last executing test programs: 6m30.598722019s ago: executing program 32 (id=414): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1c0000000000000001000000010000009da72d3a", @ANYRES32, @ANYRES32, @ANYRES32], 0x60, 0x40081}, 0x44800) 6m30.221114766s ago: executing program 33 (id=417): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x4, 0x8}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1, r0}, 0xc) 6m30.18498696s ago: executing program 34 (id=418): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 6m29.983029297s ago: executing program 35 (id=416): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="030000", @ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 5m22.19237251s ago: executing program 8 (id=885): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5m21.163897185s ago: executing program 8 (id=891): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffc8) socket$kcm(0x21, 0x2, 0x2) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000530404"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 5m20.715657442s ago: executing program 8 (id=894): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket(0x840000000002, 0x3, 0xff) sendmsg$kcm(r3, &(0x7f0000002800)={&(0x7f0000001680)=@in={0x2, 0x4e20, @remote}, 0x80, &(0x7f0000001780)=[{&(0x7f0000001700)="ebb28f7fab53b914689eb94a220ebd7dfe01c185", 0x14}], 0x1}, 0x24000810) 5m20.07723717s ago: executing program 8 (id=900): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdir(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000095"], 0x0, 0xffffffff}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00'}, 0x27) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m19.598359957s ago: executing program 8 (id=904): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x9, 0x7, 0xa3, 0x9}]}) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) 5m18.790829789s ago: executing program 36 (id=905): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000d00)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) socket$kcm(0x10, 0x2, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8b0f, &(0x7f0000000000)={'virt_wifi0\x00', @random='4\x00'}) 5m18.781911193s ago: executing program 8 (id=907): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xec, 0x5, 0xd, 0x7, 0x0, 0x7fffffff, 0x7a4d4, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x0, @perf_config_ext={0xffffffffffffffff, 0x11}, 0x2, 0x7ff, 0x7, 0x0, 0x81, 0x5, 0x9, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xa, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 5m18.262789386s ago: executing program 37 (id=908): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 5m18.254558753s ago: executing program 38 (id=910): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r2}, 0x10) 5m18.221525992s ago: executing program 39 (id=907): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xec, 0x5, 0xd, 0x7, 0x0, 0x7fffffff, 0x7a4d4, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x0, @perf_config_ext={0xffffffffffffffff, 0x11}, 0x2, 0x7ff, 0x7, 0x0, 0x81, 0x5, 0x9, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xa, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 4m47.773263764s ago: executing program 9 (id=1064): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305829, &(0x7f0000000040)=0x10000) 4m47.637800906s ago: executing program 2 (id=1068): r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@ieee802154={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x80, 0x0}, 0x0) 4m47.496304695s ago: executing program 9 (id=1069): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x420d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETDEVNETNS(r0, 0xff03, 0x0) 4m47.459889198s ago: executing program 3 (id=1070): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$can_bcm(0x1d, 0x2, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) close(r0) 4m47.243753165s ago: executing program 2 (id=1074): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0x15, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001800)="a5", 0x1}], 0x1}, 0x0) 4m47.052097883s ago: executing program 9 (id=1077): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xb}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@alu={0x7, 0x1, 0x3, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2a}}}, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x2f}, 0x94) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce220000000000000000000000000000ffff"], 0xfdef) 4m47.019555386s ago: executing program 3 (id=1078): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x23, &(0x7f0000000000)=r3, 0x8) 4m46.922229763s ago: executing program 2 (id=1079): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x14000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x2, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='signal_generate\x00', r1, 0x0, 0x3}, 0x18) 4m46.850547131s ago: executing program 9 (id=1082): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 4m46.788217628s ago: executing program 3 (id=1083): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x6f}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 4m46.547361941s ago: executing program 3 (id=1085): socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 4m46.237217598s ago: executing program 2 (id=1087): socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x2e, 0x0, 0x108) 4m46.052253497s ago: executing program 3 (id=1090): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x97, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="4c000000140097f87059ae08060c040002ff0f020000000000001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e7d06a60300000072f750375ed08a5604000000", 0x4c}], 0x1}, 0x0) 4m46.051943825s ago: executing program 9 (id=1091): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'hsr0\x00', @broadcast}) 4m45.863966122s ago: executing program 2 (id=1092): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x2c}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)='b', 0x28}], 0x1}, 0x0) 4m45.43910144s ago: executing program 9 (id=1097): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="440000000906010200120000000c0000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280080001407f0000013c292f8c9e8c292aa4064b4e75d401369d"], 0x44}, 0x1, 0x0, 0x0, 0x10008086}, 0x4000050) 4m44.892277742s ago: executing program 40 (id=1097): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="440000000906010200120000000c0000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280080001407f0000013c292f8c9e8c292aa4064b4e75d401369d"], 0x44}, 0x1, 0x0, 0x0, 0x10008086}, 0x4000050) 4m44.886686325s ago: executing program 2 (id=1099): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffec2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 4m44.754333892s ago: executing program 41 (id=1099): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffec2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 4m44.749244745s ago: executing program 3 (id=1100): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000080)) 4m44.74891583s ago: executing program 42 (id=1100): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000080)) 2m41.237686632s ago: executing program 4 (id=2040): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f"], 0xfdef) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000000}, 0x0, 0xc8, 0xffff, 0x1, 0x1, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a84cb688a8", 0x0, 0x0, 0x60000000, 0x0, 0xfffffe99, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x0, 0xf}, {0x0, 0x0, 0x0, 0x81}]}) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfdef) 2m41.061088568s ago: executing program 4 (id=2042): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)='A', 0x1}], 0x1}, 0x24008051) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2, 0x0, 0xfffffffc, 0x8}]}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000000000001"], 0x28, 0x4}, 0x20004080) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r3, 0xc) 2m40.942370064s ago: executing program 4 (id=2044): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000300e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="3640000048009125745c7388641f9c0e0a"], 0xfe33) 2m40.150767697s ago: executing program 4 (id=2045): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) r1 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xf0, 0x5f, 0x9f, 0x4, 0x0, 0x6, 0x30531, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800009, 0x2, @perf_config_ext={0x1, 0x8}, 0x10002, 0x9dd, 0x80000020, 0x6, 0x400, 0x0, 0x8, 0x0, 0x100, 0x0, 0x201}, 0x0, 0x8, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000012002f8c35093f974b21b92e0a", 0x11}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x17, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@ringbuf_query={{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}, @ringbuf_query], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1310000016"], 0xfe33) 2m39.935796474s ago: executing program 4 (id=2047): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) 2m39.904349202s ago: executing program 4 (id=2049): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r0}, 0x38) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m24.749502108s ago: executing program 43 (id=2049): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r0}, 0x38) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 15.278403805s ago: executing program 5 (id=2920): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, &(0x7f00000000c0), &(0x7f0000000140)='%-010d \x00'}, 0x20) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040a00000000fe0500002015000600142603600e1209000a00000000000001060000b94dcf5c0468c1d67f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xd8}], 0x1}, 0x0) 15.094746387s ago: executing program 5 (id=2922): sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x58412, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d040000000400000004000000000000000000001004000000000000000000000b030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28) 13.708296608s ago: executing program 5 (id=2932): socket$kcm(0x1e, 0x5, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800"/13], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c000000080004"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) 12.564856713s ago: executing program 5 (id=2937): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000380)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) syz_clone(0x613c8300, 0x0, 0x0, 0x0, 0x0, 0x0) 7.256432053s ago: executing program 5 (id=2969): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x498a3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x3ffffe, 0x0, 0x0, 0xe, 0x0, 0x8}, r2, 0x0, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYRES8=r4], 0x12) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[@ANYRES8=r1], 0x9a) 4.746832015s ago: executing program 0 (id=2979): perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) close(0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0xd, 0x3}, {0x10000002, 0x0, 0xf, 0x6}], 0x10, 0x4000000}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000e00)="be", 0x1}], 0x1}, 0x0) 4.632352412s ago: executing program 0 (id=2980): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0xc0f0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$kcm(0x1e, 0x4, 0x0) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4098, 0x1002}, {&(0x7f0000003700)=""/4073, 0xfe9}], 0x2}, 0x0) 4.352182924s ago: executing program 0 (id=2984): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000040000000600000080"], 0x48) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x800}, 0xc684, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xdfffffbfffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x77}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 4.060008701s ago: executing program 0 (id=2986): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x40, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0xc48, 0xc8, 0x0, 0x6, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xf, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200052b00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) 3.974692362s ago: executing program 7 (id=2987): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x10}, 0x0, 0xca, 0x0, 0x0, 0x0, 0x10, 0xff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x90) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r4], 0x12) 3.836101152s ago: executing program 0 (id=2989): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="2e00000010008188e6b62aa73f72cc9f0ba1f8480700000000000000000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 3.729684761s ago: executing program 1 (id=2990): socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000001340)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3be, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_clone(0x20a22000, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair(0x28, 0x1, 0x0, &(0x7f0000000000)) 3.727376422s ago: executing program 7 (id=2991): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000), 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) close(r0) 3.513240202s ago: executing program 0 (id=2993): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x1}, 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0x4, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 3.389127116s ago: executing program 5 (id=2995): socket$kcm(0x10, 0x2, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a8637288a8"], 0x16) 3.20584886s ago: executing program 1 (id=2996): getpid() r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) fstat(r0, &(0x7f0000000280)) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000004400)={@fallback, r0, 0x2a, 0x4, r0, @void, @value=r0}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000004880)) sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x8004) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000006100)={0x2c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7f}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0xc0) 3.02980603s ago: executing program 7 (id=2998): perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x5, r1, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.244296995s ago: executing program 1 (id=3000): close(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x10000002, 0xfffffffe, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r1}, 0x18) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x9500}, {&(0x7f00000017c0)="ea0189bdebb0c16d420ee9b95082abd6431cc7afc22c4a6b8adecef68f76bd81a86e89f9c80e5c868a12b09e80ba8c01eb3f4b7be71f9fc2355c336cedc15eb778e3a3b35c3f72629ea4d9ae42cf4c17255815fb8a47aafd8b8ff0c202b4e09f7c42811261b5e113fcce27b4329ccb792df14b7d6dcfaf2cf8dbb51946e89c862e9252731f680ec50326fc16386aeefe654bac24", 0x94}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) 1.868461151s ago: executing program 6 (id=3002): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f00000002c0), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xd50, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.842007201s ago: executing program 7 (id=3003): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7ffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0xfe8a}], 0x1}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffd, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 1.705448107s ago: executing program 1 (id=3004): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x93c6}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5a2119bf86ff29ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x3, 0x3, 0x5}, 0x10}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r4 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x4, 0x4}}, 0x80, 0x0}, 0x20008044) 1.635770778s ago: executing program 6 (id=3005): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xf82b4b2efd5802c5, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0xaffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.051166531s ago: executing program 1 (id=3006): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x19, &(0x7f0000000200)=r1, 0x21) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) 814.61078ms ago: executing program 6 (id=3007): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000"], 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)) r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{0x0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x20000040) socketpair(0x6, 0xa, 0x3, &(0x7f0000000040)) 698.89779ms ago: executing program 1 (id=3008): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[], 0xffdd) 535.321387ms ago: executing program 7 (id=3009): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100000, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe90}, 0x94) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r4], 