last executing test programs: 3m22.414019316s ago: executing program 3 (id=3120): perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0004000000048b00000b000000000000", @ANYRES32, @ANYBLOB='\x00'/16, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff00"/21], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a00000000a3f500950004000000010045"], 0x0, 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'pim6reg1\x00', @multicast}) 3m22.046358048s ago: executing program 3 (id=3124): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000440)='GPL\x00', 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 3m21.780198556s ago: executing program 3 (id=3126): perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x85400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_config_ext={0xff, 0x4}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x1000009, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x48, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0x8, 0x2}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x1c541, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x3}, 0x2098, 0x3, 0x9, 0x0, 0x10, 0x2, 0x4007, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, r0, 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, 0x0, 0x0) close(r2) 3m21.643706711s ago: executing program 3 (id=3128): perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)='\\\x00\x00', 0x3}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20084050) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r1, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 3m21.261077434s ago: executing program 3 (id=3133): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x63) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000005c0)=r2, 0x12) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x300) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'nicvf0\x00', 0x2000}) r6 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f00000000c0)='THAWED\x00', 0x7) 3m20.781318159s ago: executing program 3 (id=3140): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x80}, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249f21c6eee84309e7a23c19a394830f2539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bfb1c0e6b1244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbb888b0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f94479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b844139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323478a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526894aa7fe5e68949a3b304723177d356c4604bca492ecec37e83efceefd78a2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bd43b5b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebcef5af469abe753314fae31a09c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa7000008000000000000117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d34264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5a71e0d7696caba172745c7dd919ffb631820420b75b6522c0e21c882c66f4f25ffb6d95e07e068000000000000eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6f0100000000000000f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb3bdc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d547bdfba2e09d24d117ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c3868db06fd892d68a547477f8ef686ff0dba7b8c18c94d5a89b0567a851750a35d9cc2217db890d89385fcaa00f0f2e524672e6f4c8bedfd5da5b157709b8265cf511dc5846ab1d85916c4a6b2d1b408575982e11230cbac0a9c6eaa03c945645581f678403c2a936c53ae72940aa92bcf22b82c6bc028e0acdddf9fef595f0f7a9f80c0e4c659ced769ec463d26a81e468846761a8e1efd6a031ab7adc8665e267be0065cc315aa23012423ec8b8492d9b50fa4d8c5891959b761eec6dc988532782fda13239c948e27853606e26225c796b79cc04f3d1a5a13000000001e301d82a27010d3ac6119d2b12caf282413672d20c852c50084d7b2d50754775ed63bc18023c31351af76e24788d96103455693b34e09a163a9f613a7e5530222cebd7fa0fbff32dc98088f9fab33648cc38e87dd2dd6ee157f5f018702696915661715c979b7796d4f101a257688af7c148e8615c938c4ca8a69f6fc585ec1dd1857a501f90b161eff23181a11a2b0da4c58d459cbf9db"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) close(0xffffffffffffffff) ioctl$TUNSETLINK(0xffffffffffffffff, 0x541b, 0x200000000000) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m5.550127008s ago: executing program 32 (id=3140): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x80}, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x49, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) close(0xffffffffffffffff) ioctl$TUNSETLINK(0xffffffffffffffff, 0x541b, 0x200000000000) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 12.086667444s ago: executing program 1 (id=3958): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000080040000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000000f000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x1e, 0x1, 0x0, 0x0) close(0xffffffffffffffff) mkdir(0x0, 0x0) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x6) 10.802700156s ago: executing program 1 (id=3965): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'pim6reg\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'veth0_macvtap\x00', 0x400}) r1 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r3}, 0x4) 10.240258265s ago: executing program 1 (id=3970): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0/file0\x00', 0x116) r0 = syz_clone(0x20900000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) 10.105009439s ago: executing program 2 (id=3972): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x80047441, &(0x7f0000001200)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x1f63, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x6, 0x3, 0x100}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x7, 0x6, 0x9, 0x0, r4, 0x100}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r5, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r6}, &(0x7f0000000880), &(0x7f00000008c0)=r4}, 0x20) r7 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x65, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000340)="14fd54ab72df87e6256c00000000", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r3) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r2, 0x0, 0x0}, 0x20) syz_clone(0x44003200, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0) 10.093899849s ago: executing program 1 (id=3973): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3, 0x4, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x7e, 0x5, 0x0, 0x0, 0x0, 0x6, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcbf, 0x2, @perf_config_ext={0x8000000001}, 0x100, 0x0, 0xfffffffd, 0x0, 0x0, 0x767d82f3, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, 0x0}, 0x8008000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.791489538s ago: executing program 0 (id=3983): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xdf}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) 6.510909757s ago: executing program 4 (id=3984): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r0, 0x0, &(0x7f0000000540)=""/153}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 6.412226271s ago: executing program 2 (id=3985): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000000)={0x0, 0x80, 0x1, 0xa, 0x3, 0x9, 0x0, 0x0, 0x2000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0xfffffffffffffff7, 0x9}, 0x0, 0x5, 0x3ff, 0x9, 0x8, 0x1, 0x4, 0x0, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) 6.411804781s ago: executing program 0 (id=3986): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="f0f605748aed0000000000000c00000045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 6.169222798s ago: executing program 4 (id=3987): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETVNETLE(r1, 0x400454cc, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r2, 0x400454ce, 0xa) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) 6.064031772s ago: executing program 0 (id=3988): socket$kcm(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x200000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000001700)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x8806, 0x3, 0x634e, 0x0, 0x0, 0x1, 0xfff6, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000100)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, &(0x7f0000000680), &(0x7f0000000700)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.931687779s ago: executing program 4 (id=3989): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="850000005000000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0xfffffffffffffffe, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x8, 0x8cb7}, 0x2000, 0x2, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8940, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000040)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 3.564808184s ago: executing program 1 (id=3990): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 3.548315064s ago: executing program 4 (id=3991): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) mkdir(0x0, 0x116) r0 = syz_clone(0x20900000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) 3.346949201s ago: executing program 0 (id=3992): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000a000000060000000000000f040000000000000000007130"], 0x0, 0x2e}, 0x28) 3.146316607s ago: executing program 2 (id=3993): perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2feaad6ee635ef2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x7}, 0x0, 0x0, 0x1000, 0x3, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8000}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000100)={'pim6reg0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) syz_clone(0x8010e000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000000c0)=0xe) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.07607554s ago: executing program 0 (id=3994): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000740), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x17}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001040)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) r2 = syz_clone(0x20088000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random='&\x00'}) perf_event_open$cgroup(&(0x7f0000000780)={0x1, 0x80, 0x60, 0x0, 0x3, 0x6, 0x0, 0x9, 0x8, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xffffff81, 0x4, @perf_config_ext={0x8, 0x1}, 0x102, 0x0, 0xffff, 0x1, 0x7, 0x6, 0x8, 0x0, 0x7, 0x0, 0x7f}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x2) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x10, 0x2, 0x7, 0x3, 0x0, 0xfffffffffffffffb, 0x40100, 0x18, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x9}, 0x40, 0x7, 0x9, 0x0, 0x53e3, 0x9, 0xb0e7, 0x0, 0x2, 0x0, 0xc86}, r2, 0xe, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 3.046422731s ago: executing program 4 (id=3995): r0 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00060000000b00000000000009020000000061002e"], &(0x7f0000000040)=""/135, 0x2a, 0x87, 0x1, 0xb6a, 0x10000, @value=r1}, 0x28) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0x64b}, 0x200, 0x0, 0x0, 0x0, 0xffff, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x2020) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000200)='cpu&00\t||') close(r5) close(0x3) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x18000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0xa100, 0xc8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x6, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0xfdef) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x10002400, &(0x7f00000003c0)="0d9773cc4b02688a0b56bc", 0xb, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000740)="b9a66e6c0fcb9fa99bf7036a555262eece78a5de5b5335b2831cf71bb08418af346c6fe659ae0a3d2666e8d65e861b244e8a283cc430f1dda60b9651626ffa474b17f5c3f6871e07324948436818a63c93af7e40a4cd86d6d47fda08682a826f4b7c24b0aa0851c28a5627ffc26288b40f927c7f1c8a38417534dec04a5c0daa21702f6381") ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'nr0\x00', 0x31}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89a2, &(0x7f0000000080)) 535.541933ms ago: executing program 2 (id=3996): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xdf}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="85000000ae00000025000000000000009500000000000000afcd48d649379071c33390e418ec470db2c6161dba392176dd296303406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d"], 0x0, 0x5}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) 483.748815ms ago: executing program 4 (id=3997): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/uts\x00') bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0xd}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRESDEC=r1], &(0x7f00000001c0)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f0000000400000004000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f00000002c0)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018080000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000000500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg(0xffffffffffffffff, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000000740)}, 0x20000000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x1e5, 0x0, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0x0, 0x65, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea5025", 0x5dc}, 0x50) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 482.118225ms ago: executing program 0 (id=4005): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_tracing={0x1a, 0x2, &(0x7f00000000c0)=@raw=[@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x3a, &(0x7f0000000380)=""/58, 0x40f00, 0x48, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x3, 0xb, 0x5, 0x9}, 0x10, 0x2fb6a, 0xffffffffffffffff, 0x9, &(0x7f0000000580)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000680)=[{0x3, 0x2, 0x8, 0x5}, {0x1, 0x3, 0xb, 0x9}, {0x1, 0x5, 0x4}, {0x2, 0x3, 0x3}, {0x6e, 0x81, 0x1, 0x4}, {0x2, 0x3, 0xa, 0x4}, {0x0, 0x4, 0x1, 0x9}, {0x0, 0x3, 0x1, 0x5}, {0x1, 0x4, 0xc, 0x7}], 0x10, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r0, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000880), &(0x7f00000008c0)=[0x0, 0x0], 0x0, 0x84, &(0x7f0000000900)=[{}], 0x8, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0xe2, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) close(0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) close(r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x900000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x20000000000002bf, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x7}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x704, 0x2}, 0x40, 0x0, 0x0, 0x8, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) syz_clone(0x80001000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup(r5, &(0x7f00000004c0)='syz0\x00', 