last executing test programs: 4m40.402698308s ago: executing program 32 (id=11050): syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xd}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='\t!~&\x00') 2m14.944684671s ago: executing program 1 (id=12042): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m14.613083352s ago: executing program 1 (id=12045): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x14905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400200000000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0) 2m14.020224511s ago: executing program 1 (id=12047): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x4, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x1, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="040000000400000004000000050001"], 0x50) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0, 0xffffffffffffffff}, &(0x7f0000000400)=0xa1, &(0x7f00000004c0)=r1}, 0x20) close(r2) 2m13.175321216s ago: executing program 1 (id=12051): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x6c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000001}, 0x94) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0xd0, &(0x7f0000000080), 0x1}, 0x0) 2m12.976797678s ago: executing program 1 (id=12052): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0xa000a, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x0, 0x9, 0xfffc, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x0, 0x1e, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mkdir(&(0x7f0000000040)='./file0/../file0/../file0/file0\x00', 0x0) 2m12.67885743s ago: executing program 1 (id=12054): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r2, 0xc040ff0b, 0x0) 1m57.626582155s ago: executing program 33 (id=12054): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r2, 0xc040ff0b, 0x0) 1m50.526955953s ago: executing program 5 (id=12257): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='c 122'], 0xa) 1m50.302502924s ago: executing program 5 (id=12259): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x9, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bc27, 0x25dfdbfd, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4000000) 1m49.833913862s ago: executing program 5 (id=12262): r0 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x3, {{0xcd2e33a676089c01}}}, 0x10, 0x0}, 0x0) 1m49.618261725s ago: executing program 5 (id=12264): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x828, 0x7fff, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) 1m49.359031344s ago: executing program 5 (id=12266): perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x727, 0x7ffffc, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x10000, 0x5, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) 1m48.597384652s ago: executing program 5 (id=12271): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x26002, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002fff500240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 1m48.180373098s ago: executing program 34 (id=12271): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x26002, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002fff500240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 1m33.573672572s ago: executing program 7 (id=12437): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000050e8850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) 1m33.417728456s ago: executing program 7 (id=12440): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000880)={r2, r0, 0x4, r0}, 0x10) 1m32.980992778s ago: executing program 7 (id=12443): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="05000000060000000800000005"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000004a0850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1m32.918139804s ago: executing program 2 (id=12445): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x7, 0x1, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1m32.81673593s ago: executing program 7 (id=12447): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x80d05a, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x104000, 0x0) 1m32.677516341s ago: executing program 7 (id=12449): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xa, 0x2, 0x73) close(r2) 1m32.572733219s ago: executing program 2 (id=12450): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$inet(r1, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x400c080) 1m32.269590954s ago: executing program 7 (id=12455): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x186dc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90ea, 0x0, @perf_config_ext={0x8000000000000001, 0x100}, 0x1d20, 0x2, 0xffffff7e, 0x9, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m31.79264522s ago: executing program 35 (id=12455): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x186dc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90ea, 0x0, @perf_config_ext={0x8000000000000001, 0x100}, 0x1d20, 0x2, 0xffffff7e, 0x9, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m30.921327002s ago: executing program 2 (id=12465): r0 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e8a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 1m30.654801577s ago: executing program 2 (id=12468): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001480)=@newqdisc={0x468, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x80c4d82edf6e5117}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0x9, 0x6, 0x3ff, 0xf041, 0x36f, 0x1, 0x4, 0x6, 0x3, 0x7, 0x8, 0x6, 0x0, 0x6, 0x7, 0x0, 0x3, 0x2, 0x10001, 0x121c00, 0x1, 0x0, 0x7, 0x2, 0xa, 0x4, 0x6, 0x6, 0x9, 0x7, 0x8001, 0x9, 0x6, 0x3, 0x1, 0x7c10, 0x100, 0x3, 0x3, 0x8001, 0xb566, 0x5, 0x8000, 0x7, 0x5, 0x3, 0x5, 0xe, 0x3, 0x3, 0x6, 0x8, 0x7, 0xe, 0x800, 0x0, 0x4, 0xffffff9a, 0xfffffffe, 0x7fff, 0xffffffff, 0x9, 0x3, 0x3, 0xff, 0x7a5acc5c, 0xa5c7, 0x10, 0x4, 0x5, 0x7, 0x5, 0x1, 0xc02, 0x10, 0x8, 0x100, 0x6e, 0x6, 0x3, 0x5, 0x3, 0x1a, 0x3, 0x8000, 0x40, 0xe80a, 0x5, 0xca7, 0xa4, 0x9, 0x4, 0x40, 0xf, 0x80, 0x3, 0x8, 0x63, 0x3, 0x962, 0xf, 0x61, 0xe4, 0x4b71, 0x10000, 0x6, 0x5, 0x4, 0x3218, 0x7, 0x2d51c862, 0x70, 0xb3e, 0x4, 0x2, 0x2, 0x10, 0x5, 0x181, 0x1, 0x34e, 0x2, 0x7, 0x1ff, 0x8, 0xffff8000, 0xed5, 0x2, 0x0, 0x9, 0x3, 0x6, 0x6, 0x9, 0x6, 0x6, 0x2, 0x9, 0xe, 0x3, 0x6, 0x100, 0x5b, 0x3cf5, 0x4, 0xffffffcb, 0x8, 0x2, 0x7ff, 0x80000000, 0x4, 0x9, 0x0, 0x8, 0x7, 0x200, 0xffff, 0xd8, 0xffff0000, 0x5, 0x4, 0x9, 0x2, 0x87fe, 0x6, 0x7, 0x4, 0xffffffff, 0x6, 0xfff, 0x4, 0x3, 0x2, 0x8, 0x7, 0x5, 0x5, 0x8, 0x80000000, 0x80000001, 0x1, 0xf, 0x2, 0xfffffff9, 0x7, 0x0, 0xf, 0x2, 0x80, 0x1, 0x8be, 0x80, 0x8, 0xa1e, 0x0, 0x2, 0x40, 0x0, 0x3, 0xfda5, 0xfffffffa, 0x1, 0x8, 0x25e, 0x1000, 0x80, 0x3, 0x24000000, 0xad9f, 0x40, 0x20f31a1e, 0x680, 0x5, 0x4, 0x40, 0x9, 0x9, 0x0, 0x40f, 0xffff, 0x1, 0x9, 0xfe68, 0x6, 0x8000, 0x6, 0x80000000, 0x1, 0xffffffb7, 0xfffff341, 0xd7, 0xfffffffa, 0x8, 0x0, 0x14a88, 0x9, 0xffffff01, 0x6, 0xb00000, 0xacc2, 0xffffffff, 0x81, 0x0, 0x400, 0xfffffff9, 0xe367, 0x6, 0x1, 0x636bda8d, 0x762d, 0x8, 0x7, 0x800, 0x7, 0x9]}, @TCA_TBF_RATE64={0xc, 0x4, 0xaddf9c9734f6fd2b}, @TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x1, 0x2, 0x282e, 0x73c4, 0xb}, {0x4, 0x0, 0xd, 0x7fff, 0x4}, 0x7, 0xfffffffa, 0x21ec}}]}}]}, 0x468}, 0x1, 0x0, 0x0, 0x6048041}, 0x4000000) 1m30.418192713s ago: executing program 2 (id=12472): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20a0, 0x0) 1m27.049670959s ago: executing program 2 (id=12491): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x7608c6f1479423af, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="1800000068007f089e", 0x59}, {&(0x7f0000000640)="68cabf2dfb58fc021d6b689866f05d480004fbffffffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae24f89a565ee52dcd729cd39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0) 1m11.775334732s ago: executing program 36 (id=12491): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x7608c6f1479423af, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="1800000068007f089e", 0x59}, {&(0x7f0000000640)="68cabf2dfb58fc021d6b689866f05d480004fbffffffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae24f89a565ee52dcd729cd39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0) 59.669223601s ago: executing program 6 (id=12705): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000100850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 59.432551434s ago: executing program 6 (id=12708): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a410, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xc, 0x2}, 0x104141, 0x4, 0x0, 0x7, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, &(0x7f0000001000)={&(0x7f0000000380)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000b40)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}]}}}], 0x18}, 0x0) 58.899863506s ago: executing program 6 (id=12714): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0}, 0xa100, 0xc8, 0x1000003, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x7, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) 58.764740801s ago: executing program 6 (id=12717): sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000006c0)}, 0x80) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x200000000, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 58.60336245s ago: executing program 6 (id=12719): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x0, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20a0, 0x0) 58.372962412s ago: executing program 6 (id=12722): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230006) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) close(r0) 43.259344655s ago: executing program 37 (id=12722): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230006) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) close(r0) 43.246989353s ago: executing program 4 (id=12836): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) 43.159957684s ago: executing program 4 (id=12837): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000300142603600e1208000f0000000401a8001600a400014005000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 40.948422746s ago: executing program 4 (id=12847): recvmsg(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)=""/175, 0xaf}], 0x1}, 0x12200) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="b702000009000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065060400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c008cbdd3b4c3b7f28754860c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05ae8a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3cf96f9483ff19a6471bf5abc742d9cbcfb964b11b31034694a6aad86cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df424d1bafe5725c8a404724f8a4f1cda7997b65954f74097560b91da309b887af2485c2d9ab09b523000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb7818000000009dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbef88811dc8c1b27ac7d9a6bb70f60eb9c01dd2fc79b85e4d961498f3a80131d21d856177a2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009d81003f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e750339643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2dfae60ab958e9f3ef9b4aaa4e8d6166f636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978a2df2f2a29a387c6f0576b36038f819286eca99a6a434811cf2a117d775fe986a49fb82cf5f15972d5ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e6735305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a54b49e1ae6c5aa620d27e91aa0aa0ed6fcacfc91fbb4c256409e54daefbb107c381fa729ff5f3907d93430da178d685d7730f5e129438a5214f722096d2986334c2576bef69145d3fbd78a9059e454474f92e65828b018174a9f4738b8c71fbdeac26ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a378ed4c6267965af78b861bd025312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68f78215d65f96eb55db8cbcb060008000d988374f85451a694ffe38a1d03916ff10dc82b31c98d42e1a1bda1290de1a499a5a385b31112a48ba3e6d6849914c1788a7aca37177cc341fff44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553e4ece78d4c1501c70f5d81e0725d5b273755c0000000000000000aa4234ff82182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a11993d54f97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a923655800a2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574e6e6aefb7a68da5ec1ae49f968bbe0e0bf9878516f553639f5b4828e92019b61f5874be1c7cdd9482df50bc24b8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483bd8920efcf30a798c2b636243e0a37262ca47dfeefa753ba528f7ba77e825051ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8e220bb4d83de1e4dc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a409315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f0000000086e172932e03000000000000005942e1b9d6dc28ab8e19e1111dd893e801015642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f845d1cc9ec4eee79c298fb0ba939b13707044e2e9cc0d350438c1c8c6bb9a38c6ac5ca0d9cf1f3d6915f25cb26edfc28b3079b97df32601240e454db103fb0c4a143673a3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4054605558ab31f339f6a4caf2ee2fd01f34dca3300000000000000000000000000000000f59f8e6e00000000c44130098d833a24000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c595426ae40d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd603fd7f8898c70b5c65f2e28f22e1a79a6af3a54861b07f124642e98389557affbdede09b5566a4a1ee73b20846810030a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae3a9052be8eec1e95f6ad8d41dd34829503ba4b66e27154cb6e34aa13450522df1723130b6fe347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca1598137ddd1090ded672f5a48a40cab3f640c8241a364cbdd3f188eec7da7bccafbd5bf28a46f0eecc6b550471b0b0770c6a5a411c0e0b19e15a461e7c6833ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd25091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a674bd16b8f7e6aed12a305366599f5f029a7b24558c027518c669760500002f1c19d16a6f391906000000cc0bbbfb8c698ecc137d96711100e0108d3bd2afed0b279ebf0527552a9331e646c424b14ffbb815622bfd2f635855bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc784c9f940d9fb0464a6cce635e14b80dc5c1c64e75e6bd5355d84f8df272f18f58c570e7afd83ee77f157c146aa747b728969aeb4aba1d8f9de1b3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846c0a85f20c80007c0ce6efce627b95b8ad3003385de97101678fb2163ecea6e70a77a6fbc089e31a5ccece932229b8f79faa6863d6857c3d9a9710f9f8ad16eeb8342278f311cbc226498028234d21466892983378fe64acbb44f694cd78e43c74aa75505cb1c91b189f8f89f233a05f5cd4e173a373178557843dd705268f74a9e5429945503195aefd6706b584d8408c9652b3fe68500747f7ee8375fa559c3ad195d3795df1a8364cd13acc3256ee4634c73eeb6954d0fcf09ab84df0b8900e0c6fea2ccb600ae7a4b128cae19df160e7c207b89132d1d5bdc9ffc79f0549b82df521817651d5fead5128205b92ccdccc69407ab556217af277af911dbd456dfc43dd061b6c91485dcc208cf0b3d0bf851de413f5de5ec015e296914afab6411109355e027ce04990d9aae251b9deb11b7db45b9f15b7b55d8fdbedd9e6cf891205694f02be8b9ea8ecd41308a0e1b93ae3435bfa88b440b1f701b4d0fc49c82193f27f8023b630ea97edbf3bf421a0a1a2b4ac7bb30bcd1cdd172c0df37408fd6827bb03e8742fc1c7a2befd1299928c5f79e846a8dc7ca648d960a759e6711b69776896a9656d59af6d44bc5348229fa84ae78af8421a22c4b4c17a3d24a4a0104000000000000d77cc4eef51c2b417c8c7458ddd7dd9d1a863bf0a9e1a30a19020490038017a5c7e474c83302a2c2b5c976dacf3dda7191c757f208000000000000005f7ed983f65723fbb36b9b51abb0dbcd335700000000000000000000000000000086666201251aa4f139d0485ffcf89f01639fd1579a3802f720a0215c720a97071f5065a23642a58275dbca444b00e2e5835185d5d5b2796eb0fe32cf3b0633f58ecc7648c3c6efe82f93a3008052416512eea30ea9472e0b456a652883c0907323cf03be193a05008cdef7a98a1671a1918df310dc4bfd61c3db4819ab1c57b348a8ff1ed36364a20fe846f1cd086058d139ce528425b31c5d08b433562ffb318c1285011f9b78b2401989384311101e452f54661ecdb2514a6ae50dbdd422de0f0f8c670000000000390be79688f80c47314cb1b14afcaa5d23f9032e0ec51f45f447d6a7c798fcf7e60e2180e289410801e4f03a0e140f388f25b92da1025d8409e171a2336ed71cca86eb4658fe06df286e0e20276b0618eeffd05774f15686cd9d3182ca2fec863875f305fed6baf48a594db12582a38cfdffffffffffffff0cf8d920517835fe7d09cfcb624f6931f1cc6f6b71f58de9ddc38e0c43992f6bc57a718d0cfd197b5324b4e05ef1caa96db3ae1f2f2e5791faba2ebbe1a6faf21f2748fb1fb6743c3ca8af4e6b02518c9b7fdc1b5721eb1c3ed98db25536f74ac7861afc94544e52dcb5c60460a05802e3b437ac977bfa26b887a2443e8d559c58187f004eb82b07937df6e96f77ed551926bec4e0188fae10a35d1c5f1768ac6be829bea46f1babc3d74adc31ca71bdab9079e4288881b434484eadde9da6b81802842abd462d546c59d87acc014f81d3414759bda12d2a2c6bc1bfa807bd3101eb227184a61107b6d0618e2a3b842671e084ac3f0ff94dc48b51601247318ab4d1c5106458000000000008000000000000cfee0107e6c2fe8639d926829fdbbd86bf591a8c3c235d8939af9d923f648165881a6c29997234406400b3b1c321cc158dbe17123eace30000000000009ea77cb4d3ca892600000000796de6ae4ae40bdf9a6e8c5dc29562262af9cd54e8e3ecc7e3c8cba0ecc791683496c4e5c1a5729714d9f9031f49b400cd2667b4ea6df54809615a4f973f93e6ccec72f16ff998e29ed99df733680a9d5cea57f99cc139b6ea9014f3000000000000000000000000000000000000feeab45a4046a622b0dceb413e4e39b7317e92cbed46b41ab5115bfb542c933783d750852dfdc6656aaf15e10615a88821f2f1bc53969b52d6852755e7681ad5beda80b38ccd34116b99f50b4fdd967b3f20f260455412b67563e40e323bde9d673fceda0ad6981565c8a183d928903b4f4472dde41b6dcd75314c31e704dfcb222c8359fe88944f852242270c932abfaeece0843d708f5cd25b2a63ae1e79723c1c3c013836b47da0a35d0f34c070000000000000422ae2c148d444dd437a7d2f5e575009bc2d17a199802409329dae8baa58d3de63ad45328a9d4dc1ace543dfe11913c6c6413f8f7a15657d012fea460bb4656a20df1ba26932b0ef49f8ea88d7b4c1289314ba789661640f1b5d7cbae103fa95b0035f1e8e866207d4796eab0992704f9e00be4b1af8dfa9e94ad74e607ea9d7d7a95ed5a15429426abbed8d2c657018305c6f9e5159a5453f958991a908ff4cb2e8cbccb1d3c8daf754e4b01b2edd023e5bfdf293bd28fc1f8885f6edd5a715df4d180247feb08e9e2e5126c48be6098e711f0d86de5d76fdccae34eef9197c32ab4e6fcb52eb9ce18fdb621a75913a97254d783778203ec0bd1a8859683e1d01da4e81fb73bb3b358340a0310bf5ae17b917208da607fd7b125cf99fd3e9056f5184df7570ede94b736ae354b5b8ae2cc473b455f2f86d47c69027676bf1141f316b0f278f1692406572ee82766f8e5ff1cfec2a7a6cab7d0f2582a877c9bd4ca81089373f738d02e6bb4d3df30ac0f041e51ad36e1ff140812baf54b80635cc80963c8f69fa4506f7a30c99d3e538cc0aeafcad86ead38ed949aa3c204aea50e5e0039f01b82595b7dc921a8acc1f76340f060cc9a3acad3451c17dc9b5ca5d10a0cb1708592d1900a046f33761d50895febd9fd58cb132989766cf7c252daac259576ec218e3857e6fa97fe445d1fab51d87302a4bb28a4cfe462ee4849cc6832650188ca187d85509d8beccf9d9cf752368985804195b9fd2faf1aff8248f3981bd55cbbf514cd8365fee72cc7af053e5388ceadadb96a9acd5261df6a90cab13f58f6d563c9ab4ad37297aecffd8446cb2b14ec36a99af8393e3760d5970ba1debdcbccd54012c559ee2797ff962328aa6a252c0756e396ce4d52937546675203bdf1d6b120acac576523f8b1daa922188bf61536312f90dba92fb380c3c6fb5f9883a2c4dd99a1bac9b7cb25ff2ef9bd58ff97ddfdd2d4bcc371ee82245b57cd91a7fa3479cd339f54a5c422b753cd42d441ea881d46e419312db1f0cccced13468a188df7ab4840b9961e2a8b5202c9d9b00ee912572eea15d13abdf3b21ad680c88a513021c1d3a7b30d64960c03a01364b2324966bd89d917b15dcb4f8cbacfe05ddcc213d14189edcd9f8b828ebaaab4f56470d3abef47b6d88dc438c9b0a253c26c386464754e76c0d7bfbc1dfa7248982ec26bd725eb623bb12f96e63eb5d1a0030e58a6653247c986c7ca9f15fd84d5eb1cd5ee35c4f464dc1a789b06c6c7074fc927680eac8546b2aee2f8867d6bf36b88a99ff67c7b2dd68ae3380622653efcad276a0f4b446091b80653014e67629dfde0091c7f090a22b5c427d03ddbc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa6, 