last executing test programs: 1m49.062673437s ago: executing program 1 (id=342): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}, 0x0, 0xca, 0x0, 0x0, 0x3, 0x3ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) 1m33.030982622s ago: executing program 1 (id=342): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}, 0x0, 0xca, 0x0, 0x0, 0x3, 0x3ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) 1m2.334925181s ago: executing program 1 (id=342): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}, 0x0, 0xca, 0x0, 0x0, 0x3, 0x3ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) 44.837765618s ago: executing program 1 (id=342): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}, 0x0, 0xca, 0x0, 0x0, 0x3, 0x3ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) 25.636385639s ago: executing program 1 (id=342): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}, 0x0, 0xca, 0x0, 0x0, 0x3, 0x3ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) 7.659636418s ago: executing program 0 (id=1085): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002c000b35d25a806f8c6394f90224fc602f1b06000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 7.313992258s ago: executing program 1 (id=342): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}, 0x0, 0xca, 0x0, 0x0, 0x3, 0x3ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) 5.610027681s ago: executing program 0 (id=1087): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2051}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffda9) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000f52800000000", @ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8922, &(0x7f0000000080)) 5.608784711s ago: executing program 3 (id=1089): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbfffffc, 0x0, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'wg2\x00', @random='\x00\x00\x00 \x00'}) 5.608220721s ago: executing program 4 (id=1090): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0xca}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xa3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="180400000000000000000000000000001801000000006c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) 4.598144252s ago: executing program 4 (id=1092): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x5c}, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10812, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r4 = socket$kcm(0x2, 0x6, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3c, &(0x7f0000000640), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x7, 0x0, &(0x7f00000002c0)="0000ffffffffa0", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r3, 0x6, 0x1b, &(0x7f0000000100), 0x4) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = socket$kcm(0xa, 0x6, 0x0) sendmsg$inet(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40) 4.544616573s ago: executing program 0 (id=1093): perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0xffffffc9, &(0x7f0000000040)=[{&(0x7f0000000000), 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2002) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000fd83f2f0303efdbb6400010000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$unix(r4, 0x0, 0x240080c0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000020850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.510094253s ago: executing program 3 (id=1096): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_clone(0x1000, &(0x7f0000000300)="fcad8934b75533e12e3dac5fda78d7a4357a7a8704c2113d6eabc5281837ecfd7484b60c6e36a42a6a072644b2fbb94e2346bc3a5961a2f64ccfcbf5017f7dba43fa186d24fd5e8680972043652a0da4f6fad1a3b3fd9976bebadcec8e4d08aee57993bdc7d86895919ab259eabe28ec951f1cd976a44a21faeaa49b55ab6e6fdf4c922f22c39c3055daab87974bd3cf6fbbc7f32cd38ad4e7d90b7837ccb52084a9049dc0e3f8f33c200d7e5a1a0aa2173f241fe953bea3", 0xb8, 0x0, 0x0, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa1000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x8, 0xc, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf12c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.025097773s ago: executing program 4 (id=1097): socket$kcm(0xa, 0x2, 0x88) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0xf, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000070000000300000014"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x2, 0x5f6b, 0x6, 0x309, r1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x7ff, @void, @value, @void, @value}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) 4.024625613s ago: executing program 2 (id=1098): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x19, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}, 0x40002002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8946, &(0x7f0000000900)={'wg2\x00', @random='\x00\x00\x00 \x00'}) 3.623264594s ago: executing program 3 (id=1099): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='io.stat\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b0f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r1, r1, 0x2f, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x19, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001740)={{r4}, &(0x7f00000016c0), &(0x7f0000010040)=r2}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r4}, &(0x7f0000000600), &(0x7f0000000640)=r3}, 0x20) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2.420885176s ago: executing program 2 (id=1100): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002c000b35d25a806f8c6394f90224fc602f1b06000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2.420427296s ago: executing program 3 (id=1101): socket$kcm(0xa, 0x6, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x16, 0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x106) socket$kcm(0x10, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0xe, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a010088a8ffff0200258f", 0x12}], 0x2}, 0x0) recvmsg$kcm(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000003c0)=[{0x0, 0xa00100}, {&(0x7f00000002c0)=""/247, 0xf7}], 0x2}, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair(0x1, 0x1, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) socket$kcm(0x10, 0x2, 0x0) 2.420019296s ago: executing program 4 (id=1102): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}], 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40012002) socketpair(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x6e, &(0x7f0000000000)=r5, 0x10) socket$kcm(0x2, 0x5, 0x84) 2.066839316s ago: executing program 0 (id=1103): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x6, 0x4, 0x599, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r2, 0x0, 0x1ba8847c99}, 0x38) 1.511108818s ago: executing program 2 (id=1104): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0xca}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xa3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="180400000000000000000000000000001801000000006c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) 1.380450618s ago: executing program 4 (id=1105): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2051}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffda9) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000f52800000000", @ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8922, &(0x7f0000000080)) 1.003895218s ago: executing program 0 (id=1106): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbfffffc, 0x0, @perf_config_ext={0x1}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'wg2\x00', @random='\x00\x00\x00 \x00'}) 999.334028ms ago: executing program 3 (id=1116): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x19, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}, 0x40002002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8946, &(0x7f0000000900)={'wg2\x00', @random='\x00\x00\x00 \x00'}) 956.967589ms ago: executing program 2 (id=1107): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socket$kcm(0x2, 0xa, 0x2) 563.961379ms ago: executing program 2 (id=1108): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r0, 0x1, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37438e486dd6317ce22080000fffe80000000000000101000007f0c08fcffffff68fad91451273fa7b49301641184a907c5"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 81.12593ms ago: executing program 4 (id=1109): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) 38.99933ms ago: executing program 2 (id=1110): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000004a0000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x0}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r4, 0x0, &(0x7f0000000400)=""/31}, 0x20) 21.107319ms ago: executing program 3 (id=1111): socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r0, 0x0, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000240), 0x0}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) close(r1) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000240)=""/50, 0x32}, 0x40) 0s ago: executing program 0 (id=1112): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="b702000026000000bfa300000000000005000000000000007a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67d5b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e6a9f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b626c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a08060000000200000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0183babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304020000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed69000000000000000000000000009a6d1852cfe790362ca800000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007976699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e671282a2d3066ac968c7d7d7db195f255b1b4a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f512493af8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f74b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeae3b0ba38d8bb1bf032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553573c48104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c095162b3b5fb3832ee68e2b53d44bd84bf6770157e96bbb96b5e1f165c87e7a9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3df3572a7d9ef5f6103997f1f9e4b0c3970bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501aed8d72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c9534229d6133fa814a0a67385fea04220423"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1e032c004d8c71ef2885634a8270e7112f00"/29, @ANYRESOCT=r1], 0xffdd) kernel console output (not intermixed with test programs): IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.236054][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.264009][ T4306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.283453][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.298776][ T4306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.322452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.367477][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.389954][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.416035][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.432485][ T4334] syz.2.6 uses obsolete (PF_INET,SOCK_PACKET) [ 78.505486][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.518839][ C0] hrtimer: interrupt took 34222 ns [ 78.524660][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.557875][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.565936][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.635201][ T4319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.677254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.677703][ T4319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.701526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.735537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.759820][ T4250] Bluetooth: hci1: command 0x0419 tx timeout [ 78.765950][ T4250] Bluetooth: hci2: command 0x0419 tx timeout [ 78.772127][ T4252] Bluetooth: hci0: command 0x0419 tx timeout [ 78.778166][ T4252] Bluetooth: hci4: command 0x0419 tx timeout [ 78.840964][ T4252] Bluetooth: hci3: command 0x0419 tx timeout [ 79.249778][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.266613][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.383539][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.482771][ T14] cfg80211: failed to load regulatory.db [ 81.985898][ T4409] device lo entered promiscuous mode [ 84.228100][ T4459] device lo entered promiscuous mode [ 84.973564][ T4474] device lo entered promiscuous mode [ 87.794729][ T4536] device lo entered promiscuous mode [ 88.051094][ T4544] device pim6reg1 entered promiscuous mode [ 89.247696][ T4565] syz.4.90[4565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.247816][ T4565] syz.4.90[4565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.586771][ T4567] device syzkaller0 entered promiscuous mode [ 91.537537][ T4580] device lo left promiscuous mode [ 91.557598][ T4581] device lo entered promiscuous mode [ 91.587635][ T4588] netlink: 'syz.1.97': attribute type 28 has an invalid length. [ 91.842615][ T4594] device pim6reg1 entered promiscuous mode [ 92.869120][ T4616] Illegal XDP return value 8 on prog (id 56) dev N/A, expect packet loss! [ 93.110565][ T4623] device lo left promiscuous mode [ 93.254453][ T4626] device lo entered promiscuous mode [ 94.990834][ T4647] device pim6reg1 entered promiscuous mode [ 96.452642][ T4651] device lo left promiscuous mode [ 97.026565][ T4660] device lo entered promiscuous mode [ 98.568467][ T4687] device syzkaller0 entered promiscuous mode [ 99.029082][ T4699] device pim6reg1 entered promiscuous mode [ 101.998441][ T4709] device lo entered promiscuous mode [ 102.455420][ T4737] device lo left promiscuous mode [ 102.822474][ T4741] device lo entered promiscuous mode [ 103.359010][ T4749] device pim6reg1 entered promiscuous mode [ 103.508138][ T4752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.527148][ T4752] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.575923][ T4752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.607854][ T4752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.111020][ T4761] device lo left promiscuous mode [ 104.251219][ T4764] device lo entered promiscuous mode [ 104.322480][ T4761] Zero length message leads to an empty skb [ 105.220846][ T4778] device lo left promiscuous mode [ 105.448830][ T4783] device lo entered promiscuous mode [ 105.993178][ T4803] netlink: 'syz.4.171': attribute type 10 has an invalid length. [ 106.030343][ T4803] bond0: (slave bond_slave_0): Releasing backup interface [ 107.418755][ T4825] device lo left promiscuous mode [ 107.512994][ T4827] device lo entered promiscuous mode [ 108.285391][ T4844] netlink: 'syz.1.186': attribute type 2 has an invalid length. [ 108.300069][ T4844] netlink: 16 bytes leftover after parsing attributes in process `syz.1.186'. [ 108.702172][ T4857] Dead loop on virtual device ip6_vti0, fix it urgently! [ 109.538231][ T4871] netlink: 'syz.3.197': attribute type 39 has an invalid length. [ 110.392226][ T4885] device sit0 entered promiscuous mode [ 112.613223][ T4919] device lo left promiscuous mode [ 113.034020][ T4920] device lo entered promiscuous mode [ 113.046939][ T4926] netlink: 'syz.1.214': attribute type 2 has an invalid length. [ 113.075011][ T4926] netlink: 