0x1ff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 403.861057ms ago: executing program 1 (id=3998): close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x400000, 0x10, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair(0x2b, 0xa, 0x80000000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) syz_clone(0x22023500, 0x0, 0x20010, 0x0, 0x0, 0x0) 323.64907ms ago: executing program 2 (id=3999): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="850000005000000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0xfffffffffffffffe, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x8, 0x8cb7}, 0x2000, 0x2, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8940, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000040)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 0s ago: executing program 2 (id=4000): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.54' (ED25519) to the list of known hosts. syzkaller login: [ 81.130074][ T5762] cgroup: Unknown subsys name 'net' [ 81.265285][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.958555][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.586283][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.599942][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.607120][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.615100][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.619842][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.625267][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.639182][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.639408][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.654504][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.660762][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.669076][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.670744][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.678006][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.686904][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.697323][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.699007][ T5786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.708609][ T5776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.715973][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.720944][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.726708][ T5786] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.733818][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.741824][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.755314][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.762751][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.244058][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 85.263814][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 85.364548][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 85.482791][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.491397][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.500544][ T5778] bridge_slave_0: entered allmulticast mode [ 85.509041][ T5778] bridge_slave_0: entered promiscuous mode [ 85.518928][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.526103][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.533524][ T5778] bridge_slave_1: entered allmulticast mode [ 85.540699][ T5778] bridge_slave_1: entered promiscuous mode [ 85.570866][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 85.610498][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.617944][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.625174][ T5779] bridge_slave_0: entered allmulticast mode [ 85.632405][ T5779] bridge_slave_0: entered promiscuous mode [ 85.647370][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.654536][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.661897][ T5779] bridge_slave_1: entered allmulticast mode [ 85.669498][ T5779] bridge_slave_1: entered promiscuous mode [ 85.737864][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.750307][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.784028][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.803250][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.813561][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.820902][ T5775] bridge_slave_0: entered allmulticast mode [ 85.828396][ T5775] bridge_slave_0: entered promiscuous mode [ 85.845258][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.888447][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.895735][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.906832][ T5775] bridge_slave_1: entered allmulticast mode [ 85.913847][ T5775] bridge_slave_1: entered promiscuous mode [ 85.937696][ T5778] team0: Port device team_slave_0 added [ 85.949764][ T5779] team0: Port device team_slave_0 added [ 86.000815][ T5778] team0: Port device team_slave_1 added [ 86.019527][ T5779] team0: Port device team_slave_1 added [ 86.042162][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.051526][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.058886][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.066109][ T5774] bridge_slave_0: entered allmulticast mode [ 86.073447][ T5774] bridge_slave_0: entered promiscuous mode [ 86.082538][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.090449][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.116920][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.143726][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.164215][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.171581][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.179058][ T5774] bridge_slave_1: entered allmulticast mode [ 86.186053][ T5774] bridge_slave_1: entered promiscuous mode [ 86.203642][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.213573][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.239878][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.279540][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.286867][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.313187][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.347315][ T5775] team0: Port device team_slave_0 added [ 86.353992][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.361332][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.394346][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.408106][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.421942][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.434093][ T5775] team0: Port device team_slave_1 added [ 86.510465][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.520459][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.546764][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.559540][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.566813][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.593037][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.609916][ T5774] team0: Port device team_slave_0 added [ 86.622375][ T5778] hsr_slave_0: entered promiscuous mode [ 86.629184][ T5778] hsr_slave_1: entered promiscuous mode [ 86.657713][ T5774] team0: Port device team_slave_1 added [ 86.703311][ T5779] hsr_slave_0: entered promiscuous mode [ 86.711113][ T5779] hsr_slave_1: entered promiscuous mode [ 86.717678][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.725531][ T5779] Cannot create hsr debugfs directory [ 86.743956][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.751193][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.777470][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.791374][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.798462][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.824477][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.857493][ T51] Bluetooth: hci2: command tx timeout [ 86.857512][ T5780] Bluetooth: hci1: command tx timeout [ 86.857782][ T5780] Bluetooth: hci3: command tx timeout [ 86.874611][ T5785] Bluetooth: hci0: command tx timeout [ 86.944321][ T5775] hsr_slave_0: entered promiscuous mode [ 86.951335][ T5775] hsr_slave_1: entered promiscuous mode [ 86.958025][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.965615][ T5775] Cannot create hsr debugfs directory [ 87.034066][ T5774] hsr_slave_0: entered promiscuous mode [ 87.041170][ T5774] hsr_slave_1: entered promiscuous mode [ 87.048448][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.056055][ T5774] Cannot create hsr debugfs directory [ 87.643443][ T5779] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.667330][ T5779] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.688708][ T5779] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.699864][ T5779] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.758115][ T5778] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.770122][ T5778] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.785956][ T5778] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.799857][ T5778] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.917680][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.929557][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.941181][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.957799][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.084800][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.093553][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.104510][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.117858][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.141714][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.180788][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.214040][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.221519][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.264353][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.289125][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.296451][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.330882][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.358219][ T999] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.365399][ T999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.385386][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.435078][ T999] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.442259][ T999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.495183][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.551598][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.558828][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.610965][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.618189][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.672642][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.800266][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.871357][ T999] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.878701][ T999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.939283][ T5785] Bluetooth: hci2: command tx timeout [ 88.944765][ T5785] Bluetooth: hci0: command tx timeout [ 88.964106][ T999] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.971347][ T999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.979159][ T5780] Bluetooth: hci1: command tx timeout [ 88.984442][ T5782] Bluetooth: hci3: command tx timeout [ 89.046038][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.274591][ T5779] veth0_vlan: entered promiscuous mode [ 89.304963][ T5779] veth1_vlan: entered promiscuous mode [ 89.380642][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.433369][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.489482][ T5779] veth0_macvtap: entered promiscuous mode [ 89.529870][ T5779] veth1_macvtap: entered promiscuous mode [ 89.572308][ T5778] veth0_vlan: entered promiscuous mode [ 89.586113][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.609669][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.631156][ T5775] veth0_vlan: entered promiscuous mode [ 89.641157][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.669117][ T5778] veth1_vlan: entered promiscuous mode [ 89.689667][ T5779] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.699142][ T5779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.708556][ T5779] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.718702][ T5779] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.755244][ T5775] veth1_vlan: entered promiscuous mode [ 89.835311][ T5774] veth0_vlan: entered promiscuous mode [ 89.846377][ T5778] veth0_macvtap: entered promiscuous mode [ 89.875316][ T5778] veth1_macvtap: entered promiscuous mode [ 89.916834][ T5775] veth0_macvtap: entered promiscuous mode [ 89.933681][ T5774] veth1_vlan: entered promiscuous mode [ 89.982042][ T5775] veth1_macvtap: entered promiscuous mode [ 90.004148][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.013033][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.026132][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.042369][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.054627][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.099156][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.111518][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.123551][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.155629][ T2991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.169983][ T5778] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.179786][ T5778] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.183246][ T2991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.191353][ T5778] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.206437][ T5778] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.219701][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.232576][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.244209][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.254756][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.267867][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.288434][ T5774] veth0_macvtap: entered promiscuous mode [ 90.314932][ T5774] veth1_macvtap: entered promiscuous mode [ 