 509.517212][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.617221][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.678814][T11031] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2147'. [ 509.801884][T11031] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2147'. [ 509.825185][T11027] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2147'. [ 509.834824][T11033] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2147'. [ 509.845739][T10987] chnl_net:caif_netlink_parms(): no params data found [ 509.915512][ T5106] Bluetooth: hci4: command tx timeout [ 510.214859][T11048] netlink: 'syz.7.2155': attribute type 2 has an invalid length. [ 510.228828][T11048] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2155'. [ 510.304510][T10987] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.327278][T10987] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.348080][T10987] bridge_slave_0: entered allmulticast mode [ 510.359491][T10987] bridge_slave_0: entered promiscuous mode [ 510.420779][T10987] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.448639][T10987] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.479169][T10987] bridge_slave_1: entered allmulticast mode [ 510.501355][T10987] bridge_slave_1: entered promiscuous mode [ 510.686055][T10987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.702575][T10987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.793534][T10987] team0: Port device team_slave_0 added [ 510.833639][T10987] team0: Port device team_slave_1 added [ 511.021258][T10987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.037054][T10987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.076320][T10987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.105892][T11072] netlink: 'syz.9.2165': attribute type 2 has an invalid length. [ 511.115243][T11072] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2165'. [ 511.127791][T10987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.141535][T10987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.168315][T10987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.267701][T10987] hsr_slave_0: entered promiscuous mode [ 511.281173][T10987] hsr_slave_1: entered promiscuous mode [ 511.287989][T10987] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 511.296153][T10987] Cannot create hsr debugfs directory [ 511.975303][T11090] netlink: 'syz.9.2174': attribute type 2 has an invalid length. [ 511.984930][T11090] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2174'. [ 511.994039][ T5106] Bluetooth: hci4: command tx timeout [ 512.395164][ T49] hsr_slave_0: left promiscuous mode [ 512.401326][ T49] hsr_slave_1: left promiscuous mode [ 512.411021][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.420236][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.428677][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.436284][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.456985][ T49] veth1_macvtap: left promiscuous mode [ 512.462745][ T49] veth0_macvtap: left promiscuous mode [ 512.468521][ T49] veth1_vlan: left promiscuous mode [ 512.474409][ T49] veth0_vlan: left promiscuous mode [ 512.615577][ T49] team0 (unregistering): Port device geneve1 removed [ 512.636379][ T49] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 512.757593][ T49] team0 (unregistering): Port device vlan0 removed [ 512.985226][ T49] team0 (unregistering): Port device team_slave_1 removed [ 513.026813][ T49] team0 (unregistering): Port device team_slave_0 removed [ 513.065805][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 513.104824][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 513.147359][ T49] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 513.313436][ T49] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 513.525272][ T49] bond0 (unregistering): Released all slaves [ 513.750712][T10987] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 513.772180][T10987] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 513.782495][T10987] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 513.793030][T10987] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 513.883136][T10987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.915746][T10987] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.928194][ T1041] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.935348][ T1041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.949579][ T7870] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.956783][ T7870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.071789][ T5106] Bluetooth: hci4: command tx timeout [ 514.155108][T10987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.194246][T10987] veth0_vlan: entered promiscuous mode [ 514.206483][T10987] veth1_vlan: entered promiscuous mode [ 514.236376][T10987] veth0_macvtap: entered promiscuous mode [ 514.246515][T10987] veth1_macvtap: entered promiscuous mode [ 514.265590][T10987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.277193][T10987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.288695][T10987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 514.301362][T10987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.312139][T10987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.325008][T10987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.337626][T10987] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.346940][T10987] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.355875][T10987] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.364791][T10987] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.426295][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.441357][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.466211][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.474469][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.161919][T11120] netlink: 'syz.6.2177': attribute type 10 has an invalid length. [ 515.189685][T11119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.220464][T11119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 515.236847][T11119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.246602][T11119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.545244][T11132] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2186'. [ 515.567560][T11132] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2186'. [ 515.592036][T11130] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2186'. [ 515.614011][T11132] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2186'. [ 515.792358][T11141] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2190'. [ 516.153898][ T5106] Bluetooth: hci4: command tx timeout [ 516.796167][T11167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.828876][T11167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.897690][T11167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.933595][T11167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.229745][T11202] syzkaller0: entered promiscuous mode [ 518.236229][T11202] syzkaller0: entered allmulticast mode [ 519.719976][T11211] syzkaller0: entered promiscuous mode [ 519.725824][T11211] syzkaller0: entered allmulticast mode [ 520.143975][T11230] netlink: 'syz.6.2228': attribute type 10 has an invalid length. [ 520.209889][T11230] team0: Device hsr_slave_0 failed to register rx_handler [ 520.276913][T11238] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2231'. [ 522.945988][T11233] netlink: 'syz.7.2229': attribute type 8 has an invalid length. [ 522.961796][T11233] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2229'. [ 522.991277][T11238] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2231'. [ 523.102104][T11243] syzkaller0: entered promiscuous mode [ 523.107619][T11243] syzkaller0: entered allmulticast mode [ 523.182188][T11245] netlink: 'syz.2.2235': attribute type 17 has an invalid length. [ 523.200355][T11245] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2235'. [ 523.534102][T11259] netlink: 9286 bytes leftover after parsing attributes in process `syz.9.2241'. [ 523.546257][T11262] netlink: 4595 bytes leftover after parsing attributes in process `syz.7.2243'. [ 523.556186][T11262] netlink: 4595 bytes leftover after parsing attributes in process `syz.7.2243'. [ 523.573982][T11262] netlink: 4595 bytes leftover after parsing attributes in process `syz.7.2243'. [ 523.810465][T11274] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.2248'. [ 523.828793][T11275] netlink: 'syz.7.2247': attribute type 1 has an invalid length. [ 523.838899][T11274] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.2248'. [ 523.848792][T11275] netlink: 168864 bytes leftover after parsing attributes in process `syz.7.2247'. [ 523.957118][T11277] netlink: 'syz.9.2250': attribute type 2 has an invalid length. [ 524.080314][T11285] netlink: 'syz.7.2261': attribute type 10 has an invalid length. [ 524.545691][T11285] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.574690][T11285] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.582118][T11285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.604392][T11285] team0: Port device bridge0 added [ 524.810671][T11302] netlink: 'syz.6.2260': attribute type 7 has an invalid length. [ 525.032846][T11308] netlink: 'syz.7.2264': attribute type 2 has an invalid length. [ 525.170035][T11313] netlink: 'syz.6.2266': attribute type 1 has an invalid length. [ 526.568513][T11329] netlink: 'syz.7.2273': attribute type 10 has an invalid length. [ 526.610589][T11329] team0: Port device hsr_slave_0 added [ 526.762660][T11335] netlink: 'syz.2.2275': attribute type 2 has an invalid length. [ 528.757955][T11366] validate_nla: 1 callbacks suppressed [ 528.757995][T11366] netlink: 'syz.6.2290': attribute type 2 has an invalid length. [ 528.775922][T11366] __nla_validate_parse: 14 callbacks suppressed [ 528.775934][T11366] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2290'. [ 529.060494][T11375] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.2291'. [ 529.586482][T11383] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.2298'. [ 529.781295][T11394] netlink: 'syz.7.2302': attribute type 2 has an invalid length. [ 529.807386][T11394] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2302'. [ 530.120045][T11406] netlink: 144 bytes leftover after parsing attributes in process `syz.9.2307'. [ 530.140122][T11406] team_slave_0: left promiscuous mode [ 530.147614][T11406] team_slave_0: left allmulticast mode [ 530.630279][T11406] team0: Port device team_slave_0 removed [ 530.659323][T11406] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 530.897093][T11421] netlink: 'syz.7.2312': attribute type 2 has an invalid length. [ 530.918709][T11421] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2312'. [ 531.089972][T11427] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 531.099464][T11427] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 531.108645][T11427] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 531.117801][T11427] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 531.126960][T11427] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 531.136144][T11427] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 531.145302][T11427] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 531.154496][T11427] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 531.163643][T11427] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 532.625317][T11465] netlink: 'syz.9.2327': attribute type 2 has an invalid length. [ 532.643068][T11465] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2327'. [ 532.828332][T11473] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.2334'. [ 534.272593][T11506] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.2345'. [ 534.285862][T11511] netlink: 'syz.9.2347': attribute type 2 has an invalid length. [ 534.304254][T11511] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2347'. [ 534.340579][T11512] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.2345'. [ 535.115764][T11538] netlink: 'syz.9.2359': attribute type 2 has an invalid length. [ 535.124963][T11538] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2359'. [ 535.449157][T11548] netlink: 'syz.9.2370': attribute type 2 has an invalid length. [ 535.457586][T11548] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2370'. [ 535.882400][T11562] net_ratelimit: 3320 callbacks suppressed [ 535.882436][T11562] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 536.128698][T11577] netlink: 'syz.9.2373': attribute