last executing test programs: 6m37.715294856s ago: executing program 0 (id=3205): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x21, 0x0, 0x0, 0x4, 0x3, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x41, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, 0x0, 0x0}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0xb, &(0x7f0000000000), 0xe) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 6m37.423059052s ago: executing program 0 (id=3207): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x10000, 0x10000}, 0x1158a5, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000000000000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@ifindex, 0x16, 0x1, 0xffff0001, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0x1, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r1, 0xffffffffffffffff, 0x31, 0x0, @void}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@ifindex=r3, r1, 0x13, 0x2010, 0x0, @value=r4, @void, @void, @void, r2}, 0x20) (async) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid_for_children\x00') ioctl$TUNGETVNETHDRSZ(r5, 0x8004b707, 0x0) 6m37.134626288s ago: executing program 0 (id=3208): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, 0x0, 0x4040004) 6m36.985603517s ago: executing program 0 (id=3210): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a020000001d0048007ab608ffff0af36504001a0038021dbc060000070005251e6182949a3651f60a84c92ad49380e78f6f38732006c911b3bdc4ed719ef6a1577a", 0x51}, {&(0x7f0000000480)="a58ec582de287deb6b5800", 0xb}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10004042}, 0x90) r2 = getpid() perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x1, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x12, 0xb, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x2032}, 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r5, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r7}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r5, &(0x7f0000000cc0), &(0x7f0000000340)=@tcp=r6}, 0x20) mount$bpf(0x0, 0x0, 0x0, 0x3a84821, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="00100009ff60"}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0xa, 0x3, 0xff) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$inet6(r8, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @mcast2}, 0x1c}, 0x20008b88) socket$nl_route(0x10, 0x3, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r10, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x8, 0x0, 0x0}}, 0x10) 6m36.717507763s ago: executing program 0 (id=3213): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 6m34.550621045s ago: executing program 0 (id=3216): r0 = getpid() r1 = perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x4, 0xa, 0x101, 0x0, 0x0, {0x4, 0x0, 0x2}, [@NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4426a47b}, @NFTA_HOOK_DEV={0x14, 0x3, 'xfrm0\x00'}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x5c}}, 0x804) r2 = perf_event_open$cgroup(&(0x7f00000004c0)={0x4, 0x80, 0x0, 0x57, 0x0, 0x7, 0x0, 0x77, 0x60004, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x3, @perf_config_ext={0x7, 0xc5a}, 0x400, 0xd3, 0x8, 0x7, 0x3, 0x8, 0x4, 0x0, 0x4, 0x0, 0xaf0d}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x8) perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0xb, 0x1, 0x8, 0x6, 0x0, 0x9, 0x510, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x3, 0xdd}, 0x102001, 0x10001, 0x6, 0x9, 0x4, 0x0, 0x6, 0x0, 0x3, 0x0, 0x6}, 0x0, 0x7, r2, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 6m10.715993605s ago: executing program 32 (id=3216): r0 = getpid() r1 = perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x4, 0xa, 0x101, 0x0, 0x0, {0x4, 0x0, 0x2}, [@NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4426a47b}, @NFTA_HOOK_DEV={0x14, 0x3, 'xfrm0\x00'}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x5c}}, 0x804) r2 = perf_event_open$cgroup(&(0x7f00000004c0)={0x4, 0x80, 0x0, 0x57, 0x0, 0x7, 0x0, 0x77, 0x60004, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x3, @perf_config_ext={0x7, 0xc5a}, 0x400, 0xd3, 0x8, 0x7, 0x3, 0x8, 0x4, 0x0, 0x4, 0x0, 0xaf0d}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x8) perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0xb, 0x1, 0x8, 0x6, 0x0, 0x9, 0x510, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x3, 0xdd}, 0x102001, 0x10001, 0x6, 0x9, 0x4, 0x0, 0x6, 0x0, 0x3, 0x0, 0x6}, 0x0, 0x7, r2, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 4m52.431798764s ago: executing program 3 (id=3735): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700)={r1}, 0xc) 4m52.33109079s ago: executing program 3 (id=3738): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000003340)=[{&(0x7f0000000c40)="174f0309acc581c27c0835a541d5ace14751a6fb5991e1eabe613766930c5209d76188595688370a8db8878df98ad326d683f46b7b423a", 0x37}, {&(0x7f0000000500)="3b8e23c5219de817583b1da6c66aa4f806ceb70936fe634d8f7cbb24109d8c82670a51096fdc2d08adf449c7356b7d00c552a5b63e1101f59d790cd8614f73321e840fc6459347d97d72d776ac5822dd34e20abfdf7048572e0d657a349f54c0addbf522fb8fd18fec8419d72cd2e4748c8c1a1c7d2bd55784fe00f54ff2c1953d036f650c79c1534bb6c0fb0f323eb87f118bd3981b3036851f8df560394e5bf29278ed48", 0xa5}], 0x2, &(0x7f0000001dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @loopback}}}], 0x20}, 0x4) 4m52.256776692s ago: executing program 3 (id=3742): socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x13) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x38, 0x0, 0x0) 4m52.173669635s ago: executing program 3 (id=3743): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m51.891974658s ago: executing program 3 (id=3750): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000008, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0xc}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x216002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 4m51.59145016s ago: executing program 3 (id=3757): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xf8a461fbcfbb8516}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0x4, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="b702000000001700bfa300000000000007030000f0ffffff720af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee2922bd165a5a68488e010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7f22b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d74bf0a305790c9d644735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f535447cc0facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf00000048d2570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f09f4db033e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e7f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec50f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754d98b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8cf632c2604eab3a62a28611da1cae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412e1bdebae06edb51a134301b4627d4927287daf9dcae6720334862f3a18094f1edd9e3503379815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2f09e99f4ab5546ba1e5ad6a329f24e73a9c38eec34bd4dcc1609f6150e2de72f6599a2310c3841f4bb7f39cabc82c9fdfff5587ed4fa84090635fa3445c4cc54478b2f98320944ac7cb1c4e414556f7b0b763a00a84327cec7e11b3470f0384b27bbfdd8b2472497e7fe8c5df7e0a00641872472efa21c9ad3979e642dcc85c17ca8e084aa9689b83426e2fdaa01f500000000000000000000f9fd84fa991466ff749afe900d02281b2bb60d458340c4f68ec34835760ceca945bf181a000000c000000000b4a76515564ae189de7c1765f0ff68a0388ca8dd2aa831d0e01f0d7ce74401a58cef60e63e97a50c18de54121ce66380224ab7b9c0d4710f2347bad2c9b3e41cc738c1092728687f33e5cdb077223dc82c2137b4e3ba6791a2cd764e654f904c9505b7c5e3b2897072e747534952dcda50cde3e4deb6ebf85a04c3e415112b01eed6515c845a8a20519cd21787d560e9d8283fa8ff0c17b63ba06577c26678ff45420a1f85df47dbfc44e534f71aae5693fb5df61c5096219091ce0cd8e1e2e79bf9d37779e52007c66a00e6ded1499ed3892ed1544d1577906b52e16c734d4aec07dd15faa768c97298be87dd34ce704ffe3da8b46708cf972de4f31c0705ac933db80bdcfcb35c0d4620d4ec270ff7c9ce1b78994dd2b28b9d1c5c469d4c1a61781dce2f1b54d6138bd3f7df9e9ca613bec407c1b8d1bd0c7cb9d76eebf2f17c"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xc463f262, 