last executing test programs: 3m33.002014243s ago: executing program 0 (id=821): r0 = socket$kcm(0x29, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x17, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000180100002020001000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x0, 0xe, 0x0, &(0x7f0000000180)="1bb5a647e83f5ed222fb67bd5830", 0x0, 0x8, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000000280)="d7868b5f9e217959dcce6bfe73d1f3fd8c91fabbe6e57fe72684a6cd542cff29686829b5bb58dc58f85b17c6efddec9ed40021ad90820dbff337d6ef9fb1710b3a4448e4027f6981e245d343fd84400008e5ac9c6c21db1fb17b9c6600dfaf44045168e098090d30da8d801372675658d8b1a90d3a3109ba5219790e8ac11cf956d6d178e35092a4a3af68e670a7e7e52862067cfd7bb7cfc0675912239a1d09b89418e11f5e8d0e8432f3fc823528b8e3b641695b0946e2f1bdbcad97a8d31e", 0x4}, 0x50) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7a, 0x1, @perf_bp={0x0}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r8, 0x0, 0xe, 0x0, &(0x7f0000000300)="8954668d15b9029eeb82ca3d4376", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) write$cgroup_pressure(r0, 0x0, 0xeffd) 3m32.812480356s ago: executing program 0 (id=823): recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x2, &(0x7f0000000100)=@raw=[@cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffc}], &(0x7f0000000140)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000180)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=[r0, r0, r1, r1, r0], &(0x7f0000000280)=[{0x3, 0x4, 0xc, 0xd}, {0x1, 0x4, 0xf, 0xa}, {0x2, 0x1, 0xa, 0x4}, {0x5, 0x4, 0xb, 0x6}], 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='xprtrdma_post_send\x00', r2, 0x0, 0x40}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00'}) socketpair(0x1, 0x2, 0x80000000, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x2, &(0x7f0000000100)=@raw=[@cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffc}], &(0x7f0000000140)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000180)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=[r0, r0, r1, r1, r0], &(0x7f0000000280)=[{0x3, 0x4, 0xc, 0xd}, {0x1, 0x4, 0xf, 0xa}, {0x2, 0x1, 0xa, 0x4}, {0x5, 0x4, 0xb, 0x6}], 0x10, 0x9, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='xprtrdma_post_send\x00', r2, 0x0, 0x40}, 0x18) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00'}) (async) socketpair(0x1, 0x2, 0x80000000, &(0x7f0000000200)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) (async) 3m32.707724289s ago: executing program 0 (id=824): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='devices.list\x00', 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='.\x00\x00\x00', 0x4}], 0x1}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) socket$kcm(0x21, 0x0, 0x2) close(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff}) close(r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) mkdirat$cgroup(r4, &(0x7f00000004c0)='syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3m29.800895853s ago: executing program 0 (id=828): perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x325) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x1ad, 0x70002, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xfffffffffffffffd}, 0x0, 0x3, 0x0, 0x2, 0xff, 0xffff0000, 0x0, 0x0, 0x1ff, 0x0, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 3m28.695032377s ago: executing program 0 (id=831): socket$kcm(0x2, 0x200000000000001, 0x106) r0 = getpid() r1 = perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500a000000076000000000000022700000000000000950000ff00000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc62, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x19) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x33) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffff7ffffffffff7, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x88) perf_event_open(&(0x7f0000000180)={0x4, 0xaa, 0x1, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400000000000002, 0x8000000000000002}, 0x100, 0x0, 0x3, 0x3, 0x8, 0x2, 0x21, 0x0, 0x4, 0x0, 0x8000000000000}, 0x0, 0x4, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x6}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0x10, 0x3, 0x0) recvmsg$kcm(r6, 0x0, 0x40000010) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) 3m13.603807427s ago: executing program 32 (id=831): socket$kcm(0x2, 0x200000000000001, 0x106) r0 = getpid() r1 = perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500a000000076000000000000022700000000000000950000ff00000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc62, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x19) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x33) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffff7ffffffffff7, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x88) perf_event_open(&(0x7f0000000180)={0x4, 0xaa, 0x1, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400000000000002, 0x8000000000000002}, 0x100, 0x0, 0x3, 0x3, 0x8, 0x2, 0x21, 0x0, 0x4, 0x0, 0x8000000000000}, 0x0, 0x4, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x6}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0x10, 0x3, 0x0) recvmsg$kcm(r6, 0x0, 0x40000010) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) 2m19.904891915s ago: executing program 3 (id=520): close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) gettid() perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000040)}, 0x14105, 0x32, 0xfffffbff, 0x2, 0x10, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc80, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2e}, 0x10000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={0xffffffffffffffff, 0x0}, 0x20) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$kcm(0x11, 0x200000000000002, 0x300) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1f, 0xc, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbde, 0x0, 0x0, 0x0, 0x7}, [@jmp={0x5, 0x0, 0x3, 0x6, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x5}, @ldst={0x3, 0x3, 0x2, 0x2, 0x1, 0x4, 0xfffffffffffffffc}, @map_val={0x18, 0x8, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0xc}]}, &(0x7f0000000800)='syzkaller\x00', 0x9, 0x8c, &(0x7f0000000840)=""/140, 0x40f00, 0x4b, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x5, 0x0, 0x7, 0xbd}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000940)=[0xffffffffffffffff, r5, r5, r5, r5, r5, r5], 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x12, 0xc, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @ldst={0x0, 0x2, 0x2, 0x4, 0x5, 0x50, 0x4}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3bd3c2e3}]}, &(0x7f0000000280)='syzkaller\x00', 0x4, 0xc, &(0x7f0000000380)=""/12, 0x41100, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0x6, 0x9d, 0x4a00000}, 0x10, 0x0, r6, 0x6, 0x0, &(0x7f0000000a40)=[{0x1, 0x1, 0xa, 0x1}, {0x1, 0x2, 0x6, 0x2}, {0x3, 0x1, 0xc, 0x4}, {0x10, 0x4, 0x5, 0xd}, {0x3, 0x2, 0xb, 0x6}, {0x4, 0x1, 0x7, 0x5}], 0x10, 0x10, @void, @value}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x60) 2m18.519824627s ago: executing program 4 (id=237): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001440)={'wg1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x9) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) 2m17.100064935s ago: executing program 1 (id=443): r0 = getpid() r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.dequeue\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb, 0x1}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="78cafb363b0500070000", 0xa}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x4044054) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="1808000000000100000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007baaf8ff00000000b609000000000000dbaaf8ffa0000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000005008f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0x7e}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1m52.941190136s ago: executing program 3 (id=520): close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) gettid() perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000040)}, 0x14105, 0x32, 0xfffffbff, 0x2, 0x10, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc80, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2e}, 0x10000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={0xffffffffffffffff, 0x0}, 0x20) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$kcm(0x11, 0x200000000000002, 0x300) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1f, 0xc, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbde, 0x0, 0x0, 0x0, 0x7}, [@jmp={0x5, 0x0, 0x3, 0x6, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x5}, @ldst={0x3, 0x3, 0x2, 0x2, 0x1, 0x4, 0xfffffffffffffffc}, @map_val={0x18, 0x8, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0xc}]}, &(0x7f0000000800)='syzkaller\x00', 0x9, 0x8c, &(0x7f0000000840)=""/140, 0x40f00, 0x4b, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x5, 0x0, 0x7, 0xbd}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000940)=[0xffffffffffffffff, r5, r5, r5, r5, r5, r5], 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x12, 0xc, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @ldst={0x0, 0x2, 0x2, 0x4, 0x5, 0x50, 0x4}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3bd3c2e3}]}, &(0x7f0000000280)='syzkaller\x00', 0x4, 0xc, &(0x7f0000000380)=""/12, 0x41100, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0x6, 0x9d, 0x4a00000}, 0x10, 0x0, r6, 0x6, 0x0, &(0x7f0000000a40)=[{0x1, 0x1, 0xa, 0x1}, {0x1, 0x2, 0x6, 0x2}, {0x3, 0x1, 0xc, 0x4}, {0x10, 0x4, 0x5, 0xd}, {0x3, 0x2, 0xb, 0x6}, {0x4, 0x1, 0x7, 0x5}], 0x10, 0x10, @void, @value}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x60) 1m51.453419326s ago: executing program 4 (id=237): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001440)={'wg1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x9) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) 1m50.547138425s ago: executing program 1 (id=443): r0 = getpid() r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.dequeue\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb, 0x1}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="78cafb363b0500070000", 0xa}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x4044054) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="1808000000000100000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007baaf8ff00000000b609000000000000dbaaf8ffa0000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000005008f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0x7e}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1m30.418979388s ago: executing program 3 (id=520): close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) gettid() perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000040)}, 0x14105, 0x32, 0xfffffbff, 0x2, 0x10, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc80, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2e}, 0x10000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={0xffffffffffffffff, 0x0}, 0x20) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$kcm(0x11, 0x200000000000002, 0x300) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1f, 0xc, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbde, 0x0, 0x0, 0x0, 0x7}, [@jmp={0x5, 0x0, 0x3, 0x6, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x5}, @ldst={0x3, 0x3, 0x2, 0x2, 0x1, 0x4, 0xfffffffffffffffc}, @map_val={0x18, 0x8, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0xc}]}, &(0x7f0000000800)='syzkaller\x00', 0x9, 0x8c, &(0x7f0000000840)=""/140, 0x40f00, 0x4b, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x5, 0x0, 0x7, 0xbd}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000940)=[0xffffffffffffffff, r5, r5, r5, r5, r5, r5], 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x12, 0xc, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @ldst={0x0, 0x2, 0x2, 0x4, 0x5, 0x50, 0x4}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3bd3c2e3}]}, &(0x7f0000000280)='syzkaller\x00', 0x4, 0xc, &(0x7f0000000380)=""/12, 0x41100, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0x6, 0x9d, 0x4a00000}, 0x10, 0x0, r6, 0x6, 0x0, &(0x7f0000000a40)=[{0x1, 0x1, 0xa, 0x1}, {0x1, 0x2, 0x6, 0x2}, {0x3, 0x1, 0xc, 0x4}, {0x10, 0x4, 0x5, 0xd}, {0x3, 0x2, 0xb, 0x6}, {0x4, 0x1, 0x7, 0x5}], 0x10, 0x10, @void, @value}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x60) 1m29.184170147s ago: executing program 4 (id=237): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001440)={'wg1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x9) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) 1m23.833378344s ago: executing program 1 (id=443): r0 = getpid() r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.dequeue\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb, 0x1}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="78cafb363b0500070000", 0xa}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x4044054) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="1808000000000100000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007baaf8ff00000000b609000000000000dbaaf8ffa0000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000005008f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0x7e}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1m6.293326236s ago: executing program 3 (id=520): close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) gettid() perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000040)}, 0x14105, 0x32, 0xfffffbff, 0x2, 0x10, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc80, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2e}, 0x10000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={0xffffffffffffffff, 0x0}, 0x20) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$kcm(0x11, 0x200000000000002, 0x300) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1f, 0xc, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbde, 0x0, 0x0, 0x0, 0x7}, [@jmp={0x5, 0x0, 0x3, 0x6, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x5}, @ldst={0x3, 0x3, 0x2, 0x2, 0x1, 0x4, 0xfffffffffffffffc}, @map_val={0x18, 0x8, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0xc}]}, &(0x7f0000000800)='syzkaller\x00', 0x9, 0x8c, &(0x7f0000000840)=""/140, 0x40f00, 0x4b, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x5, 0x0, 0x7, 0xbd}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000940)=[0xffffffffffffffff, r5, r5, r5, r5, r5, r5], 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x12, 0xc, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @ldst={0x0, 0x2, 0x2, 0x4, 0x5, 0x50, 0x4}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3bd3c2e3}]}, &(0x7f0000000280)='syzkaller\x00', 0x4, 0xc, &(0x7f0000000380)=""/12, 0x41100, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0x6, 0x9d, 0x4a00000}, 0x10, 0x0, r6, 0x6, 0x0, &(0x7f0000000a40)=[{0x1, 0x1, 0xa, 0x1}, {0x1, 0x2, 0x6, 0x2}, {0x3, 0x1, 0xc, 0x4}, {0x10, 0x4, 0x5, 0xd}, {0x3, 0x2, 0xb, 0x6}, {0x4, 0x1, 0x7, 0x5}], 0x10, 0x10, @void, @value}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x60) 1m3.606491615s ago: executing program 4 (id=237): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001440)={'wg1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x9) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) 59.636349983s ago: executing program 1 (id=443): r0 = getpid() r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.dequeue\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb, 0x1}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="78cafb363b0500070000", 0xa}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x4044054) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="1808000000000100000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007baaf8ff00000000b609000000000000dbaaf8ffa0000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000005008f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0x7e}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 40.615288831s ago: executing program 3 (id=520): close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) gettid() perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000040)}, 0x14105, 0x32, 0xfffffbff, 0x2, 0x10, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc80, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2e}, 0x10000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={0xffffffffffffffff, 0x0}, 0x20) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$kcm(0x11, 0x200000000000002, 0x300) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1f, 0xc, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbde, 0x0, 0x0, 0x0, 0x7}, [@jmp={0x5, 0x0, 0x3, 0x6, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x5}, @ldst={0x3, 0x3, 0x2, 0x2, 0x1, 0x4, 0xfffffffffffffffc}, @map_val={0x18, 0x8, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0xc}]}, &(0x7f0000000800)='syzkaller\x00', 0x9, 0x8c, &(0x7f0000000840)=""/140, 0x40f00, 0x4b, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x5, 0x0, 0x7, 0xbd}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000940)=[0xffffffffffffffff, r5, r5, r5, r5, r5, r5], 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x12, 0xc, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @ldst={0x0, 0x2, 0x2, 0x4, 0x5, 0x50, 0x4}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3bd3c2e3}]}, &(0x7f0000000280)='syzkaller\x00', 0x4, 0xc, &(0x7f0000000380)=""/12, 0x41100, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0x6, 0x9d, 0x4a00000}, 0x10, 0x0, r6, 0x6, 0x0, &(0x7f0000000a40)=[{0x1, 0x1, 0xa, 0x1}, {0x1, 0x2, 0x6, 0x2}, {0x3, 0x1, 0xc, 0x4}, {0x10, 0x4, 0x5, 0xd}, {0x3, 0x2, 0xb, 0x6}, {0x4, 0x1, 0x7, 0x5}], 0x10, 0x10, @void, @value}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x60) 37.930613913s ago: executing program 4 (id=237): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001440)={'wg1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x9) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) 34.681813003s ago: executing program 1 (id=443): r0 = getpid() r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.dequeue\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb, 0x1}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="78cafb363b0500070000", 0xa}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x4044054) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="1808000000000100000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007baaf8ff00000000b609000000000000dbaaf8ffa0000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000005008f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0x7e}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 18.273736688s ago: executing program 3 (id=520): close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) gettid() perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000040)}, 0x14105, 0x32, 0xfffffbff, 0x2, 0x10, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc80, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2e}, 0x10000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={0xffffffffffffffff, 0x0}, 0x20) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$kcm(0x11, 0x200000000000002, 0x300) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1f, 0xc, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbde, 0x0, 0x0, 0x0, 0x7}, [@jmp={0x5, 0x0, 0x3, 0x6, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x5}, @ldst={0x3, 0x3, 0x2, 0x2, 0x1, 0x4, 0xfffffffffffffffc}, @map_val={0x18, 0x8, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0xc}]}, &(0x7f0000000800)='syzkaller\x00', 0x9, 0x8c, &(0x7f0000000840)=""/140, 0x40f00, 0x4b, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x5, 0x0, 0x7, 0xbd}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000940)=[0xffffffffffffffff, r5, r5, r5, r5, r5, r5], 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x12, 0xc, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @ldst={0x0, 0x2, 0x2, 0x4, 0x5, 0x50, 0x4}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3bd3c2e3}]}, &(0x7f0000000280)='syzkaller\x00', 0x4, 0xc, &(0x7f0000000380)=""/12, 0x41100, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0x6, 0x9d, 0x4a00000}, 0x10, 0x0, r6, 0x6, 0x0, &(0x7f0000000a40)=[{0x1, 0x1, 0xa, 0x1}, {0x1, 0x2, 0x6, 0x2}, {0x3, 0x1, 0xc, 0x4}, {0x10, 0x4, 0x5, 0xd}, {0x3, 