90.330883][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.351783][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.361943][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.372842][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.396793][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.430149][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.439762][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.449195][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.467454][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.509928][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.520588][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.531777][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.543449][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.553415][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.569494][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.581157][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.622041][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.648845][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.674658][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.705188][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.718139][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.728841][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.740610][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.790253][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.807274][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.811773][ C0] hrtimer: interrupt took 112457 ns [ 90.816023][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.831585][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.884701][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.896952][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.009222][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.017913][ T51] Bluetooth: hci1: command tx timeout [ 91.023809][ T51] Bluetooth: hci2: command tx timeout [ 91.029963][ T5785] Bluetooth: hci0: command tx timeout [ 91.035420][ T5785] Bluetooth: hci3: command tx timeout [ 91.048132][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.135147][ T999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.151770][ T999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.303233][ T5846] syzkaller0: entered promiscuous mode [ 91.310474][ T5846] syzkaller0: entered allmulticast mode [ 91.342405][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.362020][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.381920][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.426952][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.439277][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.454169][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.461867][ T5845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.619796][ T3509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.638311][ T3509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.027808][ T5856] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 92.046148][ T5856] syzkaller0: entered promiscuous mode [ 92.056225][ T5856] syzkaller0: entered allmulticast mode [ 92.155075][ T27] cfg80211: failed to load regulatory.db [ 93.121489][ T5780] Bluetooth: hci2: command tx timeout [ 93.121511][ T51] Bluetooth: hci3: command tx timeout [ 93.121583][ T51] Bluetooth: hci0: command tx timeout [ 93.127015][ T5780] Bluetooth: hci1: command tx timeout [ 94.195655][ T5889] warning: `syz.1.18' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.155914][ T5918] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 96.201793][ T5918] syzkaller0: entered promiscuous mode [ 96.250208][ T5918] syzkaller0: entered allmulticast mode [ 100.382506][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.429161][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.437311][ T5950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.674275][ T5972] sit0: entered allmulticast mode [ 103.397345][ T6002] sit0: entered allmulticast mode [ 105.687114][ T6031] sit0: entered allmulticast mode [ 107.380440][ T6059] sit0: entered allmulticast mode [ 108.685969][ T6088] syzkaller0: entered promiscuous mode [ 108.691695][ T6088] syzkaller0: entered allmulticast mode [ 110.475641][ T6098] syzkaller0: entered promiscuous mode [ 110.485573][ T6098] syzkaller0: entered allmulticast mode [ 118.037783][ T6288] syzkaller0: entered promiscuous mode [ 118.043342][ T6288] syzkaller0: entered allmulticast mode [ 120.189483][ T6308] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.207123][ T6309] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.214291][ T6309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.350423][ T6347] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.397435][ T6348] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.404703][ T6348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.987544][ T6414] pim6reg: tun_chr_ioctl cmd 1074025677 [ 124.993714][ T6414] pim6reg: linktype set to 774 [ 126.811887][ T6456] syzkaller0: tun_chr_ioctl cmd 2147767511 [ 126.852402][ T6452] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 129.724989][ T6503] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.732757][ T6503] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.742728][ T6503] bridge0: entered allmulticast mode [ 129.797186][ T6506] bridge_slave_1: left allmulticast mode [ 129.803702][ T6506] bridge_slave_1: left promiscuous mode [ 129.823094][ T6506] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.858815][ T6506] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.848671][ T6537] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.909658][ T6538] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.916971][ T6538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.352153][ T6546] tap0: tun_chr_ioctl cmd 1074025675 [ 131.376689][ T6546] tap0: persist disabled [ 131.937844][ T6557] syzkaller0: tun_chr_ioctl cmd 2147767511 [ 131.982274][ T6556] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 132.186128][ T6564] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.217502][ T6564] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.224773][ T6564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.080321][ T6582] syzkaller0: tun_chr_ioctl cmd 2147767511 [ 133.098097][ T6585] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 133.105928][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.112795][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.616308][ T6602] syzkaller0: entered promiscuous mode [ 133.643040][ T6602] syzkaller0: entered allmulticast mode [ 136.012457][ T6650] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 136.033113][ T6650] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 137.271088][ T6683] syzkaller0: entered promiscuous mode [ 137.289258][ T6683] syzkaller0: entered allmulticast mode [ 137.318604][ T6680] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 137.329793][ T6680] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 140.012987][ T6738] syzkaller0: entered promiscuous mode [ 140.018852][ T6738] syzkaller0: entered allmulticast mode [ 141.889029][ T6756] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 142.298351][ T6765] syzkaller0: entered promiscuous mode [ 142.324005][ T6765] syzkaller0: entered allmulticast mode [ 143.995914][ T6781] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.017035][ T6774] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 144.035596][ T6774] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 145.172145][ T6811] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 145.187013][ T6813] bridge_slave_0: left promiscuous mode [ 145.192679][ T6813] bridge_slave_0: left allmulticast mode [ 146.485039][ T6845] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 146.887956][ T6858] bridge0: port 3(ip6gretap0) entered blocking state [ 146.903432][ T6858] bridge0: port 3(ip6gretap0) entered disabled state [ 146.929669][ T6858] ip6gretap0: entered allmulticast mode [ 147.055928][ T6858] ip6gretap0: entered promiscuous mode [ 147.091847][ T6858] bridge0: port 3(ip6gretap0) entered blocking state [ 147.100579][ T6858] bridge0: port 3(ip6gretap0) entered forwarding state [ 148.419229][ T6883] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 150.251557][ T11] syzkaller0: tun_net_xmit 76 [ 150.264813][ T11] syzkaller0: tun_net_xmit 48 [ 152.649779][ T6941] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 152.657235][ T6941] syzkaller1: linktype set to 778 [ 159.828878][ T7197] netlink: 'syz.1.570': attribute type 10 has an invalid length. [ 159.942297][ T7200] netlink: 60 bytes leftover after parsing attributes in process `syz.3.571'. [ 159.960997][ T7197] macvlan1: entered allmulticast mode [ 160.000174][ T7197] veth1_vlan: entered allmulticast mode [ 160.025393][ T7197] team0: Port device macvlan1 added [ 160.051777][ T7200] netlink: 60 bytes leftover after parsing attributes in process `syz.3.571'. [ 160.092784][ T7201] netlink: 60 bytes leftover after parsing attributes in process `syz.3.571'. [ 160.132692][ T7202] netlink: 60 bytes leftover after parsing attributes in process `syz.3.571'. [ 160.618431][ T7221] netlink: 60 bytes leftover after parsing attributes in process `syz.3.580'. [ 160.651895][ T7221] netlink: 60 bytes leftover after parsing attributes in process `syz.3.580'. [ 160.685047][ T7221] netlink: 60 bytes leftover after parsing attributes in process `syz.3.580'. [ 160.715003][ T7221] netlink: 60 bytes leftover after parsing attributes in process `syz.3.580'. [ 162.269913][ T7275] netlink: 'syz.0.602': attribute type 1 has an invalid length. [ 162.286839][ T7275] netlink: 'syz.0.602': attribute type 4 has an invalid length. [ 162.303612][ T7275] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.602'. [ 164.298080][ T7323] netlink: 14 bytes leftover after parsing attributes in process `syz.1.625'. [ 165.990300][ T7350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.637'. [ 167.399367][ T7400] syz.0.661 uses obsolete (PF_INET,SOCK_PACKET) [ 169.332509][ T7456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.684'. [ 169.598506][ T7464] netlink: 'syz.3.687': attribute type 21 has an invalid length. [ 169.648205][ T7464] netlink: 156 bytes leftover after parsing attributes in process `syz.3.687'. [ 170.627058][ T7488] batman_adv: The newly added mac address (00:20:10:00:00:00) already exists on: batadv_slave_1 [ 170.653562][ T7488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.685644][ T7490] bridge0: port 3(veth1_to_team) entered blocking state [ 170.703406][ T7490] bridge0: port 3(veth1_to_team) entered disabled state [ 170.722237][ T7490] veth1_to_team: entered allmulticast mode [ 170.744830][ T7490] veth1_to_team: entered promiscuous mode [ 170.755419][ T7490] bridge0: port 3(veth1_to_team) entered blocking state [ 170.763385][ T7490] bridge0: port 3(veth1_to_team) entered forwarding state [ 171.427311][ T7519] bridge0: port 4(veth1_to_team) entered blocking state [ 171.457113][ T7519] bridge0: port 4(veth1_to_team) entered disabled state [ 171.483823][ T7519] veth1_to_team: entered allmulticast mode [ 171.513036][ T7519] veth1_to_team: entered promiscuous mode [ 171.542493][ T7519] bridge0: port 4(veth1_to_team) entered blocking state [ 171.550057][ T7519] bridge0: port 4(veth1_to_team) entered forwarding state [ 171.567046][ T51] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3 [ 173.012870][ T7558] C: renamed from team_slave_0 (while UP) [ 173.048907][ T7558] netlink: 'syz.1.729': attribute type 3 has an invalid length. [ 173.062360][ T7558] netlink: 116 bytes leftover after parsing attributes in process `syz.1.729'. [ 173.072952][ T7558] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 173.483338][ T7575] Driver unsupported XDP return value 0 on prog (id 264) dev N/A, expect packet loss! [ 173.561394][ T51] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 174.002517][ T7597] bridge0: port 3(veth1_to_team) entered blocking state [ 174.070113][ T7597] bridge0: port 3(veth1_to_team) entered disabled state [ 174.083700][ T7597] veth1_to_team: entered allmulticast mode [ 174.148093][ T7597] veth1_to_team: entered promiscuous mode [ 174.179053][ T7597] bridge0: port 3(veth1_to_team) entered blocking state [ 174.187925][ T7597] bridge0: port 3(veth1_to_team) entered forwarding state [ 174.363805][ T7603] netlink: 60 bytes leftover after parsing attributes in process `syz.0.750'. [ 174.403519][ T7603] netlink: 60 bytes leftover after parsing attributes in process `syz.0.750'. [ 174.450696][ T7605] netlink: 60 bytes leftover after parsing attributes in process `syz.0.750'. [ 174.460774][ T7611] netlink: 60 bytes leftover after parsing attributes in process `syz.0.750'. [ 174.695207][ T7618] netlink: 763 bytes leftover after parsing attributes in process `syz.0.756'. [ 175.288619][ T7632] netlink: 14 bytes leftover after parsing attributes in process `syz.3.762'. [ 175.653711][ T7632] team0: Port device team_slave_0 removed [ 176.036165][ T7632] syz.3.762 (7632) used greatest stack depth: 20048 bytes left [ 176.563550][ T7677] netlink: 763 bytes leftover after parsing attributes in process `syz.2.779'. [ 176.603287][ T7679] netlink: 14 bytes leftover after parsing attributes in process `syz.1.782'. [ 176.609097][ T7680] netlink: 60 bytes leftover after parsing attributes in process `syz.3.781'. [ 176.813631][ T7679] team0: Port device C removed [ 177.276883][ T7701] netlink: 'syz.2.788': attribute type 4 has an invalid length. [ 177.480937][ T7707] Zero length message leads to an empty skb [ 177.667406][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 178.178015][ T7729] team0: Port device team_slave_0 removed [ 178.307169][ T7731] netlink: 'syz.1.802': attribute type 4 has an invalid length. [ 178.315195][ T7731] __nla_validate_parse: 9 callbacks suppressed [ 178.315206][ T7731] netlink: 152 bytes leftover after parsing attributes in process `syz.1.802'. [ 178.927153][ T5785] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 179.656663][ T5785] Bluetooth: hci3: command 0x0406 tx timeout [ 179.742597][ T7778] netlink: 132 bytes leftover after parsing attributes in process `syz.1.822'. [ 180.131938][ T51] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3 [ 180.258058][ T7800] netlink: 60 bytes leftover after parsing attributes in process `syz.2.831'. [ 180.286791][ T7801] netlink: 14 bytes leftover after parsing attributes in process `syz.0.832'. [ 180.301670][ T7800] netlink: 60 bytes leftover after parsing attributes in process `syz.2.831'. [ 180.319303][ T7800] netlink: 60 bytes leftover after parsing attributes in process `syz.2.831'. [ 181.110916][ T7824] netlink: 14 bytes leftover after parsing attributes in process `syz.3.843'. [ 181.253769][ T51] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3 [ 181.371998][ T7831] netlink: 763 bytes leftover after parsing attributes in process `syz.3.845'. [ 181.725028][ T7849] netlink: 14 bytes leftover after parsing attributes in process `syz.2.853'. [ 181.811781][ T7849] team0: Port device team_slave_0 removed [ 182.688043][ T51] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3 [ 183.553452][ T7912] netlink: 763 bytes leftover after parsing attributes in process `syz.0.881'. [ 184.766356][ T51] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 184.784261][ T7948] netlink: 763 bytes leftover after parsing attributes