0x0, 0x0, 0x10, 0x3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 40.666741527s ago: executing program 4 (id=12851): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg(r0, &(0x7f0000003800)={0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000000200)="56216446d80724d1bf36", 0xa}, {&(0x7f0000000240)="dacf109ba9c848972dbe847097221e5a49839e46360451989e61008ef544beade671e9fa2a613e2b4512d90de7d889352e4f232e0d2c2eacfc0f554487f9fe887612568de2e77189fc2a3b09f2bedfdfaacfcc77c288a8d8bac2ce4894267d7158dbff824a8ed0d5962577b65b271044913a80beada7c0e9f31aa877da7b67d4e3f7f604656b344bc961831878d516aea4b99e7cd70edfb7dc75f11e25af0c7d8d3854ce6a52fe3accf319b191ddcc1e9f7e31c6", 0xb4}, {&(0x7f0000001f80)="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", 0xc8f}], 0x3}, 0x240440d4) 39.906772149s ago: executing program 4 (id=12858): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x0, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20a0, 0x0) 38.606075893s ago: executing program 4 (id=12871): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0xfffffffffffffffc, 0xc}, 0x10410, 0x0, 0x6, 0x8, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="0001008dff00"}) 23.415210214s ago: executing program 38 (id=12871): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0xfffffffffffffffc, 0xc}, 0x10410, 0x0, 0x6, 0x8, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="0001008dff00"}) 14.965761366s ago: executing program 3 (id=13097): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000018"], 0xfe33) 14.612608033s ago: executing program 3 (id=13099): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x10, 0x0, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000003, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x800, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x800, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x0, 0x6e6bbc}}, 0xb8}, 0x1, 0x0, 0x0, 0x8044821}, 0x0) 14.026860236s ago: executing program 3 (id=13102): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2, 0x6}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_QUANTUM={0xfffffe6c, 0x2, 0x400}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x7}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) 13.641548636s ago: executing program 3 (id=13106): close(0xffffffffffffffff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x3a84821, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x3a84821, 0x0) 13.486455367s ago: executing program 3 (id=13108): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x1}, 0x114905, 0x4, 0x0, 0x5, 0x7, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xd}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071115e00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000040)='\t!~&\x00') 12.182070487s ago: executing program 3 (id=13117): perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1000001, 0x40, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x6, 0x8}, 0x10828, 0x0, 0x0, 0x2, 0x5, 0x800000, 0x0, 0x0, 0x5, 0x0, 0x40}, 0x0, 0x4, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800d00000003600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 2.153250345s ago: executing program 8 (id=13178): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.975306019s ago: executing program 8 (id=13181): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, 0x0, {0xd, 0xc}, {0x5, 0xe}, {0xd, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x14, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x2}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc004841}, 0x81) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500211d", 0x2c}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 1.773692545s ago: executing program 8 (id=13183): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x11, 0x2, 0x300, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@ifindex=r1, 0x2f, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.595078042s ago: executing program 8 (id=13185): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x5828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x1, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) 1.551607333s ago: executing program 0 (id=13186): socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x1}, 0x114905, 0x4, 0x0, 0x5, 0x7, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x1b, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"/1367], &(0x7f0000000100)='GPL\x00', 0x9}, 0x48) 1.509561145s ago: executing program 9 (id=13187): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffd1, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x12, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_TARGET={0x8, 0x8, 0x100}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) 1.194783947s ago: executing program 0 (id=13188): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x104}, 0x1, 0x0, 0x0, 0x10004000}, 0x20004080) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r2, &(0x7f0000000000), 0x0}, 0x20) 1.090492124s ago: executing program 8 (id=13189): syz_clone(0x82200011, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x2, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000840)="9c", 0x34000}], 0x1}, 0x4008010) 1.079403625s ago: executing program 9 (id=13190): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2, 0x0, 0xff, 0x5, 0x0, 0x0, 0x0, 0x8ed9e90c1d4f2726, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x3, 0x2, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d80000001e0081124e81f782db4cb9040a1d080006007c095dd2086518000a800de7ffff02600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa500000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 969.024847ms ago: executing program 0 (id=13191): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000008e00001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000041000103030000000000000003"], 0x18}}, 0x0) 809.013321ms ago: executing program 9 (id=13192): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x4, 0x4, 0x3, 0x0, 0xf, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x8, 0x400, 0xfffffffb}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x8, 0x3}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x2404c080}, 0x0) 753.63993ms ago: executing program 0 (id=13193): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000002000000000c0000000010200000", @ANYRES32=r0], 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 549.419071ms ago: executing program 8 (id=13194): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/nbt/\xd3pv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfdfffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c2"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 361.309661ms ago: executing program 9 (id=13195): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 261.142306ms ago: executing program 0 (id=13196): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x1, 0x9, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20044080}, 0x8000) 175.953504ms ago: executing program 9 (id=13197): socket$kcm(0x10, 0x2, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x50, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xb, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="71000000d6090000000089119c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = socket(0xa, 0x3, 0x87) sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x9, @dev={0xfe, 0x80, '\x00', 0x43}, 0x7, 0x4}, 0x18, &(0x7f0000000680)=[{0x0}, {&(0x7f00000005c0)='r', 0x1}], 0x10}, 0x0) 116.969065ms ago: executing program 9 (id=13198): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xeedb, 0x4156, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x105e39, 0x0, 0xfffffffe, 0x6, 0x5, 0x2, 0x101, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r1, 0x0, &(0x7f0000001780)=""/4096}, 0x20) 0s ago: executing program 0 (id=13199): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000001400000000000000ffff020018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000070000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400003e000000850000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000001700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) kernel console output (not intermixed with test programs): eft promiscuous mode [ 689.185621][T26424] veth0: left promiscuous mode [ 689.298821][T26424] veth1: left promiscuous mode [ 689.551544][T26424] wg0: left promiscuous mode [ 689.616658][T26475] netlink: 'syz.4.9798': attribute type 9 has an invalid length. [ 689.645000][T26424] wg1: left promiscuous mode [ 689.781640][T26424] veth0_to_bridge: left promiscuous mode [ 689.978829][T26424] veth1_to_bridge: left promiscuous mode [ 690.212484][T26424] veth0_to_bond: left promiscuous mode [ 690.701795][T26424] veth1_to_bond: left promiscuous mode [ 690.803420][T26424] bond_slave_1: left promiscuous mode [ 691.017170][T26424] veth0_to_team: left promiscuous mode [ 691.087061][T26424] team_slave_0: left promiscuous mode [ 691.171701][T26424] veth1_to_team: left promiscuous mode [ 691.259403][T26424] team_slave_1: left promiscuous mode [ 691.333685][T26424] veth0_to_batadv: left promiscuous mode [ 691.453855][T26424] batadv_slave_0: left promiscuous mode [ 691.706505][T26424] veth1_to_batadv: left promiscuous mode [ 691.805675][T26424] batadv_slave_1: left promiscuous mode [ 691.940226][T26424] xfrm0: left promiscuous mode [ 692.040233][T26424] veth1_to_hsr: left promiscuous mode [ 692.234405][T26424] hsr0: left promiscuous mode [ 692.329670][T26424] veth1_virt_wifi: left promiscuous mode [ 692.452906][T26424] veth0_virt_wifi: left promiscuous mode [ 692.640751][T26424] virt_wifi0: left promiscuous mode [ 692.979948][T26424] vlan0: left promiscuous mode [ 693.122060][T26424] vlan1: left promiscuous mode [ 693.164129][T26499] netlink: 'syz.4.9808': attribute type 27 has an invalid length. [ 693.184188][T26499] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.9808'. [ 693.210374][T26424] macvlan0: left promiscuous mode [ 693.295483][T26424] macvlan1: left promiscuous mode [ 693.384049][T26424] ipvlan0: left promiscuous mode [ 693.468824][T26424] ipvlan1: left promiscuous mode [ 693.571214][T26424] geneve0: left promiscuous mode [ 693.670044][T26424] geneve1: left promiscuous mode [ 693.767797][T26424] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 693.776272][T26505] netlink: 4528 bytes leftover after parsing attributes in process `syz.4.9811'. [ 693.842241][T26424] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 693.935127][T26424] netdevsim netdevsim2 netdevsim2: left promiscuous mode [ 694.013658][T26424] netdevsim netdevsim2 netdevsim3: left promiscuous mode [ 694.093895][T26424] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 694.200966][T26424] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 694.299919][T26424] mac80211_hwsim hwsim24 wlan2: left promiscuous mode [ 694.410017][T26424] mac80211_hwsim hwsim29 wlan3: left promiscuous mode [ 694.499704][T26424] dummy1: left promiscuous mode [ 694.581236][T26424] veth2: left promiscuous mode [ 694.670654][T26424] veth3: left promiscuous mode [ 694.839980][T26424] mac80211_hwsim hwsim44 wlan4: left promiscuous mode [ 694.989247][T26424] mac80211_hwsim hwsim48 wlan5: left promiscuous mode [ 695.074554][T26424] dummy2: left promiscuous mode [ 695.172868][T26424] mac80211_hwsim hwsim51 wlan6: left promiscuous mode [ 695.638628][T23806] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.683906][T23806] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.804469][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.842747][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.918793][T25826] veth0_vlan: entered promiscuous mode [ 696.088156][T25826] veth1_vlan: entered promiscuous mode [ 696.401986][T25826] veth0_macvtap: entered promiscuous mode [ 696.534605][T25826] veth1_macvtap: entered promiscuous mode [ 696.912048][T25826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 697.232581][T25826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 697.426221][ T1013] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.525166][ T1013] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.649862][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.694371][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.536172][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.579480][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.940114][T23806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.022213][T23806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.516865][T26507] netdevsim0 speed is unknown, defaulting to 1000 [ 700.854904][T26600] netlink: 'syz.0.9839': attribute type 10 has an invalid length. [ 700.894931][T26600] netlink: 'syz.0.9839': attribute type 8 has an invalid length. [ 704.843070][T26662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9858'. [ 706.452603][T26692] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9869'. [ 706.544737][T26692] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9869'. [ 708.515576][T26729] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.9883'. [ 708.608136][T26733] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9884'. [ 713.926641][T26804] netlink: 16162 bytes leftover after parsing attributes in process `syz.0.9915'. [ 715.986477][T26839] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9930'. [ 719.464640][T26872] tmpfs: Bad value for 'gid' [ 719.512564][T26872] tmpfs: Bad value for 'gid' [ 720.360409][T26884] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9951'. [ 724.397361][T26950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9984'. [ 724.887231][T26950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9984'. [ 725.612408][T26965] netlink: 'syz.4.9988': attribute type 29 has an invalid length. [ 725.673260][T26966] netlink: 'syz.4.9988': attribute type 29 has an invalid length. [ 726.662699][T26981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9997'. [ 727.681116][T27007] netdevsim0: mtu less than device minimum [ 727.758590][T27009] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10009'. [ 728.006563][T27017] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.10014'. [ 728.057251][T27016] netlink: 'syz.1.10013': attribute type 2 has an invalid length. [ 728.091464][T27018] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.10014'. [ 728.163820][T27021] netlink: 'syz.4.10015': attribute type 21 has an invalid length. [ 728.206769][T27021] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10015'. [ 729.173776][T27037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10022'. [ 729.216556][T27037] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 730.271537][T27065] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10037'. [ 731.415922][T27079] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 732.223441][T27101] netlink: 763 bytes leftover after parsing attributes in process `syz.3.10053'. [ 734.287576][T27135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10070'. [ 735.016909][T27159] netlink: 'syz.0.10082': attribute type 1 has an invalid length. [ 736.727225][T27192] netlink: 'syz.4.10096': attribute type 1 has an invalid length. [ 736.811144][T27192] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10096'. [ 737.499655][T27198] netlink: 'syz.1.10099': attribute type 46 has an invalid length. [ 737.527299][T27198] netlink: 55 bytes leftover after parsing attributes in process `syz.1.10099'. [ 743.795083][T27259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10125'. [ 744.067248][T27259] bond0: (slave bond_slave_0): Releasing backup interface [ 744.197869][T27266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 744.485738][T27259] : renamed from bond_slave_0 [ 744.523203][T27259] : entered promiscuous mode [ 744.541268][T27259] : entered allmulticast mode [ 747.030162][T27313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10146'. [ 747.257046][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.268331][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.675996][T27358] netlink: 'syz.2.10161': attribute type 29 has an invalid length. [ 749.734480][T27364] netlink: 'syz.2.10161': attribute type 29 has an invalid length. [ 757.630445][T27455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10199'. [ 757.681263][T27455] netlink: 1 bytes leftover after parsing attributes in process `syz.0.10199'. [ 758.191006][T27471] netlink: 'syz.3.10205': attribute type 10 has an invalid length. [ 758.223462][T27471] netlink: 'syz.3.10205': attribute type 19 has an invalid length. [ 758.311240][T27471] netlink: 156 bytes leftover after parsing attributes in process `syz.3.10205'. [ 763.960721][T27563] netlink: 352 bytes leftover after parsing attributes in process `syz.3.10239'. [ 764.606604][T27581] tipc: Enabling of bearer rejected, media not registered [ 764.952308][T27593] openvswitch: netlink: Missing valid actions attribute. [ 764.993037][T27593] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 769.945763][T27683] netlink: 'syz.0.10288': attribute type 2 has an invalid length. [ 771.412014][T27700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10296'. [ 771.469410][T27700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10296'. [ 771.540751][T27700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10296'. [ 771.900818][T27715] netlink: 'syz.4.10305': attribute type 1 has an invalid length. [ 774.914604][ T5776] Bluetooth: hci0: command 0x0406 tx timeout [ 775.094913][T27772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10330'. [ 775.774602][T27794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10340'. [ 776.640397][T27807] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10346'. [ 777.747768][T27832] netlink: 104 bytes leftover after parsing attributes in process `syz.1.10358'. [ 777.986516][T27837] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10360'. [ 783.455196][T27914] netlink: 271 bytes leftover after parsing attributes in process `syz.3.10394'. [ 783.663669][T27920] netlink: 'syz.4.10397': attribute type 219 has an invalid length. [ 