0x2, 0xb, 0x6}, {0x4, 0x1, 0x7, 0x5}], 0x10, 0x10, @void, @value}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x60) 15.539223071s ago: executing program 4 (id=237): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001440)={'wg1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x9) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) 13.339411354s ago: executing program 1 (id=443): r0 = getpid() r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.dequeue\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb, 0x1}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="78cafb363b0500070000", 0xa}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x4044054) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="1808000000000100000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007baaf8ff00000000b609000000000000dbaaf8ffa0000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000005008f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0x7e}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 3.698239758s ago: executing program 2 (id=1313): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, &(0x7f0000000040), 0x0}, 0x20) recvmsg(r1, &(0x7f0000000740)={&(0x7f0000000140)=@sco={0x1f, @none}, 0x80, &(0x7f0000000840)=[{&(0x7f00000001c0)=""/98, 0x62}, {&(0x7f0000000280)=""/76, 0x4c}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/239, 0xef}, {&(0x7f00000004c0)=""/11, 0xb}, {&(0x7f0000000540)=""/240, 0xf0}, {&(0x7f0000000680)=""/181, 0xb5}], 0x7}, 0x2000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r4}, 0x10) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x7, 0x0, 0x0, 0x2, 0x0, 0x3ff8000, 0x10, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x800, 0x6}, 0x1404, 0x9, 0xaa, 0xb1db4005e1a2518d, 0x3, 0xfff, 0x5, 0x0, 0xca, 0x0, 0x1}, r6, 0x10, r5, 0x2) 2.378163247s ago: executing program 2 (id=1319): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000000000000000000510000c0003", 0x21}], 0x1}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f9ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.sectors\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000780)=ANY=[@ANYBLOB="2539000020000365f507fe6aa617b46a9727c810bfcf84ce1f4e0000afc48c3a5cee7bcf0c38218a84563e0af8cc49f475a725d9b54a9f2bcb378bf0efe04034d99e99cc9522b7a611bc118438782f7398b6e6bee883103f2a921ed5abf0fc24f3684b7ac1c52c48cd3107a1ef3cd68dabdeafba22f7565764baff52e455c9cc81fc47a330fafc2cd64eaeaae9e51ea83a9e72ff9a190e671d2234bdeaddd128918341e1ee57a3830ad7cd4e9af0cbaa223709bce454fabb72de597d82fabcbe70bf2ed9d1a1bb823f0b65bdc49f5208ba8206c4b330e372debbf1009850d886ef7fdabdc598e9dc83"], 0x33fe0) 2.196246991s ago: executing program 2 (id=1320): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="19000000040000"], 0x48) socket$kcm(0xa, 0x2, 0x73) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = getpid() r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000711210000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x1}, 0x4074, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x4, 0x2, 0xd, 0xa, 0x0, 0xfffffffffffffffd, 0x8000e, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x1, 0x2}, 0x4002, 0x7ff, 0xe9ab, 0x7, 0x8576, 0x10001, 0x8000, 0x0, 0x3ff, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r4}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0x0, 0x3, 0xfffffffffff7fbfe, 0x0, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1d, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) sendmsg$kcm(r3, 0x0, 0x40400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.995346954s ago: executing program 5 (id=1321): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) r0 = getpid() r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0xf0, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000070000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1c00, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000040400000000000000000000010500000008000000000000000000000300000000020000000200000000000000000000000000000d"], 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x5, 0x4, 0x8, 0xc, 0x9, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8300, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000001180)='cpu.idle\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x7, @perf_config_ext={0x407fff, 0xaea}, 0x14b3d, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8264, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x2018, 0x0, 0x80000000, 0x4, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000440)) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYRES16=r4], 0x10) mkdir(0x0, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081", 0x7}], 0x1}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0xfe33) 1.339704748s ago: executing program 2 (id=1322): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000001800000042a0000000000000", @ANYRES32, @ANYBLOB="010400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000008487ae30847f2df0259da8e900"/40], 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000f40)={r0, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xffffffffffffff38, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x1589, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x4, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x2) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7fffffd, 0x0, @perf_config_ext={0x4, 0x1}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x0, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="850000002200000007000000000000089500000000000000e26c9bd1a63619"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a0091000b00b80000fc005f02"], 0xfe33) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000400000004"], 0x48) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r7}, &(0x7f0000000700), &(0x7f0000000740)=r8, 0x2}, 0x20) write$cgroup_subtree(r1, 0x0, 0x9) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa25f, @void, @value}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="850000e8a900000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.036791257s ago: executing program 5 (id=1323): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000a80)="d80000001d0081044e81f782db44b904021d080201000000040000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c16f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace801bcb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd6", 0x81}, {&(0x7f00000006c0)="54f6d4d87eb3f140c5", 0x9}, {&(0x7f0000000980)="027a64c0072ebbb1512b328dda11b4efd4ba07fc642b7e012bea071dbbdea51e41958755533ccce04d3e635cbe848495e723490d8e93db224d82d4fbfe76bd22fd358cd467795ad7febfc220d72f", 0x4e}], 0x3, 0x0, 0x0, 0x7400}, 0x10) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x5, 0xd, 0x7, 0x7, 0x0, 0xffff, 0x80098, 0xf, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x200, 0x1, @perf_bp={&(0x7f00000000c0), 0xe}, 0x8000, 0xd, 0x10000, 0x8, 0x1, 0xda, 0x4, 0x0, 0xc69, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0x8) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x0, r2}, 0x18) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'veth0_to_team\x00', 0x400}) close(0x3) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) 811.26816ms ago: executing program 2 (id=1324): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x6e02, 0x0, 0x0, 0x40f00, 0x2f, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2a6d2, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbfd, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x2a, &(0x7f0000000200), 0x4) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) unlink(&(0x7f00000001c0)='./file0\x00') (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x30004005) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) (async) socket$kcm(0x10, 0x2, 0x10) (async) socket$kcm(0x29, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x3e, 0x0, 0x8, 0x0, 0x0, @void, @value}, 0x28) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, @perf_config_ext={0x6, 0x5}, 0x49651e38e90d59e2, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x541b, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x5, 0xb, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async) r6 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, r4, 0x0) syz_clone(0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_RESET(r6, 0x2403, 0x1fe) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3, 0x1340, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x4}, 0x0, 0x100, 0x2003}, 0x0, 0xffffffffffffffff, r2, 0x1) (async) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a0006000140020203600e41b0000900ac00060311000000a4000500e00080000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d3a6823a45f28fcb1d", 0xd8}], 0x1}, 0x40) 645.504985ms ago: executing program 5 (id=1325): socketpair(0x29, 0x80000, 0x1dd, &(0x7f0000000640)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000900)={&(0x7f0000000800), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000680)=""/42, 0x2a}], 0x1, &(0x7f00000008c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x6062) (async) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="050100"/20, @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x2, 0x6, 0xc0, 0x7011, r1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1, 0x1, @void, @value, @void, @value}, 0x50) (async) r6 = socket$kcm(0x10, 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0xa}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x2400c000) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcd9e3fe3d46e48aa31086b8703130000001f00000000000000080004000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c902d1938037e73f07d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_tracing={0x1a, 0x1a, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x202e}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_val={0x18, 0x7, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x9}, @map_val={0x18, 0x1, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7f}, @map_val={0x18, 0x1, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10001}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x4, 0x1, 0x1, 0x3, 0x3, 0x1, 0xffffffffffffffff}, @map_fd={0x18, 0x3, 0x1, 0x0, r2}, @ldst={0x2, 0x3, 0x4, 0x0, 0xa, 0xfffffffffffffffe, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xed, &(0x7f0000000500)=""/237, 0x41100, 0x4, '\x00', 0x0, 0x17, r2, 0x8, &(0x7f0000000600)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x254b6, r4, 0x6, 0x0, &(0x7f0000000780)=[{0x4, 0x4, 0x10, 0x5}, {0x2, 0x2, 0xc, 0x2}, {0x2, 0x3, 0x4, 0x6}, {0x2, 0x2, 0xb, 0xa}, {0x1, 0x5, 0xe, 0x7}, {0x5, 0x4, 0xe, 0xa}], 0x10, 0x4, @void, @value}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r9, &(0x7f0000000000), &(0x7f0000000040)=""/27}, 0x20) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r10, 0x40000f0, 0xe40, 0xffffffff, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0x8001}, 0x28) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 342.748573ms ago: executing program 5 (id=1326): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES8=r0], 0xb7cc) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=""/147, 0x93}, 0x10020) (async, rerun: 64) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x8, 0x0, 0xf0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x2, @perf_config_ext={0x300000000, 0xe2}, 0x114905, 0x2e, 0x2, 0x3, 0x2, 0x1, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async, rerun: 64) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x830d}, 0x14010, 0x3ff, 0xffffffff}, 0x0, 0x4, 0xffffffffffffffff, 0xe) (async, rerun: 64) socket$kcm(0x11, 0x200000000000002, 0x300) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc9c391dbaf7a52f9, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) close(0xffffffffffffffff) (async, rerun: 32) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x10, @void, @value}, 0x94) (async, rerun: 32) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x2, 0x1, 0x0, 0x5d31, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff6, 0x5}, 0x8, 0x80000001, 0x3, 0x0, 0xffff, 0x0, 0x4000, 0x0, 0xffffffce}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffff8e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14504, 0x32, 0x3, 0x3, 0x4, 0x0, 0xfffa, 0x0, 0x7f, 0x0, 0x2009}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x9) (async, rerun: 64) r1 = socket$kcm(0x10, 0x3, 0x10) (rerun: 64) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000035000b50d25a80648c0a94f90724fc60", 0x14}], 0x1}, 0x840) (async) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async, rerun: 32) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) (async, rerun: 32) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003fffe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0xfe, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000087000e1208000f0100810401a80016eaa40006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) close(r4) (async) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000001c0), 0x4) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0x7, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x44e0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x30, 0x1400, 0x3, 0x2, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) r6 = socket$kcm(0x10, 0x2, 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r7) (async) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0xffffffffffffffed, &(0x7f0000000040)}, 0x0) 340.64354ms ago: executing program 2 (id=1327): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x7, 0x8}, 0xc) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x7}}, @volatile={0xa, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x61, 0x61]}}, &(0x7f0000000600)=""/4096, 0x40, 0x1000, 0x0, 0x3, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x6, '\x00', 0x0, r1, 0x4, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xd6}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000100)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_devices(r5, &(0x7f0000000000)=ANY=[@ANYRES32], 0xffdd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000016c0)={&(0x7f0000001600)='mm_page_alloc_extfrag\x00', r2, 0x0, 0x80}, 0x18) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000001700)=r6, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x1d, &(0x7f0000000340), 0x4) recvmsg$unix(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x100) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x0, 0x8, 0x2, 0x3, 0x0, 0x8, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b, 0x1, @perf_config_ext={0x1ff, 0x5}, 0xa02, 0x10000, 0x4, 0x1, 0xffffffff, 0xf, 0x6, 0x0, 0x7f}, r8, 0x7, 0xffffffffffffffff, 0x0) r9 = getpid() sendmsg$unix(r4, &(0x7f0000000300)={&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000200)="6690eb6478981f08fa9aced519108b56e972e1770bcd5c46aba40c0716769c3128c9d3a1f511ca8e1f3b30cb56c7798eab0e0aa8d5e1fd049fed95bae87147a903a38bdbc87185d6d3c7f563b1af4635f63337a389276631911217dce3042605074f6a6466d48b0b1b5c7858ec8afd861ccc71d3ec9dab79805ccf1287c01eee5df8f160a4e0118d9a559602a166f5844d24843c66ec220b30985848443349e955a8c4fb6bf795e145eb7df36946ace3073107e0b55133c191642e9b993b9e971ed4df8c1860a09e66e5dbf83e6fa6577df02838", 0xd4}], 0x1, &(0x7f0000000400)=[@rights={{0x20, 0x1, 0x1, [r2, r3, r5, r3]}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xffffffffffffffff, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r9, 0xffffffffffffffff, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x90, 0x20004090}, 0x20000080) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000000) 107.017473ms ago: executing program 5 (id=1328): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 5 (id=1329): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x0, 0x0, 0x0, 0x0, 0x4, 0x104650c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0xa) socket$kcm(0x1e, 0x7, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x5}, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x880, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x18a68, 0x0, 0x0, 0x6, 0x4, 0x80002, 0x80, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="b60a0900000000000000a400100000001800e0ffffffffffffff0000000000d098fe6f8d1470e568"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc42, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x58) socket$kcm(0x11, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000500000000000000ee3c345918110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x7, 0x51, &(0x7f0000000280)=""/81, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x3, 0xf, 0x154b, 0xfffffff7}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@fallback=r3, 0x0, 0x1, 0x9, &(0x7f0000000440), 0x0, 0x0, &(0x7f0000000480), &(0x7f0000000340)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f00000005c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)=ANY=[@ANYRES32=r6, @ANYRES32=r4, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES64=r5], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYRESDEC=r0, @ANYRES32=r1, @ANYBLOB="9316e2aa09458841390a4bfa005fe4bc8001e8c2496a8f64414569241cb5de1ebf150545ab262d4ea04ba2664aff7394bf024a80966915443a1beac83539e035b4b0497641d551d57ffda8295b8226ccffab4b9c8c55ecc0241e9fa9df73d08a98d1007344770d79f43ced9cc0064257", @ANYRES64=r5], 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8808, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x4108, 0x6, 0x0, 0x6, 0x7, 0xffffffff, 0x802, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x19) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x5452, &(0x7f0000000180)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x10\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xf7\x9c(\x1b?