in process `syz.3.894'. [ 185.027753][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 185.500037][ T7976] netlink: 763 bytes leftover after parsing attributes in process `syz.1.907'. [ 185.639061][ T5785] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 186.288338][ T5785] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 186.925587][ T5785] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3 [ 187.595214][ T5785] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3 [ 188.355120][ T5785] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3 [ 188.785239][ T5785] Bluetooth: hci1: command 0x0406 tx timeout [ 189.874627][ T8145] netlink: 'syz.2.979': attribute type 29 has an invalid length. [ 189.883370][ T8145] netlink: 'syz.2.979': attribute type 29 has an invalid length. [ 189.893722][ T8145] netlink: 'syz.2.979': attribute type 29 has an invalid length. [ 189.902790][ T8145] netlink: 'syz.2.979': attribute type 29 has an invalid length. [ 191.442542][ T51] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3 [ 193.864350][ T51] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 194.540902][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.554547][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.037155][ T51] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 195.814326][ T51] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 195.896716][ T5785] Bluetooth: hci2: command 0x0406 tx timeout [ 197.096834][ T5785] Bluetooth: hci3: command 0x0406 tx timeout [ 197.911631][ T5785] Bluetooth: hci1: command 0x0406 tx timeout [ 202.910568][ T5785] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 203.184741][ T8583] netlink: 'syz.3.1170': attribute type 4 has an invalid length. [ 203.202039][ T8583] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1170'. [ 203.682259][ T5785] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 206.857353][ T5785] Bluetooth: hci3: command 0x0406 tx timeout [ 208.807800][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 208.863113][ T8798] netlink: 'syz.1.1270': attribute type 10 has an invalid length. [ 208.956603][ T8798] team0: Device hsr_slave_0 failed to register rx_handler [ 210.105969][ T8798] syz.1.1270 (8798) used greatest stack depth: 18920 bytes left [ 210.324153][ T8821] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1280'. [ 211.980153][ T5786] Bluetooth: hci2: command 0x0406 tx timeout [ 211.980178][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 211.986223][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 213.765573][ T8901] netlink: 'syz.2.1316': attribute type 10 has an invalid length. [ 214.351779][ T8901] team0: Device hsr_slave_0 failed to register rx_handler [ 214.595871][ T8901] syz.2.1316 (8901) used greatest stack depth: 18568 bytes left [ 215.077413][ T8932] sctp: [Deprecated]: syz.0.1330 (pid 8932) Use of int in max_burst socket option deprecated. [ 215.077413][ T8932] Use struct sctp_assoc_value instead [ 216.883444][ T8950] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1338'. [ 218.358438][ T8988] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1355'. [ 218.799123][ T5782] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 219.891927][ T5782] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 220.066564][ T9045] netdevsim netdevsim1: Direct firmware load for 2 failed with error -2 [ 220.086866][ T9045] netdevsim netdevsim1: Falling back to sysfs fallback for: 2 [ 220.681411][ T5782] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 221.318230][ T5782] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 221.510609][ T9094] netdevsim netdevsim2: Direct firmware load for 2 failed with error -2 [ 221.574130][ T9094] netdevsim netdevsim2: Falling back to sysfs fallback for: 2 [ 221.971219][ T5782] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 223.159423][ T5782] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 227.446720][ T5782] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 228.301245][ T5782] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 229.386317][ T5782] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 230.567456][ T5782] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 231.707072][ T9419] syzkaller0: entered promiscuous mode [ 231.731762][ T9419] syzkaller0: entered allmulticast mode [ 235.203423][ T9494] tap0: tun_chr_ioctl cmd 1074025681 [ 240.477926][ T9644] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 240.535536][ T9644] syzkaller0: entered promiscuous mode [ 240.556770][ T9644] syzkaller0: entered allmulticast mode [ 241.470810][ T9666] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1661'. [ 242.885431][ T9666] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1661'. [ 243.841698][ T9687] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1671'. [ 243.888196][ T9687] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1671'. [ 243.898872][ T9687] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1671'. [ 245.171482][ T9711] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1682'. [ 245.216240][ T9711] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1682'. [ 245.256065][ T9715] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1682'. [ 245.918832][ T9744] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1696'. [ 245.929198][ T9744] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1696'. [ 246.507019][ T9767] __nla_validate_parse: 2 callbacks suppressed [ 246.507036][ T9767] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1707'. [ 248.164239][ T9767] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1707'. [ 252.886809][ T9880] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1751'. [ 252.900377][ T9880] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1751'. [ 252.914433][ T9880] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1751'. [ 252.924849][ T9880] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1751'. [ 253.961498][ T9905] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1763'. [ 254.001292][ T9905] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1763'. [ 254.027874][ T9910] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1763'. [ 254.064871][ T9905] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1763'. [ 254.978596][ T9936] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1776'. [ 254.988124][ T9936] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1776'. [ 255.344796][ T5782] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 256.007899][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.033614][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.657461][ T5782] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 257.970019][ T5782] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 258.277419][ T5782] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 259.236248][ T5782] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 259.338398][T10046] syzkaller0: entered promiscuous mode [ 259.351611][T10046] syzkaller0: entered allmulticast mode [ 260.752529][ T5782] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 261.935192][ T5782] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 262.937999][ T5782] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 262.953806][ T5782] Bluetooth: hci1: Injecting HCI hardware error event [ 262.963082][ T5782] Bluetooth: hci1: hardware error 0x00 [ 263.608004][ T51] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 264.521046][T10163] syzkaller0: entered promiscuous mode [ 264.543973][T10163] syzkaller0: entered allmulticast mode [ 264.553440][ T51] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 265.512548][ T51] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 265.559809][T10203] syzkaller0: entered promiscuous mode [ 265.573376][T10203] syzkaller0: entered allmulticast mode [ 265.586634][ T5782] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 266.202370][T10220] __nla_validate_parse: 6 callbacks suppressed [ 266.202389][T10220] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1897'. [ 266.266616][T10220] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1897'. [ 266.275987][T10221] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1897'. [ 266.304416][T10220] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1897'. [ 266.647375][ T5782] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 267.761446][T10256] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1908'. [ 267.778103][T10256] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1908'. [ 267.826394][T10256] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1908'. [ 267.869023][T10256] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1908'. [ 268.072935][ T5782] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 268.216589][ T5782] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 268.233276][ T5782] Bluetooth: hci2: Injecting HCI hardware error event [ 268.241470][ T5782] Bluetooth: hci2: hardware error 0x00 [ 268.733194][T10286] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1921'. [ 268.754292][T10286] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1921'. [ 269.102641][ T51] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 269.176860][ T51] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 269.193682][ T51] Bluetooth: hci0: Injecting HCI hardware error event [ 269.202387][ T51] Bluetooth: hci0: hardware error 0x00 [ 270.384845][ T5782] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 270.894718][ T5782] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 271.256564][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 271.365252][T10338] __nla_validate_parse: 6 callbacks suppressed [ 271.365268][T10338] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1942'. [ 271.424402][T10338] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1942'. [ 272.331663][T10343] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1942'. [ 272.916813][T10376] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1956'. [ 272.951996][T10376] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1956'. [ 273.033506][T10376] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1956'. [ 273.066610][T10379] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1956'. [ 273.728545][T10405] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1968'. [ 273.766701][T10405] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1968'. [ 273.786735][T10405] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1968'. [ 273.859824][ T51] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 274.397712][T10421] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 275.877359][ T51] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 277.888227][T10469] __nla_validate_parse: 6 callbacks suppressed [ 277.888244][T10469] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1994'. [ 278.496639][T10496] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2006'. [ 278.524478][T10496] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2006'. [ 278.538150][T10496] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2006'. [ 278.548804][T10496] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2006'. [ 279.836656][T10520] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2016'. [ 279.863360][T10515] syzkaller0: entered promiscuous mode [ 279.876008][T10515] syzkaller0: entered allmulticast mode [ 279.902705][T10520] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2016'. [ 279.928146][T10524] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2016'. [ 280.010795][T10520] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2016'. [ 282.578807][T10532] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 282.781099][T10551] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2027'. [ 283.753979][T10577] __nla_validate_parse: 3 callbacks suppressed [ 283.753998][T10577] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2039'. [ 283.786584][T10577] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2039'. [ 283.806126][T10578] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2039'. [ 283.835578][T10577] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2039'. [ 284.131020][T10589] pimreg0: tun_chr_ioctl cmd 35111 [ 284.358187][T10601] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2051'. [ 284.367457][T10601] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2051'. [ 284.378948][T10601] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2051'. [ 284.407225][T10601] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2051'. [ 285.155652][T10634] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2063'. [ 285.172931][T10634] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2063'. [ 286.866596][T10676] -1: renamed from syzkaller0 [ 289.451849][T10750] __nla_validate_parse: 18 callbacks suppressed [ 289.451866][T10750] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2113'. [ 289.485027][T10750] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2113'. [ 289.500331][T10750] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2113'. [ 289.513484][T10750] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2113'. [ 290.753246][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 290.901179][T10768] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2122'. [ 290.915785][T10768] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2122'. [ 290.939159][T10768] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2122'. [ 290.976607][T10768] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2122'. [ 291.656310][T10794] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2133'. [ 291.669980][T10794] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2133'. [ 292.505793][T10827] pim6reg1: entered promiscuous mode [ 292.511566][T10827] pim6reg1: entered allmulticast mode [ 292.902479][T10839] netdevsim netdevsim0: Direct firmware load for 2 failed with error -2 [ 292.920801][T10839] netdevsim netdevsim0: Falling back to sysfs fallback for: 2 [ 293.498481][T10854] -1: renamed from syzkaller0 [ 294.872871][T10888] -1: renamed from syzkaller0 [ 295.418371][T10905] pim6reg1: entered promiscuous mode [ 295.423962][T10905] pim6reg1: entered allmulticast mode [ 296.432873][T10935] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 300.216784][ T51] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 301.034438][ T51] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 303.202878][T11093] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 304.709265][ T51] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 307.388234][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 308.451442][T11216] tap0: tun_chr_ioctl cmd 1074025692 [ 309.884744][ T2991] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.017978][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 