'syz.1.214': attribute type 8 has an invalid length. [ 113.159643][ T4926] netlink: 132 bytes leftover after parsing attributes in process `syz.1.214'. [ 113.343734][ T4936] netlink: 'syz.2.219': attribute type 3 has an invalid length. [ 115.094301][ T4964] device lo left promiscuous mode [ 115.325878][ T4968] device lo entered promiscuous mode [ 115.776433][ T4250] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 116.882071][ T5010] device lo left promiscuous mode [ 116.936737][ T5013] device lo entered promiscuous mode [ 117.107485][ T5017] netlink: 'syz.3.250': attribute type 10 has an invalid length. [ 119.682661][ T5056] device lo left promiscuous mode [ 119.785739][ T5056] device lo entered promiscuous mode [ 121.032814][ T5077] sctp: [Deprecated]: syz.2.269 (pid 5077) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.032814][ T5077] Use struct sctp_sack_info instead [ 123.144443][ T5105] ªªªªªªÿÿ: renamed from vlan0 [ 123.215211][ T5104] netlink: 'syz.0.279': attribute type 10 has an invalid length. [ 123.236392][ T5104] netlink: 40 bytes leftover after parsing attributes in process `syz.0.279'. [ 123.266604][ T5104] device ipvlan1 entered promiscuous mode [ 123.352058][ T5104] bridge0: port 3(ipvlan1) entered blocking state [ 123.397227][ T5104] bridge0: port 3(ipvlan1) entered disabled state [ 123.493775][ T5104] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 126.009616][ T5160] netlink: 154788 bytes leftover after parsing attributes in process `syz.3.299'. [ 126.070958][ T5160] openvswitch: netlink: Message has 48126 unknown bytes. [ 126.897261][ T5175] netlink: 'syz.2.305': attribute type 10 has an invalid length. [ 127.144185][ T4250] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4 [ 127.784842][ T5189] netlink: 'syz.1.309': attribute type 10 has an invalid length. [ 128.815252][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.845799][ T5214] netlink: 'syz.3.318': attribute type 10 has an invalid length. [ 129.002629][ T5214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.036572][ T5214] team0: Port device bond0 added [ 129.198384][ T5215] GPL: port 1(erspan0) entered blocking state [ 129.231161][ T5215] GPL: port 1(erspan0) entered disabled state [ 129.286492][ T5215] device erspan0 entered promiscuous mode [ 129.376384][ T5225] netlink: 132 bytes leftover after parsing attributes in process `syz.4.321'. [ 131.161399][ T4250] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 131.170071][ T4250] Bluetooth: hci2: Injecting HCI hardware error event [ 131.179430][ T4250] Bluetooth: hci2: hardware error 0x00 [ 131.686326][ T4252] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 132.530825][ T5286] device syzkaller0 entered promiscuous mode [ 132.658125][ T5288] netlink: 14 bytes leftover after parsing attributes in process `syz.0.344'. [ 132.683736][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.692072][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.358314][ T4252] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 133.367904][ T4252] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 133.376147][ T4252] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 133.391265][ T4252] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 133.408847][ T4252] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 133.416569][ T4252] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 133.560865][ T4250] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 133.723170][ T4250] Bluetooth: hci0: command 0x0406 tx timeout [ 134.882724][ T5306] netlink: 'syz.0.352': attribute type 2 has an invalid length. [ 134.896169][ T5306] netlink: 'syz.0.352': attribute type 11 has an invalid length. [ 134.904425][ T5306] netlink: 132 bytes leftover after parsing attributes in process `syz.0.352'. [ 135.441383][ T5298] chnl_net:caif_netlink_parms(): no params data found [ 135.483966][ T4250] Bluetooth: hci4: command 0x0409 tx timeout [ 135.589921][ T5324] : renamed from ipvlan1 [ 135.609929][ T5327] device syzkaller0 entered promiscuous mode [ 135.751547][ T5298] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.766396][ T5298] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.785854][ T5298] device bridge_slave_0 entered promiscuous mode [ 135.828254][ T5298] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.856120][ T5298] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.910602][ T5298] device bridge_slave_1 entered promiscuous mode [ 136.177935][ T5298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.258685][ T5298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.342646][ T5298] team0: Port device team_slave_0 added [ 136.363263][ T5298] team0: Port device team_slave_1 added [ 136.407656][ T5342] netlink: 'syz.0.365': attribute type 29 has an invalid length. [ 136.468428][ T5298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.485076][ T5298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.570211][ T5298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.583027][ T5342] netlink: 'syz.0.365': attribute type 29 has an invalid length. [ 136.593978][ T5298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.604894][ T5298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.649145][ T5298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.673936][ T5345] netlink: 'syz.0.365': attribute type 29 has an invalid length. [ 136.824133][ T5298] device hsr_slave_0 entered promiscuous mode [ 136.892257][ T5298] device hsr_slave_1 entered promiscuous mode [ 136.918665][ T5298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.962638][ T5298] Cannot create hsr debugfs directory [ 137.276632][ T5363] netlink: 132 bytes leftover after parsing attributes in process `syz.3.370'. [ 137.559546][ T4254] Bluetooth: hci4: command 0x041b tx timeout [ 137.834220][ T5298] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.008855][ T5298] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.021168][ T4250] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11 [ 138.461765][ T5298] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.647422][ T5298] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.723361][ T5390] device sit0 entered promiscuous mode [ 139.639482][ T4250] Bluetooth: hci4: command 0x040f tx timeout [ 139.865742][ T5298] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 139.903316][ T5298] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 139.950577][ T5298] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 140.008344][ T5298] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 140.218357][ T5298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.370302][ T5298] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.406065][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 140.430559][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 140.450148][ T4254] Bluetooth: hci0: unexpected event 0x31 length: 15 > 6 [ 140.499584][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 140.546276][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.590526][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.597682][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.617334][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 140.627213][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.649921][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.657824][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.676229][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 140.701202][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 140.799760][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 140.851592][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 140.876551][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 140.910386][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 140.996676][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 141.040577][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 141.117805][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 141.136750][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 141.153931][ T5298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 141.167730][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 141.179354][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 141.191153][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 141.318267][ T5456] bridge0: port 3(veth0_to_bond) entered blocking state [ 141.327423][ T5456] bridge0: port 3(veth0_to_bond) entered disabled state [ 141.344241][ T5456] device veth0_to_bond entered promiscuous mode [ 141.373635][ T5442] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 141.584122][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 141.591964][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 141.634297][ T5298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.677506][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 141.687353][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 141.719524][ T4254] Bluetooth: hci4: command 0x0419 tx timeout [ 141.754751][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 141.793176][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 141.821979][ T5464] netlink: 'syz.3.404': attribute type 2 has an invalid length. [ 141.830465][ T5464] netlink: 'syz.3.404': attribute type 8 has an invalid length. [ 141.838481][ T5464] netlink: 132 bytes leftover after parsing attributes in process `syz.3.404'. [ 141.851420][ T5298] device veth0_vlan entered promiscuous mode [ 141.858551][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 141.878840][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 141.903805][ T5298] device veth1_vlan entered promiscuous mode [ 141.911929][ T5464] netlink: 'syz.3.404': attribute type 2 has an invalid length. [ 141.925208][ T5464] netlink: 'syz.3.404': attribute type 8 has an invalid length. [ 141.944775][ T5464] netlink: 132 bytes leftover after parsing attributes in process `syz.3.404'. [ 142.087168][ T5467] device syzkaller0 entered promiscuous mode [ 142.099428][ T5470] device wg2 entered promiscuous mode [ 142.136228][ T5298] device veth0_macvtap entered promiscuous mode [ 142.154610][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 142.200029][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 142.218172][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 142.234226][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 142.263102][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 142.290814][ T5298] device veth1_macvtap entered promiscuous mode [ 142.545200][ T5478] netlink: 15998 bytes leftover after parsing attributes in process `syz.0.409'. [ 144.765515][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 144.777198][ T5298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.788152][ T5298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.798235][ T5298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.817579][ T5298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.828705][ T5298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.871602][ T5298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.883385][ T5298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.894074][ T5298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.906008][ T5298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.988760][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 145.008262][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 145.019841][ T5298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.031211][ T5298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.041551][ T5298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.052058][ T5298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.063481][ T5298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.074229][ T5298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.084663][ T5298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.100214][ T5298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.112805][ T5298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.144482][ T5493] netlink: 'syz.4.415': attribute type 10 has an invalid length. [ 145.160299][ T5493] device macvlan0 entered promiscuous mode [ 145.354069][ T5493] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 145.369932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 145.379181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 145.391119][ T5298] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.410753][ T5298] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.430129][ T5298] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.438881][ T5298] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.698766][ T5501] device syzkaller0 entered promiscuous mode [ 145.824629][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.840660][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.219063][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 147.271304][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.281131][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.293613][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 148.213833][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.348407][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.629037][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.784407][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.026821][ T4250] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 149.411512][ T5536] netlink: 'syz.3.430': attribute type 39 has an invalid length. [ 149.452863][ T4254] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 149.462519][ T4254] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 149.470337][ T4254] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 149.489644][ T4254] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 149.497605][ T4254] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 149.505068][ T4254] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 149.950248][ T5554] netlink: 'syz.3.435': attribute type 2 has an invalid length. [ 150.035699][ T5557] netlink: 'syz.2.436': attribute type 2 has an invalid length. [ 150.081828][ T5557] netlink: 'syz.2.436': attribute type 8 has an invalid length. [ 150.116999][ T5557] netlink: 32 bytes leftover after parsing attributes in process `syz.2.436'. [ 150.169141][ T5561] netlink: 'syz.2.436': attribute type 39 has an invalid length. [ 150.376365][ T5567] netlink: 830 bytes leftover after parsing attributes in process `syz.3.438'. [ 150.452697][ T5572] netlink: 'syz.4.440': attribute type 39 has an invalid length. [ 150.712191][ T5540] chnl_net:caif_netlink_parms(): no params data found [ 151.569471][ T4250] Bluetooth: hci4: command 0x0409 tx timeout [ 151.597922][ T5591] netlink: 'syz.3.447': attribute type 10 has an invalid length. [ 152.224709][ T5540] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.262818][ T5540] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.297587][ T5540] device bridge_slave_0 entered promiscuous mode [ 152.603427][ T5540] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.616588][ T5540] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.660502][ T5540] device bridge_slave_1 entered promiscuous mode [ 152.733069][ T5614] netlink: 'syz.4.453': attribute type 10 has an