\x83SD-\x847\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\t\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%9\xa5\x00\x00\x00') ioctl$TUNGETFEATURES(r9, 0x5452, &(0x7f00000013c0)) kernel console output (not intermixed with test programs): romiscuous mode [ 425.096935][T10286] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1067'. [ 425.499656][ T7939] team0 (unregistering): Port device team_slave_1 removed [ 425.537138][ T7939] team0 (unregistering): Port device team_slave_0 removed [ 426.179793][ T7939] team0 (unregistering): Port device team_slave_1 removed [ 426.214543][ T7939] team0 (unregistering): Port device team_slave_0 removed [ 426.654082][T10125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.680538][T10128] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 426.705579][T10128] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 426.733043][T10128] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 426.850905][T10128] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 426.891607][T10125] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.974042][ T7955] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.981300][ T7955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.099276][T10296] netlink: 'syz.2.1070': attribute type 10 has an invalid length. [ 427.130793][ T7955] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.137989][ T7955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.356081][ T5151] Bluetooth: hci5: ISO packet for unknown connection handle 62 [ 427.427777][T10128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.498486][T10128] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.540823][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.548077][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.740957][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.748180][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.858833][T10320] netlink: 'syz.5.1075': attribute type 10 has an invalid length. [ 427.931596][T10125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.030883][T10320] team0: Device hsr_slave_0 failed to register rx_handler [ 428.190653][T10137] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 428.235814][T10137] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 428.264445][T10137] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 428.312152][T10137] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 428.398666][T10125] veth0_vlan: entered promiscuous mode [ 428.453879][T10128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.487697][T10330] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 428.518294][T10125] veth1_vlan: entered promiscuous mode [ 428.530970][T10330] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 428.663888][T10125] veth0_macvtap: entered promiscuous mode [ 428.683795][T10125] veth1_macvtap: entered promiscuous mode [ 428.760608][T10125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.771955][T10125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.784528][T10125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.814862][T10125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.829385][T10125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.841229][T10125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.854905][T10125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.871448][T10125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.894925][T10137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.908865][T10125] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.919096][T10125] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.929256][T10125] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.938110][T10125] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.989790][T10137] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.018379][ T7950] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.025581][ T7950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.061372][ T7950] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.068655][ T7950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.112011][T10125] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 429.121898][T10125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.159662][ T7939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.189421][ T7939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.237207][T10128] veth0_vlan: entered promiscuous mode [ 429.251365][ T7939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.269022][ T7939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.280426][T10128] veth1_vlan: entered promiscuous mode [ 429.430451][T10128] veth0_macvtap: entered promiscuous mode [ 429.454583][T10128] veth1_macvtap: entered promiscuous mode [ 429.479337][T10128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.491190][T10128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.512686][T10128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.543645][T10128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.602606][T10128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.670814][T10128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.728037][T10128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.765582][T10128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.795845][T10128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.814107][T10128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.837851][T10128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.891683][T10128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.971592][T10128] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.051582][T10128] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.080927][T10128] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.106372][T10128] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.258219][T10357] netlink: 'syz.2.1082': attribute type 2 has an invalid length. [ 430.277869][T10357] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1082'. [ 430.572203][T10137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.611229][T10361] netlink: 'syz.2.1083': attribute type 39 has an invalid length. [ 430.713096][ T7944] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.801673][T10128] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 430.815418][T10128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.871539][ T7944] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.903757][ T7936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.922732][ T7936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.969543][ T7944] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.017390][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.024864][T10137] veth0_vlan: entered promiscuous mode [ 431.025238][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.038842][T10137] veth1_vlan: entered promiscuous mode [ 431.088925][ T7944] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.163152][T10137] veth0_macvtap: entered promiscuous mode [ 431.183452][T10137] veth1_macvtap: entered promiscuous mode [ 431.212179][T10137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.224663][T10137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.234764][T10137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.247168][T10137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.259037][T10137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.269627][T10137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.290104][T10137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.364150][T10137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.379058][T10137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.389823][T10137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.401378][T10137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.411273][T10137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.422531][T10137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.432436][T10137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.443181][T10137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.454844][T10137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.470691][T10137] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.480127][T10137] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.489128][T10137] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.498754][T10137] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.588347][ T7944] bridge_slave_1: left allmulticast mode [ 431.598687][ T7944] bridge_slave_1: left promiscuous mode [ 431.604496][ T7944] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.621920][ T7944] bridge_slave_0: left allmulticast mode [ 431.627797][ T7944] bridge_slave_0: left promiscuous mode [ 431.633577][ T7944] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.233096][ T7944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 432.256619][ T7944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.269311][ T7944] bond0 (unregistering): Released all slaves [ 432.305187][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 432.314179][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 432.338345][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 432.357240][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 432.372876][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 433.349768][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 433.365348][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 433.375594][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 433.392623][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 433.410980][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 433.731310][T10137] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 433.742078][T10137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.872811][ T7941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.906313][ T7941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.419049][T10402] netlink: 'syz.2.1091': attribute type 2 has an invalid length. [ 434.427185][T10402] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1091'. [ 434.438893][T10402] nbd: must specify at least one socket [ 434.456434][ T5151] Bluetooth: hci0: command tx timeout [ 434.503748][T10403] netlink: 'syz.2.1091': attribute type 10 has an invalid length. [ 435.437307][ T7944] hsr_slave_0: left promiscuous mode [ 435.443663][ T7944] hsr_slave_1: left promiscuous mode [ 435.460549][ T7944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.468299][ T7944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.480911][ T7944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.488924][ T7944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.496497][ T5151] Bluetooth: hci2: command tx timeout [ 435.514358][ T7944] veth1_macvtap: left promiscuous mode [ 435.520220][ T7944] veth0_macvtap: left promiscuous mode [ 435.526147][ T7944] veth1_vlan: left promiscuous mode [ 435.531562][ T7944] veth0_vlan: left promiscuous mode [ 436.010664][ T7944] team0 (unregistering): Port device team_slave_1 removed [ 436.050349][ T7944] team0 (unregistering): Port device team_slave_0 removed [ 436.487964][ T7941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.503441][ T7941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.536336][ T5151] Bluetooth: hci0: command tx timeout [ 436.809004][T10412] netlink: 'syz.5.1093': attribute type 10 has an invalid length. [ 436.853053][T10412] team0: Device hsr_slave_0 failed to register rx_handler [ 437.039949][T10379] chnl_net:caif_netlink_parms(): no params data found [ 437.390232][T10382] chnl_net:caif_netlink_parms(): no params data found [ 437.531516][ T7944] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.576846][ T5151] Bluetooth: hci2: command tx timeout [ 437.651191][T10379] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.659206][T10379] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.669673][T10379] bridge_slave_0: entered allmulticast mode [ 437.677748][T10379] bridge_slave_0: entered promiscuous mode [ 437.696729][ T7944] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.730101][T10379] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.737825][T10379] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.745011][T10379] bridge_slave_1: entered allmulticast mode [ 437.755466][T10379] bridge_slave_1: entered promiscuous mode [ 437.793344][ T7944] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.838402][T10379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.872849][T10379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.891218][ T7944] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.904944][T10382] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.916624][T10382] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.923836][T10382] bridge_slave_0: entered allmulticast mode [ 437.933443][T10382] bridge_slave_0: entered promiscuous mode [ 437.970552][T10382] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.981311][T10382] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.989343][T10382] bridge_slave_1: entered allmulticast mode [ 437.997327][T10382] bridge_slave_1: entered promiscuous mode [ 438.036088][T10379] team0: Port device team_slave_0 added [ 438.046259][T10382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.061455][T10382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.072511][T10379] team0: Port device team_slave_1 added [ 438.159093][T10382] team0: Port device team_slave_0 added [ 438.175067][T10379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.184119][T10379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.210471][T10379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.225379][T10382] team0: Port device team_slave_1 added [ 438.250436][T10379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.257914][T10379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.284414][T10379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.333167][T10382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.340469][T10382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.367100][T10382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.387662][T10382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.394642][T10382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.423672][T10382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.453519][ T7944] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.527010][ T7944] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.551580][T10379] hsr_slave_0: entered promiscuous mode [ 438.558064][T10379] hsr_slave_1: entered promiscuous mode [ 438.616467][ T5151] Bluetooth: hci0: command tx timeout [ 438.623750][ T7944] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.004297][T10382] hsr_slave_0: entered promiscuous mode [ 439.033027][T10382] hsr_slave_1: entered promiscuous mode [ 439.049922][T10382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 439.075825][T10382] Cannot create hsr debugfs directory [ 439.200502][ T7944] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.221716][T10448] netlink: 'syz.5.1100': attribute type 16 has an invalid length. [ 439.289734][T10450] netlink: 'syz.5.1100': attribute type 10 has an invalid length. [ 439.295340][T10448] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1100'. [ 439.306646][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 439.318203][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 439.326403][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 439.339338][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 439.352270][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 439.401438][T10450] hsr_slave_0: left promiscuous mode [ 439.418494][T10450] hsr_slave_1: left promiscuous mode [ 439.656248][ T5151] Bluetooth: hci2: command tx timeout [ 439.981491][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.988093][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.048912][ T7944] bridge_slave_1: left allmulticast mode [ 440.062108][ T7944] bridge_slave_1: left promiscuous mode [ 440.078124][ T7944] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.095248][ T7944] bridge_slave_0: left allmulticast mode [ 440.102826][ T7944] bridge_slave_0: left promiscuous mode [ 440.120996][ T7944] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.169931][ T7944] bridge_slave_1: left allmulticast mode [ 440.182934][ T7944] bridge_slave_1: left promiscuous mode [ 440.193555][ T7944] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.209882][ T7944] bridge_slave_0: left allmulticast mode [ 440.215636][ T7944] bridge_slave_0: left promiscuous mode [ 440.228868][ T7944] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.438705][T10473] netlink: 'syz.5.1105': attribute type 10 has an invalid length. [ 440.706627][ T5151] Bluetooth: hci0: command tx timeout [ 441.388432][ T7944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.402259][ T7944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.412731][ T7944] bond0 (unregistering): Released all slaves [ 441.418962][ T5151] Bluetooth: hci3: command tx timeout [ 441.505549][ T7944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.519657][ T7944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.530200][ T7944] bond0 (unregistering): Released all slaves [ 441.583716][T10473] batman_adv: batadv0: Adding interface: wlan0 [ 441.595877][T10473] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.623041][T10473] batman_adv: batadv0: Interface activated: wlan0 [ 441.686976][T10476] netlink: 'syz.5.1106': attribute type 2 has an invalid length. [ 441.695363][T10476] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1106'. [ 441.749830][ T5151] Bluetooth: hci2: command tx timeout [ 442.657942][T10449] chnl_net:caif_netlink_parms(): no params data found [ 442.924852][ T7944] hsr_slave_0: left promiscuous mode [ 442.958422][ T7944] hsr_slave_1: left promiscuous mode [ 442.981445][ T7944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.001346][ T7944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.023400][ T7944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.051014][ T7944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.120302][ T7944] hsr_slave_0: left promiscuous mode [ 443.136177][ T7944] hsr_slave_1: left promiscuous mode [ 443.206621][ T7944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.214099][ T7944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.232654][ T7944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.240651][ T7944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.305764][ T7944] veth1_macvtap: left promiscuous mode [ 443.314200][ T7944] veth0_macvtap: left promiscuous mode [ 443.323326][ T7944] veth1_vlan: left promiscuous mode [ 443.332305][ T7944] veth0_vlan: left promiscuous mode [ 443.371018][ T7944] veth1_macvtap: left promiscuous mode [ 443.376716][ T7944] veth0_macvtap: left promiscuous mode [ 443.382410][ T7944] veth1_vlan: left promiscuous mode [ 443.387897][ T7944] veth0_vlan: left promiscuous mode [ 443.497903][ T5151] Bluetooth: hci3: command tx timeout [ 445.184301][ T7944] team0 (unregistering): Port device team_slave_1 removed [ 445.357366][ T7944] team0 (unregistering): Port device team_slave_0 removed [ 445.576057][ T5151] Bluetooth: hci3: command tx timeout [ 446.884191][ T7944] team0 (unregistering): Port device team_slave_1 removed [ 446.933687][ T7944] team0 (unregistering): Port device team_slave_0 removed [ 447.373814][T10485] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.1109'. [ 447.629374][T10449] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.640585][T10449] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.649490][T10449] bridge_slave_0: entered allmulticast mode [ 447.656217][ T5151] Bluetooth: hci3: command tx timeout [ 447.672021][T10449] bridge_slave_0: entered promiscuous mode [ 447.684766][T10449] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.692552][T10449] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.700126][T10449] bridge_slave_1: entered allmulticast mode [ 447.720475][T10449] bridge_slave_1: entered promiscuous mode [ 447.815038][T10520] netlink: 'syz.2.1118': attribute type 2 has an invalid length. [ 447.851447][T10449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.864494][T10520] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1118'. [ 447.888658][T10449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.953706][T10524] netlink: 'syz.5.1117': attribute type 10 has an invalid length. [ 448.332751][T10449] team0: Port device team_slave_0 added [ 448.367375][T10449] team0: Port device team_slave_1 added [ 448.444442][T10379] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 448.466583][T10449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.473575][T10449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.498741][T10532] netlink: 'syz.5.1120': attribute type 10 has an invalid length. [ 448.517794][T10449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.529038][T10531] netlink: 'syz.5.1120': attribute type 10 has an invalid length. [ 448.548517][T10379] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 448.564580][T10532] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.578616][T10532] bond0: (slave team0): Enslaving as an active interface with an up link [ 448.599618][T10531] bond0: (slave team0): Releasing backup interface [ 448.620694][T10531] bridge0: port 4(team0) entered blocking state [ 448.631445][T10531] bridge0: port 4(team0) entered disabled state [ 448.642962][T10531] team0: entered allmulticast mode [ 448.652880][T10531] team_slave_0: entered allmulticast mode [ 448.661705][T10531] team_slave_1: entered allmulticast mode [ 448.674052][T10531] team0: entered promiscuous mode [ 448.680316][T10531] team_slave_0: entered promiscuous mode [ 448.689199][T10531] team_slave_1: entered promiscuous mode [ 448.697942][T10449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.705130][T10449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.733233][T10449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.813209][T10379] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 449.001628][T10379] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 449.135139][T10537] netlink: 'syz.2.1121': attribute type 2 has an invalid length. [ 449.137766][T10449] hsr_slave_0: entered promiscuous mode [ 449.151981][T10449] hsr_slave_1: entered promiscuous mode [ 449.158478][T10449] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 449.167020][T10449] Cannot create hsr debugfs directory [ 449.222977][T10382] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 449.323235][T10382] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 449.385930][T10382] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 449.414209][T10382] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 450.982424][T10555] netlink: 'syz.2.1126': attribute type 15 has an invalid length. [ 