785.416704][T27937] netlink: 'syz.3.10404': attribute type 1 has an invalid length. [ 785.922595][T27954] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10414'. [ 786.655044][T27974] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 786.673022][T27974] syzkaller0: linktype set to 825 [ 788.915428][T28015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10440'. [ 789.133621][T28017] netlink: 64999 bytes leftover after parsing attributes in process `syz.3.10441'. [ 791.164541][T28058] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.10458'. [ 795.488706][T28111] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10478'. [ 796.642841][T28126] netlink: 'syz.1.10484': attribute type 39 has an invalid length. [ 796.650185][T28129] netlink: 'syz.2.10485': attribute type 4 has an invalid length. [ 796.718796][T28129] netlink: 'syz.2.10485': attribute type 17 has an invalid length. [ 797.606373][T28137] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 798.639358][T28151] tap0: tun_chr_ioctl cmd 1074025677 [ 798.680201][T28151] tap0: linktype set to 0 [ 798.964239][T28162] pimreg: tun_chr_ioctl cmd 1074025677 [ 799.009454][T28162] pimreg: linktype set to 776 [ 799.027509][T28164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10499'. [ 802.108870][T28217] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10521'. [ 802.885648][T28235] netlink: 'syz.3.10529': attribute type 17 has an invalid length. [ 804.472457][T28245] siw: device registration error -23 [ 804.575022][T28250] netlink: 'syz.1.10536': attribute type 19 has an invalid length. [ 804.641200][T28250] netlink: 14552 bytes leftover after parsing attributes in process `syz.1.10536'. [ 804.664147][T28248] netlink: 'syz.3.10534': attribute type 10 has an invalid length. [ 804.782837][T28248] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10534'. [ 804.974522][T28253] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10537'. [ 805.085863][T28257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10540'. [ 805.152984][T28258] C: renamed from veth1_to_team (while UP) [ 805.250077][T28258] netlink: 'syz.0.10539': attribute type 2 has an invalid length. [ 805.308630][T28258] netlink: 116 bytes leftover after parsing attributes in process `syz.0.10539'. [ 805.376507][T28258] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 808.682241][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.705660][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.163971][T28323] netlink: 179624 bytes leftover after parsing attributes in process `syz.0.10566'. [ 810.397556][T28343] tap0: tun_chr_ioctl cmd 1074025678 [ 810.450644][T28343] tap0: group set to 0 [ 810.957100][T28355] openvswitch: netlink: Missing key (keys=40, expected=100) [ 818.310840][T28423] netlink: 'syz.0.10607': attribute type 10 has an invalid length. [ 818.356747][T28423] netlink: 3531 bytes leftover after parsing attributes in process `syz.0.10607'. [ 824.838477][T28512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10643'. [ 827.370701][T28566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10667'. [ 833.315952][T28631] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10696'. [ 834.436941][T28651] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 834.476192][T28651] syzkaller1: linktype set to 823 [ 838.210208][T28679] netlink: 'syz.4.10718': attribute type 8 has an invalid length. [ 840.778912][T28724] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10737'. [ 841.483020][T28742] can: request_module (can-proto-0) failed. [ 841.568472][T28745] can: request_module (can-proto-4) failed. [ 842.539723][T28766] netlink: 14 bytes leftover after parsing attributes in process `syz.3.10755'. [ 842.755335][T28770] pimreg: tun_chr_ioctl cmd 1074812118 [ 846.497778][T28833] pimreg: tun_chr_ioctl cmd 1074025677 [ 846.544489][T28833] pimreg: linktype set to 270 [ 846.604534][T28838] netlink: 'syz.2.10786': attribute type 29 has an invalid length. [ 846.957802][T28840] netlink: 'syz.2.10786': attribute type 29 has an invalid length. [ 847.036074][T28842] netlink: 'syz.2.10786': attribute type 29 has an invalid length. [ 849.053491][T28876] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10800'. [ 852.069837][T28922] veth4: entered promiscuous mode [ 852.185978][T28922] veth4: entered allmulticast mode [ 854.034578][T28951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 854.975200][T28972] netlink: 'syz.3.10843': attribute type 23 has an invalid length. [ 858.122044][T29050] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10877'. [ 858.393369][T29053] proc: Bad value for 'gid' [ 859.459862][T29060] pimreg: tun_chr_ioctl cmd 1074025677 [ 859.509895][T29060] pimreg: linktype set to 6 [ 862.153983][T29083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10891'. [ 862.158148][T29081] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10890'. [ 862.187743][T29082] netlink: 596 bytes leftover after parsing attributes in process `syz.2.10889'. [ 862.429093][T29085] syzkaller0: tun_chr_ioctl cmd 35108 [ 862.895179][T29095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10896'. [ 864.120457][T29108] tap0: tun_chr_ioctl cmd 1074025677 [ 864.153346][T29108] tap0: linktype set to 3 [ 866.610053][T29152] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10918'. [ 866.767722][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 868.154038][T29163] C: renamed from veth1_to_team (while UP) [ 868.535847][T29163] netlink: 'syz.3.10923': attribute type 3 has an invalid length. [ 868.561893][T29163] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10923'. [ 868.601570][T29163] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 868.672207][T29173] netlink: 'syz.1.10926': attribute type 1 has an invalid length. [ 868.727679][T29173] netlink: 'syz.1.10926': attribute type 2 has an invalid length. [ 868.804516][T29173] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10926'. [ 870.107164][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.160340][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.871346][T29213] netlink: 92 bytes leftover after parsing attributes in process `syz.2.10944'. [ 873.972762][T29256] openvswitch: netlink: IP tunnel attribute has 6 unknown bytes. [ 874.014085][T29256] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 874.811028][T29270] netlink: 'syz.1.10968': attribute type 19 has an invalid length. [ 874.863248][T29270] netlink: 144 bytes leftover after parsing attributes in process `syz.1.10968'. [ 875.513157][T29289] ovs-system: entered promiscuous mode [ 875.533118][T29290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10976'. [ 875.734379][T29290] openvswitch: netlink: Flow actions attr not present in new flow. [ 882.727154][T29379] netlink: 165 bytes leftover after parsing attributes in process `syz.2.11012'. [ 886.540360][T29447] netlink: 'syz.0.11041': attribute type 3 has an invalid length. [ 886.629134][T29447] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.11041'. [ 886.949561][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.575246][ T5776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 887.588473][ T5776] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 887.608212][ T5776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 887.623629][ T5776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 887.634133][ T5776] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 888.338984][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.706042][ T5776] Bluetooth: hci3: command tx timeout [ 889.793772][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.285781][T29497] netlink: 'syz.1.11058': attribute type 2 has an invalid length. [ 890.306315][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.327327][T29497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11058'. [ 891.784185][ T5776] Bluetooth: hci3: command tx timeout [ 892.570614][T29515] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11063'. [ 893.864917][ T5776] Bluetooth: hci3: command tx timeout [ 895.954123][ T5776] Bluetooth: hci3: command tx timeout [ 897.402715][ T12] : left promiscuous mode [ 899.180379][T29539] netlink: 165 bytes leftover after parsing attributes in process `syz.1.11070'. [ 900.258449][T29478] netdevsim0 speed is unknown, defaulting to 1000 [ 902.227902][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 902.246908][T29455] netdevsim0 speed is unknown, defaulting to 1000 [ 902.383250][T29581] tap0: tun_chr_ioctl cmd 1074025672 [ 902.434057][T29581] tap0: ignored: set checksum enabled [ 904.558913][T25828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 904.570175][T25828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 904.579399][T25828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 904.617620][T25828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 904.630567][T25828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 906.744320][T25828] Bluetooth: hci5: command tx timeout [ 907.138425][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 908.753537][T29455] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.794303][T29455] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.824311][T25828] Bluetooth: hci5: command tx timeout [ 908.837523][T29455] bridge_slave_0: entered allmulticast mode [ 908.872503][T29455] bridge_slave_0: entered promiscuous mode [ 909.003640][T29455] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.027677][T29455] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.061549][T29455] bridge_slave_1: entered allmulticast mode [ 909.198328][T29455] bridge_slave_1: entered promiscuous mode [ 910.027398][T29455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 910.069655][T29684] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11109'. [ 910.372357][ T12] hsr_slave_1: left promiscuous mode [ 910.411029][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 910.453141][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 910.551992][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 910.577947][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 910.810557][ T12] veth1_vlan: left promiscuous mode [ 910.834016][ T12] veth0_vlan: left promiscuous mode [ 910.905759][T25828] Bluetooth: hci5: command tx timeout [ 912.984496][T25828] Bluetooth: hci5: command tx timeout [ 915.633307][ T12] team0 (unregistering): Port device team_slave_0 removed [ 917.250565][T29455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 917.530558][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 917.560734][T29706] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.11116'. [ 918.635779][T29455] team0: Port device team_slave_0 added [ 918.676185][T29455] team0: Port device team_slave_1 added [ 918.897959][T29455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 918.954093][T29455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 919.100578][T29725] netlink: 'syz.1.11122': attribute type 2 has an invalid length. [ 919.260799][T29725] netlink: 'syz.1.11122': attribute type 3 has an invalid length. [ 919.301601][T29725] netlink: 164 bytes leftover after parsing attributes in process `syz.1.11122'. [ 919.383276][T29455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 919.467863][T29455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 919.491721][T29455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 919.640346][T29455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 919.697942][T29608] netdevsim0 speed is unknown, defaulting to 1000 [ 920.877426][T29455] hsr_slave_0: entered promiscuous mode [ 921.081650][T29455] hsr_slave_1: entered promiscuous mode [ 921.129620][T29455] debugfs: 'hsr0' already exists in 'hsr' [ 921.202619][T29455] Cannot create hsr debugfs directory [ 922.026751][T29750] netlink: 'syz.1.11129': attribute type 2 has an invalid length. [ 922.068883][T29750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11129'. [ 922.339502][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.368471][ T5272] 8021q: adding VLAN 0 to HW filter on device eth4 [ 922.412751][T29755] netlink: 'syz.2.11130': attribute type 10 has an invalid length. [ 922.444633][T29755] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.11130'. [ 922.529920][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.754769][T29766] openvswitch: netlink: IP tunnel TTL not specified. [ 922.842938][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.029907][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.507948][ T12] bridge_slave_1: left allmulticast mode [ 924.519552][ T12] bridge_slave_1: left promiscuous mode [ 924.536489][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.561866][ T12] bridge_slave_0: left allmulticast mode [ 924.577761][ T12] bridge_slave_0: left promiscuous mode [ 924.588229][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.864614][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 924.880076][ T12] bond0 (unregistering): Released all slaves [ 925.095430][ T12] ovs-system: left promiscuous mode [ 925.348107][T29608] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.364237][T29608] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.381834][T29608] bridge_slave_0: entered allmulticast mode [ 925.403769][T29608] bridge_slave_0: entered promiscuous mode [ 925.414493][T29455] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 925.453496][T29455] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 925.561096][T29608] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.572285][T29608] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.594263][T29608] bridge_slave_1: entered allmulticast mode [ 925.623956][T29608] bridge_slave_1: entered promiscuous mode [ 925.666827][T29781] netdevsim0 speed is unknown, defaulting to 1000 [ 925.673622][T29455] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 925.701996][T29819] netlink: 5 bytes leftover after parsing attributes in process `syz.1.11143'. [ 925.770888][T29455] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 925.812126][T29455] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 925.845938][T29455] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 925.913606][T29455] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 926.002811][T29455] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 926.035999][T29608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 926.307688][T29608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 926.546315][T29608] team0: Port device team_slave_0 added [ 926.571446][T29608] team0: Port device team_slave_1 added [ 926.911171][T29608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 926.934429][T29608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 926.990726][T29608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 927.050952][T29608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 927.074097][T29608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 927.144303][T29608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 927.678583][T29608] hsr_slave_0: entered promiscuous mode [ 927.732034][T29608] hsr_slave_1: entered promiscuous mode [ 927.778276][T29608] debugfs: 'hsr0' already exists in 'hsr' [ 927.795797][T29608] Cannot create hsr debugfs directory [ 928.433165][ T12] hsr_slave_0: left promiscuous mode [ 928.442875][ T12] hsr_slave_1: left promiscuous mode [ 928.449622][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 928.473207][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 928.522283][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 928.553450][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 928.669448][ T12] veth1_macvtap: left promiscuous mode [ 928.683122][ T12] veth0_macvtap: left promiscuous mode [ 928.735885][ T12] veth1_vlan: left promiscuous mode [ 928.766841][ T12] veth0_vlan: left promiscuous mode [ 929.341171][ T12] team0 (unregistering): Port device team_slave_1 removed [ 929.373907][ T12] team0 (unregistering): Port device team_slave_0 removed [ 930.186472][T29455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 930.276608][T29455] 8021q: adding VLAN 0 to HW filter on device team0 [ 930.324020][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.331227][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 930.388538][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.395752][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 930.566141][T29608] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 930.686072][T29608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 930.710282][T29608] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 930.734539][T29608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 930.743174][T29608] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 930.841869][T29608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 930.871608][T29608] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 931.037379][T29608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 931.492464][T29608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 931.545869][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.556028][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.605236][T29608] 8021q: adding VLAN 0 to HW filter on device team0 [ 931.645261][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.652483][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 931.751300][T23806] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.758517][T23806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 932.797886][T29455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 933.007446][T29455] veth0_vlan: entered promiscuous mode [ 933.078102][T29455] veth1_vlan: entered promiscuous mode [ 933.241846][T29455] veth0_macvtap: entered promiscuous mode [ 933.328607][T29455] veth1_macvtap: entered promiscuous mode [ 933.487622][T29608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 933.506585][T29455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 933.561156][T29455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 933.615124][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.644168][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.817148][ T140] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.934923][T23806] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.169608][T23806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 934.211131][T23806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 934.296480][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 934.316008][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 934.472389][T30002] netlink: 'syz.2.11172': attribute