last executing test programs: 1m38.806785348s ago: executing program 4 (id=357): socket$kcm(0xf, 0x3, 0x2) r0 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x11000, 0x0, 0x0, 0x8, 0x3fa, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x800) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x830d}, 0x100805, 0x2, 0xfffffffe, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x8) sendmsg$kcm(r0, 0x0, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) close(r3) r4 = socket$kcm(0x2b, 0x1, 0x0) close(r4) r5 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r5, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r4) 1m37.7751944s ago: executing program 4 (id=365): socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000cc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr={0x0, 0x0, 0x0, 0x4}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x1, 0x1}]}, {0x0, [0x0, 0x0, 0x61, 0x61]}}, 0x0, 0x56, 0x0, 0x1}, 0x28) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8, 0x92, 0x3, 0x9, 0x0, 0x9, 0x73b81, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x1, 0x5}, 0x802, 0x1, 0x5, 0x9, 0x3, 0x8, 0x5, 0x0, 0x807f, 0x0, 0x7}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) sendmsg$inet(r2, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)='A', 0x1}], 0x1}, 0x4040) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400048000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x7ea174ca, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m36.765596938s ago: executing program 4 (id=371): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x4110, 0x0, 0x0, 0x8, 0x37e, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x3) close(0x4) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) 1m35.00184814s ago: executing program 4 (id=375): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300), 0x100000000000032c}, 0x20000080) r4 = gettid() syz_open_procfs$namespace(r4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @short={0x2, 0x0, 0x1555d}}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000180)="27031c00160014000200", 0xa}, {&(0x7f0000000280)="7d3ed2ea1f2f23edbb324820e73b5f4b1100201a03", 0x15}], 0x2}, 0x24000008) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 1m34.974048586s ago: executing program 1 (id=376): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB, @ANYRES32], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(0x0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2000000}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1c, 0x1, 0x7, 0x0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0xf}]}}, 0x0, 0x26}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m34.973253754s ago: executing program 3 (id=377): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)="ec", 0x1}], 0x1, &(0x7f0000000780)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) recvmsg$unix(r0, &(0x7f0000006c40)={0x0, 0x0, &(0x7f0000006bc0)=[{&(0x7f0000004880)=""/4096, 0x1000}], 0x1}, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0xc0045878, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r4 = socket$kcm(0x2c, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x11b, 0x2, &(0x7f0000000040)=r5, 0x4) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000014006b030231a6080c000af32c0cae93000f00e5aa000017d34460bc24ea000007000000000000002756f475ce36c2d13b48df0000ecb8f6ec63c9f4d493803fd88635a6d10000f8ea56a52600e6657594f1817d000000", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r3}, 0x8) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000004000000000000000000008500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPCTNL_MSG_CT_GET_STATS(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r7) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x5, 0x4, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x17, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x76}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m34.942515424s ago: executing program 0 (id=378): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xcd, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4, 0x7}, 0x114684, 0x713a, 0x100000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0xfffffffffffffffe}, 0x0, 0x2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xe}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x2002000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) write$cgroup_subtree(r1, 0x0, 0xfe33) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x80) 1m34.654085491s ago: executing program 2 (id=379): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000006c0)="1400000030000b07005a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x5, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) close(r3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={0x0, &(0x7f0000000700)=""/171, 0x47, 0xab, 0x1, 0x10001, 0x10000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x1d, &(0x7f00000004c0)=@raw=[@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x9}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @call={0x85, 0x0, 0x0, 0x8f}], &(0x7f0000000400)='GPL\x00', 0x7f, 0x9b, &(0x7f00000005c0)=""/155, 0x41100, 0x36, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000800)={0x0, 0x10}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x10, 0x7, 0x1}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000880)=[{0x3, 0x4, 0x3, 0x7}, {0x5, 0x5, 0xe, 0x5}, {0x3, 0x2, 0x8, 0x3}, {0x0, 0x1, 0x6, 0x2}, {0x5, 0x4}, {0x4, 0x5, 0xe}], 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) write$cgroup_devices(r5, &(0x7f0000000b00)={'c', ' *:* ', 'r\x00'}, 0x8) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r6, &(0x7f0000004600)={0x0, 0x0, &(0x7f00000045c0)={&(0x7f0000004580)={0x18, 0x3f9, 0x0, 0x70bd27, 0x25dfdbfb, {0x1}}, 0x18}}, 0x8010) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000b80)=@o_path={&(0x7f0000000b40)='./file0\x00', r5, 0x4000, r6}, 0x18) ioctl$SIOCSIFHWADDR(r5, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="603b429ee6d5"}) 1m34.184364366s ago: executing program 0 (id=380): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x8, 0x0, 0x6, 0xc0, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xf6f, 0x9ea1}}, 0x0, 0xffffffffffffffff, r0, 0x2) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x1, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000140), 0x2, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x6) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time_for_children\x00') 1m33.939385951s ago: executing program 3 (id=381): socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000cc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr={0x0, 0x0, 0x0, 0x4}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x1, 0x1}]}, {0x0, [0x0, 0x0, 0x61, 0x61]}}, 0x0, 0x56, 0x0, 0x1}, 0x28) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8, 0x92, 0x3, 0x9, 0x0, 0x9, 0x73b81, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x1, 0x5}, 0x802, 0x1, 0x5, 0x9, 0x3, 0x8, 0x5, 0x0, 0x807f, 0x0, 0x7}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$inet(r3, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)='A', 0x1}], 0x1}, 0x4040) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400048000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x7ea174ca, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m33.927142838s ago: executing program 2 (id=382): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/uts\x00') ioctl$PERF_EVENT_IOC_RESET(r2, 0x40049409, 0x3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES64=r1, @ANYRESDEC=r1], 0x50) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x114f, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x78, 0x1ef7}, 0x1000, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x7234, 0x0, 0x0, 0x0, 0x7}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff73, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e00)=@newtaction={0x50, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x3c, 0x1, [@m_sample={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x8}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x50}}, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x890c, &(0x7f0000000100)) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r6, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x2, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0xc800) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='mm_vmscan_lru_shrink_active\x00', r0, 0x0, 0x8}, 0x18) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)={0x14, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffc}}, 0x14}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000c80)=ANY=[], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 1m33.896279988s ago: executing program 1 (id=383): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa10000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000440)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x6c, 0x76}, [@call={0x27, 0x0, 0x0, 0x40000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r1 = socket(0x1d, 0x2, 0x6) sendmsg$inet_sctp(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x40088d4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x8000001946}, 0x0, 0x0, 0x0, 0x2, 0x3fe, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0x100000000000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) 1m33.697080431s ago: executing program 4 (id=384): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89a3, &(0x7f0000000900)={'bridge0\x00', @broadcast}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x13, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x8004}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x1000000}}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x6}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffff4, 0xfffffffffffffffc}, @map_fd={0x18, 0x9, 0x1, 0x0, r1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x4}, 0x94) r2 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) r4 = syz_clone(0x80, &(0x7f0000000100)="88600ddfc44d6be592a23a37", 0xc, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)="1cb0a4f35febc0b837af575aca0b8fd600182c417ce79a5b3ba0e0444f2891490695ba34d7c1d0e68219b066c00dd53078fa4c0b3a5a6ca14aa05e2901b7cf1c8532c5b9c3c64dec684ba4da1e221f1f25f2190d630235a03c6c123c68a8f9d588721163c587598824c3a5a17d305539c22373545ac308cf0b99fcb02f62c6dfa78361c3e3433e76cff3be856020b79a79a42f1e62798b61629325d18d86abd1d1c4a4f319ea4f4aa63ce5d762aa7a8d3f0fdf966a428a44c5443a6bd9348abd8a8a2f77664fc61ece86a90dcc178c522b") r5 = perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x83549, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x65f8, 0x94}, 0x231c, 0x4, 0x0, 0x1, 0x202, 0x0, 0x3}, r4, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) r6 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r6, 0x10e, 0xb, &(0x7f00000001c0), 0x4) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000038000b63d25a8064c15494f90324fc60", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeb0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x30}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89a2, &(0x7f0000000080)) write$cgroup_subtree(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="24000000660091ef"], 0xfe33) sendmsg$kcm(r3, &(0x7f0000000240)={&(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x80, 0x0}, 0x4000) 1m33.273785015s ago: executing program 1 (id=385): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x14068, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x451a, 0x0, 0x5, 0x8, 0x800000037e, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x30008001}, 0x4044) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x8000001946}, 0x0, 0x0, 0x0, 0x2, 0x3fe, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0x4, 0x0, 0x8}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000000}, 0x4000090) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x1}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0xa) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x2280, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0xa, 0x5, 0x0) 1m33.061340018s ago: executing program 2 (id=386): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000c80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x104000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x4, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r1, 0x58, &(0x7f00000000c0)}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000"], 0xcfa4) sendmsg$sock(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000f80), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001200)={0xffffffffffffffff, 0x20, &(0x7f00000011c0)={&(0x7f0000001040)=""/210, 0xd2, 0x0, &(0x7f0000001140)=""/117, 0x75}}, 0x10) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x79, 0x0, 0x0, 0xe7}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001280)=@generic={0x0, 0x0, 0x8}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000012c0)={0x1}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m32.959573345s ago: executing program 0 (id=387): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) setsockopt$sock_attach_bpf(r0, 0x6, 0x19, &(0x7f0000000ec0)=r1, 0x4) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8880, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4, @perf_bp={0x0, 0x6}, 0x4008, 0x3, 0x0, 0x6, 0x7, 0x4, 0x2, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x18) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="0213020902000000e4a17c4e2ca18baa", 0x10}], 0x1}, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r4, 0x110, 0x7, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newtaction={0x1c0, 0x30, 0xb, 0x40, 0xfffffffd, {}, [{0x1ac, 0x1, [@m_vlan={0x6c, 0x1, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x800, 0x0, 0x0, 0x15, 0x6}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xf97}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbmod={0x13c, 0xa, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xb}]}, {0xfe, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000206010200000000000000000000fffd14000780080011400000000005001500020000000500010006000000050005000a00000005000400000000000900020073797a300000000011000300686173683a6e6574"], 0x60}}, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000f00)="709b1edc20", 0x5}], 0x1}, 0x800) 1m32.939726646s ago: executing program 3 (id=388): r0 = socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x8000001946}, 0x0, 0x0, 0x0, 0x2, 0x3fe, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) close(r1) socket$kcm(0x10, 0x400000002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8912, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20008080) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000004}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="d80000001e0001054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a50254cca9e00360db798262f3d40fad95667e006dcdff11a49b1328d9dd74977efd563951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a9295", 0xd8}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) socket$kcm(0x29, 0xf, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYRESDEC=r0], &(0x7f0000000200)='GPL\x00', 0x2f9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 1m32.836525982s ago: executing program 2 (id=389): r0 = socket$kcm(0x2a, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x67ab, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000008000000", @ANYBLOB], 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$kcm(0x10, 0x2, 0x0) fstat(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1128586c, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbca313a181003f00000000010000001000b10e978dec72ce000000800200121f", 0x2e}], 0x1}, 0x44000) sendmsg$nl_xfrm(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, 0x0}, 0x34008055) r6 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r6, 0x0, 0x20000011) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4004090) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x19, &(0x7f0000000400)=@ringbuf={{}, {}, {}, [@ringbuf_output, @call={0x85, 0x0, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000f80), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001040)={0x6, 0x0, 0x0, 0x0, 0xca1d, 0xf0, &(0x7f00000007c0)=""/240, 0x41000, 0x6a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000cc0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000d00)={0x4, 0xa, 0x5b6d}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001000)=[{0x0, 0x4, 0x4, 0x1}, {0x0, 0x4, 0x10, 0x4}], 0x10, 0x1}, 0x94) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872460dba78b) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c004) 1m32.723474898s ago: executing program 1 (id=390): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r6 = socket$packet(0x11, 0x2, 0x300) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x7, 0xa}, {0x6, 0x4}, {0x4, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000880) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x2, 0x9, 0x2, 0x48b81, 0xffffffffffffffff, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0xb}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x80d1) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8011}, 0x844) 1m32.712351771s ago: executing program 0 (id=391): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0xffffffffffffffff, 0xffffffff7fffffff}, 0x0, 0xca, 0x6, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x2, 0x56d, 0x3, 0x2, 0xffffffffffffffff, 0x4}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff2, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407ffd, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x7, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xb0}, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x5, 0x83501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x940, 0x1, 0x0, 0x0, 0x6d1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x23, 0x2, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r6, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRES8=r7], 0x12) 1m32.618327145s ago: executing program 3 (id=392): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000540)=@id={0x1e, 0x3, 0x0, {0x4e23}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000081}, 0x20050) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="bc00"], 0x50) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c210000000000202020", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m31.825400508s ago: executing program 0 (id=393): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115001d000200142603600e12080005007a010401a8001600200003400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x9b, &(0x7f0000000480)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x44, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000008c0)={0x80000000}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000900)={0x0, 0x9, 0x8}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x23, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={r2, 0x20, &(0x7f0000000080)={&(0x7f0000001680)=""/4098, 0x1002, 0x0, &(0x7f0000000000)=""/65, 0x41}}, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d0f4700000000000055a1180015000600142603600e120900210000000401a8001600a40001", 0x37}, {&(0x7f0000000080)="e656a6f4", 0x4}, {&(0x7f0000000640)="e440d3ed50fed23301b77619aa3bea44add7422b8452524c7ad03455b99f67889030f6234df1733197a74d009e43e7cd030aa5235faae2209d27cc047382d4676e888a8cf8e9a8b378aa501d517add39d0dfcda1b3d27dbbd1648140d2a7f0475dc2a1d077d4147424fa9a476d3d4995926e475ba5d0f3a54c2c31c995290bd7cff4bc0842876fe69b4d3692ed803de439bb2b90151933c64841f06276", 0x9d}], 0x3}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x300f000, 0x7, 0x0, &(0x7f0000000080)="0069c2704ade28", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_ext={0x1c, 0x1, &(0x7f0000000700)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0xe811, 0xc1, &(0x7f0000000280)=""/193, 0x41100, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xe7fb, 0xffffffffffffffff, 0x3, &(0x7f00000003c0)=[0xffffffffffffffff, 0x1], &(0x7f0000000400)=[{0x1, 0x1, 0xe, 0x1}, {0x1, 0x4, 0xa, 0x5}, {0x2, 0x1, 0xc}], 0x10, 0x5}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815001b000605142603600e12080005007a010401a800160020e0034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993b134e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db79826521340fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x44000) socket$nl_netfilter(0x10, 0x3, 0xc) 1m31.82032317s ago: executing program 1 (id=394): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d", 0x377}], 0x1, 0x0, 0x6b}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7ffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x0, 0x0, 0x2, 0x0, 0xb, 0x6}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0xd}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22ff892f"], 0xffbf) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x0) 1m31.680511552s ago: executing program 3 (id=395): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa10000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000440)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x6c, 0x76}, [@call={0x27, 0x0, 0x0, 0x40000000}]}, &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r1 = socket(0x1d, 0x2, 0x6) sendmsg$inet_sctp(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x40088d4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x8000001946}, 0x0, 0x0, 0x0, 0x2, 0x3fe, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0x100000000000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) 1m31.559540531s ago: executing program 2 (id=396): socket$kcm(0x2, 0x922000000001, 0x106) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) openat$cgroup(r1, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe3a) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000a81a18d0b572a8c3cf70aae9d784efa4203f0b9ca0c212d1d74465ee7df834167184ab8ba30bb311fba80491cb8a24625e2bc414cc4a1a6f62a9c1c3e", @ANYRES32=0x0, @ANYBLOB], 0x1b) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000284000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0x124}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1m31.484690755s ago: executing program 3 (id=397): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x8, 0x0, 0x6, 0xc0, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xf6f, 0x9ea1}}, 0x0, 0xffffffffffffffff, r0, 0x2) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x1, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000140), 0x2, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x6) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time_for_children\x00') 1m31.366664025s ago: executing program 4 (id=398): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x23, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x7, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)='A', 0x1}], 0x1}, 0x4040) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400048000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x7ea174ca, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m31.292336081s ago: executing program 2 (id=399): socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000cc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr={0x0, 0x0, 0x0, 0x4}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x1, 0x1}]}, {0x0, [0x0, 0x0, 0x61, 0x61]}}, 0x0, 0x56, 0x0, 0x1}, 0x28) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8, 0x92, 0x3, 0x9, 0x0, 0x9, 0x73b81, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x1, 0x5}, 0x802, 0x1, 0x5, 0x9, 0x3, 0x8, 0x5, 0x0, 0x807f, 0x0, 0x7}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$inet(r3, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)='A', 0x1}], 0x1}, 0x4040) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400048000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x7ea174ca, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m31.216331594s ago: executing program 0 (id=400): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r2, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f00000006c0)=[{}], 0x8, 0x10, &(0x7f0000000700), 0x0, 0x0, 0xee, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func={0x8, 0x0, 0x0, 0xc, 0x4}, @restrict={0x3, 0x0, 0x0, 0xb, 0x5}, @volatile={0xf, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x61, 0x0]}}, &(0x7f0000000980)=""/101, 0x40, 0x65, 0x1, 0x8, 0x10000}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=@bloom_filter={0x1e, 0x9, 0x8, 0x5, 0x401, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0x5}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r7}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r8, &(0x7f00000002c0), 0x0}, 0x20) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e40)=@o_path={&(0x7f0000000e00)='./file0\x00', 0x0, 0x10, r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0xc, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x48c, 0xee, &(0x7f0000000500)=""/238, 0x41000, 0x20, '\x00', r3, @fallback=0x4, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x2, 0xb, 0x6, 0x67}, 0x10, 0x0, r2, 0x1, &(0x7f0000000e80)=[0x1, r5, r6, r8, r9, r6], &(0x7f0000000ec0)=[{0x3, 0x1, 0xa, 0x1}], 0x10, 0x7}, 0x94) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4}, 0x50) r12 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r12, 0x29, 0x11, &(0x7f0000000000), 0x4) 43.676581746s ago: executing program 1 (id=401): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x2000c010) close(0xffffffffffffffff) r1 = socket$kcm(0x2d, 0x2, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000500)={0x20}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r2, 0x2000012, 0x0, 0x0, &(0x7f0000000c40), 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x2d, 0x0, 0x0, 0x7}, 0x80, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000200)=r3, 0x4) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r3, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000003c0)=[0x0], &(0x7f0000000740)=[0x0], 0x0, 0xe3, &(0x7f0000000900)=[{}, {}], 0x10, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0x61, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) 0s ago: executing program 32 (id=400): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r2, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f00000006c0)=[{}], 0x8, 0x10, &(0x7f0000000700), 0x0, 0x0, 0xee, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func={0x8, 0x0, 0x0, 0xc, 0x4}, @restrict={0x3, 0x0, 0x0, 0xb, 0x5}, @volatile={0xf, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x61, 0x0]}}, &(0x7f0000000980)=""/101, 0x40, 0x65, 0x1, 0x8, 0x10000}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=@bloom_filter={0x1e, 0x9, 0x8, 0x5, 0x401, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0x5}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r7}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r8, &(0x7f00000002c0), 0x0}, 0x20) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e40)=@o_path={&(0x7f0000000e00)='./file0\x00', 0x0, 0x10, r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0xc, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x48c, 0xee, &(0x7f0000000500)=""/238, 0x41000, 0x20, '\x00', r3, @fallback=0x4, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x2, 0xb, 0x6, 0x67}, 0x10, 0x0, r2, 0x1, &(0x7f0000000e80)=[0x1, r5, r6, r8, r9, r6], &(0x7f0000000ec0)=[{0x3, 0x1, 0xa, 0x1}], 0x10, 0x7}, 0x94) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4}, 0x50) r12 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r12, 0x29, 0x11, &(0x7f0000000000), 0x4) kernel console output (not intermixed with test programs): 70.998027][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.024431][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.179576][ T5866] hsr_slave_0: entered promiscuous mode [ 71.185950][ T5866] hsr_slave_1: entered promiscuous mode [ 71.191924][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 71.197992][ T5866] Cannot create hsr debugfs directory [ 71.288270][ T5860] hsr_slave_0: entered promiscuous mode [ 71.295214][ T5860] hsr_slave_1: entered promiscuous mode [ 71.301451][ T5860] debugfs: 'hsr0' already exists in 'hsr' [ 71.307250][ T5860] Cannot create hsr debugfs directory [ 71.322531][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.329303][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.726394][ T5864] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.768787][ T5864] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.787262][ T5864] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.813455][ T5864] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.873471][ T5859] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.900857][ T5859] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.912065][ T5859] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.926554][ T5859] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.001604][ T5861] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.028831][ T5861] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.040363][ T5861] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.051049][ T5861] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.131689][ T5866] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.141916][ T5866] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.154756][ T5866] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.190300][ T5866] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.214727][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.311972][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.331710][ T5860] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.347570][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.355193][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.378295][ T5860] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.388274][ T5860] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.401281][ T5860] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.432935][ T5865] Bluetooth: hci4: command tx timeout [ 72.433117][ T5876] Bluetooth: hci0: command tx timeout [ 72.438352][ T5865] Bluetooth: hci3: command tx timeout [ 72.446944][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.456442][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.512889][ T5865] Bluetooth: hci2: command tx timeout [ 72.524227][ T5865] Bluetooth: hci1: command tx timeout [ 72.524707][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.601535][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.619711][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.637372][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.644486][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.682585][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.691517][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.698627][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.757564][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.764752][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.821783][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.828974][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.860351][ T5861] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.875399][ T5861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.947449][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.968837][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.051996][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.106706][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.113893][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.131466][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.161990][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.169187][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.186803][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.228243][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.235424][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.268133][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.275326][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.448039][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.526074][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.672697][ T5861] veth0_vlan: entered promiscuous mode [ 73.735731][ T5861] veth1_vlan: entered promiscuous mode [ 73.746855][ T5859] veth0_vlan: entered promiscuous mode [ 73.860544][ T5859] veth1_vlan: entered promiscuous mode [ 73.957388][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.971754][ T5861] veth0_macvtap: entered promiscuous mode [ 73.982090][ T5864] veth0_vlan: entered promiscuous mode [ 73.997218][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.017148][ T5861] veth1_macvtap: entered promiscuous mode [ 74.030659][ T5859] veth0_macvtap: entered promiscuous mode [ 74.045539][ T5864] veth1_vlan: entered promiscuous mode [ 74.062080][ T5859] veth1_macvtap: entered promiscuous mode [ 74.079169][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.109198][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.161034][ T44] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.170699][ T44] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.197749][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.205256][ T1039] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.214344][ T1039] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.237397][ T5860] veth0_vlan: entered promiscuous mode [ 74.245339][ T5866] veth0_vlan: entered promiscuous mode [ 74.258872][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.307526][ T5866] veth1_vlan: entered promiscuous mode [ 74.316406][ T5864] veth0_macvtap: entered promiscuous mode [ 74.324092][ T44] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.335085][ T44] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.345133][ T5860] veth1_vlan: entered promiscuous mode [ 74.368040][ T5864] veth1_macvtap: entered promiscuous mode [ 74.378253][ T44] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.397613][ T44] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.469411][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.486548][ T3593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.500496][ T5866] veth0_macvtap: entered promiscuous mode [ 74.503230][ T3593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.514870][ T5865] Bluetooth: hci3: command tx timeout [ 74.520277][ T5865] Bluetooth: hci0: command tx timeout [ 74.522863][ T5876] Bluetooth: hci4: command tx timeout [ 74.548518][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.576429][ T1039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.577792][ T5866] veth1_macvtap: entered promiscuous mode [ 74.587564][ T1039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.600001][ T5876] Bluetooth: hci1: command tx timeout [ 74.600275][ T5865] Bluetooth: hci2: command tx timeout [ 74.619795][ T5860] veth0_macvtap: entered promiscuous mode [ 74.637809][ T5860] veth1_macvtap: entered promiscuous mode [ 74.670859][ T1039] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.681027][ T1039] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.697945][ T1039] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.710230][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.718185][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.727770][ T1039] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.761805][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.778763][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.815609][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.835241][ T3593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.836959][ T5861] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.848920][ T3593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.870368][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.897654][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.942186][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.985529][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.032699][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.111479][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.131350][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.171409][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.184262][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.197145][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.209203][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.275923][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.299464][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.425939][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.453118][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.610692][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.660718][ T3593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.698856][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.713907][ T3593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.797518][ T5994] Zero length message leads to an empty skb [ 75.898899][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.945676][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.978249][ T6000] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.9'. [ 76.008618][ T5999] netlink: 'syz.2.10': attribute type 20 has an invalid length. [ 76.021822][ T5999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10'. [ 76.068449][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9'. [ 76.146922][ T5999] netlink: 'syz.2.10': attribute type 21 has an invalid length. [ 76.217975][ T5999] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10'. [ 76.382432][ C0] hrtimer: interrupt took 59753 ns [ 76.593283][ T5865] Bluetooth: hci0: command tx timeout [ 76.598877][ T5865] Bluetooth: hci3: command tx timeout [ 76.637456][ T5865] Bluetooth: hci4: command tx timeout [ 76.684498][ T5865] Bluetooth: hci2: command tx timeout [ 76.812733][ T5876] Bluetooth: hci1: command tx timeout [ 77.273758][ T6024] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.840102][ T6033] warning: `syz.4.14' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 78.111755][ T6038] netlink: 32 bytes leftover after parsing attributes in process `syz.2.18'. [ 78.196766][ T6038] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 78.205832][ T24] cfg80211: failed to load regulatory.db [ 78.701741][ T6052] lo speed is unknown, defaulting to 1000 [ 78.733768][ T6052] lo speed is unknown, defaulting to 1000 [ 78.740458][ T6055] netlink: 17 bytes leftover after parsing attributes in process `syz.1.24'. [ 78.754444][ T6055] netlink: zone id is out of range [ 78.769165][ T6055] netlink: zone id is out of range [ 78.780781][ T6052] lo speed is unknown, defaulting to 1000 [ 78.795113][ T6055] netlink: zone id is out of range [ 78.802210][ T6051] netlink: 'syz.3.23': attribute type 10 has an invalid length. [ 78.921213][ T6052] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 78.933333][ T6055] netlink: zone id is out of range [ 78.959072][ T6055] netlink: zone id is out of range [ 78.989111][ T6055] netlink: zone id is out of range [ 79.017493][ T6055] netlink: zone id is out of range [ 79.108548][ T6055] netlink: zone id is out of range [ 79.157053][ T6055] netlink: zone id is out of range [ 79.217115][ T6052] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 79.239487][ T6051] team0: Port device geneve1 added [ 79.396077][ T6066] syz.1.24 (6066) used obsolete PPPIOCDETACH ioctl [ 79.403329][ T6052] lo speed is unknown, defaulting to 1000 [ 79.463483][ T6052] lo speed is unknown, defaulting to 1000 [ 79.475974][ T6052] lo speed is unknown, defaulting to 1000 [ 79.484152][ T6052] lo speed is unknown, defaulting to 1000 [ 79.493720][ T6052] lo speed is unknown, defaulting to 1000 [ 79.623432][ T6051] syz.3.23 (6051) used greatest stack depth: 18232 bytes left [ 79.780193][ T6070] netlink: 'syz.3.27': attribute type 10 has an invalid length. [ 79.813749][ T6070] veth1_vlan: entered allmulticast mode [ 79.926639][ T6070] team0: Device veth1_vlan failed to register rx_handler [ 80.170105][ T6082] netlink: 830 bytes leftover after parsing attributes in process `syz.0.29'. [ 80.558484][ T6089] lo speed is unknown, defaulting to 1000 [ 80.635557][ T6091] netlink: 40 bytes leftover after parsing attributes in process `syz.4.32'. [ 80.685053][ T6091] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.819332][ T6091] bridge_slave_0 (unregistering): left allmulticast mode [ 80.826478][ T6091] bridge_slave_0 (unregistering): left promiscuous mode [ 80.833840][ T6091] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.236929][ T6099] netlink: 'syz.1.33': attribute type 2 has an invalid length. [ 81.268889][ T6099] netlink: 'syz.1.33': attribute type 7 has an invalid length. [ 81.288112][ T6099] netlink: 85 bytes leftover after parsing attributes in process `syz.1.33'. [ 81.338760][ T6099] netlink: 130140 bytes leftover after parsing attributes in process `syz.1.33'. [ 81.384966][ T6099] netlink: 'syz.1.33': attribute type 2 has an invalid length. [ 81.424709][ T6099] netlink: 'syz.1.33': attribute type 7 has an invalid length. [ 81.454302][ T6099] netlink: 85 bytes leftover after parsing attributes in process `syz.1.33'. [ 83.982958][ T6142] netlink: 'syz.1.44': attribute type 10 has an invalid length. [ 84.070349][ T6144] netlink: 'syz.4.45': attribute type 10 has an invalid length. [ 84.079911][ T6142] team0: Port device geneve1 added [ 84.166683][ T6144] macvlan0: entered allmulticast mode [ 84.215569][ T6144] veth1_vlan: entered allmulticast mode [ 84.239208][ T6144] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 85.346292][ T6173] netlink: 360 bytes leftover after parsing attributes in process `syz.3.52'. [ 85.365192][ T6177] netlink: 'syz.1.53': attribute type 4 has an invalid length. [ 85.385406][ T6177] netlink: 152 bytes leftover after parsing attributes in process `syz.1.53'. [ 85.447234][ T6177] net_ratelimit: 76 callbacks