451.169844][T10379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.234148][T10379] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.263224][ T7950] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.270489][ T7950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.294237][ T7941] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.301456][ T7941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.367859][T10562] netlink: 'syz.2.1129': attribute type 2 has an invalid length. [ 451.375658][T10562] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1129'. [ 451.385401][T10382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.473757][T10382] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.512969][ T7939] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.520164][ T7939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.576634][T10379] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 451.654320][ T7941] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.661705][ T7941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.681732][T10449] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 451.792699][T10449] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 451.928712][T10449] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 452.180085][T10449] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 452.295250][T10379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.299513][ T5844] Bluetooth: hci5: command 0x0406 tx timeout [ 452.561727][T10379] veth0_vlan: entered promiscuous mode [ 452.600300][T10577] netlink: 14556 bytes leftover after parsing attributes in process `syz.5.1133'. [ 452.649633][T10379] veth1_vlan: entered promiscuous mode [ 452.689706][T10449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.787932][T10449] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.890687][ T7936] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.897959][ T7936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.931416][T10588] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1136'. [ 452.985065][T10379] veth0_macvtap: entered promiscuous mode [ 453.013159][ T7950] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.020450][ T7950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.092437][T10379] veth1_macvtap: entered promiscuous mode [ 453.183403][T10382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.392192][T10379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.420917][T10379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.440919][T10379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.487651][T10379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.511496][T10379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.526254][T10379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.542967][T10379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.560721][T10379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.573357][T10379] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.589857][T10379] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.604062][T10379] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.624776][T10379] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.888370][T10379] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 453.905611][T10379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.917178][T10379] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 453.928279][T10607] netlink: 'syz.5.1140': attribute type 2 has an invalid length. [ 453.928506][T10379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.946067][T10607] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1140'. [ 453.955140][ T7941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.955164][ T7941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.094529][ T7955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.105198][T10382] veth0_vlan: entered promiscuous mode [ 454.125290][ T7955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.172695][T10382] veth1_vlan: entered promiscuous mode [ 454.246902][T10616] netlink: 'syz.5.1142': attribute type 10 has an invalid length. [ 454.287798][T10449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.375642][T10382] veth0_macvtap: entered promiscuous mode [ 454.443907][T10382] veth1_macvtap: entered promiscuous mode [ 454.552238][T10449] veth0_vlan: entered promiscuous mode [ 454.570357][T10382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.596246][T10382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.607823][T10382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.623249][T10382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.647247][T10382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.677784][T10382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.693198][T10382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.709366][T10382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.720911][T10382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.735283][T10382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.762738][T10382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.781506][T10382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.823802][T10449] veth1_vlan: entered promiscuous mode [ 454.851667][T10382] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.864988][T10382] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.902308][T10382] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.913260][T10382] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.000277][ T7941] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.122411][ T7941] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.229469][ T7941] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.262147][T10449] veth0_macvtap: entered promiscuous mode [ 455.299316][T10449] veth1_macvtap: entered promiscuous mode [ 455.325165][T10382] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 455.335159][T10382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.365845][T10382] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 455.375536][T10382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.415191][ T7936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.436847][ T7936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.478666][ T7941] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.541869][T10449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.570424][T10449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.595952][T10449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.615846][T10449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.635796][T10449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.655794][T10449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.677785][T10449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.744742][T10449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.775847][T10449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.795784][T10449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.816321][T10449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.835818][T10449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.855788][T10449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.865650][T10449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.895848][T10449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.920334][T10449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.948194][ T7944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.986564][ T7944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.027574][T10449] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.061127][T10449] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.075972][T10449] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.084732][T10449] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.309016][ T7941] bridge_slave_1: left allmulticast mode [ 456.325002][ T7941] bridge_slave_1: left promiscuous mode [ 456.344717][ T7941] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.375521][ T7941] bridge_slave_0: left allmulticast mode [ 456.398634][ T7941] bridge_slave_0: left promiscuous mode [ 456.416180][ T7941] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.806363][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 456.815562][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 456.830309][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 456.850150][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 456.860262][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 457.070085][ T7941] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.086191][ T7941] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.102795][ T7941] bond0 (unregistering): Released all slaves [ 457.133008][T10449] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 457.149223][T10449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.162315][T10449] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 457.172343][T10449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.368936][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.439191][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.131743][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.161782][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.616878][ T7941] hsr_slave_0: left promiscuous mode [ 458.634054][ T7941] hsr_slave_1: left promiscuous mode [ 458.644433][ T7941] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.652457][ T7941] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.678522][ T7941] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.699357][ T7941] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.742284][ T7941] veth1_macvtap: left promiscuous mode [ 458.751794][ T7941] veth0_macvtap: left promiscuous mode [ 458.758754][ T7941] veth1_vlan: left promiscuous mode [ 458.764203][ T7941] veth0_vlan: left promiscuous mode [ 458.936428][ T5151] Bluetooth: hci0: command tx timeout [ 459.440732][ T7941] team0 (unregistering): Port device team_slave_1 removed [ 459.492839][ T7941] team0 (unregistering): Port device team_slave_0 removed [ 459.924428][T10653] netlink: 'syz.5.1152': attribute type 2 has an invalid length. [ 459.945854][T10653] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1152'. [ 460.195170][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 460.205255][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 460.213773][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 460.230528][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 460.241821][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 460.421550][T10664] netlink: 'syz.2.1154': attribute type 10 has an invalid length. [ 461.021198][ T5151] Bluetooth: hci0: command tx timeout [ 461.544876][T10673] netlink: 'syz.2.1156': attribute type 21 has an invalid length. [ 461.574258][T10673] netlink: 'syz.2.1156': attribute type 4 has an invalid length. [ 461.801858][T10633] chnl_net:caif_netlink_parms(): no params data found [ 461.971264][T10656] chnl_net:caif_netlink_parms(): no params data found [ 462.040536][T10633] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.049552][T10633] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.058358][T10633] bridge_slave_0: entered allmulticast mode [ 462.066877][T10633] bridge_slave_0: entered promiscuous mode [ 462.074708][T10633] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.083013][T10633] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.090560][T10633] bridge_slave_1: entered allmulticast mode [ 462.098075][T10633] bridge_slave_1: entered promiscuous mode [ 462.167545][T10633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.203225][T10633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.245418][T10656] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.256409][T10656] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.263716][T10656] bridge_slave_0: entered allmulticast mode [ 462.272482][T10656] bridge_slave_0: entered promiscuous mode [ 462.299161][T10633] team0: Port device team_slave_0 added [ 462.309494][ T5151] Bluetooth: hci2: command tx timeout [ 462.316858][T10656] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.324016][T10656] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.332088][T10656] bridge_slave_1: entered allmulticast mode [ 462.340163][T10656] bridge_slave_1: entered promiscuous mode [ 462.362290][T10633] team0: Port device team_slave_1 added [ 462.386169][ T7941] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.458795][T10633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.466297][T10633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.493985][T10633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.512229][T10656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.533992][ T7941] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.552088][T10633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.559239][T10633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.585859][T10633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.599749][T10656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.650270][ T7941] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.699138][T10656] team0: Port device team_slave_0 added [ 462.725098][T10656] team0: Port device team_slave_1 added [ 462.747354][ T7941] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.767684][T10633] hsr_slave_0: entered promiscuous mode [ 462.774083][T10633] hsr_slave_1: entered promiscuous mode [ 462.819093][T10656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.826455][T10656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.853844][T10656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.880698][T10656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.892384][T10656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.920288][T10656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.096661][ T5151] Bluetooth: hci0: command tx timeout [ 463.137087][T10690] netlink: 'syz.2.1158': attribute type 16 has an invalid length. [ 463.144970][T10690] netlink: 'syz.2.1158': attribute type 3 has an invalid length. [ 463.153935][T10690] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1158'. [ 463.191066][T10656] hsr_slave_0: entered promiscuous mode [ 463.217139][T10656] hsr_slave_1: entered promiscuous mode [ 463.223513][T10656] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 463.255086][T10656] Cannot create hsr debugfs directory [ 463.368500][T10693] veth1_to_bond: entered promiscuous mode [ 463.393396][T10693] veth1_to_bond: entered allmulticast mode [ 463.630560][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 463.639929][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 463.660697][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 463.682283][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 463.693653][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 463.725534][ T7941] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.733439][T10704] nbd: must specify an index to disconnect [ 463.867752][ T7941] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.982992][ T7941] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.338922][ T7941] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.376183][ T5151] Bluetooth: hci2: command tx timeout [ 464.574802][T10717] netlink: 'syz.5.1165': attribute type 2 has an invalid length. [ 464.582937][T10717] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1165'. [ 465.186565][ T5151] Bluetooth: hci0: command tx timeout [ 465.745966][ T5151] Bluetooth: hci3: command tx timeout [ 466.456075][ T5151] Bluetooth: hci2: command tx timeout [ 467.279398][T10722] netlink: 'syz.2.1167': attribute type 10 has an invalid length. [ 467.304560][ T7941] bridge_slave_1: left allmulticast mode [ 467.311735][ T7941] bridge_slave_1: left promiscuous mode [ 467.326252][ T7941] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.340879][ T7941] bridge_slave_0: left allmulticast mode [ 467.349512][ T7941] bridge_slave_0: left promiscuous mode [ 467.355322][ T7941] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.374291][ T7941] bridge_slave_1: left allmulticast mode [ 467.380104][ T7941] bridge_slave_1: left promiscuous mode [ 467.388721][ T7941] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.402951][ T7941] bridge_slave_0: left allmulticast mode [ 467.409104][ T7941] bridge_slave_0: left promiscuous mode [ 467.414871][ T7941] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.816151][ T5151] Bluetooth: hci3: command tx timeout [ 467.952690][ T7941] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 467.963975][ T7941] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 467.974494][ T7941] bond0 (unregistering): Released all slaves [ 468.068814][ T7941] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 468.080056][ T7941] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.091220][ T7941] bond0 (unregistering): Released all slaves [ 468.342874][T10633] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 468.361307][T10633] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 468.447023][T10633] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 468.484856][T10633] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 468.536035][ T5151] Bluetooth: hci2: command tx timeout [ 468.848684][T10700] chnl_net:caif_netlink_parms(): no params data found [ 469.626658][T10700] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.635993][T10700] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.643367][T10700] bridge_slave_0: entered allmulticast mode [ 469.682670][T10700] bridge_slave_0: entered promiscuous mode [ 469.710305][T10700] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.727660][T10700] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.734919][T10700] bridge_slave_1: entered allmulticast mode [ 469.750332][T10700] bridge_slave_1: entered promiscuous mode [ 469.798237][T10761] netlink: 'syz.2.1177': attribute type 10 has an invalid length. [ 469.865239][T10761] team0: Port device wlan1 removed [ 469.888613][T10761] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 469.898142][ T5151] Bluetooth: hci3: command tx timeout [ 469.919962][ T7941] hsr_slave_0: left promiscuous mode [ 469.928592][ T7941] hsr_slave_1: left promiscuous mode [ 469.934774][ T7941] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.949048][ T7941] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.960273][ T7941] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.971106][ T7941] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.989002][ T7941] hsr_slave_0: left promiscuous mode [ 469.999499][ T7941] hsr_slave_1: left promiscuous mode [ 470.035248][ T7941] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.044185][ T7941] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.053006][ T7941] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.065488][ T7941] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.141780][ T7941] veth1_macvtap: left promiscuous mode [ 470.147473][ T7941] veth0_macvtap: left promiscuous mode [ 470.153156][ T7941] veth1_vlan: left promiscuous mode [ 470.160164][ T7941] veth0_vlan: left promiscuous mode [ 470.187926][ T7941] veth1_macvtap: left promiscuous mode [ 470.210176][ T7941] veth0_macvtap: left promiscuous mode [ 470.217317][ T7941] veth1_vlan: left promiscuous mode [ 470.222709][ T7941] veth0_vlan: left promiscuous mode [ 470.905959][ T7941] team0 (unregistering): Port device team_slave_1 removed [ 470.959807][ T7941] team0 (unregistering): Port device team_slave_0 removed [ 471.691772][ T7941] team0 (unregistering): Port device team_slave_1 removed [ 471.731111][ T7941] team0 (unregistering): Port device team_slave_0 removed [ 471.976067][ T5151] Bluetooth: hci3: command tx timeout [ 472.074973][T10700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.126403][T10770] netlink: 17279 bytes leftover after parsing attributes in process `syz.5.1180'. [ 472.140509][T10777] wg2: entered promiscuous mode [ 472.146831][T10777] wg2: entered allmulticast mode [ 472.173214][T10700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.304647][T10700] team0: Port device team_slave_0 added [ 472.327998][T10700] team0: Port device team_slave_1 added [ 472.400497][T10656] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 