type 1 has an invalid length. [ 934.482633][T29608] veth0_vlan: entered promiscuous mode [ 934.553182][T29608] veth1_vlan: entered promiscuous mode [ 934.569891][T30002] netlink: 'syz.2.11172': attribute type 4 has an invalid length. [ 934.618346][T30002] netlink: 'syz.2.11172': attribute type 2 has an invalid length. [ 934.643863][T30007] netlink: 76 bytes leftover after parsing attributes in process `syz.3.11040'. [ 934.656442][T30002] netlink: 'syz.2.11172': attribute type 1 has an invalid length. [ 934.681180][T30002] netlink: 'syz.2.11172': attribute type 5 has an invalid length. [ 934.694316][T30007] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 934.722591][T30002] netlink: 88 bytes leftover after parsing attributes in process `syz.2.11172'. [ 934.851903][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 934.873290][T29608] veth0_macvtap: entered promiscuous mode [ 934.921772][T29608] veth1_macvtap: entered promiscuous mode [ 934.949332][T30014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11176'. [ 935.040724][T29608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 935.082353][T29608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 935.099793][T30017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11176'. [ 935.155047][ T48] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.188726][ T48] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.268440][ T48] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.296484][ T48] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.617201][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 935.640986][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 935.843919][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 935.861698][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 936.869973][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 936.987991][T30058] netlink: 'syz.4.11179': attribute type 10 has an invalid length. [ 937.052139][T30073] netlink: 104 bytes leftover after parsing attributes in process `syz.1.11194'. [ 937.611035][T30089] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11199'. [ 937.823454][T30058] team0: Device nlmon0 is of different type [ 938.229007][T30101] tun0: tun_chr_ioctl cmd 1074025677 [ 938.250395][T30101] tun0: linktype set to 780 [ 938.519809][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 939.136197][T30141] blkio.reset_stats is deprecated [ 939.978976][T30163] netlink: 'syz.2.11223': attribute type 29 has an invalid length. [ 940.013868][T30163] netlink: 'syz.2.11223': attribute type 29 has an invalid length. [ 940.053048][T30163] netlink: 'syz.2.11223': attribute type 29 has an invalid length. [ 940.265824][ T5272] 8021q: adding VLAN 0 to HW filter on device eth4 [ 941.400653][T30215] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11237'. [ 941.738710][T30225] netlink: 'syz.1.11240': attribute type 27 has an invalid length. [ 943.836593][T30277] netlink: 60 bytes leftover after parsing attributes in process `syz.5.11256'. [ 943.947542][T30281] netlink: 60 bytes leftover after parsing attributes in process `syz.5.11256'. [ 944.064464][T30277] netlink: 60 bytes leftover after parsing attributes in process `syz.5.11256'. [ 944.183882][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 944.209816][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 944.222532][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 944.235033][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 944.249186][ T5776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 945.266245][T30317] netlink: 9275 bytes leftover after parsing attributes in process `syz.5.11266'. [ 946.182898][T30335] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11269'. [ 946.354143][ T5776] Bluetooth: hci0: command tx timeout [ 947.538932][T30283] netdevsim0 speed is unknown, defaulting to 1000 [ 948.424077][ T5776] Bluetooth: hci0: command tx timeout [ 949.176832][T23806] bridge0: port 4(team0) entered disabled state [ 949.440976][T30386] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11279'. [ 949.469644][T30386] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11279'. [ 949.562700][T30391] netlink: 104 bytes leftover after parsing attributes in process `syz.3.11281'. [ 950.373811][T23806] bond0: left allmulticast mode [ 950.444741][T23806] bond_slave_0: left allmulticast mode [ 950.467355][T23806] bond_slave_1: left allmulticast mode [ 950.484992][T23806] bond0: left promiscuous mode [ 950.498071][T23806] bond_slave_0: left promiscuous mode [ 950.505053][ T5776] Bluetooth: hci0: command tx timeout [ 950.517394][T23806] bond_slave_1: left promiscuous mode [ 950.554958][T23806] bridge0: port 3(bond0) entered disabled state [ 951.091230][T23806] bridge_slave_1: left allmulticast mode [ 951.113574][T23806] bridge_slave_1: left promiscuous mode [ 951.138671][T23806] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.175603][T23806] bridge_slave_0: left allmulticast mode [ 951.209146][T23806] bridge_slave_0: left promiscuous mode [ 951.226391][T23806] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.518350][T30422] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11295'. [ 952.183882][T23806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 952.240696][T23806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 952.255313][T23806] bond0 (unregistering): Released all slaves [ 952.404856][T23806] ovs-s!!: left promiscuous mode [ 952.584404][ T5776] Bluetooth: hci0: command tx timeout [ 952.895901][T30463] tmpfs: Unknown parameter 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 953.809923][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5 [ 953.918285][T30283] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.934723][T30283] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.964529][T30283] bridge_slave_0: entered allmulticast mode [ 953.989316][T30283] bridge_slave_0: entered promiscuous mode [ 954.073907][T30283] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.095188][T30283] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.142860][T30283] bridge_slave_1: entered allmulticast mode [ 954.152692][T30283] bridge_slave_1: entered promiscuous mode [ 954.257811][T30283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 954.291745][T30283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 954.457344][T30283] team0: Port device team_slave_0 added [ 954.491171][T30283] team0: Port device team_slave_1 added [ 954.611451][T30283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 954.626244][T30283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 954.705393][T30283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 954.805196][T30283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 954.829930][T30283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 954.882227][T30283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 955.191528][T30283] hsr_slave_0: entered promiscuous mode [ 955.200948][T30283] hsr_slave_1: entered promiscuous mode [ 955.207825][T30283] debugfs: 'hsr0' already exists in 'hsr' [ 955.215121][T30283] Cannot create hsr debugfs directory [ 956.083788][ T5272] 8021q: adding VLAN 0 to HW filter on device eth6 [ 956.682579][T30552] openvswitch: netlink: Actions may not be safe on all matching packets [ 958.656012][T30584] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.11346'. [ 960.583238][T30598] netlink: 56 bytes leftover after parsing attributes in process `syz.3.11350'. [ 961.492759][T30615] openvswitch: netlink: IP tunnel attribute has 5373 unknown bytes. [ 961.712872][T30283] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 961.737768][T30621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11356'. [ 961.788555][T30283] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 961.817300][T30283] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 961.922268][T30283] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 961.968278][T30283] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 962.018348][T30283] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 962.060422][T30283] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 964.962862][T30283] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 965.574237][T23806] hsr_slave_0: left promiscuous mode [ 965.583029][T23806] hsr_slave_1: left promiscuous mode [ 965.590182][T23806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 965.600209][T23806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 966.626481][T30723] netlink: 172 bytes leftover after parsing attributes in process `syz.3.11372'. [ 966.720252][T30725] netlink: 22 bytes leftover after parsing attributes in process `syz.3.11373'. [ 966.869353][T30730] netlink: 'syz.4.11375': attribute type 10 has an invalid length. [ 966.878012][T30730] netlink: 152 bytes leftover after parsing attributes in process `syz.4.11375'. [ 966.956073][T23806] team_slave_1 (unregistering): left promiscuous mode [ 966.963269][T23806] team_slave_1 (unregistering): left allmulticast mode [ 966.978311][T23806] team0 (unregistering): Port device team_slave_1 removed [ 967.018391][T23806] team_slave_0 (unregistering): left promiscuous mode [ 967.027947][T23806] team_slave_0 (unregistering): left allmulticast mode [ 967.047215][T23806] team0 (unregistering): Port device team_slave_0 removed [ 967.786915][T30283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 967.847741][T30283] 8021q: adding VLAN 0 to HW filter on device team0 [ 967.861295][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.868569][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 967.902202][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.909487][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 969.081710][T30283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 969.164217][T30283] veth0_vlan: entered promiscuous mode [ 969.181507][T30283] veth1_vlan: entered promiscuous mode [ 969.248451][T30283] veth0_macvtap: entered promiscuous mode [ 969.263216][T30283] veth1_macvtap: entered promiscuous mode [ 969.296414][T30283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 969.322425][T30283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 969.506605][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.650437][ T1013] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.894269][ T140] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.894803][T23806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.930575][ T140] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.963830][T23806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 970.096155][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 970.117926][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 972.487047][T30861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11423'. [ 973.150391][T30875] netlink: 'syz.2.11431': attribute type 29 has an invalid length. [ 973.178026][T30875] netlink: 'syz.2.11431': attribute type 29 has an invalid length. [ 973.196199][T30875] netlink: 'syz.2.11431': attribute type 29 has an invalid length. [ 973.604279][T30884] bridge0: entered allmulticast mode [ 974.669095][T30923] C: renamed from veth1_to_team (while UP) [ 974.686847][T30923] netlink: 'syz.1.11450': attribute type 3 has an invalid length. [ 974.715194][T30923] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11450'. [ 974.760721][T30923] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 977.958496][T30989] netlink: 148 bytes leftover after parsing attributes in process `syz.1.11480'. [ 978.241681][T30995] netlink: 112 bytes leftover after parsing attributes in process `syz.1.11483'. [ 978.254108][T30995] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 979.717908][T31041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11498'. [ 979.968621][T31049] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11502'. [ 980.451941][T31059] netlink: 'syz.1.11505': attribute type 16 has an invalid length. [ 980.478374][T31059] netlink: 'syz.1.11505': attribute type 3 has an invalid length. [ 980.503323][T31059] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11505'. [ 981.312289][T31089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11515'. [ 985.716790][T31170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11537'. [ 985.750159][T31175] ref_ctr_offset mismatch. inode: 0x1d5 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 989.262980][T31206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11554'. [ 989.881530][T31223] netlink: 'syz.2.11562': attribute type 1 has an invalid length. [ 989.993424][ T140] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.171370][ T140] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.323703][T31235] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.11568'. [ 990.553220][ T140] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.612581][T25828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 990.625312][T25828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 990.636579][T25828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 990.648336][T25828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 990.657695][T25828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 991.193358][ T140] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.744192][ T5776] Bluetooth: hci0: command tx timeout [ 992.997437][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.010840][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.429710][ T140] bridge_slave_1: left allmulticast mode [ 993.454051][ T140] bridge_slave_1: left promiscuous mode [ 993.470154][ T140] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.741530][ T140] bridge_slave_0: left allmulticast mode [ 993.755757][ T140] bridge_slave_0: left promiscuous mode [ 993.765143][ T140] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.781010][ T140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 994.826138][ T5776] Bluetooth: hci0: command tx timeout [ 995.000511][ T140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 995.038729][ T140] bond0 (unregistering): Released all slaves [ 995.089266][T31240] netdevsim0 speed is unknown, defaulting to 1000 [ 995.105258][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5 [ 995.701319][T31311] netlink: 132 bytes leftover after parsing attributes in process `syz.5.11589'. [ 995.742502][T31313] netlink: 'syz.5.11589': attribute type 12 has an invalid length. [ 995.783079][T31313] netlink: 132 bytes leftover after parsing attributes in process `syz.5.11589'. [ 996.356534][ T5272] 8021q: adding VLAN 0 to HW filter on device eth6 [ 996.904288][ T5776] Bluetooth: hci0: command tx timeout [ 998.222338][T31240] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.253193][T31240] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.279748][T31240] bridge_slave_0: entered allmulticast mode [ 998.319633][T31240] bridge_slave_0: entered promiscuous mode [ 998.353942][T31240] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.367360][T31240] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.384231][T31240] bridge_slave_1: entered allmulticast mode [ 998.392558][T31240] bridge_slave_1: entered promiscuous mode [ 998.984154][ T5776] Bluetooth: hci0: command tx timeout [ 999.059347][ T140] hsr_slave_0: left promiscuous mode [ 999.087108][ T140] hsr_slave_1: left promiscuous mode [ 999.097874][ T140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 999.108060][ T140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 999.135041][ T140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 999.158552][ T140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 999.206237][ T140] veth1_macvtap: left promiscuous mode [ 999.213562][ T140] veth0_macvtap: left promiscuous mode [ 999.226602][ T140] veth1_vlan: left promiscuous mode [ 999.237488][ T140] veth0_vlan: left promiscuous mode [ 999.256540][T31398] netlink: 'syz.5.11612': attribute type 21 has an invalid length. [ 1000.492643][ T140] team0 (unregistering): Port device team_slave_1 removed [ 1000.688081][ T140] team0 (unregistering): Port device team_slave_0 removed [ 1001.053797][ T5272] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1001.093679][T31240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1001.118712][T31240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1001.345783][T31240] team0: Port device team_slave_0 added [ 1001.379357][T31240] team0: Port device team_slave_1 added [ 1001.564686][T31240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1001.576892][T31240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1001.632771][T31240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1001.672166][T31240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1001.698412][T31240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1001.772603][T31240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1001.991087][T31240] hsr_slave_0: entered promiscuous mode [ 1002.006995][T31240] hsr_slave_1: entered promiscuous mode [ 1002.026672][T31240] debugfs: 'hsr0' already exists in 'hsr' [ 1002.034874][T31452] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11636'. [ 1002.052607][T31240] Cannot create hsr debugfs directory [ 1002.643633][ T5272] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1006.339668][T31555] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11666'. [ 1006.533848][T31240] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1006.566912][T31240] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1006.582856][T31240] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1006.648316][T31240] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1006.688121][T31240] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1006.758533][T31240] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1006.782117][T31240] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1006.869159][T31240] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1007.308181][T31240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1007.382074][T31240] 8021q: adding VLAN 0 to HW filter on device team0 [ 1007.416679][ T1013] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.423910][ T1013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1007.494029][ T1013] bridge0: port 2(bridge_slave_1) entered blocking state [ 1007.501325][ T1013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1008.956032][T31240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1009.060081][T31240] veth0_vlan: entered promiscuous mode [ 1009.131666][T31240] veth1_vlan: entered promiscuous mode [ 1009.229414][T31240] veth0_macvtap: entered promiscuous mode [ 1009.262260][T31240] veth1_macvtap: entered promiscuous mode [ 1009.358483][T31240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1009.441874][T31240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1009.504195][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.657248][ T1013] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.745479][ T1013] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.792062][ T1013] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.069386][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1010.121002][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1010.207372][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1010.239779][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1010.430875][ T5776] Bluetooth: hci3: command 0x0406 tx timeout [ 1010.831550][T31712] netlink: 'syz.1.11710': attribute type 2 has an invalid length. [ 1012.947697][T31759] netlink: 64 bytes leftover after parsing attributes in process `syz.1.11721'. [ 1013.694776][T31769] netlink: 'syz.5.11726': attribute type 38 has an invalid length. [ 1015.622069][T31841] C: renamed from veth1_to_team [ 1015.690806][T31841] netlink: 'syz.2.11757': attribute type 4 has an invalid length. [ 1015.724005][T31841] netlink: 108 bytes leftover after parsing attributes in process `syz.2.11757'. [ 1015.755990][T31841] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1016.148755][T31864] C: renamed from veth1_to_team (while UP) [ 1016.172154][T31864] netlink: 'syz.5.11767': attribute type 1 has an invalid length. [ 1016.190877][T31864] netlink: 132 bytes leftover after parsing attributes in process `syz.5.11767'. [ 1016.268514][T31864] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1016.455217][T31873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11770'. [ 1016.855655][T31883] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11775'. [ 1016.916561][T31885] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11774'. [ 1016.942130][T31886] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11775'. [ 1017.074145][T31883] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11775'. [ 1017.158440][T31880] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1019.525557][T31966] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11811'. [ 1020.267291][T31969] ref_ctr_offset mismatch. inode: 0x28 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 1020.495190][T31990] pimreg0: tun_chr_ioctl cmd 35111 [ 1021.575229][T32011] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11829'. [ 1021.641753][T32012] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11829'. [ 1021.687024][T32011] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11829'. [ 1023.482898][T32077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11854'. [ 1023.568543][T32079] netlink: 104 bytes leftover after parsing attributes in process `syz.3.11857'. [ 1023.835726][T32091] netlink: 'syz.5.11861': attribute type 3 has an invalid length. [ 1023.856530][T32091] netlink: 132 bytes leftover after parsing attributes in process `syz.5.11861'. [ 1025.383355][T32136] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.11882'. [ 1027.818746][T32175] netlink: 'syz.1.11901': attribute type 2 has an invalid length. [ 1027.839072][T32173] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11899'. [ 1027.873382][T32175] : entered promiscuous mode [ 1030.906845][ T5776] Bluetooth: hci5: command 0x0406 tx timeout [ 1032.146783][T32270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11944'. [ 1032.160151][T32269] netlink: 'syz.5.11945': attribute type 2 has an invalid length. [ 1033.144878][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1033.166455][ T5776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1033.189304][ T5776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1033.211051][ T5776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1033.235903][ T5776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1033.775330][ T48] bridge_slave_1: left allmulticast mode [ 1033.798274][ T48] bridge_slave_1: left promiscuous mode [ 1033.828045][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.897670][ T48] bridge_slave_0: left allmulticast mode [ 1033.917773][ T48] bridge_slave_0: left promiscuous mode [ 1033.938117][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.314718][T25828] Bluetooth: hci1: command tx timeout [ 1035.440783][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1035.452236][T30331] smc: removing ib device syz1 [ 1035.469299][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1035.480125][ T48] bond0 (unregistering): Released all slaves [ 1035.499293][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1035.519452][T32331] netlink: 'syz.1.11963': attribute type 1 has an invalid length. [ 1035.959824][T30331] smbdirect: ib_dev[syz1] removed [ 1037.384606][T25828] Bluetooth: hci1: command tx timeout [ 1037.430050][T32284] netdevsim0 speed is unknown, defaulting to 1000 [ 1038.747696][ T5272] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1039.215772][T32382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11978'. [ 1039.479254][T25828] Bluetooth: hci1: command tx timeout [ 1040.272023][T32412] netlink: 220 bytes leftover after parsing attributes in process `syz.1.11986'. [ 1041.051187][ T5272] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1041.544195][T25828] Bluetooth: hci1: command tx timeout [ 1041.932559][T32284] bridge0: port 1(bridge_slave_0) entered blocking state [ 1042.001039][T32284] bridge0: port 1(bridge_slave_0) entered disabled state [ 1042.018275][T32284] bridge_slave_0: entered allmulticast mode [ 1042.036924][T32284] bridge_slave_0: entered promiscuous mode [ 1042.179520][T32284] bridge0: port 2(bridge_slave_1) entered blocking state [ 1042.226368][T32284] bridge0: port 2(bridge_slave_1) entered disabled state [ 1042.247689][T32284] bridge_slave_1: entered allmulticast mode [ 1042.270656][T32284] bridge_slave_1: entered promiscuous mode [ 1042.344238][T32453] netlink: 104 bytes leftover after parsing attributes in process `syz.3.11995'. [ 1043.041754][ T5272] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1043.113079][T32464] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11998'. [ 1043.241706][T32284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1043.297740][T32284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1043.589579][T32284] team0: Port device team_slave_0 added [ 1043.775428][T32284] team0: Port device team_slave_1 added [ 1043.871486][T32284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1043.885922][T32284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1043.944002][T32284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1043.968051][T32284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1043.975399][T32284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1044.034758][T32284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1045.363622][T32284] hsr_slave_0: entered promiscuous mode [ 1045.384396][T32284] hsr_slave_1: entered promiscuous mode [ 1045.399937][T32284] debugfs: 'hsr0' already exists in 'hsr' [ 1045.424098][T32284] Cannot create hsr debugfs directory [ 1045.685438][T32509] netlink: 656 bytes leftover after parsing attributes in process `syz.1.12016'. [ 1045.698035][T32509] netlink: 656 bytes leftover after parsing attributes in process `syz.1.12016'. [ 1049.924107][T32284] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1050.170347][T32284] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1050.219392][T32284] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1050.287028][T32284] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1050.323553][ T48] hsr_slave_1: left promiscuous mode [ 1052.337965][T32284] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1052.353697][T32284] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1052.363584][T32284] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1052.491309][T32284] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1052.764387][T32284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1052.829704][T32284] 8021q: adding VLAN 0 to HW filter on device team0 [ 1052.875631][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.882911][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1052.950322][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.957619][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1054.180217][T32688] netlink: 'syz.3.12064': attribute type 46 has an invalid length. [ 1054.222069][T32688] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12064'. [ 1054.431905][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.440463][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.547500][T32284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1054.744717][T32284] veth0_vlan: entered promiscuous mode [ 1054.789503][T32284] veth1_vlan: entered promiscuous mode [ 1054.890041][T32284] veth0_macvtap: entered promiscuous mode [ 1054.933805][T32284] veth1_macvtap: entered promiscuous mode [ 1055.011318][T32284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1055.051251][T32284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1055.246947][T23806] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.279986][T23806] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.332764][T32721] netlink: 'syz.3.12072': attribute type 21 has an invalid length. [ 1055.343084][T23806] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.368834][T23806] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.386621][T32721] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.12072'. [ 1055.669652][T32538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1055.730441][T32538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1055.918800][T32538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1055.965553][T32538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1056.747047][T32752] netlink: 56 bytes leftover after parsing attributes in process `syz.5.12081'. [ 1056.971627][T32759] pim6reg1: entered promiscuous mode [ 1056.997043][T32759] pim6reg1: entered allmulticast mode [ 1058.720736][ T345] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12098'. [ 1059.236243][ T361] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12102'. [ 1059.503350][ T370] netlink: 'syz.2.12106': attribute type 29 has an invalid length. [ 1059.542113][ T370] netlink: 'syz.2.12106': attribute type 29 has an invalid length. [ 1059.562027][ T370] netlink: 'syz.2.12106': attribute type 29 has an invalid length. [ 1061.080892][ T430] netlink: 256 bytes leftover after parsing attributes in process `syz.5.12126'. [ 1062.710503][ T448] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12134'. [ 1064.258228][ T494] netlink: 2 bytes leftover after parsing attributes in process `syz.5.12155'. [ 1067.240178][ T5776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1067.257125][ T5776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1067.267297][ T5776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1067.278987][ T5776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1067.289698][ T5776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1067.490681][ T554] netlink: 'syz.4.12178': attribute type 12 has an invalid length. [ 1067.521963][ T554] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12178'. [ 1067.589401][ T571] netlink: 'syz.4.12178': attribute type 12 has an invalid length. [ 1067.597871][ T571] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12178'. [ 1068.262846][T23812] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.312787][ T602] sch_fq: defrate 1 ignored. [ 1068.689669][T23812] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.838461][ T623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12210'. [ 1068.848516][ T623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12210'. [ 1069.407500][ T5776] Bluetooth: hci2: command tx timeout [ 1069.976226][T23812] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.020293][ T562] netdevsim0 speed is unknown, defaulting to 1000 [ 1070.283824][T23812] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.368750][ T638] netlink: 'syz.3.12218': attribute type 10 has an invalid length. [ 1070.399744][ T638] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.12218'. [ 1070.954909][T23812] bridge_slave_1: left allmulticast mode [ 1070.969373][T23812] bridge_slave_1: left promiscuous mode [ 1070.989459][T23812] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.020853][T23812] bridge_slave_0: left allmulticast mode [ 1071.027212][T23812] bridge_slave_0: left promiscuous mode [ 1071.033147][T23812] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.398326][T23812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1071.431156][T23812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1071.455257][T23812] bond0 (unregistering): Released all slaves [ 1071.464256][ T5776] Bluetooth: hci2: command tx timeout [ 1071.536593][ T684] netlink: 104 bytes leftover after parsing attributes in process `syz.4.12240'. [ 1071.556120][T23812] : left promiscuous mode [ 1071.889927][ T693] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12244'. [ 1071.910136][ T699] netlink: 'syz.2.12245': attribute type 10 has an invalid length. [ 1072.899922][ T699] team0: Device wg2 is of different type [ 1073.256834][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1073.546339][ T5776] Bluetooth: hci2: command tx timeout [ 1074.537787][ T562] bridge0: port 1(bridge_slave_0) entered blocking state [ 1074.545158][ T562] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.552878][ T562] bridge_slave_0: entered allmulticast mode [ 1074.567517][ T562] bridge_slave_0: entered promiscuous mode [ 1074.670026][T23812] hsr_slave_0: left promiscuous mode [ 1074.681844][T23812] hsr_slave_1: left promiscuous mode [ 1074.697714][T23812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1074.707692][T23812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1074.716442][T23812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1074.725778][T23812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1074.786463][T23812] veth1_macvtap: left promiscuous mode [ 1074.798403][T23812] veth0_macvtap: left promiscuous mode [ 1074.813076][T23812] veth1_vlan: left promiscuous mode [ 1074.839643][T23812] veth0_vlan: left promiscuous mode [ 1075.388022][T23812] team0 (unregistering): Port device team_slave_1 removed [ 1075.410897][T23812] team0 (unregistering): Port device team_slave_0 removed [ 1075.531142][ T562] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.538719][ T562] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.546760][ T562] bridge_slave_1: entered allmulticast mode [ 1075.556635][ T562] bridge_slave_1: entered promiscuous mode [ 1075.569124][ T5272] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1075.624421][ T5776] Bluetooth: hci2: command tx timeout [ 1075.710579][ T562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1075.733092][ T562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1075.801269][ T562] team0: Port device team_slave_0 added [ 1075.811005][ T562] team0: Port device team_slave_1 added [ 1075.909250][ T562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1075.925449][ T562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1075.956129][ T562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1075.990408][ T562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1076.009282][ T562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1076.057198][ T562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1076.162139][ T562] hsr_slave_0: entered promiscuous mode [ 1076.182461][ T562] hsr_slave_1: entered promiscuous mode [ 1076.468704][ T809] IPv6: Can't replace route, no match found [ 1076.479019][T25828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1076.499663][T25828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1076.507981][T25828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1076.529632][T25828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1076.540017][T25828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1076.658696][ T817] netlink: 'syz.2.12278': attribute type 29 has an invalid length. [ 1076.717383][T23812] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.788193][ T822] netlink: 'syz.2.12278': attribute type 29 has an invalid length. [ 1076.834479][ T825] netlink: 'syz.2.12278': attribute type 29 has an invalid length. [ 1076.957939][T23812] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.226077][T23812] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.258477][ T5272] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1077.288371][ T844] netlink: 'syz.4.12286': attribute type 21 has an invalid length. [ 1077.297518][ T844] netlink: 'syz.4.12286': attribute type 1 has an invalid length. [ 1077.497381][ T844] netlink: 16090 bytes leftover after parsing attributes in process `syz.4.12286'. [ 1077.509227][T23812] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.541685][ T852] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12288'. [ 1077.552672][ T852] netlink: 7 bytes leftover after parsing attributes in process `syz.3.12288'. [ 1077.645375][ T562] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1077.699356][ T562] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1077.726094][ T562] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1077.799664][ T562] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1077.819634][ T562] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1077.853899][ T562] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1077.887426][ T863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12292'. [ 1077.936462][ T863] netlink: 5 bytes leftover after parsing attributes in process `syz.2.12292'. [ 1078.008989][ T562] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1078.030843][ T562] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1078.163679][ T808] netdevsim0 speed is unknown, defaulting to 1000 [ 1078.320626][T23812] bridge_slave_1: left allmulticast mode [ 1078.341045][T23812] bridge_slave_1: left promiscuous mode [ 1078.354492][T23812] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.381014][T23812] bridge_slave_0: left allmulticast mode [ 1078.397965][T23812] bridge_slave_0: left promiscuous mode [ 1078.406187][T23812] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.614233][T25828] Bluetooth: hci0: command tx timeout [ 