invalid length. [ 152.759957][ T5614] bridge0: port 4(macsec0) entered blocking state [ 152.766822][ T5614] bridge0: port 4(macsec0) entered disabled state [ 152.808433][ T5614] device macsec0 entered promiscuous mode [ 152.833313][ T5614] bridge0: port 4(macsec0) entered blocking state [ 152.840444][ T5614] bridge0: port 4(macsec0) entered listening state [ 153.311585][ T9] device hsr_slave_0 left promiscuous mode [ 153.333711][ T9] device hsr_slave_1 left promiscuous mode [ 153.381766][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.394390][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.417382][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.438259][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.478731][ T9] device bridge_slave_1 left promiscuous mode [ 153.501162][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.549739][ T9] device bridge_slave_0 left promiscuous mode [ 153.566523][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.639695][ T4254] Bluetooth: hci4: command 0x041b tx timeout [ 153.724158][ T9] device veth1_macvtap left promiscuous mode [ 153.751440][ T9] device veth0_macvtap left promiscuous mode [ 153.757764][ T9] device veth1_vlan left promiscuous mode [ 153.779357][ T9] device veth0_vlan left promiscuous mode [ 154.597063][ T9] team0 (unregistering): Port device team_slave_1 removed [ 154.642945][ T9] team0 (unregistering): Port device team_slave_0 removed [ 154.685713][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.727660][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.117821][ T9] bond0 (unregistering): Released all slaves [ 155.159688][ T4254] Bluetooth: hci3: command 0x0406 tx timeout [ 155.193239][ T5540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.287994][ T5540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.461290][ T5540] team0: Port device team_slave_0 added [ 155.493154][ T5540] team0: Port device team_slave_1 added [ 155.611219][ T5540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.633973][ T5540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.704103][ T5540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.721550][ T4254] Bluetooth: hci4: command 0x040f tx timeout [ 155.757966][ T5540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.793822][ T5540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.887435][ T5540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.062202][ T5540] device hsr_slave_0 entered promiscuous mode [ 156.081852][ T5540] device hsr_slave_1 entered promiscuous mode [ 156.099195][ T5540] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.153830][ T5540] Cannot create hsr debugfs directory [ 156.434026][ T5669] netlink: 'syz.0.465': attribute type 10 has an invalid length. [ 156.449168][ T5669] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.457383][ T5669] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.518022][ T5669] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.525278][ T5669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.533007][ T5669] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.540208][ T5669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.561887][ T5669] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 157.006638][ T5686] netlink: 'syz.4.468': attribute type 10 has an invalid length. [ 157.176411][ T5686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.206789][ T5686] team0: Port device bond0 added [ 157.443508][ T5689] netlink: 'syz.0.470': attribute type 10 has an invalid length. [ 157.454123][ T5689] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.474325][ T5689] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.519589][ T5689] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 157.736815][ T5699] device lo left promiscuous mode [ 157.761067][ T5699] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 157.799485][ T4254] Bluetooth: hci4: command 0x0419 tx timeout [ 157.909218][ T5540] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 157.923093][ T5704] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.476'. [ 157.964505][ T5540] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 158.010110][ T5540] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 158.070959][ T5540] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 158.461933][ T5540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.492276][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 158.501048][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.522192][ T5540] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.557299][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.600143][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.639544][ T4306] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.646731][ T4306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.703871][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 158.744234][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.823732][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.884020][ T4306] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.891224][ T4306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.922937][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 158.992154][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 159.026969][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 159.037676][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 159.109985][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 159.140243][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 159.180005][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 159.188941][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 159.232859][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 159.260281][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 159.279462][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 159.291225][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 159.306182][ T5743] netlink: 'syz.0.486': attribute type 19 has an invalid length. [ 159.316824][ T5743] netlink: 156 bytes leftover after parsing attributes in process `syz.0.486'. [ 159.336871][ T5741] netlink: 'syz.3.487': attribute type 15 has an invalid length. [ 159.901113][ T5767] netlink: 'syz.2.493': attribute type 1 has an invalid length. [ 159.971254][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 159.978769][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 160.025544][ T5540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.123736][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 160.151854][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 160.197014][ T5775] netlink: 'syz.4.494': attribute type 10 has an invalid length. [ 160.268566][ T5775] device geneve0 entered promiscuous mode [ 160.338744][ T5775] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 160.398537][ T5540] device veth0_vlan entered promiscuous mode [ 160.427226][ T5540] device veth1_vlan entered promiscuous mode [ 160.483389][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 160.520870][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 160.568164][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 160.600957][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 160.636206][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 160.751149][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 160.770479][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 160.818905][ T5540] device veth0_macvtap entered promiscuous mode [ 160.848792][ T5540] device veth1_macvtap entered promiscuous mode [ 160.915822][ T5540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.967569][ T5540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.018795][ T5540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.053592][ T5540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.091629][ T5540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.132372][ T4254] Bluetooth: hci3: unexpected event 0x33 length: 15 > 10 [ 161.135911][ T5540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.180979][ T5540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.201477][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 161.241381][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 161.277482][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 161.303980][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 161.383862][ T5540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.422473][ T5540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.449370][ T5540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.486530][ T5540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.513176][ T5540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.539488][ T5540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.559933][ T5540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.598139][ T5540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.628688][ T5540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.640388][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 161.650693][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 161.666261][ T5540] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.679062][ T5540] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.688114][ T5540] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.711113][ T5540] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.082233][ T4319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.129145][ T4319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.194144][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 162.226979][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.247006][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.312269][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 163.200778][ T5842] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.515'. [ 163.637229][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.827106][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.042581][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.136958][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.442839][ T5884] netlink: 'syz.0.524': attribute type 39 has an invalid length. [ 165.488959][ T4250] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 165.516953][ T4250] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 165.525338][ T4250] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 165.533454][ T4250] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 165.541087][ T4250] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 165.548420][ T4250] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 166.102620][ T5917] GPL: port 1(erspan0) entered blocking state [ 166.116161][ T5917] GPL: port 1(erspan0) entered disabled state [ 166.124725][ T5917] device erspan0 entered promiscuous mode [ 167.639595][ T4254] Bluetooth: hci4: command 0x0409 tx timeout [ 167.879903][ C0] bridge0: port 4(macsec0) entered learning state [ 169.404311][ T5906] chnl_net:caif_netlink_parms(): no params data found [ 169.720148][ T4254] Bluetooth: hci4: command 0x041b tx timeout [ 170.124471][ T9] device hsr_slave_0 left promiscuous mode [ 170.183241][ T9] device hsr_slave_1 left promiscuous mode [ 170.209787][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.217483][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.237235][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.251287][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.269636][ T9] device bridge_slave_1 left promiscuous mode [ 170.275941][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.313024][ T9] device bridge_slave_0 left promiscuous mode [ 170.321684][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.385332][ T9] device veth1_macvtap left promiscuous mode [ 170.394183][ T9] device veth0_macvtap left promiscuous mode [ 170.408222][ T9] device veth1_vlan left promiscuous mode [ 170.416949][ T9] device veth0_vlan left promiscuous mode [ 171.206720][ T9] team0 (unregistering): Port device team_slave_1 removed [ 171.244947][ T9] team0 (unregistering): Port device team_slave_0 removed [ 171.282709][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.322411][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.693056][ T9] bond0 (unregistering): Released all slaves [ 171.760945][ T5906] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.768110][ T5906] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.776770][ T5906] device bridge_slave_0 entered promiscuous mode [ 171.785570][ T5975] device macsec0 entered promiscuous mode [ 171.793046][ T5979] device veth1_macvtap left promiscuous mode [ 171.800276][ T4254] Bluetooth: hci4: command 0x040f tx timeout [ 171.838932][ T5906] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.876967][ T5906] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.898410][ T5906] device bridge_slave_1 entered promiscuous mode [ 172.067062][ T5906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.112987][ T6004] netlink: 'syz.2.554': attribute type 10 has an invalid length. [ 172.124886][ T4254] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 172.227627][ T6004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.262143][ T6004] team0: Port device bond0 added [ 172.294662][ T5906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.422909][ T6012] netlink: 'syz.0.556': attribute type 10 has an invalid length. [ 172.540938][ T6012] netlink: 40 bytes leftover after parsing attributes in process `syz.0.556'. [ 172.650483][ T5906] team0: Port device team_slave_0 added [ 172.697502][ T5906] team0: Port device team_slave_1 added [ 172.934421][ T5906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.955114][ T5906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.097932][ T5906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.180692][ T5906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.219126][ T5906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.322636][ T5906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.461737][ T5906] device hsr_slave_0 entered promiscuous mode [ 173.529658][ T5906] device hsr_slave_1 entered promiscuous mode [ 173.559436][ T5906] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.567071][ T5906] Cannot create hsr debugfs directory [ 173.770000][ T6038] netlink: 'syz.2.562': attribute type 10 has an invalid length. [ 173.777815][ T6038] netlink: 40 bytes leftover after parsing attributes in process `syz.2.562'. [ 173.879778][ T4254] Bluetooth: hci4: command 0x0419 tx timeout [ 173.983020][ T6038] device ipvlan1 entered promiscuous mode [ 174.016931][ T6038] bridge0: port 3(ipvlan1) entered blocking state [ 174.037386][ T6038] bridge0: port 3(ipvlan1) entered disabled state [ 174.074695][ T6038] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 174.421308][ T6059] netlink: 'syz.4.568': attribute type 10 has an invalid length. [ 174.567441][ T6061] device syzkaller0 entered promiscuous mode [ 174.717679][ T6064] netlink: 156 bytes leftover after parsing attributes in process `syz.2.570'. [ 175.765879][ T5906] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 175.801973][ T5906] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 175.883139][ T5906] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 