suppressed [ 85.447266][ T6177] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 85.467433][ T6176] Driver unsupported XDP return value 0 on prog (id 53) dev N/A, expect packet loss! [ 85.482005][ T6182] netlink: 'syz.0.55': attribute type 10 has an invalid length. [ 85.492572][ T6182] netlink: 168 bytes leftover after parsing attributes in process `syz.0.55'. [ 85.817377][ T6190] netlink: 'syz.2.58': attribute type 10 has an invalid length. [ 85.868999][ T6190] netlink: 40 bytes leftover after parsing attributes in process `syz.2.58'. [ 85.887195][ T6190] team0: entered promiscuous mode [ 85.895192][ T6190] team_slave_0: entered promiscuous mode [ 85.901975][ T6190] team_slave_1: entered promiscuous mode [ 85.946136][ T6190] team0: entered allmulticast mode [ 85.960454][ T6190] team_slave_0: entered allmulticast mode [ 85.975305][ T6190] team_slave_1: entered allmulticast mode [ 85.997829][ T6190] bridge0: port 3(team0) entered blocking state [ 86.015717][ T6190] bridge0: port 3(team0) entered disabled state [ 86.072244][ T6190] bridge0: port 3(team0) entered blocking state [ 86.079235][ T6190] bridge0: port 3(team0) entered forwarding state [ 86.310363][ T6204] netlink: 'syz.2.61': attribute type 10 has an invalid length. [ 86.328713][ T6204] macvlan0: entered allmulticast mode [ 86.362700][ T6204] veth1_vlan: entered allmulticast mode [ 86.385316][ T6204] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 86.441400][ T6205] netlink: 'syz.4.62': attribute type 10 has an invalid length. [ 86.469593][ T6208] ======================================================= [ 86.469593][ T6208] WARNING: The mand mount option has been deprecated and [ 86.469593][ T6208] and is ignored by this kernel. Remove the mand [ 86.469593][ T6208] option from the mount to silence this warning. [ 86.469593][ T6208] ======================================================= [ 86.501469][ T6205] team0: Port device geneve1 added [ 88.352081][ T6226] netlink: 'syz.2.71': attribute type 10 has an invalid length. [ 88.364636][ T6224] netlink: 'syz.3.68': attribute type 20 has an invalid length. [ 88.391163][ T6226] netlink: 40 bytes leftover after parsing attributes in process `syz.2.71'. [ 88.661127][ T6232] netlink: 'syz.4.72': attribute type 10 has an invalid length. [ 88.673700][ T6232] netlink: 40 bytes leftover after parsing attributes in process `syz.4.72'. [ 88.922224][ T6232] team0: entered promiscuous mode [ 88.937668][ T6232] team_slave_0: entered promiscuous mode [ 88.983816][ T6232] team_slave_1: entered promiscuous mode [ 89.015331][ T6232] geneve1: entered promiscuous mode [ 89.027027][ T6232] team0: entered allmulticast mode [ 89.063550][ T6232] team_slave_0: entered allmulticast mode [ 89.081757][ T6232] team_slave_1: entered allmulticast mode [ 89.114036][ T6232] geneve1: entered allmulticast mode [ 89.153556][ T6232] bridge0: port 1(team0) entered blocking state [ 89.191048][ T6232] bridge0: port 1(team0) entered disabled state [ 89.239695][ T6232] bridge0: port 1(team0) entered blocking state [ 89.246499][ T6232] bridge0: port 1(team0) entered forwarding state [ 89.581811][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.749984][ T6249] netlink: 'syz.1.76': attribute type 10 has an invalid length. [ 89.789063][ T6249] netlink: 168 bytes leftover after parsing attributes in process `syz.1.76'. [ 90.764811][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.980099][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.263352][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.480656][ T5865] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.506831][ T5865] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.515970][ T5865] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.525822][ T5865] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.533956][ T5865] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.552280][ T6277] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 93.587165][ T6274] lo speed is unknown, defaulting to 1000 [ 93.633007][ T5865] Bluetooth: hci3: command tx timeout [ 93.678496][ T6285] netlink: 'syz.1.88': attribute type 10 has an invalid length. [ 93.703831][ T6285] netlink: 40 bytes leftover after parsing attributes in process `syz.1.88'. [ 93.727360][ T6285] team0: entered promiscuous mode [ 93.732461][ T6285] team_slave_0: entered promiscuous mode [ 93.744359][ T6285] team_slave_1: entered promiscuous mode [ 93.761214][ T6285] geneve1: entered promiscuous mode [ 93.770654][ T6285] team0: entered allmulticast mode [ 93.784635][ T6285] team_slave_0: entered allmulticast mode [ 93.804627][ T6285] team_slave_1: entered allmulticast mode [ 93.810542][ T6285] geneve1: entered allmulticast mode [ 93.838730][ T6285] bridge0: port 3(team0) entered blocking state [ 93.851450][ T6285] bridge0: port 3(team0) entered disabled state [ 93.881876][ T6285] bridge0: port 3(team0) entered blocking state [ 93.888638][ T6285] bridge0: port 3(team0) entered forwarding state [ 94.183043][ T36] bridge_slave_1: left allmulticast mode [ 94.204744][ T36] bridge_slave_1: left promiscuous mode [ 94.227391][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.293312][ T36] bridge_slave_0: left allmulticast mode [ 94.322386][ T36] bridge_slave_0: left promiscuous mode [ 94.330771][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.293394][ T5876] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.304240][ T5876] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.312066][ T5876] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.321292][ T5876] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.329908][ T5876] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.330517][ T6321] netlink: 'syz.3.94': attribute type 10 has an invalid length. [ 95.352101][ T6321] netlink: 40 bytes leftover after parsing attributes in process `syz.3.94'. [ 95.751752][ T5876] Bluetooth: hci3: command tx timeout [ 96.210395][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.221596][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.231746][ T36] bond0 (unregistering): Released all slaves [ 96.249155][ T6321] team0: entered promiscuous mode [ 96.258340][ T6321] team_slave_0: entered promiscuous mode [ 96.264486][ T6321] team_slave_1: entered promiscuous mode [ 96.270324][ T6321] geneve1: entered promiscuous mode [ 96.291466][ T6321] team0: entered allmulticast mode [ 96.301483][ T6321] team_slave_0: entered allmulticast mode [ 96.311783][ T6321] team_slave_1: entered allmulticast mode [ 96.319923][ T6321] geneve1: entered allmulticast mode [ 96.327653][ T6321] bridge0: port 3(team0) entered blocking state [ 96.335515][ T6321] bridge0: port 3(team0) entered disabled state [ 96.349207][ T6321] bridge0: port 3(team0) entered blocking state [ 96.355587][ T6321] bridge0: port 3(team0) entered forwarding state [ 96.549169][ T6320] lo speed is unknown, defaulting to 1000 [ 96.593427][ T6336] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 97.015401][ T36] hsr_slave_0: left promiscuous mode [ 97.054621][ T36] hsr_slave_1: left promiscuous mode [ 97.086989][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.124881][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.167031][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.191802][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.220478][ T6357] netlink: 'syz.2.104': attribute type 10 has an invalid length. [ 97.256496][ T6357] netlink: 40 bytes leftover after parsing attributes in process `syz.2.104'. [ 97.259560][ T36] veth1_macvtap: left promiscuous mode [ 97.272211][ T36] veth0_macvtap: left promiscuous mode [ 97.280963][ T36] veth1_vlan: left promiscuous mode [ 97.287820][ T36] veth0_vlan: left promiscuous mode [ 97.472725][ T5876] Bluetooth: hci4: command tx timeout [ 97.763503][ T36] team0 (unregistering): Port device team_slave_1 removed [ 97.792844][ T5876] Bluetooth: hci3: command tx timeout [ 97.799228][ T36] team0 (unregistering): Port device team_slave_0 removed [ 98.187264][ T6274] chnl_net:caif_netlink_parms(): no params data found [ 98.385387][ T5876] Bluetooth: hci2: unexpected subevent 0x1a length: 150 > 6 [ 98.852071][ T6274] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.875646][ T6274] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.893164][ T6274] bridge_slave_0: entered allmulticast mode [ 98.917059][ T6274] bridge_slave_0: entered promiscuous mode [ 98.927148][ T6320] chnl_net:caif_netlink_parms(): no params data found [ 98.930078][ T6387] netlink: 'syz.2.108': attribute type 10 has an invalid length. [ 98.961495][ T6387] netlink: 40 bytes leftover after parsing attributes in process `syz.2.108'. [ 98.975109][ T6274] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.992481][ T6274] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.009382][ T6274] bridge_slave_1: entered allmulticast mode [ 99.033489][ T6274] bridge_slave_1: entered promiscuous mode [ 99.493491][ T6274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.514270][ T5865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.523219][ T5865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.538426][ T5865] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.553354][ T51] Bluetooth: hci4: command tx timeout [ 99.559963][ T5865] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.567883][ T5865] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.586208][ T6274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.718907][ T6274] team0: Port device team_slave_0 added [ 99.821159][ T6404] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 99.848211][ T6274] team0: Port device team_slave_1 added [ 99.873195][ T5865] Bluetooth: hci3: command tx timeout [ 100.022053][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.057656][ T6274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.072393][ T6274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.101001][ T6274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.114699][ T6320] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.129741][ T6320] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.137886][ T6320] bridge_slave_0: entered allmulticast mode [ 100.145362][ T6320] bridge_slave_0: entered promiscuous mode [ 100.154202][ T6320] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.161353][ T6320] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.170539][ T6320] bridge_slave_1: entered allmulticast mode [ 100.179057][ T6320] bridge_slave_1: entered promiscuous mode [ 100.205352][ T6274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.212484][ T6274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.240844][ T6274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.289256][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.337207][ T6397] lo speed is unknown, defaulting to 1000 [ 100.339914][ T6320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.371990][ T6320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.499650][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.752499][ T6274] hsr_slave_0: entered promiscuous mode [ 100.766752][ T6274] hsr_slave_1: entered promiscuous mode [ 100.775441][ T6274] debugfs: 'hsr0' already exists in 'hsr' [ 100.781213][ T6274] Cannot create hsr debugfs directory [ 100.901687][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.951633][ T6320] team0: Port device team_slave_0 added [ 101.066467][ T6320] team0: Port device team_slave_1 added [ 101.421982][ T6320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.437653][ T6320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.494362][ T6320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.525310][ T6320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.552867][ T6320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.605903][ T6320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.643426][ T5865] Bluetooth: hci0: command tx timeout [ 101.649251][ T5865] Bluetooth: hci4: command tx timeout [ 102.012332][ T6320] hsr_slave_0: entered promiscuous mode [ 102.046980][ T6320] hsr_slave_1: entered promiscuous mode [ 102.066760][ T6320] debugfs: 'hsr0' already exists in 'hsr' [ 102.081252][ T5876] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 102.090152][ T5876] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 102.094248][ T6320] Cannot create hsr debugfs directory [ 102.097916][ T5876] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 102.111023][ T5876] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 102.119014][ T5876] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 102.357666][ T36] bridge0: port 3(team0) entered disabled state [ 102.374548][ T36] bridge_slave_1: left allmulticast mode [ 102.380310][ T36] bridge_slave_1: left promiscuous mode [ 102.390637][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.408903][ T36] bridge_slave_0: left allmulticast mode [ 102.418579][ T36] bridge_slave_0: left promiscuous mode [ 102.427070][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.590348][ T36] geneve1 (unregistering): left promiscuous mode [ 102.599088][ T36] geneve1 (unregistering): left allmulticast mode [ 102.609242][ T36] team0: Port device geneve1 removed [ 102.735396][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.747433][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.759743][ T36] bond0 (unregistering): Released all slaves [ 103.005732][ T6447] netlink: 'syz.2.119': attribute type 4 has an invalid length. [ 103.014009][ T6447] netlink: 152 bytes leftover after parsing attributes in process `syz.2.119'. [ 103.108020][ T6447] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 103.142839][ T6438] lo speed is unknown, defaulting to 1000 [ 103.192063][ T6397] chnl_net:caif_netlink_parms(): no params data found [ 103.290537][ T6449] netlink: 156 bytes leftover after parsing attributes in process `syz.2.120'. [ 103.517246][ T36] hsr_slave_0: left promiscuous mode [ 103.551060][ T6454] netlink: 'syz.2.121': attribute type 10 has an invalid length. [ 103.564812][ T36] hsr_slave_1: left promiscuous mode [ 103.570047][ T6454] netlink: 40 bytes leftover after parsing attributes in process `syz.2.121'. [ 103.581065][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.581114][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.607735][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.625785][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.713443][ T5876] Bluetooth: hci4: command tx timeout [ 103.719228][ T5865] Bluetooth: hci0: command tx timeout [ 103.739896][ T36] veth1_macvtap: left promiscuous mode [ 103.748626][ T36] veth0_macvtap: left promiscuous mode [ 103.899773][ T36] veth0_vlan: left promiscuous mode [ 104.378035][ T5876] Bluetooth: hci1: command tx timeout [ 104.609419][ T36] team_slave_1 (unregistering): left promiscuous mode [ 104.617898][ T36] team_slave_1 (unregistering): left allmulticast mode [ 104.625823][ T36] team0 (unregistering): Port device team_slave_1 removed [ 104.653199][ T36] team_slave_0 (unregistering): left promiscuous mode [ 104.659971][ T36] team_slave_0 (unregistering): left allmulticast mode [ 104.668589][ T36] team0 (unregistering): Port device team_slave_0 removed [ 105.094829][ T6397] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.122557][ T6397] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.129975][ T6397] bridge_slave_0: entered allmulticast mode [ 105.150721][ T6397] bridge_slave_0: entered promiscuous mode [ 105.177315][ T6397] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.186576][ T6397] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.193982][ T6397] bridge_slave_1: entered allmulticast mode [ 105.201741][ T6397] bridge_slave_1: entered promiscuous mode [ 105.328824][ T6397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.343981][ T6397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.456972][ T6397] team0: Port device team_slave_0 added [ 105.482286][ T6397] team0: Port device team_slave_1 added [ 105.546875][ T6438] chnl_net:caif_netlink_parms(): no params data found [ 105.567565][ T6481] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 105.605853][ T6397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.612973][ T6397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.639352][ T6397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.679993][ T6397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.702844][ T6397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.729602][ T6397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.778220][ T6274] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.792866][ T5876] Bluetooth: hci0: command tx timeout [ 105.809957][ T6320] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.845425][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.890377][ T6274] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.901539][ T6274] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.917897][ T6274] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.937966][ T6320] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.051694][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.073917][ T6320] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.094606][ T6397] hsr_slave_0: entered promiscuous mode [ 106.100875][ T6397] hsr_slave_1: entered promiscuous mode [ 106.108355][ T6397] debugfs: 'hsr0' already exists in 'hsr' [ 106.116215][ T6397] Cannot create hsr debugfs directory [ 106.167514][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.207807][ T6320] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.252424][ T6438] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.259972][ T6438] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.269104][ T6438] bridge_slave_0: entered allmulticast mode [ 106.276241][ T6438] bridge_slave_0: entered promiscuous mode [ 106.285098][ T6438] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.292215][ T6438] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.299432][ T6438] bridge_slave_1: entered allmulticast mode [ 106.306584][ T6438] bridge_slave_1: entered promiscuous mode [ 106.341118][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.432937][ T5876] Bluetooth: hci1: command tx timeout [ 106.596080][ T6438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.641714][ T6438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.839061][ T6438] team0: Port device team_slave_0 added [ 106.861977][ T6438] team0: Port device team_slave_1 added [ 107.107873][ T6438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.137369][ T6438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.182692][ T6438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.215201][ T6438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.234744][ T6438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.279556][ T6438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.291879][ T6320] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 107.309115][ T5865] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 107.317592][ T5865] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 107.327229][ T5865] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 107.337219][ T5865] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 107.345952][ T5865] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 107.437295][ T6320] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 107.451081][ T6320] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 107.478045][ T36] bridge0: port 3(team0) entered disabled state [ 107.487275][ T36] bridge_slave_1: left allmulticast mode [ 107.493231][ T36] bridge_slave_1: left promiscuous mode [ 107.498885][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.508740][ T36] bridge_slave_0: left allmulticast mode [ 107.514941][ T36] bridge_slave_0: left promiscuous mode [ 107.521119][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.651606][ T36] geneve1 (unregistering): left promiscuous mode [ 107.658019][ T36] geneve1 (unregistering): left allmulticast mode [ 107.666494][ T36] team0: Port device geneve1 removed [ 107.784177][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.798024][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.808348][ T36] bond0 (unregistering): Released all slaves [ 107.837912][ T6320] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 107.873005][ T5865] Bluetooth: hci0: command tx timeout [ 107.886883][ T6438] hsr_slave_0: entered promiscuous mode [ 107.903541][ T6438] hsr_slave_1: entered promiscuous mode [ 107.909539][ T6438] debugfs: 'hsr0' already exists in 'hsr' [ 107.916544][ T6438] Cannot create hsr debugfs directory [ 108.052142][ T6512] lo speed is unknown, defaulting to 1000 [ 108.361529][ T6397] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 108.378311][ T6397] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 108.396711][ T36] hsr_slave_0: left promiscuous mode [ 108.402457][ T36] hsr_slave_1: left promiscuous mode [ 