1078.829703][T23812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1078.854459][T23812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1078.870547][T23812] bond0 (unregistering): Released all slaves [ 1078.909578][ T5272] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1079.336111][ T910] netlink: 'syz.4.12302': attribute type 10 has an invalid length. [ 1079.392893][ T910] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1079.470915][ T562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1079.480177][ T913] sch_tbf: burst 2 is lower than device veth0_to_bond mtu (1514) ! [ 1079.866956][ T562] 8021q: adding VLAN 0 to HW filter on device team0 [ 1079.895024][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1079.902228][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1080.007582][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1080.014799][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1080.070098][ T945] netlink: 9 bytes leftover after parsing attributes in process `syz.2.12313'. [ 1080.132839][ T945] netlink: 9 bytes leftover after parsing attributes in process `syz.2.12313'. [ 1080.553738][ T956] netlink: 'syz.4.12315': attribute type 2 has an invalid length. [ 1080.667623][T25828] Bluetooth: hci0: command tx timeout [ 1080.743191][T23812] hsr_slave_0: left promiscuous mode [ 1080.750312][T23812] hsr_slave_1: left promiscuous mode [ 1080.770009][T23812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1080.789608][T23812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1080.823755][T23812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1080.840726][T23812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1080.884972][T23812] veth1_macvtap: left promiscuous mode [ 1080.890609][T23812] veth0_macvtap: left promiscuous mode [ 1080.900049][T23812] veth1_vlan: left promiscuous mode [ 1080.914392][T23812] veth0_vlan: left promiscuous mode [ 1081.289209][T23812] team0 (unregistering): Port device team_slave_1 removed [ 1081.315852][T23812] team0 (unregistering): Port device team_slave_0 removed [ 1081.333824][ T988] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 1081.500319][ T5272] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1081.538655][ T990] netlink: 'syz.3.12327': attribute type 29 has an invalid length. [ 1081.611646][ T990] netlink: 'syz.3.12327': attribute type 29 has an invalid length. [ 1081.731099][ T808] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.746712][ T808] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.754568][ T808] bridge_slave_0: entered allmulticast mode [ 1081.766001][ T808] bridge_slave_0: entered promiscuous mode [ 1081.780681][ T808] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.795452][ T808] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.803180][ T808] bridge_slave_1: entered allmulticast mode [ 1081.812252][ T808] bridge_slave_1: entered promiscuous mode [ 1081.901872][ T1006] netlink: 68 bytes leftover after parsing attributes in process `syz.2.12330'. [ 1081.960849][ T808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1081.989632][ T808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1082.171712][ T808] team0: Port device team_slave_0 added [ 1082.191374][ T808] team0: Port device team_slave_1 added [ 1082.275576][ T808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1082.293974][ T808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1082.349733][ T808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1082.376808][ T808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1082.404498][ T808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1082.456203][ T808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1082.515445][ T1038] netlink: 76 bytes leftover after parsing attributes in process `syz.3.12337'. [ 1082.690550][ T562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1082.747990][T25828] Bluetooth: hci0: command tx timeout [ 1082.772056][ T1048] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12339'. [ 1082.852831][ T808] hsr_slave_0: entered promiscuous mode [ 1082.882275][ T808] hsr_slave_1: entered promiscuous mode [ 1082.923552][ T808] debugfs: 'hsr0' already exists in 'hsr' [ 1082.939832][ T808] Cannot create hsr debugfs directory [ 1082.958266][ T5272] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1083.353343][ T562] veth0_vlan: entered promiscuous mode [ 1083.394500][ T562] veth1_vlan: entered promiscuous mode [ 1083.641628][ T808] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1083.657884][ T808] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1083.682193][ T808] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1083.720026][ T808] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1083.740534][ T562] veth0_macvtap: entered promiscuous mode [ 1083.756066][ T808] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1083.792044][ T808] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1083.806155][ T808] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1083.858323][ T808] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1083.888820][ T562] veth1_macvtap: entered promiscuous mode [ 1084.090259][ T562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1084.138232][ T562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1084.345206][T23806] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.411811][ T5272] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1084.492054][T23806] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.524057][T23806] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.573607][ T808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1084.622649][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1084.651396][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.654525][T23806] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.711515][ T808] 8021q: adding VLAN 0 to HW filter on device team0 [ 1084.760707][T23812] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.767966][T23812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1084.796689][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1084.810863][T23812] bridge0: port 2(bridge_slave_1) entered blocking state [ 1084.818099][T23812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1084.824328][T25828] Bluetooth: hci0: command tx timeout [ 1084.830166][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1085.915867][ T1187] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1085.916241][ T5272] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1086.138091][ T808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1086.196516][ T1194] netlink: 'syz.4.12364': attribute type 12 has an invalid length. [ 1086.256001][ T1194] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12364'. [ 1086.596639][ T1210] netlink: 72 bytes leftover after parsing attributes in process `syz.2.12379'. [ 1086.871993][ T808] veth0_vlan: entered promiscuous mode [ 1086.927015][ T808] veth1_vlan: entered promiscuous mode [ 1086.987409][ T808] veth0_macvtap: entered promiscuous mode [ 1087.036639][ T808] veth1_macvtap: entered promiscuous mode [ 1087.090388][ T808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1087.132258][ T808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1087.226514][ T140] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.314907][T23806] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.368333][T23806] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.425562][T23812] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.545202][T23812] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1087.567256][T23812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1087.708522][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1087.739449][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1087.783636][ T1266] netlink: 774 bytes leftover after parsing attributes in process `syz.6.12397'. [ 1087.822413][ T1266] netlink: 52 bytes leftover after parsing attributes in process `syz.6.12397'. [ 1088.226978][ T1278] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12400'. [ 1088.269033][ T1278] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12400'. [ 1088.578479][ T1279] netlink: 24 bytes leftover after parsing attributes in process `syz.7.12399'. [ 1089.331130][ T1305] netlink: 128 bytes leftover after parsing attributes in process `syz.7.12410'. [ 1089.351925][ T1305] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1089.515624][ T1320] netlink: 172 bytes leftover after parsing attributes in process `syz.2.12418'. [ 1090.139893][ T1346] netlink: 'syz.2.12428': attribute type 13 has an invalid length. [ 1090.170632][ T1346] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.12428'. [ 1090.467723][ T1355] netlink: 'syz.7.12432': attribute type 12 has an invalid length. [ 1090.497048][ T1355] netlink: 132 bytes leftover after parsing attributes in process `syz.7.12432'. [ 1091.143476][ T1372] netlink: 'syz.4.12435': attribute type 10 has an invalid length. [ 1091.144338][ T1368] netlink: 'syz.3.12439': attribute type 9 has an invalid length. [ 1091.417074][ T1372] netlink: 'syz.4.12435': attribute type 19 has an invalid length. [ 1091.441521][ T1372] netlink: 14536 bytes leftover after parsing attributes in process `syz.4.12435'. [ 1092.835225][ T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.988517][ T1419] netlink: 'syz.6.12459': attribute type 46 has an invalid length. [ 1093.021330][ T1419] netlink: 55 bytes leftover after parsing attributes in process `syz.6.12459'. [ 1093.087720][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1093.102797][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1093.114682][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1093.127126][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1093.138736][ T5776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1093.212473][ T1425] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12460'. [ 1093.421459][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.695219][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.878959][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.681604][ T13] bridge_slave_1: left allmulticast mode [ 1094.712634][ T13] bridge_slave_1: left promiscuous mode [ 1094.756829][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.804525][ T13] bridge_slave_0: left allmulticast mode [ 1094.818866][ T13] bridge_slave_0: left promiscuous mode [ 1094.835228][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.966392][ T1476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12470'. [ 1095.225810][T25828] Bluetooth: hci0: command tx timeout [ 1095.319655][ T1488] netlink: 'syz.3.12480': attribute type 2 has an invalid length. [ 1095.365723][ T1488] netlink: 'syz.3.12480': attribute type 1 has an invalid length. [ 1095.406330][ T1488] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.12480'. [ 1095.718609][ T1497] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.12482'. [ 1096.051342][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1096.094308][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1096.205688][ T13] bond0 (unregistering): Released all slaves [ 1096.299839][ T1505] netlink: 44 bytes leftover after parsing attributes in process `syz.4.12483'. [ 1096.313315][ T1505] netlink: 44 bytes leftover after parsing attributes in process `syz.4.12483'. [ 1096.414225][ T1420] netdevsim0 speed is unknown, defaulting to 1000 [ 1096.429347][ T1505] netlink: 44 bytes leftover after parsing attributes in process `syz.4.12483'. [ 1096.440834][ T5272] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1097.360537][T25828] Bluetooth: hci0: command tx timeout [ 1098.057355][ T1550] netlink: 'syz.3.12495': attribute type 4 has an invalid length. [ 1098.802738][ T1420] bridge0: port 1(bridge_slave_0) entered blocking state [ 1098.834908][ T1420] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.864902][ T1420] bridge_slave_0: entered allmulticast mode [ 1098.902773][ T1420] bridge_slave_0: entered promiscuous mode [ 1098.996789][ T13] hsr_slave_0: left promiscuous mode [ 1099.025051][ T13] hsr_slave_1: left promiscuous mode [ 1099.035465][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1099.050426][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1099.075033][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1099.092729][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1099.185746][ T13] veth1_macvtap: left promiscuous mode [ 1099.203413][ T13] veth0_macvtap: left promiscuous mode [ 1099.216885][ T13] veth1_vlan: left promiscuous mode [ 1099.231556][ T13] veth0_vlan: left promiscuous mode [ 1099.384295][T25828] Bluetooth: hci0: command tx timeout [ 1099.907195][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1099.948689][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1100.142971][ T1420] bridge0: port 2(bridge_slave_1) entered blocking state [ 1100.150657][ T1420] bridge0: port 2(bridge_slave_1) entered disabled state [ 1100.163057][ T1420] bridge_slave_1: entered allmulticast mode [ 1100.193018][ T1420] bridge_slave_1: entered promiscuous mode [ 1100.215067][ T5272] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1100.263679][ T1420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1100.281418][ T1420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1100.368010][ T1420] team0: Port device team_slave_0 added [ 1100.387003][ T1420] team0: Port device team_slave_1 added [ 1100.497563][ T1420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1100.515841][ T1420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1100.611201][ T1420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1100.627571][ T1420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1100.652498][ T1420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1100.683964][ T1420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1100.772715][ T1420] hsr_slave_0: entered promiscuous mode [ 1100.796633][ T1420] hsr_slave_1: entered promiscuous mode [ 1100.807736][ T1420] debugfs: 'hsr0' already exists in 'hsr' [ 1100.813530][ T1420] Cannot create hsr debugfs directory [ 1101.371927][ T1420] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1101.402720][ T1420] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1101.424835][ T1420] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1101.439178][ T1420] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1101.465115][T25828] Bluetooth: hci0: command tx timeout [ 1101.472131][ T1420] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1101.487528][ T1420] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1101.507114][ T1420] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1101.535468][ T1420] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1101.676167][ T1420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1101.728520][ T1420] 8021q: adding VLAN 0 to HW filter on device team0 [ 1101.751199][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1101.758410][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1101.788549][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 1101.795785][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1102.581180][ T1420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1102.591263][ T5272] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1103.025160][ T1420] veth0_vlan: entered promiscuous mode [ 1103.062512][ T1420] veth1_vlan: entered promiscuous mode [ 1103.142284][ T1420] veth0_macvtap: entered promiscuous mode [ 1103.175717][ T1420] veth1_macvtap: entered promiscuous mode [ 1103.221788][ T1420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1103.259851][ T1420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1103.338665][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.363213][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.469022][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1103.489702][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1103.554724][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1103.571668][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.580986][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1103.600446][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.801002][ T1684] sch_tbf: burst 1 is lower than device bridge_slave_0 mtu (1514) ! [ 1104.763138][ T1716] netlink: 'syz.6.12514': attribute type 10 has an invalid length. [ 1104.792238][ T1716] netlink: 40 bytes leftover after parsing attributes in process `syz.6.12514'. [ 1105.206654][ T1730] netlink: 703 bytes leftover after parsing attributes in process `syz.6.12521'. [ 1105.302807][ T1718] TCP: TCP_TX_DELAY enabled [ 1106.868021][ T1779] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12536'. [ 1108.040976][ T5272] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1108.593342][ T1848] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12559'. [ 1109.761614][ T1880] netlink: 'syz.8.12571': attribute type 10 has an invalid length. [ 1109.788147][ T1880] netlink: 152 bytes leftover after parsing attributes in process `syz.8.12571'. [ 1109.841609][ T1883] netlink: 104 bytes leftover after parsing attributes in process `syz.6.12572'. [ 1110.247765][ T1898] netlink: 65047 bytes leftover after parsing attributes in process `syz.6.12579'. [ 1110.518201][ T1907] pimreg: tun_chr_ioctl cmd 1074025692 [ 1112.909373][ T1953] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12603'. [ 1112.947222][ T5776] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1112.965794][ T5776] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1112.985348][ T5776] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1113.002166][ T5776] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1113.010064][ T5776] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1114.017051][ T1990] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12615'. [ 1114.313842][T30331] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.411558][ T2003] netlink: 14 bytes leftover after parsing attributes in process `syz.8.12621'. [ 1114.703376][ T2001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12620'. [ 1114.837436][T30331] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.084907][T25828] Bluetooth: hci5: command tx timeout [ 1115.323553][T30331] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.399372][ T2015] netlink: 'syz.3.12626': attribute type 13 has an invalid length. [ 1115.415639][ T2017] netlink: 996 bytes leftover after parsing attributes in process `syz.6.12627'. [ 1115.419071][ T2015] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.12626'. [ 1115.434053][ T2017] netlink: 996 bytes leftover