175.949672][ T5906] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 176.374133][ T5906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.460117][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.494333][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.532188][ T5906] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.577286][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.625694][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.685282][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.692757][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.775475][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.847799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.889973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.950068][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.957237][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.006311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 177.086596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 177.111089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.149300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.195486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 177.206091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.225835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.256145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 177.309280][ T6118] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 177.314634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.322764][ T6118] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 177.329929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 177.354062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.363896][ T6121] netlink: 'syz.2.586': attribute type 29 has an invalid length. [ 177.394771][ T5906] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 177.439650][ T6121] netlink: 'syz.2.586': attribute type 29 has an invalid length. [ 177.531331][ T6122] netlink: 'syz.2.586': attribute type 29 has an invalid length. [ 177.574164][ T6121] sctp: [Deprecated]: syz.2.586 (pid 6121) Use of struct sctp_assoc_value in delayed_ack socket option. [ 177.574164][ T6121] Use struct sctp_sack_info instead [ 178.209628][ T6139] netlink: 'syz.4.590': attribute type 21 has an invalid length. [ 178.233472][ T6139] netlink: 128 bytes leftover after parsing attributes in process `syz.4.590'. [ 178.264813][ T6139] netlink: 'syz.4.590': attribute type 4 has an invalid length. [ 178.293491][ T6139] netlink: 'syz.4.590': attribute type 5 has an invalid length. [ 178.325635][ T6139] netlink: 3 bytes leftover after parsing attributes in process `syz.4.590'. [ 178.367971][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 178.389702][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 178.434777][ T5906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.562748][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 178.587239][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 178.696594][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 178.740294][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 178.771339][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 178.817303][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 178.848788][ T5906] device veth0_vlan entered promiscuous mode [ 178.871910][ T5906] device veth1_vlan entered promiscuous mode [ 178.989767][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 179.016706][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 179.050406][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 179.084153][ T6164] sctp: [Deprecated]: syz.4.597 (pid 6164) Use of struct sctp_assoc_value in delayed_ack socket option. [ 179.084153][ T6164] Use struct sctp_sack_info instead [ 179.102102][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 179.124218][ T5906] device veth0_macvtap entered promiscuous mode [ 179.176932][ T6160] device lo left promiscuous mode [ 179.265094][ T5906] device veth1_macvtap entered promiscuous mode [ 179.350478][ T5906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.398483][ T5906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.423302][ T5906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.468180][ T5906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.529404][ T5906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.569011][ T5906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.588005][ T5906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.616368][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 179.647131][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 179.688079][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 179.741172][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 179.782266][ T5906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.810908][ T5906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.890603][ T5906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.924691][ T6188] sctp: [Deprecated]: syz.4.603 (pid 6188) Use of int in max_burst socket option deprecated. [ 179.924691][ T6188] Use struct sctp_assoc_value instead [ 179.928778][ T5906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.009445][ T5906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.099495][ T5906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.120024][ T5906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.148128][ T5906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.221625][ T5906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.234226][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 180.268631][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 180.336113][ T6183] netlink: 'syz.4.603': attribute type 10 has an invalid length. [ 180.580081][ T6200] netlink: 'syz.3.606': attribute type 3 has an invalid length. [ 180.589519][ T6200] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.606'. [ 180.603514][ T5906] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.646710][ T5906] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.668479][ T5906] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.699278][ T5906] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.057886][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.095520][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.217886][ T6205] device syzkaller0 entered promiscuous mode [ 181.307646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 183.245675][ C0] bridge0: port 4(macsec0) entered forwarding state [ 183.252495][ C0] bridge0: topology change detected, propagating [ 185.311639][ T6220] netlink: 'syz.0.607': attribute type 10 has an invalid length. [ 185.320465][ T6220] netlink: 40 bytes leftover after parsing attributes in process `syz.0.607'. [ 185.331090][ T6220] bridge0: port 3(ipvlan1) entered blocking state [ 185.337628][ T6220] bridge0: port 3(ipvlan1) entered disabled state [ 185.345374][ T6220] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 185.406673][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.435467][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.462928][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 187.673719][ T4319] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.769592][ T4250] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 187.779078][ T4250] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 187.787083][ T4250] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 187.846740][ T4250] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 187.876699][ T4250] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 187.889811][ T4250] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 187.967423][ T4319] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.989084][ T6273] netlink: 14 bytes leftover after parsing attributes in process `syz.3.621'. [ 188.227216][ T4319] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.281217][ T6281] bridge0: port 3(team0) entered blocking state [ 188.288873][ T6281] bridge0: port 3(team0) entered disabled state [ 188.340085][ T6281] device team0 entered promiscuous mode [ 188.362261][ T6281] device team_slave_0 entered promiscuous mode [ 188.384799][ T6281] device team_slave_1 entered promiscuous mode [ 188.406344][ T6281] bridge0: port 3(team0) entered blocking state [ 188.413136][ T6281] bridge0: port 3(team0) entered forwarding state [ 188.463525][ T4319] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.233431][ T6269] chnl_net:caif_netlink_parms(): no params data found [ 189.608567][ T6308] GPL: port 1(erspan0) entered blocking state [ 189.614817][ T6308] GPL: port 1(erspan0) entered forwarding state [ 189.825055][ T6269] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.833103][ T6269] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.842969][ T6269] device bridge_slave_0 entered promiscuous mode [ 189.893842][ T6320] netlink: 'syz.0.634': attribute type 10 has an invalid length. [ 189.914005][ T6320] device bridge_slave_0 left promiscuous mode [ 189.945604][ T6320] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.959451][ T4250] Bluetooth: hci4: command 0x0409 tx timeout [ 189.995988][ T6269] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.013619][ T6269] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.028877][ T6269] device bridge_slave_1 entered promiscuous mode [ 190.197325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): GPL: link becomes ready [ 190.268685][ T6269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.354679][ T6269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.976301][ T6269] team0: Port device team_slave_0 added [ 191.065183][ T6269] team0: Port device team_slave_1 added [ 191.458635][ T6269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.483572][ T6269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.618414][ T6269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.785101][ T6356] device veth0_vlan left promiscuous mode [ 191.854089][ T6356] device veth0_vlan entered promiscuous mode [ 192.029795][ T6269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.039451][ T4250] Bluetooth: hci4: command 0x041b tx timeout [ 192.079349][ T6269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.106317][ T6269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.331688][ T4250] Bluetooth: hci3: unexpected event 0x35 length: 15 > 6 [ 192.481980][ T4319] device hsr_slave_0 left promiscuous mode [ 192.576096][ T4319] device hsr_slave_1 left promiscuous mode [ 192.589823][ T4319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.649617][ T4319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.697847][ T4319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.716076][ T4319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.744306][ T4319] device bridge_slave_1 left promiscuous mode [ 192.772852][ T4319] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.787181][ T4319] device bridge_slave_0 left promiscuous mode [ 192.807318][ T4319] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.918741][ T4319] device veth1_macvtap left promiscuous mode [ 192.949799][ T4319] device veth0_macvtap left promiscuous mode [ 192.956030][ T4319] device veth1_vlan left promiscuous mode [ 192.972472][ T4319] device veth0_vlan left promiscuous mode [ 193.757084][ T4319] team0 (unregistering): Port device team_slave_1 removed [ 193.797601][ T4319] team0 (unregistering): Port device team_slave_0 removed [ 193.838146][ T4319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.879960][ T4319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.125779][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.126457][ T4250] Bluetooth: hci4: command 0x040f tx timeout [ 194.133470][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.326943][ T4319] bond0 (unregistering): Released all slaves [ 194.405992][ T6269] device hsr_slave_0 entered promiscuous mode [ 194.412833][ T6269] device hsr_slave_1 entered promiscuous mode [ 194.419874][ T6269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.427451][ T6269] Cannot create hsr debugfs directory [ 196.199354][ T4252] Bluetooth: hci1: command 0x0406 tx timeout [ 196.199459][ T4250] Bluetooth: hci0: command 0x0406 tx timeout [ 196.205435][ T4252] Bluetooth: hci4: command 0x0419 tx timeout [ 196.332980][ T6269] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 196.377751][ T6269] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 196.400755][ T6269] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 196.450982][ T6269] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 196.953849][ T6472] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.675'. [ 197.047027][ T6269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.177051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.207760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.316497][ T6269] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.412009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 197.430871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.485868][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.493156][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.538242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.593495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 197.621902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 197.662384][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.669689][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.747565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 197.784108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 197.804665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 197.861534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.895972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 197.914815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 197.946098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 197.976313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 198.005961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.082844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 198.141138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 198.183028][ T6269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 199.072319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 199.128689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 199.154227][ T6269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.223872][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 199.258839][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 199.342740][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 199.378062][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 199.437700][ T6269] device veth0_vlan entered promiscuous mode [ 199.452097][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 199.470596][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 199.555304][ T4252] Bluetooth: hci3: unexpected event 0x34 length: 15 > 6 [ 199.682934][ T6269] device veth1_vlan entered promiscuous mode [ 199.723598][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 199.788992][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 199.820273][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 199.850280][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 