310.027613][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 310.036200][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 310.052528][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 310.060742][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 310.068444][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 310.657409][ T2991] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.809994][ T2991] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.973320][ T2991] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.188611][T11245] chnl_net:caif_netlink_parms(): no params data found [ 311.630535][T11245] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.639636][T11245] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.647063][T11245] bridge_slave_0: entered allmulticast mode [ 311.654534][T11245] bridge_slave_0: entered promiscuous mode [ 311.663712][T11245] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.671221][T11245] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.678730][T11245] bridge_slave_1: entered allmulticast mode [ 311.686199][T11245] bridge_slave_1: entered promiscuous mode [ 311.745991][T11245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.793587][T11245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.124442][T11295] pim6reg1: entered promiscuous mode [ 312.136906][ T5782] Bluetooth: hci3: command tx timeout [ 312.156549][T11295] pim6reg1: entered allmulticast mode [ 312.186162][T11245] team0: Port device team_slave_0 added [ 312.313617][T11245] team0: Port device team_slave_1 added [ 312.651195][T11245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.668208][T11245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.816384][T11245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.849616][T11245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.866781][T11245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.910134][T11245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.642545][T11245] hsr_slave_0: entered promiscuous mode [ 313.654261][T11245] hsr_slave_1: entered promiscuous mode [ 313.691035][T11245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.705367][T11245] Cannot create hsr debugfs directory [ 313.774167][T11333] pim6reg1: entered promiscuous mode [ 313.780118][T11333] pim6reg1: entered allmulticast mode [ 314.217096][ T5782] Bluetooth: hci3: command tx timeout [ 314.768538][ T2991] hsr_slave_0: left promiscuous mode [ 315.657908][ T2991] hsr_slave_1: left promiscuous mode [ 315.776153][ T2991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.785074][ T2991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.794544][ T2991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.809491][ T2991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.820736][ T2991] veth1_to_team: left allmulticast mode [ 315.826379][ T2991] veth1_to_team: left promiscuous mode [ 315.853072][ T2991] bridge0: port 3(veth1_to_team) entered disabled state [ 315.873507][ T2991] bridge_slave_1: left allmulticast mode [ 315.891872][ T2991] bridge_slave_1: left promiscuous mode [ 315.903112][ T2991] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.922060][ T2991] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.954142][ T2991] veth1_macvtap: left promiscuous mode [ 315.965323][ T2991] veth0_macvtap: left promiscuous mode [ 315.971204][ T2991] veth1_vlan: left promiscuous mode [ 315.986029][ T2991] veth0_vlan: left promiscuous mode [ 316.307736][ T5782] Bluetooth: hci3: command tx timeout [ 316.715579][ T2991] team0 (unregistering): Port device team_slave_1 removed [ 316.758513][ T2991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.804452][ T2991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.113009][ T2991] bond0 (unregistering): Released all slaves [ 317.424970][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.436762][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.457945][T11380] syzkaller0: entered promiscuous mode [ 317.463569][T11380] syzkaller0: entered allmulticast mode [ 318.376590][ T5782] Bluetooth: hci3: command tx timeout [ 321.360585][T11245] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 321.446263][T11245] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 321.502505][T11245] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 321.640324][T11245] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 322.123887][T11245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.200160][T11245] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.274133][ T2991] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.281423][ T2991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.318461][ T2991] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.325688][ T2991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.007764][T11245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.158522][T11245] veth0_vlan: entered promiscuous mode [ 323.216050][T11245] veth1_vlan: entered promiscuous mode [ 323.383706][T11245] veth0_macvtap: entered promiscuous mode [ 323.426223][T11245] veth1_macvtap: entered promiscuous mode [ 323.470279][T11245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.495632][T11245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.526062][T11245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.556545][T11245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.593107][T11245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.644981][T11245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.688444][T11245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.789561][T11245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.812969][T11245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.856537][T11245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.886439][T11245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.925901][T11245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.970878][T11245] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.997971][T11245] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.016499][T11245] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.025278][T11245] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.335101][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.379461][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.453828][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.489880][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.309613][ T5782] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 326.761195][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 326.783156][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 326.792621][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 326.818847][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 326.829962][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.855934][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 326.863882][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 327.084722][T11581] netlink: 'syz.2.2411': attribute type 29 has an invalid length. [ 327.102030][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.122002][T11581] netlink: 'syz.2.2411': attribute type 29 has an invalid length. [ 327.135691][T11581] netlink: 'syz.2.2411': attribute type 29 has an invalid length. [ 327.421822][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.757737][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.350481][T11571] chnl_net:caif_netlink_parms(): no params data found [ 328.946650][ T51] Bluetooth: hci0: command tx timeout [ 329.132136][T11571] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.140898][T11571] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.170734][T11571] bridge_slave_0: entered allmulticast mode [ 329.206717][T11571] bridge_slave_0: entered promiscuous mode [ 329.323046][T11571] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.334844][T11571] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.351550][T11571] bridge_slave_1: entered allmulticast mode [ 329.368055][T11571] bridge_slave_1: entered promiscuous mode [ 329.590028][T11571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.627033][T11571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.798981][T11571] team0: Port device team_slave_0 added [ 329.879370][T11571] team0: Port device team_slave_1 added [ 329.993856][T11571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.032391][T11571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.087241][T11571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.152749][T11571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.163738][T11571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.199282][T11571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.493315][T11571] hsr_slave_0: entered promiscuous mode [ 330.533713][T11571] hsr_slave_1: entered promiscuous mode [ 330.614431][T11571] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 330.633701][T11571] Cannot create hsr debugfs directory [ 331.009029][ T11] hsr_slave_0: left promiscuous mode [ 331.016598][ T51] Bluetooth: hci0: command tx timeout [ 331.034988][ T11] hsr_slave_1: left promiscuous mode [ 331.550514][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.560667][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.570358][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.587321][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.607645][ T11] veth1_to_team: left allmulticast mode [ 331.622680][ T11] veth1_to_team: left promiscuous mode [ 331.641391][ T11] bridge0: port 3(veth1_to_team) entered disabled state [ 331.653710][ T11] bridge_slave_1: left allmulticast mode [ 331.665847][ T11] bridge_slave_1: left promiscuous mode [ 331.683349][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.735696][ T11] bridge_slave_0: left allmulticast mode [ 331.752994][ T11] bridge_slave_0: left promiscuous mode [ 331.765743][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.849880][ T11] veth1_macvtap: left promiscuous mode [ 331.855496][ T11] veth0_macvtap: left promiscuous mode [ 331.865550][ T11] veth1_vlan: left allmulticast mode [ 331.871175][ T11] veth1_vlan: left promiscuous mode [ 331.877142][ T11] veth0_vlan: left promiscuous mode [ 332.462611][ T11] team0 (unregistering): Port device macvlan1 removed [ 332.825630][ T11] team0 (unregistering): Port device team_slave_1 removed [ 332.889836][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.950253][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.098292][ T51] Bluetooth: hci0: command tx timeout [ 333.395931][ T11] bond0 (unregistering): Released all slaves [ 333.837899][T11719] __nla_validate_parse: 18 callbacks suppressed [ 333.837933][T11719] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2449'. [ 334.822935][T11571] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 334.854458][T11571] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 334.906533][T11571] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 334.933988][T11571] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 335.172831][T11571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.177050][ T51] Bluetooth: hci0: command tx timeout [ 335.310608][T11571] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.352634][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.359884][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.391476][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.398734][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.565031][T11571] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 335.643865][T11767] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2462'. [ 336.283314][T11571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.429950][T11571] veth0_vlan: entered promiscuous mode [ 336.479744][T11571] veth1_vlan: entered promiscuous mode [ 336.575501][T11571] veth0_macvtap: entered promiscuous mode [ 336.599577][T11571] veth1_macvtap: entered promiscuous mode [ 336.665382][T11571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.693112][T11571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.705292][T11571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.722020][T11571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.735860][T11571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.776794][T11571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.798787][T11571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.845237][T11571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.861075][T11571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.875508][T11571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.891862][T11571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.904207][T11571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.952681][T11571] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.989974][T11571] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.026826][T11571] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.056482][T11571] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.280448][ T999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.303459][ T999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.380295][ T999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.390542][ T999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.995892][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 339.005005][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 339.015966][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 339.026539][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 339.043874][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 339.051926][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 339.172437][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.290529][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.402907][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.544777][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.869702][T11853] chnl_net:caif_netlink_parms(): no params data found [ 340.545358][T11853] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.562902][T11853] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.576632][T11853] bridge_slave_0: entered allmulticast mode [ 340.587933][T11853] bridge_slave_0: entered promiscuous mode [ 340.737334][T11853] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.754236][T11853] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.766978][T11853] bridge_slave_1: entered allmulticast mode [ 340.797894][T11853] bridge_slave_1: entered promiscuous mode [ 341.038662][T11853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.083326][T11853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.105583][ T5782] Bluetooth: hci2: command tx timeout [ 341.438796][T11853] team0: Port device team_slave_0 added [ 341.550884][T11853] team0: Port device team_slave_1 added [ 341.713296][T11853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.734015][T11853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.762760][T11853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.794733][T11853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.837793][T11853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.876857][T11853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.963810][ T49] hsr_slave_0: left promiscuous mode [ 342.003905][ T49] hsr_slave_1: left promiscuous mode [ 342.021592][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.046482][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.107332][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.115025][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.260258][ T49] veth1_macvtap: left promiscuous mode [ 342.265891][ T49] veth0_macvtap: left promiscuous mode [ 342.290134][ T49] veth1_vlan: left promiscuous mode [ 342.295543][ T49] veth0_vlan: left promiscuous mode [ 343.177088][ T5782] Bluetooth: hci2: command tx timeout [ 343.276258][ T49] team0 (unregistering): Port device team_slave_1 removed [ 343.321390][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.368989][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.698577][ T49] bond0 (unregistering): Released all slaves [ 343.752719][T11935] netdevsim netdevsim0: Direct firmware load for failed with error -2 [ 343.761374][T11935] netdevsim netdevsim0: Falling back to sysfs fallback for: [ 343.959054][T11853] hsr_slave_0: entered promiscuous mode [ 343.970747][T11853] hsr_slave_1: entered promiscuous mode [ 344.734520][T11981] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 344.759921][T11981] netdevsim netdevsim1: Falling back to sysfs fallback for: [ 345.265372][ T5782] Bluetooth: hci2: command tx timeout [ 345.509812][T11853] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 345.531728][T11853] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 345.587459][T11853] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 345.615551][T11853] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 345.941544][T11853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.015466][T11853] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.070423][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.077788][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.205197][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.212483][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.051302][T12044] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 347.077014][T12044] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 347.149383][T11853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.266042][T11853] veth0_vlan: entered promiscuous mode [ 347.318943][T11853] veth1_vlan: entered promiscuous mode [ 347.337151][ T5782] Bluetooth: hci2: command tx timeout [ 347.394793][T11853] veth0_macvtap: entered promiscuous mode [ 347.411892][T11853] veth1_macvtap: entered promiscuous mode [ 347.441978][T11853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.474635][T11853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.508535][T11853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.525996][T11853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.537964][T11853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.549067][T11853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.561049][T11853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.615489][T11853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.638025][T11853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.676436][T11853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.707186][T11853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.727265][T11853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.752387][T11853] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.768011][T11853] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.780289][T11853] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.790418][T11853] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.988728][ T2991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.016445][ T2991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.106948][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.114839][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.315819][T12070] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 348.422726][T12081] netlink: 'syz.3.2479': attribute type 29 has an invalid length. [ 348.432405][T12070] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 348.467643][T12081] netlink: 'syz.3.2479': attribute type 29 has an invalid length. [ 348.497722][T12081] netlink: 'syz.3.2479': attribute type 29 has an invalid length. [ 348.786694][ T5782] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3 [ 349.419382][T12107] netlink: 'syz.3.2557': attribute type 7 has an invalid length. [ 349.999373][ T51] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3 [ 350.200278][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 350.221518][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 350.278479][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 350.304344][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 350.326883][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 350.334375][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 350.361263][ T3509] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.574662][ T3509] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.781283][ T3509] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.834944][T12148] netlink: 'syz.2.2570': attribute type 7 has an invalid length. [ 350.943020][ T3509] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.128549][ T51] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 351.450081][T12126] chnl_net:caif_netlink_parms(): no params data found [ 351.632096][ T3509] bridge0: port 3(ip6gretap0) entered disabled state [ 351.701477][ T3509] ip6gretap0 (unregistering): left allmulticast mode [ 351.708419][ T3509] ip6gretap0 (unregistering): left promiscuous mode [ 351.715149][ T3509] bridge0: port 3(ip6gretap0) entered disabled state [ 351.890313][T12194] netlink: 'syz.1.2581': attribute type 7 has an invalid length. [ 352.065848][T12126] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.092965][T12126] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.112383][T12126] bridge_slave_0: entered allmulticast mode [ 352.133823][T12126] bridge_slave_0: entered promiscuous mode [ 352.238967][ T51] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3 [ 352.252396][T12126] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.293523][T12126] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.334292][T12126] bridge_slave_1: entered allmulticast mode [ 352.350357][T12126] bridge_slave_1: entered promiscuous mode [ 352.376639][ T51] Bluetooth: hci1: command tx timeout [ 352.665804][T12222] netlink: 'syz.3.2591': attribute type 29 has an invalid length. [ 352.689189][T12126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.706349][T12222] netlink: 'syz.3.2591': attribute type 29 has an invalid length. [ 352.719785][T12126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.731258][T12219] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2590'. [ 352.749743][T12224] netlink: 'syz.3.2591': attribute type 29 has an invalid length. [ 352.815663][T12222] netlink: 'syz.3.2591': attribute type 29 has an invalid length. [ 352.943417][T12126] team0: Port device team_slave_0 added [ 352.973436][T12126] team0: Port device team_slave_1 added [ 353.074775][T12126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.081945][T12126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.114726][T12126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.172077][T12126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.182025][T12126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.212376][T12126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.295783][T12126] hsr_slave_0: entered promiscuous mode [ 353.302458][T12126] hsr_slave_1: entered promiscuous mode [ 353.309386][T12126] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 353.317367][T12126] Cannot create hsr debugfs directory [ 353.456803][ T3509] hsr_slave_0: left promiscuous mode [ 353.462884][ T3509] hsr_slave_1: left promiscuous mode [ 353.473887][ T3509] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.483813][ T3509] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.492300][ T3509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.500513][ T3509] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.509253][ T3509] veth1_to_team: left allmulticast mode [ 353.514855][ T3509] veth1_to_team: left promiscuous mode [ 353.521030][ T3509] bridge0: port 4(veth1_to_team) entered disabled state [ 353.531251][ T3509] bridge_slave_1: left allmulticast mode [ 353.537069][ T3509] bridge_slave_1: left promiscuous mode [ 353.542793][ T3509] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.553392][ T3509] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.578236][ T3509] veth1_macvtap: left promiscuous mode [ 353.583797][ T3509] veth0_macvtap: left promiscuous mode [ 353.590349][ T3509] veth1_vlan: left promiscuous mode [ 353.595738][ T3509] veth0_vlan: left promiscuous mode [ 354.156583][ T3509] team0 (unregistering): Port device team_slave_1 removed [ 354.201604][ T3509] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.242952][ T3509] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.458276][ T51] Bluetooth: hci1: command tx timeout [ 354.557305][ T3509] bond0 (unregistering): Released all slaves [ 355.123398][T12126] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 355.136746][T12126] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 355.148810][T12126] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 355.160695][T12126] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 355.271082][T12126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.294881][T12126] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.313735][ T3509] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.320979][ T3509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.338183][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.345394][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.425014][T12126] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 355.685448][T12126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.737910][T12126] veth0_vlan: entered promiscuous mode [ 355.760829][T12126] veth1_vlan: entered promiscuous mode [ 355.813372][T12126] veth0_macvtap: entered promiscuous mode [ 355.834518][T12126] veth1_macvtap: entered promiscuous mode [ 355.865383][T12126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.876244][T12126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.887601][T12126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.898612][T12126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.911490][T12126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.922336][T12126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.939084][T12126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.950564][T12126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.962022][T12126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.972403][T12126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.983007][T12126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.993370][T12126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.004320][T12126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.016073][T12126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.047154][T12126] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.055936][T12126] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.064931][T12126] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.074320][T12126] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.164640][ T999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.178944][ T999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.222307][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.231694][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.376854][T12267] netlink: 'syz.1.2599': attribute type 29 has an invalid length. [ 356.385052][T12267] netlink: 'syz.1.2599': attribute type 29 has an invalid length. [ 356.440516][T12267] netlink: 'syz.1.2599': attribute type 29 has an invalid length. [ 356.455613][T12267] netlink: 'syz.1.2599': attribute type 29 has an invalid length. [ 356.522468][T12272] netlink: 'syz.0.2592': attribute type 7 has an invalid length. [ 356.537078][ T51] Bluetooth: hci1: command tx timeout [ 356.769544][ T51] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3 [ 357.125875][T12295] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2604'. [ 357.258744][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 357.529304][ T5782] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3 [ 358.311024][ T5782] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 358.377851][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 358.616842][ T5785] Bluetooth: hci1: command tx timeout [ 358.869476][T12362] netlink: 'syz.3.2632': attribute type 29 has an invalid length. [ 358.915560][T12362] netlink: 'syz.3.2632': attribute type 29 has an invalid length. [ 358.960272][T12366] netlink: 'syz.3.2632': attribute type 29 has an invalid length. [ 358.987672][T12369] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2634'. [ 359.285588][ T5785] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 359.666512][T12396] netlink: 'syz.1.2645': attribute type 29 has an invalid length. [ 359.708022][T12396] netlink: 'syz.1.2645': attribute type 29 has an invalid length. [ 360.183721][ T5785] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3 [ 362.194293][T12478] validate_nla: 1 callbacks suppressed [ 362.194311][T12478] netlink: 'syz.3.2676': attribute type 29 has an invalid length. [ 362.224816][T12478] netlink: 'syz.3.2676': attribute type 29 has an invalid length. [ 362.246217][T12478] netlink: 'syz.3.2676': attribute type 29 has an invalid length. [ 363.083427][T12506] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.2686'. [ 363.656570][ T5782] Bluetooth: hci1: command 0x0406 tx timeout [ 363.790966][T12533] netlink: 'syz.2.2698': attribute type 21 has an invalid length. [ 363.801748][T12533] netlink: 'syz.2.2698': attribute type 20 has an invalid length. [ 364.677841][T12568] syzkaller0: entered promiscuous mode [ 