0x10, &(0x7f0000000040)}, 0x48) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8024, 0x90024, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x6}, 0xb022, 0x2, 0x0, 0x0, 0x2, 0x0, 0x65, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket(0x10, 0x80002, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0xdf, 0x20002}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x8}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x50, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x33}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}, 0x1, 0x0, 0x0, 0x40800}, 0x2c040010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000ffff00"/112], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x70bd29, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x400}, {0x0, 0x0, 0x101}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x1}}, 0xb8}}, 0x10000000) 4m36.226517183s ago: executing program 33 (id=3757): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xf8a461fbcfbb8516}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0x4, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xc463f262, 0x10, &(0x7f0000000040)}, 0x48) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8024, 0x90024, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x6}, 0xb022, 0x2, 0x0, 0x0, 0x2, 0x0, 0x65, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket(0x10, 0x80002, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0xdf, 0x20002}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x8}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x50, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x33}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}, 0x1, 0x0, 0x0, 0x40800}, 0x2c040010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000ffff00"/112], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x70bd29, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x400}, {0x0, 0x0, 0x101}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x1}}, 0xb8}}, 0x10000000) 5.548991237s ago: executing program 5 (id=6344): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0, 0x3}, 0x108208, 0xca, 0x0, 0x2, 0xfffffffffffffff8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218"], 0xc0}}, 0x20040000) write$cgroup_subtree(r2, 0x0, 0x55) 5.095083241s ago: executing program 5 (id=6347): bpf$MAP_CREATE(0x0, 0x0, 0x48) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x141, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x6, &(0x7f0000000040), 0x4) sendmsg(r3, &(0x7f0000002500)={&(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x44}}, 0x80}, 0x80) setsockopt$sock_attach_bpf(r3, 0x29, 0x6, 0x0, 0x0) 5.070795486s ago: executing program 1 (id=6348): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{r0, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000200)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x11, 0x10, &(0x7f0000001a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.950997831s ago: executing program 1 (id=6350): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0, 0x5}, 0x104101, 0x4, 0x9, 0x1, 0x6, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x400c084) 4.949465044s ago: executing program 5 (id=6352): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x6, 0x0, 0x10, 0xfc, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x9, 0x1, 0x0, 0x80000001, 0x0, 0x0, 0x4, 0x0, 0x200000000000}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="bc01000019000100000000000000000000000000000000000000000000000000ac14144200eeffffff000000000008004e2700004e2080000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff0000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000004010500ff010000000000000000000000000001000004d2330000000a000000000000000000000000000000000000000135000001003b008300000005000000f28c0000e0000001000000000000000000000000000004d56c00000002000000000000000000000000000000000000000000000001030300040000000200000003000000fc000000000000000000000000000000000004d53c00000002000000200100000000000000000000000000020435000001000200faffffff0104000081000000fe880000000000000000000000000001000004d32b000000000000000a0101000000000000000000"], 0x1bc}, 0x1, 0x0, 0x0, 0x20000001}, 0x4894) recvmsg$unix(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(r3, &(0x7f0000000000), 0xfdef) 4.811879047s ago: executing program 5 (id=6355): ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000100)) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x50}}, 0x0) r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x80000000}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x1e, 0x4, 0x0) r3 = socket$kcm(0x1e, 0x0, 0x0) write$cgroup_subtree(r3, 0x0, 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x0, 0x0, 0x0, 0x2, 0xdb, &(0x7f000000cf3d)=""/182, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) 4.698714493s ago: executing program 1 (id=6357): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0, 0x3}, 0x108208, 0xca, 0x0, 0x2, 0xfffffffffffffff8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218"], 0xc0}}, 0x20040000) write$cgroup_subtree(r2, 0x0, 0x55) 4.574949903s ago: executing program 1 (id=6361): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) 4.509867202s ago: executing program 5 (id=6362): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4, 0x4, 0x9}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0xa2a}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r1, 0x40047459, 0xf0ff1f00000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0a0000000500"], 0x50) mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000380)=r6) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001680)=@base={0x1a, 0x4, 0x80, 0x1, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x37af}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001680)=@base={0x1a, 0x4, 0x80, 0x1, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x37af}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.481443775s ago: executing program 1 (id=6363): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x5110, 0x0, 0x3, 0x5, 0x1, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x40002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000050800000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.440322696s ago: executing program 2 (id=6364): bpf$MAP_CREATE(0x0, 0x0, 0x48) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x141, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x6, &(0x7f0000000040), 0x4) sendmsg(r3, &(0x7f0000002500)={&(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x44}}, 0x80, &(0x7f0000000000)=[{0x0}], 0x1}, 0x80) setsockopt$sock_attach_bpf(r3, 0x29, 0x6, 0x0, 0x0) 4.142038513s ago: executing program 6 (id=6365): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.00717468s ago: executing program 2 (id=6366): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x6, 0x0, 0x10, 0xfc, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x9, 