199.909762][ T6537] netlink: 830 bytes leftover after parsing attributes in process `syz.4.691'. [ 199.959665][ T6269] device veth0_macvtap entered promiscuous mode [ 199.997130][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 200.019101][ T6269] device veth1_macvtap entered promiscuous mode [ 200.141700][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.183280][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.209738][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.231973][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.261616][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.293064][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.321800][ T6269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.343924][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 200.367618][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 200.413374][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.454710][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.492755][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.520472][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.549739][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.571169][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.599841][ T6269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.619361][ T6269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.652788][ T6269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.673498][ T6552] netlink: 'syz.2.695': attribute type 39 has an invalid length. [ 200.687648][ T5593] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 200.707877][ T5593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 200.726664][ T6269] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.747355][ T6269] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.789396][ T6269] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.812128][ T6269] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.836311][ T6551] delete_channel: no stack [ 201.140518][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.194002][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.276278][ T5593] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 201.338902][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.358929][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.364298][ T6569] netlink: 'syz.0.698': attribute type 21 has an invalid length. [ 201.390775][ T6569] netlink: 128 bytes leftover after parsing attributes in process `syz.0.698'. [ 201.411135][ T6569] netlink: 'syz.0.698': attribute type 4 has an invalid length. [ 201.429836][ T6569] netlink: 'syz.0.698': attribute type 5 has an invalid length. [ 201.445986][ T6569] netlink: 3 bytes leftover after parsing attributes in process `syz.0.698'. [ 201.472211][ T5593] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 201.905852][ T6587] netlink: 'syz.4.702': attribute type 25 has an invalid length. [ 202.302724][ T5593] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.497168][ T5593] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.694924][ T5593] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.836920][ T5593] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.326144][ T6640] netlink: 'syz.2.712': attribute type 39 has an invalid length. [ 204.471885][ T4254] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 204.486950][ T4250] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 204.495106][ T4250] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 204.547563][ T4250] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 204.585982][ T4250] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 204.607902][ T4250] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 206.190250][ T6674] netlink: 766 bytes leftover after parsing attributes in process `syz.0.718'. [ 206.299897][ T6674] device bond_slave_0 entered promiscuous mode [ 206.306580][ T6674] device bond_slave_1 entered promiscuous mode [ 206.313176][ T6674] device bridge0 entered promiscuous mode [ 206.319286][ T6674] device batadv_slave_0 entered promiscuous mode [ 206.553798][ T6642] chnl_net:caif_netlink_parms(): no params data found [ 206.679551][ T4250] Bluetooth: hci4: command 0x0409 tx timeout [ 208.687527][ T5593] device hsr_slave_0 left promiscuous mode [ 208.736787][ T5593] device hsr_slave_1 left promiscuous mode [ 208.750263][ T5593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.757970][ T5593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.769667][ T4250] Bluetooth: hci4: command 0x041b tx timeout [ 208.806413][ T5593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.840177][ T5593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.618070][ T5593] device bridge_slave_1 left promiscuous mode [ 209.628315][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.688518][ T5593] device bridge_slave_0 left promiscuous mode [ 209.729028][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.826171][ T5593] device veth1_macvtap left promiscuous mode [ 209.842843][ T4250] Bluetooth: hci1: unexpected event 0x0f length: 15 > 4 [ 209.849480][ T5593] device veth0_macvtap left promiscuous mode [ 209.869954][ T5593] device veth1_vlan left promiscuous mode [ 209.879758][ T5593] device veth0_vlan left promiscuous mode [ 210.841497][ T4250] Bluetooth: hci4: command 0x040f tx timeout [ 211.221046][ T5593] team0 (unregistering): Port device team_slave_1 removed [ 211.320996][ T5593] team0 (unregistering): Port device team_slave_0 removed [ 211.407603][ T5593] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.484521][ T5593] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.037789][ T5593] bond0 (unregistering): Released all slaves [ 212.163298][ T6714] netlink: 'syz.2.727': attribute type 39 has an invalid length. [ 212.212084][ T6714] device veth0_macvtap left promiscuous mode [ 212.361416][ T6642] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.368663][ T6642] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.408397][ T6642] device bridge_slave_0 entered promiscuous mode [ 212.442442][ T6642] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.480235][ T6642] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.488532][ T6642] device bridge_slave_1 entered promiscuous mode [ 212.625835][ T6642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.693183][ T6642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.846131][ T6642] team0: Port device team_slave_0 added [ 212.919518][ T4250] Bluetooth: hci4: command 0x0419 tx timeout [ 212.932401][ T6642] team0: Port device team_slave_1 added [ 213.058799][ T6642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.100135][ T6642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.215848][ T6642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.249132][ T6642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.277752][ T6642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.385455][ T6642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.052136][ T6733] device syzkaller0 entered promiscuous mode [ 215.191344][ T6767] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.739'. [ 215.205548][ T6767] netlink: zone id is out of range [ 215.212787][ T6767] netlink: zone id is out of range [ 215.245643][ T6767] netlink: zone id is out of range [ 215.253620][ T6767] netlink: zone id is out of range [ 215.280152][ T6767] netlink: zone id is out of range [ 215.285980][ T6767] netlink: zone id is out of range [ 215.302964][ T6767] netlink: zone id is out of range [ 215.308768][ T6767] netlink: zone id is out of range [ 215.324521][ T6767] netlink: zone id is out of range [ 215.335784][ T6767] netlink: zone id is out of range [ 217.021656][ T6642] device hsr_slave_0 entered promiscuous mode [ 217.030121][ T6642] device hsr_slave_1 entered promiscuous mode [ 217.040124][ T6642] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.047711][ T6642] Cannot create hsr debugfs directory [ 217.076677][ T6766] netlink: 'syz.4.740': attribute type 25 has an invalid length. [ 217.247296][ T6781] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 217.259487][ T6781] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 218.127660][ T6781] syz.0.747 (6781) used greatest stack depth: 18824 bytes left [ 218.732513][ T6642] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 218.804931][ T6642] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 218.831137][ T6642] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 218.885402][ T6642] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 219.074747][ T6800] device wlan1 entered promiscuous mode [ 219.363349][ T6642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.414476][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.429891][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.451549][ T6821] sctp: [Deprecated]: syz.0.756 (pid 6821) Use of struct sctp_assoc_value in delayed_ack socket option. [ 219.451549][ T6821] Use struct sctp_sack_info instead [ 219.481938][ T6642] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.510996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.530454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.554803][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.562022][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.586222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 219.603255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.618848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.648666][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.655868][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.671709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 219.695965][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 219.711737][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 219.762877][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.778785][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 219.808068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 219.868218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.878767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 219.893124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 219.908979][ T6642] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 219.932850][ T6642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 219.965719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 219.978391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.073715][ T6832] netlink: 'syz.4.759': attribute type 10 has an invalid length. [ 220.898428][ T5593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 220.939677][ T5593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 220.970402][ T6642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.977684][ T6851] netlink: 40 bytes leftover after parsing attributes in process `syz.2.762'. [ 221.229881][ T6849] netlink: 'syz.3.763': attribute type 39 has an invalid length. [ 221.439598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 221.448691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 221.536653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 221.555140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 221.591161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 221.602087][ T4252] Bluetooth: hci0: unexpected event 0x3b length: 15 > 10 [ 221.610148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 221.646749][ T6642] device veth0_vlan entered promiscuous mode [ 221.697004][ T6859] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 221.711285][ T6642] device veth1_vlan entered promiscuous mode [ 221.871385][ T6874] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 226.707187][ T6878] netlink: 188 bytes leftover after parsing attributes in process `syz.4.770'. [ 226.809580][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 226.848171][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 226.870169][ T6642] device veth0_macvtap entered promiscuous mode [ 226.887026][ T6642] device veth1_macvtap entered promiscuous mode [ 226.953475][ T6642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.007902][ T6642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.079009][ T6642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.168051][ T6642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.259479][ T6642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.285169][ T6642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.312062][ T6642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.532962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 227.546990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 227.591017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 227.610172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 227.640653][ T6925] netlink: 'syz.0.781': attribute type 28 has an invalid length. [ 227.686588][ T6642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.728289][ T6642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.784281][ T6642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.807096][ T6642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.879692][ T6642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.948648][ T6642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.998372][ T6642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.019830][ T6642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.051132][ T6642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.086984][ T6642] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.113003][ T6642] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.181812][ T6642] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.206589][ T6642] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.575990][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 228.600358][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 230.896301][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.933907][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.989774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 231.101357][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.116618][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.380431][ T4252] Bluetooth: hci3: unexpected event 0x36 length: 15 > 7 [ 231.924247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 232.836130][ T7000] netlink: 'syz.4.799': attribute type 10 has an invalid length. [ 232.926221][ T7000] device veth1_macvtap left promiscuous mode [ 233.062162][ T7000] bridge0: port 4(macsec0) entered disabled state [ 233.093147][ T7009] netlink: 'syz.0.801': attribute type 10 has an invalid length. [ 233.110429][ T7009] netlink: 'syz.0.801': attribute type 4 has an invalid length. [ 233.150291][ T7009] netlink: 152 bytes leftover after parsing attributes in process `syz.0.801'. [ 233.273633][ T7009] net_ratelimit: 139 callbacks suppressed [ 233.273655][ T7009] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 233.744734][ T75] device hsr_slave_0 left promiscuous mode [ 233.751432][ T75] device hsr_slave_1 left promiscuous mode [ 233.757799][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.765854][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.779098][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.786857][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.795141][ T75] device bridge_slave_1 left promiscuous mode [ 233.803609][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.813774][ T75] device bridge_slave_0 left promiscuous mode [ 233.820382][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.843332][ T75] device veth1_macvtap left promiscuous mode [ 233.849620][ T75] device veth0_macvtap left promiscuous mode [ 233.855883][ T75] device veth1_vlan left promiscuous mode [ 233.861763][ T75] device veth0_vlan left promiscuous mode [ 234.169069][ T4252] Bluetooth: hci3: Malformed Event: 0x2f [ 234.710547][ T4250] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 234.731137][ T4254] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 234.752586][ T4254] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 234.764119][ T4250] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 234.776696][ T4250] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 234.784213][ T4250] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 234.944911][ T75] team0 (unregistering): Port device team_slave_1 removed [ 234.997678][ T75] team0 (unregistering): Port device team_slave_0 removed [ 235.092680][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.208073][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.758341][ T75] bond0 (unregistering): Released all slaves [ 235.838165][ T7033] device lo entered promiscuous mode [ 236.313367][ T7032] chnl_net:caif_netlink_parms(): no params data found [ 236.839997][ T4250] Bluetooth: hci4: command 0x0409 tx timeout [ 237.654116][ T7032] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.663870][ T7032] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.683670][ T7032] device bridge_slave_0 entered promiscuous mode [ 237.866220][ T7032] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.890962][ T7032] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.955286][ T7032] device bridge_slave_1 entered promiscuous mode [ 238.542227][ T7032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.716628][ T75] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.791676][ T7032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.925286][ T4250] Bluetooth: hci4: command 0x041b tx timeout [ 239.051595][ T75] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.235623][ T7032] team0: Port device team_slave_0 added [ 239.283581][ T75] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.303488][ T7032] team0: Port device team_slave_1 added [ 239.416668][ T7032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.429080][ T7032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.494626][ T7032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.556114][ T75] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.587984][ T7101] netlink: 766 bytes leftover after parsing attributes in process `syz.0.829'. [ 239.598366][ T7032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.612280][ T7032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.639162][ T7032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.793088][ T7107] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.832'. [ 239.944183][ T7032] device hsr_slave_0 entered promiscuous mode [ 239.971680][ T7032] device hsr_slave_1 entered promiscuous mode [ 240.000706][ T7032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.008314][ T7032] Cannot create hsr debugfs directory [ 240.999759][ T4250] Bluetooth: hci4: command 0x040f tx timeout [ 241.431841][ T7139] device wg2 entered promiscuous mode [ 242.091301][ T7032] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 242.145404][ T7032] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 242.244071][ T7032] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 242.274187][ T7032] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 242.304739][ T4250] Bluetooth: hci0: unexpected event 0x20 length: 15 > 7 [ 242.502967][ T7174] netlink: 'syz.4.851': attribute type 39 has an invalid length. [ 243.081294][ T4250] Bluetooth: hci4: command 0x0419 tx timeout [ 243.139432][ T75] device hsr_slave_0 left promiscuous mode [ 243.252908][ T75] device hsr_slave_1 left promiscuous mode [ 243.330243][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.346712][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.408913][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.453232][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.497306][ T75] device bridge_slave_1 left promiscuous mode [ 243.519456][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.558509][ T75] device bridge_slave_0 left promiscuous mode [ 243.600358][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.950197][ T75] device veth1_macvtap left promiscuous mode [ 243.956290][ T75] device veth0_macvtap left promiscuous mode [ 244.010372][ T75] device veth1_vlan left promiscuous mode [ 244.016247][ T75] device veth0_vlan left promiscuous mode [ 244.815023][ T75] team0 (unregistering): Port device team_slave_1 removed [ 244.854744][ T75] team0 (unregistering): Port device team_slave_0 removed [ 244.894315][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.934103][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.319823][ T75] bond0 (unregistering): Released all slaves [ 245.560327][ T7032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.623484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 245.635288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 245.665501][ T7032] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.849962][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 245.883340][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 245.926839][ T7230] netlink: 'syz.0.864': attribute type 7 has an invalid length. [ 245.953170][ T7230] netlink: 938 bytes leftover after parsing attributes in process `syz.0.864'. [ 246.003646][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.011143][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.064145][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 246.101343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 246.128812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 246.150389][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.157533][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.230058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 246.276458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 246.321331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 246.356161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 246.381525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 246.402550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 246.421943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 246.460146][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 246.501155][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 246.545325][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 246.563571][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 246.577943][ T7032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 246.610529][ T7243] netlink: 'syz.3.869': attribute type 10 has an invalid length. [ 246.848089][ T7243] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.301176][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 247.308958][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 247.326352][ T7032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.361784][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 247.377665][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 247.425882][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 247.436343][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 247.455285][ T7032] device veth0_vlan entered promiscuous mode [ 247.467985][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 247.478026][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 247.503537][ T7032] device veth1_vlan entered promiscuous mode [ 247.556263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 247.566190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 247.584566][ T7032] device veth0_macvtap entered promiscuous mode [ 247.625197][ T7032] device veth1_macvtap entered promiscuous mode [ 247.814382][ T7032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.872207][ T7032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.948102][ T7032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.959611][ T7032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.972274][ T7032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.985742][ T7032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.996513][ T7032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.021505][ T7032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.052552][ T7032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.076668][ T7032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.106863][ T7272] sock: sock_set_timeout: `syz.0.877' (pid 7272) tries to set negative timeout [ 248.118849][ T7032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.136300][ T7032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.146342][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 248.171314][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 248.195770][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 248.212049][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 248.223745][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 248.242193][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 248.289969][ T7032] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.304968][ T7032] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.318245][ T7032] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.327365][ T7032] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.508297][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.555681][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.588200][ T7280] netlink: 'syz.3.880': attribute type 10 has an invalid length. [ 248.614456][ T7280] bond0: (slave bond_slave_0): Releasing backup interface [ 248.671340][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 248.677393][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.688474][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.699740][ T7286] netlink: 'syz.2.882': attribute type 21 has an invalid length. [ 248.722225][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 249.391200][ T4250] Bluetooth: hci3: unexpected event 0x1d length: 15 > 5 [ 249.952510][ T7308] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.891'. [ 250.558040][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.945772][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.045706][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.094084][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.807367][ T7348] device syzkaller0 entered promiscuous mode [ 252.348840][ T7354] netlink: 'syz.2.902': attribute type 21 has an invalid length. [ 253.123699][ T4252] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 253.133626][ T4252] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 253.143144][ T4252] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 253.153252][ T4252] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 253.162227][ T4252] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 253.169894][ T4252] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 253.455387][ T7361] netlink: 'syz.0.905': attribute type 10 has an invalid length. [ 253.473272][ T7361] netlink: 2 bytes leftover after parsing attributes in process `syz.0.905'. [ 253.482526][ T7361] device bond0 entered promiscuous mode [ 253.489114][ T7361] bridge0: port 1(bond0) entered blocking state [ 253.503315][ T7361] bridge0: port 1(bond0) entered disabled state [ 253.525145][ T7359] netlink: 'syz.2.904': attribute type 39 has an invalid length. [ 253.540833][ T7364] netlink: 830 bytes leftover after parsing attributes in process `syz.0.905'. [ 253.718933][ T7369] netlink: 10 bytes leftover after parsing attributes in process `syz.3.907'. [ 254.187707][ T7379] netlink: 'syz.4.909': attribute type 10 has an invalid length. [ 254.677922][ T7379] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.743478][ T9] device hsr_slave_0 left promiscuous mode [ 254.790148][ T9] device hsr_slave_1 left promiscuous mode [ 254.829150][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.839809][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.857537][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.882410][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.897331][ T9] device bridge_slave_1 left promiscuous mode [ 254.925992][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.956616][ T9] device bridge_slave_0 left promiscuous mode [ 254.974614][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.065546][ T9] device veth1_macvtap left promiscuous mode [ 255.085059][ T9] device veth0_macvtap left promiscuous mode [ 255.103926][ T9] device veth1_vlan left promiscuous mode [ 255.121790][ T9] device veth0_vlan left promiscuous mode [ 255.239994][ T4254] Bluetooth: hci4: command 0x0409 tx timeout [ 255.563346][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.569830][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.086048][ T9] team0 (unregistering): Port device team_slave_1 removed [ 256.124758][ T9] team0 (unregistering): Port device team_slave_0 removed [ 256.163666][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.204301][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.612862][ T9] bond0 (unregistering): Released all slaves [ 256.684620][ T7392] netlink: 'syz.0.913': attribute type 10 has an invalid length. [ 256.693099][ T7392] netlink: 'syz.0.913': attribute type 4 has an invalid length. [ 256.700893][ T7392] netlink: 128 bytes leftover after parsing attributes in process `syz.0.913'. [ 256.710464][ T7392] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 256.807757][ T7410] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 256.889649][ T7410] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 256.927860][ T7412] netlink: 'syz.3.919': attribute type 12 has an invalid length. [ 256.960516][ T7412] netlink: 132 bytes leftover after parsing attributes in process `syz.3.919'. [ 257.309744][ T7427] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 257.329596][ T4252] Bluetooth: hci4: command 0x041b tx timeout [ 257.429488][ T7427] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 257.587691][ T7366] chnl_net:caif_netlink_parms(): no params data found [ 257.910908][ T7366] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.956358][ T7366] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.039500][ T7366] device bridge_slave_0 entered promiscuous mode [ 258.071719][ T7366] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.087559][ T7366] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.098818][ T7366] device bridge_slave_1 entered promiscuous mode [ 258.295877][ T7366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.355240][ T7450] device lo entered promiscuous mode [ 258.504099][ T7366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.783027][ T7366] team0: Port device team_slave_0 added [ 258.824979][ T7366] team0: Port device team_slave_1 added [ 259.207108][ T7366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.234545][ T7366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.287076][ T7464] netlink: 'syz.0.930': attribute type 29 has an invalid length. [ 259.310306][ T7366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.323741][ T7464] netlink: 'syz.0.930': attribute type 29 has an invalid length. [ 259.339919][ T7366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.353406][ T7366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.405870][ T4252] Bluetooth: hci4: command 0x040f tx timeout [ 259.462867][ T7366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.554138][ T7366] device hsr_slave_0 entered promiscuous mode [ 259.585387][ T7366] device hsr_slave_1 entered promiscuous mode [ 259.633333][ T7366] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.671133][ T7366] Cannot create hsr debugfs directory [ 259.677472][ T7478] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.685011][ T7478] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.783608][ T7480] netlink: 'syz.0.935': attribute type 39 has an invalid length. [ 260.274468][ T4252] Bluetooth: hci3: unexpected event 0x16 length: 15 > 6 [ 260.304256][ T7495] netlink: 'syz.4.937': attribute type 21 has an invalid length. [ 260.361047][ T7495] netlink: 128 bytes leftover after parsing attributes in process `syz.4.937'. [ 260.398651][ T7495] netlink: 'syz.4.937': attribute type 5 has an invalid length. [ 260.431473][ T7495] netlink: 'syz.4.937': attribute type 6 has an invalid length. [ 260.449340][ T7495] netlink: 3 bytes leftover after parsing attributes in process `syz.4.937'. [ 261.479314][ T4252] Bluetooth: hci4: command 0x0419 tx timeout [ 261.812262][ T7366] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 261.896251][ T7366] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 261.951256][ T7366] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 262.013913][ T7545] netlink: 'syz.3.952': attribute type 21 has an invalid length. [ 262.121296][ T7545] netlink: 'syz.3.952': attribute type 1 has an invalid length. [ 262.190340][ T7366] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 262.567188][ T7366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.739020][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 262.816657][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 262.883490][ T7565] netlink: 'syz.2.957': attribute type 10 has an invalid length. [ 262.927695][ T7564] netlink: 5 bytes leftover after parsing attributes in process `syz.4.958'. [ 262.938917][ T7565] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.950631][ T7564] netlink: 'syz.4.958': attribute type 1 has an invalid length. [ 262.995401][ T7366] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.029644][ T7566] device lo left promiscuous mode [ 263.066036][ T7574] device lo entered promiscuous mode [ 263.113835][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 263.131775][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 263.145529][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.152749][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.239777][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 263.248506][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 263.270905][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 263.283409][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.290618][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.319052][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 263.340455][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 263.391006][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 263.413423][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 263.463639][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 263.501175][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 263.520310][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 263.543957][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 263.887655][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 263.909240][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 263.918496][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 263.961071][ T7366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 264.006397][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 265.070010][ T7612] validate_nla: 1 callbacks suppressed [ 265.070088][ T7612] netlink: 'syz.2.968': attribute type 10 has an invalid length. [ 265.131675][ T7612] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 265.696298][ T7627] netlink: 10 bytes leftover after parsing attributes in process `syz.0.969'. [ 265.716139][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 265.728463][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 265.816153][ T7366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.983887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 266.012917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 266.100167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 266.140404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 266.179076][ T7366] device veth0_vlan entered promiscuous mode [ 266.200013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 266.211073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 266.248056][ T4252] Bluetooth: hci3: unexpected event 0x48 length: 15 > 3 [ 266.248095][ T4252] Bluetooth: hci3: wrong event for mode 0 [ 266.276527][ T7366] device veth1_vlan entered promiscuous mode [ 266.418292][ T7660] device vlan1 entered promiscuous mode [ 266.447308][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 266.483784][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 266.517452][ T7366] device veth0_macvtap entered promiscuous mode [ 266.582303][ T7366] device veth1_macvtap entered promiscuous mode [ 266.597394][ T7664] netlink: 'syz.3.978': attribute type 10 has an invalid length. [ 266.608373][ T7664] device bridge_slave_0 left promiscuous mode [ 266.631864][ T7664] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.752827][ T7366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.784549][ T7366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.856155][ T7366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.894684][ T7366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.945733][ T7366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.031518][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 267.048713][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 267.094321][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 267.135727][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 267.175718][ T7366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.213940][ T7366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.273746][ T7366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.312681][ T7366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.338585][ T7366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.413147][ T7366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.449902][ T7366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.647089][ T7672] device wg2 entered promiscuous mode [ 267.712797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 267.746037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 267.784832][ T7366] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.833810][ T7366] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.849592][ T7366] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.858381][ T7366] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.327974][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.422611][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.638396][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 268.664560][ T4306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.683496][ T4306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.767321][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 270.745559][ T7722] device veth1_macvtap left promiscuous mode [ 270.755296][ T7722] device macsec0 entered promiscuous mode [ 270.814161][ T7724] device veth1_macvtap entered promiscuous mode [ 271.024529][ T4306] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.181504][ T4306] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.425643][ T4306] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.624028][ T4306] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.675829][ T7745] netlink: 'syz.3.997': attribute type 12 has an invalid length. [ 271.701447][ T7745] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.997'. [ 271.904970][ T7746] device lo left promiscuous mode [ 271.950200][ T7746] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 272.096671][ T4254] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 272.107238][ T4254] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 272.115704][ T4254] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 272.143502][ T4254] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 272.152113][ T4254] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 272.160117][ T4254] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 272.314906][ T7757] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1000'. [ 272.513243][ T4252] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 273.450032][ T7754] chnl_net:caif_netlink_parms(): no params data found [ 273.918979][ T7754] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.968541][ T7754] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.000152][ T7754] device bridge_slave_0 entered promiscuous mode [ 274.201763][ T4252] Bluetooth: hci4: command 0x0409 tx timeout [ 274.323655][ T7754] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.339006][ T7754] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.393788][ T7754] device bridge_slave_1 entered promiscuous mode [ 274.773349][ T7754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.922200][ T7835] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1019'. [ 275.580537][ T7846] netlink: 131088 bytes leftover after parsing attributes in process `syz.2.1022'. [ 275.593561][ T7754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.624083][ T7839] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1020'. [ 275.882718][ T7754] team0: Port device team_slave_0 added [ 275.915923][ T7754] team0: Port device team_slave_1 added [ 275.993857][ T4306] device hsr_slave_0 left promiscuous mode [ 276.227728][ T4306] device hsr_slave_1 left promiscuous mode [ 276.271963][ T4306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.335059][ T4252] Bluetooth: hci4: command 0x041b tx timeout [ 276.400673][ T4306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.419942][ T4306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.469333][ T4306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.478479][ T4306] device bridge_slave_1 left promiscuous mode [ 276.501726][ T4306] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.533145][ T4306] device bridge_slave_0 left promiscuous mode [ 276.543577][ T4306] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.567959][ T4254] Bluetooth: hci3: unexpected event 0x14 length: 15 > 6 [ 276.639625][ T4306] device veth1_macvtap left promiscuous mode [ 276.691328][ T4306] device veth0_macvtap left promiscuous mode [ 276.697633][ T4306] device veth1_vlan left promiscuous mode [ 276.719370][ T4306] device veth0_vlan left promiscuous mode [ 277.798254][ T4306] team0 (unregistering): Port device team_slave_1 removed [ 277.846718][ T4306] team0 (unregistering): Port device team_slave_0 removed [ 277.894127][ T4306] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.938054][ T4306] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.344952][ T4306] bond0 (unregistering): Released all slaves [ 278.363774][ T4254] Bluetooth: hci4: command 0x040f tx timeout [ 278.543739][ T7880] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 278.551549][ T7880] IPv6: NLM_F_CREATE should be set when creating new route [ 278.558847][ T7880] IPv6: NLM_F_CREATE should be set when creating new route [ 278.566167][ T7880] IPv6: NLM_F_CREATE should be set when creating new route [ 278.670057][ T7754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.677064][ T7754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.779130][ T7754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.808859][ T7754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.845682][ T7754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.964368][ T7754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.987643][ T7892] netlink: 'syz.4.1036': attribute type 10 has an invalid length. [ 279.048754][ T7892] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1036'. [ 279.093863][ T7892] device team0 entered promiscuous mode [ 279.109811][ T7892] device team_slave_0 entered promiscuous mode [ 279.125927][ T7892] device team_slave_1 entered promiscuous mode [ 279.157367][ T7892] device bond0 entered promiscuous mode [ 279.189340][ T7892] device bond_slave_1 entered promiscuous mode [ 279.219678][ T7892] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.240627][ T7892] bridge0: port 5(team0) entered blocking state [ 279.269583][ T7892] bridge0: port 5(team0) entered disabled state [ 279.297458][ T7892] bridge0: port 5(team0) entered blocking state [ 279.304022][ T7892] bridge0: port 5(team0) entered listening state [ 279.446342][ T7754] device hsr_slave_0 entered promiscuous mode [ 279.484687][ T7754] device hsr_slave_1 entered promiscuous mode [ 279.524804][ T7754] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.539398][ T7754] Cannot create hsr debugfs directory [ 280.015970][ T4252] Bluetooth: hci1: unexpected event 0x23 length: 15 > 13 [ 280.101290][ T7918] netlink: 'syz.3.1043': attribute type 10 has an invalid length. [ 280.439402][ T4252] Bluetooth: hci4: command 0x0419 tx timeout [ 280.596933][ T7925] delete_channel: no stack [ 281.268773][ T7754] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 281.330396][ T7754] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 281.431898][ T7754] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 281.480442][ T7754] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 281.924363][ T7754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.057105][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 282.077318][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 282.146140][ T7754] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.211975][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 282.244848][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 282.290380][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.297702][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.377275][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 282.452771][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 282.550966][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 282.594874][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.602121][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.720051][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 282.775324][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 282.825965][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 