364.697713][T12568] syzkaller0: entered allmulticast mode [ 365.846188][T12597] syzkaller0: entered promiscuous mode [ 365.852175][T12597] syzkaller0: entered allmulticast mode [ 365.879274][T12605] netlink: 'syz.3.2723': attribute type 10 has an invalid length. [ 365.933805][T12605] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 368.339370][ T5785] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 369.267566][ T5785] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 369.342974][T12670] syzkaller0: entered promiscuous mode [ 369.356642][T12670] syzkaller0: entered allmulticast mode [ 369.368438][T12675] netlink: 'syz.2.2752': attribute type 10 has an invalid length. [ 369.390678][T12675] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 372.223852][ T5785] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3 [ 372.412981][ T5785] Bluetooth: hci2: unexpected subevent 0x05 length: 150 > 12 [ 372.554228][T12755] netlink: 'syz.3.2791': attribute type 29 has an invalid length. [ 372.562568][T12755] netlink: 'syz.3.2791': attribute type 29 has an invalid length. [ 372.572498][T12755] netlink: 'syz.3.2791': attribute type 29 has an invalid length. [ 372.901531][ T5785] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3 [ 373.591508][ T5785] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 374.203323][T12821] netlink: 'syz.3.2818': attribute type 29 has an invalid length. [ 374.221236][T12821] netlink: 'syz.3.2818': attribute type 29 has an invalid length. [ 374.236839][T12821] netlink: 'syz.3.2818': attribute type 29 has an invalid length. [ 374.253116][T12821] netlink: 'syz.3.2818': attribute type 29 has an invalid length. [ 374.456683][ T5785] Bluetooth: hci2: command 0x0406 tx timeout [ 377.414440][T12879] syzkaller0: entered promiscuous mode [ 377.439220][T12879] syzkaller0: entered allmulticast mode [ 377.483169][T12887] netlink: 'syz.0.2838': attribute type 10 has an invalid length. [ 377.871150][T12887] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 378.876199][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.882705][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.821280][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 380.210740][ T5785] Bluetooth: hci2: unexpected subevent 0x05 length: 150 > 12 [ 381.723707][ T5785] Bluetooth: hci0: unexpected subevent 0x05 length: 150 > 12 [ 382.283416][ T5785] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 382.296691][ T5785] Bluetooth: hci2: command 0x0406 tx timeout [ 383.084790][T12984] syzkaller0: entered promiscuous mode [ 383.090649][T12984] syzkaller0: entered allmulticast mode [ 383.119731][ T5785] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 383.742311][ T5785] Bluetooth: hci0: command 0x0406 tx timeout [ 383.932240][ T5785] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 386.261398][ T5785] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 390.624067][T13017] veth0_vlan: entered allmulticast mode [ 391.628340][ T5785] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 393.150931][ T5785] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 394.071162][ T5785] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 395.509490][ T5785] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 397.373680][ T5785] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 402.683441][T13244] syzkaller0: entered promiscuous mode [ 402.720030][T13244] syzkaller0: entered allmulticast mode [ 407.687805][T13285] sit0: entered allmulticast mode [ 407.748507][T13286] sit0: entered promiscuous mode [ 408.344167][T13288] syzkaller0: entered promiscuous mode [ 408.350473][T13288] syzkaller0: entered allmulticast mode [ 412.449875][T13346] syzkaller0: entered promiscuous mode [ 412.460475][T13346] syzkaller0: entered allmulticast mode [ 415.447802][T13385] syzkaller0: entered promiscuous mode [ 415.453644][T13385] syzkaller0: entered allmulticast mode [ 427.698362][T13596] sit0: entered allmulticast mode [ 428.464439][T13598] sit0: entered promiscuous mode [ 429.449165][ T5785] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 430.309211][ T5785] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 431.023004][ T5785] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 436.717388][T13769] sit0: left promiscuous mode [ 437.291424][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 438.422146][T13786] nr0: port 1(hsr0) entered blocking state [ 438.428382][T13786] nr0: port 1(hsr0) entered disabled state [ 438.434513][T13786] hsr0: entered allmulticast mode [ 438.440379][T13786] hsr_slave_0: entered allmulticast mode [ 438.446149][T13786] hsr_slave_1: entered allmulticast mode [ 438.454005][T13786] hsr0: entered promiscuous mode [ 438.523544][T13793] wg2: entered promiscuous mode [ 438.538298][T13793] wg2: entered allmulticast mode [ 440.309511][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.315936][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.732581][T13835] syzkaller0: entered promiscuous mode [ 441.746636][T13835] syzkaller0: entered allmulticast mode [ 442.002037][T13845] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.009742][T13845] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.022480][T13845] bridge0: entered allmulticast mode [ 447.140799][ T5782] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 447.150068][ T5782] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 447.171994][ T5782] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 447.180244][ T5782] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 447.201188][ T5782] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 447.208721][ T5782] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 448.175095][T13873] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.182708][T13873] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.193632][T13873] bridge0: entered allmulticast mode [ 449.267252][ T5782] Bluetooth: hci4: command tx timeout [ 449.289424][T13865] chnl_net:caif_netlink_parms(): no params data found [ 449.811976][T13865] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.863102][T13865] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.872130][T13865] bridge_slave_0: entered allmulticast mode [ 449.883623][T13865] bridge_slave_0: entered promiscuous mode [ 449.952921][T13865] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.970650][T13865] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.016975][T13865] bridge_slave_1: entered allmulticast mode [ 450.024773][T13865] bridge_slave_1: entered promiscuous mode [ 450.083854][T13865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.154133][T13865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.296129][T13865] team0: Port device team_slave_0 added [ 450.314261][T13865] team0: Port device team_slave_1 added [ 450.393329][T13865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.421092][T13865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.500454][T13865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.528355][T13865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.545672][T13865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.583249][T13865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.664489][T13865] hsr_slave_0: entered promiscuous mode [ 450.689433][T13865] hsr_slave_1: entered promiscuous mode [ 450.709480][T13865] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 450.729319][T13865] Cannot create hsr debugfs directory [ 450.904386][T13905] syzkaller0: entered promiscuous mode [ 450.924032][T13905] syzkaller0: entered allmulticast mode [ 451.352913][ T5785] Bluetooth: hci4: command tx timeout [ 451.478730][T13918] netlink: 'syz.0.3216': attribute type 29 has an invalid length. [ 452.625878][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 452.869294][T13918] netlink: 'syz.0.3216': attribute type 29 has an invalid length. [ 453.079510][T13865] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 453.172527][T13865] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 453.247008][T13865] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 453.313521][T13865] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 453.417183][ T5782] Bluetooth: hci4: command tx timeout [ 453.640469][T13865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.779946][T13865] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.801866][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.809167][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.843451][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.850742][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.044711][T13944] netlink: 'syz.2.3226': attribute type 29 has an invalid length. [ 454.149888][T13941] syzkaller0: entered promiscuous mode [ 454.161306][T13941] syzkaller0: entered allmulticast mode [ 454.169155][T13944] netlink: 'syz.2.3226': attribute type 29 has an invalid length. [ 454.177795][T13947] netlink: 'syz.2.3226': attribute type 29 has an invalid length. [ 455.500578][ T5782] Bluetooth: hci4: command tx timeout [ 456.304899][T13865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.956135][T13865] veth0_vlan: entered promiscuous mode [ 456.979453][T13865] veth1_vlan: entered promiscuous mode [ 457.038447][T13865] veth0_macvtap: entered promiscuous mode [ 457.060774][T13865] veth1_macvtap: entered promiscuous mode [ 457.096110][T13865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.110742][T13865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.121214][T13865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.132270][T13865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.142716][T13865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.153638][T13865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.164004][T13865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.187841][T13865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.445806][T13865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.480784][T13865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.493846][T13865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.520684][T13865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.533036][T13865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.573535][T13865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.598442][T13865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.616769][T13865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.666037][T13865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.704235][T13865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.774166][T13865] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.805835][T13865] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.830427][T13865] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.855967][T13865] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.826801][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.926521][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.953116][ T999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.986418][ T999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.572495][T13991] syzkaller0: entered promiscuous mode [ 460.600557][T13991] syzkaller0: entered allmulticast mode [ 464.167585][T14030] vlan0: entered allmulticast mode [ 464.172796][T14030] veth0_vlan: entered allmulticast mode [ 465.359010][T14052] syzkaller0: entered promiscuous mode [ 465.373650][T14052] syzkaller0: entered allmulticast mode [ 467.737635][T14064] syzkaller0: entered promiscuous mode [ 467.743370][T14064] syzkaller0: entered allmulticast mode [ 470.134005][T14092] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 470.140834][T14092] syzkaller0: linktype set to 778 [ 470.349309][T14096] sit0: entered allmulticast mode [ 471.257732][T14115] syzkaller0: entered promiscuous mode [ 471.288744][T14115] syzkaller0: entered allmulticast mode [ 473.106680][ T5785] Bluetooth: hci1: command 0x0406 tx timeout [ 475.206307][T14154] sit0: left promiscuous mode [ 477.958310][T14194] syzkaller0: entered promiscuous mode [ 477.963863][T14194] syzkaller0: entered allmulticast mode [ 482.075286][ T5782] Bluetooth: hci0: unexpected event 0x14 length: 15 > 6 [ 483.499700][T14275] nr0: port 1(hsr0) entered blocking state [ 483.553393][T14275] nr0: port 1(hsr0) entered disabled state [ 483.582413][T14275] hsr0: entered allmulticast mode [ 483.617323][T14275] hsr_slave_0: entered allmulticast mode [ 483.660758][T14275] hsr_slave_1: entered allmulticast mode [ 483.907176][T14275] hsr0: entered promiscuous mode [ 485.027498][ T5782] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4 [ 485.690183][T14318] sit0: entered promiscuous mode [ 488.560623][T14364] netlink: 'syz.2.3370': attribute type 29 has an invalid length. [ 488.657298][T14364] netlink: 'syz.2.3370': attribute type 29 has an invalid length. [ 488.671414][T14365] netlink: 'syz.2.3370': attribute type 29 has an invalid length. [ 488.700411][T14364] netlink: 'syz.2.3370': attribute type 29 has an invalid length. [ 488.984769][ T5782] Bluetooth: hci4: unexpected event 0x05 length: 151 > 4 [ 489.323833][T14389] sit0: entered promiscuous mode [ 489.528939][T14395] netlink: 'syz.1.3381': attribute type 29 has an invalid length. [ 489.555094][T14395] netlink: 'syz.1.3381': attribute type 29 has an invalid length. [ 489.595329][T14396] netlink: 'syz.1.3381': attribute type 29 has an invalid length. [ 489.614448][T14395] netlink: 'syz.1.3381': attribute type 29 has an invalid length. [ 489.858505][ T5782] Bluetooth: hci0: unexpected event 0x05 length: 151 > 4 [ 490.425909][T14422] netlink: 'syz.2.3391': attribute type 29 has an invalid length. [ 490.476948][T14422] netlink: 'syz.2.3391': attribute type 29 has an invalid length. [ 490.978709][T14430] sit0: entered promiscuous mode [ 491.200594][ T5782] Bluetooth: hci1: unexpected event 0x05 length: 151 > 4 [ 491.826616][T14455] sit0: left promiscuous mode [ 491.862389][ T5782] Bluetooth: hci4: unexpected event 0x05 length: 151 > 4 [ 492.101480][T14458] sit0: entered promiscuous mode [ 492.356789][T14468] nr0: port 1(hsr0) entered blocking state [ 492.380524][T14468] nr0: port 1(hsr0) entered disabled state [ 492.408705][T14468] hsr0: entered allmulticast mode [ 492.475897][T14468] hsr_slave_0: entered allmulticast mode [ 492.488240][T14468] hsr_slave_1: entered allmulticast mode [ 492.673484][T14468] hsr0: entered promiscuous mode [ 493.578663][ T5782] Bluetooth: hci1: unexpected event 0x05 length: 151 > 4 [ 493.586432][T14493] validate_nla: 7 callbacks suppressed [ 493.586448][T14493] netlink: 'syz.1.3413': attribute type 29 has an invalid length. [ 493.615404][T14498] netlink: 'syz.1.3413': attribute type 29 has an invalid length. [ 493.684616][T14493] netlink: 'syz.1.3413': attribute