type 2 has an invalid length. [ 536.158684][T11577] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2373'. [ 536.508121][T11587] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2378'. [ 537.088088][T11605] netlink: 'syz.2.2384': attribute type 2 has an invalid length. [ 537.108869][T11605] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2384'. [ 537.196991][T11603] netlink: 'syz.7.2383': attribute type 21 has an invalid length. [ 537.206614][T11603] netlink: 176 bytes leftover after parsing attributes in process `syz.7.2383'. [ 537.232702][T11603] raw_sendmsg: syz.7.2383 forgot to set AF_INET. Fix it! [ 537.354997][T11613] TCP: TCP_TX_DELAY enabled [ 537.696229][T11626] syzkaller0: entered promiscuous mode [ 537.705733][T11626] syzkaller0: entered allmulticast mode [ 537.788048][T11632] netlink: 'syz.7.2398': attribute type 2 has an invalid length. [ 537.796515][T11632] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2398'. [ 537.817455][T11631] ipvlan0: entered promiscuous mode [ 537.831685][T11631] ipvlan0: entered allmulticast mode [ 537.841852][T11631] veth0_vlan: entered allmulticast mode [ 538.338239][T11650] netlink: 'syz.6.2407': attribute type 2 has an invalid length. [ 539.026935][T11682] netlink: 'syz.6.2420': attribute type 2 has an invalid length. [ 539.647516][T11714] sit0: entered allmulticast mode [ 539.696019][T11714] sit0: entered promiscuous mode [ 540.500117][T11716] netlink: 'syz.6.2430': attribute type 2 has an invalid length. [ 540.510396][T11716] __nla_validate_parse: 5 callbacks suppressed [ 540.510409][T11716] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2430'. [ 541.036653][T11741] netlink: 'syz.7.2441': attribute type 3 has an invalid length. [ 541.047548][T11741] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2441'. [ 541.207188][T11758] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.2445'. [ 541.269142][T11758] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.2445'. [ 541.300402][T11762] netlink: 'syz.2.2448': attribute type 2 has an invalid length. [ 541.320041][T11762] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2448'. [ 541.351225][T11761] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.2445'. [ 541.429275][T11766] netlink: 'syz.7.2450': attribute type 2 has an invalid length. [ 541.453484][T11766] netlink: 'syz.7.2450': attribute type 1 has an invalid length. [ 541.480330][T11766] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2450'. [ 543.848341][T11794] netlink: 'syz.6.2459': attribute type 2 has an invalid length. [ 543.856498][T11794] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2459'. [ 544.128205][T11825] netlink: 'syz.6.2471': attribute type 1 has an invalid length. [ 544.139718][T11825] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.2471'. [ 544.154520][T11827] netlink: 4595 bytes leftover after parsing attributes in process `syz.7.2469'. [ 544.448602][T11837] netlink: 'syz.2.2476': attribute type 2 has an invalid length. [ 545.122394][T11862] netlink: 'syz.6.2488': attribute type 2 has an invalid length. [ 546.051422][T11900] netlink: 'syz.2.2502': attribute type 2 has an invalid length. [ 546.059298][T11900] __nla_validate_parse: 5 callbacks suppressed [ 546.059311][T11900] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2502'. [ 547.023629][T11931] netlink: 'syz.2.2515': attribute type 2 has an invalid length. [ 547.042133][T11931] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2515'. [ 547.665063][T11951] netlink: 'syz.7.2526': attribute type 2 has an invalid length. [ 547.686146][T11951] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2526'. [ 548.762117][T11985] netlink: 'syz.7.2540': attribute type 2 has an invalid length. [ 548.793049][T11985] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2540'. [ 549.471038][ T5106] Bluetooth: hci2: unexpected event 0x0b length: 15 > 11 [ 549.789547][T12015] netlink: 'syz.6.2552': attribute type 2 has an invalid length. [ 549.832197][T12015] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2552'. [ 550.938170][T12041] netlink: 'syz.9.2566': attribute type 2 has an invalid length. [ 550.949690][T12041] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2566'. [ 551.523030][T12063] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2575'. [ 552.556694][T12073] syzkaller0: entered promiscuous mode [ 552.576764][T12073] syzkaller0: entered allmulticast mode [ 552.792976][T12079] netlink: 'syz.2.2582': attribute type 2 has an invalid length. [ 552.800775][T12079] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2582'. [ 553.828276][T12105] syzkaller0: entered promiscuous mode [ 553.855085][T12105] syzkaller0: entered allmulticast mode [ 553.947277][T12107] netlink: 'syz.9.2594': attribute type 10 has an invalid length. [ 554.027762][T12107] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 554.086563][T12111] netlink: 'syz.7.2597': attribute type 2 has an invalid length. [ 554.104195][T12111] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2597'. [ 554.165853][T12116] netlink: 'syz.9.2594': attribute type 10 has an invalid length. [ 554.177720][T12116] team0: Device ipvlan1 failed to register rx_handler [ 554.872478][T12139] syzkaller0: entered promiscuous mode [ 554.878024][T12139] syzkaller0: entered allmulticast mode [ 555.032407][T12146] netlink: 'syz.7.2610': attribute type 2 has an invalid length. [ 555.061712][T12146] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2610'. [ 555.793336][T12170] syzkaller0: entered promiscuous mode [ 555.798879][T12170] syzkaller0: entered allmulticast mode [ 556.022556][T12177] netlink: 'syz.6.2623': attribute type 2 has an invalid length. [ 556.042938][T12177] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2623'. [ 557.202647][T12207] syzkaller0: entered promiscuous mode [ 557.218491][T12207] syzkaller0: entered allmulticast mode [ 557.356106][T12213] netlink: 'syz.2.2638': attribute type 2 has an invalid length. [ 557.373034][T12213] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2638'. [ 558.107967][T12242] netlink: 'syz.9.2650': attribute type 2 has an invalid length. [ 558.125093][T12242] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2650'. [ 558.325275][T12243] syzkaller0: entered promiscuous mode [ 558.348042][T12243] syzkaller0: entered allmulticast mode [ 558.910518][T12269] netlink: 'syz.6.2660': attribute type 2 has an invalid length. [ 558.920060][T12269] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2660'. [ 559.331534][T12285] syzkaller0: entered promiscuous mode [ 559.349918][T12285] syzkaller0: entered allmulticast mode [ 560.308976][T12308] netlink: 'syz.6.2674': attribute type 2 has an invalid length. [ 560.318587][T12308] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2674'. [ 560.351218][T12322] syzkaller0: entered promiscuous mode [ 560.359473][T12322] syzkaller0: entered allmulticast mode [ 560.724918][T12340] netlink: 'syz.7.2688': attribute type 10 has an invalid length. [ 560.813472][T12340] team0: Port device geneve1 added [ 560.906980][T12347] netlink: 'syz.9.2691': attribute type 2 has an invalid length. [ 560.931720][T12347] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2691'. [ 560.952916][T12348] syzkaller0: entered promiscuous mode [ 560.959861][T12348] syzkaller0: entered allmulticast mode [ 561.898169][T12385] netlink: 'syz.6.2704': attribute type 10 has an invalid length. [ 561.928848][T12385] team0: Port device geneve1 added [ 562.398972][T12402] netlink: 'syz.2.2714': attribute type 2 has an invalid length. [ 562.419213][T12402] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2714'. [ 562.445431][T12403] syzkaller0: entered promiscuous mode [ 562.451224][T12403] syzkaller0: entered allmulticast mode [ 562.955049][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.966172][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.289278][T12428] syzkaller0: entered promiscuous mode [ 563.295478][T12428] syzkaller0: entered allmulticast mode [ 563.423766][T12434] netlink: 'syz.9.2727': attribute type 10 has an invalid length. [ 563.471063][T12434] geneve1: entered promiscuous mode [ 563.481972][T12434] geneve1: entered allmulticast mode [ 563.488095][T12434] team0: Port device geneve1 added [ 563.923691][ T5106] Bluetooth: hci1: Malformed LE Event: 0x02 [ 563.935083][T12456] syzkaller0: entered promiscuous mode [ 563.940681][T12456] syzkaller0: entered allmulticast mode [ 564.220729][T12462] syzkaller0: entered promiscuous mode [ 564.255335][T12462] syzkaller0: entered allmulticast mode [ 565.097112][T12494] syzkaller0: entered promiscuous mode [ 565.103030][T12494] syzkaller0: entered allmulticast mode [ 566.069351][T12527] syzkaller0: entered promiscuous mode [ 566.082071][T12527] syzkaller0: entered allmulticast mode [ 566.710490][ T5106] Bluetooth: hci2: Malformed LE Event: 0x02 [ 566.875088][T12556] netlink: 'syz.2.2780': attribute type 2 has an invalid length. [ 566.904221][T12556] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2780'. [ 567.457397][ T5106] Bluetooth: hci1: Malformed LE Event: 0x02 [ 567.582236][T12587] netlink: 'syz.9.2795': attribute type 2 has an invalid length. [ 567.590170][T12587] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2795'. [ 568.317508][ T5106] Bluetooth: hci4: Malformed LE Event: 0x02 [ 568.470040][T12619] netlink: 'syz.7.2809': attribute type 2 has an invalid length. [ 568.500867][T12619] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2809'. [ 568.873455][ T5106] Bluetooth: hci0: Malformed LE Event: 0x02 [ 569.009240][T12647] netlink: 'syz.6.2822': attribute type 21 has an invalid length. [ 569.020222][T12647] netlink: 16154 bytes leftover after parsing attributes in process `syz.6.2822'. [ 569.067230][T12652] netlink: 'syz.9.2823': attribute type 2 has an invalid length. [ 569.100143][T12652] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2823'. [ 569.381926][T12654] mac80211_hwsim hwsim23 wlan1: entered allmulticast mode [ 569.461363][T12665] netlink: 'syz.2.2824': attribute type 21 has an invalid length. [ 569.512502][T12665] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2824'. [ 569.537506][T12665] netlink: 'syz.2.2824': attribute type 4 has an invalid length. [ 569.570549][T12665] netlink: 'syz.2.2824': attribute type 5 has an invalid length. [ 569.592840][T12665] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2824'. [ 569.755975][ T5106] Bluetooth: hci2: Malformed LE Event: 0x02 [ 569.782539][T12683] netlink: 'syz.6.2835': attribute type 2 has an invalid length. [ 569.803293][T12683] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2835'. [ 570.265623][ T5106] Bluetooth: hci1: Malformed LE Event: 0x02 [ 570.430319][T12713] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 570.627151][T12713] netlink: 'syz.6.2848': attribute type 21 has an invalid length. [ 570.637109][T12713] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2848'. [ 570.646994][T12713] netlink: 'syz.6.2848': attribute type 4 has an invalid length. [ 570.665838][T12713] netlink: 'syz.6.2848': attribute type 5 has an invalid length. [ 570.675520][T12713] netlink: 3 bytes leftover after parsing attributes in process `syz.6.2848'. [ 571.078070][ T5106] Bluetooth: hci2: Malformed LE Event: 0x02 [ 571.104274][T12734] mac80211_hwsim hwsim16 »»»»»»: renamed from wlan0 [ 571.613449][T12768] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2868'. [ 571.816111][ T5106] Bluetooth: hci4: Malformed LE Event: 0x02 [ 572.474305][ T5106] Bluetooth: hci4: Malformed LE Event: 0x02 [ 572.743143][T12818] mac80211_hwsim hwsim22 »»»»»»: renamed from wlan0 [ 573.086747][ T5106] Bluetooth: hci0: Malformed LE Event: 0x02 [ 573.700157][T12860] mac80211_hwsim hwsim20 »»»»»»: renamed from wlan0 [ 573.931424][ T5106] Bluetooth: hci2: Malformed LE Event: 0x02 [ 574.483067][ T5106] Bluetooth: hci2: Malformed LE Event: 0x02 [ 574.972811][ T5106] Bluetooth: hci1: Malformed LE Event: 0x02 [ 575.471873][ T5106] Bluetooth: hci2: Malformed LE Event: 0x02 [ 575.777884][T12957] validate_nla: 3 callbacks suppressed [ 575.777928][T12957] netlink: 'syz.6.2957': attribute type 10 has an invalid length. [ 575.815569][T12957] geneve0: entered promiscuous mode [ 576.153101][ T5106] Bluetooth: hci2: Malformed LE Event: 0x02 [ 576.764316][ T5106] Bluetooth: hci2: Malformed LE Event: 0x02 [ 577.416446][ T5106] Bluetooth: hci4: Malformed LE Event: 0x02 [ 578.278968][T13053] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.444055][ T5106] Bluetooth: hci2: Malformed LE Event: 0x02 [ 579.184592][ T5106] Bluetooth: hci1: Malformed LE Event: 0x02 [ 580.000139][T13109] netlink: 'syz.2.3022': attribute type 10 has an invalid length. [ 588.739846][ T5106] Bluetooth: hci0: Malformed LE Event: 0x02 [ 590.130438][ T5106] Bluetooth: hci1: Malformed LE Event: 0x02 [ 590.633817][ T5106] Bluetooth: hci4: Malformed LE Event: 0x02 [ 593.264961][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 593.274846][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 593.301834][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 593.310573][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 593.319033][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 593.332082][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 593.884063][T13473] chnl_net:caif_netlink_parms(): no params data found [ 594.074685][T13473] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.094092][T13473] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.120805][T13473] bridge_slave_0: entered allmulticast mode [ 594.154725][T13473] bridge_slave_0: entered promiscuous mode [ 594.167706][T13473] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.176224][T13473] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.183500][T13473] bridge_slave_1: entered allmulticast mode [ 594.204235][T13473] bridge_slave_1: entered promiscuous mode [ 594.300504][T13473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 594.339961][T13473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 594.450027][T13473] team0: Port device team_slave_0 added [ 594.489325][T13473] team0: Port device team_slave_1 added [ 594.658884][T13473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 594.679622][T13473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.733851][T13473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.754802][T13473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.762900][T13473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.823232][T13473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 594.957469][ T34] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.134511][T13473] hsr_slave_0: entered promiscuous mode [ 595.146987][T13473] hsr_slave_1: entered promiscuous mode [ 595.182927][T13473] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 595.195362][T13473] Cannot create hsr debugfs directory [ 595.228927][ T34] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.336077][ T34] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.435756][ T51] Bluetooth: hci2: command tx timeout [ 597.100661][T13473] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 597.121437][ T34] bridge_slave_0: left allmulticast mode [ 597.130477][ T34] bridge_slave_0: left promiscuous mode [ 597.144142][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.213535][ T34] veth0_macvtap: left promiscuous mode [ 597.219274][ T34] veth1_vlan: left promiscuous mode [ 597.226274][ T34] veth0_vlan: left promiscuous mode [ 597.522699][ T51] Bluetooth: hci2: command tx timeout [ 597.569126][ T34] team0 (unregistering): Port device geneve1 removed [ 598.015793][ T34] team0 (unregistering): Port device vlan0 removed [ 598.407430][ T34] team0 (unregistering): Port device hsr_slave_0 removed [ 598.641993][ T34] team0 (unregistering): Port device team_slave_1 removed [ 598.755032][ T34] team0 (unregistering): Port device team_slave_0 removed [ 598.860609][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 598.977292][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 599.601155][ T5106] Bluetooth: hci2: command tx timeout [ 600.303480][ T34] team0 (unregistering): Port device bridge0 removed [ 600.542191][ T34] bond0 (unregistering): Released all slaves [ 600.627492][T13473] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 600.639545][T13473] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 600.658213][T13473] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 600.985274][T13473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.040703][T13473] 8021q: adding VLAN 0 to HW filter on device team0 [ 601.075545][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.082720][ T3505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 601.121114][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.128304][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 601.253593][T13473] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 601.671721][ T5106] Bluetooth: hci2: command tx timeout [ 601.689739][T13473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.105717][T13473] veth0_vlan: entered promiscuous mode [ 602.118481][T13473] veth1_vlan: entered promiscuous mode [ 602.148276][T13473] veth0_macvtap: entered promiscuous mode [ 602.160403][T13473] veth1_macvtap: entered promiscuous mode [ 602.181124][T13473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 602.196711][T13473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 602.209062][T13473] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.217997][T13473] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.227325][T13473] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.236426][T13473] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.300464][ T3534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.309611][ T3534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.338064][ T7870] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.346423][ T7870] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.077330][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 603.088631][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 603.098237][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 603.113341][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 603.125338][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 603.133191][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 603.336059][ T34] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.476234][ T34] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.581191][ T34] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.691525][ T34] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.809699][T13858] netlink: 'syz.7.3368': attribute type 10 has an invalid length. [ 603.820421][T13858] geneve0: entered promiscuous mode [ 603.880941][T13858] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 604.112925][T13828] chnl_net:caif_netlink_parms(): no params data found [ 604.603460][T13828] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.624505][T13828] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.647655][T13828] bridge_slave_0: entered allmulticast mode [ 604.665414][T13828] bridge_slave_0: entered promiscuous mode [ 604.689492][T13828] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.713104][T13828] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.720331][T13828] bridge_slave_1: entered allmulticast mode [ 604.739273][T13828] bridge_slave_1: entered promiscuous mode [ 604.854938][T13828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 604.867891][T13828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.897954][ T34] erspan0 (unregistering): left allmulticast mode [ 604.904697][ T34] erspan0 (unregistering): left promiscuous mode [ 604.911099][ T34] : port 1(erspan0) entered disabled state [ 604.935473][T13828] team0: Port device team_slave_0 added [ 604.944204][T13828] team0: Port device team_slave_1 added [ 604.986123][T13828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 604.993722][T13828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 605.020023][T13828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 605.032456][T13828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 605.039421][T13828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 605.065878][T13828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.124411][T13828] hsr_slave_0: entered promiscuous mode [ 605.130920][T13828] hsr_slave_1: entered promiscuous mode [ 605.139847][T13828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 605.148845][T13828] Cannot create hsr debugfs directory [ 605.192267][ T5106] Bluetooth: hci1: command tx timeout [ 605.355860][ T34] hsr_slave_0: left promiscuous mode [ 605.363192][ T34] hsr_slave_1: left promiscuous mode [ 605.369643][ T34] bridge0: port 3(team0) entered disabled state [ 605.378690][ T34] bridge_slave_1: left allmulticast mode [ 605.386225][ T34] bridge_slave_1: left promiscuous mode [ 605.392038][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.416454][ T34] veth1_macvtap: left promiscuous mode [ 605.422050][ T34] veth0_macvtap: left promiscuous mode [ 605.428060][ T34] veth1_vlan: left promiscuous mode [ 605.574156][ T34] geneve1 (unregistering): left promiscuous mode [ 605.580874][ T34] geneve1 (unregistering): left allmulticast mode [ 605.591083][ T34] team0 (unregistering): Port device geneve1 removed [ 605.709770][ T34] vlan0 (unregistering): left promiscuous mode [ 605.716527][ T34] veth0_vlan (unregistering): left promiscuous mode [ 605.726691][ T34] team0 (unregistering): Port device vlan0 removed [ 605.946535][ T34] team_slave_1 (unregistering): left promiscuous mode [ 605.953494][ T34] team_slave_1 (unregistering): left allmulticast mode [ 605.965362][ T34] team0 (unregistering): Port device team_slave_1 removed [ 606.034745][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 606.072650][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 606.236500][ T34] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 606.445007][ T34] bond0 (unregistering): Released all slaves [ 606.810274][T13828] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 606.820803][T13828] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 606.830477][T13828] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 606.844934][T13828] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 606.925451][T13828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.946972][T13828] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.959268][ T3534] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.966483][ T3534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.979978][ T7870] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.987125][ T7870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.173041][T13828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.281817][ T5106] Bluetooth: hci1: command tx timeout [ 607.391424][T13828] veth0_vlan: entered promiscuous mode [ 607.406693][T13828] veth1_vlan: entered promiscuous mode [ 607.436276][T13828] veth0_macvtap: entered promiscuous mode [ 607.445561][T13828] veth1_macvtap: entered promiscuous mode [ 607.465081][T13828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.476158][T13828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.487756][T13828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 607.501201][T13828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.512356][T13828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.523815][T13828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 607.537269][T13828] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.546359][T13828] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.555527][T13828] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.564415][T13828] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.626860][ T3549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.639038][ T3549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.665655][ T3534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.676471][ T3534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.943497][T13919] netlink: 'syz.9.3384': attribute type 10 has an invalid length. [ 608.009457][T13919] geneve0: entered promiscuous mode [ 608.099050][T13919] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 608.549553][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 608.560167][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 608.568003][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 608.577574][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 608.592860][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 608.600359][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 608.758676][ T1041] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.888273][ T1041] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.073964][ T1041] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.356720][ T5106] Bluetooth: hci1: command tx timeout [ 609.701339][T13933] chnl_net:caif_netlink_parms(): no params data found [ 