0x1, 0x0, 0x80000001, 0x0, 0x0, 0x4, 0x0, 0x200000000000}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="bc01000019000100000000000000000000000000000000000000000000000000ac14144200eeffffff000000000008004e2700004e2080000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff0000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000004010500ff010000000000000000000000000001000004d2330000000a000000000000000000000000000000000000000135000001003b008300000005000000f28c0000e0000001000000000000000000000000000004d56c00000002000000000000000000000000000000000000000000000001030300040000000200000003000000fc000000000000000000000000000000000004d53c00000002000000200100000000000000000000000000020435000001000200faffffff0104000081000000fe880000000000000000000000000001000004d32b000000000000000a0101000000000000000000000000000235"], 0x1bc}, 0x1, 0x0, 0x0, 0x20000001}, 0x4894) recvmsg$unix(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(r3, &(0x7f0000000000), 0xfdef) 3.970246156s ago: executing program 2 (id=6367): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x0, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x900}, 0x60) 3.887201675s ago: executing program 1 (id=6368): syz_clone(0x61801680, 0x0, 0x1f, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x2, 0x0, 0x4}, 0x0, 0x0, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0xa2a}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB], 0xfdef) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x9}, 0x8080, 0x5, 0x0, 0x0, 0xed, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x2) 3.679772895s ago: executing program 2 (id=6369): r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000040)="8d", 0x1}], 0x1}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) socketpair(0x15, 0x80005, 0x1c000000, &(0x7f0000000000)={0x0, 0x0}) gettid() r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0xa, 0x3, 0xff) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x25, 0x1, 0x70bd2c, 0x65dfdc02, {0x1f}}, 0x14}, 0x1, 0x0, 0x0, 0x4040003}, 0x10) sendmsg$inet6(r6, &(0x7f0000000080)={&(0x7f0000000140)={0xa, 0xa, 0x5, @mcast2, 0x6}, 0x1c, 0x0, 0x0, 0x0, 0x28}, 0x922bac8576bdadce) sendmsg$NFT_BATCH(r5, 0x0, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000400000002000000000000110300000000000000000000000100000d030000000d00000005000000020000000000000c02000000000061"], 0x0, 0x4c}, 0x28) sendmsg(r3, 0x0, 0x24040000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000000b702000014100000b7030000000000008500000083000000bf1e00000000000055097ef5004000009500000000010000bf910000"], 0x0, 0x7f, 0x80, &(0x7f0000000640)=""/128, 0x41100, 0x20, '\x00', 0x0, 0x25, r9, 0x8, &(0x7f00000006c0)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000780)=[{0x1, 0x1, 0xf, 0x3}]}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x86400, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000200)=r7) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)="2bc06e0104ed2f9eb173b3a0967a2ac6be9ebd24d5d3043d8a99be6c15a7edaa610ed7f12fc454b7d0759a9ebbfbfc910e1b8282f642449a2cebd2953c130d7df9e5f9112dc770209c8580e405241b1476edfd91624ce36107fb53bb88a13ae938b05265880252714da57f9dd3bb6521ce06e9a70bd394e7afaca8c7bb4a0806926918813b1d0baae9b3a15abdef032e7fcf75e90ee96c4b98ca2804683c83d132b73f", 0xa3}, 0x40000) 3.599917452s ago: executing program 6 (id=6371): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0, 0x3}, 0x108208, 0xca, 0x0, 0x2, 0xfffffffffffffff8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218"], 0xc0}}, 0x20040000) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[], 0x55) 3.495864455s ago: executing program 6 (id=6372): ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000100)) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x50}}, 0x0) r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x80000000}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x1e, 0x4, 0x0) r3 = socket$kcm(0x1e, 0x0, 0x0) write$cgroup_subtree(r3, 0x0, 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x0, 0x0, 0x0, 0x2, 0xdb, &(0x7f000000cf3d)=""/182, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) 2.493464803s ago: executing program 6 (id=6376): bpf$MAP_CREATE(0x0, 0x0, 0x48) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x141, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x6, &(0x7f0000000040), 0x4) sendmsg(r3, &(0x7f0000002500)={&(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x44}}, 0x80, &(0x7f0000000000)=[{0x0}], 0x1}, 0x80) setsockopt$sock_attach_bpf(r3, 0x29, 0x6, 0x0, 0x0) 2.226807992s ago: executing program 6 (id=6378): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x5110, 0x0, 0x3, 0x5, 0x1, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x40002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000050800000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.659987324s ago: executing program 4 (id=6381): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.571898445s ago: executing program 4 (id=6382): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0, 0x3}, 0x108208, 0xca, 0x0, 0x2, 0xfffffffffffffff8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218"], 0xc0}}, 0x20040000) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[], 0x55) 1.484224515s ago: executing program 4 (id=6383): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000003460200bfa30000000000001702000000feffff7a0af0ff14ffffff79a4f0ff00000000b7060000ff0800007e640200000000005502faff037202000404000001007d60a6040000001000006a0a58fe39000f008500000019000000bc600000000000009500000000000000a81bbfa32d51a7d0679fd43041097666ab982de7b0efc5733ed236e4add6de094e0832aaa6912a8b2ce571c4580034fb000000e3a94bd24d2eb3860d808922433e3e0f242a46b3009a54f4077db0d4968a384b0559c7919b893d3b72cd6c832e986440ff0a7e8620cb231ccd000000000000000000000077"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x224e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000010000000000000000000001800000004000000000000000700000085100000fbffffff186400000300000000000000020000009500"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x72, &(0x7f0000000000)=""/114}, 0x94) 1.361811543s ago: executing program 4 (id=6384): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000071121f000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0xb, 0x8, 0x4, 0x2, 0xffffffffffffffff, 0x9}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000480)={r1, &(0x7f0000000380), 0x0}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000006c0)=@generic={&(0x7f00000000c0)='./file0\x00', r1}, 0x18) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@generic={&(0x7f0000000400)='./file0\x00', 0x0, 0x8}, 0x18) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@decl_tag={0x6, 0x0, 0x0, 0x11, 0x1, 0x7}, @func={0x4, 0x0, 0x0, 0xc, 0x2}, @const={0xa, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x61, 0x30, 0x61, 0x61]}}, &(0x7f00000008c0)=""/119, 0x46, 0x77, 0x0, 0x5, 0x10000, @value=r2}, 0x28) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000980)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {}, {0x7, 0x0, 0xb, 0x9}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="0400"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, [@generic={0x40, 0xd, 0xd, 0x5, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x65, &(0x7f0000000200)=""/101, 0x41100, 0x0, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000500)=[r1, r3, r4, r5, r7], &(0x7f0000000540)=[{0x1, 0x3, 0xd, 0xc}, {0x1, 0x3, 0x8, 0x4}, {0x0, 0x2, 0x3, 0xa}, {0x3, 0x2, 0x20e, 0x7}], 