472.416514][T10656] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 472.447253][T10656] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 472.457889][T10656] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 472.474610][T10700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.482706][T10700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.511763][T10700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.557020][T10700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.564007][T10700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.596052][T10700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.627716][T10633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.714352][T10700] hsr_slave_0: entered promiscuous mode [ 472.722020][T10700] hsr_slave_1: entered promiscuous mode [ 472.728919][T10700] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 472.737275][T10700] Cannot create hsr debugfs directory [ 472.765716][T10633] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.852735][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.859952][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.921487][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.928690][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.103442][T10633] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 473.402712][T10656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.602716][T10656] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.664938][ T7941] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.672187][ T7941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.789561][ T7941] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.796835][ T7941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.078529][T10633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.534603][T10700] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 476.701958][T10700] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 476.772286][T10700] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 476.811834][T10700] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 476.935052][T10633] veth0_vlan: entered promiscuous mode [ 477.015615][T10633] veth1_vlan: entered promiscuous mode [ 477.119110][T10656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.313170][T10633] veth0_macvtap: entered promiscuous mode [ 477.435579][T10633] veth1_macvtap: entered promiscuous mode [ 477.843119][T10633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.855409][T10633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.871955][T10633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.932549][T10700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.950154][T10633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.977072][T10633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.996971][T10633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.031404][T10836] netlink: 'syz.5.1197': attribute type 10 has an invalid length. [ 478.031871][T10633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.034041][T10633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.369615][T10633] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.402583][T10633] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.425783][T10633] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.434944][T10633] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.541960][T10700] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.629343][ T7944] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.636604][ T7944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.657697][ T7944] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.664910][ T7944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.679133][T10845] ªªªªª»: renamed from hsr0 (while UP) [ 478.922315][T10633] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 478.933710][T10633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.944864][T10633] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 478.955298][T10633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.058584][T10656] veth0_vlan: entered promiscuous mode [ 479.086568][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.094438][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.109748][T10656] veth1_vlan: entered promiscuous mode [ 479.198782][ T7955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.222151][ T7955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.268418][T10656] veth0_macvtap: entered promiscuous mode [ 479.300091][T10656] veth1_macvtap: entered promiscuous mode [ 479.331905][T10656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.384381][T10656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.428192][T10656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.462445][T10656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.537505][T10656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.604922][T10865] : renamed from bond0 (while UP) [ 479.708279][T10656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.751968][T10656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.775844][T10656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.798756][T10656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.830983][T10656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.870469][T10656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.892382][T10656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.959777][T10656] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.984350][T10656] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.999012][T10656] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.010589][T10656] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.184368][T10700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.380804][T10873] syzkaller0: entered promiscuous mode [ 480.389916][T10873] syzkaller0: entered allmulticast mode [ 480.681701][ T7946] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.752944][T10656] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 480.762834][T10656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.772897][T10656] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 480.783319][T10656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.915553][T10881] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1206'. [ 481.941602][ T7946] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.956398][T10881] netlink: 'syz.2.1206': attribute type 10 has an invalid length. [ 481.964443][T10881] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1206'. [ 481.981751][T10882] netlink: 'syz.2.1206': attribute type 10 has an invalid length. [ 481.989738][T10882] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1206'. [ 482.042547][ T7936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.056080][ T7936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.108499][ T7946] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.200504][T10700] veth0_vlan: entered promiscuous mode [ 482.210576][T10887] netlink: 'syz.2.1208': attribute type 2 has an invalid length. [ 482.222977][T10887] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1208'. [ 482.269012][ T7946] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.296422][T10888] netlink: 'syz.2.1208': attribute type 21 has an invalid length. [ 482.312368][T10700] veth1_vlan: entered promiscuous mode [ 482.338357][ T5151] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 482.347705][ T5151] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 482.356348][ T5151] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 482.370141][ T5151] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 482.387199][ T5151] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 482.418014][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.471129][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.499102][T10895] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1209'. [ 482.607846][T10895] netlink: 693 bytes leftover after parsing attributes in process `syz.5.1209'. [ 482.633474][T10892] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1209'. [ 482.642837][T10895] netlink: 130160 bytes leftover after parsing attributes in process `syz.5.1209'. [ 482.671855][T10700] veth0_macvtap: entered promiscuous mode [ 482.681763][T10895] netlink: 693 bytes leftover after parsing attributes in process `syz.5.1209'. [ 482.728981][T10700] veth1_macvtap: entered promiscuous mode [ 482.770023][T10896] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1209'. [ 482.914108][ T7946] bridge_slave_1: left allmulticast mode [ 482.939141][ T7946] bridge_slave_1: left promiscuous mode [ 482.945693][ T7946] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.969168][ T7946] bridge_slave_0: left allmulticast mode [ 482.981169][ T7946] bridge_slave_0: left promiscuous mode [ 482.987819][ T7946] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.498280][ T7946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.514982][ T7946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.526325][ T7946] bond0 (unregistering): Released all slaves [ 483.554537][T10901] netlink: 'syz.5.1211': attribute type 1 has an invalid length. [ 483.569954][T10902] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 483.577291][T10902] IPv6: NLM_F_CREATE should be set when creating new route [ 483.584645][T10902] IPv6: NLM_F_CREATE should be set when creating new route [ 483.591918][T10902] IPv6: NLM_F_CREATE should be set when creating new route [ 483.627420][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.652154][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.663342][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.673838][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.684346][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.694880][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.712482][T10700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 483.778661][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.789841][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.800828][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.811590][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.821895][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.845763][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.855618][T10700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.866344][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.877842][T10700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.922646][T10700] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.931824][T10700] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.940853][T10700] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.949927][T10700] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.104303][ T7946] hsr_slave_0: left promiscuous mode [ 484.112928][ T7946] hsr_slave_1: left promiscuous mode [ 484.119146][ T7946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.129062][ T7946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.139286][ T7946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.146939][ T7946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.165861][ T7946] veth1_macvtap: left promiscuous mode [ 484.171423][ T7946] veth0_macvtap: left promiscuous mode [ 484.177205][ T7946] veth1_vlan: left promiscuous mode [ 484.182516][ T7946] veth0_vlan: left promiscuous mode [ 484.456131][ T5151] Bluetooth: hci0: command tx timeout [ 484.574174][ T7946] team0 (unregistering): Port device team_slave_1 removed [ 484.609954][ T7946] team0 (unregistering): Port device team_slave_0 removed [ 484.744920][T10913] netlink: 'syz.2.1214': attribute type 10 has an invalid length. [ 484.828239][T10915] netlink: 'syz.5.1213': attribute type 10 has an invalid length. [ 485.157230][T10915] veth0_vlan: left promiscuous mode [ 485.174988][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 485.179511][T10915] veth0_vlan: entered promiscuous mode [ 485.195922][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 485.203952][T10915] team0: Device veth0_vlan failed to register rx_handler [ 485.204038][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 485.220727][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 485.229942][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 485.266610][T10918] netlink: 'syz.5.1213': attribute type 3 has an invalid length. [ 485.285422][T10889] chnl_net:caif_netlink_parms(): no params data found [ 485.342939][T10700] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 485.360616][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.371739][T10700] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 485.381510][T10700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.472316][ T7955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.486783][ T7955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.561255][ T7950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.583211][ T7950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.191103][T10889] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.213262][T10889] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.222944][T10889] bridge_slave_0: entered allmulticast mode [ 486.231727][T10889] bridge_slave_0: entered promiscuous mode [ 486.257386][T10889] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.268718][T10889] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.277088][T10889] bridge_slave_1: entered allmulticast mode [ 486.285320][T10889] bridge_slave_1: entered promiscuous mode [ 486.331108][T10939] syzkaller0: entered promiscuous mode [ 486.339881][T10939] syzkaller0: entered allmulticast mode [ 486.435285][T10889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.542033][ T5151] Bluetooth: hci0: command tx timeout [ 487.259582][ T5151] Bluetooth: hci2: command tx timeout [ 487.616901][T10889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.701609][T10889] team0: Port device team_slave_0 added [ 487.716580][T10889] team0: Port device team_slave_1 added [ 487.775058][ T7946] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.794405][T10889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.801602][T10889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.829670][T10889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.842841][T10889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.866519][T10889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.902858][T10889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.121994][ T7946] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.212710][T10956] __nla_validate_parse: 1 callbacks suppressed [ 488.212732][T10956] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1222'. [ 488.219415][T10889] hsr_slave_0: entered promiscuous mode [ 488.220543][T10889] hsr_slave_1: entered promiscuous mode [ 488.525635][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 488.539585][ T7946] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.539939][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 488.562685][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 488.571883][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 488.590320][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 488.608876][T10920] chnl_net:caif_netlink_parms(): no params data found [ 488.620970][ T5151] Bluetooth: hci0: command tx timeout [ 488.750163][ T7946] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.770232][T10968] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1225'. [ 488.776948][T10963] netlink: 'syz.5.1224': attribute type 17 has an invalid length. [ 488.788475][T10963] netlink: 'syz.5.1224': attribute type 16 has an invalid length. [ 488.799033][T10963] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1224'. [ 489.336047][ T5151] Bluetooth: hci2: command tx timeout [ 489.379835][T10920] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.391782][T10920] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.420108][T10920] bridge_slave_0: entered allmulticast mode [ 489.437667][T10920] bridge_slave_0: entered promiscuous mode [ 489.507313][T10920] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.514520][T10920] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.527734][T10920] bridge_slave_1: entered allmulticast mode [ 489.536739][T10920] bridge_slave_1: entered promiscuous mode [ 489.718428][T10920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.774479][T10920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.871901][ T7946] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.963186][T10992] netlink: 'syz.5.1230': attribute type 33 has an invalid length. [ 489.981798][T10992] netlink: 'syz.5.1230': attribute type 3 has an invalid length. [ 489.984600][T10990] netlink: 'syz.5.1230': attribute type 10 has an invalid length. [ 489.993779][T10992] netlink: 153952 bytes leftover after parsing attributes in process `syz.5.1230'. [ 489.997710][T10990] netlink: 65015 bytes leftover after parsing attributes in process `syz.5.1230'. [ 490.002693][T10920] team0: Port device team_slave_0 added [ 490.046636][ T7946] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.082667][T10920] team0: Port device team_slave_1 added [ 490.696763][ T5151] Bluetooth: hci3: command tx timeout [ 490.703419][ T5151] Bluetooth: hci0: command tx timeout [ 490.961591][ T7946] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.094412][T11000] netlink: 14719 bytes leftover after parsing attributes in process `syz.5.1232'. [ 491.113911][T10999] netlink: 14719 bytes leftover after parsing attributes in process `syz.5.1232'. [ 491.192723][ T7946] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.253819][T10920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.273786][T10920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.305202][T10920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.326657][T10920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.333742][T10920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.366099][T10920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.395328][T10960] chnl_net:caif_netlink_parms(): no params data found [ 491.420625][ T5844] Bluetooth: hci2: command tx timeout [ 491.457674][T11007] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1234'. [ 491.491351][T11007] netlink: 'syz.5.1234': attribute type 10 has an invalid length. [ 491.549615][T11007] bridge0: port 3(dummy0) entered disabled state [ 491.558335][T11007] dummy0: left allmulticast mode [ 491.563433][T11007] dummy0: left promiscuous mode [ 491.580484][T11007] bridge0: port 3(dummy0) entered disabled state [ 491.599042][T11007] : (slave dummy0): Enslaving as an active interface with an up link [ 491.806419][T10920] hsr_slave_0: entered promiscuous mode [ 491.813355][T10920] hsr_slave_1: entered promiscuous mode [ 491.825155][T10920] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 491.833237][T10920] Cannot create hsr debugfs directory [ 491.909837][T11013] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 491.938789][T11013] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 492.107964][ T7946] bridge_slave_1: left allmulticast mode [ 492.113941][ T7946] bridge_slave_1: left promiscuous mode [ 492.121019][ T7946] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.132201][ T7946] bridge_slave_0: left allmulticast mode [ 492.140986][ T7946] bridge_slave_0: left promiscuous mode [ 492.147580][ T7946] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.159207][T11024] netlink: 'syz.5.1237': attribute type 10 has an invalid length. [ 492.171597][ T7946] bridge_slave_1: left allmulticast mode [ 492.183196][ T7946] bridge_slave_1: left promiscuous mode [ 492.189502][ T7946] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.201350][ T7946] bridge_slave_0: left allmulticast mode [ 492.207659][ T7946] bridge_slave_0: left promiscuous mode [ 492.213957][ T7946] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.786160][ T5844] Bluetooth: hci3: command tx timeout [ 492.841665][ T7946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.852616][ T7946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 492.863576][ T7946] bond0 (unregistering): Released all slaves [ 492.961136][ T7946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.972493][ T7946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 492.982874][ T7946] bond0 (unregistering): Released all slaves [ 493.024411][T11024] hsr_slave_0: entered promiscuous mode [ 493.030445][T11024] hsr_slave_0: entered allmulticast mode [ 493.039509][T11024] team0: Port device hsr_slave_0 added [ 493.100666][T10960] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.126668][T10960] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.134857][T10960] bridge_slave_0: entered allmulticast mode [ 493.155571][T10960] bridge_slave_0: entered promiscuous mode [ 493.171948][T10960] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.179806][T10960] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.187351][T10960] bridge_slave_1: entered allmulticast mode [ 493.195332][T10960] bridge_slave_1: entered promiscuous mode [ 493.496099][ T5844] Bluetooth: hci2: command tx timeout [ 493.633774][T10889] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 493.703980][T10889] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 493.722494][T10960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.764216][T10960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.801319][T10889] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 493.863795][T10889] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 493.961256][T10960] team0: Port device team_slave_0 added [ 494.023128][T10960] team0: Port device team_slave_1 added [ 494.052729][T11048] netlink: 'syz.5.1246': attribute type 6 has an invalid length. [ 494.061195][T11048] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1246'. [ 494.406706][ T7946] hsr_slave_0: left promiscuous mode [ 494.413454][ T7946] hsr_slave_1: left promiscuous mode [ 494.419562][ T7946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.429956][ T7946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.447026][ T7946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.454494][ T7946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.498667][ T7946] hsr_slave_0: left promiscuous mode [ 494.505139][ T7946] hsr_slave_1: left promiscuous mode [ 494.511895][ T7946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.520185][ T7946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.533208][ T7946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.541201][ T7946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.613538][ T7946] veth1_macvtap: left promiscuous mode [ 494.623957][ T7946] veth0_macvtap: left promiscuous mode [ 494.632611][ T7946] veth1_vlan: left promiscuous mode [ 494.643324][ T7946] veth0_vlan: left promiscuous mode [ 494.659323][ T7946] veth1_macvtap: left promiscuous mode [ 494.665023][ T7946] veth0_macvtap: left promiscuous mode [ 494.679791][ T7946] veth1_vlan: left promiscuous mode [ 494.685205][ T7946] veth0_vlan: left promiscuous mode [ 494.857711][ T5844] Bluetooth: hci3: command tx timeout [ 495.335133][ T7946] team0 (unregistering): Port device team_slave_1 removed [ 495.373342][ T7946] team0 (unregistering): Port device team_slave_0 removed [ 496.609587][ T7946] team0 (unregistering): Port device team_slave_1 removed [ 496.648109][ T7946] team0 (unregistering): Port device team_slave_0 removed [ 496.945979][ T5844] Bluetooth: hci3: command tx timeout [ 496.986893][T10960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.993886][T10960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.022061][T10960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.070317][T11069] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1251'. [ 497.088430][T10960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.107260][T10960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.156435][T10960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.404205][T10889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.448423][T10960] hsr_slave_0: entered promiscuous mode [ 497.476389][T10960] hsr_slave_1: entered promiscuous mode [ 497.490809][T10960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 497.514506][T10960] Cannot create hsr debugfs directory [ 498.181292][T10889] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.224064][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.231262][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.366666][ T7941] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.373936][ T7941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.600995][T10920] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 498.612620][T10920] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 498.657624][T10920] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 498.700455][T10920] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 498.785028][T11100] netlink: 'syz.5.1260': attribute type 29 has an invalid length. [ 498.801955][T11101] netlink: 'syz.5.1260': attribute type 29 has an invalid length. [ 499.144372][T11113] FAULT_INJECTION: forcing a failure. [ 499.144372][T11113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 499.195960][T11113] CPU: 1 UID: 0 PID: 11113 Comm: syz.2.1264 Not tainted 6.15.0-rc3-syzkaller-gf2858f308131 #0 PREEMPT(full) [ 499.195992][T11113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 499.196011][T11113] Call Trace: [ 499.196020][T11113] [ 499.196029][T11113] dump_stack_lvl+0x241/0x360 [ 499.196069][T11113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 499.196100][T11113] ? __pfx__printk+0x10/0x10 [ 499.196145][T11113] should_fail_ex+0x424/0x570 [ 499.196182][T11113] _copy_from_iter+0x211/0x1c70 [ 499.196225][T11113] ? __pfx__copy_from_iter+0x10/0x10 [ 499.196253][T11113] ? __build_skb_around+0x247/0x3d0 [ 499.196286][T11113] ? skb_put+0x114/0x1f0 [ 499.196331][T11113] netlink_sendmsg+0x73c/0xcd0 [ 499.196371][T11113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.196400][T11113] ? __pfx_aa_file_perm+0x10/0x10 [ 499.196426][T11113] ? aa_sock_msg_perm+0x91/0x160 [ 499.196458][T11113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.196481][T11113] __sock_sendmsg+0x221/0x270 [ 499.196509][T11113] sock_write_iter+0x2d9/0x3f0 [ 499.196535][T11113] ? __pfx_sock_write_iter+0x10/0x10 [ 499.196570][T11113] ? bpf_lsm_file_permission+0x9/0x10 [ 499.196607][T11113] vfs_write+0x70f/0xd10 [ 499.196643][T11113] ? __pfx_sock_write_iter+0x10/0x10 [ 499.196685][T11113] ? __pfx_vfs_write+0x10/0x10 [ 499.196717][T11113] ? __fget_files+0x2a/0x420 [ 499.196741][T11113] ? __fget_files+0x2a/0x420 [ 499.196772][T11113] ksys_write+0x19d/0x2d0 [ 499.196803][T11113] ? __pfx_ksys_write+0x10/0x10 [ 499.196873][T11113] ? do_syscall_64+0xb6/0x210 [ 499.196900][T11113] do_syscall_64+0xf3/0x210 [ 499.196922][T11113] ? clear_bhb_loop+0x45/0xa0 [ 499.196946][T11113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.196966][T11113] RIP: 0033:0x7fe7fb38e969 [ 499.196985][T11113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.197002][T11113] RSP: 002b:00007fe7fc2af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 499.197025][T11113] RAX: ffffffffffffffda RBX: 00007fe7fb5b5fa0 RCX: 00007fe7fb38e969 [ 499.197040][T11113] RDX: 000000000000fe33 RSI: 0000200000000580 RDI: 0000000000000003 [ 499.197053][T11113] RBP: 00007fe7fc2af090 R08: 0000000000000000 R09: 0000000000000000 [ 499.197067][T11113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.197078][T11113] R13: 0000000000000000 R14: 00007fe7fb5b5fa0 R15: 00007fffff644428 [ 499.197112][T11113] [ 499.206855][T11114] netlink: 'syz.5.1263': attribute type 1 has an invalid length. [ 499.332535][T10920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.585666][T10920] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.625161][T11119] netlink: 'syz.2.1265': attribute type 10 has an invalid length. [ 499.861390][ T7963] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.868586][ T7963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.909315][ T7963] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.916603][ T7963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.970730][T10889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.007687][T10960] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 500.028002][T10960] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 500.069280][T10960] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 500.351673][T10960] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 500.555187][T10889] veth0_vlan: entered promiscuous mode [ 500.605591][T10889] veth1_vlan: entered promiscuous mode [ 500.714204][T10889] veth0_macvtap: entered promiscuous mode [ 500.770613][T10889] veth1_macvtap: entered promiscuous mode [ 500.788168][T10960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.820319][T10889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.860192][T10889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.887912][T10889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.899728][T10889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.910922][T10889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.922506][T10889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.933167][T10889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.944791][T10889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.982049][T11146] netlink: 'syz.2.1271': attribute type 10 has an invalid length. [ 501.008387][T10889] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.020024][T10889] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.030093][T10889] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.039501][T10889] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.058807][T10960] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.080685][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.087906][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.102837][T10920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.160711][ T7963] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.167955][ T7963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.228607][T11154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1273'. [ 501.329489][T11155] : renamed from bond0 (while UP) [ 501.412782][T10889] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 501.427235][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.433603][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.442947][T10889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.453050][T10889] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 501.464499][T10889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.483001][T11158] netlink: 'syz.5.1274': attribute type 12 has an invalid length. [ 501.493631][T11158] netlink: 120 bytes leftover after parsing attributes in process `syz.5.1274'. [ 501.539368][ T7946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.576970][ T7946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.635275][ T7946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.676186][ T7946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.726997][T11167] netlink: 'syz.2.1275': attribute type 10 has an invalid length. [ 501.735031][T11167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 501.798589][T11167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.929884][T11167] batadv_slave_0: entered promiscuous mode [ 501.949259][T11167] batadv_slave_0: entered allmulticast mode [ 501.996261][T11167] : (slave batadv_slave_0): Enslaving as an active interface with an up link [ 502.478671][T10920] veth0_vlan: entered promiscuous mode [ 502.646387][T11181] netlink: 'syz.5.1277': attribute type 10 has an invalid length. [ 502.741891][T10920] veth1_vlan: entered promiscuous mode [ 503.079848][ T7955] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.150752][T10960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.220986][ T7955] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.305916][ T7955] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.352280][T10920] veth0_macvtap: entered promiscuous mode [ 503.378936][T10920] veth1_macvtap: entered promiscuous mode [ 503.448935][ T7955] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.468891][T10960] veth0_vlan: entered promiscuous mode [ 503.483801][T10920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.494367][T10920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.510678][T10920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.523434][T10920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.534390][T10920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.545242][T10920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.558608][T10920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.569722][T10920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.582217][T10920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.593488][T10920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.604322][T10960] veth1_vlan: entered promiscuous mode [ 503.617916][T10920] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.626761][T10920] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.635468][T10920] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.645086][T10920] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.774230][T10920] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 503.784245][T10920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.795355][T10920] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 503.807822][T10920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.834940][T10960] veth0_macvtap: entered promiscuous mode [ 503.846243][ T7950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.859008][ T7950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.864563][T10960] veth1_macvtap: entered promiscuous mode [ 503.894455][ T7955] bridge_slave_1: left allmulticast mode [ 503.901519][ T7955] bridge_slave_1: left promiscuous mode [ 503.907820][ T7955] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.919755][ T7955] bridge_slave_0: left allmulticast mode [ 503.925423][ T7955] bridge_slave_0: left promiscuous mode [ 503.932343][ T7955] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.249048][ T7955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.261281][ T7955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.273515][ T7955] bond0 (unregistering): Released all slaves [ 504.314231][ T7946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.314803][T10960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.333755][ T7946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.339143][T10960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.352521][T10960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.370428][T10960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.383421][T10960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.413559][T10960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.424336][T10960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.436381][T10960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.447905][T10960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.459544][T10960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.471386][T10960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.481362][T10960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.492037][T10960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.505501][T10960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.557949][T10960] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.570976][T10960] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.588673][T10960] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.597931][T10960] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.709468][T11190] netlink: 'syz.2.1280': attribute type 10 has an invalid length. [ 505.243160][ T5151] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 505.252327][ T5151] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 505.261231][ T5151] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 505.272892][ T5151] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 505.281667][ T5151] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 505.560348][T11190] dummy0: entered promiscuous mode [ 505.574562][T11190] dummy0: entered allmulticast mode [ 505.582152][T11190] team0: Port device dummy0 added [ 505.702707][ T7955] hsr_slave_0: left promiscuous mode [ 505.726012][ T7955] hsr_slave_1: left promiscuous mode [ 505.740097][ T7955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 505.752599][ T7955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 505.763916][ T7955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 505.775635][ T7955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 505.818551][ T7955] veth1_macvtap: left promiscuous mode [ 505.824283][ T7955] veth0_macvtap: left promiscuous mode [ 505.836632][ T7955] veth1_vlan: left promiscuous mode [ 505.842071][ T7955] veth0_vlan: left promiscuous mode [ 506.333911][ T7955] team0 (unregistering): Port device team_slave_1 removed [ 506.383064][ T7955] team0 (unregistering): Port device team_slave_0 removed [ 506.823983][T10960] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 506.836406][T10960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.846531][T10960] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 506.856886][T10960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.917417][ T7963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.932248][ T7963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.003260][ T7963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.023211][ T7963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.237191][ T7955] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.279596][T11193] chnl_net:caif_netlink_parms(): no params data found [ 507.337616][ T5151] Bluetooth: hci0: command tx timeout [ 507.584701][ T7955] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.632037][T11211] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 507.724721][T11211] veth1_macvtap: left promiscuous mode [ 507.730543][T11211] macsec0: entered promiscuous mode [ 507.785282][ T7955] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.831020][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 507.851121][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 507.864833][T11193] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.872737][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 507.881208][T11193] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.891120][T11193] bridge_slave_0: entered allmulticast mode [ 507.891640][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 507.899471][T11193] bridge_slave_0: entered promiscuous mode [ 507.912392][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 507.956418][ T7955] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.986778][T11193] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.994049][T11193] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.001864][T11193] bridge_slave_1: entered allmulticast mode [ 508.012008][T11193] bridge_slave_1: entered promiscuous mode [ 508.097727][T11193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.120542][T11193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.232044][T11193] team0: Port device team_slave_0 added [ 508.273464][T11193] team0: Port device team_slave_1 added [ 508.331021][T11193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.340841][T11193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.369532][T11193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.381154][ T7955] bridge_slave_1: left allmulticast mode [ 508.389899][ T7955] bridge_slave_1: left promiscuous mode [ 508.395664][ T7955] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.405380][ T7955] bridge_slave_0: left allmulticast mode [ 508.411926][ T7955] bridge_slave_0: left promiscuous mode [ 508.418472][ T7955] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.715650][ T7955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 508.727368][ T7955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 508.738555][ T7955] bond0 (unregistering): Released all slaves [ 508.756661][T11193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.763656][T11193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.791879][T11193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.954192][T11193] hsr_slave_0: entered promiscuous mode [ 