610.123609][T13933] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.143501][T13933] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.152557][T13933] bridge_slave_0: entered allmulticast mode [ 610.161352][T13933] bridge_slave_0: entered promiscuous mode [ 610.217953][T13933] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.229082][T13933] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.240940][T13933] bridge_slave_1: entered allmulticast mode [ 610.255536][T13933] bridge_slave_1: entered promiscuous mode [ 610.410410][T13933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.507427][T13933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 610.632503][ T5106] Bluetooth: hci0: command tx timeout [ 610.707573][T13933] team0: Port device team_slave_0 added [ 610.823822][T13933] team0: Port device team_slave_1 added [ 611.069810][T13933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.080628][T13933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.117273][T13933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.152790][T13933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 611.159875][T13933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.189374][T13933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 611.330793][ T1041] hsr_slave_0: left promiscuous mode [ 611.362387][ T1041] hsr_slave_1: left promiscuous mode [ 611.393740][ T1041] veth1_vlan: left promiscuous mode [ 611.409265][ T1041] veth0_vlan: left promiscuous mode [ 611.431857][ T5106] Bluetooth: hci1: command tx timeout [ 611.577745][ T1041] team0 (unregistering): Port device geneve1 removed [ 612.000031][ T1041] team0 (unregistering): Port device team_slave_1 removed [ 612.049254][ T1041] team0 (unregistering): Port device team_slave_0 removed [ 612.490750][T13933] hsr_slave_0: entered promiscuous mode [ 612.498152][T13933] hsr_slave_1: entered promiscuous mode [ 612.713430][ T5106] Bluetooth: hci0: command tx timeout [ 613.496044][T13933] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 613.518938][T13933] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 613.540275][T13933] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 613.554890][T13933] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 613.788353][ T5106] Bluetooth: hci4: Malformed LE Event: 0x02 [ 613.835549][T13933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.931371][T13933] 8021q: adding VLAN 0 to HW filter on device team0 [ 613.959603][ T1329] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.966847][ T1329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.015132][ T7870] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.022339][ T7870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.498816][ T5106] Bluetooth: hci1: Malformed LE Event: 0x02 [ 614.607252][T13933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.795318][ T5106] Bluetooth: hci0: command tx timeout [ 615.236010][T13933] veth0_vlan: entered promiscuous mode [ 615.303435][T13933] veth1_vlan: entered promiscuous mode [ 615.368741][T13933] veth0_macvtap: entered promiscuous mode [ 615.407859][T13933] veth1_macvtap: entered promiscuous mode [ 615.437150][ T5106] Bluetooth: hci4: Malformed LE Event: 0x02 [ 615.490131][T13933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.561680][T13933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.581632][T13933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.608612][T13933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.630807][T13933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 615.678909][T13933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.724090][T13933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.761698][T13933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.793010][T13933] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.820142][T13933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 615.864302][T13933] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.891712][T13933] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.900458][T13933] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.931621][T13933] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.103223][ T3505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.111075][ T3505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.248839][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.273095][ T5106] Bluetooth: hci4: Malformed LE Event: 0x02 [ 616.285675][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.872224][ T5106] Bluetooth: hci0: command tx timeout [ 616.908547][ T5106] Bluetooth: hci4: Malformed LE Event: 0x02 [ 617.737850][ T5106] Bluetooth: hci0: Malformed LE Event: 0x02 [ 618.353014][ T5106] Bluetooth: hci0: Malformed LE Event: 0x02 [ 618.755125][T14238] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.252772][ T5106] Bluetooth: hci4: Malformed LE Event: 0x02 [ 620.287549][ T5106] Bluetooth: hci4: Malformed LE Event: 0x02 [ 620.320838][T14277] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.476670][T14283] netlink: 'syz.7.3545': attribute type 10 has an invalid length. [ 620.974015][ T5106] Bluetooth: hci4: Malformed LE Event: 0x02 [ 621.534515][ T5106] Bluetooth: hci4: Malformed LE Event: 0x02 [ 621.708119][ T5106] Bluetooth: hci2: Malformed LE Event: 0x02 [ 621.762495][T14336] netlink: 'syz.9.3570': attribute type 10 has an invalid length. [ 622.421940][ T5106] Bluetooth: hci4: Malformed LE Event: 0x02 [ 622.931588][ T5106] Bluetooth: hci2: Malformed LE Event: 0x02 [ 623.356448][ T5106] Bluetooth: hci4: Malformed LE Event: 0x02 [ 624.406374][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.412984][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.423180][ T5106] Bluetooth: hci0: Malformed LE Event: 0x02 [ 624.961964][ T5106] Bluetooth: hci0: Malformed LE Event: 0x02 [ 624.971034][T14451] netlink: 'syz.9.3626': attribute type 2 has an invalid length. [ 624.998142][T14451] __nla_validate_parse: 1 callbacks suppressed [ 624.998157][T14451] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3626'. [ 625.492924][T14469] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.518226][ T5106] Bluetooth: hci0: Malformed LE Event: 0x02 [ 625.668894][T14479] netlink: 'syz.6.3641': attribute type 2 has an invalid length. [ 625.691856][T14479] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3641'. [ 625.919205][ T5106] Bluetooth: hci2: Malformed LE Event: 0x02 [ 626.443275][ T5106] Bluetooth: hci4: Malformed LE Event: 0x02 [ 626.460592][T14520] netlink: 'syz.7.3659': attribute type 2 has an invalid length. [ 626.471451][T14520] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3659'. [ 626.969046][ T5106] Bluetooth: hci4: Malformed LE Event: 0x02 [ 627.515862][ T5106] Bluetooth: hci4: Malformed LE Event: 0x02 [ 627.569092][T14572] netlink: 'syz.7.3686': attribute type 2 has an invalid length. [ 627.577104][T14572] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3686'. [ 628.029642][ T5106] Bluetooth: hci0: Malformed LE Event: 0x02 [ 628.161507][T14598] netlink: 'syz.7.3699': attribute type 2 has an invalid length. [ 628.198748][T14598] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3699'. [ 628.605901][ T5106] Bluetooth: hci2: Malformed LE Event: 0x02 [ 628.882269][T14633] netlink: 'syz.6.3714': attribute type 2 has an invalid length. [ 628.915151][T14633] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3714'. [ 629.018608][T14638] netlink: 'syz.7.3717': attribute type 64 has an invalid length. [ 629.528064][T14664] netlink: 'syz.7.3728': attribute type 2 has an invalid length. [ 629.561415][T14664] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3728'. [ 629.676746][T14670] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.684478][T14670] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.710570][T14670] bridge0: entered allmulticast mode [ 630.297607][T14697] netlink: 'syz.9.3742': attribute type 2 has an invalid length. [ 630.324712][T14697] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3742'. [ 630.948280][T14729] netlink: 'syz.9.3759': attribute type 2 has an invalid length. [ 630.965162][T14729] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3759'. [ 631.025247][T14732] netlink: 'syz.2.3761': attribute type 10 has an invalid length. [ 631.038450][T14732] mac80211_hwsim hwsim23 wlan1: left allmulticast mode [ 631.059063][T14732] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 631.576859][T14757] netlink: 'syz.2.3774': attribute type 2 has an invalid length. [ 631.592013][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 631.606258][T14757] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3774'. [ 631.676140][T14759] netlink: 'syz.6.3773': attribute type 10 has an invalid length. [ 631.769994][T14759] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 632.100535][T14781] netlink: 'syz.9.3784': attribute type 2 has an invalid length. [ 632.119080][T14781] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3784'. [ 632.508555][T14798] netlink: 'syz.9.3792': attribute type 10 has an invalid length. [ 632.551294][T14798] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 632.791258][T14809] netlink: 'syz.9.3797': attribute type 2 has an invalid length. [ 632.801114][T14809] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3797'. [ 633.150658][T14822] netlink: 'syz.7.3804': attribute type 10 has an invalid length. [ 633.271113][T14822] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 633.779545][T14848] netlink: 'syz.7.3815': attribute type 2 has an invalid length. [ 633.789900][T14848] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3815'. [ 635.545146][T14881] netlink: 'syz.7.3829': attribute type 2 has an invalid length. [ 635.562309][T14881] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3829'. [ 636.285397][T14908] netlink: 'syz.9.3842': attribute type 2 has an invalid length. [ 636.303632][T14908] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3842'. [ 637.046710][T14931] netlink: 'syz.9.3852': attribute type 2 has an invalid length. [ 637.067613][T14931] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3852'. [ 638.515149][T14969] netlink: 'syz.2.3869': attribute type 2 has an invalid length. [ 638.534688][T14969] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3869'. [ 639.145602][T14990] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.695048][T15007] netlink: 'syz.6.3885': attribute type 2 has an invalid length. [ 640.707810][T15007] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3885'. [ 642.531809][T15045] netlink: 'syz.6.3902': attribute type 2 has an invalid length. [ 642.547000][T15045] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3902'. [ 643.243164][T15072] netlink: 'syz.6.3915': attribute type 2 has an invalid length. [ 643.271109][T15072] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3915'. [ 643.908347][ T5106] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 643.975176][T15094] netlink: 'syz.2.3926': attribute type 2 has an invalid length. [ 643.993366][T15094] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3926'. [ 645.911836][ T5106] Bluetooth: hci0: command tx timeout [ 658.038063][T15516] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4120'. [ 658.818922][T15543] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4134'. [ 659.354778][T15563] syzkaller0: entered promiscuous mode [ 659.360423][T15563] syzkaller0: entered allmulticast mode [ 659.373166][T15567] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4146'. [ 661.371053][T15589] netlink: 'syz.2.4157': attribute type 2 has an invalid length. [ 661.379089][T15589] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4157'. [ 661.925602][T15616] netlink: 'syz.9.4169': attribute type 2 has an invalid length. [ 661.935404][T15616] netlink: 164 bytes leftover after parsing attributes in process `syz.9.4169'. [ 662.450252][T15646] netlink: 'syz.7.4184': attribute type 2 has an invalid length. [ 662.460548][T15646] netlink: 164 bytes leftover after parsing attributes in process `syz.7.4184'. [ 662.924890][T15670] netlink: 'syz.7.4196': attribute type 2 has an invalid length. [ 662.971640][T15670] netlink: 164 bytes leftover after parsing attributes in process `syz.7.4196'. [ 663.163628][T15682] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.172271][T15682] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.185607][T15682] bridge0: entered allmulticast mode [ 663.243144][T15689] bridge_slave_1: left allmulticast mode [ 663.248848][T15689] bridge_slave_1: left promiscuous mode [ 