0x10, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2309e}, 0x94) close(0x3) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x8000, '\x00', 0x0, r7, 0x4, 0x4}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0x8, '\x00', r0, r6, 0x0, 0x2, 0x5}, 0x50) 335.209046ms ago: executing program 4 (id=6385): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20442, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x150}}, 0x0) 333.748492ms ago: executing program 2 (id=6386): ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000100)) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x50}}, 0x0) r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x80000000}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x1e, 0x4, 0x0) r3 = socket$kcm(0x1e, 0x0, 0x0) write$cgroup_subtree(r3, 0x0, 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x0, 0x0, 0x0, 0x2, 0xdb, &(0x7f000000cf3d)=""/182, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) 218.339339ms ago: executing program 6 (id=6387): bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x7f) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x2d, 'freezer'}, {0x2b, 'blkio'}, {0x2d, 'rdma'}]}, 0x16) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0x800, 0x3) r2 = getpid() r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x34024, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39a0, 0x0, @perf_config_ext={0x2, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x2, 0x7fffffff}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0xc040) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0xff, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x21ae450d, 0xfffffffffffffffd}, 0x908, 0x0, 0xfffffbfe, 0x5, 0x800, 0x2, 0x101, 0x0, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500010125bd7000fdffffff550000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x20028840) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000015c0)="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", 0x566}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) 217.942855ms ago: executing program 5 (id=6388): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x22b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000071113d00000000008510000002000000850000000500000095000000000000009500a505000000009d626e70e9673322c7b85ffaf65c66ad587d51e8e0c4dfe91759b3f0f9f5ae8e3f9b82270eae11be2c6b3322403a0e3a6ac538f90427f5672fe15e688d62cec17c4a6f411694008948951a47de9b1a3edb8696448c0169532ec1422053b8636554129da48fa59cffe396b8d33b1e214015bc797bea7bc32a0dd1b228af1f0a"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r1 = perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}, 0x121d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) 197.292687ms ago: executing program 4 (id=6389): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$cgroup_procs(r4, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$cgroup_pid(r7, &(0x7f0000000300)=r6, 0x12) write$cgroup_freezer_state(r5, &(0x7f0000000080)='THAWED\x00', 0x7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x420}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f2, &(0x7f0000000080)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000140), 0x2, 0x0) syz_clone(0x40005000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000d40)={0x2, 0x80, 0x68, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xfffffffffffffffa, 0x10000}, 0x8199, 0x0, 0xff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=6390): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x6, 0x0, 0x10, 0xfc, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x9, 0x1, 0x0, 0x80000001, 0x0, 0x0, 0x4, 0x0, 0x200000000000}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="bc01000019000100000000000000000000000000000000000000000000000000ac14144200eeffffff000000000008004e2700004e2080000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff0000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000004010500ff010000000000000000000000000001000004d2330000000a000000000000000000000000000000000000000135000001003b008300000005000000f28c0000e0000001000000000000000000000000000004d56c00000002000000000000000000000000000000000000000000000001030300040000000200000003000000fc000000000000000000000000000000000004d53c00000002000000200100000000000000000000000000020435000001000200faffffff0104000081000000fe880000000000000000000000000001000004d32b000000000000000a0101000000000000000000000000000235"], 0x1bc}, 0x1, 0x0, 0x0, 0x20000001}, 0x4894) recvmsg$unix(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(r3, &(0x7f0000000000), 0xfdef) kernel console output (not intermixed with test programs): 249 > 2 [ 509.695461][ T584] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.741815][ T584] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.285623][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.309729][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.395536][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.405476][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.626838][T15554] chnl_net:caif_netlink_parms(): no params data found [ 511.235581][T15554] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.243441][T15554] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.251927][T15554] bridge_slave_0: entered allmulticast mode [ 511.260941][T15554] bridge_slave_0: entered promiscuous mode [ 511.285962][T15554] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.293811][T15554] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.302241][T15554] bridge_slave_1: entered allmulticast mode [ 511.311208][T15554] bridge_slave_1: entered promiscuous mode [ 511.359051][T15554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.385800][T15554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.442109][T15554] team0: Port device team_slave_0 added [ 511.452233][T15554] team0: Port device team_slave_1 added [ 511.502048][T15554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.513629][T15554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.547796][T15554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.563213][T15554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.578167][T15554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.619846][T15554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.667795][ T5836] Bluetooth: hci2: command tx timeout [ 511.691102][T15554] hsr_slave_0: entered promiscuous mode [ 511.698804][T15554] hsr_slave_1: entered promiscuous mode [ 511.705483][T15554] debugfs: 'hsr0' already exists in 'hsr' [ 511.712893][T15554] Cannot create hsr debugfs directory [ 512.663476][T15605] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3248'. [ 512.699912][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.825771][T15607] tmpfs: Unknown parameter 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 512.834127][T15599] mac80211_hwsim hwsim15 »»»»»»: renamed from wlan0 [ 512.962126][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.970226][T15607] netlink: 'syz.1.3249': attribute type 3 has an invalid length. [ 512.989520][T15607] netlink: 125040 bytes leftover after parsing attributes in process `syz.1.3249'. [ 513.294360][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.325463][T15554] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 513.620484][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.645279][T15554] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 513.706303][T15554] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 