508.961265][T11193] hsr_slave_1: entered promiscuous mode [ 509.059662][T11217] chnl_net:caif_netlink_parms(): no params data found [ 509.113744][ T7955] hsr_slave_0: left promiscuous mode [ 509.120322][ T7955] hsr_slave_1: left promiscuous mode [ 509.127036][ T7955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.134473][ T7955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.143412][ T7955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.150941][ T7955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.169111][ T7955] veth1_macvtap: left promiscuous mode [ 509.174664][ T7955] veth0_macvtap: left promiscuous mode [ 509.181121][ T7955] veth1_vlan: left promiscuous mode [ 509.186612][ T7955] veth0_vlan: left promiscuous mode [ 509.416017][ T5151] Bluetooth: hci0: command tx timeout [ 509.634057][ T7955] team0 (unregistering): Port device team_slave_1 removed [ 509.683119][ T7955] team0 (unregistering): Port device team_slave_0 removed [ 509.977463][ T5844] Bluetooth: hci2: command tx timeout [ 509.984205][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 509.993803][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 510.003300][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 510.011704][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 510.024930][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 510.445479][T11217] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.477271][T11217] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.484752][T11217] bridge_slave_0: entered allmulticast mode [ 510.501796][T11244] netlink: 'syz.2.1289': attribute type 10 has an invalid length. [ 510.525921][T11217] bridge_slave_0: entered promiscuous mode [ 510.839934][T11217] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.853306][T11217] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.861375][T11217] bridge_slave_1: entered allmulticast mode [ 510.870095][T11217] bridge_slave_1: entered promiscuous mode [ 510.978542][T11217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.997665][T11217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.496068][ T5151] Bluetooth: hci0: command tx timeout [ 511.612424][T11217] team0: Port device team_slave_0 added [ 511.613330][T11258] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1293'. [ 511.626499][T11217] team0: Port device team_slave_1 added [ 511.671460][T11257] netlink: 'syz.5.1293': attribute type 1 has an invalid length. [ 511.684241][T11257] netlink: 'syz.5.1293': attribute type 2 has an invalid length. [ 511.696163][T11257] netlink: 'syz.5.1293': attribute type 4 has an invalid length. [ 511.703936][T11257] netlink: 'syz.5.1293': attribute type 1 has an invalid length. [ 511.715466][T11257] netlink: 'syz.5.1293': attribute type 2 has an invalid length. [ 511.736339][T11257] netlink: 106968 bytes leftover after parsing attributes in process `syz.5.1293'. [ 511.748745][T11257] netlink: 'syz.5.1293': attribute type 1 has an invalid length. [ 511.758433][T11257] netlink: 'syz.5.1293': attribute type 2 has an invalid length. [ 511.760951][T11217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.780517][T11217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.810153][T11217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.880283][T11217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.888381][T11217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.918987][T11217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.975080][T11261] veth0_vlan: entered allmulticast mode [ 512.021862][T11264] ªªªªªª: renamed from vlan0 [ 512.056763][ T5151] Bluetooth: hci2: command tx timeout [ 512.060422][ T5844] Bluetooth: hci3: command tx timeout [ 512.171582][ T7955] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.221266][T11217] hsr_slave_0: entered promiscuous mode [ 512.228947][T11217] hsr_slave_1: entered promiscuous mode [ 512.235416][T11217] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 512.244745][T11217] Cannot create hsr debugfs directory [ 512.277425][ T7955] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.348489][T11231] chnl_net:caif_netlink_parms(): no params data found [ 512.395455][ T7955] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.453808][ T7955] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.576087][T11280] tc_dump_action: action bad kind [ 512.746684][T11193] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 512.780327][T11286] netlink: 'syz.5.1299': attribute type 3 has an invalid length. [ 512.802144][T11286] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1299'. [ 512.821976][T11231] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.832339][T11231] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.844741][T11231] bridge_slave_0: entered allmulticast mode [ 512.854783][T11231] bridge_slave_0: entered promiscuous mode [ 512.926324][T11193] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 512.943620][T11231] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.952277][T11231] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.964583][T11231] bridge_slave_1: entered allmulticast mode [ 512.978917][T11231] bridge_slave_1: entered promiscuous mode [ 513.055568][T11193] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 513.139586][T11193] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 513.176426][T11231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 513.219739][T11231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.234068][ T7955] bridge_slave_1: left allmulticast mode [ 513.241606][ T7955] bridge_slave_1: left promiscuous mode [ 513.253842][ T7955] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.266844][ T7955] bridge_slave_0: left allmulticast mode [ 513.272878][ T7955] bridge_slave_0: left promiscuous mode [ 513.283271][ T7955] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.478516][T11289] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1300'. [ 513.576067][ T5844] Bluetooth: hci0: command tx timeout [ 513.623205][T11291] netlink: 'syz.5.1301': attribute type 10 has an invalid length. [ 513.721310][ T7955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 513.732843][ T7955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 513.747728][ T7955] bond0 (unregistering): Released all slaves [ 513.781764][T11289] FAULT_INJECTION: forcing a failure. [ 513.781764][T11289] name failslab, interval 1, probability 0, space 0, times 0 [ 513.799637][T11289] CPU: 0 UID: 0 PID: 11289 Comm: syz.2.1300 Not tainted 6.15.0-rc3-syzkaller-gf2858f308131 #0 PREEMPT(full) [ 513.799665][T11289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 513.799677][T11289] Call Trace: [ 513.799686][T11289] [ 513.799694][T11289] dump_stack_lvl+0x241/0x360 [ 513.799730][T11289] ? __pfx_dump_stack_lvl+0x10/0x10 [ 513.799758][T11289] ? __pfx__printk+0x10/0x10 [ 513.799789][T11289] ? queue_work_on+0x261/0x380 [ 513.799812][T11289] ? __pfx_queue_work_on+0x10/0x10 [ 513.799835][T11289] should_fail_ex+0x424/0x570 [ 513.799871][T11289] should_failslab+0xac/0x100 [ 513.799895][T11289] __kmalloc_cache_noprof+0x73/0x370 [ 513.799915][T11289] ? sctp_inet6addr_event+0x36e/0x730 [ 513.799939][T11289] ? __asan_memset+0x23/0x50 [ 513.799968][T11289] sctp_inet6addr_event+0x36e/0x730 [ 513.800010][T11289] notifier_call_chain+0x1a5/0x3f0 [ 513.800039][T11289] ? atomic_notifier_call_chain+0x26/0x180 [ 513.800054][T11289] atomic_notifier_call_chain+0xdb/0x180 [ 513.800070][T11289] ipv6_add_addr+0xe1d/0x10d0 [ 513.800099][T11289] ? __pfx_ipv6_add_addr+0x10/0x10 [ 513.800119][T11289] ? mod_delayed_work_on+0x2b8/0x380 [ 513.800145][T11289] inet6_addr_add+0x3be/0xee0 [ 513.800167][T11289] ? __pfx_inet6_addr_add+0x10/0x10 [ 513.800182][T11289] ? ipv6_get_ifaddr+0x1e1/0x8f0 [ 513.800207][T11289] ? ipv6_get_ifaddr+0x801/0x8f0 [ 513.800232][T11289] ? ipv6_get_ifaddr+0x1e1/0x8f0 [ 513.800255][T11289] ? __pfx_ipv6_get_ifaddr+0x10/0x10 [ 513.800277][T11289] ? ipv6_mc_up+0x3c9/0x570 [ 513.800299][T11289] inet6_rtm_newaddr+0xbfd/0x11b0 [ 513.800330][T11289] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 513.800371][T11289] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 513.800392][T11289] rtnetlink_rcv_msg+0x80f/0xd70 [ 513.800411][T11289] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 513.800434][T11289] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 513.800459][T11289] ? ref_tracker_free+0x63e/0x7e0 [ 513.800480][T11289] netlink_rcv_skb+0x208/0x480 [ 513.800500][T11289] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 513.800521][T11289] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 513.800555][T11289] ? netlink_deliver_tap+0x2e/0x1b0 [ 513.800576][T11289] ? netlink_deliver_tap+0x2e/0x1b0 [ 513.800597][T11289] netlink_unicast+0x7f8/0x9a0 [ 513.800622][T11289] ? __pfx_netlink_unicast+0x10/0x10 [ 513.800640][T11289] ? skb_put+0x114/0x1f0 [ 513.800666][T11289] netlink_sendmsg+0x8c3/0xcd0 [ 513.800695][T11289] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.800718][T11289] ? __pfx_aa_file_perm+0x10/0x10 [ 513.800737][T11289] ? aa_sock_msg_perm+0x91/0x160 [ 513.800761][T11289] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.800778][T11289] __sock_sendmsg+0x221/0x270 [ 513.800799][T11289] sock_write_iter+0x2d9/0x3f0 [ 513.800818][T11289] ? __pfx_sock_write_iter+0x10/0x10 [ 513.800845][T11289] ? bpf_lsm_file_permission+0x9/0x10 [ 513.800873][T11289] vfs_write+0x70f/0xd10 [ 513.800900][T11289] ? __pfx_sock_write_iter+0x10/0x10 [ 513.800918][T11289] ? __pfx_vfs_write+0x10/0x10 [ 513.800941][T11289] ? __fget_files+0x2a/0x420 [ 513.800958][T11289] ? __fget_files+0x2a/0x420 [ 513.800980][T11289] ksys_write+0x19d/0x2d0 [ 513.801002][T11289] ? __pfx_ksys_write+0x10/0x10 [ 513.801028][T11289] ? do_syscall_64+0xb6/0x210 [ 513.801054][T11289] do_syscall_64+0xf3/0x210 [ 513.801070][T11289] ? clear_bhb_loop+0x45/0xa0 [ 513.801088][T11289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.801103][T11289] RIP: 0033:0x7fe7fb38e969 [ 513.801117][T11289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.801129][T11289] RSP: 002b:00007fe7fc2af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 513.801146][T11289] RAX: ffffffffffffffda RBX: 00007fe7fb5b5fa0 RCX: 00007fe7fb38e969 [ 513.801157][T11289] RDX: 000000000000fe33 RSI: 0000200000000580 RDI: 0000000000000003 [ 513.801167][T11289] RBP: 00007fe7fc2af090 R08: 0000000000000000 R09: 0000000000000000 [ 513.801177][T11289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.801186][T11289] R13: 0000000000000000 R14: 00007fe7fb5b5fa0 R15: 00007fffff644428 [ 513.801210][T11289] [ 513.802213][T11291] macvlan0: entered promiscuous mode [ 514.136091][ T5844] Bluetooth: hci2: command tx timeout [ 514.150455][T11291] : (slave macvlan0): Enslaving as an active interface with an up link [ 514.160865][ T5151] Bluetooth: hci3: command tx timeout [ 514.314038][T11231] team0: Port device team_slave_0 added [ 514.321136][T11294] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1302'. [ 514.410617][T11231] team0: Port device team_slave_1 added [ 514.703163][T11231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.733626][T11231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.772459][T11231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.516668][T11231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.523663][T11231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.551175][T11231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.573511][T11308] pim6reg0: tun_chr_ioctl cmd 1074025678 [ 515.580808][T11308] pim6reg0: group set to 0 [ 515.651348][ T7955] hsr_slave_0: left promiscuous mode [ 515.657723][ T7955] hsr_slave_1: left promiscuous mode [ 515.663928][ T7955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.672286][ T7955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 515.682053][ T7955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.690406][ T7955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.710030][ T7955] veth1_macvtap: left promiscuous mode [ 515.715755][ T7955] veth0_macvtap: left promiscuous mode [ 515.721634][ T7955] veth1_vlan: left promiscuous mode [ 515.727445][ T7955] veth0_vlan: left promiscuous mode [ 515.933706][T11318] validate_nla: 1 callbacks suppressed [ 515.933749][T11318] netlink: 'syz.2.1309': attribute type 21 has an invalid length. [ 516.216446][ T5151] Bluetooth: hci2: command tx timeout [ 516.296063][ T5151] Bluetooth: hci3: command tx timeout [ 516.360186][ T7955] team0 (unregistering): Port device team_slave_1 removed [ 516.401121][ T7955] team0 (unregistering): Port device team_slave_0 removed [ 516.902000][T11231] hsr_slave_0: entered promiscuous mode [ 516.914678][T11231] hsr_slave_1: entered promiscuous mode [ 516.928160][T11231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 516.947740][T11231] Cannot create hsr debugfs directory [ 517.195247][T11327] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1312'. [ 517.277699][T11327] FAULT_INJECTION: forcing a failure. [ 517.277699][T11327] name failslab, interval 1, probability 0, space 0, times 0 [ 517.306811][T11327] CPU: 0 UID: 0 PID: 11327 Comm: syz.5.1312 Not tainted 6.15.0-rc3-syzkaller-gf2858f308131 #0 PREEMPT(full) [ 517.306840][T11327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 517.306852][T11327] Call Trace: [ 517.306860][T11327] [ 517.306867][T11327] dump_stack_lvl+0x241/0x360 [ 517.306901][T11327] ? __pfx_dump_stack_lvl+0x10/0x10 [ 517.306926][T11327] ? __pfx__printk+0x10/0x10 [ 517.306955][T11327] ? __pfx___might_resched+0x10/0x10 [ 517.306978][T11327] should_fail_ex+0x424/0x570 [ 517.307009][T11327] should_failslab+0xac/0x100 [ 517.307030][T11327] __kmalloc_noprof+0xdf/0x4d0 [ 517.307046][T11327] ? fib6_get_table+0x253/0x270 [ 517.307063][T11327] ? fib6_info_alloc+0x2e/0xf0 [ 517.307084][T11327] fib6_info_alloc+0x2e/0xf0 [ 517.307101][T11327] ip6_route_info_create+0x445/0x12c0 [ 517.307138][T11327] ip6_route_add+0x28/0x160 [ 517.307160][T11327] inet6_addr_add+0x854/0xee0 [ 517.307187][T11327] ? __pfx_inet6_addr_add+0x10/0x10 [ 517.307241][T11327] ? __pfx_ipv6_get_ifaddr+0x10/0x10 [ 517.307268][T11327] ? ipv6_mc_up+0x3c9/0x570 [ 517.307295][T11327] inet6_rtm_newaddr+0xbfd/0x11b0 [ 517.307332][T11327] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 517.307382][T11327] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 517.307408][T11327] rtnetlink_rcv_msg+0x80f/0xd70 [ 517.307429][T11327] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 517.307457][T11327] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 517.307488][T11327] ? ref_tracker_free+0x63e/0x7e0 [ 517.307513][T11327] netlink_rcv_skb+0x208/0x480 [ 517.307539][T11327] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 517.307567][T11327] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 517.307620][T11327] ? netlink_deliver_tap+0x2e/0x1b0 [ 517.307645][T11327] ? netlink_deliver_tap+0x2e/0x1b0 [ 517.307670][T11327] netlink_unicast+0x7f8/0x9a0 [ 517.307707][T11327] ? __pfx_netlink_unicast+0x10/0x10 [ 517.307729][T11327] ? skb_put+0x114/0x1f0 [ 517.307760][T11327] netlink_sendmsg+0x8c3/0xcd0 [ 517.307861][T11327] ? __pfx_netlink_sendmsg+0x10/0x10 [ 517.307898][T11327] ? __pfx_aa_file_perm+0x10/0x10 [ 517.307923][T11327] ? aa_sock_msg_perm+0x91/0x160 [ 517.307953][T11327] ? __pfx_netlink_sendmsg+0x10/0x10 [ 517.307975][T11327] __sock_sendmsg+0x221/0x270 [ 517.308003][T11327] sock_write_iter+0x2d9/0x3f0 [ 517.308028][T11327] ? __pfx_sock_write_iter+0x10/0x10 [ 517.308061][T11327] ? bpf_lsm_file_permission+0x9/0x10 [ 517.308097][T11327] vfs_write+0x70f/0xd10 [ 517.308130][T11327] ? __pfx_sock_write_iter+0x10/0x10 [ 517.308153][T11327] ? __pfx_vfs_write+0x10/0x10 [ 517.308182][T11327] ? __fget_files+0x2a/0x420 [ 517.308203][T11327] ? __fget_files+0x2a/0x420 [ 517.308231][T11327] ksys_write+0x19d/0x2d0 [ 517.308259][T11327] ? __pfx_ksys_write+0x10/0x10 [ 517.308292][T11327] ? do_syscall_64+0xb6/0x210 [ 517.308315][T11327] do_syscall_64+0xf3/0x210 [ 517.308335][T11327] ? clear_bhb_loop+0x45/0xa0 [ 517.308357][T11327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.308375][T11327] RIP: 0033:0x7f894d98e969 [ 517.308415][T11327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 517.308430][T11327] RSP: 002b:00007f894e7df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 517.308451][T11327] RAX: ffffffffffffffda RBX: 00007f894dbb5fa0 RCX: 00007f894d98e969 [ 517.308466][T11327] RDX: 000000000000fe33 RSI: 0000200000000580 RDI: 0000000000000003 [ 517.308478][T11327] RBP: 00007f894e7df090 R08: 0000000000000000 R09: 0000000000000000 [ 517.308489][T11327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 517.308500][T11327] R13: 0000000000000000 R14: 00007f894dbb5fa0 R15: 00007ffdd22f6c68 [ 517.308530][T11327] [ 517.702752][T11217] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 517.754085][T11217] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 517.829329][T11217] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 517.880672][T11217] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 517.923083][T11193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.015141][T11193] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.059417][ T7946] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.066625][ T7946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.096870][ T7955] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.104005][ T7955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.251544][T11217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.260920][T11341] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1316'. [ 518.283556][T11339] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1316'. [ 518.303334][T11340] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1316'. [ 518.354069][T11217] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.376559][ T5151] Bluetooth: hci3: command tx timeout [ 518.395519][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.402710][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.464083][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.471314][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.743140][T11231] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 518.794655][T11231] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 518.825821][T11231] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 518.878297][T11231] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 518.960824][T11193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.332808][T11355] can: request_module (can-proto-0) failed. [ 519.518569][T11193] veth0_vlan: entered promiscuous mode [ 519.584962][T11217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.662309][T11193] veth1_vlan: entered promiscuous mode [ 519.769881][T11231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.812927][T11193] veth0_macvtap: entered promiscuous mode [ 519.838444][T11193] veth1_macvtap: entered promiscuous mode [ 519.873374][T11231] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.954176][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.961450][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.018324][T11193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 520.052927][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.060180][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.131082][T11193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.143951][T11193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.154085][T11193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.164644][T11193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.178241][T11193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 520.231368][T11193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.250368][T11193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.259252][T11193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.275815][T11193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.373263][T11382] netlink: 'syz.2.1324': attribute type 6 has an invalid length. [ 520.535727][T11217] veth0_vlan: entered promiscuous mode [ 520.595297][T11193] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 520.625894][T11193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.640019][T11193] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 520.655984][T11193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.704773][ T7946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.752709][ T7946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.824100][T11217] veth1_vlan: entered promiscuous mode [ 520.921088][ T7939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.959318][ T7939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.028643][T11400] netlink: 'syz.2.1327': attribute type 10 has an invalid length. [ 521.039002][T11231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 521.053429][T11217] veth0_macvtap: entered promiscuous mode [ 521.199723][T11400] : (slave team0): Releasing backup interface [ 521.206825][T11400] team0 (unregistering): left promiscuous mode [ 521.213008][T11400] C: left promiscuous mode [ 521.220763][T11400] team_slave_1: left promiscuous mode [ 521.228222][T11400] dummy0: left promiscuous mode [ 521.233267][T11400] team0 (unregistering): left allmulticast mode [ 521.243150][T11400] C: left allmulticast mode [ 521.249091][T11400] team_slave_1: left allmulticast mode [ 521.254603][T11400] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:578 [ 521.269179][T11400] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 11400, name: syz.2.1327 [ 521.278553][T11400] preempt_count: 0, expected: 0 [ 521.283589][T11400] RCU nest depth: 1, expected: 0 [ 521.288838][T11400] 2 locks held by syz.2.1327/11400: [ 521.294272][T11400] #0: ffffffff900fd848 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x3a3/0x8c0 [ 521.303623][T11400] #1: ffffffff8ed3df20 (rcu_read_lock){....