663.278732][T15689] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.292385][T15689] bridge_slave_0: left allmulticast mode [ 663.301343][T15689] bridge_slave_0: left promiscuous mode [ 663.307344][T15689] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.420835][T15694] syzkaller0: entered promiscuous mode [ 663.429299][T15694] syzkaller0: entered allmulticast mode [ 663.441813][T15678] bridge_slave_1: left allmulticast mode [ 663.447655][T15678] bridge_slave_1: left promiscuous mode [ 663.472576][T15678] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.498858][T15678] bridge_slave_0: left allmulticast mode [ 663.511795][T15678] bridge_slave_0: left promiscuous mode [ 663.519064][T15678] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.796937][T15704] netlink: 'syz.2.4211': attribute type 2 has an invalid length. [ 665.808247][T15704] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4211'. [ 666.296979][T15759] netlink: 'syz.7.4237': attribute type 2 has an invalid length. [ 666.309261][T15759] netlink: 164 bytes leftover after parsing attributes in process `syz.7.4237'. [ 666.748453][T15785] netlink: 'syz.6.4249': attribute type 2 has an invalid length. [ 666.757992][T15785] netlink: 164 bytes leftover after parsing attributes in process `syz.6.4249'. [ 667.520969][T15806] netlink: 'syz.7.4259': attribute type 2 has an invalid length. [ 667.530714][T15806] netlink: 164 bytes leftover after parsing attributes in process `syz.7.4259'. [ 667.632344][T15809] wg2: entered promiscuous mode [ 667.647498][T15809] wg2: entered allmulticast mode [ 668.140525][T15838] netlink: 'syz.2.4271': attribute type 2 has an invalid length. [ 668.153727][T15838] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4271'. [ 668.691446][T15863] netlink: 'syz.2.4284': attribute type 2 has an invalid length. [ 668.711057][T15863] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4284'. [ 671.396453][T15902] netlink: 'syz.2.4298': attribute type 2 has an invalid length. [ 671.405501][T15902] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4298'. [ 671.415794][T15898] : port 1(team0) entered blocking state [ 671.423213][T15898] : port 1(team0) entered disabled state [ 671.429392][T15898] team0: entered allmulticast mode [ 671.443620][T15898] team_slave_0: entered allmulticast mode [ 671.449772][T15898] team_slave_1: entered allmulticast mode [ 671.482758][T15898] team0: entered promiscuous mode [ 671.487825][T15898] team_slave_0: entered promiscuous mode [ 671.532134][T15898] team_slave_1: entered promiscuous mode [ 671.960997][T15927] netlink: 'syz.9.4309': attribute type 2 has an invalid length. [ 671.985205][T15927] netlink: 132 bytes leftover after parsing attributes in process `syz.9.4309'. [ 679.920803][T16143] syzkaller0: entered promiscuous mode [ 679.926502][T16143] syzkaller0: entered allmulticast mode [ 683.087543][T16220] syzkaller0: entered promiscuous mode [ 683.101675][T16220] syzkaller0: entered allmulticast mode [ 684.006711][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 684.016883][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 684.042107][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 684.065224][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 684.080513][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 684.092104][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 685.836525][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.843063][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.999622][T16239] chnl_net:caif_netlink_parms(): no params data found [ 686.152015][ T51] Bluetooth: hci3: command tx timeout [ 686.225680][T16239] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.240530][T16239] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.248029][T16239] bridge_slave_0: entered allmulticast mode [ 686.256534][T16239] bridge_slave_0: entered promiscuous mode [ 686.266452][T16239] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.273707][T16239] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.280910][T16239] bridge_slave_1: entered allmulticast mode [ 686.297270][T16239] bridge_slave_1: entered promiscuous mode [ 686.364351][T16239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 686.395443][T16239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 686.530640][T16239] team0: Port device team_slave_0 added [ 686.549903][T16239] team0: Port device team_slave_1 added [ 686.635635][T16239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 686.645618][T16239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 686.672476][T16239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 686.698460][T16239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 686.706700][T16239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 686.740673][T16239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 686.880467][ T3549] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.906079][T16291] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 686.946239][T16291] syzkaller0: entered promiscuous mode [ 686.972794][T16291] syzkaller0: entered allmulticast mode [ 687.043286][ T3549] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.083573][T16239] hsr_slave_0: entered promiscuous mode [ 687.095046][T16239] hsr_slave_1: entered promiscuous mode [ 687.106776][T16239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 687.121598][T16239] Cannot create hsr debugfs directory [ 687.249158][ T3549] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.267004][T16305] veth1_to_bond: entered promiscuous mode [ 687.280116][T16305] veth1_to_bond: entered allmulticast mode [ 688.242124][ T51] Bluetooth: hci3: command tx timeout [ 690.311772][ T51] Bluetooth: hci3: command tx timeout [ 690.713587][T16239] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 690.734907][T16239] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 690.750795][T16239] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 690.807640][T16239] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 691.121009][T16239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 691.226273][ T3549] bond0: (slave wlan1): Releasing backup interface [ 691.295277][T16239] 8021q: adding VLAN 0 to HW filter on device team0 [ 691.406183][ T7870] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.413438][ T7870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.442178][ T7870] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.449295][ T7870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 691.525161][ T3549] hsr_slave_0: left promiscuous mode [ 691.531029][ T3549] hsr_slave_1: left promiscuous mode [ 691.539743][ T3549] bridge_slave_1: left allmulticast mode [ 691.548421][ T3549] bridge_slave_1: left promiscuous mode [ 691.555152][ T3549] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.566034][ T3549] bridge_slave_0: left allmulticast mode [ 691.571830][ T3549] bridge_slave_0: left promiscuous mode [ 691.577566][ T3549] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.628309][ T3549] veth1_macvtap: left promiscuous mode [ 691.638538][ T3549] veth0_macvtap: left promiscuous mode [ 691.645555][ T3549] veth1_vlan: left promiscuous mode [ 691.650829][ T3549] veth0_vlan: left promiscuous mode [ 692.123976][ T3549] team0 (unregistering): Port device team_slave_1 removed [ 692.166879][ T3549] team0 (unregistering): Port device team_slave_0 removed [ 692.207001][ T3549] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 692.250890][ T3549] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 692.405046][ T51] Bluetooth: hci3: command tx timeout [ 692.671039][ T3549] bond0 (unregistering): Released all slaves [ 692.968088][T16239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 693.016935][T16239] veth0_vlan: entered promiscuous mode [ 693.029923][T16239] veth1_vlan: entered promiscuous mode [ 693.065893][T16239] veth0_macvtap: entered promiscuous mode [ 693.079625][T16239] veth1_macvtap: entered promiscuous mode [ 693.096446][T16239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.108246][T16239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.118383][T16239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.129617][T16239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.139802][T16239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.150683][T16239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.163126][T16239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 693.176932][T16239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.187417][T16239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.198316][T16239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.208919][T16239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.219066][T16239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.229919][T16239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.241501][T16239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 693.257842][T16239] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.270612][T16239] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.280830][T16239] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.291068][T16239] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.376962][ T3505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.394395][ T3505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.426232][ T1041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.434285][ T1041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.858607][T16399] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 694.476388][T16424] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 695.197919][T16457] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 695.271072][T16459] syzkaller0: entered promiscuous mode [ 695.285575][T16459] syzkaller0: entered allmulticast mode [ 697.676806][T16493] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 699.389928][T16554] @ÿ: renamed from bond_slave_0 (while UP) [ 699.620276][T16560] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.888283][T16598] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 701.755532][T16631] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 702.780622][T16656] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 702.847537][T16660] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.855251][T16660] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.877316][T16660] bridge0: entered allmulticast mode [ 702.908179][T16665] bridge_slave_1: left allmulticast mode [ 702.921980][T16665] bridge_slave_1: left promiscuous mode [ 702.931034][T16665] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.970686][T16665] bridge_slave_0: left allmulticast mode [ 702.976837][T16665] bridge_slave_0: left promiscuous mode [ 702.987146][T16665] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.424562][T16688] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 704.707491][T16717] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 708.965758][T16735] netlink: 'syz.9.4648': attribute type 10 has an invalid length. [ 709.122061][T16735] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4648'. [ 709.417666][T16735] geneve0: left promiscuous mode [ 709.761477][T16735] bond0: (slave geneve0): Releasing backup interface [ 709.876886][T16735] team0: Port device geneve0 added [ 714.523790][T16776] netlink: 'syz.2.4662': attribute type 10 has an invalid length. [ 714.536013][T16776] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4662'. [ 714.943333][T16776] team0: Port device geneve0 added [ 715.786618][T16805] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 715.819244][T16807] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 716.088926][T16812] netlink: 'syz.6.4681': attribute type 10 has an invalid length. [ 716.097288][T16812] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4681'. [ 716.461209][T16812] team0: Port device geneve0 added [ 716.533680][T16815] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 716.978021][T16835] syzkaller0: entered promiscuous mode [ 716.983732][T16835] syzkaller0: entered allmulticast mode [ 718.632780][ T5106] Bluetooth: hci2: command 0x0406 tx timeout [ 718.857152][T16848] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 719.100090][T16857] mac80211_hwsim hwsim25 wlan1: entered promiscuous mode [ 719.122297][T16857] mac80211_hwsim hwsim25 wlan1: entered allmulticast mode [ 719.448128][T16875] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 