513.746839][T15554] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 513.749736][ T5836] Bluetooth: hci2: command tx timeout [ 514.003478][ T12] bridge_slave_1: left allmulticast mode [ 514.037818][ T12] bridge_slave_1: left promiscuous mode [ 514.043641][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.118790][ T12] bridge_slave_0: left allmulticast mode [ 514.144073][ T12] bridge_slave_0: left promiscuous mode [ 514.162065][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.262101][T15666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3263'. [ 514.945719][T15679] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3265'. [ 515.114773][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 515.139931][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.161216][ T12] bond0 (unregistering): Released all slaves [ 515.246887][T15686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3267'. [ 515.701636][T15554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.856273][T15554] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.974451][ T1016] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.982070][ T1016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.098200][ T5836] Bluetooth: hci2: command tx timeout [ 516.153930][ T84] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.162075][ T84] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.611702][T15554] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 516.630827][T15554] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 516.844747][T15704] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3272'. [ 516.928764][T15708] openvswitch: netlink: IP tunnel dst address not specified [ 516.996048][T15713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3275'. [ 517.532267][ T12] hsr_slave_0: left promiscuous mode [ 517.542375][ T12] hsr_slave_1: left promiscuous mode [ 517.554687][T15732] delete_channel: no stack [ 517.568588][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 517.576714][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 517.623484][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 517.633119][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 517.667116][ T12] veth1_macvtap: left promiscuous mode [ 517.673699][ T12] veth0_macvtap: left promiscuous mode [ 517.680709][ T12] veth1_vlan: left promiscuous mode [ 517.686235][ T12] veth0_vlan: left promiscuous mode [ 517.962498][T15742] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3283'. [ 518.005095][ T12] team0 (unregistering): Port device team_slave_1 removed [ 518.033101][ T12] team0 (unregistering): Port device team_slave_0 removed [ 518.148158][ T5836] Bluetooth: hci2: command tx timeout [ 518.206964][T15554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.216958][T15727] mac80211_hwsim hwsim19 »»»»»»: renamed from wlan0 [ 518.454545][T15753] netlink: 'syz.2.3287': attribute type 21 has an invalid length. [ 519.351671][T15554] veth0_vlan: entered promiscuous mode [ 519.400160][T15554] veth1_vlan: entered promiscuous mode [ 519.503682][T15554] veth0_macvtap: entered promiscuous mode [ 519.561907][T15554] veth1_macvtap: entered promiscuous mode [ 519.631706][T15554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.684589][T15554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.726642][T15776] delete_channel: no stack [ 519.910640][ T584] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.948223][ T584] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.982830][ T584] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.015924][ T584] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.284208][ T584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.305524][ T584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.435170][ T1016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.483394][ T1016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.653469][T15810] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3303'. [ 520.711189][T15810] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3303'. [ 521.562544][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 521.573337][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 521.582516][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 521.597454][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 521.685456][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 521.908962][T15861] netlink: 'syz.2.3317': attribute type 1 has an invalid length. [ 521.917359][T15861] netlink: 2704 bytes leftover after parsing attributes in process `syz.2.3317'. [ 522.913011][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.327241][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.431100][T15902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3332'. [ 523.535981][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.641634][T15848] chnl_net:caif_netlink_parms(): no params data found [ 523.750467][ T5836] Bluetooth: hci4: command tx timeout [ 523.781435][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.056387][T15848] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.064324][T15848] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.072343][T15848] bridge_slave_0: entered allmulticast mode [ 524.080778][T15848] bridge_slave_0: entered promiscuous mode [ 524.089227][T15848] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.096416][T15848] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.103945][T15848] bridge_slave_1: entered allmulticast mode [ 524.112094][T15848] bridge_slave_1: entered promiscuous mode [ 524.189124][T15933] syzkaller0: entered promiscuous mode [ 524.194706][T15933] syzkaller0: entered allmulticast mode [ 525.756825][T15848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.828765][ T5836] Bluetooth: hci4: command tx timeout [ 525.878790][T15848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.475390][T15848] team0: Port device team_slave_0 added [ 527.507557][T15848] team0: Port device team_slave_1 added [ 527.601136][ T13] bridge_slave_1: left allmulticast mode [ 527.607165][ T13] bridge_slave_1: left promiscuous mode [ 527.623191][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.642589][ T13] bridge_slave_0: left promiscuous mode [ 527.673467][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.710729][T15960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3351'. [ 527.737834][T15960] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3351'. [ 527.757545][T15960] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3351'. [ 527.907786][ T5836] Bluetooth: hci4: command tx timeout [ 528.073165][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 528.090043][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.104234][ T13] bond0 (unregistering): Released all slaves [ 528.122590][T15848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.139303][T15848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.208093][T15848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.229828][T15967] wlan1 speed is unknown, defaulting to 1000 [ 528.236668][T15967] wlan1 speed is unknown, defaulting to 1000 [ 528.254654][T15848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.277748][T15848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.312791][T15848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.331772][T15967] wlan1 speed is unknown, defaulting to 1000 [ 528.361227][T15967] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 528.416918][T15967] infiniband óyz2: RDMA CMA: cma_listen_on_dev, error -98 [ 528.570481][T16001] netlink: 'syz.4.3370': attribute type 4 has an invalid length. [ 528.584570][T15967] wlan1 speed is unknown, defaulting to 1000 [ 528.597495][T16001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3370'. [ 528.669271][T15848] hsr_slave_0: entered promiscuous mode [ 528.698268][T15848] hsr_slave_1: entered promiscuous mode [ 528.715503][T15848] debugfs: 'hsr0' already exists in 'hsr' [ 528.729414][T15848] Cannot create hsr debugfs directory [ 528.738380][T15967] wlan1 speed is unknown, defaulting to 1000 [ 528.781639][T15967] wlan1 speed is unknown, defaulting to 1000 [ 528.865131][T15967] wlan1 speed is unknown, defaulting to 1000 [ 528.895980][T15967] wlan1 speed is unknown, defaulting to 1000 [ 528.942440][T15967] wlan1 speed is unknown, defaulting to 1000 [ 529.141387][ T13] hsr_slave_0: left promiscuous mode [ 529.161178][ T13] hsr_slave_1: left promiscuous mode [ 529.173348][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.200142][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.234951][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.245539][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.276458][ T13] veth0_macvtap: left promiscuous mode [ 529.296165][ T13] veth1_vlan: left promiscuous mode [ 529.317837][ T13] veth0_vlan: left promiscuous mode [ 529.614921][ T13] team0 (unregistering): Port device team_slave_1 removed [ 529.646862][ T13] team0 (unregistering): Port device team_slave_0 removed [ 529.900795][T16040] pim6reg1: tun_chr_ioctl cmd 1074025675 [ 529.909431][T16040] pim6reg1: persist enabled [ 529.914653][T16045] pim6reg1: tun_chr_ioctl cmd 1074025675 [ 529.925042][T16045] pim6reg1: persist disabled [ 530.018252][ T5836] Bluetooth: hci4: command tx timeout [ 531.157571][T16084] wlan1 speed is unknown, defaulting to 1000 [ 533.002965][T16107] syzkaller0: entered promiscuous mode [ 533.038974][T16107] syzkaller0: entered allmulticast mode [ 535.854103][T16137] syzkaller0: entered promiscuous mode [ 535.860467][T16137] syzkaller0: entered allmulticast mode [ 536.282897][T15848] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 537.731471][T15848] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 537.764303][T15848] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 537.819791][T15848] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 538.003100][T16177] syzkaller0: entered promiscuous mode [ 538.021313][T16177] syzkaller0: entered allmulticast mode [ 540.512787][T16217] syzkaller0: entered promiscuous mode [ 540.529648][T16217] syzkaller0: entered allmulticast mode [ 540.654253][T15547] syzkaller0: tun_net_xmit 48 [ 544.239809][T16240] wg2: entered promiscuous mode [ 544.246951][T16240] wg2: entered allmulticast mode [ 544.363431][T16251] wlan1 speed is unknown, defaulting to 1000 [ 544.490415][T15848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.837763][T15848] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.530586][T16270] ªªªªªª™™: renamed from vlan0 (while UP) [ 545.554460][ T84] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.561763][ T84] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.576938][ T84] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.585148][ T84] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.866712][T16274] wlan1 speed is unknown, defaulting to 1000 [ 547.176176][T16304] wlan1 speed is unknown, defaulting to 1000 [ 548.377662][T15848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.571157][T16347] netlink: 'syz.5.3460': attribute type 1 has an invalid length. [ 548.596941][T15848] veth0_vlan: entered promiscuous mode [ 548.650478][T15848] veth1_vlan: entered promiscuous mode [ 548.732169][T15848] veth0_macvtap: entered promiscuous mode [ 548.787927][T15848] veth1_macvtap: entered promiscuous mode [ 549.530731][T16387] tmpfs: Unknown parameter 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 551.525636][T16393] wlan1 speed is unknown, defaulting to 1000 [ 551.632734][T15848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 551.655846][T15848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 551.834027][ T1114] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.877590][ T1114] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.945783][ T1114] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.964020][ T1114] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.340428][ T584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.361864][ T584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.983252][ T584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.002288][ T584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.647501][T16455] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3493'. [ 554.018008][T16473] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3499'. [ 554.875313][ T5836] Bluetooth: hci5: command 0x0406 tx timeout [ 556.759803][T16492] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.767537][T16492] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.833400][T16494] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3510'. [ 557.771215][T16511] syzkaller0: entered promiscuous mode [ 557.777020][T16511] syzkaller0: entered allmulticast mode [ 557.847914][T16515] syzkaller0: entered promiscuous mode [ 557.854225][T16515] syzkaller0: entered allmulticast mode [ 558.342587][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 558.352059][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 558.368374][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 558.376670][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 558.387938][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 560.469099][ T5836] Bluetooth: hci3: command tx timeout [ 562.097951][T16512] wlan1 speed is unknown, defaulting to 1000 [ 562.637430][ T5837] Bluetooth: hci3: command tx timeout [ 563.735198][T16512] chnl_net:caif_netlink_parms(): no params data found [ 564.067644][ T584] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.756746][T16570] netlink: 'syz.5.3532': attribute type 39 has an invalid length. [ 564.765061][ T5837] Bluetooth: hci3: command tx timeout [ 564.871184][ T584] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.399685][ T584] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.527133][ T584] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.547990][T16512] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.555478][T16512] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.562900][T16512] bridge_slave_0: entered allmulticast mode [ 565.571636][T16512] bridge_slave_0: entered promiscuous mode [ 565.625053][T16578] mac80211_hwsim hwsim20 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 565.669851][T16512] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.677292][T16512] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.766491][T16512] bridge_slave_1: entered allmulticast mode [ 565.802290][T16512] bridge_slave_1: entered promiscuous mode [ 565.857614][T16587] netlink: 'syz.1.3536': attribute type 10 has an invalid length. [ 565.987538][T16587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 566.032702][T16587] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 566.042258][T16589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.057556][T16589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.091073][T16589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.112149][T16589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.382247][T16589] bond0: (slave