type 29 has an invalid length. [ 494.443187][T14520] netlink: 'syz.4.3426': attribute type 29 has an invalid length. [ 494.466242][T14520] netlink: 'syz.4.3426': attribute type 29 has an invalid length. [ 494.497610][T14520] netlink: 'syz.4.3426': attribute type 29 has an invalid length. [ 494.512273][T14520] netlink: 'syz.4.3426': attribute type 29 has an invalid length. [ 494.594086][T14518] syzkaller0: entered promiscuous mode [ 494.614199][T14518] syzkaller0: entered allmulticast mode [ 495.502099][T14536] syzkaller0: entered promiscuous mode [ 495.513370][T14536] syzkaller0: entered allmulticast mode [ 495.666643][T14546] netlink: 'syz.4.3436': attribute type 29 has an invalid length. [ 498.390602][T14546] netlink: 'syz.4.3436': attribute type 29 has an invalid length. [ 498.703540][T14561] sit0: entered allmulticast mode [ 498.751845][T14562] sit0: entered promiscuous mode [ 499.702739][ T5782] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 499.815083][T14582] : port 1(ip6gretap0) entered blocking state [ 499.877930][T14582] : port 1(ip6gretap0) entered disabled state [ 499.884412][T14582] ip6gretap0: entered allmulticast mode [ 499.956543][T14582] ip6gretap0: entered promiscuous mode [ 500.623428][T14590] syzkaller0: entered promiscuous mode [ 500.642879][T14590] syzkaller0: entered allmulticast mode [ 501.999523][ T5782] Bluetooth: hci4: command tx timeout [ 502.007176][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.013598][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.118357][ T5782] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 504.965543][T14664] syzkaller0: entered promiscuous mode [ 505.036058][T14664] syzkaller0: entered allmulticast mode [ 509.338027][T14705] vlan0: entered allmulticast mode [ 509.343245][T14705] veth0_vlan: entered allmulticast mode [ 510.484286][T14738] vlan0: entered allmulticast mode [ 510.493155][T14738] veth0_vlan: entered allmulticast mode [ 510.625067][T14742] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 511.864660][T14780] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 511.896787][T14780] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 512.083072][T14775] syzkaller0: entered promiscuous mode [ 512.092929][T14775] syzkaller0: entered allmulticast mode [ 513.106789][ T49] wlan1: Trigger new scan to find an IBSS to join [ 516.137930][ T42] wlan1: Trigger new scan to find an IBSS to join [ 516.650649][T14850] netlink: 'syz.4.3550': attribute type 29 has an invalid length. [ 518.555357][T14850] netlink: 'syz.4.3550': attribute type 29 has an invalid length. [ 519.149107][T14860] vlan0: entered allmulticast mode [ 519.160703][T14860] veth0_vlan: entered allmulticast mode [ 519.179197][ T49] wlan1: Trigger new scan to find an IBSS to join [ 519.364791][T14873] netlink: 'syz.0.3560': attribute type 29 has an invalid length. [ 519.405229][T14873] netlink: 'syz.0.3560': attribute type 29 has an invalid length. [ 519.447092][T14878] netlink: 'syz.0.3560': attribute type 29 has an invalid length. [ 520.211628][T13310] wlan1: Creating new IBSS network, BSSID de:80:a6:86:c0:8e [ 520.552329][ T5782] Bluetooth: hci0: unexpected event 0x30 length: 151 > 3 [ 520.768068][ T5782] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 521.976140][T14945] veth1_to_bond: entered allmulticast mode [ 523.096768][ T5785] Bluetooth: hci1: command 0x206a tx timeout [ 523.102970][ T5782] Bluetooth: hci1: Opcode 0x206a failed: -110 [ 523.565605][ T5782] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 525.657236][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 526.100367][T15067] veth1_to_bond: entered allmulticast mode [ 527.563771][ T42] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.861910][ T42] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.134850][ T42] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.385411][ T42] bond0: (slave netdevsim0): Releasing backup interface [ 528.426176][ T42] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.218115][T15178] syzkaller0: entered promiscuous mode [ 530.245699][T15178] syzkaller0: entered allmulticast mode [ 531.238666][ T5782] Bluetooth: hci0: unexpected subevent 0x19 length: 150 > 28 [ 531.246168][ T5782] Bluetooth: hci0: Unable to find connection with handle 0x0000 [ 535.196628][ T42] hsr_slave_0: left promiscuous mode [ 535.252093][ T42] hsr_slave_1: left promiscuous mode [ 535.301475][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.321767][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.377711][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.385302][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.401653][ T42] bridge_slave_1: left allmulticast mode [ 535.412634][ T42] bridge_slave_1: left promiscuous mode [ 535.431308][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.461985][ T42] bridge_slave_0: left allmulticast mode [ 535.470189][ T42] bridge_slave_0: left promiscuous mode [ 535.481256][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.561753][ T42] veth1_macvtap: left promiscuous mode [ 535.580131][ T42] veth0_macvtap: left promiscuous mode [ 535.602934][ T42] veth1_vlan: left promiscuous mode [ 535.782694][ T5782] Bluetooth: hci3: unexpected subevent 0x19 length: 150 > 28 [ 535.790538][ T5782] Bluetooth: hci3: Invalid connection link type handle 0x0000 [ 536.609488][ T42] team0 (unregistering): Port device team_slave_1 removed [ 536.656830][ T42] team0 (unregistering): Port device team_slave_0 removed [ 536.705784][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 536.751772][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 537.091115][ T42] bond0 (unregistering): Released all slaves [ 539.876155][ T5782] Bluetooth: hci4: unexpected subevent 0x19 length: 150 > 28 [ 539.884476][ T5782] Bluetooth: hci4: Invalid connection link type handle 0x0000 [ 541.397771][T15377] bridge_slave_1: left allmulticast mode [ 541.417820][T15377] bridge_slave_1: left promiscuous mode [ 541.425291][T15377] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.444172][ T5782] Bluetooth: hci4: unexpected subevent 0x1a length: 150 > 6 [ 541.674495][T15377] bridge_slave_0: left allmulticast mode [ 541.747115][T15377] bridge_slave_0: left promiscuous mode [ 541.797327][T15377] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.105617][ T5782] Bluetooth: hci1: unexpected subevent 0x1a length: 150 > 6 [ 547.757677][T15468] syzkaller0: entered promiscuous mode [ 547.773525][T15468] syzkaller0: entered allmulticast mode [ 550.614970][ T5782] Bluetooth: hci4: unexpected subevent 0x1a length: 150 > 6 [ 559.179571][T15546] syzkaller0: entered promiscuous mode [ 559.185512][T15546] syzkaller0: entered allmulticast mode [ 563.183036][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.189876][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.117279][T15607] ªªªªªª: renamed from vlan0 [ 567.164072][ T5782] Bluetooth: hci4: unexpected subevent 0x19 length: 150 > 28 [ 567.171684][ T5782] Bluetooth: hci4: Invalid connection link type handle 0x0000 [ 567.485557][T15636] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.495942][T15636] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.536422][T15636] bridge0: entered allmulticast mode [ 567.621519][T15646] bridge_slave_1: left allmulticast mode [ 567.656354][T15646] bridge_slave_1: left promiscuous mode [ 567.725586][T15646] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.883502][T15646] bridge_slave_0: left allmulticast mode [ 567.945372][T15646] bridge_slave_0: left promiscuous mode [ 567.996645][T15646] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.597897][T15662] syzkaller0: entered promiscuous mode [ 569.603587][T15662] syzkaller0: entered allmulticast mode [ 570.376643][ T5785] Bluetooth: hci4: command 0x0406 tx timeout [ 570.530638][ T5782] Bluetooth: hci1: unexpected subevent 0x19 length: 150 > 28 [ 570.538484][ T5782] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 574.761061][T15708] ªªªªªª: renamed from vlan0 [ 577.164693][T15754] bridge_slave_1: left allmulticast mode [ 577.199004][T15754] bridge_slave_1: left promiscuous mode [ 577.261659][T15754] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.537306][T15754] bridge_slave_0: left allmulticast mode [ 577.545417][T15754] bridge_slave_0: left promiscuous mode [ 577.595806][T15754] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.045565][T15834] syzkaller0: entered promiscuous mode [ 581.063101][T15834] syzkaller0: entered allmulticast mode [ 581.567939][T15848] syzkaller0: entered promiscuous mode [ 581.573499][T15848] syzkaller0: entered allmulticast mode [ 586.306401][T15894] ªªªªªª: renamed from vlan0 [ 587.083795][T15918] syzkaller0: entered promiscuous mode [ 587.097442][T15918] syzkaller0: entered allmulticast mode [ 587.415039][ T5782] Bluetooth: hci4: unexpected subevent 0x1a length: 150 > 6 [ 592.267736][ T5782] Bluetooth: hci1: unexpected subevent 0x1a length: 150 > 6 [ 595.171105][ T5782] Bluetooth: hci4: unexpected subevent 0x1a length: 150 > 6 [ 595.832199][T16044] syzkaller0: entered promiscuous mode [ 595.840427][T16044] syzkaller0: entered allmulticast mode [ 597.253617][ T5782] Bluetooth: hci3: unexpected subevent 0x1a length: 150 > 6 [ 600.169656][T16091] sit0: left promiscuous mode [ 601.802741][ T5782] Bluetooth: hci0: unexpected subevent 0x1a length: 150 > 6 [ 602.003387][T16093] sit0: entered promiscuous mode [ 602.630458][T16106] nr0: port 1(hsr0) entered blocking state [ 602.663873][T16106] nr0: port 1(hsr0) entered disabled state [ 602.711336][T16106] hsr0: entered allmulticast mode [ 602.725958][T16106] hsr_slave_0: entered allmulticast mode [ 602.736024][T16106] hsr_slave_1: entered allmulticast mode [ 602.959716][T16106] hsr0: entered promiscuous mode [ 605.020824][ T5782] Bluetooth: hci4: unexpected subevent 0x1a length: 150 > 6 [ 605.659492][T16155] wg2: entered promiscuous mode [ 605.667167][T16155] wg2: entered allmulticast mode [ 607.791636][T16173] macsec0: entered promiscuous mode [ 607.798811][T16173] macsec0: entered allmulticast mode [ 607.804170][T16173] veth1_macvtap: entered allmulticast mode [ 607.958443][ T5782] Bluetooth: hci1: unexpected subevent 0x19 length: 150 > 28 [ 607.965926][ T5782] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 609.205708][T16197] sit0: left promiscuous mode [ 610.192409][T16198] sit0: entered promiscuous mode [ 610.226890][ T5782] Bluetooth: hci4: unexpected subevent 0x19 length: 150 > 28 [ 610.234359][ T5782] Bluetooth: hci4: Invalid connection link type handle 0x0000 [ 612.828488][ T5782] Bluetooth: hci4: unexpected subevent 0x19 length: 150 > 28 [ 612.836016][ T5782] Bluetooth: hci4: Invalid connection link type handle 0x0000 [ 612.883951][T16261] syzkaller0: entered promiscuous mode [ 612.889708][T16261] syzkaller0: entered allmulticast mode [ 613.130819][T16272] syzkaller0: entered promiscuous mode [ 613.146874][T16272] syzkaller0: entered allmulticast mode [ 613.208284][T16274] syzkaller0: entered promiscuous mode [ 613.215399][T16274] syzkaller0: entered allmulticast mode [ 617.075923][ T5782] Bluetooth: hci4: unexpected subevent 0x19 length: 150 > 28 [ 617.083505][ T5782] Bluetooth: hci4: Invalid connection link type handle 0x0000 [ 620.899329][ T5782] Bluetooth: hci4: unexpected subevent 0x19 length: 150 > 28 [ 620.906891][ T5782] Bluetooth: hci4: Invalid connection link type handle 0x0000 [ 622.763945][ T5782] Bluetooth: hci4: unexpected subevent 0x19 length: 150 > 28 [ 622.771489][ T5782] Bluetooth: hci4: Invalid connection link type handle 0x0000 [ 624.630343][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.636781][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.957896][T16469] [ 631.960591][T16469] ============================= [ 631.965505][T16469] WARNING: suspicious RCU usage [ 631.970851][T16469] syzkaller #0 Not tainted [ 631.975315][T16469] ----------------------------- [ 631.980657][T16469] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 631.989264][T16469] [ 631.989264][T16469] other info that might help us debug this: [ 631.989264][T16469] [ 631.999751][T16469] [ 631.999751][T16469] rcu_scheduler_active = 2, debug_locks = 1 [ 632.007964][T16469] 1 lock held by syz.2.4000/16469: [ 632.013120][T16469] #0: ffffffff8d132340 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 632.023639][T16469] [ 632.023639][T16469] stack backtrace: [ 632.029816][T16469] CPU: 1 PID: 16469 Comm: syz.2.4000 Not tainted syzkaller #0 [ 632.037335][T16469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 632.047469][T16469] Call Trace: [ 632.050817][T16469] [ 632.053869][T16469] dump_stack_lvl+0x18c/0x250 [ 632.058619][T16469] ? show_regs_print_info+0x20/0x20 [ 632.063887][T16469] ? load_image+0x420/0x420 [ 632.068458][T16469] lockdep_rcu_suspicious+0x1e1/0x300 [ 632.073894][T16469] get_callchain_entry+0x2a9/0x3c0 [ 632.079066][T16469] get_perf_callchain+0xc6/0x510 [ 632.084060][T16469] ? put_callchain_entry+0xb0/0xb0 [ 632.089222][T16469] ? do_raw_spin_unlock+0x121/0x230 [ 632.094486][T16469] ? futex_q_unlock+0x23/0x30 [ 632.099249][T16469] ? futex_wait_setup+0x20b/0x270 [ 632.104332][T16469] __bpf_get_stack+0x2e4/0x540 [ 632.109170][T16469] ? stack_map_get_build_id_offset+0x720/0x720 [ 632.115397][T16469] ? __cant_sleep+0x220/0x220 [ 632.120133][T16469] ? bpf_prog_14d9fb3786f83342+0x45/0x49 [ 632.125841][T16469] bpf_get_stack_raw_tp+0x1a9/0x210 [ 632.131109][T16469] bpf_prog_14d9fb3786f83342+0x45/0x49 [ 632.136630][T16469] bpf_prog_run_pin_on_cpu+0xaa/0x150 [ 632.142066][T16469] bpf_prog_test_run_syscall+0x317/0x4a0 [ 632.147762][T16469] ? sock_gen_cookie+0x60/0x60 [ 632.152604][T16469] ? sock_gen_cookie+0x60/0x60 [ 632.157428][T16469] bpf_prog_test_run+0x321/0x390 [ 632.162421][T16469] __sys_bpf+0x49d/0x890 [ 632.166727][T16469] ? bpf_link_show_fdinfo+0x390/0x390 [ 632.172180][T16469] ? lock_chain_count+0x20/0x20 [ 632.177101][T16469] __x64_sys_bpf+0x7c/0x90 [ 632.181570][T16469] do_syscall_64+0x55/0xb0 [ 632.186041][T16469] ? clear_bhb_loop+0x40/0x90 [ 632.190764][T16469] ? clear_bhb_loop+0x40/0x90 [ 632.195500][T16469] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 632.201453][T16469] RIP: 0033:0x7f139839ce59 [ 632.205933][T16469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.225692][T16469] RSP: 002b:00007f13991bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 632.234163][T16469] RAX: ffffffffffffffda RBX: 00007f1398615fa0 RCX: 00007f139839ce59 [ 632.242187][T16469] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 632.250217][T16469] RBP: 00007f1398432d6f R08: 0000000000000000 R09: 0000000000000000 [ 632.258240][T16469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 632.266262][T16469] R13: 00007f1398616038 R14: 00007f1398615fa0 R15: 00007ffe914e4638 [ 632.274308][T16469]