719.920932][T16884] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.928693][T16884] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.955077][T16884] bridge0: entered allmulticast mode [ 720.342440][T16896] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 721.483886][T16928] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 722.552143][T16960] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 724.052472][T16993] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 724.698301][T17014] syzkaller0: entered promiscuous mode [ 726.743726][T17026] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 727.193271][T17061] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 728.871760][ T5106] Bluetooth: hci1: command 0x0406 tx timeout [ 729.853689][T17093] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 730.790169][T17128] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 731.499854][T17148] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 733.994965][ T5106] Bluetooth: hci0: command 0x0406 tx timeout [ 736.575258][T17238] wg2: entered promiscuous mode [ 736.581336][T17238] wg2: entered allmulticast mode [ 737.725068][T17265] wg2: entered promiscuous mode [ 737.737077][T17265] wg2: entered allmulticast mode [ 740.248874][T17309] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 740.281403][T17309] syzkaller0: entered promiscuous mode [ 740.287456][T17309] syzkaller0: entered allmulticast mode [ 741.915504][T17311] team_slave_1: entered promiscuous mode [ 741.921208][T17311] team_slave_1: entered allmulticast mode [ 746.089553][T17507] team0: entered allmulticast mode [ 746.095053][T17507] team_slave_0: entered allmulticast mode [ 746.101361][T17507] team_slave_1: entered allmulticast mode [ 746.107737][T17507] geneve0: entered allmulticast mode [ 747.278903][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.289641][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.068323][T17585] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 748.830519][T17620] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 749.886983][T17640] syzkaller0: entered promiscuous mode [ 749.911783][T17640] syzkaller0: entered allmulticast mode [ 750.563342][T17656] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 753.046139][T17688] dummy0: entered promiscuous mode [ 753.052096][T17695] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 753.645764][T17730] syzkaller0: entered promiscuous mode [ 753.676531][T17730] syzkaller0: entered allmulticast mode [ 753.765374][T17732] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 754.019648][T17747] syzkaller0: entered allmulticast mode [ 754.482697][T17764] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 757.249451][T17797] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 758.231400][T17829] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 758.911490][T17861] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 759.448396][T17888] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 762.334398][T17923] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 762.796162][T17953] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 763.408191][T17980] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 763.944890][T18007] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 765.114306][T18031] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 765.563019][T18055] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 765.722790][T18063] pim6reg1: tun_chr_ioctl cmd 21731 [ 765.729267][T18063] pim6reg1: tun_chr_ioctl cmd 1074812118 [ 766.126202][T18082] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 766.686524][T18113] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 767.962401][T18144] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 768.534921][T18172] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 769.329893][T18182] pim6reg1: entered promiscuous mode [ 769.338932][T18182] pim6reg1: entered allmulticast mode [ 769.549680][T18193] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 770.726955][T18222] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 771.378250][T18252] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 772.386184][T18273] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 773.146663][T18298] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 774.841720][T18325] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 774.929230][T18331] bond_slave_1: mtu less than device minimum [ 775.564299][T18348] veth0_vlan: entered allmulticast mode [ 776.539952][T18348] wg2: entered promiscuous mode [ 776.545540][T18348] wg2: entered allmulticast mode [ 776.553334][T18352] veth0_vlan: left promiscuous mode [ 776.560488][T18352] veth0_vlan: entered promiscuous mode [ 776.612119][T18359] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 778.348366][T18393] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 780.479487][T18416] wg2: left promiscuous mode [ 780.491565][T18416] wg2: left allmulticast mode [ 780.553333][T18419] wg2: entered promiscuous mode [ 780.568564][T18419] wg2: entered allmulticast mode [ 780.587525][T18422] veth0_vlan: entered allmulticast mode [ 780.596931][T18425] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 782.474665][T18453] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 782.929551][T18460] pim6reg1: entered promiscuous mode [ 782.934972][T18460] pim6reg1: entered allmulticast mode [ 784.857256][T18487] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 788.003850][T18512] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 789.172050][T18528] veth0_vlan: entered allmulticast mode [ 789.937143][T18531] wg2: left promiscuous mode [ 789.983931][T18531] wg2: left allmulticast mode [ 790.004172][T18533] wg2: entered promiscuous mode [ 790.009138][T18533] wg2: entered allmulticast mode [ 790.023110][T18534] veth0_vlan: left promiscuous mode [ 790.030815][T18534] veth0_vlan: entered promiscuous mode [ 790.429447][T18540] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 793.733383][ T5106] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 793.743005][ T5106] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 793.750703][ T5106] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 793.775970][ T5106] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 793.783848][ T5106] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 793.801808][ T5106] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 794.139545][ T49] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.371490][ T49] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.436059][ T49] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.717896][T18576] chnl_net:caif_netlink_parms(): no params data found [ 794.862938][T18576] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.870193][T18576] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.878063][T18576] bridge_slave_0: entered allmulticast mode [ 794.888032][T18576] bridge_slave_0: entered promiscuous mode [ 794.902218][T18576] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.909481][T18576] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.917192][T18576] bridge_slave_1: entered allmulticast mode [ 794.924754][T18576] bridge_slave_1: entered promiscuous mode [ 794.992805][T18576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 795.050640][T18576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 795.278387][T18576] team0: Port device team_slave_0 added [ 795.288685][T18576] team0: Port device team_slave_1 added [ 795.525590][T18576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 795.537854][T18576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 795.596675][T18576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 795.702941][T18576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 795.710024][T18576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 795.749889][T18576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 795.834497][ T51] Bluetooth: hci2: command tx timeout [ 796.306655][T18576] hsr_slave_0: entered promiscuous mode [ 796.394898][T18576] hsr_slave_1: entered promiscuous mode [ 796.433178][T18576] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 796.459215][T18576] Cannot create hsr debugfs directory [ 796.819280][T18605] wg2: left promiscuous mode [ 796.914922][T18605] wg2: left allmulticast mode [ 797.024346][T18606] wg2: entered promiscuous mode [ 797.050763][T18606] wg2: entered allmulticast mode [ 797.118133][T18609] veth0_vlan: left promiscuous mode [ 797.153432][T18609] veth0_vlan: entered promiscuous mode [ 797.647069][T18621] wg2: left promiscuous mode [ 797.716700][T18621] wg2: left allmulticast mode [ 797.911647][ T51] Bluetooth: hci2: command tx timeout [ 797.997268][T18619] wg2: entered promiscuous mode [ 798.002670][T18619] wg2: entered allmulticast mode [ 798.027155][T18623] veth0_vlan: left promiscuous mode [ 798.034534][T18623] veth0_vlan: entered promiscuous mode [ 799.094162][ T49] bond0: (slave wlan1): Releasing backup interface [ 799.821362][ T49] team0: left allmulticast mode [ 799.867958][ T49] team_slave_0: left allmulticast mode [ 799.874168][ T49] team_slave_1: left allmulticast mode [ 799.879948][ T49] team0: left promiscuous mode [ 799.885018][ T49] team_slave_0: left promiscuous mode [ 799.890688][ T49] team_slave_1: left promiscuous mode [ 799.896747][ T49] : port 1(team0) entered disabled state [ 799.913909][ T49] hsr_slave_0: left promiscuous mode [ 799.919815][ T49] hsr_slave_1: left promiscuous mode [ 799.926223][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 799.933753][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 799.943967][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 799.951412][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 799.959529][ T49] bridge_slave_1: left allmulticast mode [ 799.965293][ T49] bridge_slave_1: left promiscuous mode [ 799.971851][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.980429][ T49] bridge_slave_0: left allmulticast mode [ 799.986311][ T49] bridge_slave_0: left promiscuous mode [ 799.992227][ T51] Bluetooth: hci2: command tx timeout [ 799.998103][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.023930][ T49] veth1_macvtap: left promiscuous mode [ 800.029457][ T49] veth0_macvtap: left promiscuous mode [ 800.036467][ T49] veth1_vlan: left promiscuous mode [ 800.041799][ T49] veth0_vlan: left promiscuous mode [ 800.192343][ T49] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 800.556798][ T49] team0 (unregistering): Port device team_slave_1 removed [ 800.599006][ T49] team0 (unregistering): Port device team_slave_0 removed [ 800.639533][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 800.683699][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 801.112093][ T49] bond0 (unregistering): Released all slaves [ 802.072216][ T51] Bluetooth: hci2: command tx timeout [ 802.866557][T18576] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 802.877549][T18576] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 802.895915][T18576] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 802.907987][T18576] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 803.060514][T18576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 803.080925][T18576] 8021q: adding VLAN 0 to HW filter on device team0 [ 803.098880][ T3549] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.106091][ T3549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 803.145797][ T3534] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.152991][ T3534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 803.518645][T18576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 803.589890][T18576] veth0_vlan: entered promiscuous mode [ 803.613480][T18576] veth1_vlan: entered promiscuous mode [ 803.661219][T18576] veth0_macvtap: entered promiscuous mode [ 803.675568][T18576] veth1_macvtap: entered promiscuous mode [ 803.697165][T18576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 803.707916][T18576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.717902][T18576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 803.729160][T18576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.739701][T18576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 803.750478][T18576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.788668][T18576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 803.814869][T18576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 803.830460][T18576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.841748][T18576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 