}-{1:3}, at: team_change_rx_flags+0x29/0x330 [ 521.313663][T11400] CPU: 1 UID: 0 PID: 11400 Comm: syz.2.1327 Not tainted 6.15.0-rc3-syzkaller-gf2858f308131 #0 PREEMPT(full) [ 521.313691][T11400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 521.313704][T11400] Call Trace: [ 521.313712][T11400] [ 521.313721][T11400] dump_stack_lvl+0x241/0x360 [ 521.313759][T11400] ? __pfx_dump_stack_lvl+0x10/0x10 [ 521.313807][T11400] __might_resched+0x558/0x6c0 [ 521.313840][T11400] ? dev_set_rx_mode+0x57/0x2e0 [ 521.313872][T11400] ? __pfx___might_resched+0x10/0x10 [ 521.313896][T11400] ? perf_trace_preemptirq_template+0xfa/0x400 [ 521.313925][T11400] ? __local_bh_enable_ip+0x106/0x200 [ 521.313971][T11400] __mutex_lock+0x12c/0x10c0 [ 521.314002][T11400] ? __pfx___dev_notify_flags+0x10/0x10 [ 521.314037][T11400] ? dev_set_allmulti+0x11c/0x270 [ 521.314064][T11400] ? netif_set_allmulti+0x224/0x380 [ 521.314094][T11400] ? __pfx___mutex_lock+0x10/0x10 [ 521.314115][T11400] ? do_raw_spin_unlock+0x13c/0x8b0 [ 521.314151][T11400] ? netif_set_allmulti+0x264/0x380 [ 521.314190][T11400] dev_set_allmulti+0x11c/0x270 [ 521.314226][T11400] team_change_rx_flags+0x1a8/0x330 [ 521.314269][T11400] ? team_change_rx_flags+0x29/0x330 [ 521.314301][T11400] ? __pfx_team_change_rx_flags+0x10/0x10 [ 521.314331][T11400] netif_set_allmulti+0x20e/0x380 [ 521.314371][T11400] dev_set_allmulti+0x143/0x270 [ 521.314407][T11400] __bond_release_one+0xc03/0x1220 [ 521.314463][T11400] ? __pfx___bond_release_one+0x10/0x10 [ 521.314488][T11400] ? __mutex_trylock_common+0x184/0x2e0 [ 521.314546][T11400] bond_netdev_event+0x557/0xfb0 [ 521.314579][T11400] ? __pfx_bond_netdev_event+0x10/0x10 [ 521.314606][T11400] ? rt_flush_dev+0x480/0x4b0 [ 521.314655][T11400] notifier_call_chain+0x1a5/0x3f0 [ 521.314685][T11400] unregister_netdevice_many_notify+0x16b7/0x2640 [ 521.314732][T11400] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 521.314762][T11400] ? rtnl_dellink+0x3a3/0x8c0 [ 521.314795][T11400] ? unregister_netdevice_queue+0x2c4/0x400 [ 521.314826][T11400] ? __nla_parse+0x40/0x60 [ 521.314850][T11400] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 521.314893][T11400] rtnl_dellink+0x53c/0x8c0 [ 521.314929][T11400] ? __pfx_rtnl_dellink+0x10/0x10 [ 521.315063][T11400] ? __pfx_rtnl_dellink+0x10/0x10 [ 521.315102][T11400] rtnetlink_rcv_msg+0x80f/0xd70 [ 521.315128][T11400] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 521.315162][T11400] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 521.315199][T11400] ? ref_tracker_free+0x63e/0x7e0 [ 521.315229][T11400] netlink_rcv_skb+0x208/0x480 [ 521.315267][T11400] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 521.315298][T11400] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 521.315348][T11400] ? netlink_deliver_tap+0x2e/0x1b0 [ 521.315378][T11400] ? netlink_deliver_tap+0x2e/0x1b0 [ 521.315408][T11400] netlink_unicast+0x7f8/0x9a0 [ 521.315444][T11400] ? __pfx_netlink_unicast+0x10/0x10 [ 521.315471][T11400] ? skb_put+0x114/0x1f0 [ 521.315508][T11400] netlink_sendmsg+0x8c3/0xcd0 [ 521.315559][T11400] ? __pfx_netlink_sendmsg+0x10/0x10 [ 521.315593][T11400] ? aa_sock_msg_perm+0x91/0x160 [ 521.315629][T11400] ? __pfx_netlink_sendmsg+0x10/0x10 [ 521.315654][T11400] __sock_sendmsg+0x221/0x270 [ 521.315689][T11400] ____sys_sendmsg+0x523/0x860 [ 521.315734][T11400] ? __pfx_____sys_sendmsg+0x10/0x10 [ 521.315765][T11400] ? __fget_files+0x2a/0x420 [ 521.315790][T11400] ? __fget_files+0x2a/0x420 [ 521.315822][T11400] __sys_sendmsg+0x271/0x360 [ 521.315863][T11400] ? __pfx___sys_sendmsg+0x10/0x10 [ 521.315960][T11400] ? do_syscall_64+0xb6/0x210 [ 521.315990][T11400] do_syscall_64+0xf3/0x210 [ 521.316015][T11400] ? clear_bhb_loop+0x45/0xa0 [ 521.316041][T11400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.316063][T11400] RIP: 0033:0x7fe7fb38e969 [ 521.316084][T11400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 521.316104][T11400] RSP: 002b:00007fe7fc28e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 521.316127][T11400] RAX: ffffffffffffffda RBX: 00007fe7fb5b6080 RCX: 00007fe7fb38e969 [ 521.316143][T11400] RDX: 0000000024000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 521.316156][T11400] RBP: 00007fe7fb410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 521.316169][T11400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.316182][T11400] R13: 0000000000000000 R14: 00007fe7fb5b6080 R15: 00007fffff644428 [ 521.316217][T11400] [ 521.754307][T11400] [ 521.756680][T11400] ============================= [ 521.761542][T11400] [ BUG: Invalid wait context ] [ 521.766404][T11400] 6.15.0-rc3-syzkaller-gf2858f308131 #0 Tainted: G W [ 521.774554][T11400] ----------------------------- [ 521.779396][T11400] syz.2.1327/11400 is trying to lock: [ 521.784760][T11400] ffff8880581eed30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: dev_set_allmulti+0x11c/0x270 [ 521.794882][T11400] other info that might help us debug this: [ 521.800766][T11400] context-{5:5} [ 521.804222][T11400] 2 locks held by syz.2.1327/11400: [ 521.809422][T11400] #0: ffffffff900fd848 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x3a3/0x8c0 [ 521.818413][T11400] #1: ffffffff8ed3df20 (rcu_read_lock){....}-{1:3}, at: team_change_rx_flags+0x29/0x330 [ 521.828275][T11400] stack backtrace: [ 521.832002][T11400] CPU: 1 UID: 0 PID: 11400 Comm: syz.2.1327 Tainted: G W 6.15.0-rc3-syzkaller-gf2858f308131 #0 PREEMPT(full) [ 521.832028][T11400] Tainted: [W]=WARN [ 521.832034][T11400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 521.832044][T11400] Call Trace: [ 521.832051][T11400] [ 521.832060][T11400] dump_stack_lvl+0x241/0x360 [ 521.832088][T11400] ? __pfx_dump_stack_lvl+0x10/0x10 [ 521.832112][T11400] ? __pfx__printk+0x10/0x10 [ 521.832140][T11400] __lock_acquire+0xc30/0xd80 [ 521.832167][T11400] lock_acquire+0x116/0x2f0 [ 521.832189][T11400] ? dev_set_allmulti+0x11c/0x270 [ 521.832217][T11400] __mutex_lock+0x1a5/0x10c0 [ 521.832241][T11400] ? dev_set_allmulti+0x11c/0x270 [ 521.832267][T11400] ? __pfx___dev_notify_flags+0x10/0x10 [ 521.832294][T11400] ? dev_set_allmulti+0x11c/0x270 [ 521.832316][T11400] ? netif_set_allmulti+0x224/0x380 [ 521.832340][T11400] ? __pfx___mutex_lock+0x10/0x10 [ 521.832357][T11400] ? do_raw_spin_unlock+0x13c/0x8b0 [ 521.832380][T11400] ? netif_set_allmulti+0x264/0x380 [ 521.832406][T11400] dev_set_allmulti+0x11c/0x270 [ 521.832431][T11400] team_change_rx_flags+0x1a8/0x330 [ 521.832457][T11400] ? team_change_rx_flags+0x29/0x330 [ 521.832483][T11400] ? __pfx_team_change_rx_flags+0x10/0x10 [ 521.832508][T11400] netif_set_allmulti+0x20e/0x380 [ 521.832534][T11400] dev_set_allmulti+0x143/0x270 [ 521.832560][T11400] __bond_release_one+0xc03/0x1220 [ 521.832588][T11400] ? __pfx___bond_release_one+0x10/0x10 [ 521.832608][T11400] ? __mutex_trylock_common+0x184/0x2e0 [ 521.832638][T11400] bond_netdev_event+0x557/0xfb0 [ 521.832658][T11400] ? __pfx_bond_netdev_event+0x10/0x10 [ 521.832676][T11400] ? rt_flush_dev+0x480/0x4b0 [ 521.832707][T11400] notifier_call_chain+0x1a5/0x3f0 [ 521.832726][T11400] unregister_netdevice_many_notify+0x16b7/0x2640 [ 521.832754][T11400] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 521.832775][T11400] ? rtnl_dellink+0x3a3/0x8c0 [ 521.832797][T11400] ? unregister_netdevice_queue+0x2c4/0x400 [ 521.832817][T11400] ? __nla_parse+0x40/0x60 [ 521.832835][T11400] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 521.832853][T11400] rtnl_dellink+0x53c/0x8c0 [ 521.832876][T11400] ? __pfx_rtnl_dellink+0x10/0x10 [ 521.832935][T11400] ? __pfx_rtnl_dellink+0x10/0x10 [ 521.832957][T11400] rtnetlink_rcv_msg+0x80f/0xd70 [ 521.832977][T11400] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 521.832999][T11400] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 521.833023][T11400] ? ref_tracker_free+0x63e/0x7e0 [ 521.833042][T11400] netlink_rcv_skb+0x208/0x480 [ 521.833063][T11400] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 521.833085][T11400] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 521.833112][T11400] ? netlink_deliver_tap+0x2e/0x1b0 [ 521.833134][T11400] ? netlink_deliver_tap+0x2e/0x1b0 [ 521.833154][T11400] netlink_unicast+0x7f8/0x9a0 [ 521.833176][T11400] ? __pfx_netlink_unicast+0x10/0x10 [ 521.833194][T11400] ? skb_put+0x114/0x1f0 [ 521.833220][T11400] netlink_sendmsg+0x8c3/0xcd0 [ 521.833252][T11400] ? __pfx_netlink_sendmsg+0x10/0x10 [ 521.833275][T11400] ? aa_sock_msg_perm+0x91/0x160 [ 521.833298][T11400] ? __pfx_netlink_sendmsg+0x10/0x10 [ 521.833320][T11400] __sock_sendmsg+0x221/0x270 [ 521.833342][T11400] ____sys_sendmsg+0x523/0x860 [ 521.833371][T11400] ? __pfx_____sys_sendmsg+0x10/0x10 [ 521.833395][T11400] ? __fget_files+0x2a/0x420 [ 521.833412][T11400] ? __fget_files+0x2a/0x420 [ 521.833430][T11400] __sys_sendmsg+0x271/0x360 [ 521.833458][T11400] ? __pfx___sys_sendmsg+0x10/0x10 [ 521.833508][T11400] ? do_syscall_64+0xb6/0x210 [ 521.833527][T11400] do_syscall_64+0xf3/0x210 [ 521.833544][T11400] ? clear_bhb_loop+0x45/0xa0 [ 521.833563][T11400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.833579][T11400] RIP: 0033:0x7fe7fb38e969 [ 521.833595][T11400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 521.833609][T11400] RSP: 002b:00007fe7fc28e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 521.833628][T11400] RAX: ffffffffffffffda RBX: 00007fe7fb5b6080 RCX: 00007fe7fb38e969 [ 521.833641][T11400] RDX: 0000000024000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 521.833652][T11400] RBP: 00007fe7fb410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 521.833663][T11400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.833673][T11400] R13: 0000000000000000 R14: 00007fe7fb5b6080 R15: 00007fffff644428 [ 521.833693][T11400] [ 522.265335][T11400] dummy0: left allmulticast mode [ 522.280506][T11400] team0 (unregistering): Port device C removed [ 522.290413][T11400] team0 (unregistering): Port device team_slave_1 removed [ 522.299713][T11400] team0 (unregistering): Port device dummy0 removed [ 522.331498][T11217] veth1_macvtap: entered promiscuous mode [ 522.373638][T11217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.384257][T11217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.395905][T11217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.409513][T11217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.420192][T11217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.430498][T11217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.441156][T11217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.451167][T11217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.461778][T11217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.472843][T11217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 522.483188][T11217] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.515972][T11217] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.526673][T11217] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.535488][T11217] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.560875][ T7944] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.627796][T11231] veth0_vlan: entered promiscuous mode [ 522.653640][T11217] ieee80211 phy94: Selected rate control algorithm 'minstrel_ht' [ 522.669051][T11231] veth1_vlan: entered promiscuous mode [ 522.683457][T11217] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 522.693496][T11217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.704170][T11217] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 522.713917][T11217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.731943][T11217] ieee80211 phy95: Selected rate control algorithm 'minstrel_ht' [ 522.740399][ T7955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.749962][ T7955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.770129][ T7944] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.801217][ T7955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.814167][ T7955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.822870][T11231] veth0_macvtap: entered promiscuous mode [ 522.842787][T11231] veth1_macvtap: entered promiscuous mode [ 522.868549][T11231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.897909][T11231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.911132][T11231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.922539][T11231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.937160][T11231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.960710][T11231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.971906][T11231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.982137][T11231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.992660][T11231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.004101][T11231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.015793][T11231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.025661][T11231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 523.038822][T11231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.064865][T11231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 523.083205][ T7944] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.110707][T11231] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.121402][T11231] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.130180][T11231] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.141332][T11231] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.175436][T11231] ieee80211 phy96: Selected rate control algorithm 'minstrel_ht' [ 523.189502][ T7944] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.216212][T11231] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 523.227882][T11231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.237754][T11231] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 523.249297][T11231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.269741][ T7955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.280444][T11231] ieee80211 phy97: Selected rate control algorithm 'minstrel_ht' [ 523.290281][ T7955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.408301][ T7939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.410330][ T7944] bridge_slave_1: left allmulticast mode [ 523.424255][ T7944] bridge_slave_1: left promiscuous mode [ 523.430164][ T7939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.437665][ T7944] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.448331][ T7944] bridge_slave_0: left allmulticast mode [ 523.454005][ T7944] bridge_slave_0: left promiscuous mode [ 523.481835][ T7944] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.635535][ T7944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 523.648216][ T7944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 523.660206][ T7944] bond0 (unregistering): Released all slaves [ 523.969194][ T7944] hsr_slave_0: left promiscuous mode [ 523.975012][ T7944] hsr_slave_1: left promiscuous mode [ 523.982240][ T7944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 523.991754][ T7944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.002044][ T7944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.011205][ T7944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.023638][ T7944] veth1_macvtap: left promiscuous mode [ 524.033373][ T7944] veth0_macvtap: left promiscuous mode [ 524.041306][ T7944] veth1_vlan: left promiscuous mode [ 524.048480][ T7944] veth0_vlan: left promiscuous mode [ 524.390360][ T7944] team0 (unregistering): Port device team_slave_1 removed [ 524.419929][ T7944] team0 (unregistering): Port device team_slave_0 removed [ 524.863081][ T7944] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.121152][ T7944] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.173492][ T7944] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.233003][ T7944] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.342943][ T7944] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.392453][ T7944] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.434746][ T7944] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.475443][ T7944] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.590349][ T7944] bridge_slave_1: left allmulticast mode [ 525.597481][ T7944] bridge_slave_1: left promiscuous mode [ 525.603198][ T7944] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.614701][ T7944] bridge_slave_0: left allmulticast mode [ 525.620732][ T7944] bridge_slave_0: left promiscuous mode [ 525.628325][ T7944] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.638168][ T7944] bridge_slave_1: left allmulticast mode [ 525.643847][ T7944] bridge_slave_1: left promiscuous mode [ 525.651972][ T7944] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.662100][ T7944] bridge_slave_0: left allmulticast mode [ 525.670230][ T7944] bridge_slave_0: left promiscuous mode [ 525.677111][ T7944] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.942869][ T7944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.953919][ T7944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.971437][ T7944] bond0 (unregistering): Released all slaves [ 525.992639][ T7944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 526.002995][ T7944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 526.015357][ T7944] bond0 (unregistering): Released all slaves [ 526.399083][ T7944] hsr_slave_0: left promiscuous mode [ 526.404925][ T7944] hsr_slave_1: left promiscuous mode [ 526.412644][ T7944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.420645][ T7944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.432308][ T7944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.440808][ T7944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.454580][ T7944] hsr_slave_0: left promiscuous mode [ 526.463545][ T7944] hsr_slave_1: left promiscuous mode [ 526.471251][ T7944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.478947][ T7944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.489861][ T7944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.497660][ T7944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.513967][ T7944] veth1_macvtap: left promiscuous mode [ 526.519588][ T7944] veth0_macvtap: left promiscuous mode [ 526.525176][ T7944] veth1_vlan: left promiscuous mode [ 526.532514][ T7944] veth0_vlan: left promiscuous mode [ 526.538984][ T7944] veth1_macvtap: left promiscuous mode [ 526.544517][ T7944] veth0_macvtap: left promiscuous mode [ 526.552451][ T7944] veth1_vlan: left promiscuous mode [ 526.558551][ T7944] veth0_vlan: left promiscuous mode [ 526.817400][ T7944] team0 (unregistering): Port device team_slave_1 removed [ 526.831942][ T7944] team0 (unregistering): Port device team_slave_0 removed [ 527.073751][ T7944] team0 (unregistering): Port device team_slave_1 removed [ 527.091683][ T7944] team0 (unregistering): Port device team_slave_0 removed