0x12) 484.011881ms ago: executing program 6 (id=3010): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2}]}, 0x94) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) 241.327915ms ago: executing program 7 (id=3011): r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0x4}, 0x14105, 0x2e, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x50, &(0x7f0000000100), 0x48) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d000100000000000000000004000080050011802f"], 0x1c}], 0x1}, 0x310) 228.866303ms ago: executing program 6 (id=3012): socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x80086601, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000000)="27050200160014000600002f86dd", 0xe}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x30}, 0x10, 0x0, 0x0, &(0x7f0000007880)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x88}]}}}], 0x18}, 0x0) 0s ago: executing program 6 (id=3013): perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0xbc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x2980, 0x2, 0x0, 0x4, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x10cb2a, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): 0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.032531][ T5863] Bluetooth: hci1: command tx timeout [ 140.100084][ T6973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.122571][ T6975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.135117][ T6977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.192773][ T5863] Bluetooth: hci2: command tx timeout [ 140.262486][ T5863] Bluetooth: hci3: command tx timeout [ 140.335733][ T6975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.440275][ T6977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.601855][ T1042] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.653086][ T6967] hsr_slave_0: entered promiscuous mode [ 140.660867][ T6967] hsr_slave_1: entered promiscuous mode [ 140.678278][ T6967] debugfs: 'hsr0' already exists in 'hsr' [ 140.706852][ T6967] Cannot create hsr debugfs directory [ 140.720026][ T6973] team0: Port device team_slave_0 added [ 140.809808][ T6975] team0: Port device team_slave_0 added [ 140.893255][ T6977] team0: Port device team_slave_0 added [ 140.965134][ T1042] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.001931][ T6973] team0: Port device team_slave_1 added [ 141.050498][ T6975] team0: Port device team_slave_1 added [ 141.183798][ T6977] team0: Port device team_slave_1 added [ 141.235255][ T1042] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.291709][ T6973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.332265][ T6973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.364457][ T6973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.419001][ T6975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.427862][ T6975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.454539][ T6975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.550816][ T1042] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.622426][ T5863] Bluetooth: hci0: command tx timeout [ 141.653706][ T6973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.660712][ T6973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.691029][ T6973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.720501][ T6975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.728208][ T6975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.755098][ T6975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.852117][ T6977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.859825][ T6977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.886669][ T6977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.900253][ T6977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.907455][ T6977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.937470][ T6977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.039496][ T6975] hsr_slave_0: entered promiscuous mode [ 142.053465][ T6975] hsr_slave_1: entered promiscuous mode [ 142.060077][ T6975] debugfs: 'hsr0' already exists in 'hsr' [ 142.073812][ T6975] Cannot create hsr debugfs directory [ 142.102772][ T5863] Bluetooth: hci1: command tx timeout [ 142.202068][ T6973] hsr_slave_0: entered promiscuous mode [ 142.209421][ T6973] hsr_slave_1: entered promiscuous mode [ 142.218388][ T6973] debugfs: 'hsr0' already exists in 'hsr' [ 142.227303][ T6973] Cannot create hsr debugfs directory [ 142.272379][ T5863] Bluetooth: hci2: command tx timeout [ 142.342858][ T5863] Bluetooth: hci3: command tx timeout [ 142.449352][ T6977] hsr_slave_0: entered promiscuous mode [ 142.457118][ T6977] hsr_slave_1: entered promiscuous mode [ 142.464019][ T6977] debugfs: 'hsr0' already exists in 'hsr' [ 142.469766][ T6977] Cannot create hsr debugfs directory [ 142.810337][ T1042] bridge_slave_1: left allmulticast mode [ 142.825775][ T1042] bridge_slave_1: left promiscuous mode [ 142.832428][ T1042] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.868064][ T1042] bridge_slave_0: left allmulticast mode [ 142.881501][ T1042] bridge_slave_0: left promiscuous mode [ 142.896306][ T1042] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.928393][ T1042] bridge_slave_1: left allmulticast mode [ 142.962446][ T1042] bridge_slave_1: left promiscuous mode [ 142.979678][ T1042] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.013677][ T1042] bridge_slave_0: left allmulticast mode [ 143.034473][ T1042] bridge_slave_0: left promiscuous mode [ 143.059341][ T1042] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.085706][ T1042] bridge_slave_1: left allmulticast mode [ 143.091417][ T1042] bridge_slave_1: left promiscuous mode [ 143.126547][ T1042] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.156256][ T1042] bridge_slave_0: left allmulticast mode [ 143.161974][ T1042] bridge_slave_0: left promiscuous mode [ 143.192773][ T1042] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.219169][ T1042] bridge_slave_1: left allmulticast mode [ 143.248138][ T1042] bridge_slave_1: left promiscuous mode [ 143.268616][ T1042] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.301451][ T1042] bridge_slave_0: left allmulticast mode [ 143.324728][ T1042] bridge_slave_0: left promiscuous mode [ 143.330592][ T1042] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.702865][ T5863] Bluetooth: hci0: command tx timeout [ 144.071797][ T1042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.087585][ T1042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.097895][ T1042] bond0 (unregistering): Released all slaves [ 144.185515][ T5863] Bluetooth: hci1: command tx timeout [ 144.354662][ T5863] Bluetooth: hci2: command tx timeout [ 144.406486][ T1042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.417890][ T1042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.428873][ T1042] bond0 (unregistering): Released all slaves [ 144.435049][ T5863] Bluetooth: hci3: command tx timeout [ 144.714529][ T1042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.728518][ T1042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.738804][ T1042] bond0 (unregistering): Released all slaves [ 144.974810][ T1042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.988173][ T1042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.998972][ T1042] bond0 (unregistering): Released all slaves [ 145.524894][ T6967] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 145.662853][ T6967] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 145.696824][ T6967] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 145.764375][ T6967] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 146.164078][ T6973] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 146.193084][ T7152] netlink: 60 bytes leftover after parsing attributes in process `syz.4.462'. [ 146.206707][ T7151] netlink: 60 bytes leftover after parsing attributes in process `syz.4.462'. [ 146.219826][ T7151] netlink: 60 bytes leftover after parsing attributes in process `syz.4.462'. [ 146.309043][ T6973] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 146.349043][ T6973] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 146.378076][ T6973] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 146.831869][ T6975] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 146.875544][ T6975] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 146.957417][ T6975] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 147.003667][ T6975] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 147.121381][ T1042] hsr_slave_0: left promiscuous mode [ 147.127424][ T1042] hsr_slave_1: left promiscuous mode [ 147.134080][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.142058][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.151580][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.160592][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.174813][ T1042] hsr_slave_0: left promiscuous mode [ 147.181182][ T1042] hsr_slave_1: left promiscuous mode [ 147.187124][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.194877][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.203886][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.211353][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.225398][ T1042] hsr_slave_0: left promiscuous mode [ 147.231508][ T1042] hsr_slave_1: left promiscuous mode [ 147.238674][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.246415][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.254880][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.262572][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.276879][ T1042] hsr_slave_0: left promiscuous mode [ 147.283091][ T1042] hsr_slave_1: left promiscuous mode [ 147.289032][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.296903][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.305391][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.312928][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.368869][ T1042] veth1_macvtap: left promiscuous mode [ 147.374789][ T1042] veth0_macvtap: left promiscuous mode [ 147.380480][ T1042] veth1_vlan: left promiscuous mode [ 147.386135][ T1042] veth0_vlan: left promiscuous mode [ 147.394546][ T1042] veth1_macvtap: left promiscuous mode [ 147.400161][ T1042] veth0_macvtap: left promiscuous mode [ 147.406213][ T1042] veth1_vlan: left promiscuous mode [ 147.411513][ T1042] veth0_vlan: left promiscuous mode [ 147.419222][ T1042] veth1_macvtap: left promiscuous mode [ 147.424861][ T1042] veth0_macvtap: left promiscuous mode [ 147.430480][ T1042] veth1_vlan: left promiscuous mode [ 147.435946][ T1042] veth0_vlan: left promiscuous mode [ 147.443572][ T1042] veth1_macvtap: left promiscuous mode [ 147.449117][ T1042] veth0_macvtap: left promiscuous mode [ 147.455614][ T1042] veth1_vlan: left promiscuous mode [ 147.460937][ T1042] veth0_vlan: left promiscuous mode [ 148.144426][ T1042] team0 (unregistering): Port device team_slave_1 removed [ 148.178264][ T1042] team0 (unregistering): Port device team_slave_0 removed [ 148.938271][ T1042] team0 (unregistering): Port device team_slave_1 removed [ 148.976818][ T1042] team0 (unregistering): Port device team_slave_0 removed [ 149.537587][ T1042] team0 (unregistering): Port device team_slave_1 removed [ 149.571557][ T1042] team0 (unregistering): Port device team_slave_0 removed [ 150.210215][ T1042] team0 (unregistering): Port device team_slave_1 removed [ 150.240815][ T1042] team0 (unregistering): Port device team_slave_0 removed [ 150.586937][ T6967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.614875][ T6977] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 150.673659][ T6977] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 150.740548][ T6977] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 150.790831][ T6977] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 150.935481][ T6967] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.037198][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.044409][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.100342][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.107571][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.197045][ T6975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.367882][ T6975] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.443160][ T6973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.477134][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.484449][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.517067][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.524310][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.579140][ T6977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.591248][ T6967] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 151.780774][ T6973] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.874335][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.881522][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.976668][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.983956][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.039248][ T6977] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.087269][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.094497][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.257802][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.265023][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.477269][ T6977] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 152.520022][ T6977] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 152.662098][ T6975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.780983][ T6967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.268722][ T6973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.451641][ T6977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.517107][ T7254] netlink: 'syz.4.473': attribute type 16 has an invalid length. [ 153.563573][ T7254] netlink: 132 bytes leftover after parsing attributes in process `syz.4.473'. [ 154.034853][ T6975] veth0_vlan: entered promiscuous mode [ 154.106323][ T6975] veth1_vlan: entered promiscuous mode [ 154.280763][ T6967] veth0_vlan: entered promiscuous mode [ 154.334505][ T6975] veth0_macvtap: entered promiscuous mode [ 154.363651][ T6975] veth1_macvtap: entered promiscuous mode [ 154.410295][ T6967] veth1_vlan: entered promiscuous mode [ 154.510659][ T6975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.595916][ T6975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.631140][ T1042] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.696846][ T1042] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.709621][ T1042] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.776932][ T1042] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.797592][ T6967] veth0_macvtap: entered promiscuous mode [ 154.919416][ T6967] veth1_macvtap: entered promiscuous mode [ 154.939502][ T6973] veth0_vlan: entered promiscuous mode [ 154.978581][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.003306][ T6977] veth0_vlan: entered promiscuous mode [ 155.009704][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.026239][ T6973] veth1_vlan: entered promiscuous mode [ 155.108729][ T6967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.141255][ T6977] veth1_vlan: entered promiscuous mode [ 155.156125][ T6967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.208966][ T44] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.260042][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.278937][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.297583][ T44] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.367032][ T44] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.412241][ T44] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.485003][ T6973] veth0_macvtap: entered promiscuous mode [ 155.580392][ T6973] veth1_macvtap: entered promiscuous mode [ 155.627488][ T6977] veth0_macvtap: entered promiscuous mode [ 155.767170][ T6977] veth1_macvtap: entered promiscuous mode [ 155.773316][ T7228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.781165][ T7228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.820508][ T6973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.916552][ T6973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.958648][ T44] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.014010][ T7228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.021892][ T7228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.023590][ T44] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.084926][ T44] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.147770][ T6977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.195037][ T44] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.290964][ T6977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.388480][ T7228] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.453957][ T58] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.514221][ T58] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.531636][ T58] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.828460][ T7335] C: renamed from team_slave_0 (while UP) [ 156.853569][ T7335] netlink: 'syz.5.491': attribute type 3 has an invalid length. [ 156.882975][ T7335] netlink: 'syz.5.491': attribute type 1 has an invalid length. [ 156.899546][ T7335] net_ratelimit: 67 callbacks suppressed [ 156.899566][ T7335] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 157.002025][ T1042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.023124][ T1042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.198633][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.242570][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.422900][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.430774][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.617569][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.650226][ T7355] netlink: 128 bytes leftover after parsing attributes in process `syz.6.498'. [ 157.659892][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.985012][ T7394] syz_tun: refused to change device tx_queue_len [ 161.611831][ T7414] netlink: 752 bytes leftover after parsing attributes in process `syz.6.517'. [ 161.847238][ T7430] C: renamed from team_slave_0 (while UP) [ 161.926968][ T7430] netlink: 'syz.6.522': attribute type 8 has an invalid length. [ 162.009769][ T7430] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 165.275288][ T7546] netlink: 60 bytes leftover after parsing attributes in process `syz.4.573'. [ 165.322359][ T7546] netlink: 60 bytes leftover after parsing attributes in process `syz.4.573'. [ 166.141634][ T7570] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.572'. [ 166.243409][ T7576] netlink: 32 bytes leftover after parsing attributes in process `syz.4.575'. [ 166.492534][ T7585] netlink: 'syz.8.579': attribute type 29 has an invalid length. [ 166.530107][ T7585] netlink: 'syz.8.579': attribute type 29 has an invalid length. [ 166.568603][ T7585] netlink: 'syz.8.579': attribute type 29 has an invalid length. [ 166.622460][ T7591] netlink: 'syz.8.579': attribute type 29 has an invalid length. [ 169.183038][ T7633] openvswitch: netlink: Message has 24 unknown bytes. [ 169.210301][ T7633] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.929752][ T7656] netlink: 76 bytes leftover after parsing attributes in process `syz.4.604'. [ 170.167607][ T7666] netlink: 24 bytes leftover after parsing attributes in process `syz.5.603'. [ 170.648759][ T7683] veth1_macvtap: left promiscuous mode [ 170.678078][ T7683] macsec0: entered allmulticast mode [ 171.846332][ T7725] netlink: 176 bytes leftover after parsing attributes in process `syz.6.626'. [ 171.956626][ T7724] syz.5.624 uses obsolete (PF_INET,SOCK_PACKET) [ 173.510529][ T7761] netlink: 60 bytes leftover after parsing attributes in process `syz.5.637'. [ 173.579426][ T7757] netlink: 60 bytes leftover after parsing attributes in process `syz.5.637'. [ 173.691753][ T7757] netlink: 60 bytes leftover after parsing attributes in process `syz.5.637'. [ 175.209362][ T7788] netlink: 'syz.7.647': attribute type 2 has an invalid length. [ 175.283069][ T7788] netlink: 'syz.7.647': attribute type 8 has an invalid length. [ 175.359379][ T7788] netlink: 132 bytes leftover after parsing attributes in process `syz.7.647'. [ 175.683347][ T7794] netlink: 128 bytes leftover after parsing attributes in process `syz.6.650'. [ 175.742357][ T7794] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 175.897690][ T7799] netlink: 'syz.7.651': attribute type 1 has an invalid length. [ 176.129796][ T7764] infiniband syz0: set active [ 176.165873][ T7764] infiniband syz0: added veth1_virt_wifi [ 176.174611][ T7764] syz0: rxe_create_cq: returned err = -12 [ 176.180827][ T7764] infiniband syz0: Couldn't create ib_mad CQ [ 176.193580][ T7764] infiniband syz0: Couldn't open port 1 [ 176.307469][ T7809] openvswitch: netlink: Message has 24 unknown bytes. [ 176.360741][ T7764] RDS/IB: syz0: added [ 176.369591][ T7809] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.403176][ T7764] smc: adding ib device syz0 with port count 1 [ 176.409643][ T7764] smc: ib device syz0 port 1 has pnetid [ 178.939210][ T7886] netlink: 64535 bytes leftover after parsing attributes in process `syz.5.681'. [ 180.152913][ T7906] netlink: 'syz.6.688': attribute type 21 has an invalid length. [ 181.097260][ T7924] netlink: 'syz.5.693': attribute type 10 has an invalid length. [ 181.122541][ T7924] netlink: 65015 bytes leftover after parsing attributes in process `syz.5.693'. [ 181.153410][ T7927] netlink: 'syz.7.694': attribute type 1 has an invalid length. [ 181.232838][ T7929] netlink: 'syz.4.695': attribute type 10 has an invalid length. [ 181.286340][ T7929] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.695'. [ 181.388376][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.6.696'. [ 182.579706][ T7955] netlink: 16255 bytes leftover after parsing attributes in process `syz.6.704'. [ 182.676546][ T7958] netlink: zone id is out of range [ 182.681904][ T7958] netlink: zone id is out of range [ 182.747707][ T7958] netlink: zone id is out of range [ 182.817898][ T7958] netlink: zone id is out of range [ 182.916414][ T7958] netlink: zone id is out of range [ 182.921743][ T7958] netlink: zone id is out of range [ 182.938140][ T7958] netlink: zone id is out of range [ 183.002828][ T7958] netlink: zone id is out of range [ 183.039307][ T7958] netlink: zone id is out of range [ 183.065150][ T7958] netlink: zone id is out of range [ 185.549846][ T8031] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.732'. [ 185.875353][ T8033] netlink: 'syz.6.733': attribute type 29 has an invalid length. [ 186.032518][ T8037] netlink: 'syz.6.733': attribute type 29 has an invalid length. [ 186.060427][ T8035] netlink: 'syz.6.733': attribute type 29 has an invalid length. [ 186.098330][ T8033] netlink: 'syz.6.733': attribute type 29 has an invalid length. [ 186.502359][ T8051] netlink: 'syz.4.740': attribute type 29 has an invalid length. [ 186.563634][ T8054] netlink: 'syz.4.740': attribute type 29 has an invalid length. [ 186.631388][ T8051] netlink: 'syz.4.740': attribute type 29 has an invalid length. [ 186.684298][ T8051] netlink: 'syz.4.740': attribute type 29 has an invalid length. [ 186.809458][ T8061] tun0: tun_chr_ioctl cmd 1074025675 [ 186.844520][ T8061] tun0: persist enabled [ 186.872586][ T8061] tun0: tun_chr_ioctl cmd 1074025675 [ 186.914518][ T8065] netlink: 208 bytes leftover after parsing attributes in process `syz.7.744'. [ 186.932766][ T8061] tun0: persist disabled [ 188.487027][ T8110] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.761'. [ 188.569766][ T8112] netlink: 72 bytes leftover after parsing attributes in process `syz.8.762'. [ 188.623248][ T8112] netlink: 72 bytes leftover after parsing attributes in process `syz.8.762'. [ 189.389653][ T8138] netlink: 14 bytes leftover after parsing attributes in process `syz.5.772'. [ 190.542760][ T8169] netlink: 4 bytes leftover after parsing attributes in process `syz.6.779'. [ 190.629832][ T8172] netlink: 32 bytes leftover after parsing attributes in process `syz.6.779'. [ 190.839656][ T8176] netlink: 'syz.7.781': attribute type 13 has an invalid length. [ 190.885498][ T8176] netlink: 24859 bytes leftover after parsing attributes in process `syz.7.781'. [ 191.736544][ T8194] mac80211_hwsim hwsim19 .3#c„±: renamed from wlan1 (while UP) [ 192.503710][ T8210] netlink: 188 bytes leftover after parsing attributes in process `syz.8.792'. [ 193.069234][ T8232] netlink: 64859 bytes leftover after parsing attributes in process `syz.8.799'. [ 193.773539][ T8251] netlink: 44 bytes leftover after parsing attributes in process `syz.6.805'. [ 193.862400][ T8251] netlink: 12 bytes leftover after parsing attributes in process `syz.6.805'. [ 193.933567][ T8251] netlink: 8 bytes leftover after parsing attributes in process `syz.6.805'. [ 194.348615][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.355243][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.822769][ T8278] sock: sock_timestamping_bind_phc: sock not bind to device [ 197.507477][ T8353] netlink: 8 bytes leftover after parsing attributes in process `syz.5.834'. [ 197.863967][ T8358] netlink: 'syz.7.838': attribute type 1 has an invalid length. [ 197.871710][ T8358] netlink: 17 bytes leftover after parsing attributes in process `syz.7.838'. [ 199.126953][ T8394] netlink: 'syz.8.849': attribute type 10 has an invalid length. [ 199.281501][ T8394] team0: Device ipvlan1 failed to register rx_handler [ 199.330586][ T8399] netlink: 9286 bytes leftover after parsing attributes in process `syz.7.851'. [ 199.381586][ T8396] netlink: 'syz.4.850': attribute type 29 has an invalid length. [ 199.408583][ T8397] netlink: 'syz.4.850': attribute type 29 has an invalid length. [ 199.754630][ T8406] netlink: 124 bytes leftover after parsing attributes in process `syz.7.854'. [ 201.446719][ T8464] netlink: 8 bytes leftover after parsing attributes in process `syz.7.872'. [ 201.499334][ T8464] netlink: 200 bytes leftover after parsing attributes in process `syz.7.872'. [ 202.148499][ T8476] netlink: 'syz.6.877': attribute type 2 has an invalid length. [ 202.262569][ T8476] netlink: 51 bytes leftover after parsing attributes in process `syz.6.877'. [ 204.193645][ T30] audit: type=1107 audit(1755177352.806:2): pid=8527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 205.039330][ T5863] Bluetooth: hci2: unexpected event 0x23 length: 15 > 13 [ 205.975966][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.164621][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.374310][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.634566][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.903236][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 206.913515][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 206.924059][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 206.943393][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 206.967321][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 207.141636][ T36] bridge_slave_1: left allmulticast mode [ 207.192212][ T36] bridge_slave_1: left promiscuous mode [ 207.198126][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.305209][ T36] bridge_slave_0: left promiscuous mode [ 207.311083][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.479647][ T8583] netlink: 65047 bytes leftover after parsing attributes in process `syz.7.914'. [ 207.573626][ T5863] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 207.591095][ T5863] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 207.600722][ T5863] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 207.613619][ T5863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 207.633102][ T5863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 207.812883][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 207.825490][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 207.834545][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 207.849203][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 207.862870][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 207.939672][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 207.953535][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 207.964068][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 207.976779][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 207.985859][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 208.318284][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.330317][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.341225][ T36] bond0 (unregistering): Released all slaves [ 209.065322][ T5863] Bluetooth: hci0: command tx timeout [ 209.198661][ T8577] chnl_net:caif_netlink_parms(): no params data found [ 209.556779][ T8577] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.564405][ T8577] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.571676][ T8577] bridge_slave_0: entered allmulticast mode [ 209.585336][ T8577] bridge_slave_0: entered promiscuous mode [ 209.601919][ T8577] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.609284][ T8577] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.616880][ T8577] bridge_slave_1: entered allmulticast mode [ 209.624811][ T8577] bridge_slave_1: entered promiscuous mode [ 209.704484][ T5863] Bluetooth: hci1: command tx timeout [ 209.793168][ T8577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.932773][ T8577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.943001][ T5863] Bluetooth: hci2: command tx timeout [ 210.022362][ T5863] Bluetooth: hci4: command tx timeout [ 210.146587][ T8577] team0: Port device team_slave_0 added [ 210.224463][ T8577] team0: Port device team_slave_1 added [ 210.449536][ T8633] netlink: 15743 bytes leftover after parsing attributes in process `syz.7.930'. [ 210.814908][ T8577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.821956][ T8577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.860012][ T8577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.907981][ T36] hsr_slave_0: left promiscuous mode [ 210.927654][ T36] hsr_slave_1: left promiscuous mode [ 210.948381][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.959095][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.972009][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.980095][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.004344][ T36] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 211.011457][ T36] batman_adv: batadv0: Removing interface: virt_wifi0 [ 211.040549][ T36] veth0_macvtap: left promiscuous mode [ 211.046504][ T36] veth1_vlan: left promiscuous mode [ 211.051966][ T36] veth0_vlan: left promiscuous mode [ 211.142428][ T5863] Bluetooth: hci0: command tx timeout [ 211.783978][ T5863] Bluetooth: hci1: command tx timeout [ 212.028438][ T5863] Bluetooth: hci2: command tx timeout [ 212.057968][ T36] team0 (unregistering): Port device team_slave_1 removed [ 212.092030][ T36] team0 (unregistering): Port device team_slave_0 removed [ 212.102439][ T5863] Bluetooth: hci4: command tx timeout [ 212.457986][ T8577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.465292][ T8577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.494291][ T8577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.553709][ T8592] chnl_net:caif_netlink_parms(): no params data found [ 212.947444][ T8577] hsr_slave_0: entered promiscuous mode [ 212.955284][ T8577] hsr_slave_1: entered promiscuous mode [ 213.138038][ T8592] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.149467][ T8592] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.158680][ T8592] bridge_slave_0: entered allmulticast mode [ 213.168317][ T8592] bridge_slave_0: entered promiscuous mode [ 213.232453][ T5863] Bluetooth: hci0: command tx timeout [ 213.268650][ T8592] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.276094][ T8592] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.283821][ T8592] bridge_slave_1: entered allmulticast mode [ 213.294067][ T8592] bridge_slave_1: entered promiscuous mode [ 213.391458][ T8584] chnl_net:caif_netlink_parms(): no params data found [ 213.655059][ T8592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.801254][ T8592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.862358][ T5863] Bluetooth: hci1: command tx timeout [ 214.103191][ T5863] Bluetooth: hci2: command tx timeout [ 214.193178][ T5863] Bluetooth: hci4: command tx timeout [ 214.522616][ T8584] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.529935][ T8584] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.537335][ T8584] bridge_slave_0: entered allmulticast mode [ 214.546947][ T8584] bridge_slave_0: entered promiscuous mode [ 214.602845][ T8592] team0: Port device team_slave_0 added [ 214.636414][ T8584] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.648068][ T8584] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.657542][ T8584] bridge_slave_1: entered allmulticast mode [ 214.668492][ T8584] bridge_slave_1: entered promiscuous mode [ 214.696295][ T8586] chnl_net:caif_netlink_parms(): no params data found [ 214.724020][ T8592] team0: Port device team_slave_1 added [ 214.824641][ T36] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.848171][ T8584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.912173][ T8592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.919172][ T8592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.946502][ T8592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.962759][ T8584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.987459][ T36] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.024211][ T8592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.031852][ T8592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.058411][ T8592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.114177][ T36] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.164893][ T8584] team0: Port device team_slave_0 added [ 215.218324][ T8584] team0: Port device team_slave_1 added [ 215.266474][ T36] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.301335][ T8586] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.302548][ T5863] Bluetooth: hci0: command tx timeout [ 215.310421][ T8586] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.323863][ T8586] bridge_slave_0: entered allmulticast mode [ 215.339610][ T8586] bridge_slave_0: entered promiscuous mode [ 215.603036][ T8592] hsr_slave_0: entered promiscuous mode [ 215.609820][ T8592] hsr_slave_1: entered promiscuous mode [ 215.621736][ T8592] debugfs: 'hsr0' already exists in 'hsr' [ 215.628462][ T8592] Cannot create hsr debugfs directory [ 215.634437][ T8586] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.644722][ T8586] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.651982][ T8586] bridge_slave_1: entered allmulticast mode [ 215.659708][ T8586] bridge_slave_1: entered promiscuous mode [ 215.667305][ T8584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.674630][ T8584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.703139][ T8584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.747411][ T8584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.755518][ T8584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.782386][ T8584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.793849][ T8577] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 215.804994][ T8577] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 215.863951][ T8577] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 215.875143][ T8577] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 215.889135][ T8586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.949560][ T8586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.953226][ T5863] Bluetooth: hci1: command tx timeout [ 216.036786][ T8584] hsr_slave_0: entered promiscuous mode [ 216.044995][ T8584] hsr_slave_1: entered promiscuous mode [ 216.053503][ T8584] debugfs: 'hsr0' already exists in 'hsr' [ 216.059275][ T8584] Cannot create hsr debugfs directory [ 216.101549][ T8586] team0: Port device team_slave_0 added [ 216.189459][ T5863] Bluetooth: hci2: command tx timeout [ 216.214039][ T8586] team0: Port device team_slave_1 added [ 216.262380][ T5863] Bluetooth: hci4: command tx timeout [ 216.317104][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.486361][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.528046][ T8586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.535404][ T8586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.562891][ T8586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.576963][ T8586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.585135][ T8586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.612836][ T8586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.642228][ T8679] netlink: 63503 bytes leftover after parsing attributes in process `syz.7.940'. [ 216.721858][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.890862][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.201492][ T8586] hsr_slave_0: entered promiscuous mode [ 217.213520][ T8586] hsr_slave_1: entered promiscuous mode [ 217.220030][ T8586] debugfs: 'hsr0' already exists in 'hsr' [ 217.227132][ T8686] netlink: 22 bytes leftover after parsing attributes in process `syz.7.943'. [ 217.238415][ T8586] Cannot create hsr debugfs directory [ 217.925571][ T36] bridge_slave_1: left allmulticast mode [ 217.931962][ T36] bridge_slave_1: left promiscuous mode [ 217.948798][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.964799][ T36] bridge_slave_0: left allmulticast mode [ 217.970501][ T36] bridge_slave_0: left promiscuous mode [ 217.978442][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.013784][ T36] bridge_slave_1: left allmulticast mode [ 218.019512][ T36] bridge_slave_1: left promiscuous mode [ 218.039690][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.067707][ T36] bridge_slave_0: left allmulticast mode [ 218.073609][ T36] bridge_slave_0: left promiscuous mode [ 218.079344][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.630738][ T8705] netlink: 495 bytes leftover after parsing attributes in process `syz.7.952'. [ 218.685258][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.696518][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.707547][ T36] bond0 (unregistering): Released all slaves [ 219.058511][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.070845][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.082640][ T36] bond0 (unregistering): Released all slaves [ 219.206116][ T8709] netlink: 44 bytes leftover after parsing attributes in process `syz.7.953'. [ 219.257484][ T8577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.267210][ T8708] netlink: 44 bytes leftover after parsing attributes in process `syz.7.953'. [ 219.277065][ T8710] netlink: 44 bytes leftover after parsing attributes in process `syz.7.953'. [ 219.383830][ T8712] netlink: 'syz.7.954': attribute type 29 has an invalid length. [ 219.427199][ T8712] netlink: 'syz.7.954': attribute type 29 has an invalid length. [ 219.457217][ T8577] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.471099][ T7228] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.478309][ T7228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.511824][ T8712] netlink: 'syz.7.954': attribute type 29 has an invalid length. [ 219.528405][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.535602][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.568297][ T8713] netlink: 'syz.7.954': attribute type 29 has an invalid length. [ 219.786649][ T8592] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 219.842714][ T8592] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 219.886508][ T8592] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 219.901382][ T8592] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 220.230510][ T8584] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 220.264771][ T8584] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 220.277888][ T8584] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 220.510420][ T8584] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 220.696791][ T36] hsr_slave_0: left promiscuous mode [ 220.703542][ T36] hsr_slave_1: left promiscuous mode [ 220.709554][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.718754][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.736606][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.746221][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.758687][ T36] hsr_slave_0: left promiscuous mode [ 220.765878][ T36] hsr_slave_1: left promiscuous mode [ 220.771804][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.781505][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.789857][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.797425][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.831675][ T36] veth1_macvtap: left promiscuous mode [ 220.837441][ T36] veth0_macvtap: left promiscuous mode [ 220.844136][ T36] veth1_vlan: left promiscuous mode [ 220.849463][ T36] veth0_vlan: left promiscuous mode [ 220.856692][ T36] veth1_macvtap: left promiscuous mode [ 220.862980][ T36] veth0_macvtap: left promiscuous mode [ 220.868724][ T36] veth1_vlan: left promiscuous mode [ 220.875036][ T36] veth0_vlan: left promiscuous mode [ 221.244993][ T1042] smc: removing ib device syz0 [ 221.390064][ T36] team0 (unregistering): Port device team_slave_1 removed [ 221.428438][ T36] team0 (unregistering): Port device team_slave_0 removed [ 222.069463][ T36] team0 (unregistering): Port device team_slave_1 removed [ 222.109662][ T36] team0 (unregistering): Port device C removed [ 222.718546][ T10] syz0: Port: 1 Link DOWN [ 222.961822][ T8577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.429836][ T8592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.521076][ T8584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.624875][ T8592] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.659220][ T8586] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 223.721380][ T8584] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.751142][ T7228] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.758381][ T7228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.808120][ T8586] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 223.860630][ T8586] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 223.913884][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.921188][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.947686][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.954934][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.995300][ T8586] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 224.234787][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.241986][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.270385][ T8763] netlink: 51563 bytes leftover after parsing attributes in process `syz.7.964'. [ 224.486506][ T8577] veth0_vlan: entered promiscuous mode [ 224.644489][ T8577] veth1_vlan: entered promiscuous mode [ 224.887024][ T8577] veth0_macvtap: entered promiscuous mode [ 224.903728][ T8773] delete_channel: no stack [ 224.920164][ T8586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.951186][ T8577] veth1_macvtap: entered promiscuous mode [ 225.017377][ T8586] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.057759][ T8577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.096246][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.103494][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.131959][ T8577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.202806][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.210035][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.280909][ T1102] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.290827][ T1102] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.313935][ T1102] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.345774][ T1102] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.370762][ T8592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.520933][ T8584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.588478][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.613767][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.624226][ T8592] veth0_vlan: entered promiscuous mode [ 225.697098][ T8592] veth1_vlan: entered promiscuous mode [ 225.817981][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.826091][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.885486][ T8584] veth0_vlan: entered promiscuous mode [ 225.915049][ T8592] veth0_macvtap: entered promiscuous mode [ 225.961193][ T8584] veth1_vlan: entered promiscuous mode [ 225.989267][ T8592] veth1_macvtap: entered promiscuous mode [ 226.039383][ T8792] netlink: 'syz.7.970': attribute type 33 has an invalid length. [ 226.053002][ T8792] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.970'. [ 226.117239][ T8592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.147533][ T8592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.164370][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.190294][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.200134][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.221699][ T8586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.275515][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.403633][ T8584] veth0_macvtap: entered promiscuous mode [ 226.431790][ T8584] veth1_macvtap: entered promiscuous mode [ 226.496153][ T8801] netlink: 'syz.9.972': attribute type 21 has an invalid length. [ 226.546177][ T8801] netlink: 100 bytes leftover after parsing attributes in process `syz.9.972'. [ 226.651151][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.673469][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.690092][ T8584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.746395][ T8586] veth0_vlan: entered promiscuous mode [ 226.761463][ T8584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.829112][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.841671][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.859854][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.871878][ T8586] veth1_vlan: entered promiscuous mode [ 226.900503][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.944625][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.730608][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.851346][ T8586] veth0_macvtap: entered promiscuous mode [ 227.882007][ T8586] veth1_macvtap: entered promiscuous mode [ 227.935931][ T7228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.980641][ T7228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.105961][ T8586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.189634][ T8586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.269846][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.295299][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.302676][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.304278][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.325758][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.364150][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.711119][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.733765][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.871307][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.912177][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.294051][ T8856] IPv6: Can't replace route, no match found [ 229.466077][ T8865] IPv6: NLM_F_REPLACE set, but no existing node found! [ 229.871396][ T8876] netlink: 40 bytes leftover after parsing attributes in process `syz.9.998'. [ 230.438327][ T8897] netlink: 208252 bytes leftover after parsing attributes in process `syz.3.1007'. [ 230.448198][ T8897] netlink: 'syz.3.1007': attribute type 1 has an invalid length. [ 230.456630][ T8897] netlink: 'syz.3.1007': attribute type 2 has an invalid length. [ 230.465949][ T8897] netlink: 'syz.3.1007': attribute type 3 has an invalid length. [ 230.474119][ T8897] netlink: 'syz.3.1007': attribute type 4 has an invalid length. [ 232.008250][ T8941] netlink: 'syz.7.1026': attribute type 10 has an invalid length. [ 232.108995][ T8941] veth0_vlan: left promiscuous mode [ 232.205085][ T8941] veth0_vlan: entered promiscuous mode [ 232.235338][ T8941] team0: Device veth0_vlan failed to register rx_handler [ 232.366412][ T8953] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1031'. [ 232.421115][ T8953] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1031'. [ 232.625872][ T8953] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1031'. [ 232.699222][ T8953] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1031'. [ 233.135725][ T8953] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1031'. [ 233.153495][ T8953] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1031'. [ 233.479467][ T8978] netlink: 'syz.3.1040': attribute type 22 has an invalid length. [ 233.513884][ T8978] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1040'. [ 233.720356][ T8982] netlink: 65027 bytes leftover after parsing attributes in process `syz.2.1042'. [ 234.655418][ T9001] syzkaller0: entered promiscuous mode [ 234.661099][ T9001] syzkaller0: entered allmulticast mode [ 236.524840][ T9033] __nla_validate_parse: 3 callbacks suppressed [ 236.524860][ T9033] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1061'. [ 236.868584][ T9038] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1063'. [ 237.490386][ T9046] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1066'. [ 237.827992][ T9063] netlink: 203516 bytes leftover after parsing attributes in process `syz.7.1072'. [ 237.853697][ T9063] netlink: 6320 bytes leftover after parsing attributes in process `syz.7.1072'. [ 238.355953][ T9078] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1081'. [ 238.418945][ T9078] net_ratelimit: 78 callbacks suppressed [ 238.418969][ T9078] openvswitch: netlink: Missing key (keys=40, expected=100) [ 238.637966][ T9087] netlink: 64859 bytes leftover after parsing attributes in process `syz.7.1084'. [ 239.726790][ T58] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.985492][ T58] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.181365][ T58] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.316661][ T58] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.745389][ T58] bridge_slave_1: left allmulticast mode [ 240.751096][ T58] bridge_slave_1: left promiscuous mode [ 240.792494][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.849742][ T58] bridge_slave_0: left allmulticast mode [ 240.855806][ T58] bridge_slave_0: left promiscuous mode [ 240.861626][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.890388][ T9127] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1104'. [ 241.008601][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 241.040524][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 241.052392][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 241.068234][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 241.078332][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 241.319117][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 241.329132][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 241.338317][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 241.347826][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 241.357025][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 241.470830][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 241.481884][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 241.500097][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 241.508459][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 241.517533][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 241.741736][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.760119][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.770481][ T58] bond0 (unregistering): Released all slaves [ 242.014947][ T9150] netlink: 61211 bytes leftover after parsing attributes in process `syz.7.1110'. [ 242.353144][ T58] hsr_slave_0: left promiscuous mode [ 242.360710][ T58] hsr_slave_1: left promiscuous mode [ 242.393795][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.401697][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.415575][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.423902][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.445967][ T58] veth1_macvtap: left promiscuous mode [ 242.451560][ T58] veth0_macvtap: left promiscuous mode [ 242.461927][ T58] veth1_vlan: left promiscuous mode [ 242.467925][ T58] veth0_vlan: left promiscuous mode [ 242.607528][ T9166] blkio.reset_stats is deprecated [ 243.146874][ T51] Bluetooth: hci0: command tx timeout [ 243.227393][ T58] team0 (unregistering): Port device team_slave_1 removed [ 243.269862][ T58] team0 (unregistering): Port device team_slave_0 removed [ 243.472250][ T51] Bluetooth: hci1: command tx timeout [ 243.542377][ T51] Bluetooth: hci4: command tx timeout [ 243.962989][ T9187] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.1121'. [ 244.163745][ T9129] chnl_net:caif_netlink_parms(): no params data found [ 244.229105][ T9137] chnl_net:caif_netlink_parms(): no params data found [ 244.411610][ T9141] chnl_net:caif_netlink_parms(): no params data found [ 244.720429][ T9129] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.753566][ T9129] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.760891][ T9129] bridge_slave_0: entered allmulticast mode [ 244.788840][ T9129] bridge_slave_0: entered promiscuous mode [ 244.879071][ T9129] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.883530][ T9212] netlink: 'syz.7.1128': attribute type 22 has an invalid length. [ 244.896327][ T9129] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.906723][ T9129] bridge_slave_1: entered allmulticast mode [ 244.921814][ T9129] bridge_slave_1: entered promiscuous mode [ 245.096568][ T9137] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.104031][ T9137] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.111317][ T9137] bridge_slave_0: entered allmulticast mode [ 245.119884][ T9137] bridge_slave_0: entered promiscuous mode [ 245.163751][ T58] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.222655][ T51] Bluetooth: hci0: command tx timeout [ 245.287574][ T9137] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.303272][ T9137] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.324901][ T9137] bridge_slave_1: entered allmulticast mode [ 245.343392][ T9137] bridge_slave_1: entered promiscuous mode [ 245.445194][ T9141] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.462977][ T9141] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.470308][ T9141] bridge_slave_0: entered allmulticast mode [ 245.479490][ T9141] bridge_slave_0: entered promiscuous mode [ 245.495443][ T9141] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.507903][ T9141] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.522426][ T9141] bridge_slave_1: entered allmulticast mode [ 245.551636][ T51] Bluetooth: hci1: command tx timeout [ 245.564139][ T9141] bridge_slave_1: entered promiscuous mode [ 245.624140][ T51] Bluetooth: hci4: command tx timeout [ 245.680659][ T9129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.925487][ T58] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.014763][ T9224] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1133'. [ 246.035591][ T9137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.059592][ T9129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.134528][ T58] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.295734][ T58] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.331744][ T9137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.406419][ T9141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.535578][ T9129] team0: Port device team_slave_0 added [ 246.557530][ T9141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.575818][ T9137] team0: Port device team_slave_0 added [ 246.613995][ T9129] team0: Port device team_slave_1 added [ 246.658477][ T9137] team0: Port device team_slave_1 added [ 246.699579][ T9141] team0: Port device team_slave_0 added [ 246.896908][ T9141] team0: Port device team_slave_1 added [ 247.008770][ T9129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.014232][ T9240] netlink: 'syz.1.1141': attribute type 3 has an invalid length. [ 247.024046][ T9240] netlink: 'syz.1.1141': attribute type 2 has an invalid length. [ 247.030042][ T9129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.031783][ T9240] netlink: 'syz.1.1141': attribute type 1 has an invalid length. [ 247.067100][ T9129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.084484][ T9137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.093221][ T9240] netlink: 198112 bytes leftover after parsing attributes in process `syz.1.1141'. [ 247.101977][ T9137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.136586][ T9137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.184860][ T9239] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.1140'. [ 247.264695][ T9141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.271780][ T9141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.306644][ T51] Bluetooth: hci0: command tx timeout [ 247.314428][ T9141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.372814][ T9129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.383170][ T9129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.413183][ T9129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.456198][ T9137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.472552][ T9137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.512873][ T9137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.553354][ T9141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.560360][ T9141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.622352][ T51] Bluetooth: hci1: command tx timeout [ 247.627945][ T9141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.685573][ T58] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.702617][ T51] Bluetooth: hci4: command tx timeout [ 247.900358][ T58] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.016476][ T9137] hsr_slave_0: entered promiscuous mode [ 248.033861][ T9137] hsr_slave_1: entered promiscuous mode [ 248.160023][ T9129] hsr_slave_0: entered promiscuous mode [ 248.168111][ T9129] hsr_slave_1: entered promiscuous mode [ 248.181886][ T9129] debugfs: 'hsr0' already exists in 'hsr' [ 248.188871][ T9129] Cannot create hsr debugfs directory [ 248.236488][ T9256] netlink: 'syz.1.1149': attribute type 49 has an invalid length. [ 248.348261][ T9141] hsr_slave_0: entered promiscuous mode [ 248.356406][ T9141] hsr_slave_1: entered promiscuous mode [ 248.369611][ T9141] debugfs: 'hsr0' already exists in 'hsr' [ 248.376001][ T9141] Cannot create hsr debugfs directory [ 248.437414][ T58] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.471121][ T9260] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.1151'. [ 248.534872][ T58] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.887283][ T9271] netlink: 'syz.7.1156': attribute type 11 has an invalid length. [ 248.895442][ T9271] netlink: 149476 bytes leftover after parsing attributes in process `syz.7.1156'. [ 248.931608][ T9273] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1157'. [ 249.058645][ T9270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.222895][ T9277] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1159'. [ 249.383521][ T51] Bluetooth: hci0: command tx timeout [ 249.702994][ T51] Bluetooth: hci1: command tx timeout [ 249.783009][ T51] Bluetooth: hci4: command tx timeout [ 249.924407][ T58] bridge_slave_1: left allmulticast mode [ 249.930210][ T58] bridge_slave_1: left promiscuous mode [ 249.945399][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.967516][ T58] bridge_slave_0: left allmulticast mode [ 249.974523][ T58] bridge_slave_0: left promiscuous mode [ 249.986799][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.014741][ T58] bridge_slave_1: left allmulticast mode [ 250.021680][ T58] bridge_slave_1: left promiscuous mode [ 250.035550][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.083036][ T58] bridge_slave_0: left allmulticast mode [ 250.088739][ T58] bridge_slave_0: left promiscuous mode [ 250.133974][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.203170][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.226985][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.245038][ T58] bond0 (unregistering): Released all slaves [ 251.639742][ T9325] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.1181'. [ 251.780687][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.800938][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.813440][ T58] bond0 (unregistering): Released all slaves [ 252.797067][ T9129] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 252.938773][ T9137] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.013958][ T9129] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 253.103122][ T9129] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 253.117629][ T9333] netlink: 'syz.7.1184': attribute type 29 has an invalid length. [ 253.128173][ T9129] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 253.165384][ T9137] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.185523][ T9332] netlink: 'syz.7.1184': attribute type 29 has an invalid length. [ 253.199996][ T9333] netlink: 'syz.7.1184': attribute type 29 has an invalid length. [ 253.336612][ T9137] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.397517][ T58] hsr_slave_0: left promiscuous mode [ 253.406460][ T58] hsr_slave_1: left promiscuous mode [ 253.429109][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.446652][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.464735][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.480575][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.504196][ T58] hsr_slave_0: left promiscuous mode [ 253.511190][ T58] hsr_slave_1: left promiscuous mode [ 253.535229][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.552272][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.563542][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.570967][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.627667][ T58] veth1_macvtap: left promiscuous mode [ 253.634830][ T58] veth0_macvtap: left promiscuous mode [ 253.640465][ T58] veth1_vlan: left promiscuous mode [ 253.647252][ T58] veth0_vlan: left promiscuous mode [ 253.655742][ T58] veth1_macvtap: left promiscuous mode [ 253.661278][ T58] veth0_macvtap: left promiscuous mode [ 253.667208][ T58] veth1_vlan: left promiscuous mode [ 253.672693][ T58] veth0_vlan: left promiscuous mode [ 254.138052][ T58] team0 (unregistering): Port device team_slave_1 removed [ 254.171861][ T58] team0 (unregistering): Port device team_slave_0 removed [ 254.789618][ T58] team0 (unregistering): Port device team_slave_1 removed [ 254.821871][ T58] team0 (unregistering): Port device team_slave_0 removed [ 255.170645][ T9137] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.309884][ T9129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.359327][ T9129] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.380639][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.387861][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.411281][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.418504][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.785764][ T9129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.793973][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.800311][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.809246][ T9137] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 255.828972][ T9137] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 255.840496][ T9137] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 255.858225][ T9137] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 255.958435][ T9141] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 255.980132][ T9141] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 255.998610][ T9141] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 256.011072][ T9141] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 256.031235][ T9129] veth0_vlan: entered promiscuous mode [ 256.059302][ T9129] veth1_vlan: entered promiscuous mode [ 256.130372][ T9129] veth0_macvtap: entered promiscuous mode [ 256.150521][ T9129] veth1_macvtap: entered promiscuous mode [ 256.184627][ T9129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.206248][ T9129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.218912][ T9137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.244810][ T61] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.255826][ T61] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.277046][ T61] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.286137][ T61] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.310498][ T9137] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.329595][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.336860][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.381109][ T9141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.396123][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.403314][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.459615][ T9018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.469462][ T9141] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.478174][ T9018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.524561][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.531790][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.563474][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.570646][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.589622][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.606828][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.374482][ T9137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.661268][ T9141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.419878][ T9407] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1190'. [ 259.341264][ T9444] netlink: zone id is out of range [ 259.367000][ T9137] veth0_vlan: entered promiscuous mode [ 259.383852][ T9444] netlink: zone id is out of range [ 259.437129][ T9137] veth1_vlan: entered promiscuous mode [ 259.493944][ T9444] netlink: set zone limit has 4 unknown bytes [ 259.538613][ T9141] veth0_vlan: entered promiscuous mode [ 259.585094][ T9141] veth1_vlan: entered promiscuous mode [ 259.615220][ T9137] veth0_macvtap: entered promiscuous mode [ 259.651533][ T9137] veth1_macvtap: entered promiscuous mode [ 259.694769][ T9137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.724422][ T9137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.796068][ T7229] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.830114][ T7229] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.868385][ T7229] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.889980][ T9452] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1204'. [ 259.939369][ T9141] veth0_macvtap: entered promiscuous mode [ 259.951242][ T7229] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.997132][ T9141] veth1_macvtap: entered promiscuous mode [ 260.086429][ T9141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.147816][ T9141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.300083][ T7229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.300197][ T9414] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.317172][ T7229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.363224][ T9414] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.443734][ T9414] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.457038][ T9421] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.530781][ T7228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.543804][ T7228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.608303][ T9471] netlink: 212940 bytes leftover after parsing attributes in process `syz.7.1211'. [ 260.737950][ T7229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.775200][ T7229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.866864][ T9477] netlink: 'syz.0.1213': attribute type 39 has an invalid length. [ 260.938036][ T9477] veth0_macvtap: left promiscuous mode [ 261.090114][ T7228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.144311][ T7228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.300719][ T9481] delete_channel: no stack [ 261.508167][ T9495] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.1220'. [ 261.550335][ T5863] Bluetooth: hci0: unexpected subevent 0x03 length: 150 > 9 [ 261.586910][ T9501] netlink: 'syz.4.1223': attribute type 22 has an invalid length. [ 261.595178][ T9501] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1223'. [ 262.033135][ T9519] netlink: 9286 bytes leftover after parsing attributes in process `syz.7.1230'. [ 262.244968][ T9525] netlink: 'syz.6.1233': attribute type 1 has an invalid length. [ 262.255499][ T9525] netlink: 201392 bytes leftover after parsing attributes in process `syz.6.1233'. [ 262.458894][ T9530] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1235'. [ 262.483928][ T9530] hsr_slave_0: left promiscuous mode [ 262.515054][ T9530] hsr_slave_1: left promiscuous mode [ 262.983976][ T5863] Bluetooth: hci3: command 0x0406 tx timeout [ 263.017226][ T9549] : entered promiscuous mode [ 263.952001][ T9576] netlink: 'syz.4.1255': attribute type 39 has an invalid length. [ 264.051377][ T9576] veth0_macvtap: left promiscuous mode [ 264.221404][ T9580] openvswitch: netlink: IP tunnel dst address not specified [ 265.243995][ T9605] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.1268'. [ 266.835570][ T9644] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 266.937581][ T9648] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1287'. [ 271.563780][ T9736] netlink: 'syz.1.1324': attribute type 4 has an invalid length. [ 271.608497][ T9736] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1324'. [ 272.067962][ T9752] netlink: 'syz.6.1331': attribute type 3 has an invalid length. [ 272.104341][ T9752] netlink: 'syz.6.1331': attribute type 1 has an invalid length. [ 272.137072][ T9752] netlink: 193500 bytes leftover after parsing attributes in process `syz.6.1331'. [ 273.271420][ T9788] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1342'. [ 275.774403][ T9862] syzkaller0: entered promiscuous mode [ 275.779932][ T9862] syzkaller0: entered allmulticast mode [ 276.239144][ T9888] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1383'. [ 276.599069][ T9898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1387'. [ 278.082967][ T9912] syz.0.1393 (9912) used obsolete PPPIOCDETACH ioctl [ 278.263280][ T9914] netlink: 'syz.6.1394': attribute type 12 has an invalid length. [ 278.307178][ T9914] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1394'. [ 279.849266][ T9957] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1412'. [ 281.531483][ T9988] netlink: 'syz.6.1425': attribute type 1 has an invalid length. [ 281.624045][ T9988] netlink: 'syz.6.1425': attribute type 4 has an invalid length. [ 281.642384][ T9988] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.1425'. [ 282.560238][ T9994] delete_channel: no stack [ 283.237671][T10029] sock: sock_timestamping_bind_phc: sock not bind to device [ 286.834534][ T7287] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 289.789485][T10131] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 291.943537][ T9421] wlan1: Trigger new scan to find an IBSS to join [ 295.008857][T10169] infiniband syz!: set active [ 295.036726][T10169] infiniband syz!: added team_slave_0 [ 295.112411][T10169] syz!: rxe_create_cq: returned err = -12 [ 295.132289][T10169] infiniband syz!: Couldn't create ib_mad CQ [ 295.159774][T10169] infiniband syz!: Couldn't open port 1 [ 295.196415][ T51] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 295.213779][T10193] netlink: 'syz.6.1509': attribute type 1 has an invalid length. [ 295.239052][T10193] netlink: 'syz.6.1509': attribute type 4 has an invalid length. [ 295.247539][T10193] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.1509'. [ 295.354022][T10169] RDS/IB: syz!: added [ 295.402709][T10169] smc: adding ib device syz! with port count 1 [ 295.458738][T10169] smc: ib device syz! port 1 has pnetid [ 295.889067][T10205] netlink: 'syz.7.1515': attribute type 2 has an invalid length. [ 295.918520][T10205] netlink: 17267 bytes leftover after parsing attributes in process `syz.7.1515'. [ 296.906292][ T9018] wlan1: Trigger new scan to find an IBSS to join [ 296.992878][ T9018] wlan1: Creating new IBSS network, BSSID b2:3a:fd:f6:e6:f4 [ 297.224687][ T51] Bluetooth: hci2: command tx timeout [ 298.070780][T10229] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1527'. [ 298.112588][T10229] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1527'. [ 298.387999][T10236] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1529'. [ 299.589436][T10254] syzkaller0: entered promiscuous mode [ 299.595435][T10254] syzkaller0: entered allmulticast mode [ 302.248213][T10284] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1548'. [ 302.265482][T10286] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1549'. [ 304.372326][T10233] infiniband syz1: set active [ 304.402367][T10233] infiniband syz1: added bond0 [ 304.408136][T10233] syz1: rxe_create_cq: returned err = -12 [ 304.422518][T10233] infiniband syz1: Couldn't create ib_mad CQ [ 304.447815][T10233] infiniband syz1: Couldn't open port 1 [ 304.557008][T10233] RDS/IB: syz1: added [ 304.561131][T10233] smc: adding ib device syz1 with port count 1 [ 304.582356][T10233] smc: ib device syz1 port 1 has pnetid [ 310.086683][T10382] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1590'. [ 311.221020][ T51] Bluetooth: hci2: unknown advertising packet type: 0x70 [ 311.221096][ T51] Bluetooth: hci2: Malformed LE Event: 0x02 [ 311.277413][T10406] netlink: 'syz.4.1599': attribute type 1 has an invalid length. [ 311.345304][T10406] netlink: 'syz.4.1599': attribute type 4 has an invalid length. [ 311.392244][T10406] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1599'. [ 312.316686][ T7229] bridge_slave_1: left allmulticast mode [ 312.341428][ T7229] bridge_slave_1: left promiscuous mode [ 312.431878][ T7229] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.490528][ T7229] bridge_slave_0: left allmulticast mode [ 312.518290][ T7229] bridge_slave_0: left promiscuous mode [ 312.525209][ T7229] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.796943][T10417] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.1605'. [ 312.812805][T10417] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.1605'. [ 313.691621][ T7229] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.711869][ T7229] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.727275][ T7229] bond0 (unregistering): Released all slaves [ 314.487225][T10457] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1619'. [ 317.227208][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.233658][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.544787][T10492] netlink: 798 bytes leftover after parsing attributes in process `syz.0.1629'. [ 318.081260][T10506] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1635'. [ 318.180403][T10510] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x32 [ 318.956720][ T7229] hsr_slave_0: left promiscuous mode [ 318.994832][ T7229] hsr_slave_1: left promiscuous mode [ 319.058304][ T7229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.075785][ T7229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.107349][ T7229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.131981][ T7229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.299142][ T7229] veth1_macvtap: left promiscuous mode [ 319.320972][ T7229] veth0_macvtap: left promiscuous mode [ 319.331170][ T7229] veth1_vlan: left promiscuous mode [ 319.346313][ T7229] veth0_vlan: left promiscuous mode [ 319.508308][T10542] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1651'. [ 319.599188][T10545] sctp: [Deprecated]: syz.6.1652 (pid 10545) Use of struct sctp_assoc_value in delayed_ack socket option. [ 319.599188][T10545] Use struct sctp_sack_info instead [ 321.600903][T10576] netlink: 208344 bytes leftover after parsing attributes in process `syz.6.1665'. [ 321.610786][T10576] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 321.620127][T10576] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 321.836762][ T7229] team0 (unregistering): Port device team_slave_1 removed [ 321.906108][ T7229] team0 (unregistering): Port device C removed [ 326.533862][T10662] netlink: 'syz.4.1697': attribute type 9 has an invalid length. [ 326.603385][T10662] netlink: 'syz.4.1697': attribute type 4 has an invalid length. [ 328.745539][T10695] syzkaller0: entered promiscuous mode [ 328.758920][T10695] syzkaller0: entered allmulticast mode [ 329.171800][T10706] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1715'. [ 329.539272][T10725] Zero length message leads to an empty skb [ 330.083519][T10733] netlink: 'syz.7.1724': attribute type 1 has an invalid length. [ 330.091433][T10733] netlink: 'syz.7.1724': attribute type 2 has an invalid length. [ 330.100086][T10733] netlink: 'syz.7.1724': attribute type 7 has an invalid length. [ 330.108011][T10733] netlink: 37 bytes leftover after parsing attributes in process `syz.7.1724'. [ 330.117196][T10733] netlink: 'syz.7.1724': attribute type 1 has an invalid length. [ 330.126458][T10733] netlink: 'syz.7.1724': attribute type 2 has an invalid length. [ 330.134513][T10733] netlink: 130076 bytes leftover after parsing attributes in process `syz.7.1724'. [ 330.944372][T10724] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1719'. [ 331.204625][ T51] Bluetooth: hci3: unexpected event 0x31 length: 15 > 6 [ 334.354584][T10791] netlink: 'syz.4.1749': attribute type 10 has an invalid length. [ 334.663439][ T5863] Bluetooth: hci2: command 0x0406 tx timeout [ 335.136053][T10791] veth1_macvtap: left promiscuous mode [ 337.071594][T10837] pim6reg1: entered allmulticast mode [ 337.220843][T10842] netlink: 'syz.6.1769': attribute type 1 has an invalid length. [ 337.259532][T10842] netlink: 201392 bytes leftover after parsing attributes in process `syz.6.1769'. [ 337.708453][T10858] netlink: 'syz.4.1778': attribute type 21 has an invalid length. [ 337.729715][T10858] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1778'. [ 338.355141][T10873] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.1784'. [ 338.590719][T10881] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1787'. [ 338.874464][T10891] netlink: 'syz.7.1791': attribute type 29 has an invalid length. [ 338.946451][T10891] netlink: 'syz.7.1791': attribute type 29 has an invalid length. [ 338.984710][T10895] netlink: 'syz.7.1791': attribute type 29 has an invalid length. [ 339.030445][T10891] netlink: 'syz.7.1791': attribute type 29 has an invalid length. [ 339.692980][T10912] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1801'. [ 340.768356][T10941] netlink: 'syz.0.1811': attribute type 21 has an invalid length. [ 340.878793][T10943] netlink: 136 bytes leftover after parsing attributes in process `syz.6.1812'. [ 341.261121][T10949] sctp: [Deprecated]: syz.7.1815 (pid 10949) Use of struct sctp_assoc_value in delayed_ack socket option. [ 341.261121][T10949] Use struct sctp_sack_info instead [ 342.030899][T10971] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.1825'. [ 342.058579][T10971] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.1825'. [ 342.111335][T10971] netlink: 24032 bytes leftover after parsing attributes in process `syz.1.1825'. [ 342.507583][T10990] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1833'. [ 343.767802][T11015] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1843'. [ 343.923004][T11022] netlink: 'syz.4.1847': attribute type 39 has an invalid length. [ 344.758462][T11046] syzkaller0: entered promiscuous mode [ 344.803266][T11046] syzkaller0: entered allmulticast mode [ 344.833315][T11047] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 345.060666][ T51] Bluetooth: hci1: unexpected event 0x30 length: 15 > 3 [ 346.543604][T11103] netlink: 15999 bytes leftover after parsing attributes in process `syz.7.1878'. [ 347.246434][T11120] netlink: 'syz.6.1888': attribute type 2 has an invalid length. [ 347.264450][T11120] netlink: 'syz.6.1888': attribute type 7 has an invalid length. [ 347.275213][T11120] netlink: 85 bytes leftover after parsing attributes in process `syz.6.1888'. [ 347.299457][T11120] netlink: 130140 bytes leftover after parsing attributes in process `syz.6.1888'. [ 347.313825][T11120] netlink: 'syz.6.1888': attribute type 2 has an invalid length. [ 347.359447][T11120] netlink: 'syz.6.1888': attribute type 7 has an invalid length. [ 347.391180][T11120] netlink: 85 bytes leftover after parsing attributes in process `syz.6.1888'. [ 348.353933][T11148] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0500:0023 with DS=0x32 [ 349.180448][T11158] netlink: 'syz.4.1910': attribute type 30 has an invalid length. [ 350.061372][T11172] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1903'. [ 350.671834][T11187] netlink: 198328 bytes leftover after parsing attributes in process `syz.6.1912'. [ 350.681723][T11187] netlink: 'syz.6.1912': attribute type 1 has an invalid length. [ 350.690985][T11187] netlink: 'syz.6.1912': attribute type 2 has an invalid length. [ 350.824102][T11190] netlink: 'syz.4.1913': attribute type 9 has an invalid length. [ 352.526876][T11216] netlink: 'syz.1.1924': attribute type 6 has an invalid length. [ 352.535568][T11216] netlink: 'syz.1.1924': attribute type 25 has an invalid length. [ 352.596314][T11216] netlink: 'syz.1.1924': attribute type 27 has an invalid length. [ 352.632230][T11216] netlink: 15538 bytes leftover after parsing attributes in process `syz.1.1924'. [ 355.111075][T11267] netlink: 55631 bytes leftover after parsing attributes in process `syz.7.1949'. [ 355.403432][T11278] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1951'. [ 355.958943][ T51] Bluetooth: hci4: Malformed Event: 0x02 [ 356.729411][T11317] netlink: 'syz.1.1971': attribute type 2 has an invalid length. [ 356.803063][T11317] netlink: 'syz.1.1971': attribute type 1 has an invalid length. [ 356.902875][T11317] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1971'. [ 359.959761][T11388] netlink: 182 bytes leftover after parsing attributes in process `syz.1.1999'. [ 360.515665][T11412] netlink: 'syz.0.2010': attribute type 1 has an invalid length. [ 360.558206][T11412] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2010'. [ 360.843999][T11420] netlink: 'syz.0.2013': attribute type 3 has an invalid length. [ 360.869338][T11420] netlink: 'syz.0.2013': attribute type 1 has an invalid length. [ 360.898574][T11420] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.2013'. [ 362.603190][T11467] netlink: 211 bytes leftover after parsing attributes in process `syz.6.2032'. [ 363.662466][T11475] netlink: 'syz.0.2037': attribute type 1 has an invalid length. [ 363.670368][T11475] netlink: 'syz.0.2037': attribute type 2 has an invalid length. [ 363.699558][T11475] netlink: 'syz.0.2037': attribute type 7 has an invalid length. [ 363.732332][T11475] netlink: 37 bytes leftover after parsing attributes in process `syz.0.2037'. [ 363.752417][T11475] netlink: 'syz.0.2037': attribute type 1 has an invalid length. [ 363.772654][T11475] netlink: 'syz.0.2037': attribute type 2 has an invalid length. [ 363.781975][T11469] syzkaller0: entered promiscuous mode [ 363.793946][T11475] netlink: 130076 bytes leftover after parsing attributes in process `syz.0.2037'. [ 