803.856875][T18576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.866966][T18576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 803.882840][T18576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.902970][T18576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 803.930530][T18576] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.944004][T18576] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.957642][T18576] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.970274][T18576] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.096637][ T3505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.117018][ T3505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.159209][ T3534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.169553][ T3534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.336699][T18661] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 804.541899][T18668] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 805.303210][T18675] veth0_vlan: entered allmulticast mode [ 807.097078][T18683] wg2: entered promiscuous mode [ 807.106851][T18683] wg2: entered allmulticast mode [ 807.124731][T18687] veth0_vlan: left promiscuous mode [ 807.133023][T18687] veth0_vlan: entered promiscuous mode [ 807.445885][T18690] wg2: left promiscuous mode [ 807.450727][T18690] wg2: left allmulticast mode [ 807.483116][T18692] wg2: entered promiscuous mode [ 807.488004][T18692] wg2: entered allmulticast mode [ 807.502901][T18693] veth0_vlan: left promiscuous mode [ 807.510017][T18693] veth0_vlan: entered promiscuous mode [ 807.788790][T18708] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 808.727814][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.742474][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.196023][T18727] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 810.792112][ T5106] Bluetooth: hci3: command 0x0406 tx timeout [ 810.984296][T18745] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 812.289288][T18761] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 813.100411][T18776] wg2: left promiscuous mode [ 813.169858][T18776] wg2: left allmulticast mode [ 813.346341][T18777] wg2: entered promiscuous mode [ 813.355649][T18777] wg2: entered allmulticast mode [ 813.374353][T18765] veth0_vlan: left promiscuous mode [ 813.387675][T18765] veth0_vlan: entered promiscuous mode [ 814.245222][T18798] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 814.618192][T18799] bond_slave_1: mtu less than device minimum [ 815.066599][T18802] veth0_vlan: left promiscuous mode [ 815.122569][T18802] veth0_vlan: entered promiscuous mode [ 820.886885][T18836] bond_slave_1: mtu less than device minimum [ 822.767912][T18884] bond_slave_1: mtu less than device minimum [ 826.997020][T19005] lo: entered promiscuous mode [ 830.620535][T19085] pim6reg1: entered promiscuous mode [ 830.636173][T19085] pim6reg1: entered allmulticast mode [ 831.331379][T19104] bond_slave_1: mtu less than device minimum [ 831.567082][T19115] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 832.653003][ T5106] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 832.661921][ T5106] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 832.670059][T19148] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 832.670778][ T5106] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 832.696629][ T5106] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 832.706664][ T5106] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 832.714174][ T5106] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 833.022054][T19153] pim6reg1: entered promiscuous mode [ 833.027429][T19153] pim6reg1: entered allmulticast mode [ 833.533647][T19173] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 833.657062][T19146] chnl_net:caif_netlink_parms(): no params data found [ 833.825167][ T1329] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.155856][ T1329] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.405815][ T1329] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.486737][T19196] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 834.528087][T19197] wg2: left promiscuous mode [ 834.554644][T19197] wg2: left allmulticast mode [ 834.778517][T19186] wg2: entered promiscuous mode [ 834.791733][ T5106] Bluetooth: hci0: command tx timeout [ 834.794784][T19186] wg2: entered allmulticast mode [ 834.863923][T19197] veth0_vlan: left promiscuous mode [ 834.930890][T19197] veth0_vlan: entered promiscuous mode [ 835.013906][T19146] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.021058][T19146] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.036249][T19146] bridge_slave_0: entered allmulticast mode [ 835.044372][T19146] bridge_slave_0: entered promiscuous mode [ 835.053477][T19146] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.060733][T19146] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.068451][T19146] bridge_slave_1: entered allmulticast mode [ 835.075517][T19146] bridge_slave_1: entered promiscuous mode [ 835.114371][T19146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 835.128297][T19146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 835.208867][T19146] team0: Port device team_slave_0 added [ 835.238196][T19146] team0: Port device team_slave_1 added [ 835.316599][T19146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 835.323935][T19146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 835.350047][T19146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 835.406703][T19146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 835.415862][T19146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 835.442514][T19146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 835.510791][T19146] hsr_slave_0: entered promiscuous mode [ 835.517786][T19146] hsr_slave_1: entered promiscuous mode [ 835.525905][T19146] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 835.533555][T19146] Cannot create hsr debugfs directory [ 836.402224][ T1329] bond0: (slave wlan1): Releasing backup interface [ 836.859153][T19218] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 836.883393][ T5106] Bluetooth: hci0: command tx timeout [ 836.965530][ T1329] hsr_slave_0: left promiscuous mode [ 836.974055][ T1329] hsr_slave_1: left promiscuous mode [ 836.980229][ T1329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 836.988052][ T1329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 836.997130][ T1329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 837.004836][ T1329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 837.047676][ T1329] veth1_macvtap: left promiscuous mode [ 837.058137][ T1329] veth0_macvtap: left promiscuous mode [ 837.064539][ T1329] veth1_vlan: left promiscuous mode [ 837.070026][ T1329] veth0_vlan: left promiscuous mode [ 837.322629][ T1329] team0 (unregistering): Port device geneve0 removed [ 837.709892][ T1329] team0 (unregistering): Port device team_slave_1 removed [ 837.764589][ T1329] team0 (unregistering): Port device team_slave_0 removed [ 837.813497][ T1329] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 837.871071][ T1329] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 838.316726][ T1329] bond0 (unregistering): Released all slaves [ 838.353552][T19146] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 838.428399][T19146] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 838.465061][T19146] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 838.535851][T19146] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 838.763556][T19146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 838.786775][T19146] 8021q: adding VLAN 0 to HW filter on device team0 [ 838.800784][ T2896] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.808070][ T2896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 838.824422][ T3549] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.831702][ T3549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 838.876381][T19146] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 838.951868][ T5106] Bluetooth: hci0: command tx timeout [ 839.036981][T19146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 839.263581][T19146] veth0_vlan: entered promiscuous mode [ 839.276211][T19146] veth1_vlan: entered promiscuous mode [ 839.308516][T19146] veth0_macvtap: entered promiscuous mode [ 839.318420][T19146] veth1_macvtap: entered promiscuous mode [ 839.337939][T19146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 839.348892][T19146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.359845][T19146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 839.370378][T19146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.380257][T19146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 839.391112][T19146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.403804][T19146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 839.421423][T19146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.433332][T19146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.445224][T19146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.455920][T19146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.466309][T19146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.476882][T19146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.488417][T19146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 839.501250][T19146] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.510018][T19146] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.526862][T19146] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.535810][T19146] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.607626][ T3549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.621587][ T3549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.648888][ T3549] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.657323][ T3549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 841.040381][ T5106] Bluetooth: hci0: command tx timeout [ 841.288672][T19281] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 841.350991][T19282] pim6reg1: entered promiscuous mode [ 841.374048][T19282] pim6reg1: entered allmulticast mode [ 842.766228][T19305] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 843.923437][T19325] bond_slave_1: mtu less than device minimum [ 844.012489][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 844.022860][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 844.031283][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 844.069576][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 844.102923][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 844.111201][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 844.115839][ T3505] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.229249][T19333] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 844.394202][ T3505] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.605161][ T3505] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.171277][T19361] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 845.258409][T19328] chnl_net:caif_netlink_parms(): no params data found [ 845.939830][T19328] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.966210][T19328] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.997383][T19328] bridge_slave_0: entered allmulticast mode [ 846.027699][T19328] bridge_slave_0: entered promiscuous mode [ 846.072152][T19328] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.079719][T19328] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.099146][T19328] bridge_slave_1: entered allmulticast mode [ 846.110348][T19328] bridge_slave_1: entered promiscuous mode [ 846.231933][ T5106] Bluetooth: hci1: command tx timeout [ 846.360368][T19328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 846.392247][T19328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 846.464173][T19397] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 846.499015][T19328] team0: Port device team_slave_0 added [ 846.513288][T19328] team0: Port device team_slave_1 added [ 846.664652][T19328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 846.692285][T19328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 846.785774][T19328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 846.833436][T19328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 846.860996][T19328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 846.965534][T19328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 847.346341][T19418] sit0: entered allmulticast mode [ 847.457114][T19328] hsr_slave_0: entered promiscuous mode [ 847.474834][T19328] hsr_slave_1: entered promiscuous mode [ 847.513794][T19421] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 847.754654][ T3505] bond0: (slave wlan1): Releasing backup interface [ 848.131666][ T3505] hsr_slave_0: left promiscuous mode [ 848.143012][ T3505] hsr_slave_1: left promiscuous mode [ 848.150782][ T3505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 848.177240][ T3505] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 848.185368][ T3505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 848.202612][ T3505] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 848.271393][ T3505] veth1_macvtap: left promiscuous mode [ 848.284243][ T3505] veth0_macvtap: left promiscuous mode [ 848.290334][ T3505] veth1_vlan: left promiscuous mode [ 848.301671][ T3505] veth0_vlan: left promiscuous mode [ 848.311799][ T5106] Bluetooth: hci1: command tx timeout [ 848.522361][ T3505] geneve0 (unregistering): left allmulticast mode [ 848.533279][ T3505] team0 (unregistering): Port device geneve0 removed [ 849.064341][ T3505] team_slave_1 (unregistering): left allmulticast mode [ 849.073554][ T3505] team0 (unregistering): Port device team_slave_1 removed [ 849.117329][ T3505] team_slave_0 (unregistering): left allmulticast mode [ 849.128196][ T3505] team0 (unregistering): Port device team_slave_0 removed [ 849.168164][ T3505] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 849.221485][ T3505] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 849.677763][ T3505] bond0 (unregistering): Released all slaves [ 849.744713][T19443] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 850.387897][T19328] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 850.394793][ T5106] Bluetooth: hci1: command tx timeout [ 850.418594][T19328] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 850.429136][T19328] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 850.439431][T19328] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 850.573957][T19328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 850.601385][T19328] 8021q: adding VLAN 0 to HW filter on device team0 [ 850.615376][ T3549] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.622552][ T3549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 850.638258][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.645435][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 850.896292][T19328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 851.149579][T19328] veth0_vlan: entered promiscuous mode [ 851.162203][T19328] veth1_vlan: entered promiscuous mode [ 851.200436][T19328] veth0_macvtap: entered promiscuous mode [ 851.210891][T19328] veth1_macvtap: entered promiscuous mode [ 851.228246][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 851.238907][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 851.248808][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 851.261019][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 851.271070][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 851.282348][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 851.293941][T19328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 851.310897][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 851.322024][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 851.333721][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 851.344242][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 851.354511][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 851.365125][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 851.378607][T19328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 851.391277][T19328] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.400113][T19328] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.408981][T19328] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.417882][T19328] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.494307][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 851.509056][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.536403][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 851.545323][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.096829][T19496] veth1_macvtap: left promiscuous mode [ 852.109923][T19496] macsec0: entered promiscuous mode [ 852.158907][T19500] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 852.471969][ T5106] Bluetooth: hci1: command tx timeout [ 853.046471][T19526] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 853.739660][T19539] macsec0: left promiscuous mode [ 853.755000][T19546] [ 853.757379][T19546] ====================================================== [ 853.764402][T19546] WARNING: possible circular locking dependency detected [ 853.771426][T19546] syzkaller #0 Not tainted [ 853.775839][T19546] ------------------------------------------------------ [ 853.782856][T19546] syz.2.5835/19546 is trying to acquire lock: [ 853.788915][T19546] ffff8880b8f29370 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x15a/0x780 [ 853.797538][T19546] [ 853.797538][T19546] but task is already holding lock: [ 853.804900][T19546] ffff8880b8f29598 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 853.813791][T19546] [ 853.813791][T19546] which lock already depends on the new lock. [ 853.813791][T19546] [ 853.824187][T19546] [ 853.824187][T19546] the existing dependency chain (in reverse order) is: [ 853.833195][T19546] [ 853.833195][T19546] -> #1 (&base->lock){-.-.}-{2:2}: [ 853.840488][T19546] _raw_spin_lock_irqsave+0xa8/0xf0 [ 853.846211][T19546] lock_timer_base+0x123/0x270 [ 853.851499][T19546] __mod_timer+0xf9/0xdb0 [ 853.856369][T19546] queue_delayed_work_on+0x12a/0x1e0 [ 853.862167][T19546] kvfree_call_rcu+0x541/0x780 [ 853.867476][T19546] rtnl_register_internal+0x486/0x590 [ 853.873365][T19546] rtnl_register+0x32/0x70 [ 853.878298][T19546] ip_rt_init+0x2ec/0x390 [ 853.883160][T19546] ip_init+0xe/0x20 [ 853.887488][T19546] inet_init+0x2c1/0x3e0 [ 853.892248][T19546] do_one_initcall+0x1fd/0x750 [ 853.897536][T19546] do_initcall_level+0x137/0x1f0 [ 853.902994][T19546] do_initcalls+0x69/0xd0 [ 853.907840][T19546] kernel_init_freeable+0x3d2/0x570 [ 853.913564][T19546] kernel_init+0x1d/0x1c0 [ 853.918412][T19546] ret_from_fork+0x48/0x80 [ 853.923347][T19546] ret_from_fork_asm+0x11/0x20 [ 853.928629][T19546] [ 853.928629][T19546] -> #0 (krc.lock){..-.}-{2:2}: [ 853.935704][T19546] __lock_acquire+0x2ddb/0x7c80 [ 853.941074][T19546] lock_acquire+0x197/0x410 [ 853.946089][T19546] _raw_spin_lock+0x2e/0x40 [ 853.951110][T19546] kvfree_call_rcu+0x15a/0x780 [ 853.956424][T19546] trie_delete_elem+0x535/0x6a0 [ 853.961804][T19546] bpf_prog_5186c38a4019a4cb+0x4a/0x4e [ 853.967781][T19546] bpf_trace_run3+0x1e7/0x400 [ 853.972970][T19546] __bpf_trace_timer_start+0x14a/0x1b0 [ 853.978964][T19546] enqueue_timer+0x398/0x530 [ 853.984068][T19546] __mod_timer+0x977/0xdb0 [ 853.989006][T19546] sk_reset_timer+0x23/0xc0 [ 853.994036][T19546] tipc_sk_finish_conn+0x154/0x7e0 [ 853.999662][T19546] tipc_socketpair+0x254/0x470 [ 854.004938][T19546] __sys_socketpair+0x2b0/0x550 [ 854.010307][T19546] __x64_sys_socketpair+0x9b/0xb0 [ 854.015847][T19546] do_syscall_64+0x55/0xb0 [ 854.020781][T19546] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 854.027278][T19546] [ 854.027278][T19546] other info that might help us debug this: [ 854.027278][T19546] [ 854.037496][T19546] Possible unsafe locking scenario: [ 854.037496][T19546] [ 854.044937][T19546] CPU0 CPU1 [ 854.050300][T19546] ---- ---- [ 854.055654][T19546] lock(&base->lock); [ 854.059729][T19546] lock(krc.lock); [ 854.066059][T19546] lock(&base->lock); [ 854.072639][T19546] lock(krc.lock); [ 854.076466][T19546] [ 854.076466][T19546] *** DEADLOCK *** [ 854.076466][T19546] [ 854.084601][T19546] 2 locks held by syz.2.5835/19546: [ 854.089791][T19546] #0: ffff8880b8f29598 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 854.099105][T19546] #1: ffffffff8cd2fee0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run3+0xf4/0x400 [ 854.108416][T19546] [ 854.108416][T19546] stack backtrace: [ 854.114308][T19546] CPU: 1 PID: 19546 Comm: syz.2.5835 Not tainted syzkaller #0 [ 854.121755][T19546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 854.131806][T19546] Call Trace: [ 854.135098][T19546] [ 854.138034][T19546] dump_stack_lvl+0x16c/0x230 [ 854.142727][T19546] ? load_image+0x3b0/0x3b0 [ 854.147227][T19546] ? show_regs_print_info+0x20/0x20 [ 854.152433][T19546] ? print_circular_bug+0x12b/0x1a0 [ 854.157633][T19546] check_noncircular+0x2bd/0x3c0 [ 854.162571][T19546] ? print_deadlock_bug+0x5d0/0x5d0 [ 854.167789][T19546] ? lockdep_lock+0xe0/0x220 [ 854.172380][T19546] ? _find_first_zero_bit+0xd3/0x100 [ 854.177676][T19546] __lock_acquire+0x2ddb/0x7c80 [ 854.182538][T19546] ? stack_trace_snprint+0xf0/0xf0 [ 854.187648][T19546] ? __stack_depot_save+0x560/0x630 [ 854.192844][T19546] ? verify_lock_unused+0x140/0x140 [ 854.198038][T19546] ? kasan_save_stack+0x4d/0x60 [ 854.202902][T19546] ? kasan_save_stack+0x3e/0x60 [ 854.207751][T19546] ? __kasan_record_aux_stack+0xaf/0xc0 [ 854.213295][T19546] ? kvfree_call_rcu+0xee/0x780 [ 854.218145][T19546] ? trie_delete_elem+0x535/0x6a0 [ 854.223172][T19546] ? bpf_prog_5186c38a4019a4cb+0x4a/0x4e [ 854.228810][T19546] ? bpf_trace_run3+0x1e7/0x400 [ 854.233677][T19546] ? __bpf_trace_timer_start+0x14a/0x1b0 [ 854.239322][T19546] ? enqueue_timer+0x398/0x530 [ 854.244080][T19546] ? __mod_timer+0x977/0xdb0 [ 854.248676][T19546] ? sk_reset_timer+0x23/0xc0 [ 854.253352][T19546] ? tipc_sk_finish_conn+0x154/0x7e0 [ 854.258627][T19546] ? tipc_socketpair+0x254/0x470 [ 854.263553][T19546] ? __sys_socketpair+0x2b0/0x550 [ 854.268572][T19546] ? __x64_sys_socketpair+0x9b/0xb0 [ 854.273771][T19546] ? do_syscall_64+0x55/0xb0 [ 854.278366][T19546] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 854.284440][T19546] lock_acquire+0x197/0x410 [ 854.288940][T19546] ? kvfree_call_rcu+0x15a/0x780 [ 854.293899][T19546] ? read_lock_is_recursive+0x20/0x20 [ 854.299269][T19546] ? __phys_addr+0xba/0x170 [ 854.303788][T19546] _raw_spin_lock+0x2e/0x40 [ 854.308289][T19546] ? kvfree_call_rcu+0x15a/0x780 [ 854.313227][T19546] kvfree_call_rcu+0x15a/0x780 [ 854.317995][T19546] ? call_rcu+0x930/0x930 [ 854.322324][T19546] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 854.328219][T19546] ? _raw_spin_unlock+0x40/0x40 [ 854.333066][T19546] trie_delete_elem+0x535/0x6a0 [ 854.337916][T19546] bpf_prog_5186c38a4019a4cb+0x4a/0x4e [ 854.343371][T19546] bpf_trace_run3+0x1e7/0x400 [ 854.348047][T19546] ? bpf_trace_run3+0xf4/0x400 [ 854.352805][T19546] ? bpf_trace_run2+0x3c0/0x3c0 [ 854.357664][T19546] ? __bpf_trace_timer_start+0x133/0x1b0 [ 854.363303][T19546] __bpf_trace_timer_start+0x14a/0x1b0 [ 854.368767][T19546] ? __bpf_trace_timer_class+0x100/0x100 [ 854.374409][T19546] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 854.380295][T19546] ? _raw_spin_unlock+0x40/0x40 [ 854.385137][T19546] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 854.390510][T19546] enqueue_timer+0x398/0x530 [ 854.395118][T19546] __mod_timer+0x977/0xdb0 [ 854.399542][T19546] sk_reset_timer+0x23/0xc0 [ 854.404051][T19546] tipc_sk_finish_conn+0x154/0x7e0 [ 854.409157][T19546] tipc_socketpair+0x254/0x470 [ 854.413919][T19546] __sys_socketpair+0x2b0/0x550 [ 854.418769][T19546] __x64_sys_socketpair+0x9b/0xb0 [ 854.423788][T19546] do_syscall_64+0x55/0xb0 [ 854.428205][T19546] ? clear_bhb_loop+0x40/0x90 [ 854.432874][T19546] ? clear_bhb_loop+0x40/0x90 [ 854.437553][T19546] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 854.443437][T19546] RIP: 0033:0x7fb53a98f749 [ 854.447840][T19546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 854.467450][T19546] RSP: 002b:00007fb53b838038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 854.475859][T19546] RAX: ffffffffffffffda RBX: 00007fb53abe5fa0 RCX: 00007fb53a98f749 [ 854.483829][T19546] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000001e [ 854.491794][T19546] RBP: 00007fb53aa13f91 R08: 0000000000000000 R09: 0000000000000000 [ 854.499762][T19546] R10: 00002000000010c0 R11: 0000000000000246 R12: 0000000000000000 [ 854.507731][T19546] R13: 00007fb53abe6038 R14: 00007fb53abe5fa0 R15: 00007fffdbe0a358 [ 854.515708][T19546] [ 854.621943][T19539] veth1_macvtap: entered promiscuous mode [ 854.642250][T19539] macsec0: entered promiscuous mode [ 854.661558][T19539] macsec0: entered allmulticast mode [ 854.669406][T19539] veth1_macvtap: entered allmulticast mode