282.888082][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 282.968294][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 283.056825][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 283.102854][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 283.161778][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 283.220397][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 283.283445][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 283.315645][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 283.339567][ T7754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 283.705866][ T7983] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 283.713403][ T7983] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 284.629670][ T7754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.637670][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 284.662901][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 284.683445][ T4252] Bluetooth: hci1: unexpected event 0x30 length: 15 > 3 [ 284.749522][ T5593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 284.795609][ T8001] netlink: 'syz.0.1063': attribute type 9 has an invalid length. [ 284.815715][ T5593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 284.849934][ T8001] netlink: 399 bytes leftover after parsing attributes in process `syz.0.1063'. [ 284.959843][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 285.022444][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 285.091880][ T7754] device veth0_vlan entered promiscuous mode [ 285.140700][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 285.179061][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 285.206213][ T7754] device veth1_vlan entered promiscuous mode [ 285.288376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 285.307408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 285.331347][ T7754] device veth0_macvtap entered promiscuous mode [ 285.377211][ T7754] device veth1_macvtap entered promiscuous mode [ 285.545969][ T7754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.564425][ T7754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.575964][ T7754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.591886][ T7754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.605669][ T7754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.636294][ T4252] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5 [ 285.653550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 285.701240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 285.730595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 285.760258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 285.793273][ T7754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.829433][ T7754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.864063][ T7754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.896757][ T7754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.926948][ T7754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.947925][ T7754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.970733][ T7754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.013483][ T8022] device bridge_slave_1 left promiscuous mode [ 286.031821][ T8022] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.075444][ T8022] device bridge_slave_0 left promiscuous mode [ 286.095082][ T8022] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.346417][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 286.358228][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 286.379746][ T7754] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.388528][ T7754] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.406051][ T7754] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.434302][ T7754] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.454329][ T8038] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.1073'. [ 286.483704][ T8040] netlink: 'syz.4.1071': attribute type 10 has an invalid length. [ 286.511129][ T8040] bridge0: port 5(team0) entered disabled state [ 286.556975][ T8040] device team0 left promiscuous mode [ 286.562561][ T8040] device team_slave_0 left promiscuous mode [ 286.580990][ T8040] device team_slave_1 left promiscuous mode [ 286.587105][ T8040] device bond0 left promiscuous mode [ 286.615062][ T8040] device bond_slave_1 left promiscuous mode [ 286.627286][ T8040] bridge0: port 5(team0) entered disabled state [ 286.638477][ T8040] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.895538][ T5593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.925895][ T5593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.959035][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 287.020093][ T8052] sock: sock_set_timeout: `syz.3.1080' (pid 8052) tries to set negative timeout [ 287.038304][ T4306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.057067][ T4306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.088298][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 287.693713][ T8069] netlink: 'syz.0.1085': attribute type 6 has an invalid length. [ 287.703366][ T8069] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.1085'. [ 288.037744][ T4319] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.244444][ T4319] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.489520][ T4319] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.641447][ T4319] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.721145][ T4252] Bluetooth: hci0: unexpected event 0x3c length: 15 > 7 [ 290.893101][ T4319] device hsr_slave_0 left promiscuous mode [ 290.979995][ T4319] device hsr_slave_1 left promiscuous mode [ 290.991205][ T4254] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 291.009384][ T4254] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 291.018457][ T4254] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 291.026986][ T4254] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 291.034675][ T4254] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 291.042369][ T4254] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 291.089988][ T4319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.153030][ T4319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.183262][ T4319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.212835][ T4319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.285289][ T4319] device bridge_slave_1 left promiscuous mode [ 291.302968][ T4319] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.353723][ T4319] device bridge_slave_0 left promiscuous mode [ 291.374486][ T4319] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.441451][ T4319] device veth1_macvtap left promiscuous mode [ 291.447657][ T4319] device veth0_macvtap left promiscuous mode [ 291.467874][ T4319] device veth1_vlan left promiscuous mode [ 291.473907][ T4319] device veth0_vlan left promiscuous mode [ 291.960321][ T4319] team0 (unregistering): Port device team_slave_1 removed [ 292.005158][ T4319] team0 (unregistering): Port device team_slave_0 removed [ 292.044139][ T4319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.084379][ T4319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.478030][ T4319] bond0 (unregistering): Released all slaves [ 292.542238][ T8126] netlink: 'syz.0.1093': attribute type 39 has an invalid length. [ 293.095509][ T4252] Bluetooth: hci4: command 0x0409 tx timeout [ 293.217343][ T8149] netlink: 'syz.2.1100': attribute type 6 has an invalid length. [ 293.230931][ T8149] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.1100'. [ 293.357974][ T8129] chnl_net:caif_netlink_parms(): no params data found [ 293.867864][ T8129] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.888830][ T8129] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.898015][ T4254] Bluetooth: hci1: unexpected event 0x3c length: 15 > 7 [ 293.920825][ T8129] device bridge_slave_0 entered promiscuous mode [ 294.028000][ T8129] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.077460][ T8129] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.115254][ T8129] device bridge_slave_1 entered promiscuous mode [ 294.817386][ T8129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.990317][ T8129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.091554][ T8129] team0: Port device team_slave_0 added [ 295.136394][ T8129] team0: Port device team_slave_1 added [ 295.159557][ T4254] Bluetooth: hci4: command 0x041b tx timeout [ 295.290808][ T8197] syz.2.1110[8197] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.290924][ T8197] syz.2.1110[8197] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.305348][ T8129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.326332][ T8129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.353373][ T8129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.389402][ T8193] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 295.397265][ T8193] #PF: supervisor instruction fetch in kernel mode [ 295.403764][ T8193] #PF: error_code(0x0010) - not-present page [ 295.409736][ T8193] PGD 26abe067 P4D 26abe067 PUD 5ff9d067 PMD 0 [ 295.416006][ T8193] Oops: 0010 [#1] PREEMPT SMP KASAN [ 295.421210][ T8193] CPU: 0 PID: 8193 Comm: syz.4.1109 Not tainted 6.1.119-syzkaller #0 [ 295.429276][ T8193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 295.439339][ T8193] RIP: 0010:0x0 [ 295.442852][ T8193] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 295.450224][ T8193] RSP: 0018:ffffc9000353f278 EFLAGS: 00010246 [ 295.456299][ T8193] RAX: 1ffffffff172a527 RBX: ffffffff8b952938 RCX: 0000000000000001 [ 295.464279][ T8193] RDX: ffffc9000353f320 RSI: 0000000000000001 RDI: ffff88805832c000 [ 295.472256][ T8193] RBP: ffffc9000353f3f0 R08: ffffffff85b68a21 R09: ffffed100b065808 [ 295.480272][ T8193] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 295.488243][ T8193] R13: ffff88805832c000 R14: ffffc9000353f358 R15: ffffc9000353f358 [ 295.496215][ T8193] FS: 00007fce9e0126c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 295.505145][ T8193] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 295.511729][ T8193] CR2: ffffffffffffffd6 CR3: 000000007a0c1000 CR4: 00000000003506f0 [ 295.519702][ T8193] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 295.527668][ T8193] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 295.535638][ T8193] Call Trace: [ 295.538914][ T8193] [ 295.541846][ T8193] ? __die_body+0x5e/0xa0 [ 295.546188][ T8193] ? page_fault_oops+0x7fe/0xaa0 [ 295.551173][ T8193] ? mark_lock+0x9a/0x340 [ 295.555531][ T8193] ? kernelmode_fixup_or_oops+0xd0/0xd0 [ 295.561085][ T8193] ? ct_nmi_exit+0x13f/0x1c0 [ 295.565697][ T8193] ? rcu_is_watching+0x11/0xb0 [ 295.570472][ T8193] ? is_errata93+0xc0/0x240 [ 295.574983][ T8193] ? exc_page_fault+0x3d1/0x620 [ 295.579841][ T8193] ? asm_exc_page_fault+0x22/0x30 [ 295.584882][ T8193] ? bond_get_slave_by_id+0x251/0x560 [ 295.590265][ T8193] bond_xdp_xmit+0x3fd/0x650 [ 295.594869][ T8193] ? bond_xdp_xmit+0xa7/0x650 [ 295.599553][ T8193] ? bond_xdp+0x950/0x950 [ 295.603886][ T8193] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 295.610144][ T8193] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 295.616361][ T8193] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 295.622554][ T8193] bq_xmit_all+0xe73/0x12e0 [ 295.627258][ T8193] ? dev_map_enqueue_multi+0x378/0x1100 [ 295.632826][ T8193] ? check_preemption_disabled+0x4b/0x110 [ 295.638568][ T8193] ? rcu_lockdep_current_cpu_online+0x33/0x120 [ 295.644737][ T8193] ? rcu_read_lock_bh_held+0x7a/0x110 [ 295.650125][ T8193] ? rcu_read_lock_held+0x40/0x40 [ 295.655164][ T8193] ? bq_enqueue+0x2e4/0x3b0 [ 295.659677][ T8193] ? __dev_flush+0x1c0/0x1c0 [ 295.664288][ T8193] ? dev_map_enqueue_multi+0xf8d/0x1100 [ 295.669929][ T8193] ? dev_map_enqueue+0x340/0x340 [ 295.674885][ T8193] ? memcpy+0x3c/0x60 [ 295.678874][ T8193] ? rcu_is_watching+0x11/0xb0 [ 295.683662][ T8193] ? trace_xdp_redirect+0xc3/0x2d0 [ 295.688783][ T8193] __dev_flush+0xc9/0x1c0 [ 295.693212][ T8193] xdp_do_flush+0xa/0x20 [ 295.697466][ T8193] bpf_test_run_xdp_live+0x1650/0x1ea0 [ 295.702936][ T8193] ? __mutex_unlock_slowpath+0x218/0x750 [ 295.708592][ T8193] ? 0xffffffffa0003b40 [ 295.712748][ T8193] ? bpf_test_run_xdp_live+0x75c/0x1ea0 [ 295.718298][ T8193] ? xdp_convert_md_to_buff+0x330/0x330 [ 295.723848][ T8193] ? bpf_dispatcher_change_prog+0xdf5/0xf80 [ 295.729750][ T8193] ? 0xffffffffa0003b40 [ 295.733919][ T8193] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 295.740170][ T8193] ? __might_fault+0xbd/0x110 [ 295.744856][ T8193] ? _copy_from_user+0x109/0x170 [ 295.749807][ T8193] ? bpf_test_init+0x15a/0x180 [ 295.754569][ T8193] ? xdp_convert_md_to_buff+0x5b/0x330 [ 295.760032][ T8193] bpf_prog_test_run_xdp+0x7d1/0x1130 [ 295.765773][ T8193] ? dev_put+0x80/0x80 [ 295.769849][ T8193] ? dev_put+0x80/0x80 [ 295.773924][ T8193] bpf_prog_test_run+0x32f/0x3a0 [ 295.778878][ T8193] __sys_bpf+0x3eb/0x6c0 [ 295.783132][ T8193] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 295.788536][ T8193] ? ct_irq_exit_irqson+0x13c/0x1b0 [ 295.793749][ T8193] ? syscall_enter_from_user_mode+0x37/0x230 [ 295.799840][ T8193] __x64_sys_bpf+0x78/0x90 [ 295.804269][ T8193] do_syscall_64+0x3b/0xb0 [ 295.808706][ T8193] ? clear_bhb_loop+0x45/0xa0 [ 295.813397][ T8193] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 295.819308][ T8193] RIP: 0033:0x7fce9d185d19 [ 295.823724][ T8193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.843345][ T8193] RSP: 002b:00007fce9e012038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 295.851775][ T8193] RAX: ffffffffffffffda RBX: 00007fce9d375fa0 RCX: 00007fce9d185d19 [ 295.859775][ T8193] RDX: 0000000000000050 RSI: 0000000020000240 RDI: 000000000000000a [ 295.867748][ T8193] RBP: 00007fce9d201a20 R08: 0000000000000000 R09: 0000000000000000 [ 295.875722][ T8193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.883695][ T8193] R13: 0000000000000000 R14: 00007fce9d375fa0 R15: 00007ffd73010778 [ 295.891676][ T8193] [ 295.894705][ T8193] Modules linked in: [ 295.898609][ T8193] CR2: 0000000000000000 [ 295.902797][ T8193] ---[ end trace 0000000000000000 ]--- [ 295.908254][ T8193] RIP: 0010:0x0 [ 295.911722][ T8193] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 295.919086][ T8193] RSP: 0018:ffffc9000353f278 EFLAGS: 00010246 [ 295.925159][ T8193] RAX: 1ffffffff172a527 RBX: ffffffff8b952938 RCX: 0000000000000001 [ 295.933134][ T8193] RDX: ffffc9000353f320 RSI: 0000000000000001 RDI: ffff88805832c000 [ 295.941120][ T8193] RBP: ffffc9000353f3f0 R08: ffffffff85b68a21 R09: ffffed100b065808 [ 295.949093][ T8193] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 295.957068][ T8193] R13: ffff88805832c000 R14: ffffc9000353f358 R15: ffffc9000353f358 [ 295.965041][ T8193] FS: 00007fce9e0126c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 295.973974][ T8193] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 295.980555][ T8193] CR2: ffffffffffffffd6 CR3: 000000007a0c1000 CR4: 00000000003506f0 [ 295.988613][ T8193] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 295.996585][ T8193] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 296.004560][ T8193] Kernel panic - not syncing: Fatal exception in interrupt [ 296.012065][ T8193] Kernel Offset: disabled [ 296.016389][ T8193] Rebooting in 86400 seconds..