after parsing attributes in process `syz.6.12627'. [ 1115.607029][T30331] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.692173][ T1956] netdevsim0 speed is unknown, defaulting to 1000 [ 1115.884028][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.892679][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.934036][ T2032] netlink: 'syz.6.12634': attribute type 4 has an invalid length. [ 1115.962633][ T2032] netlink: 'syz.6.12634': attribute type 7 has an invalid length. [ 1116.284252][T30331] bridge_slave_1: left allmulticast mode [ 1116.304661][T30331] bridge_slave_1: left promiscuous mode [ 1116.331742][T30331] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.391311][T30331] bridge_slave_0: left allmulticast mode [ 1116.409138][T30331] bridge_slave_0: left promiscuous mode [ 1116.427950][T30331] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.146880][T25828] Bluetooth: hci5: command tx timeout [ 1117.248656][T25828] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 1117.339119][T30331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1117.357916][T30331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1117.368001][T30331] bond0 (unregistering): Released all slaves [ 1117.767325][ T2072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1117.896624][ T2079] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.12654'. [ 1117.965854][ T2082] netlink: 260 bytes leftover after parsing attributes in process `syz.8.12655'. [ 1118.192781][ T2090] sch_tbf: burst 1 is lower than device bridge_slave_0 mtu (1514) ! [ 1118.726841][ T2107] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 1118.760638][ T5272] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1118.820238][ T2113] netlink: 88 bytes leftover after parsing attributes in process `syz.3.12666'. [ 1119.224070][T25828] Bluetooth: hci5: command tx timeout [ 1119.261496][ T2126] netlink: 48 bytes leftover after parsing attributes in process `syz.8.12670'. [ 1119.318411][ T2126] netlink: 'syz.8.12670': attribute type 8 has an invalid length. [ 1119.427230][T30331] hsr_slave_0: left promiscuous mode [ 1119.479363][T30331] hsr_slave_1: left promiscuous mode [ 1119.496375][T30331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1119.506011][T30331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1119.521208][T30331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1119.539500][T30331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1119.700456][T30331] veth1_macvtap: left promiscuous mode [ 1119.711164][T30331] veth0_macvtap: left promiscuous mode [ 1119.729438][T30331] veth1_vlan: left promiscuous mode [ 1119.744265][T30331] veth0_vlan: left promiscuous mode [ 1119.873581][ T2151] No such timeout policy "s" [ 1119.930392][ T2151] netlink: Failed to associated timeout policy 's' [ 1120.390112][T30331] team0 (unregistering): Port device team_slave_1 removed [ 1120.412272][T30331] team0 (unregistering): Port device team_slave_0 removed [ 1120.655108][ T2166] netlink: 'syz.3.12681': attribute type 10 has an invalid length. [ 1120.678102][ T2166] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.12681'. [ 1120.712808][ T5272] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1120.927797][ T1956] bridge0: port 1(bridge_slave_0) entered blocking state [ 1120.941161][ T1956] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.959737][ T1956] bridge_slave_0: entered allmulticast mode [ 1120.988200][ T1956] bridge_slave_0: entered promiscuous mode [ 1121.011811][ T1956] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.020691][ T1956] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.028298][ T1956] bridge_slave_1: entered allmulticast mode [ 1121.048137][ T1956] bridge_slave_1: entered promiscuous mode [ 1121.057174][ T2184] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 1121.226197][ T1956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1121.273196][ T1956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1121.304076][T25828] Bluetooth: hci5: command tx timeout [ 1121.497199][ T1956] team0: Port device team_slave_0 added [ 1122.343406][ T1956] team0: Port device team_slave_1 added [ 1123.747222][ T1956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1123.754594][ T1956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1123.782216][ T1956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1123.812441][ T5272] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1124.267499][ T1956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1124.292513][ T1956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1124.331281][ T1956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1124.829474][ T1956] hsr_slave_0: entered promiscuous mode [ 1124.838649][ T1956] hsr_slave_1: entered promiscuous mode [ 1124.845714][ T1956] debugfs: 'hsr0' already exists in 'hsr' [ 1124.851577][ T1956] Cannot create hsr debugfs directory [ 1124.910564][ T2241] netlink: 730 bytes leftover after parsing attributes in process `syz.3.12706'. [ 1125.111642][ T2251] C: renamed from veth1_to_team (while UP) [ 1125.152847][ T2251] netlink: 'syz.3.12709': attribute type 1 has an invalid length. [ 1125.167392][ T2251] netlink: 'syz.3.12709': attribute type 2 has an invalid length. [ 1125.192624][ T2251] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1125.443878][ T2263] block nbd0: not configured, cannot reconfigure [ 1125.898623][ T1956] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1125.929809][ T1956] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1125.945289][ T1956] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1125.978142][ T1956] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1126.010902][ T1956] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1126.063209][ T1956] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1126.091415][ T1956] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1126.102632][ T2285] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12720'. [ 1126.174548][ T1956] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1126.623321][ T1956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1126.694501][ T1956] 8021q: adding VLAN 0 to HW filter on device team0 [ 1126.756132][T23812] bridge0: port 1(bridge_slave_0) entered blocking state [ 1126.763525][T23812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1126.818833][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1126.826082][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1128.178098][ T1956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1129.038491][ T1956] veth0_vlan: entered promiscuous mode [ 1129.090590][ T1956] veth1_vlan: entered promiscuous mode [ 1129.183253][ T1956] veth0_macvtap: entered promiscuous mode [ 1129.215269][ T1956] veth1_macvtap: entered promiscuous mode [ 1129.295926][ T1956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1129.441129][ T1956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1129.516503][T23812] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.556829][T30331] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.798844][T32538] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.884276][T30331] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.990137][T30331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1130.002149][T30331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1130.096021][T32538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1130.110703][T32538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1131.708655][ T5272] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1131.922103][ T2480] netlink: 40 bytes leftover after parsing attributes in process `syz.9.12764'. [ 1132.307150][ T2488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1132.770603][ T2512] netlink: 40 bytes leftover after parsing attributes in process `syz.8.12773'. [ 1132.791973][ T2512] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12773'. [ 1133.553968][ T2542] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12785'. [ 1133.563493][ T2542] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12785'. [ 1135.935712][ T2596] netlink: 5 bytes leftover after parsing attributes in process `syz.4.12803'. [ 1137.901034][ T2621] netlink: 'syz.8.12812': attribute type 29 has an invalid length. [ 1137.945371][ T2621] netlink: 'syz.8.12812': attribute type 29 has an invalid length. [ 1137.972803][ T2621] netlink: 'syz.8.12812': attribute type 29 has an invalid length. [ 1139.119541][ T2663] pim6reg1: entered promiscuous mode [ 1139.130696][ T2663] pim6reg1: entered allmulticast mode [ 1139.355903][ T2674] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12831'. [ 1139.398132][ T2674] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12831'. [ 1139.433857][ T2674] netlink: 500 bytes leftover after parsing attributes in process `syz.3.12831'. [ 1141.348730][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1141.350011][ T2693] netlink: 'syz.4.12837': attribute type 21 has an invalid length. [ 1141.368187][ T5776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1141.378886][ T5776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1141.394050][ T5776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1141.417961][ T5776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1143.374328][ T2749] netlink: 'syz.8.12845': attribute type 3 has an invalid length. [ 1143.382395][ T2749] netlink: 'syz.8.12845': attribute type 1 has an invalid length. [ 1143.405654][ T2749] netlink: 60387 bytes leftover after parsing attributes in process `syz.8.12845'. [ 1143.493245][T23806] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.584577][ T2692] netdevsim0 speed is unknown, defaulting to 1000 [ 1143.636290][T25828] Bluetooth: hci1: command tx timeout [ 1143.872575][T23806] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.498628][T23806] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.789671][T23806] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.336065][ T2821] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12865'. [ 1145.703958][T25828] Bluetooth: hci1: command tx timeout [ 1146.465314][T23806] bridge_slave_1: left allmulticast mode [ 1146.472556][T23806] bridge_slave_1: left promiscuous mode [ 1146.483512][T23806] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.526242][T23806] bridge_slave_0: left allmulticast mode [ 1146.543867][T23806] bridge_slave_0: left promiscuous mode [ 1146.562829][T23806] bridge0: port 1(bridge_slave_0) entered disabled state [ 1147.032065][T23806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1147.043596][T23806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1147.080319][T23806] bond0 (unregistering): Released all slaves [ 1147.253103][ T2692] bridge0: port 1(bridge_slave_0) entered blocking state [ 1147.282774][ T2692] bridge0: port 1(bridge_slave_0) entered disabled state [ 1147.293710][ T2692] bridge_slave_0: entered allmulticast mode [ 1147.302761][ T2692] bridge_slave_0: entered promiscuous mode [ 1147.381919][ T2883] netlink: 'syz.3.12878': attribute type 1 has an invalid length. [ 1147.600843][ T2692] bridge0: port 2(bridge_slave_1) entered blocking state [ 1147.612983][ T2692] bridge0: port 2(bridge_slave_1) entered disabled state [ 1147.620984][ T2692] bridge_slave_1: entered allmulticast mode [ 1147.629451][ T2692] bridge_slave_1: entered promiscuous mode [ 1147.784555][T25828] Bluetooth: hci1: command tx timeout [ 1147.933213][ T2692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1147.969534][ T2692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1148.136238][ T2911] netlink: Unknown nat attribute (0) [ 1148.143592][ T2911] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1148.419701][ T2692] team0: Port device team_slave_0 added [ 1148.863421][ T2692] team0: Port device team_slave_1 added [ 1149.035615][T23806] hsr_slave_0: left promiscuous mode [ 1149.050155][T23806] hsr_slave_1: left promiscuous mode [ 1149.066788][T23806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1149.096600][T23806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1149.162240][T23806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1149.171552][T23806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1149.194113][T23806] veth1_macvtap: left promiscuous mode [ 1149.200032][T23806] veth0_macvtap: left promiscuous mode [ 1149.223537][T23806] veth1_vlan: left promiscuous mode [ 1149.237744][T23806] veth0_vlan: left promiscuous mode [ 1149.757054][T23806] team0 (unregistering): Port device team_slave_1 removed [ 1149.792440][T23806] team0 (unregistering): Port device team_slave_0 removed [ 1149.878581][T25828] Bluetooth: hci1: command tx timeout [ 1150.018892][ T2931] netlink: 2100 bytes leftover after parsing attributes in process `syz.3.12894'. [ 1150.088682][ T2692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1150.097766][ T2692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1150.164291][ T2692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1150.201053][ T2692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1150.212817][ T2692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1150.241881][ T2692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1150.272120][ T2943] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12900'. [ 1150.326461][ T2945] netlink: 284 bytes leftover after parsing attributes in process `syz.9.12901'. [ 1150.447969][ T2692] hsr_slave_0: entered promiscuous mode [ 1150.463284][ T2692] hsr_slave_1: entered promiscuous mode [ 1151.365332][ T2976] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12909'. [ 1151.446664][ T2976] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12909'. [ 1151.731956][ T5272] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1151.741829][ T2984] netlink: 774 bytes leftover after parsing attributes in process `syz.8.12912'. [ 1152.140525][ T2991] netlink: 72 bytes leftover after parsing attributes in process `syz.9.12915'. [ 1152.157266][ T2991] netlink: 72 bytes leftover after parsing attributes in process `syz.9.12915'. [ 1152.922667][ T5272] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1153.277703][ T2692] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1153.683371][ T2692] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1153.718059][ T2692] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1153.857504][ T2692] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1153.871199][ T2692] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1153.882389][ T3059] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12937'. [ 1153.888364][ T2692] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1153.900302][ T2692] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1153.927246][ T2692] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1153.941432][ T3059] netlink: 60 bytes leftover after parsing attributes in process `syz.9.12937'. [ 1153.980761][ T3059] netlink: 40 bytes leftover after parsing attributes in process `syz.9.12937'. [ 1154.160857][ T3074] netlink: 12 bytes leftover after parsing attributes in process `syz.9.12941'. [ 1154.171184][ T2692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1154.221368][ T2692] 8021q: adding VLAN 0 to HW filter on device team0 [ 1154.243647][T30331] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.250881][T30331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1154.272851][T30331] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.280082][T30331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1154.617006][ T5272] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1155.167224][ T3113] netlink: 'syz.8.12950': attribute type 4 has an invalid length. [ 1155.187144][ T3113] A link change request failed with some changes committed already. Interface netdevsim1 may have been left with an inconsistent configuration, please check. [ 1155.478992][ T2692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1155.652349][ T2692] veth0_vlan: entered promiscuous mode [ 1155.696260][ T2692] veth1_vlan: entered promiscuous mode [ 1155.846741][ T2692] veth0_macvtap: entered promiscuous mode [ 1155.889969][ T2692] veth1_macvtap: entered promiscuous mode [ 1155.955807][ T2692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1156.017169][ T2692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1156.215135][T23806] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.260791][T23806] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.315091][ T5272] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1156.405614][T23806] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.415937][ T3149] netlink: 'syz.3.12960': attribute type 4 has an invalid length. [ 1156.419766][ T998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1156.469566][ T1013] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.470902][ T3151] IPv6: NLM_F_CREATE should be specified when creating new route [ 1156.492546][ T998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1156.678788][ T998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1156.701861][ T998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1157.322316][ T3181] netlink: 'syz.9.12969': attribute type 3 has an invalid length. [ 1158.760503][ T3253] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12992'. [ 1159.824241][ T3292] xt_nfacct: accounting object `' does not exist [ 1161.533822][ T5776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1161.550828][ T5776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1161.561701][ T5776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1161.566184][ T3338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13013'. [ 1161.582423][ T5776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1161.590908][ T5776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1162.160943][ T3364] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.13021'. [ 1163.704166][T25828] Bluetooth: hci2: command tx timeout [ 1164.189380][ T3332] netdevsim0 speed is unknown, defaulting to 1000 [ 1164.648042][ T3422] netlink: 'syz.3.13037': attribute type 21 has an invalid length. [ 1164.703251][ T3422] IPv6: NLM_F_CREATE should be specified when creating new route [ 1165.792710][T25828] Bluetooth: hci2: command tx timeout [ 1165.838335][T23806] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.903404][ T3463] netlink: 703 bytes leftover after parsing attributes in process `syz.9.13051'. [ 1166.248158][T23806] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.443520][ T3489] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13058'. [ 1166.847764][ T3502] xt_hashlimit: max too large, truncated to 1048576 [ 1166.908484][T23806] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.520585][ T3332] bridge0: port 1(bridge_slave_0) entered blocking state [ 1167.563025][ T3332] bridge0: port 1(bridge_slave_0) entered disabled state [ 1167.590060][ T3332] bridge_slave_0: entered allmulticast mode [ 1167.644738][ T3332] bridge_slave_0: entered promiscuous mode [ 1167.667477][ T3528] netlink: 'syz.9.13071': attribute type 4 has an invalid length. [ 1167.806870][T23806] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.808161][ T48] smc: removing ib device syz2 [ 1167.865284][T25828] Bluetooth: hci2: command tx timeout [ 1167.916672][ T3332] bridge0: port 2(bridge_slave_1) entered blocking state [ 1167.924352][ T3332] bridge0: port 2(bridge_slave_1) entered disabled state [ 1167.944224][ T3332] bridge_slave_1: entered allmulticast mode [ 1167.957924][ T3332] bridge_slave_1: entered promiscuous mode [ 1167.983176][T26361] netdevsim0 speed is unknown, defaulting to 1000 [ 1168.075550][ T1249] netdevsim0 speed is unknown, defaulting to 1000 [ 1168.215790][ T3332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1168.252003][ T48] smbdirect: ib_dev[syz2] removed [ 1168.268761][ T3332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1168.578028][ T3332] team0: Port device team_slave_0 added [ 1168.641416][ T3332] team0: Port device team_slave_1 added [ 1169.042623][ T3332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1169.050124][ T3332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1169.093212][ T3332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1169.142959][ T3332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1169.178904][ T3332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1169.268223][ T3332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1169.612861][ T3602] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.13097'. [ 1169.944030][T25828] Bluetooth: hci2: command tx timeout [ 1169.952948][ T3332] hsr_slave_0: entered promiscuous mode [ 1169.963805][ T3332] hsr_slave_1: entered promiscuous mode [ 1170.045347][ T3332] debugfs: 'hsr0' already exists in 'hsr' [ 1170.089787][ T3332] Cannot create hsr debugfs directory [ 1170.118457][ T3611] netlink: 104 bytes leftover after parsing attributes in process `syz.3.13099'. [ 1170.609683][ T3619] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13102'. [ 1171.557393][ T3644] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13112'. [ 1171.700006][ T3647] netlink: 'syz.0.13113': attribute type 1 has an invalid length. [ 1171.732554][ T3647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13113'. [ 1173.480870][ T5776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1173.495636][ T5776] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1173.507470][ T5776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1173.521429][ T5776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1173.532051][ T5776] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1175.407928][ T3741] netlink: 14 bytes leftover after parsing attributes in process `syz.9.13138'. [ 1175.625106][T25828] Bluetooth: hci3: command tx timeout [ 1177.210189][T23806] bond0 (unregistering): (slave 10): Releasing backup interface [ 1177.279821][T23806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1177.301333][T23806] bond0 (unregistering): Released all slaves [ 1177.316292][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.325382][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.493796][T23806] : left promiscuous mode [ 1177.589825][ T3785] netlink: 36 bytes leftover after parsing attributes in process `syz.8.13144'. [ 1177.705389][T25828] Bluetooth: hci3: command tx timeout [ 1177.909229][T23806] : left promiscuous mode [ 1178.495482][ T3332] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1178.541690][ T3332] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1178.581604][ T3332] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1178.615850][ T3332] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1178.643481][ T3332] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1178.721982][ T3332] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1178.804131][ T3815] netlink: 'syz.9.13154': attribute type 5 has an invalid length. [ 1178.873522][ T3332] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1178.900271][ T3332] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1179.118314][ T3830] netlink: 56 bytes leftover after parsing attributes in process `syz.8.13157'. [ 1179.785083][T25828] Bluetooth: hci3: command tx timeout [ 1181.644558][ T3912] netlink: 112 bytes leftover after parsing attributes in process `syz.0.13173'. [ 1181.864512][T25828] Bluetooth: hci3: command tx timeout [ 1182.008109][ T3332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1182.061787][ T3682] bridge0: port 1(bridge_slave_0) entered blocking state [ 1182.090763][ T3682] bridge0: port 1(bridge_slave_0) entered disabled state [ 1182.098632][ T3682] bridge_slave_0: entered allmulticast mode [ 1182.128160][ T3682] bridge_slave_0: entered promiscuous mode [ 1182.212813][ T3682] bridge0: port 2(bridge_slave_1) entered blocking state [ 1182.229880][ T3682] bridge0: port 2(bridge_slave_1) entered disabled state [ 1182.241097][ T3682] bridge_slave_1: entered allmulticast mode [ 1182.253178][ T3682] bridge_slave_1: entered promiscuous mode [ 1182.457016][ T3682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1182.508307][ T3682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1182.520682][ T3332] 8021q: adding VLAN 0 to HW filter on device team0 [ 1182.673545][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 1182.680808][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1182.746799][ T3682] team0: Port device team_slave_0 added [ 1182.757236][ T3682] team0: Port device team_slave_1 added [ 1182.780429][ T3951] netlink: 762 bytes leftover after parsing attributes in process `syz.9.13184'. [ 1183.022162][T32538] bridge0: port 2(bridge_slave_1) entered blocking state [ 1183.029581][T32538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1183.078940][ T3957] netlink: 132 bytes leftover after parsing attributes in process `syz.8.13185'. [ 1183.128791][ T3682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1183.135920][ T3682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1183.178558][ T3682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1183.277223][ T3682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1183.297153][ T3682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1183.354855][ T3682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1183.531361][ T3969] netlink: 'syz.9.13190': attribute type 10 has an invalid length. [ 1183.540977][ T3969] netlink: 65015 bytes leftover after parsing attributes in process `syz.9.13190'. [ 1183.771847][ T3682] hsr_slave_0: entered promiscuous mode [ 1183.809037][ T3682] hsr_slave_1: entered promiscuous mode [ 1183.828356][ T3682] debugfs: 'hsr0' already exists in 'hsr' [ 1183.844703][ T3682] Cannot create hsr debugfs directory [ 1183.906815][ T3976] netlink: 'syz.9.13192': attribute type 4 has an invalid length. [ 1184.039781][ T3983] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.13193'. [ 1184.070706][ T3979] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.13193'. [ 1184.980342][ T3682] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1185.014373][T23806] hsr_slave_0: left promiscuous mode [ 1185.021176][T23806] hsr_slave_1: left promiscuous mode [ 1185.030221][T23806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1185.045872][T23806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1185.060746][T23806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1185.068824][T23806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1185.088327][T23806] veth1_vlan: left promiscuous mode [ 1185.093775][T23806] veth0_vlan: left promiscuous mode [ 1185.289947][ T12] smc: removing ib device syz [ 1185.461605][T23806] team0 (unregistering): Port device team_slave_1 removed [ 1185.488076][T23806] team0 (unregistering): Port device team_slave_0 removed [ 1185.602668][ T1249] syz: Port: 1 Link DOWN [ 1185.604609][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1185.648450][ T3682] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1185.671405][T26448] ================================================================== [ 1185.679598][T26448] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x230/0x250 [ 1185.688619][T26448] Read of size 1 at addr ffff8880217c6e09 by task kworker/0:10/26448 [ 1185.696855][T26448] [ 1185.699194][T26448] CPU: 0 UID: 0 PID: 26448 Comm: kworker/0:10 Not tainted syzkaller #0 PREEMPT(full) [ 1185.699230][T26448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1185.699240][T26448] Workqueue: events smc_ib_port_event_work [ 1185.699374][T26448] Call Trace: [ 1185.699413][T26448] [ 1185.699477][T26448] dump_stack_lvl+0xe8/0x150 [ 1185.699581][T26448] print_address_description+0x55/0x1e0 [ 1185.699608][T26448] ? __ethtool_get_link_ksettings+0x230/0x250 [ 1185.699657][T26448] print_report+0x58/0x70 [ 1185.699673][T26448] kasan_report+0x117/0x150 [ 1185.699713][T26448] ? __ethtool_get_link_ksettings+0x230/0x250 [ 1185.699733][T26448] __ethtool_get_link_ksettings+0x230/0x250 [ 1185.699752][T26448] __ethtool_get_link_ksettings+0x11f/0x250 [ 1185.699769][T26448] ib_get_eth_speed+0x180/0x7f0 [ 1185.699861][T26448] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 1185.699881][T26448] ? do_raw_spin_unlock+0xf5/0x200 [ 1185.699918][T26448] ? rxe_query_port+0x6b/0x3d0 [ 1185.699975][T26448] rxe_query_port+0x93/0x3d0 [ 1185.699991][T26448] ib_query_port+0x16e/0x830 [ 1185.700034][T26448] smc_ib_port_event_work+0x147/0x920 [ 1185.700065][T26448] ? rcu_is_watching+0x16/0xb0 [ 1185.700085][T26448] ? process_scheduled_works+0xa1a/0x14c0 [ 1185.700113][T26448] process_scheduled_works+0xa88/0x14c0 [ 1185.700139][T26448] ? __pfx_process_scheduled_works+0x10/0x10 [ 1185.700156][T26448] ? assign_work+0x3cf/0x5d0 [ 1185.700172][T26448] worker_thread+0xa47/0xfb0 [ 1185.700202][T26448] kthread+0x38b/0x480 [ 1185.700221][T26448] ? __pfx_worker_thread+0x10/0x10 [ 1185.700236][T26448] ? __pfx_kthread+0x10/0x10 [ 1185.700254][T26448] ret_from_fork+0x514/0xb70 [ 1185.700283][T26448] ? __pfx_ret_from_fork+0x10/0x10 [ 1185.700301][T26448] ? __switch_to+0xc89/0x1420 [ 1185.700317][T26448] ? __pfx_kthread+0x10/0x10 [ 1185.700335][T26448] ret_from_fork_asm+0x1a/0x30 [ 1185.700362][T26448] [ 1185.700396][T26448] [ 1185.884238][T26448] Allocated by task 5787: [ 1185.888657][T26448] kasan_save_track+0x3e/0x80 [ 1185.893358][T26448] __kasan_kmalloc+0x93/0xb0 [ 1185.898031][T26448] __kvmalloc_node_noprof+0x543/0x870 [ 1185.903433][T26448] alloc_netdev_mqs+0xa9/0x12a0 [ 1185.908363][T26448] rtnl_create_link+0x321/0xd70 [ 1185.913362][T26448] rtnl_newlink_create+0x258/0x7b0 [ 1185.918581][T26448] rtnl_newlink+0x166d/0x1c30 [ 1185.923389][T26448] rtnetlink_rcv_msg+0x802/0xc00 [ 1185.928338][T26448] netlink_rcv_skb+0x226/0x4a0 [ 1185.933175][T26448] netlink_unicast+0x7bd/0x940 [ 1185.938000][T26448] netlink_sendmsg+0x813/0xb40 [ 1185.942757][T26448] sock_sendmsg_nosec+0x13a/0x180 [ 1185.947853][T26448] __sys_sendto+0x408/0x5a0 [ 1185.952412][T26448] __x64_sys_sendto+0xde/0x100 [ 1185.957170][T26448] do_syscall_64+0x166/0x520 [ 1185.961850][T26448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.967848][T26448] [ 1185.970181][T26448] Freed by task 23806: [ 1185.974280][T26448] kasan_save_track+0x3e/0x80 [ 1185.979057][T26448] kasan_save_free_info+0x40/0x50 [ 1185.984080][T26448] __kasan_slab_free+0x5c/0x80 [ 1185.988837][T26448] kfree+0x1c5/0x640 [ 1185.992730][T26448] device_release+0xc4/0x1f0 [ 1185.997487][T26448] kobject_put+0x222/0x550 [ 1186.002044][T26448] netdev_run_todo+0xeee/0x1060 [ 1186.006974][T26448] default_device_exit_batch+0x923/0x9a0 [ 1186.012603][T26448] ops_undo_list+0x4b4/0x8d0 [ 1186.017253][T26448] cleanup_net+0x572/0x810 [ 1186.021659][T26448] process_scheduled_works+0xa88/0x14c0 [ 1186.027194][T26448] worker_thread+0xa47/0xfb0 [ 1186.031779][T26448] kthread+0x38b/0x480 [ 1186.036028][T26448] ret_from_fork+0x514/0xb70 [ 1186.040644][T26448] ret_from_fork_asm+0x1a/0x30 [ 1186.045456][T26448] [ 1186.047777][T26448] The buggy address belongs to the object at ffff8880217c6000 [ 1186.047777][T26448] which belongs to the cache kmalloc-cg-4k of size 4096 [ 1186.062265][T26448] The buggy address is located 3593 bytes inside of [ 1186.062265][T26448] freed 4096-byte region [ffff8880217c6000, ffff8880217c7000) [ 1186.076256][T26448] [ 1186.078605][T26448] The buggy address belongs to the physical page: [ 1186.085029][T26448] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x217c0 [ 1186.093965][T26448] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1186.102458][T26448] memcg:ffff8880217c1011 [ 1186.106689][T26448] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1186.114241][T26448] page_type: f5(slab) [ 1186.118389][T26448] raw: 00fff00000000040 ffff88801b00b500 dead000000000100 dead000000000122 [ 1186.127131][T26448] raw: 0000000000000000 0000200000040004 00000000f5000000 ffff8880217c1011 [ 1186.135806][T26448] head: 00fff00000000040 ffff88801b00b500 dead000000000100 dead000000000122 [ 1186.144475][T26448] head: 0000000000000000 0000200000040004 00000000f5000000 ffff8880217c1011 [ 1186.153274][T26448] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1186.162040][T26448] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1186.170801][T26448] page dumped because: kasan: bad access detected [ 1186.177227][T26448] page_owner tracks the page as allocated [ 1186.182931][T26448] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5778, tgid 5778 (syz-executor), ts 82307545751, free_ts 49130332515 [ 1186.204726][T26448] post_alloc_hook+0x1f9/0x250 [ 1186.209582][T26448] get_page_from_freelist+0x21fe/0x2270 [ 1186.215233][T26448] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1186.221055][T26448] allocate_slab+0x79/0x5e0 [ 1186.225740][T26448] refill_objects+0x2d5/0x350 [ 1186.230697][T26448] __pcs_replace_empty_main+0x2c3/0x6b0 [ 1186.236327][T26448] __kmalloc_cache_noprof+0x3ab/0x660 [ 1186.241690][T26448] ipv6_add_dev+0x6aa/0x13a0 [ 1186.246416][T26448] addrconf_notify+0x771/0x1050 [ 1186.251263][T26448] notifier_call_chain+0x1a5/0x3d0 [ 1186.256375][T26448] register_netdevice+0x18a4/0x1eb0 [ 1186.261564][T26448] virt_wifi_newlink+0x3be/0x7c0 [ 1186.266625][T26448] rtnl_newlink_create+0x305/0x7b0 [ 1186.271832][T26448] rtnl_newlink+0x166d/0x1c30 [ 1186.276541][T26448] rtnetlink_rcv_msg+0x802/0xc00 [ 1186.281542][T26448] netlink_rcv_skb+0x226/0x4a0 [ 1186.286296][T26448] page last free pid 5375 tgid 5375 stack trace: [ 1186.292614][T26448] __free_frozen_pages+0xc22/0xd20 [ 1186.297724][T26448] __slab_free+0x274/0x2c0 [ 1186.302131][T26448] qlist_free_all+0x99/0x100 [ 1186.306709][T26448] kasan_quarantine_reduce+0x148/0x160 [ 1186.312164][T26448] __kasan_slab_alloc+0x22/0x80 [ 1186.317025][T26448] kmem_cache_alloc_noprof+0x2a4/0x5f0 [ 1186.322558][T26448] vm_area_alloc+0x24/0x140 [ 1186.327049][T26448] mmap_region+0x1221/0x2310 [ 1186.331635][T26448] do_mmap+0xc3b/0x10c0 [ 1186.335784][T26448] vm_mmap_pgoff+0x272/0x4e0 [ 1186.340414][T26448] ksys_mmap_pgoff+0x4dc/0x760 [ 1186.345202][T26448] do_syscall_64+0x166/0x520 [ 1186.349801][T26448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.355698][T26448] [ 1186.358019][T26448] Memory state around the buggy address: [ 1186.363724][T26448] ffff8880217c6d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1186.371775][T26448] ffff8880217c6d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1186.379825][T26448] >ffff8880217c6e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1186.387960][T26448] ^ [ 1186.392315][T26448] ffff8880217c6e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1186.400462][T26448] ffff8880217c6f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1186.408750][T26448] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1186.833999][T26448] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1186.841279][T26448] CPU: 0 UID: 0 PID: 26448 Comm: kworker/0:10 Not tainted syzkaller #0 PREEMPT(full) [ 1186.850822][T26448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1186.860871][T26448] Workqueue: events smc_ib_port_event_work [ 1186.866691][T26448] Call Trace: [ 1186.869966][T26448] [ 1186.872894][T26448] vpanic+0x56d/0xa60 [ 1186.877057][T26448] ? __pfx_vpanic+0x10/0x10 [ 1186.881565][T26448] panic+0xc5/0xd0 [ 1186.885283][T26448] ? __pfx_panic+0x10/0x10 [ 1186.889716][T26448] ? preempt_schedule_thunk+0x16/0x40 [ 1186.895083][T26448] ? __ethtool_get_link_ksettings+0x230/0x250 [ 1186.901145][T26448] ? preempt_schedule_thunk+0x16/0x40 [ 1186.906807][T26448] ? __ethtool_get_link_ksettings+0x230/0x250 [ 1186.912920][T26448] check_panic_on_warn+0x89/0xb0 [ 1186.917909][T26448] ? __ethtool_get_link_ksettings+0x230/0x250 [ 1186.923985][T26448] end_report+0x73/0x170 [ 1186.928225][T26448] ? __ethtool_get_link_ksettings+0x230/0x250 [ 1186.934293][T26448] kasan_report+0x128/0x150 [ 1186.938795][T26448] ? __ethtool_get_link_ksettings+0x230/0x250 [ 1186.944867][T26448] __ethtool_get_link_ksettings+0x230/0x250 [ 1186.950756][T26448] __ethtool_get_link_ksettings+0x11f/0x250 [ 1186.956991][T26448] ib_get_eth_speed+0x180/0x7f0 [ 1186.961848][T26448] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 1186.967217][T26448] ? do_raw_spin_unlock+0xf5/0x200 [ 1186.972339][T26448] ? rxe_query_port+0x6b/0x3d0 [ 1186.977120][T26448] rxe_query_port+0x93/0x3d0 [ 1186.981737][T26448] ib_query_port+0x16e/0x830 [ 1186.986347][T26448] smc_ib_port_event_work+0x147/0x920 [ 1186.991738][T26448] ? rcu_is_watching+0x16/0xb0 [ 1186.996501][T26448] ? process_scheduled_works+0xa1a/0x14c0 [ 1187.002217][T26448] process_scheduled_works+0xa88/0x14c0 [ 1187.007782][T26448] ? __pfx_process_scheduled_works+0x10/0x10 [ 1187.013964][T26448] ? assign_work+0x3cf/0x5d0 [ 1187.018562][T26448] worker_thread+0xa47/0xfb0 [ 1187.023158][T26448] kthread+0x38b/0x480 [ 1187.027221][T26448] ? __pfx_worker_thread+0x10/0x10 [ 1187.032323][T26448] ? __pfx_kthread+0x10/0x10 [ 1187.036905][T26448] ret_from_fork+0x514/0xb70 [ 1187.041496][T26448] ? __pfx_ret_from_fork+0x10/0x10 [ 1187.046603][T26448] ? __switch_to+0xc89/0x1420 [ 1187.051278][T26448] ? __pfx_kthread+0x10/0x10 [ 1187.055878][T26448] ret_from_fork_asm+0x1a/0x30 [ 1187.060668][T26448] [ 1187.064032][T26448] Kernel Offset: disabled [ 1187.068518][T26448] Rebooting in 86400 seconds..