batadv0): Releasing backup interface [ 566.902608][ T5837] Bluetooth: hci3: command tx timeout [ 567.026853][T16512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.930677][T16596] netlink: 'syz.1.3538': attribute type 16 has an invalid length. [ 567.953097][T16596] netlink: 'syz.1.3538': attribute type 17 has an invalid length. [ 567.995592][T15547] wlan1: Trigger new scan to find an IBSS to join [ 568.166422][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.173375][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.440600][T16599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3539'. [ 569.720061][T16512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.752783][T16596] lo: entered promiscuous mode [ 569.758257][T16596] tunl0: entered promiscuous mode [ 569.764041][T16596] gre0: entered promiscuous mode [ 569.770273][T16596] gretap0: entered promiscuous mode [ 569.776568][T16596] erspan0: entered promiscuous mode [ 569.784704][T16596] ip_vti0: entered promiscuous mode [ 569.791962][T16596] ip6_vti0: entered promiscuous mode [ 569.799775][T16596] sit0: entered promiscuous mode [ 569.805690][T16596] ip6tnl0: entered promiscuous mode [ 569.814696][T16596] ip6gre0: entered promiscuous mode [ 569.823246][T16596] syz_tun: entered promiscuous mode [ 569.834703][T16596] ip6gretap0: entered promiscuous mode [ 569.842098][T16596] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.849502][T16596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.857707][T16596] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.865124][T16596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.876308][T16596] bridge0: entered promiscuous mode [ 569.883609][T16596] vcan0: entered promiscuous mode [ 569.892026][T16596] bond0: entered promiscuous mode [ 569.897195][T16596] bond_slave_0: entered promiscuous mode [ 569.904000][T16596] bond_slave_1: entered promiscuous mode [ 569.917054][T16596] team0: entered promiscuous mode [ 569.922615][T16596] team_slave_0: entered promiscuous mode [ 569.929822][T16596] team_slave_1: entered promiscuous mode [ 569.942142][T16596] dummy0: entered promiscuous mode [ 569.949822][T16596] nlmon0: entered promiscuous mode [ 569.956189][T16596] caif0: entered promiscuous mode [ 569.961901][T16596] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 570.074335][T16512] team0: Port device team_slave_0 added [ 570.103931][T16593] wlan1 speed is unknown, defaulting to 1000 [ 570.130769][T16512] team0: Port device team_slave_1 added [ 570.156050][T16615] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3544'. [ 570.245504][T16512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.253078][T16512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.280942][T16512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.338814][T16512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.346084][T16512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.374524][T16512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.395111][ T584] bridge_slave_1: left allmulticast mode [ 570.403803][ T584] bridge_slave_1: left promiscuous mode [ 570.409954][ T584] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.434647][ T584] bridge_slave_0: left allmulticast mode [ 570.441304][ T584] bridge_slave_0: left promiscuous mode [ 570.447309][ T584] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.699851][ T584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 570.711995][ T584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 570.725207][ T584] bond0 (unregistering): Released all slaves [ 570.915875][T16512] hsr_slave_0: entered promiscuous mode [ 570.928764][T16512] hsr_slave_1: entered promiscuous mode [ 570.939412][T16512] debugfs: 'hsr0' already exists in 'hsr' [ 570.945688][T16512] Cannot create hsr debugfs directory [ 571.067295][T16633] wlan1 speed is unknown, defaulting to 1000 [ 571.225022][ T584] hsr_slave_0: left promiscuous mode [ 571.236634][ T584] hsr_slave_1: left promiscuous mode [ 571.255159][ T584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 571.270888][T16643] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3554'. [ 571.273533][ T584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 571.281999][T16643] nbd: must specify at least one socket [ 571.305822][ T584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 571.317401][ T584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 571.334467][ T584] veth1_macvtap: left promiscuous mode [ 571.340361][ T584] veth0_macvtap: left promiscuous mode [ 571.345955][ T584] veth1_vlan: left promiscuous mode [ 571.354198][ T584] veth0_vlan: left promiscuous mode [ 571.988122][ T12] wlan1: Trigger new scan to find an IBSS to join [ 572.192672][ T584] team0 (unregistering): Port device team_slave_1 removed [ 572.217353][ T584] team0 (unregistering): Port device team_slave_0 removed [ 572.258180][T16674] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3564'. [ 573.987891][ T12] wlan1: Creating new IBSS network, BSSID f6:97:4b:a2:b0:62 [ 574.305934][T16512] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 574.398408][T16512] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 574.458993][T16734] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 574.491537][T16512] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 574.543609][T16512] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 574.786500][T16512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.811531][T16512] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.861524][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.869243][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.921775][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.929232][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.334453][T16776] tun0: tun_chr_ioctl cmd 1074025677 [ 575.342264][T16776] tun0: linktype set to 768 [ 575.710407][T16512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.509116][T16512] veth0_vlan: entered promiscuous mode [ 576.535530][T16512] veth1_vlan: entered promiscuous mode [ 576.614276][T16512] veth0_macvtap: entered promiscuous mode [ 576.643423][T16512] veth1_macvtap: entered promiscuous mode [ 576.691412][T16512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 576.715260][T16512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 576.745666][T15547] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.772343][T15547] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.795259][T15547] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.820937][T15547] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.335363][T16845] netlink: 'syz.1.3603': attribute type 1 has an invalid length. [ 577.436907][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.459349][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.519407][T15547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.537887][T15547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.822421][T16867] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3610'. [ 577.871145][T16867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3610'. [ 578.182396][T16882] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3616'. [ 578.220291][T16882] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3616'. [ 578.559283][T16898] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3625'. [ 578.584566][T16898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3625'. [ 578.709824][T16907] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3629'. [ 