108.408761][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.416346][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.425338][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.433807][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.451848][ T36] veth1_macvtap: left promiscuous mode [ 108.457453][ T36] veth0_macvtap: left promiscuous mode [ 108.463356][ T36] veth1_vlan: left promiscuous mode [ 108.468613][ T36] veth0_vlan: left promiscuous mode [ 108.514026][ T5865] Bluetooth: hci1: command tx timeout [ 108.767561][ T36] team_slave_1 (unregistering): left promiscuous mode [ 108.775520][ T36] team_slave_1 (unregistering): left allmulticast mode [ 108.784047][ T36] team0 (unregistering): Port device team_slave_1 removed [ 108.814136][ T36] team_slave_0 (unregistering): left promiscuous mode [ 108.820907][ T36] team_slave_0 (unregistering): left allmulticast mode [ 108.830579][ T36] team0 (unregistering): Port device team_slave_0 removed [ 109.081099][ T6274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.122091][ T6397] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 109.138552][ T6397] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 109.245388][ T6274] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.325722][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.332923][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.348155][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.355364][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.393523][ T5865] Bluetooth: hci2: command tx timeout [ 109.420753][ T6512] chnl_net:caif_netlink_parms(): no params data found [ 109.561563][ T6512] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.570683][ T6512] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.579513][ T6512] bridge_slave_0: entered allmulticast mode [ 109.586547][ T6512] bridge_slave_0: entered promiscuous mode [ 109.603406][ T6320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.619673][ T6512] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.629098][ T6512] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.637072][ T6512] bridge_slave_1: entered allmulticast mode [ 109.645930][ T6512] bridge_slave_1: entered promiscuous mode [ 109.715079][ T6512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.743769][ T6512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.878580][ T6512] team0: Port device team_slave_0 added [ 109.923768][ T6512] team0: Port device team_slave_1 added [ 109.938592][ T6320] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.041295][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.048478][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.063770][ T6512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.070726][ T6512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.098223][ T6512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.112103][ T6512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.119430][ T6512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.148033][ T6512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.165926][ T6438] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 110.186675][ T6397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.206934][ T6274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.235639][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.243228][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.260878][ T6438] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 110.302433][ T6438] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 110.354033][ T6438] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 110.371376][ T6512] hsr_slave_0: entered promiscuous mode [ 110.382122][ T6512] hsr_slave_1: entered promiscuous mode [ 110.388857][ T6512] debugfs: 'hsr0' already exists in 'hsr' [ 110.394809][ T6512] Cannot create hsr debugfs directory [ 110.428164][ T6397] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.565513][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.572713][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.594396][ T5865] Bluetooth: hci1: command tx timeout [ 110.660032][ T1039] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.667218][ T1039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.699982][ T6320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 110.818601][ T6274] veth0_vlan: entered promiscuous mode [ 110.881990][ T6274] veth1_vlan: entered promiscuous mode [ 111.015272][ T6512] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.184600][ T6512] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.284651][ T6274] veth0_macvtap: entered promiscuous mode [ 111.317354][ T6274] veth1_macvtap: entered promiscuous mode [ 111.381780][ T6512] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.451544][ T6320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.474307][ T5865] Bluetooth: hci2: command tx timeout [ 111.494975][ T6512] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.537421][ T6438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.549760][ T6274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.594583][ T6397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.628786][ T6274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.659275][ T6438] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.712290][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.719480][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.758665][ T44] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.779805][ T44] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.867988][ T44] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.880925][ T44] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.924545][ T2994] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.931729][ T2994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.138690][ T6512] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 112.165634][ T6512] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 112.185023][ T6397] veth0_vlan: entered promiscuous mode [ 112.209908][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.218692][ T6512] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 112.229637][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.244674][ T6512] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 112.262087][ T6397] veth1_vlan: entered promiscuous mode [ 112.389885][ T1039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.394828][ T6320] veth0_vlan: entered promiscuous mode [ 112.410212][ T1039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.489956][ T6397] veth0_macvtap: entered promiscuous mode [ 112.526737][ T6397] veth1_macvtap: entered promiscuous mode [ 112.550381][ T6320] veth1_vlan: entered promiscuous mode [ 112.677685][ T6397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.758741][ T6397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.911650][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.929275][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.953607][ T6320] veth0_macvtap: entered promiscuous mode [ 112.971539][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.982355][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.035662][ T6320] veth1_macvtap: entered promiscuous mode [ 113.077845][ T6438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.179375][ T6320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.260772][ T6320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.289039][ T6512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.321964][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.341268][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.357968][ T1039] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.448916][ T1039] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.462037][ T1039] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.508894][ T6512] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.518734][ T1039] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.553742][ T5865] Bluetooth: hci2: command tx timeout [ 113.598093][ T3593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.641811][ T6623] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.649042][ T6623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.659759][ T3593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.707361][ T6623] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.714591][ T6623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.741966][ T6438] veth0_vlan: entered promiscuous mode [ 113.810525][ T6438] veth1_vlan: entered promiscuous mode [ 113.939542][ T3593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.969959][ T6639] netlink: 'syz.3.107': attribute type 21 has an invalid length. [ 113.982988][ T3593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.122218][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.155407][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.182140][ T6438] veth0_macvtap: entered promiscuous mode [ 114.223941][ T6646] netlink: 'syz.3.129': attribute type 10 has an invalid length. [ 114.253525][ T6438] veth1_macvtap: entered promiscuous mode [ 114.267974][ T6646] netlink: 40 bytes leftover after parsing attributes in process `syz.3.129'. [ 114.350238][ T6646] team0: entered promiscuous mode [ 114.403666][ T6646] team_slave_0: entered promiscuous mode [ 114.450178][ T6646] team_slave_1: entered promiscuous mode [ 114.470106][ T6646] team0: entered allmulticast mode [ 114.488600][ T6646] team_slave_0: entered allmulticast mode [ 114.582854][ T6646] team_slave_1: entered allmulticast mode [ 114.594679][ T6646] bridge0: port 3(team0) entered blocking state [ 114.608710][ T6646] bridge0: port 3(team0) entered disabled state [ 114.686586][ T6646] bridge0: port 3(team0) entered blocking state [ 114.693606][ T6646] bridge0: port 3(team0) entered forwarding state [ 114.765693][ T6438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.851226][ T6438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.998094][ T6623] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.059525][ T6623] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.205786][ T6623] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.258084][ T6623] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.296795][ T6664] netlink: 156 bytes leftover after parsing attributes in process `syz.3.131'. [ 115.550278][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.586817][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.612777][ T6512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.633600][ T5865] Bluetooth: hci2: command tx timeout [ 116.003010][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.114505][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.314312][ T6685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 116.682759][ T6512] veth0_vlan: entered promiscuous mode [ 116.826898][ T6695] netlink: 'syz.1.117': attribute type 10 has an invalid length. [ 116.835907][ T6695] netlink: 40 bytes leftover after parsing attributes in process `syz.1.117'. [ 117.512868][ T6695] team0: entered promiscuous mode [ 117.527343][ T6695] team_slave_0: entered promiscuous mode [ 117.539877][ T6695] team_slave_1: entered promiscuous mode [ 117.551634][ T6695] team0: entered allmulticast mode [ 117.564161][ T6695] team_slave_0: entered allmulticast mode [ 117.569983][ T6695] team_slave_1: entered allmulticast mode [ 117.585889][ T6695] bridge0: port 3(team0) entered blocking state [ 117.628515][ T6695] bridge0: port 3(team0) entered disabled state [ 117.686943][ T6695] bridge0: port 3(team0) entered blocking state [ 117.693350][ T6695] bridge0: port 3(team0) entered forwarding state [ 117.726652][ T6512] veth1_vlan: entered promiscuous mode [ 117.959688][ T44] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.161624][ T44] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.200629][ T6512] veth0_macvtap: entered promiscuous mode [ 118.331565][ T6717] syzkaller0: entered promiscuous mode [ 118.337413][ T6717] syzkaller0: entered allmulticast mode [ 118.398745][ T44] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.421737][ T6512] veth1_macvtap: entered promiscuous mode [ 118.489539][ T44] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.564640][ T6512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.605693][ T6512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.678774][ T2994] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.707815][ T2994] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.748871][ T6623] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.771636][ T6623] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.916858][ T5876] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 118.941608][ T5876] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 118.951288][ T5876] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 118.959788][ T5876] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 118.972017][ T5876] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 120.304636][ T6742] lo speed is unknown, defaulting to 1000 [ 120.542324][ T6749] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.147'. [ 120.568972][ T6732] lo speed is unknown, defaulting to 1000 [ 120.765253][ T44] bridge_slave_1: left allmulticast mode [ 120.771034][ T44] bridge_slave_1: left promiscuous mode [ 120.793445][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.809446][ T44] bridge_slave_0: left allmulticast mode [ 120.815441][ T44] bridge_slave_0: left promiscuous mode [ 120.821289][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.073663][ T5865] Bluetooth: hci3: command tx timeout [ 121.412094][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.441303][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.454424][ T44] bond0 (unregistering): Released all slaves [ 121.594128][ T2994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.649703][ T2994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.502149][ T1039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.536215][ T1039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.607237][ T6782] netlink: 24 bytes leftover after parsing attributes in process `syz.4.154'. [ 122.640895][ T6782] netlink: 'syz.4.154': attribute type 2 has an invalid length. [ 122.686107][ T6782] netlink: 444 bytes leftover after parsing attributes in process `syz.4.154'. [ 123.039226][ T44] hsr_slave_0: left promiscuous mode [ 123.084627][ T44] hsr_slave_1: left promiscuous mode [ 123.095078][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.112701][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.123248][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.130641][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.156279][ T5865] Bluetooth: hci3: command tx timeout [ 123.271381][ T44] veth1_macvtap: left promiscuous mode [ 123.302777][ T44] veth0_macvtap: left promiscuous mode [ 123.314995][ T44] veth1_vlan: left promiscuous mode [ 123.320513][ T44] veth0_vlan: left promiscuous mode [ 123.848390][ T5865] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 124.277318][ T44] team0 (unregistering): Port device team_slave_1 removed [ 124.339619][ T44] team0 (unregistering): Port device team_slave_0 removed [ 125.052096][ T6801] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 125.233308][ T5865] Bluetooth: hci3: command tx timeout [ 125.441983][ T6732] chnl_net:caif_netlink_parms(): no params data found [ 125.508691][ T6829] netlink: 'syz.2.163': attribute type 10 has an invalid length. [ 125.554971][ T6829] netlink: 40 bytes leftover after parsing attributes in process `syz.2.163'. [ 126.243084][ T6829] team0: entered promiscuous mode [ 126.364273][ T5865] Bluetooth: hci4: unexpected event 0x18 length: 151 > 23 [ 126.399711][ T6829] team_slave_0: entered promiscuous mode [ 126.436630][ T6829] team_slave_1: entered promiscuous mode [ 126.482997][ T6829] team0: entered allmulticast mode [ 126.488149][ T6829] team_slave_0: entered allmulticast mode [ 126.546037][ T6829] team_slave_1: entered allmulticast mode [ 126.567541][ T6829] bridge0: port 3(team0) entered blocking state [ 126.612958][ T6829] bridge0: port 3(team0) entered disabled state [ 126.671405][ T6829] bridge0: port 3(team0) entered blocking state [ 126.677834][ T6829] bridge0: port 3(team0) entered forwarding state [ 127.320064][ T5865] Bluetooth: hci3: command tx timeout [ 127.431081][ T6732] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.513395][ T6732] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.520674][ T6732] bridge_slave_0: entered allmulticast mode [ 127.561328][ T6732] bridge_slave_0: entered promiscuous mode [ 127.606495][ T6732] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.622826][ T6732] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.630081][ T6732] bridge_slave_1: entered allmulticast mode [ 127.655584][ T6732] bridge_slave_1: entered promiscuous mode [ 127.991453][ T6732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.103877][ T6732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.276982][ T6873] netlink: 24 bytes leftover after parsing attributes in process `syz.1.169'. [ 128.286013][ T6873] netlink: 'syz.1.169': attribute type 2 has an invalid length. [ 128.316114][ T6873] netlink: 444 bytes leftover after parsing attributes in process `syz.1.169'. [ 129.078253][ T6732] team0: Port device team_slave_0 added [ 129.211560][ T6732] team0: Port device team_slave_1 added [ 130.764312][ T6732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.771288][ T6732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.802064][ T6732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.849939][ T6888] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 130.877997][ T6896] net veth1_virt_wifi »»»»»»: renamed from virt_wifi0 [ 130.923050][ T6732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.957096][ T6732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.030752][ T6732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.359480][ T6732] hsr_slave_0: entered promiscuous mode [ 131.382382][ T6732] hsr_slave_1: entered promiscuous mode [ 131.436432][ T6732] debugfs: 'hsr0' already exists in 'hsr' [ 131.456018][ T6732] Cannot create hsr debugfs directory [ 132.259232][ T6933] netlink: 'syz.3.184': attribute type 10 has an invalid length. [ 132.288088][ T6933] netlink: 40 bytes leftover after parsing attributes in process `syz.3.184'. [ 133.090775][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.097872][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.209498][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.433981][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.531346][ T6946] netlink: 'syz.1.186': attribute type 10 has an invalid length. [ 133.569071][ T6946] netlink: 40 bytes leftover after parsing attributes in process `syz.1.186'. [ 133.867180][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.176546][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.237606][ T6963] netlink: 'syz.1.200': attribute type 10 has an invalid length. [ 134.274794][ T6963] netlink: 40 bytes leftover after parsing attributes in process `syz.1.200'. [ 134.536618][ T5876] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 134.547365][ T5876] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 134.557160][ T5876] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 134.569897][ T5876] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 134.578016][ T5876] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 135.037523][ T6976] net veth1_virt_wifi »»»»»»: renamed from virt_wifi0 [ 135.293857][ T6969] lo speed is unknown, defaulting to 1000 [ 135.534625][ T36] bridge0: port 3(team0) entered disabled state [ 135.551395][ T36] bridge_slave_1: left allmulticast mode [ 135.561383][ T36] bridge_slave_1: left promiscuous mode [ 135.571620][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.610855][ T36] bridge_slave_0: left allmulticast mode [ 135.616948][ T36] bridge_slave_0: left promiscuous mode [ 135.633617][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.186108][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.228188][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.252528][ T5865] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 136.256237][ T36] bond0 (unregistering): Released all slaves [ 136.266664][ T5865] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 136.278616][ T5865] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 136.300129][ T5865] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 136.308474][ T5865] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 136.625479][ T6991] lo speed is unknown, defaulting to 1000 [ 136.659280][ T6998] netlink: 'syz.4.199': attribute type 10 has an invalid length. [ 136.680296][ T5876] Bluetooth: hci2: command tx timeout [ 136.720657][ T6998] netlink: 40 bytes leftover after parsing attributes in process `syz.4.199'. [ 