363.814821][T11469] syzkaller0: entered allmulticast mode [ 364.283759][T11498] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.2044'. [ 364.994920][T11503] netlink: 211 bytes leftover after parsing attributes in process `syz.4.2045'. [ 365.384762][ T5865] Bluetooth: hci1: command 0x0406 tx timeout [ 365.393415][ T5872] Bluetooth: hci0: command 0x0406 tx timeout [ 365.394727][ T5867] Bluetooth: hci4: command 0x0406 tx timeout [ 371.574241][T11576] netlink: 'syz.6.2076': attribute type 1 has an invalid length. [ 371.582385][T11576] netlink: 'syz.6.2076': attribute type 4 has an invalid length. [ 371.590388][T11576] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.2076'. [ 371.811710][T11583] netlink: 'syz.0.2079': attribute type 10 has an invalid length. [ 371.820562][T11583] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2079'. [ 371.876458][T11583] veth0_vlan: entered allmulticast mode [ 371.972960][T11583] bridge0: port 3(veth0_vlan) entered blocking state [ 372.024231][T11583] bridge0: port 3(veth0_vlan) entered disabled state [ 372.294512][T11583] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 374.428523][T11615] netlink: 2451 bytes leftover after parsing attributes in process `syz.0.2091'. [ 376.021384][T11650] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2106'. [ 376.046245][T11650] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2106'. [ 376.522600][T11655] syzkaller0: entered promiscuous mode [ 376.592237][T11655] syzkaller0: entered allmulticast mode [ 378.351980][T11676] delete_channel: no stack [ 378.684330][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.691053][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.926516][ T5863] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 380.936633][ T5863] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 380.957144][ T5863] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 380.976078][ T5863] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 380.984257][ T5863] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 382.285282][T11714] netlink: 'syz.7.2133': attribute type 2 has an invalid length. [ 382.332373][T11714] netlink: 137592 bytes leftover after parsing attributes in process `syz.7.2133'. [ 383.070237][ T5877] Bluetooth: hci5: command tx timeout [ 383.880586][T11738] sock: sock_timestamping_bind_phc: sock not bind to device [ 384.017271][ T9421] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.219848][ T9421] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.490262][ T9421] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.676565][T11754] netlink: 'syz.7.2150': attribute type 5 has an invalid length. [ 384.695139][ T9421] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.142406][ T5877] Bluetooth: hci5: command tx timeout [ 385.194631][T11702] chnl_net:caif_netlink_parms(): no params data found [ 385.532247][ T9421] bridge_slave_1: left allmulticast mode [ 385.565668][ T9421] bridge_slave_1: left promiscuous mode [ 385.606402][ T9421] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.669950][ T9421] bridge_slave_0: left allmulticast mode [ 385.723723][ T9421] bridge_slave_0: left promiscuous mode [ 385.731417][ T9421] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.731982][T11798] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2165'. [ 387.237470][ T5877] Bluetooth: hci5: command tx timeout [ 387.798872][ T9421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.817732][ T9421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.828787][ T9421] bond0 (unregistering): Released all slaves [ 387.964253][T11808] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2169'. [ 389.302372][ T5877] Bluetooth: hci5: command tx timeout [ 390.294859][T11805] netlink: 63503 bytes leftover after parsing attributes in process `syz.6.2168'. [ 390.326077][ T9421] : left promiscuous mode [ 390.382619][T11840] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2184'. [ 390.393542][T11810] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2170'. [ 390.740387][T11842] syzkaller0: entered promiscuous mode [ 390.788638][T11842] syzkaller0: entered allmulticast mode [ 393.769591][T11702] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.777499][T11702] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.785725][T11702] bridge_slave_0: entered allmulticast mode [ 393.793845][T11702] bridge_slave_0: entered promiscuous mode [ 395.345417][T11873] netlink: 'syz.1.2195': attribute type 1 has an invalid length. [ 395.374736][T11873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2195'. [ 396.673566][T11702] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.680876][T11702] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.693982][T11702] bridge_slave_1: entered allmulticast mode [ 396.707770][T11702] bridge_slave_1: entered promiscuous mode [ 398.298924][T11702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.363312][T11702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.112362][T11910] netlink: 'syz.1.2210': attribute type 1 has an invalid length. [ 399.120157][T11910] netlink: 'syz.1.2210': attribute type 4 has an invalid length. [ 399.174024][T11910] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2210'. [ 399.184535][T11702] team0: Port device team_slave_0 added [ 399.207923][T11913] netlink: 'syz.1.2210': attribute type 1 has an invalid length. [ 399.234035][T11702] team0: Port device team_slave_1 added [ 399.273810][T11913] netlink: 'syz.1.2210': attribute type 4 has an invalid length. [ 399.301986][T11913] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2210'. [ 400.422414][ T5931] page_pool_release_retry() stalled pool shutdown: id 144, 1 inflight 60 sec [ 401.184310][T11702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.196771][T11702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.232249][T11702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.265527][T11931] netlink: 'syz.6.2219': attribute type 3 has an invalid length. [ 401.294367][T11702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.311717][T11702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.322225][T11931] netlink: 'syz.6.2219': attribute type 2 has an invalid length. [ 401.386145][T11931] netlink: 198112 bytes leftover after parsing attributes in process `syz.6.2219'. [ 401.452241][T11702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.507789][ T9421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.542307][T11938] delete_channel: no stack [ 401.547089][ T9421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.568436][ T9421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.592399][ T9421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.640250][ T9421] veth1_vlan: left promiscuous mode [ 401.650121][ T9421] veth0_vlan: left promiscuous mode [ 401.676791][T11943] netlink: 147608 bytes leftover after parsing attributes in process `syz.6.2223'. [ 401.709535][T11943] netlink: 61827 bytes leftover after parsing attributes in process `syz.6.2223'. [ 402.674981][ T9421] team0 (unregistering): Port device team_slave_1 removed [ 402.735009][ T9421] team0 (unregistering): Port device team_slave_0 removed [ 402.750672][ T7228] smc: removing ib device syz! [ 403.372928][T11960] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2231'. [ 403.840282][T11702] hsr_slave_0: entered promiscuous mode [ 403.993076][T11702] hsr_slave_1: entered promiscuous mode [ 403.999539][T11702] debugfs: 'hsr0' already exists in 'hsr' [ 404.025895][T11702] Cannot create hsr debugfs directory [ 405.733423][T12019] netlink: 'syz.0.2252': attribute type 10 has an invalid length. [ 407.284633][T11702] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 407.353949][T11702] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 407.430108][T11702] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 407.500547][T11702] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 407.760409][T11702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.831784][T11702] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.948796][ T7229] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.956497][ T7229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.252704][ T7229] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.259837][ T7229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.045519][T11702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.555656][T11702] veth0_vlan: entered promiscuous mode [ 411.590022][T11702] veth1_vlan: entered promiscuous mode [ 411.662471][T11702] veth0_macvtap: entered promiscuous mode [ 411.678786][T11702] veth1_macvtap: entered promiscuous mode [ 411.710429][T11702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.724337][T11702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.764545][ T1102] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.788006][ T1102] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.874531][ T1102] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.896770][ T1102] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.073550][ T9421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.093646][ T9421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.169642][ T9421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.229370][ T9421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.402834][T12164] netlink: 'syz.0.2300': attribute type 37 has an invalid length. [ 414.014027][T12172] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.2303'. [ 415.688909][T12169] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2301'. [ 415.806705][T12197] netlink: 63503 bytes leftover after parsing attributes in process `syz.6.2311'. [ 419.977113][T12261] netlink: 'syz.1.2332': attribute type 3 has an invalid length. [ 419.985422][T12261] netlink: 'syz.1.2332': attribute type 1 has an invalid length. [ 419.995119][T12261] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.2332'. [ 421.514065][ T5877] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 421.514104][ T5877] Bluetooth: unknown link type 56 [ 421.526752][ T5877] Bluetooth: hci3: connection err: -111 [ 423.171415][T12327] netlink: 63503 bytes leftover after parsing attributes in process `syz.7.2357'. [ 423.349862][T12331] netlink: 'syz.7.2359': attribute type 11 has an invalid length. [ 423.360395][T12331] netlink: 149476 bytes leftover after parsing attributes in process `syz.7.2359'. [ 423.834403][T12330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.793439][T12357] netlink: 15743 bytes leftover after parsing attributes in process `syz.5.2371'. [ 425.465891][T12381] netlink: 'syz.1.2379': attribute type 11 has an invalid length. [ 425.482935][T12381] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2379'. [ 425.817528][T12380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.130937][T12385] netlink: 'syz.1.2381': attribute type 39 has an invalid length. [ 432.287212][T12502] netlink: 'syz.5.2429': attribute type 49 has an invalid length. [ 432.887181][T12518] netlink: 'syz.5.2435': attribute type 2 has an invalid length. [ 432.929341][T12518] netlink: 'syz.5.2435': attribute type 8 has an invalid length. [ 432.988760][T12518] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2435'. [ 434.930635][T12562] netlink: 'syz.6.2453': attribute type 10 has an invalid length. [ 436.013491][T12572] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2458'. [ 436.116476][T12576] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2460'. [ 436.162715][T12576] netlink: 33 bytes leftover after parsing attributes in process `syz.7.2460'. [ 436.196967][T12576] netlink: 33 bytes leftover after parsing attributes in process `syz.7.2460'. [ 436.460058][ T5877] Bluetooth: hci0: unexpected event 0x32 length: 15 > 9 [ 436.557567][T12587] netlink: 'syz.5.2463': attribute type 11 has an invalid length. [ 436.572656][T12587] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2463'. [ 436.600846][T12587] netlink: 'syz.5.2463': attribute type 11 has an invalid length. [ 436.652552][T12587] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2463'. [ 437.218067][T12583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 438.005355][T12622] netlink: 'syz.7.2478': attribute type 10 has an invalid length. [ 438.043145][T12622] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.066347][T12622] bond0: (slave team0): Enslaving as an active interface with an up link [ 440.151239][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.160224][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.483781][T12660] netlink: 'syz.0.2492': attribute type 10 has an invalid length. [ 440.495561][T12660] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2492'. [ 440.839517][T12665] netlink: 948 bytes leftover after parsing attributes in process `syz.1.2494'. [ 440.856248][T12669] netlink: 'syz.7.2496': attribute type 1 has an invalid length. [ 440.865060][T12669] netlink: 'syz.7.2496': attribute type 4 has an invalid length. [ 440.873696][T12669] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.2496'. [ 441.440628][T12689] delete_channel: no stack [ 441.479850][T12687] delete_channel: no stack [ 442.757421][T12718] netlink: 'syz.5.2515': attribute type 4 has an invalid length. [ 442.811137][T12718] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2515'. [ 445.561529][T12746] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2524'. [ 446.849350][T12775] netlink: 830 bytes leftover after parsing attributes in process `syz.7.2535'. [ 446.862743][T12775] bond_slave_0: entered promiscuous mode [ 446.868855][T12775] bond_slave_1: entered promiscuous mode [ 446.875007][T12775] team_slave_0: entered promiscuous mode [ 446.881044][T12775] team_slave_1: entered promiscuous mode [ 448.667683][ T5877] Bluetooth: hci2: unexpected subevent 0x06 length: 150 > 10 [ 448.876037][ T5877] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 449.406279][T12824] netlink: 'syz.5.2554': attribute type 1 has an invalid length. [ 449.419153][T12824] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.2554'. [ 449.478700][T12828] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2556'. [ 449.586637][T12833] bridge0: port 3(gretap0) entered blocking state [ 449.597164][T12833] bridge0: port 3(gretap0) entered disabled state [ 449.606452][T12833] gretap0: entered allmulticast mode [ 449.620857][T12833] gretap0: entered promiscuous mode [ 449.645909][T12833] bridge0: port 3(gretap0) entered blocking state [ 449.653033][T12833] bridge0: port 3(gretap0) entered forwarding state [ 450.752479][ T5877] Bluetooth: hci2: command 0x0406 tx timeout [ 453.770769][T12922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2589'. [ 456.144637][T12904] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.2581'. [ 457.272294][T12985] netlink: 16399 bytes leftover after parsing attributes in process `syz.6.2612'. [ 457.341113][T12986] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2613'. [ 457.556408][T12992] netlink: 196 bytes leftover after parsing attributes in process `syz.6.2615'. [ 457.689554][T12995] veth1_macvtap: left promiscuous mode [ 457.715164][T12995] macsec0: entered promiscuous mode [ 457.760703][T12996] veth1_macvtap: entered promiscuous mode [ 457.802138][T12996] veth1_macvtap: entered allmulticast mode [ 461.449033][T13044] netlink: 'syz.5.2634': attribute type 12 has an invalid length. [ 461.459508][T13044] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2634'. [ 461.784539][T13059] netlink: 'syz.1.2640': attribute type 10 has an invalid length. [ 462.746743][T13067] netlink: 'syz.7.2644': attribute type 2 has an invalid length. [ 462.762354][T13067] netlink: 137592 bytes leftover after parsing attributes in process `syz.7.2644'. [ 463.037388][T13085] ªªªªªª: renamed from wg2 (while UP) [ 466.396688][T13140] netlink: 'syz.6.2671': attribute type 10 has an invalid length. [ 469.961703][T13140] batman_adv: batadv0: Adding interface: wlan0 [ 469.968241][T13140] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.994375][T13140] batman_adv: batadv0: Interface activated: wlan0 [ 470.006013][T13169] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.2683'. [ 470.483701][ T5877] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 472.502136][ T5863] Bluetooth: hci1: command 0x0406 tx timeout [ 473.146696][ T5863] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 473.155709][ T5863] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 473.166269][ T5863] CPU: 0 UID: 0 PID: 5863 Comm: kworker/u9:2 Not tainted 6.17.0-rc1-syzkaller-g07866544e410 #0 PREEMPT(full) [ 473.166304][ T5863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 473.166320][ T5863] Workqueue: hci1 hci_rx_work [ 473.166366][ T5863] Call Trace: [ 473.166376][ T5863] [ 473.166386][ T5863] dump_stack_lvl+0x189/0x250 [ 473.166423][ T5863] ? __pfx_dump_stack_lvl+0x10/0x10 [ 473.166451][ T5863] ? __pfx__printk+0x10/0x10 [ 473.166491][ T5863] ? kernfs_path_from_node+0x250/0x290 [ 473.166517][ T5863] ? kernfs_path_from_node+0x2f/0x290 [ 473.166548][ T5863] sysfs_create_dir_ns+0x259/0x280 [ 473.166579][ T5863] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 473.166607][ T5863] ? do_raw_spin_unlock+0x122/0x240 [ 473.166642][ T5863] kobject_add_internal+0x59f/0xb40 [ 473.166689][ T5863] kobject_add+0x155/0x220 [ 473.166738][ T5863] ? __pfx_kobject_add+0x10/0x10 [ 473.166774][ T5863] ? _raw_spin_unlock+0x28/0x50 [ 473.166807][ T5863] ? get_device_parent+0x366/0x3a0 [ 473.166837][ T5863] device_add+0x408/0xb50 [ 473.166866][ T5863] hci_conn_add_sysfs+0xd5/0x1e0 [ 473.166896][ T5863] le_conn_complete_evt+0xc3a/0x1220 [ 473.166940][ T5863] ? bt_warn+0x10b/0x160 [ 473.166967][ T5863] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 473.167000][ T5863] ? __pfx_bt_warn+0x10/0x10 [ 473.167020][ T5863] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 473.167062][ T5863] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 473.167093][ T5863] ? skb_pull_data+0xfb/0x200 [ 473.167126][ T5863] hci_le_enh_conn_complete_evt+0x189/0x470 [ 473.167161][ T5863] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 473.167199][ T5863] hci_event_packet+0x78c/0x1200 [ 473.167229][ T5863] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 473.167264][ T5863] ? __pfx_hci_event_packet+0x10/0x10 [ 473.167293][ T5863] ? kcov_remote_start+0x4d3/0x7f0 [ 473.167325][ T5863] ? lockdep_hardirqs_on+0x90/0x150 [ 473.167360][ T5863] ? hci_send_to_monitor+0xe2/0x570 [ 473.167399][ T5863] hci_rx_work+0x46a/0xe80 [ 473.167436][ T5863] ? process_scheduled_works+0x9ef/0x17b0 [ 473.167462][ T5863] process_scheduled_works+0xade/0x17b0 [ 473.167521][ T5863] ? __pfx_process_scheduled_works+0x10/0x10 [ 473.167568][ T5863] worker_thread+0x8a0/0xda0 [ 473.167597][ T5863] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 473.167638][ T5863] ? __kthread_parkme+0x7b/0x200 [ 473.167677][ T5863] kthread+0x70e/0x8a0 [ 473.167710][ T5863] ? __pfx_worker_thread+0x10/0x10 [ 473.167742][ T5863] ? __pfx_kthread+0x10/0x10 [ 473.167775][ T5863] ? _raw_spin_unlock_irq+0x23/0x50 [ 473.167803][ T5863] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.167833][ T5863] ? __pfx_kthread+0x10/0x10 [ 473.167863][ T5863] ret_from_fork+0x3f9/0x770 [ 473.167897][ T5863] ? __pfx_ret_from_fork+0x10/0x10 [ 473.167931][ T5863] ? __switch_to_asm+0x39/0x70 [ 473.167961][ T5863] ? __switch_to_asm+0x33/0x70 [ 473.167994][ T5863] ? __pfx_kthread+0x10/0x10 [ 473.168025][ T5863] ret_from_fork_asm+0x1a/0x30 [ 473.168077][ T5863] [ 473.168113][ T5863] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 473.475652][ T5863] Bluetooth: hci1: failed to register connection device [ 473.715787][T13259] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2719'. [ 473.806106][ T5877] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 474.500667][T13281] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 474.508666][T13281] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 475.542379][ T5863] Bluetooth: hci1: command 0x0406 tx timeout [ 477.807082][T13319] netlink: 'syz.5.2739': attribute type 25 has an invalid length. [ 481.791504][T13328] netlink: 'syz.0.2742': attribute type 4 has an invalid length. [ 485.038829][T13414] can: request_module (can-proto-0) failed. [ 485.438369][T13427] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2779'. [ 490.181640][ T5863] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 490.766300][T13492] netlink: 'syz.5.2804': attribute type 22 has an invalid length. [ 490.782438][T13492] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2804'. [ 492.212282][T13500] debugfs: '!' already exists in 'ieee80211' [ 493.073116][T13519] netlink: 'syz.0.2817': attribute type 17 has an invalid length. [ 493.080992][T13519] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2817'. [ 493.128941][T13523] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2818'. [ 493.200945][T13523] hsr_slave_0: left promiscuous mode [ 493.212354][T13523] hsr_slave_1: left promiscuous mode [ 493.795616][T13542] netlink: 'syz.1.2826': attribute type 39 has an invalid length. [ 494.219399][T13546] netlink: 146936 bytes leftover after parsing attributes in process `syz.0.2828'. [ 494.313266][T13546] openvswitch: netlink: Message has 6 unknown bytes. [ 497.337973][T13610] netlink: 'syz.6.2852': attribute type 11 has an invalid length. [ 497.346449][T13610] netlink: 149476 bytes leftover after parsing attributes in process `syz.6.2852'. [ 497.419085][T13611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 499.801651][T13649] netlink: 'syz.7.2866': attribute type 10 has an invalid length. [ 501.600840][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.607952][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.259916][T13687] netlink: 'syz.5.2881': attribute type 21 has an invalid length. [ 502.300357][T13687] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2881'. [ 502.538846][T13694] netlink: 'syz.7.2884': attribute type 2 has an invalid length. [ 502.600844][T13694] netlink: 'syz.7.2884': attribute type 1 has an invalid length. [ 503.607349][T13710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2890'. [ 503.624926][ T5877] Bluetooth: hci5: command 0x0406 tx timeout [ 504.438753][T13720] netlink: 'syz.5.2894': attribute type 4 has an invalid length. [ 504.564748][T13723] ªªªªªª: renamed from wg2 (while UP) [ 506.880806][T13757] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 506.888199][T13757] IPv6: NLM_F_CREATE should be set when creating new route [ 506.895620][T13757] IPv6: NLM_F_CREATE should be set when creating new route [ 506.902947][T13757] IPv6: NLM_F_CREATE should be set when creating new route [ 506.927188][T13756] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2905'. [ 506.937240][T13756] openvswitch: netlink: EtherType 0 is less than min 600 [ 507.324742][T13763] netlink: 'syz.7.2908': attribute type 10 has an invalid length. [ 507.391294][ T5863] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 507.410044][ T5863] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 507.420356][ T5863] CPU: 0 UID: 0 PID: 5863 Comm: kworker/u9:2 Not tainted 6.17.0-rc1-syzkaller-g07866544e410 #0 PREEMPT(full) [ 507.420389][ T5863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 507.420404][ T5863] Workqueue: hci1 hci_rx_work [ 507.420433][ T5863] Call Trace: [ 507.420443][ T5863] [ 507.420453][ T5863] dump_stack_lvl+0x189/0x250 [ 507.420489][ T5863] ? __pfx_dump_stack_lvl+0x10/0x10 [ 507.420517][ T5863] ? __pfx__printk+0x10/0x10 [ 507.420562][ T5863] ? kernfs_path_from_node+0x250/0x290 [ 507.420586][ T5863] ? kernfs_path_from_node+0x2f/0x290 [ 507.420619][ T5863] sysfs_create_dir_ns+0x259/0x280 [ 507.420658][ T5863] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 507.420687][ T5863] ? do_raw_spin_unlock+0x122/0x240 [ 507.420724][ T5863] kobject_add_internal+0x59f/0xb40 [ 507.420774][ T5863] kobject_add+0x155/0x220 [ 507.420817][ T5863] ? __pfx_kobject_add+0x10/0x10 [ 507.420854][ T5863] ? _raw_spin_unlock+0x28/0x50 [ 507.420888][ T5863] ? get_device_parent+0x366/0x3a0 [ 507.420919][ T5863] device_add+0x408/0xb50 [ 507.420950][ T5863] hci_conn_add_sysfs+0xd5/0x1e0 [ 507.420980][ T5863] le_conn_complete_evt+0xc3a/0x1220 [ 507.421025][ T5863] ? bt_warn+0x10b/0x160 [ 507.421051][ T5863] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 507.421084][ T5863] ? __pfx_bt_warn+0x10/0x10 [ 507.421103][ T5863] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 507.421144][ T5863] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 507.421176][ T5863] ? skb_pull_data+0xfb/0x200 [ 507.421211][ T5863] hci_le_conn_complete_evt+0x187/0x450 [ 507.421256][ T5863] hci_event_packet+0x78c/0x1200 [ 507.421288][ T5863] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 507.421324][ T5863] ? __pfx_hci_event_packet+0x10/0x10 [ 507.421360][ T5863] ? kcov_remote_start+0x4d3/0x7f0 [ 507.421391][ T5863] ? lockdep_hardirqs_on+0x90/0x150 [ 507.421427][ T5863] ? hci_send_to_monitor+0xe2/0x570 [ 507.421466][ T5863] hci_rx_work+0x46a/0xe80 [ 507.421506][ T5863] ? process_scheduled_works+0x9ef/0x17b0 [ 507.421533][ T5863] process_scheduled_works+0xade/0x17b0 [ 507.421609][ T5863] ? __pfx_process_scheduled_works+0x10/0x10 [ 507.421666][ T5863] worker_thread+0x8a0/0xda0 [ 507.421695][ T5863] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 507.421738][ T5863] ? __kthread_parkme+0x7b/0x200 [ 507.421780][ T5863] kthread+0x70e/0x8a0 [ 507.421815][ T5863] ? __pfx_worker_thread+0x10/0x10 [ 507.421839][ T5863] ? __pfx_kthread+0x10/0x10 [ 507.421873][ T5863] ? _raw_spin_unlock_irq+0x23/0x50 [ 507.421901][ T5863] ? lockdep_hardirqs_on+0x9c/0x150 [ 507.421936][ T5863] ? __pfx_kthread+0x10/0x10 [ 507.421968][ T5863] ret_from_fork+0x3f9/0x770 [ 507.421995][ T5863] ? __pfx_ret_from_fork+0x10/0x10 [ 507.422027][ T5863] ? __switch_to_asm+0x39/0x70 [ 507.422055][ T5863] ? __switch_to_asm+0x33/0x70 [ 507.422082][ T5863] ? __pfx_kthread+0x10/0x10 [ 507.422113][ T5863] ret_from_fork_asm+0x1a/0x30 [ 507.422169][ T5863] [ 507.712141][ T5863] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 507.726346][ T5863] Bluetooth: hci1: failed to register connection device [ 509.293318][T13770] debugfs: '!' already exists in 'ieee80211' [ 509.422990][T13782] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2914'. [ 509.784574][ T5877] Bluetooth: hci1: command 0x0406 tx timeout [ 509.807114][T13790] netlink: 'syz.5.2920': attribute type 10 has an invalid length. [ 509.815444][T13790] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2920'. [ 510.147233][ T5877] Bluetooth: hci1: unexpected event 0x3d length: 151 > 14 [ 510.883016][T13822] IPv6: NLM_F_CREATE should be specified when creating new route [ 512.249904][T13842] netlink: 'syz.6.2936': attribute type 10 has an invalid length. [ 513.675309][T13854] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2940'. [ 513.815924][T13865] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2946'. [ 514.119972][T13871] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2948'. [ 514.149341][T13873] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2949'. [ 514.400364][ T5877] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 514.409722][ T5877] Bluetooth: hci3: Invalid handle: 0x85b0 > 0x0eff [ 515.690407][T13895] netlink: 'syz.7.2956': attribute type 7 has an invalid length. [ 516.950365][T13915] netlink: 277 bytes leftover after parsing attributes in process `syz.7.2961'. [ 518.164029][ T5863] Bluetooth: hci5: ISO packet for unknown connection handle 0 [ 518.178490][ T5863] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 521.168104][ T5863] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 521.356714][T13984] netlink: 'syz.0.2989': attribute type 10 has an invalid length. [ 521.389216][T13984] team0: Device ip6_vti0 is of different type [ 524.593602][ T5863] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 525.228146][ T5877] ------------[ cut here ]------------ [ 525.241354][ T5877] WARNING: CPU: 1 PID: 5877 at net/bluetooth/hci_conn.c:568 hci_conn_timeout+0xff/0x290 [ 525.251207][ T5877] Modules linked in: [ 525.255477][ T5877] CPU: 1 UID: 0 PID: 5877 Comm: kworker/u9:8 Not tainted 6.17.0-rc1-syzkaller-g07866544e410 #0 PREEMPT(full) [ 525.267248][ T5877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 525.277427][ T5877] Workqueue: hci3 hci_conn_timeout [ 525.282854][ T5877] RIP: 0010:hci_conn_timeout+0xff/0x290 [ 525.288565][ T5877] Code: 48 89 df e8 23 05 09 00 eb 07 e8 ec b8 48 f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 37 ca fe ff e8 d2 b8 48 f7 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff [ 525.309480][ T5877] RSP: 0018:ffffc9000445fa50 EFLAGS: 00010293 [ 525.316155][ T5877] RAX: ffffffff8a76f2de RBX: ffff888023c28000 RCX: ffff888028f98000 [ 525.324489][ T5877] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 525.332892][ T5877] RBP: 00000000ffffffff R08: ffff888023c28013 R09: 1ffff11004785002 [ 525.340918][ T5877] R10: dffffc0000000000 R11: ffffed1004785003 R12: dffffc0000000000 [ 525.348988][ T5877] R13: ffff88801ffd7b18 R14: ffff888023c28948 R15: ffff888023c28010 [ 525.357320][ T5877] FS: 0000000000000000(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 525.366476][ T5877] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 525.373191][ T5877] CR2: 0000000000000000 CR3: 0000000074984000 CR4: 00000000003526f0 [ 525.381223][ T5877] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 525.389726][ T5877] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 525.397793][ T5877] Call Trace: [ 525.401937][ T5877] [ 525.405414][ T5877] ? process_scheduled_works+0x9ef/0x17b0 [ 525.411209][ T5877] process_scheduled_works+0xade/0x17b0 [ 525.416943][ T5877] ? __pfx_process_scheduled_works+0x10/0x10 [ 525.423082][ T5877] worker_thread+0x8a0/0xda0 [ 525.427735][ T5877] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 525.434237][ T5877] ? __kthread_parkme+0x7b/0x200 [ 525.439244][ T5877] kthread+0x70e/0x8a0 [ 525.443455][ T5877] ? __pfx_worker_thread+0x10/0x10 [ 525.448622][ T5877] ? __pfx_kthread+0x10/0x10 [ 525.453302][ T5877] ? preempt_schedule_thunk+0x16/0x30 [ 525.458745][ T5877] ? __pfx_kthread+0x10/0x10 [ 525.463895][ T5877] ret_from_fork+0x3f9/0x770 [ 525.468787][ T5877] ? __pfx_ret_from_fork+0x10/0x10 [ 525.474019][ T5877] ? __switch_to_asm+0x39/0x70 [ 525.478841][ T5877] ? __switch_to_asm+0x33/0x70 [ 525.483756][ T5877] ? __pfx_kthread+0x10/0x10 [ 525.488414][ T5877] ret_from_fork_asm+0x1a/0x30 [ 525.493366][ T5877] [ 525.496432][ T5877] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 525.503762][ T5877] CPU: 1 UID: 0 PID: 5877 Comm: kworker/u9:8 Not tainted 6.17.0-rc1-syzkaller-g07866544e410 #0 PREEMPT(full) [ 525.515538][ T5877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 525.526257][ T5877] Workqueue: hci3 hci_conn_timeout [ 525.531434][ T5877] Call Trace: [ 525.534759][ T5877] [ 525.537729][ T5877] dump_stack_lvl+0x99/0x250 [ 525.542374][ T5877] ? __asan_memcpy+0x40/0x70 [ 525.547016][ T5877] ? __pfx_dump_stack_lvl+0x10/0x10 [ 525.553114][ T5877] ? __pfx__printk+0x10/0x10 [ 525.557879][ T5877] vpanic+0x281/0x750 [ 525.561928][ T5877] ? __pfx__printk+0x10/0x10 [ 525.566727][ T5877] ? __pfx_vpanic+0x10/0x10 [ 525.571333][ T5877] ? is_bpf_text_address+0x292/0x2b0 [ 525.576707][ T5877] panic+0xb9/0xc0 [ 525.580485][ T5877] ? __pfx_panic+0x10/0x10 [ 525.584972][ T5877] __warn+0x31b/0x4b0 [ 525.589014][ T5877] ? hci_conn_timeout+0xff/0x290 [ 525.594012][ T5877] ? hci_conn_timeout+0xff/0x290 [ 525.599011][ T5877] report_bug+0x2be/0x4f0 [ 525.603399][ T5877] ? hci_conn_timeout+0xff/0x290 [ 525.608394][ T5877] ? hci_conn_timeout+0xff/0x290 [ 525.613375][ T5877] ? hci_conn_timeout+0x101/0x290 [ 525.618427][ T5877] handle_bug+0x84/0x160 [ 525.622691][ T5877] exc_invalid_op+0x1a/0x50 [ 525.627220][ T5877] asm_exc_invalid_op+0x1a/0x20 [ 525.632088][ T5877] RIP: 0010:hci_conn_timeout+0xff/0x290 [ 525.638190][ T5877] Code: 48 89 df e8 23 05 09 00 eb 07 e8 ec b8 48 f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 37 ca fe ff e8 d2 b8 48 f7 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff [ 525.657832][ T5877] RSP: 0018:ffffc9000445fa50 EFLAGS: 00010293 [ 525.663938][ T5877] RAX: ffffffff8a76f2de RBX: ffff888023c28000 RCX: ffff888028f98000 [ 525.671929][ T5877] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 525.679951][ T5877] RBP: 00000000ffffffff R08: ffff888023c28013 R09: 1ffff11004785002 [ 525.687962][ T5877] R10: dffffc0000000000 R11: ffffed1004785003 R12: dffffc0000000000 [ 525.695945][ T5877] R13: ffff88801ffd7b18 R14: ffff888023c28948 R15: ffff888023c28010 [ 525.703967][ T5877] ? hci_conn_timeout+0xfe/0x290 [ 525.708938][ T5877] ? process_scheduled_works+0x9ef/0x17b0 [ 525.714676][ T5877] process_scheduled_works+0xade/0x17b0 [ 525.720263][ T5877] ? __pfx_process_scheduled_works+0x10/0x10 [ 525.726363][ T5877] worker_thread+0x8a0/0xda0 [ 525.730970][ T5877] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 525.737351][ T5877] ? __kthread_parkme+0x7b/0x200 [ 525.742314][ T5877] kthread+0x70e/0x8a0 [ 525.746489][ T5877] ? __pfx_worker_thread+0x10/0x10 [ 525.751614][ T5877] ? __pfx_kthread+0x10/0x10 [ 525.756247][ T5877] ? preempt_schedule_thunk+0x16/0x30 [ 525.761733][ T5877] ? __pfx_kthread+0x10/0x10 [ 525.766342][ T5877] ret_from_fork+0x3f9/0x770 [ 525.770949][ T5877] ? __pfx_ret_from_fork+0x10/0x10 [ 525.776083][ T5877] ? __switch_to_asm+0x39/0x70 [ 525.780951][ T5877] ? __switch_to_asm+0x33/0x70 [ 525.785730][ T5877] ? __pfx_kthread+0x10/0x10 [ 525.790341][ T5877] ret_from_fork_asm+0x1a/0x30 [ 525.795147][ T5877] [ 525.798456][ T5877] Kernel Offset: disabled [ 525.802787][ T5877] Rebooting in 86400 seconds..