137.476295][ T6732] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 137.487697][ T6998] team0: entered promiscuous mode [ 137.494179][ T6998] team_slave_0: entered promiscuous mode [ 137.500661][ T6998] team_slave_1: entered promiscuous mode [ 137.509361][ T6998] team0: entered allmulticast mode [ 137.552389][ T6998] team_slave_0: entered allmulticast mode [ 137.570487][ T6998] team_slave_1: entered allmulticast mode [ 137.586344][ T6998] bridge0: port 3(team0) entered blocking state [ 137.593180][ T6998] bridge0: port 3(team0) entered disabled state [ 137.602501][ T6998] bridge0: port 3(team0) entered blocking state [ 137.608931][ T6998] bridge0: port 3(team0) entered forwarding state [ 137.649652][ T7008] netlink: 156 bytes leftover after parsing attributes in process `syz.3.201'. [ 137.688943][ T6969] chnl_net:caif_netlink_parms(): no params data found [ 137.724249][ T6732] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 137.849800][ T7016] netlink: 'syz.3.203': attribute type 10 has an invalid length. [ 137.858122][ T7016] netlink: 40 bytes leftover after parsing attributes in process `syz.3.203'. [ 137.972455][ T6732] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 138.061828][ T6732] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 138.333903][ T36] hsr_slave_0: left promiscuous mode [ 138.353549][ T5876] Bluetooth: hci1: command tx timeout [ 138.361341][ T36] hsr_slave_1: left promiscuous mode [ 138.370429][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.378216][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.389195][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.397602][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.415283][ T36] veth1_macvtap: left promiscuous mode [ 138.420903][ T36] veth0_macvtap: left promiscuous mode [ 138.431109][ T36] veth1_vlan: left promiscuous mode [ 138.436806][ T36] veth0_vlan: left promiscuous mode [ 138.755929][ T5876] Bluetooth: hci2: command tx timeout [ 138.839801][ T36] team_slave_1 (unregistering): left promiscuous mode [ 138.846973][ T36] team_slave_1 (unregistering): left allmulticast mode [ 138.854716][ T36] team0 (unregistering): Port device team_slave_1 removed [ 138.886680][ T36] team_slave_0 (unregistering): left promiscuous mode [ 138.894520][ T36] team_slave_0 (unregistering): left allmulticast mode [ 138.902075][ T36] team0 (unregistering): Port device team_slave_0 removed [ 139.291156][ T7028] lo speed is unknown, defaulting to 1000 [ 139.374341][ T6969] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.381572][ T6969] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.390015][ T6969] bridge_slave_0: entered allmulticast mode [ 139.398688][ T6969] bridge_slave_0: entered promiscuous mode [ 139.409184][ T6969] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.419306][ T6969] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.426568][ T6969] bridge_slave_1: entered allmulticast mode [ 139.434414][ T6969] bridge_slave_1: entered promiscuous mode [ 139.578357][ T6969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.755317][ T6969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.828021][ T6969] team0: Port device team_slave_0 added [ 139.837211][ T6969] team0: Port device team_slave_1 added [ 139.878019][ T6991] chnl_net:caif_netlink_parms(): no params data found [ 139.922019][ T6969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.930623][ T6969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.957331][ T6969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.974019][ T6969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.981672][ T6969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.009423][ T6969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.075987][ T6732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.201010][ T6969] hsr_slave_0: entered promiscuous mode [ 140.229311][ T6969] hsr_slave_1: entered promiscuous mode [ 140.242569][ T6969] debugfs: 'hsr0' already exists in 'hsr' [ 140.248736][ T6969] Cannot create hsr debugfs directory [ 140.361634][ T6732] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.381383][ T6623] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.388560][ T6623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.439687][ T5876] Bluetooth: hci1: command tx timeout [ 140.449159][ T6991] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.462743][ T6991] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.469923][ T6991] bridge_slave_0: entered allmulticast mode [ 140.487802][ T6991] bridge_slave_0: entered promiscuous mode [ 140.500363][ T6991] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.508557][ T6991] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.516801][ T6991] bridge_slave_1: entered allmulticast mode [ 140.524726][ T6991] bridge_slave_1: entered promiscuous mode [ 140.612160][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.619348][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.641472][ T6991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.681475][ T6991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.781697][ T6991] team0: Port device team_slave_0 added [ 140.791698][ T6991] team0: Port device team_slave_1 added [ 140.840371][ T5876] Bluetooth: hci2: command tx timeout [ 140.931067][ T6991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.947706][ T6991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.032576][ T6991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.072135][ T6991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.081634][ T6991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.116409][ T6991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.287876][ T6991] hsr_slave_0: entered promiscuous mode [ 141.294513][ T6991] hsr_slave_1: entered promiscuous mode [ 141.300899][ T6991] debugfs: 'hsr0' already exists in 'hsr' [ 141.309586][ T6991] Cannot create hsr debugfs directory [ 141.435369][ T6732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.685531][ T6732] veth0_vlan: entered promiscuous mode [ 141.749788][ T6732] veth1_vlan: entered promiscuous mode [ 141.821308][ T6969] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 141.860185][ T6991] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.891703][ T6969] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 141.904269][ T6969] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 141.932021][ T6969] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 141.970758][ T6732] veth0_macvtap: entered promiscuous mode [ 142.015711][ T6991] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.051257][ T6732] veth1_macvtap: entered promiscuous mode [ 142.110632][ T6991] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.176669][ T6732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.214317][ T6991] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.250196][ T6732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.299139][ T1039] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.319160][ T1039] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.392064][ T1039] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.407843][ T1039] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.513467][ T5876] Bluetooth: hci1: command tx timeout [ 142.609063][ T6991] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 142.640940][ T3593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.661905][ T3593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.697657][ T6991] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 142.734896][ T6991] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 142.759147][ T6969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.772447][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.774472][ T6991] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 142.792743][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.875218][ T6969] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.908830][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.916014][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.930632][ T5876] Bluetooth: hci2: command tx timeout [ 143.024460][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.031628][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.285941][ T6969] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 143.691589][ T6991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.830046][ T7142] net veth1_virt_wifi »»»»»»: renamed from virt_wifi0 [ 144.049287][ T6991] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.184176][ T5865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 144.197379][ T5865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 144.206352][ T5865] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 144.214703][ T5865] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 144.225684][ T5865] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 144.261453][ T2994] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.268630][ T2994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.290688][ T2994] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.297877][ T2994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.427022][ T7153] netlink: 'syz.4.212': attribute type 10 has an invalid length. [ 144.461511][ T6991] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 144.472347][ T7153] netlink: 40 bytes leftover after parsing attributes in process `syz.4.212'. [ 144.532639][ T6991] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 144.637354][ T6969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.677703][ T5865] Bluetooth: hci1: command tx timeout [ 144.752836][ T7147] lo speed is unknown, defaulting to 1000 [ 144.801735][ T7159] netlink: 156 bytes leftover after parsing attributes in process `syz.0.213'. [ 145.063810][ T7168] netlink: 'syz.0.215': attribute type 10 has an invalid length. [ 145.082846][ T7168] netlink: 40 bytes leftover after parsing attributes in process `syz.0.215'. [ 145.156722][ T7168] team0: entered promiscuous mode [ 145.161886][ T7168] team_slave_0: entered promiscuous mode [ 145.239423][ T7168] team_slave_1: entered promiscuous mode [ 145.247813][ T7168] team0: entered allmulticast mode [ 145.253361][ T7168] team_slave_0: entered allmulticast mode [ 145.278200][ T7168] team_slave_1: entered allmulticast mode [ 145.306738][ T7168] bridge0: port 3(team0) entered blocking state [ 145.316637][ T7168] bridge0: port 3(team0) entered disabled state [ 145.337248][ T7168] bridge0: port 3(team0) entered blocking state [ 145.343963][ T7168] bridge0: port 3(team0) entered forwarding state [ 145.368148][ T6969] veth0_vlan: entered promiscuous mode [ 145.479693][ T6969] veth1_vlan: entered promiscuous mode [ 145.570666][ T6991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.862469][ T6969] veth0_macvtap: entered promiscuous mode [ 146.035633][ T6969] veth1_macvtap: entered promiscuous mode [ 146.229843][ T6991] veth0_vlan: entered promiscuous mode [ 146.275437][ T5865] Bluetooth: hci0: command tx timeout [ 146.338707][ T6969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.411597][ T6991] veth1_vlan: entered promiscuous mode [ 146.423598][ T7147] chnl_net:caif_netlink_parms(): no params data found [ 146.460068][ T6969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.787734][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.806962][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.923696][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.941952][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.138472][ T7207] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.166606][ T7147] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.174822][ T7147] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.182148][ T7147] bridge_slave_0: entered allmulticast mode [ 147.190555][ T7147] bridge_slave_0: entered promiscuous mode [ 147.209339][ T7147] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.216743][ T7147] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.224183][ T7147] bridge_slave_1: entered allmulticast mode [ 147.244238][ T7147] bridge_slave_1: entered promiscuous mode [ 147.345742][ T6991] veth0_macvtap: entered promiscuous mode [ 147.412716][ T6623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.424124][ T6623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.437686][ T7147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.451638][ T7147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.588011][ T7216] netlink: 156 bytes leftover after parsing attributes in process `syz.0.224'. [ 147.629180][ T6991] veth1_macvtap: entered promiscuous mode [ 147.687431][ T7147] team0: Port device team_slave_0 added [ 147.730567][ T7221] netlink: 'syz.4.225': attribute type 10 has an invalid length. [ 147.734110][ T7147] team0: Port device team_slave_1 added [ 147.738786][ T7221] netlink: 40 bytes leftover after parsing attributes in process `syz.4.225'. [ 147.759653][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.803159][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.356314][ T5865] Bluetooth: hci0: command tx timeout [ 148.407625][ T6991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.463779][ T7147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.485582][ T7147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.520270][ T7147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.574050][ T7147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.600146][ T7147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.713326][ T7147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.750797][ T6991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.791581][ T7242] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.228'. [ 149.029451][ T7147] hsr_slave_0: entered promiscuous mode [ 149.127104][ T7147] hsr_slave_1: entered promiscuous mode [ 149.155788][ T7147] debugfs: 'hsr0' already exists in 'hsr' [ 149.161554][ T7147] Cannot create hsr debugfs directory [ 149.207447][ T6623] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.231699][ T7257] netlink: 'syz.0.231': attribute type 10 has an invalid length. [ 149.266918][ T6623] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.278888][ T7257] netlink: 40 bytes leftover after parsing attributes in process `syz.0.231'. [ 150.109965][ T7261] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 150.139846][ T6623] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.286028][ T1039] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.377495][ T6728] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.435975][ T5865] Bluetooth: hci0: command tx timeout [ 150.557396][ T6728] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.713631][ T7284] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 150.820765][ T7288] netlink: 36 bytes leftover after parsing attributes in process `syz.4.235'. [ 150.853100][ T7288] netlink: 12 bytes leftover after parsing attributes in process `syz.4.235'. [ 150.874997][ T6728] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.026736][ T6728] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.116571][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.125903][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.196849][ T5876] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.233565][ T5876] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.258680][ T5876] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 151.266727][ T5876] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 151.276150][ T5876] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.358817][ T7147] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.382165][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.392389][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.503911][ T7147] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.571959][ T7295] lo speed is unknown, defaulting to 1000 [ 151.619385][ T7147] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.784443][ T7147] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.827527][ T6728] bridge_slave_1: left allmulticast mode [ 151.840095][ T6728] bridge_slave_1: left promiscuous mode [ 151.846868][ T6728] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.872591][ T6728] bridge_slave_0: left allmulticast mode [ 151.883844][ T6728] bridge_slave_0: left promiscuous mode [ 151.889741][ T6728] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.475861][ T6728] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.487363][ T6728] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.498096][ T6728] bond0 (unregistering): Released all slaves [ 152.514520][ T5876] Bluetooth: hci0: command tx timeout [ 152.700279][ T5865] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 152.717100][ T5865] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 152.725719][ T5865] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 152.738566][ T5865] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 152.746562][ T5865] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 153.045382][ T7319] netlink: 'syz.4.244': attribute type 10 has an invalid length. [ 153.093131][ T7319] netlink: 40 bytes leftover after parsing attributes in process `syz.4.244'. [ 153.363322][ T5876] Bluetooth: hci2: command tx timeout [ 153.933282][ T7312] lo speed is unknown, defaulting to 1000 [ 154.001201][ T6728] hsr_slave_0: left promiscuous mode [ 154.008127][ T6728] hsr_slave_1: left promiscuous mode [ 154.016792][ T6728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.025212][ T6728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.044245][ T6728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.057196][ T6728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.098778][ T6728] veth1_macvtap: left promiscuous mode [ 154.104657][ T6728] veth0_macvtap: left promiscuous mode [ 154.110317][ T6728] veth1_vlan: left promiscuous mode [ 154.116391][ T6728] veth0_vlan: left promiscuous mode [ 154.771371][ T6728] team0 (unregistering): Port device team_slave_1 removed [ 154.807063][ T6728] team0 (unregistering): Port device team_slave_0 removed [ 154.832927][ T5876] Bluetooth: hci3: command tx timeout [ 155.207190][ T7336] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.230615][ T7347] netlink: 60 bytes leftover after parsing attributes in process `syz.1.248'. [ 155.360353][ T7147] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 155.394455][ T5876] Bluetooth: hci2: command tx timeout [ 155.410109][ T7352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.249'. [ 155.421971][ T7147] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 155.440409][ T7147] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 155.478474][ T7295] chnl_net:caif_netlink_parms(): no params data found [ 155.507994][ T7147] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 155.920242][ T7372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.252'. [ 156.081105][ T7295] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.097324][ T7295] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.132845][ T7295] bridge_slave_0: entered allmulticast mode [ 156.159251][ T7295] bridge_slave_0: entered promiscuous mode [ 156.196000][ T7295] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.216301][ T7295] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.224804][ T7295] bridge_slave_1: entered allmulticast mode [ 156.241901][ T7295] bridge_slave_1: entered promiscuous mode [ 156.251676][ T7389] netlink: 'syz.4.254': attribute type 16 has an invalid length. [ 156.270075][ T7389] netlink: 'syz.4.254': attribute type 3 has an invalid length. [ 156.292745][ T7389] netlink: 132 bytes leftover after parsing attributes in process `syz.4.254'. [ 156.414522][ T7395] netlink: 'syz.1.255': attribute type 10 has an invalid length. [ 156.430518][ T7395] netlink: 40 bytes leftover after parsing attributes in process `syz.1.255'. [ 156.612886][ T7395] team0: entered promiscuous mode [ 156.618839][ T7395] team_slave_0: entered promiscuous mode [ 156.669603][ T7395] team_slave_1: entered promiscuous mode [ 156.696504][ T7395] team0: entered allmulticast mode [ 156.702231][ T7395] team_slave_0: entered allmulticast mode [ 156.708656][ T7395] team_slave_1: entered allmulticast mode [ 156.719584][ T7395] bridge0: port 3(team0) entered blocking state [ 156.737745][ T7395] bridge0: port 3(team0) entered disabled state [ 156.770684][ T7395] bridge0: port 3(team0) entered blocking state [ 156.777657][ T7395] bridge0: port 3(team0) entered forwarding state [ 156.799344][ T7295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.951663][ T7295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.039494][ T5876] Bluetooth: hci3: command tx timeout [ 157.261644][ T7312] chnl_net:caif_netlink_parms(): no params data found [ 157.326965][ T7147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.394572][ T7295] team0: Port device team_slave_0 added [ 157.460748][ T7295] team0: Port device team_slave_1 added [ 157.472815][ T5876] Bluetooth: hci2: command tx timeout [ 157.624800][ T7412] netlink: 40 bytes leftover after parsing attributes in process `syz.1.257'. [ 157.700101][ T7295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.715623][ T7295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.758758][ T7295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.797096][ T7412] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.891817][ T7412] bridge_slave_0 (unregistering): left allmulticast mode [ 157.899506][ T7412] bridge_slave_0 (unregistering): left promiscuous mode [ 157.907623][ T7412] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.089141][ T7312] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.096602][ T7312] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.109972][ T7312] bridge_slave_0: entered allmulticast mode [ 158.119823][ T7312] bridge_slave_0: entered promiscuous mode [ 158.129866][ T7312] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.139098][ T7312] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.176329][ T7312] bridge_slave_1: entered allmulticast mode [ 158.201222][ T7312] bridge_slave_1: entered promiscuous mode [ 158.248055][ T7408] lo speed is unknown, defaulting to 1000 [ 158.276798][ T7147] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.312157][ T7295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.330279][ T7295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.376455][ T7295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.420226][ T7425] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 158.552441][ T6728] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.559567][ T6728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.587021][ T7295] hsr_slave_0: entered promiscuous mode [ 158.594640][ T7295] hsr_slave_1: entered promiscuous mode [ 158.600637][ T7295] debugfs: 'hsr0' already exists in 'hsr' [ 158.614828][ T7295] Cannot create hsr debugfs directory [ 158.625669][ T7312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.639934][ T7312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.727037][ T7430] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 158.755917][ T7312] team0: Port device team_slave_0 added [ 158.775482][ T2994] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.782578][ T2994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.819253][ T7312] team0: Port device team_slave_1 added [ 158.969788][ T7312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.982320][ T7312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.009616][ T7312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.060281][ T7312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.073609][ T5876] Bluetooth: hci3: command tx timeout [ 159.080655][ T7312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.126444][ T7312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.330721][ T7312] hsr_slave_0: entered promiscuous mode [ 159.353524][ T7312] hsr_slave_1: entered promiscuous mode [ 159.359948][ T7312] debugfs: 'hsr0' already exists in 'hsr' [ 159.379736][ T7312] Cannot create hsr debugfs directory [ 159.426296][ T7444] netlink: 'syz.1.263': attribute type 10 has an invalid length. [ 159.473413][ T7444] netlink: 40 bytes leftover after parsing attributes in process `syz.1.263'. [ 159.552884][ T5876] Bluetooth: hci2: command tx timeout [ 160.094478][ T7462] netlink: 'syz.1.266': attribute type 10 has an invalid length. [ 160.115713][ T7462] netlink: 40 bytes leftover after parsing attributes in process `syz.1.266'. [ 160.239388][ T7463] tun0: tun_chr_ioctl cmd 1074025675 [ 160.244822][ T7463] tun0: persist enabled [ 160.926262][ T7465] tun0: tun_chr_ioctl cmd 1074025675 [ 160.931581][ T7465] tun0: persist disabled [ 160.971771][ T7147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.141607][ T7470] netlink: 830 bytes leftover after parsing attributes in process `syz.4.267'. [ 161.153108][ T5876] Bluetooth: hci3: command tx timeout [ 161.199553][ T7472] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.356762][ T7312] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.391323][ T7478] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.428328][ T7147] veth0_vlan: entered promiscuous mode [ 161.489413][ T7312] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.521539][ T7147] veth1_vlan: entered promiscuous mode [ 161.574863][ T7312] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.710321][ T7312] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.762308][ T7147] veth0_macvtap: entered promiscuous mode [ 161.795102][ T7147] veth1_macvtap: entered promiscuous mode [ 161.887431][ T7147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.944291][ T7147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.982362][ T6728] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.995395][ T6728] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.007969][ T6728] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.032490][ T7493] netlink: 'syz.1.273': attribute type 10 has an invalid length. [ 162.043560][ T7493] netlink: 40 bytes leftover after parsing attributes in process `syz.1.273'. [ 162.116930][ T6728] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.277399][ T7295] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 162.328541][ T7295] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 162.406707][ T7295] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 162.451811][ T7295] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 162.604816][ T3593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.614937][ T3593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.705709][ T7312] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 162.745469][ T7312] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 162.788015][ T7312] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 162.821725][ T7312] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 162.838091][ T7515] netlink: 'syz.4.277': attribute type 10 has an invalid length. [ 162.856264][ T7515] netlink: 40 bytes leftover after parsing attributes in process `syz.4.277'. [ 162.893870][ T1039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.920068][ T1039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.221358][ T7531] netlink: 68 bytes leftover after parsing attributes in process `syz.1.278'. [ 163.356974][ T7295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.470582][ T7295] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.571398][ T6728] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.578595][ T6728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.603762][ T6728] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.610971][ T6728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.806452][ T7312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.897027][ T7312] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.944468][ T1039] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.951662][ T1039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.989854][ T1039] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.997051][ T1039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.195410][ T7312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 164.216712][ T7312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 164.250180][ T7543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.208'. [ 164.380500][ T7548] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 164.648623][ T7555] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 164.778216][ T7295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.938708][ T7295] veth0_vlan: entered promiscuous mode [ 164.992494][ T7295] veth1_vlan: entered promiscuous mode [ 165.131349][ T7572] netlink: 16 bytes leftover after parsing attributes in process `syz.4.285'. [ 165.197108][ T7572] netlink: 'syz.4.285': attribute type 9 has an invalid length. [ 165.213075][ T7572] netlink: 'syz.4.285': attribute type 8 has an invalid length. [ 165.242927][ T7572] netlink: 143452 bytes leftover after parsing attributes in process `syz.4.285'. [ 165.989061][ T7312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.036503][ T7295] veth0_macvtap: entered promiscuous mode [ 166.111002][ T7295] veth1_macvtap: entered promiscuous mode [ 166.242184][ T7295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.289743][ T7295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.300015][ T7591] netlink: 220 bytes leftover after parsing attributes in process `syz.3.289'. [ 166.347572][ T44] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.370387][ T44] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.459592][ T7596] netlink: 'syz.4.290': attribute type 10 has an invalid length. [ 166.488242][ T7596] netlink: 40 bytes leftover after parsing attributes in process `syz.4.290'. [ 166.721306][ T44] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.797959][ T44] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.295891][ T7312] veth0_vlan: entered promiscuous mode [ 167.387657][ T7312] veth1_vlan: entered promiscuous mode [ 167.506979][ T5865] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 167.516618][ T5865] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 167.525252][ T5865] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 167.533775][ T5865] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 167.541909][ T5865] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 167.584257][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.620589][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.637170][ T7612] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.789714][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.817695][ T7613] lo speed is unknown, defaulting to 1000 [ 167.820096][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.844502][ T7312] veth0_macvtap: entered promiscuous mode [ 167.976645][ T7312] veth1_macvtap: entered promiscuous mode [ 168.023153][ T7626] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 168.126654][ T7312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.205035][ T7312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.301154][ T44] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.528674][ T7638] netlink: 196 bytes leftover after parsing attributes in process `syz.4.297'. [ 168.811904][ T44] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.830925][ T44] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.851326][ T44] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.932700][ T7640] net veth1_virt_wifi »»»»»»: renamed from virt_wifi0 [ 169.091215][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.249163][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.301550][ T7613] chnl_net:caif_netlink_parms(): no params data found [ 169.355592][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.656840][ T5865] Bluetooth: hci1: command tx timeout [ 169.758423][ T7653] netlink: 'syz.2.299': attribute type 3 has an invalid length. [ 169.797484][ T7653] netlink: 'syz.2.299': attribute type 1 has an invalid length. [ 169.828789][ T7653] netlink: 191264 bytes leftover after parsing attributes in process `syz.2.299'. [ 170.014487][ T5876] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 170.023919][ T5876] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 170.032744][ T5876] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 170.044482][ T5876] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 170.053380][ T5876] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 170.335606][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.807649][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.835934][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.010985][ T7655] lo speed is unknown, defaulting to 1000 [ 171.042343][ T7663] netlink: 'syz.4.302': attribute type 10 has an invalid length. [ 171.066144][ T7663] netlink: 40 bytes leftover after parsing attributes in process `syz.4.302'. [ 171.226231][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.235486][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.252428][ T7669] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 171.302811][ T7613] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.310076][ T7613] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.319137][ T7613] bridge_slave_0: entered allmulticast mode [ 171.328847][ T7613] bridge_slave_0: entered promiscuous mode [ 171.354437][ T7613] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.381995][ T7613] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.401617][ T7613] bridge_slave_1: entered allmulticast mode [ 171.430867][ T7613] bridge_slave_1: entered promiscuous mode [ 171.619257][ T7613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.711185][ T7675] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 171.728787][ T5865] Bluetooth: hci1: command tx timeout [ 171.740972][ T7613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.976275][ T7613] team0: Port device team_slave_0 added [ 171.995981][ T7613] team0: Port device team_slave_1 added [ 172.112953][ T5865] Bluetooth: hci0: command tx timeout [ 172.800248][ T36] bridge_slave_1: left allmulticast mode [ 172.821408][ T36] bridge_slave_1: left promiscuous mode [ 172.834315][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.870385][ T36] bridge_slave_0: left allmulticast mode [ 172.882697][ T36] bridge_slave_0: left promiscuous mode [ 172.929636][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.792936][ T5865] Bluetooth: hci1: command tx timeout [ 174.221520][ T5865] Bluetooth: hci0: command tx timeout [ 175.100250][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.111577][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.122078][ T36] bond0 (unregistering): Released all slaves [ 175.179598][ T7613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.202234][ T7613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.241203][ T7613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.254212][ T7698] bridge0: port 3(team0) entered disabled state [ 175.260925][ T7698] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.268707][ T7698] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.388600][ T7613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.399528][ T7613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.435686][ T7613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.815607][ T7726] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 175.873999][ T5865] Bluetooth: hci1: command tx timeout [ 176.011273][ T7613] hsr_slave_0: entered promiscuous mode [ 176.025817][ T7613] hsr_slave_1: entered promiscuous mode [ 176.040980][ T7613] debugfs: 'hsr0' already exists in 'hsr' [ 176.057062][ T7613] Cannot create hsr debugfs directory [ 176.098490][ T7740] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.275669][ T5865] Bluetooth: hci0: command tx timeout [ 176.450761][ T36] hsr_slave_0: left promiscuous mode [ 176.476808][ T36] hsr_slave_1: left promiscuous mode [ 176.495437][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.524799][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.672864][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.726533][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.177201][ T36] veth1_macvtap: left promiscuous mode [ 177.222323][ T36] veth0_macvtap: left promiscuous mode [ 177.250672][ T36] veth1_vlan: left promiscuous mode [ 177.275187][ T36] veth0_vlan: left promiscuous mode [ 178.247164][ T36] team0 (unregistering): Port device team_slave_1 removed [ 178.293717][ T36] team0 (unregistering): Port device team_slave_0 removed [ 178.355042][ T5865] Bluetooth: hci0: command tx timeout [ 178.851728][ T7655] chnl_net:caif_netlink_parms(): no params data found [ 178.883640][ T7772] syzkaller0: entered promiscuous mode [ 178.889141][ T7772] syzkaller0: entered allmulticast mode [ 179.317660][ T7655] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.335970][ T7655] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.346177][ T7655] bridge_slave_0: entered allmulticast mode [ 179.356259][ T7655] bridge_slave_0: entered promiscuous mode [ 179.388929][ T7613] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.417723][ T7655] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.425562][ T7655] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.432922][ T7655] bridge_slave_1: entered allmulticast mode [ 179.440697][ T7655] bridge_slave_1: entered promiscuous mode [ 179.505790][ T7613] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.608204][ T7655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.646286][ T7613] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.678795][ T7655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.779095][ T7655] team0: Port device team_slave_0 added [ 179.787695][ T7655] team0: Port device team_slave_1 added [ 179.807255][ T7613] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.856020][ T7655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.863120][ T7655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.891099][ T7655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.907339][ T7655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.914494][ T7655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.942560][ T7655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.019018][ T7655] hsr_slave_0: entered promiscuous mode [ 180.026507][ T7655] hsr_slave_1: entered promiscuous mode [ 180.033382][ T7655] debugfs: 'hsr0' already exists in 'hsr' [ 180.039120][ T7655] Cannot create hsr debugfs directory [ 180.208593][ T7613] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 180.236125][ T7613] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 180.247396][ T7613] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 180.300434][ T7613] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 180.829316][ T7613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.852396][ T7613] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.873600][ T6623] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.880736][ T6623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.904532][ T6623] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.911653][ T6623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.079960][ T7655] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 181.091790][ T7655] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 181.127413][ T7655] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 181.146404][ T7655] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 181.387030][ T7655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.437489][ T7613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.459485][ T7655] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.487533][ T6728] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.495014][ T6728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.532617][ T3593] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.539762][ T3593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.621644][ T7613] veth0_vlan: entered promiscuous mode [ 181.700293][ T7613] veth1_vlan: entered promiscuous mode [ 181.775930][ T7613] veth0_macvtap: entered promiscuous mode [ 181.807479][ T7613] veth1_macvtap: entered promiscuous mode [ 181.858923][ T7613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.880677][ T7613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.909873][ T6623] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.935161][ T6623] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.968225][ T6623] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.014334][ T6623] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.142348][ T6623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.163619][ T6623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.188963][ T7655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.263568][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.272391][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.297277][ T7655] veth0_vlan: entered promiscuous mode [ 182.340366][ T7655] veth1_vlan: entered promiscuous mode [ 182.431484][ T7655] veth0_macvtap: entered promiscuous mode [ 182.459278][ T7655] veth1_macvtap: entered promiscuous mode [ 182.511431][ T7655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.559690][ T7655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.590028][ T3593] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.647396][ T3593] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.668946][ T3593] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.742683][ T3593] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.224265][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.252320][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.391820][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.417269][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.496567][ T7870] net veth1_virt_wifi »»»»»»: renamed from virt_wifi0 [ 183.621277][ T7875] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.035804][ T7887] mac80211_hwsim hwsim34 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 184.113940][ T7891] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.161300][ T7887] netlink: 'syz.0.330': attribute type 10 has an invalid length. [ 184.254837][ T7887] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 184.339905][ T7889] netlink: 'syz.0.330': attribute type 29 has an invalid length. [ 184.577876][ T7911] netlink: 68 bytes leftover after parsing attributes in process `syz.1.334'. [ 184.939771][ T5865] Bluetooth: hci1: unexpected event 0x1d length: 15 > 5 [ 185.606649][ T7940] syz.2.340 uses obsolete (PF_INET,SOCK_PACKET) [ 185.856317][ T7952] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.754498][ T6623] wlan1: Trigger new scan to find an IBSS to join [ 187.655821][ T7943] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 188.681502][ T7991] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.347'. [ 188.829615][ T7995] netlink: 'syz.0.346': attribute type 2 has an invalid length. [ 188.856377][ T7997] macvlan0: entered promiscuous mode [ 188.864084][ T7995] netlink: 'syz.0.346': attribute type 8 has an invalid length. [ 188.871870][ T7995] netlink: 132 bytes leftover after parsing attributes in process `syz.0.346'. [ 188.917038][ T7997] macvlan0: entered allmulticast mode [ 188.959403][ T8001] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.349'. [ 188.993068][ T7997] veth1_vlan: entered allmulticast mode [ 189.712152][ T8014] netlink: 'syz.0.353': attribute type 10 has an invalid length. [ 189.752754][ T8014] netlink: 40 bytes leftover after parsing attributes in process `syz.0.353'. [ 189.777318][ T8014] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 189.824366][ T8014] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.864348][ T8014] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 190.301768][ T8027] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 190.393284][ T8033] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.356'. [ 190.637321][ T8037] netlink: 948 bytes leftover after parsing attributes in process `syz.3.358'. [ 190.771316][ T8042] netlink: 'syz.1.360': attribute type 1 has an invalid length. [ 190.779678][ T8042] netlink: 'syz.1.360': attribute type 4 has an invalid length. [ 190.788008][ T8042] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.360'. [ 190.818276][ T8042] netlink: 'syz.1.360': attribute type 1 has an invalid length. [ 190.840733][ T6728] wlan1: Trigger new scan to find an IBSS to join [ 190.893666][ T8042] netlink: 'syz.1.360': attribute type 4 has an invalid length. [ 190.932918][ T8042] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.360'. [ 191.160745][ T8054] netlink: 'syz.3.363': attribute type 10 has an invalid length. [ 191.183641][ T8054] netlink: 40 bytes leftover after parsing attributes in process `syz.3.363'. [ 191.218003][ T8054] team0: entered promiscuous mode [ 191.265320][ T8060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.361'. [ 191.274598][ T8054] team_slave_0: entered promiscuous mode [ 191.280539][ T8054] team_slave_1: entered promiscuous mode [ 191.379963][ T8054] team0: entered allmulticast mode [ 191.412883][ T8054] team_slave_0: entered allmulticast mode [ 191.418735][ T8054] team_slave_1: entered allmulticast mode [ 191.429338][ T8056] netlink: 'syz.2.364': attribute type 7 has an invalid length. [ 191.447837][ T8054] bridge0: port 3(team0) entered blocking state [ 191.452860][ T8054] bridge0: port 3(team0) entered disabled state [ 191.513712][ T8054] bridge0: port 3(team0) entered blocking state [ 191.520271][ T8054] bridge0: port 3(team0) entered forwarding state [ 191.870594][ T6728] wlan1: Creating new IBSS network, BSSID 42:f0:23:c1:57:70 [ 192.095024][ T8074] netlink: 28 bytes leftover after parsing attributes in process `syz.2.366'. [ 192.194718][ T8076] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 192.706275][ T8094] netlink: 'syz.0.373': attribute type 1 has an invalid length. [ 192.935056][ T8090] netlink: 'syz.0.373': attribute type 1 has an invalid length. [ 193.004185][ T8094] netlink: 'syz.0.373': attribute type 4 has an invalid length. [ 193.059732][ T8090] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.373'. [ 193.086358][ T8091] À: port 1(vlan0) entered blocking state [ 193.125551][ T8094] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.373'. [ 193.135251][ T8091] À: port 1(vlan0) entered disabled state [ 193.173956][ T8091] vlan0: entered allmulticast mode [ 193.213425][ T8091] veth0_vlan: entered allmulticast mode [ 193.258876][ T8091] vlan0: entered promiscuous mode [ 193.284420][ T8092] À: port 1(vlan0) entered blocking state [ 193.290365][ T8092] À: port 1(vlan0) entered forwarding state [ 194.208832][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.219663][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.189057][ T8121] validate_nla: 1 callbacks suppressed [ 195.189076][ T8121] netlink: 'syz.3.381': attribute type 10 has an invalid length. [ 195.214790][ T8121] __nla_validate_parse: 1 callbacks suppressed [ 195.214807][ T8121] netlink: 40 bytes leftover after parsing attributes in process `syz.3.381'. [ 195.386816][ T8126] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 196.228407][ T8147] netlink: 156 bytes leftover after parsing attributes in process `syz.3.388'. [ 196.245308][ T8150] netlink: 68 bytes leftover after parsing attributes in process `syz.2.389'. [ 196.320001][ T8134] bridge0: port 4(hsr_slave_1) entered blocking state [ 196.332905][ T8152] netlink: 14 bytes leftover after parsing attributes in process `syz.2.389'. [ 196.374873][ T8134] bridge0: port 4(hsr_slave_1) entered disabled state [ 196.381856][ T8134] hsr_slave_1: entered allmulticast mode [ 196.639164][ T8134] hsr_slave_1: left allmulticast mode [ 196.696952][ T5865] Bluetooth: hci3: unexpected event 0x3c length: 15 > 7 [ 196.943723][ T8152] veth0_macvtap: left promiscuous mode [ 197.297220][ T8168] netlink: 'syz.0.393': attribute type 29 has an invalid length. [ 197.340302][ T8168] netlink: 'syz.0.393': attribute type 3 has an invalid length. [ 197.390529][ T8169] netlink: 196 bytes leftover after parsing attributes in process `syz.0.393'. [ 197.415146][ T8169] netlink: 'syz.0.393': attribute type 27 has an invalid length. [ 197.418806][ T8166] netlink: 14 bytes leftover after parsing attributes in process `syz.1.394'. [ 197.453624][ T8172] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 197.487840][ T8168] netlink: 132 bytes leftover after parsing attributes in process `syz.0.393'. [ 197.507237][ T8166] hsr_slave_0: left promiscuous mode [ 197.522242][ T8166] hsr_slave_1: left promiscuous mode [ 197.527495][ T8169] netlink: 164 bytes leftover after parsing attributes in process `syz.0.393'. [ 197.612779][ T8174] netlink: 92 bytes leftover after parsing attributes in process `syz.2.396'. [ 197.822177][ T8180] netlink: 'syz.2.399': attribute type 10 has an invalid length. [ 197.858116][ T8180] netlink: 40 bytes leftover after parsing attributes in process `syz.2.399'. [ 197.862373][ T8183] netlink: 'syz.4.398': attribute type 10 has an invalid length. [ 197.870665][ T8180] team0: entered promiscuous mode [ 197.885237][ T8180] team_slave_0: entered promiscuous mode [ 197.906258][ T8180] team_slave_1: entered promiscuous mode [ 197.912121][ T8180] team0: entered allmulticast mode [ 197.927227][ T8180] team_slave_0: entered allmulticast mode [ 198.062963][ T8180] team_slave_1: entered allmulticast mode [ 272.401759][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 272.413026][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 272.422614][ C1] sched: DL replenish lagged too much [ 275.459439][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 275.466636][ T8180] bridge0: port 3(team0) entered blocking state [ 275.653631][ T8180] bridge0: port 3(team0) entered disabled state [ 320.673853][ T8180] bridge0: port 3(team0) entered blocking state [ 320.680294][ T8180] bridge0: port 3(team0) entered forwarding state [ 320.763585][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 332.224729][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 144s! [syz.4.398:8186] [ 332.224753][ C0] Modules linked in: [ 332.224793][ C0] irq event stamp: 6328163 [ 332.224801][ C0] hardirqs last enabled at (6328162): [] irqentry_exit+0x74/0x90 [ 332.224837][ C0] hardirqs last disabled at (6328163): [] sysvec_apic_timer_interrupt+0xe/0xc0 [ 332.224861][ C0] softirqs last enabled at (11136): [] __irq_exit_rcu+0xca/0x1f0 [ 332.224881][ C0] softirqs last disabled at (11577): [] __irq_exit_rcu+0xca/0x1f0 [ 332.224923][ C0] CPU: 0 UID: 0 PID: 8186 Comm: syz.4.398 Not tainted syzkaller #0 PREEMPT(full) [ 332.224941][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 332.224956][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x28/0x90 [ 332.224979][ C0] Code: 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 14 25 08 40 a0 92 65 8b 0d 88 8f e0 10 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b <83> ba 3c 16 00 00 00 74 52 8b 8a 18 16 00 00 83 f9 03 75 47 48 8b [ 332.224994][ C0] RSP: 0018:ffffc90000006a98 EFLAGS: 00000246 [ 332.225008][ C0] RAX: ffffffff81c93a1b RBX: 000000000000002c RCX: 0000000000000100 [ 332.225019][ C0] RDX: ffff88807ccd9e00 RSI: 00000000ffffffff RDI: 0000000000000000 [ 332.225031][ C0] RBP: 00000000ffffffff R08: ffffc90000006d57 R09: 0000000000000000 [ 332.225042][ C0] R10: ffffc90000006d40 R11: fffff52000000dab R12: 1ffff92000000d64 [ 332.225054][ C0] R13: dffffc0000000000 R14: ffffc90000006b40 R15: ffffc90000006b60 [ 332.225066][ C0] FS: 00007f6d9ff966c0(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 332.225080][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 332.225092][ C0] CR2: 00007f8f079d5d58 CR3: 0000000066ed2000 CR4: 00000000003526f0 [ 332.225106][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 332.225116][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 332.225126][ C0] Call Trace: [ 332.225137][ C0] [ 332.225144][ C0] perf_trace_buf_alloc+0x7b/0x2a0 [ 332.225212][ C0] perf_trace_lock+0x18d/0x3b0 [ 332.225232][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.225312][ C0] ? __pfx_perf_trace_lock+0x10/0x10 [ 332.225394][ C0] ? perf_output_begin_forward+0xb1/0xa80 [ 332.225444][ C0] ? rcu_read_unlock+0x87/0xa0 [ 332.225471][ C0] ? rcu_read_unlock+0x87/0xa0 [ 332.225511][ C0] lock_release+0x3b2/0x3e0 [ 332.225616][ C0] rcu_read_unlock+0x93/0xa0 [ 332.225648][ C0] perf_output_begin_forward+0x9bc/0xa80 [ 332.225720][ C0] ? perf_get_regs_user+0x5bc/0x6b0 [ 332.225792][ C0] ? perf_prepare_sample+0x19ab/0x2390 [ 332.225828][ C0] ? __pfx_perf_output_begin_forward+0x10/0x10 [ 332.225930][ C0] ? __irq_exit_rcu+0xd8/0x1f0 [ 332.226051][ C0] perf_event_output_forward+0x2b2/0x430 [ 332.226077][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.226111][ C0] ? perf_event_output_forward+0x8f/0x430 [ 332.226145][ C0] ? __pfx_perf_event_output_forward+0x10/0x10 [ 332.226276][ C0] ? __perf_event_account_interrupt+0x55/0x250 [ 332.226319][ C0] ? __perf_event_account_interrupt+0x179/0x250 [ 332.226377][ C0] __perf_event_overflow+0x7cc/0xe10 [ 332.226423][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.226505][ C0] ? __pfx___perf_event_overflow+0x10/0x10 [ 332.226561][ C0] ? tracing_gen_ctx_irq_test+0x52/0x160 [ 332.226611][ C0] ? __sanitizer_cov_trace_const_cmp8+0x8/0x90 [ 332.226679][ C0] perf_swevent_event+0x2f4/0x5e0 [ 332.226773][ C0] ? __pfx_perf_swevent_event+0x10/0x10 [ 332.226816][ C0] ? perf_tp_event+0xa8/0x1380 [ 332.226906][ C0] perf_tp_event+0x4f6/0x1380 [ 332.226993][ C0] ? __pfx_perf_tp_event+0x10/0x10 [ 332.227095][ C0] ? lock_release+0x3b2/0x3e0 [ 332.227317][ C0] ? irqentry_exit+0x74/0x90 [ 332.227411][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 332.227500][ C0] perf_trace_run_bpf_submit+0xee/0x170 [ 332.227588][ C0] perf_trace_lock+0x2f8/0x3b0 [ 332.227687][ C0] ? __pfx_perf_trace_lock+0x10/0x10 [ 332.227755][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 332.227810][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 332.227838][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 332.227865][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 332.227907][ C0] lock_release+0x3b2/0x3e0 [ 332.228011][ C0] is_bpf_text_address+0x28d/0x2b0 [ 332.228043][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 332.228104][ C0] kernel_text_address+0xa5/0xe0 [ 332.228149][ C0] __kernel_text_address+0xd/0x40 [ 332.228180][ C0] unwind_get_return_address+0x4d/0x90 [ 332.228208][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 332.228234][ C0] arch_stack_walk+0xfc/0x150 [ 332.228377][ C0] stack_trace_save+0x9c/0xe0 [ 332.228412][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 332.228463][ C0] ? lock_release+0x3b2/0x3e0 [ 332.228551][ C0] kasan_save_track+0x3e/0x80 [ 332.228573][ C0] ? kasan_save_track+0x3e/0x80 [ 332.228591][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 332.228610][ C0] ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 332.228631][ C0] ? __alloc_skb+0x112/0x2d0 [ 332.228652][ C0] ? ndisc_alloc_skb+0x9f/0x480 [ 332.228673][ C0] ? ndisc_send_rs+0x2b5/0x630 [ 332.228687][ C0] ? addrconf_rs_timer+0x369/0x670 [ 332.228706][ C0] ? call_timer_fn+0x17b/0x5f0 [ 332.228726][ C0] ? __run_timer_base+0x61a/0x860 [ 332.228744][ C0] ? run_timer_softirq+0xb7/0x180 [ 332.228767][ C0] ? handle_softirqs+0x283/0x870 [ 332.228782][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 332.228796][ C0] ? irq_exit_rcu+0x9/0x30 [ 332.228810][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 332.228829][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 332.228846][ C0] ? perf_trace_lock+0x263/0x3b0 [ 332.228860][ C0] ? lock_release+0x3b2/0x3e0 [ 332.228879][ C0] ? is_module_text_address+0x18b/0x1e0 [ 332.228898][ C0] ? kernel_text_address+0x94/0xe0 [ 332.228918][ C0] ? __kernel_text_address+0xd/0x40 [ 332.228938][ C0] ? unwind_get_return_address+0x4d/0x90 [ 332.228955][ C0] ? arch_stack_walk+0xfc/0x150 [ 332.228972][ C0] ? stack_trace_save+0x9c/0xe0 [ 332.228989][ C0] ? kasan_save_track+0x3e/0x80 [ 332.229007][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 332.229025][ C0] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 332.229045][ C0] ? getname_flags+0xb8/0x540 [ 332.229059][ C0] ? do_sys_openat2+0xbc/0x1c0 [ 332.229075][ C0] ? __x64_sys_openat+0x138/0x170 [ 332.229091][ C0] ? do_syscall_64+0xfa/0x3b0 [ 332.229112][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.229397][ C0] __kasan_slab_alloc+0x6c/0x80 [ 332.229448][ C0] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 332.229486][ C0] ? __alloc_skb+0x112/0x2d0 [ 332.229561][ C0] __alloc_skb+0x112/0x2d0 [ 332.229639][ C0] ndisc_alloc_skb+0x9f/0x480 [ 332.229704][ C0] ndisc_send_rs+0x2b5/0x630 [ 332.229795][ C0] addrconf_rs_timer+0x369/0x670 [ 332.229885][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 332.230013][ C0] call_timer_fn+0x17b/0x5f0 [ 332.230044][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 332.230070][ C0] ? call_timer_fn+0xbe/0x5f0 [ 332.230104][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 332.230219][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 332.230252][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.230271][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 332.230325][ C0] __run_timer_base+0x61a/0x860 [ 332.230361][ C0] ? ktime_get+0x3e/0x1f0 [ 332.230505][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 332.230524][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 332.230697][ C0] run_timer_softirq+0xb7/0x180 [ 332.230740][ C0] handle_softirqs+0x283/0x870 [ 332.230826][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 332.230905][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 332.230981][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 332.231041][ C0] __irq_exit_rcu+0xca/0x1f0 [ 332.231072][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 332.231182][ C0] irq_exit_rcu+0x9/0x30 [ 332.231200][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 332.231230][ C0] [ 332.231236][ C0] [ 332.231256][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 332.231276][ C0] RIP: 0010:perf_trace_lock+0x263/0x3b0 [ 332.231292][ C0] Code: 4c 89 e7 e8 bf 77 86 00 41 81 c5 18 00 01 00 48 89 da 49 c7 04 24 00 00 00 00 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 0f b6 04 38 <84> c0 0f 85 08 01 00 00 48 89 54 24 18 44 89 6a 08 48 8d 7b 18 41 [ 332.231306][ C0] RSP: 0018:ffffc900059177a0 EFLAGS: 00000a02 [ 332.231320][ C0] RAX: 0000000000000000 RBX: ffffe8ffffcbcec8 RCX: dffffc0000000000 [ 332.231332][ C0] RDX: ffffe8ffffcbcec8 RSI: 0000000000000000 RDI: ffffe8ffffcbced0 [ 332.231344][ C0] RBP: ffffc90005917888 R08: 0000000000000004 R09: 0000000000000004 [ 332.231354][ C0] R10: ffffe8ffffcbceec R11: fffff91ffff979df R12: ffff8880b8632a10 [ 332.231367][ C0] R13: 00000000000e0018 R14: 000000000000002c R15: dffffc0000000000 [ 332.231584][ C0] ? __pfx_perf_trace_lock+0x10/0x10 [ 332.231674][ C0] ? is_module_text_address+0x1d/0x1e0 [ 332.231700][ C0] ? is_module_text_address+0x1d/0x1e0 [ 332.231726][ C0] ? is_module_text_address+0x1d/0x1e0 [ 332.231770][ C0] lock_release+0x3b2/0x3e0 [ 332.231821][ C0] ? is_module_text_address+0x1d/0x1e0 [ 332.231847][ C0] ? is_module_text_address+0x1d/0x1e0 [ 332.231898][ C0] is_module_text_address+0x18b/0x1e0 [ 332.231961][ C0] kernel_text_address+0x94/0xe0 [ 332.232006][ C0] __kernel_text_address+0xd/0x40 [ 332.232036][ C0] unwind_get_return_address+0x4d/0x90 [ 332.232064][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 332.232090][ C0] arch_stack_walk+0xfc/0x150 [ 332.232232][ C0] stack_trace_save+0x9c/0xe0 [ 332.232267][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 332.232339][ C0] ? irqentry_exit+0x74/0x90 [ 332.232405][ C0] kasan_save_track+0x3e/0x80 [ 332.232427][ C0] ? kasan_save_track+0x3e/0x80 [ 332.232445][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 332.232464][ C0] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 332.232483][ C0] ? getname_flags+0xb8/0x540 [ 332.232497][ C0] ? do_sys_openat2+0xbc/0x1c0 [ 332.232513][ C0] ? __x64_sys_openat+0x138/0x170 [ 332.232529][ C0] ? do_syscall_64+0xfa/0x3b0 [ 332.232549][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.232986][ C0] __kasan_slab_alloc+0x6c/0x80 [ 332.233036][ C0] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 332.233066][ C0] ? getname_flags+0xb8/0x540 [ 332.233135][ C0] getname_flags+0xb8/0x540 [ 332.233207][ C0] do_sys_openat2+0xbc/0x1c0 [ 332.233267][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 332.233283][ C0] ? irqentry_exit+0x74/0x90 [ 332.233431][ C0] __x64_sys_openat+0x138/0x170 [ 332.233511][ C0] do_syscall_64+0xfa/0x3b0 [ 332.233556][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.233572][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 332.233588][ C0] ? clear_bhb_loop+0x60/0xb0 [ 332.233645][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.233664][ C0] RIP: 0033:0x7f6d9f18ebe9 [ 332.233702][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.233716][ C0] RSP: 002b:00007f6d9ff96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 332.233731][ C0] RAX: ffffffffffffffda RBX: 00007f6d9f3c6090 RCX: 00007f6d9f18ebe9 [ 332.233744][ C0] RDX: 00000000000026e1 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 332.233755][ C0] RBP: 00007f6d9f211e19 R08: 0000000000000000 R09: 0000000000000000 [ 332.233771][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.233781][ C0] R13: 00007f6d9f3c6128 R14: 00007f6d9f3c6090 R15: 00007fff3f806ba8 [ 332.233935][ C0] [ 332.233950][ C0] Sending NMI from CPU 0 to CPUs 1: [ 333.354275][ C1] NMI backtrace for cpu 1 [ 333.354290][ C1] CPU: 1 UID: 0 PID: 8176 Comm: syz.3.397 Not tainted syzkaller #0 PREEMPT(full) [ 333.354307][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 333.354316][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x83/0x90 [ 333.354342][ C1] Code: 8d 52 28 4d 39 ca 77 22 89 ff 89 f6 49 ff c0 4c 89 01 48 c7 44 11 08 05 00 00 00 48 89 7c 11 10 48 89 74 11 18 48 89 44 11 20 c8 7a bc 09 cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 [ 333.354355][ C1] RSP: 0018:ffffc90000a08568 EFLAGS: 00000006 [ 333.354369][ C1] RAX: ffffffff81b1728f RBX: 0000004d9b8531d8 RCX: 0000000000010100 [ 333.354381][ C1] RDX: ffff888027b98000 RSI: 0000000000000000 RDI: 0000000000000000 [ 333.354390][ C1] RBP: 0000000000000000 R08: ffff8880b8727a83 R09: 1ffff110170e4f50 [ 333.354401][ C1] R10: dffffc0000000000 R11: ffffed10170e4f51 R12: 7fffffffffffffff [ 333.354412][ C1] R13: dffffc0000000000 R14: ffff8880b8723900 R15: 0000000000000003 [ 333.354422][ C1] FS: 00007f3c0c9b66c0(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 333.354435][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 333.354445][ C1] CR2: 0000555568b565c8 CR3: 000000003251e000 CR4: 00000000003526f0 [ 333.354459][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 333.354468][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 333.354477][ C1] Call Trace: [ 333.354483][ C1] [ 333.354489][ C1] tick_program_event+0x8f/0x120 [ 333.354508][ C1] hrtimer_interrupt+0x620/0xaa0 [ 333.354542][ C1] __sysvec_apic_timer_interrupt+0x108/0x410 [ 333.354562][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 333.354581][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 333.354596][ C1] RIP: 0010:__memcg_slab_post_alloc_hook+0x0/0x7f0 [ 333.354616][ C1] Code: b1 a3 8f e8 b2 ea f7 ff e9 aa fd ff ff 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 55 41 57 41 56 41 55 41 54 53 48 81 ec 88 00 00 00 4c [ 333.354628][ C1] RSP: 0018:ffffc90000a087c8 EFLAGS: 00000246 [ 333.354640][ C1] RAX: ffff88804bda9780 RBX: ffff88804bda9780 RCX: 0000000000000001 [ 333.354651][ C1] RDX: 0000000000000820 RSI: 0000000000000000 RDI: ffff88802e9d2640 [ 333.354661][ C1] RBP: 0000000000000820 R08: ffffc90000a087e0 R09: 0000000000000000 [ 333.354671][ C1] R10: ffff88804bda9780 R11: ffffffff81ac3930 R12: 00000000000000e8 [ 333.354681][ C1] R13: ffff88804bda9780 R14: ffff88802e9d2640 R15: 000000000000d700 [ 333.354695][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 333.354726][ C1] kmem_cache_alloc_noprof+0x2bf/0x3c0 [ 333.354745][ C1] ? dst_alloc+0x105/0x170 [ 333.354763][ C1] ? __pfx_ip6_dst_gc+0x10/0x10 [ 333.354778][ C1] dst_alloc+0x105/0x170 [ 333.354797][ C1] icmp6_dst_alloc+0x75/0x420 [ 333.354818][ C1] ndisc_send_skb+0x41f/0x1440 [ 333.354841][ C1] ? ndisc_send_skb+0x20c/0x1440 [ 333.354867][ C1] ? __pfx_ndisc_send_skb+0x10/0x10 [ 333.354886][ C1] ? ndisc_alloc_skb+0x1a6/0x480 [ 333.354925][ C1] addrconf_rs_timer+0x369/0x670 [ 333.354948][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 333.354968][ C1] ? __irq_exit_rcu+0xd8/0x1f0 [ 333.354988][ C1] call_timer_fn+0x17b/0x5f0 [ 333.355006][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 333.355023][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.355040][ C1] ? call_timer_fn+0xbe/0x5f0 [ 333.355059][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 333.355086][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 333.355106][ C1] __run_timer_base+0x61a/0x860 [ 333.355124][ C1] ? ktime_get+0x3e/0x1f0 [ 333.355148][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 333.355164][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 333.355193][ C1] run_timer_softirq+0xb7/0x180 [ 333.355212][ C1] handle_softirqs+0x283/0x870 [ 333.355230][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 333.355248][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 333.355267][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 333.355286][ C1] __irq_exit_rcu+0xca/0x1f0 [ 333.355301][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 333.355322][ C1] irq_exit_rcu+0x9/0x30 [ 333.355335][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 333.355353][ C1] [ 333.355358][ C1] [ 333.355364][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 333.355379][ C1] RIP: 0010:__schedule+0x0/0x4cc0 [ 333.355396][ C1] Code: a9 f6 45 89 f8 89 d9 48 8b 5c 24 08 e9 ee fe ff ff cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 [ 333.355408][ C1] RSP: 0018:ffffc900058d70f8 EFLAGS: 00000286 [ 333.355420][ C1] RAX: 5b285d68b8deff00 RBX: 0000000000000000 RCX: 5b285d68b8deff00 [ 333.355431][ C1] RDX: 0000000000000007 RSI: ffffffff8d9b6a7d RDI: 0000000000000001 [ 333.355440][ C1] RBP: ffffc900058d71b0 R08: ffffffff8fa38037 R09: 1ffffffff1f47006 [ 333.355451][ C1] R10: dffffc0000000000 R11: fffffbfff1f47007 R12: 0000000000000000 [ 333.355461][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000b1ae20 [ 333.355483][ C1] preempt_schedule_irq+0xb5/0x150 [ 333.355501][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 333.355527][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 333.355544][ C1] irqentry_exit+0x6f/0x90 [ 333.355561][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 333.355576][ C1] RIP: 0010:stack_trace_consume_entry+0xa2/0x280 [ 333.355592][ C1] Code: cc 41 0f b6 04 17 84 c0 0f 85 78 01 00 00 44 89 23 b0 01 e9 99 00 00 00 31 c0 e9 92 00 00 00 48 89 f8 48 c1 e8 03 80 3c 10 00 <74> 29 49 89 ff 48 89 74 24 08 49 89 d4 4c 89 04 24 4c 89 cb e8 a5 [ 333.355604][ C1] RSP: 0018:ffffc900058d7278 EFLAGS: 00000246 [ 333.355616][ C1] RAX: 1ffff92000b1ae70 RBX: ffffc900058d738c RCX: 5b285d68b8deff00 [ 333.355627][ C1] RDX: dffffc0000000000 RSI: ffffffff823b2a42 RDI: ffffc900058d7380 [ 333.355638][ C1] RBP: 1ffff92000b1ae72 R08: ffffc900058d7390 R09: 000000000000000a [ 333.355648][ C1] R10: ffffc900058d7318 R11: ffffffff81ac3930 R12: 0000000000000000 [ 333.355658][ C1] R13: 1ffff92000b1ae71 R14: ffffc900058d7388 R15: 1ffff92000b1ae71 [ 333.355673][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 333.355692][ C1] ? alloc_inode+0x82/0x1b0 [ 333.355714][ C1] ? alloc_inode+0x82/0x1b0 [ 333.355740][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 333.355757][ C1] arch_stack_walk+0x10d/0x150 [ 333.355778][ C1] ? alloc_inode+0x82/0x1b0 [ 333.355800][ C1] stack_trace_save+0x9c/0xe0 [ 333.355816][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 333.355840][ C1] save_stack+0xf5/0x1f0 [ 333.355858][ C1] ? __pfx_perf_trace_lock+0x10/0x10 [ 333.355873][ C1] ? __pfx_save_stack+0x10/0x10 [ 333.355889][ C1] ? __free_frozen_pages+0xbc4/0xd30 [ 333.355908][ C1] ? __put_partials+0x156/0x1a0 [ 333.355920][ C1] ? put_cpu_partial+0x17c/0x250 [ 333.355933][ C1] ? __slab_free+0x2d5/0x3c0 [ 333.355946][ C1] ? qlist_free_all+0x97/0x140 [ 333.355961][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 333.355978][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 333.355995][ C1] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 333.356012][ C1] ? security_inode_alloc+0x39/0x330 [ 333.356026][ C1] ? inode_init_always_gfp+0x9ed/0xdc0 [ 333.356049][ C1] ? page_ext_put+0x97/0xc0 [ 333.356071][ C1] __reset_page_owner+0x71/0x1f0 [ 333.356091][ C1] __free_frozen_pages+0xbc4/0xd30 [ 333.356117][ C1] __put_partials+0x156/0x1a0 [ 333.356134][ C1] put_cpu_partial+0x17c/0x250 [ 333.356149][ C1] ? put_cpu_partial+0x6d/0x250 [ 333.356166][ C1] __slab_free+0x2d5/0x3c0 [ 333.356184][ C1] ? __phys_addr+0xd3/0x180 [ 333.356204][ C1] qlist_free_all+0x97/0x140 [ 333.356223][ C1] kasan_quarantine_reduce+0x148/0x160 [ 333.356242][ C1] __kasan_slab_alloc+0x22/0x80 [ 333.356261][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 333.356279][ C1] ? security_inode_alloc+0x39/0x330 [ 333.356296][ C1] security_inode_alloc+0x39/0x330 [ 333.356312][ C1] inode_init_always_gfp+0x9ed/0xdc0 [ 333.356336][ C1] ? __pfx_proc_alloc_inode+0x10/0x10 [ 333.356353][ C1] alloc_inode+0x82/0x1b0 [ 333.356373][ C1] new_inode+0x22/0x170 [ 333.356389][ C1] proc_pid_make_inode+0x21/0x130 [ 333.356410][ C1] proc_ns_dir_lookup+0x697/0x7c0 [ 333.356429][ C1] path_openat+0x10fe/0x3830 [ 333.356445][ C1] ? arch_stack_walk+0xfc/0x150 [ 333.356485][ C1] ? __pfx_path_openat+0x10/0x10 [ 333.356501][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.356523][ C1] ? perf_trace_preemptirq_template+0xa3/0x340 [ 333.356547][ C1] do_filp_open+0x1fa/0x410 [ 333.356563][ C1] ? __lock_acquire+0xab9/0xd20 [ 333.356583][ C1] ? __pfx_do_filp_open+0x10/0x10 [ 333.356608][ C1] ? __pfx_kfree_link+0x10/0x10 [ 333.356634][ C1] ? _raw_spin_unlock+0x28/0x50 [ 333.356650][ C1] ? alloc_fd+0x64c/0x6c0 [ 333.356677][ C1] do_sys_openat2+0x121/0x1c0 [ 333.356695][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 333.356709][ C1] ? irqentry_exit+0x74/0x90 [ 333.356741][ C1] __x64_sys_openat+0x138/0x170 [ 333.356760][ C1] do_syscall_64+0xfa/0x3b0 [ 333.356780][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.356794][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 333.356809][ C1] ? clear_bhb_loop+0x60/0xb0 [ 333.356826][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.356840][ C1] RIP: 0033:0x7f3c0bb8d550 [ 333.356854][ C1] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 333.356866][ C1] RSP: 002b:00007f3c0c9b5f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 333.356881][ C1] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f3c0bb8d550 [ 333.356891][ C1] RDX: 0000000000000002 RSI: 00007f3c0c9b5fa0 RDI: 00000000ffffff9c [ 333.356900][ C1] RBP: 00007f3c0c9b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 333.356910][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 333.356919][ C1] R13: 00007f3c0bdc6038 R14: 00007f3c0bdc5fa0 R15: 00007ffc8b1cac88 [ 333.356942][ C1] [ 333.357278][ C0] Kernel panic - not syncing: softlockup: hung tasks [ 334.327561][ C0] CPU: 0 UID: 0 PID: 8186 Comm: syz.4.398 Tainted: G L syzkaller #0 PREEMPT(full) [ 334.338355][ C0] Tainted: [L]=SOFTLOCKUP [ 334.342704][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 334.352783][ C0] Call Trace: [ 334.356097][ C0] [ 334.358975][ C0] dump_stack_lvl+0x99/0x250 [ 334.363609][ C0] ? __asan_memcpy+0x40/0x70 [ 334.368261][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.373507][ C0] ? __pfx__printk+0x10/0x10 [ 334.378263][ C0] vpanic+0x281/0x750 [ 334.382286][ C0] ? __pfx__printk+0x10/0x10 [ 334.386922][ C0] ? __pfx_vpanic+0x10/0x10 [ 334.391474][ C0] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 334.397588][ C0] panic+0xb9/0xc0 [ 334.401356][ C0] ? __pfx_panic+0x10/0x10 [ 334.405798][ C0] ? nmi_backtrace_stall_check+0x433/0x440 [ 334.411688][ C0] ? irq_work_queue+0xc3/0x140 [ 334.416572][ C0] watchdog_timer_fn+0x862/0x870 [ 334.421581][ C0] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 334.427094][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 334.433031][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 334.439444][ C0] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 334.444954][ C0] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 334.450457][ C0] __hrtimer_run_queues+0x4dd/0xc60 [ 334.455862][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 334.461603][ C0] ? ktime_get_update_offsets_now+0x3ab/0x3d0 [ 334.467792][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 334.473022][ C0] __sysvec_apic_timer_interrupt+0x108/0x410 [ 334.479061][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 334.484738][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 334.490763][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x28/0x90 [ 334.497656][ C0] Code: 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 14 25 08 40 a0 92 65 8b 0d 88 8f e0 10 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b <83> ba 3c 16 00 00 00 74 52 8b 8a 18 16 00 00 83 f9 03 75 47 48 8b [ 334.517290][ C0] RSP: 0018:ffffc90000006a98 EFLAGS: 00000246 [ 334.523399][ C0] RAX: ffffffff81c93a1b RBX: 000000000000002c RCX: 0000000000000100 [ 334.531396][ C0] RDX: ffff88807ccd9e00 RSI: 00000000ffffffff RDI: 0000000000000000 [ 334.539394][ C0] RBP: 00000000ffffffff R08: ffffc90000006d57 R09: 0000000000000000 [ 334.547391][ C0] R10: ffffc90000006d40 R11: fffff52000000dab R12: 1ffff92000000d64 [ 334.555392][ C0] R13: dffffc0000000000 R14: ffffc90000006b40 R15: ffffc90000006b60 [ 334.563458][ C0] ? perf_trace_buf_alloc+0x7b/0x2a0 [ 334.568840][ C0] perf_trace_buf_alloc+0x7b/0x2a0 [ 334.574206][ C0] perf_trace_lock+0x18d/0x3b0 [ 334.579001][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 334.584288][ C0] ? __pfx_perf_trace_lock+0x10/0x10 [ 334.589664][ C0] ? perf_output_begin_forward+0xb1/0xa80 [ 334.595443][ C0] ? rcu_read_unlock+0x87/0xa0 [ 334.600242][ C0] ? rcu_read_unlock+0x87/0xa0 [ 334.605052][ C0] lock_release+0x3b2/0x3e0 [ 334.609665][ C0] rcu_read_unlock+0x93/0xa0 [ 334.614302][ C0] perf_output_begin_forward+0x9bc/0xa80 [ 334.620014][ C0] ? perf_get_regs_user+0x5bc/0x6b0 [ 334.625285][ C0] ? perf_prepare_sample+0x19ab/0x2390 [ 334.630786][ C0] ? __pfx_perf_output_begin_forward+0x10/0x10 [ 334.637048][ C0] ? __irq_exit_rcu+0xd8/0x1f0 [ 334.641944][ C0] perf_event_output_forward+0x2b2/0x430 [ 334.647609][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 334.652850][ C0] ? perf_event_output_forward+0x8f/0x430 [ 334.658618][ C0] ? __pfx_perf_event_output_forward+0x10/0x10 [ 334.664911][ C0] ? __perf_event_account_interrupt+0x55/0x250 [ 334.671117][ C0] ? __perf_event_account_interrupt+0x179/0x250 [ 334.677423][ C0] __perf_event_overflow+0x7cc/0xe10 [ 334.682764][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 334.688049][ C0] ? __pfx___perf_event_overflow+0x10/0x10 [ 334.693923][ C0] ? tracing_gen_ctx_irq_test+0x52/0x160 [ 334.699616][ C0] ? __sanitizer_cov_trace_const_cmp8+0x8/0x90 [ 334.705844][ C0] perf_swevent_event+0x2f4/0x5e0 [ 334.710972][ C0] ? __pfx_perf_swevent_event+0x10/0x10 [ 334.716568][ C0] ? perf_tp_event+0xa8/0x1380 [ 334.721424][ C0] perf_tp_event+0x4f6/0x1380 [ 334.726195][ C0] ? __pfx_perf_tp_event+0x10/0x10 [ 334.731414][ C0] ? lock_release+0x3b2/0x3e0 [ 334.736317][ C0] ? irqentry_exit+0x74/0x90 [ 334.741008][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 334.746299][ C0] perf_trace_run_bpf_submit+0xee/0x170 [ 334.751940][ C0] perf_trace_lock+0x2f8/0x3b0 [ 334.756808][ C0] ? __pfx_perf_trace_lock+0x10/0x10 [ 334.762168][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 334.767421][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 334.772652][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 334.777890][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 334.783134][ C0] lock_release+0x3b2/0x3e0 [ 334.787764][ C0] is_bpf_text_address+0x28d/0x2b0 [ 334.792924][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 334.798188][ C0] kernel_text_address+0xa5/0xe0 [ 334.803174][ C0] __kernel_text_address+0xd/0x40 [ 334.808233][ C0] unwind_get_return_address+0x4d/0x90 [ 334.813724][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 334.819911][ C0] arch_stack_walk+0xfc/0x150 [ 334.824737][ C0] stack_trace_save+0x9c/0xe0 [ 334.829453][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 334.834887][ C0] ? lock_release+0x3b2/0x3e0 [ 334.839656][ C0] kasan_save_track+0x3e/0x80 [ 334.844361][ C0] ? kasan_save_track+0x3e/0x80 [ 334.849235][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 334.854285][ C0] ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 334.860380][ C0] ? __alloc_skb+0x112/0x2d0 [ 334.864996][ C0] ? ndisc_alloc_skb+0x9f/0x480 [ 334.869881][ C0] ? ndisc_send_rs+0x2b5/0x630 [ 334.874662][ C0] ? addrconf_rs_timer+0x369/0x670 [ 334.879801][ C0] ? call_timer_fn+0x17b/0x5f0 [ 334.884597][ C0] ? __run_timer_base+0x61a/0x860 [ 334.889644][ C0] ? run_timer_softirq+0xb7/0x180 [ 334.894690][ C0] ? handle_softirqs+0x283/0x870 [ 334.899649][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 334.904437][ C0] ? irq_exit_rcu+0x9/0x30 [ 334.908892][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 334.914742][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 334.920985][ C0] ? perf_trace_lock+0x263/0x3b0 [ 334.925963][ C0] ? lock_release+0x3b2/0x3e0 [ 334.930679][ C0] ? is_module_text_address+0x18b/0x1e0 [ 334.936264][ C0] ? kernel_text_address+0x94/0xe0 [ 334.941420][ C0] ? __kernel_text_address+0xd/0x40 [ 334.946660][ C0] ? unwind_get_return_address+0x4d/0x90 [ 334.952323][ C0] ? arch_stack_walk+0xfc/0x150 [ 334.957204][ C0] ? stack_trace_save+0x9c/0xe0 [ 334.962133][ C0] ? kasan_save_track+0x3e/0x80 [ 334.967014][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 334.972066][ C0] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 334.977733][ C0] ? getname_flags+0xb8/0x540 [ 334.982440][ C0] ? do_sys_openat2+0xbc/0x1c0 [ 334.987241][ C0] ? __x64_sys_openat+0x138/0x170 [ 334.992296][ C0] ? do_syscall_64+0xfa/0x3b0 [ 334.997004][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.003352][ C0] __kasan_slab_alloc+0x6c/0x80 [ 335.008306][ C0] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 335.014258][ C0] ? __alloc_skb+0x112/0x2d0 [ 335.018947][ C0] __alloc_skb+0x112/0x2d0 [ 335.023457][ C0] ndisc_alloc_skb+0x9f/0x480 [ 335.028224][ C0] ndisc_send_rs+0x2b5/0x630 [ 335.032921][ C0] addrconf_rs_timer+0x369/0x670 [ 335.037971][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 335.043574][ C0] call_timer_fn+0x17b/0x5f0 [ 335.048211][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 335.053709][ C0] ? call_timer_fn+0xbe/0x5f0 [ 335.058439][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 335.063675][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 335.068931][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.074168][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 335.079693][ C0] __run_timer_base+0x61a/0x860 [ 335.084604][ C0] ? ktime_get+0x3e/0x1f0 [ 335.089107][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 335.094517][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 335.100954][ C0] run_timer_softirq+0xb7/0x180 [ 335.105867][ C0] handle_softirqs+0x283/0x870 [ 335.110719][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 335.115585][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 335.120971][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 335.126240][ C0] __irq_exit_rcu+0xca/0x1f0 [ 335.130892][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 335.136219][ C0] irq_exit_rcu+0x9/0x30 [ 335.140507][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 335.146231][ C0] [ 335.149173][ C0] [ 335.152116][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 335.158108][ C0] RIP: 0010:perf_trace_lock+0x263/0x3b0 [ 335.163659][ C0] Code: 4c 89 e7 e8 bf 77 86 00 41 81 c5 18 00 01 00 48 89 da 49 c7 04 24 00 00 00 00 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 0f b6 04 38 <84> c0 0f 85 08 01 00 00 48 89 54 24 18 44 89 6a 08 48 8d 7b 18 41 [ 335.183367][ C0] RSP: 0018:ffffc900059177a0 EFLAGS: 00000a02 [ 335.189455][ C0] RAX: 0000000000000000 RBX: ffffe8ffffcbcec8 RCX: dffffc0000000000 [ 335.197431][ C0] RDX: ffffe8ffffcbcec8 RSI: 0000000000000000 RDI: ffffe8ffffcbced0 [ 335.205679][ C0] RBP: ffffc90005917888 R08: 0000000000000004 R09: 0000000000000004 [ 335.213669][ C0] R10: ffffe8ffffcbceec R11: fffff91ffff979df R12: ffff8880b8632a10 [ 335.221644][ C0] R13: 00000000000e0018 R14: 000000000000002c R15: dffffc0000000000 [ 335.229764][ C0] ? __pfx_perf_trace_lock+0x10/0x10 [ 335.235107][ C0] ? is_module_text_address+0x1d/0x1e0 [ 335.240577][ C0] ? is_module_text_address+0x1d/0x1e0 [ 335.246065][ C0] ? is_module_text_address+0x1d/0x1e0 [ 335.251564][ C0] lock_release+0x3b2/0x3e0 [ 335.256112][ C0] ? is_module_text_address+0x1d/0x1e0 [ 335.261591][ C0] ? is_module_text_address+0x1d/0x1e0 [ 335.267083][ C0] is_module_text_address+0x18b/0x1e0 [ 335.272497][ C0] kernel_text_address+0x94/0xe0 [ 335.277470][ C0] __kernel_text_address+0xd/0x40 [ 335.282506][ C0] unwind_get_return_address+0x4d/0x90 [ 335.287976][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 335.294143][ C0] arch_stack_walk+0xfc/0x150 [ 335.298912][ C0] stack_trace_save+0x9c/0xe0 [ 335.303605][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 335.309053][ C0] ? irqentry_exit+0x74/0x90 [ 335.313700][ C0] kasan_save_track+0x3e/0x80 [ 335.318385][ C0] ? kasan_save_track+0x3e/0x80 [ 335.323237][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 335.328261][ C0] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 335.333910][ C0] ? getname_flags+0xb8/0x540 [ 335.338610][ C0] ? do_sys_openat2+0xbc/0x1c0 [ 335.343392][ C0] ? __x64_sys_openat+0x138/0x170 [ 335.348524][ C0] ? do_syscall_64+0xfa/0x3b0 [ 335.353299][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.359667][ C0] __kasan_slab_alloc+0x6c/0x80 [ 335.364552][ C0] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 335.370026][ C0] ? getname_flags+0xb8/0x540 [ 335.374923][ C0] getname_flags+0xb8/0x540 [ 335.379473][ C0] do_sys_openat2+0xbc/0x1c0 [ 335.384129][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 335.389329][ C0] ? irqentry_exit+0x74/0x90 [ 335.394013][ C0] __x64_sys_openat+0x138/0x170 [ 335.398911][ C0] do_syscall_64+0xfa/0x3b0 [ 335.403437][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.409510][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 335.415675][ C0] ? clear_bhb_loop+0x60/0xb0 [ 335.420386][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.426371][ C0] RIP: 0033:0x7f6d9f18ebe9 [ 335.430891][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.450496][ C0] RSP: 002b:00007f6d9ff96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 335.458940][ C0] RAX: ffffffffffffffda RBX: 00007f6d9f3c6090 RCX: 00007f6d9f18ebe9 [ 335.466913][ C0] RDX: 00000000000026e1 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 335.475408][ C0] RBP: 00007f6d9f211e19 R08: 0000000000000000 R09: 0000000000000000 [ 335.483379][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.491348][ C0] R13: 00007f6d9f3c6128 R14: 00007f6d9f3c6090 R15: 00007fff3f806ba8 [ 335.499419][ C0] [ 335.502694][ C0] Kernel Offset: disabled [ 335.507044][ C0] Rebooting in 86400 seconds..