578.882524][T16920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3634'. [ 579.019408][T16927] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3639'. [ 579.046307][T16927] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3639'. [ 583.179003][ T584] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.539148][T17025] __nla_validate_parse: 5 callbacks suppressed [ 583.539167][T17025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3682'. [ 583.567273][T17025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3682'. [ 583.571394][T17027] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3683'. [ 585.594064][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 586.001036][T17093] netlink: 'syz.4.3711': attribute type 10 has an invalid length. [ 586.010803][T17093] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3711'. [ 586.435745][T17093] macvlan1: entered promiscuous mode [ 586.452969][T17093] batman_adv: batadv0: Adding interface: macvlan1 [ 586.497768][T17093] batman_adv: batadv0: The MTU of interface macvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.545675][T17093] batman_adv: batadv0: Interface activated: macvlan1 [ 587.251416][T17133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3725'. [ 587.270286][T17133] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3725'. [ 587.449034][T17140] netlink: 'syz.3.3730': attribute type 10 has an invalid length. [ 587.506361][T17140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.583318][T17140] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 590.984465][T17213] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3762'. [ 596.278822][ T37] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.538105][ T37] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.016157][ T37] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.211942][ T37] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.606645][T17277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 597.650054][T17277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.320384][T17277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 598.357961][T17277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 599.408281][T15557] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 599.426084][T15557] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 599.438545][T15557] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 599.459452][T15557] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 599.483594][T15557] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 599.607985][ T37] bridge_slave_1: left allmulticast mode [ 599.627775][ T37] bridge_slave_1: left promiscuous mode [ 599.634272][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.871461][ T37] bridge_slave_0: left allmulticast mode [ 599.894605][ T37] bridge_slave_0: left promiscuous mode [ 599.928716][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.301286][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 601.588018][ T5837] Bluetooth: hci3: command tx timeout [ 602.743897][T17322] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3798'. [ 603.669041][ T5836] Bluetooth: hci3: command tx timeout [ 604.438068][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 604.678346][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 604.737289][ T37] bond0 (unregistering): Released all slaves [ 604.864555][T17334] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.874867][T17334] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.959550][T17334] bridge0: entered allmulticast mode [ 605.161439][T17287] wlan1 speed is unknown, defaulting to 1000 [ 605.757886][ T5836] Bluetooth: hci3: command tx timeout [ 605.787077][T17342] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3804'. [ 605.860523][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 605.878411][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 605.907471][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 605.931375][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 605.941118][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 606.608654][T17381] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3813'. [ 607.275370][T17347] wlan1 speed is unknown, defaulting to 1000 [ 607.359229][ T37] hsr_slave_0: left promiscuous mode [ 607.386696][ T37] hsr_slave_1: left promiscuous mode [ 607.395361][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 607.408728][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 607.417205][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 607.425973][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 607.435497][ T37] batman_adv: batadv0: Interface deactivated: macvlan1 [ 607.443085][ T37] batman_adv: batadv0: Removing interface: macvlan1 [ 607.457063][ T37] veth1_macvtap: left promiscuous mode [ 607.464535][ T37] veth0_macvtap: left promiscuous mode [ 607.472408][ T37] veth1_vlan: left promiscuous mode [ 607.480418][ T37] veth0_vlan: left promiscuous mode [ 607.665510][ T37] team0 (unregistering): Port device team_slave_1 removed [ 607.680199][ T37] team0 (unregistering): Port device team_slave_0 removed [ 607.828415][ T5837] Bluetooth: hci3: command tx timeout [ 607.987969][ T5837] Bluetooth: hci5: command tx timeout [ 608.132979][T17396] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3818'. [ 608.172225][T17287] chnl_net:caif_netlink_parms(): no params data found [ 609.339147][T17347] chnl_net:caif_netlink_parms(): no params data found [ 609.356950][T17287] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.396806][T17287] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.416828][T17287] bridge_slave_0: entered allmulticast mode [ 609.449388][T17287] bridge_slave_0: entered promiscuous mode [ 609.473313][T17287] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.503107][T17287] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.505752][T17443] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3827'. [ 609.527403][T17287] bridge_slave_1: entered allmulticast mode [ 609.536614][T17287] bridge_slave_1: entered promiscuous mode [ 609.639553][T17287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 609.679849][T17287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 609.790435][ T37] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.899821][T17456] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3833'. [ 609.923827][T17458] delete_channel: no stack [ 609.932563][ T37] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.061703][T17287] team0: Port device team_slave_0 added [ 610.067919][ T5837] Bluetooth: hci5: command tx timeout [ 610.960774][ T37] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.006102][T17287] team0: Port device team_slave_1 added [ 611.012743][T17475] netlink: 288 bytes leftover after parsing attributes in process `syz.1.3837'. [ 611.079440][T17488] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3839'. [ 611.115379][T17347] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.123430][T17347] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.132474][T17347] bridge_slave_0: entered allmulticast mode [ 611.150080][T17347] bridge_slave_0: entered promiscuous mode [ 611.250572][ T37] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.325077][T17497] netlink: 'syz.1.3844': attribute type 10 has an invalid length. [ 611.348486][T17497] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3844'. [ 611.376863][T17347] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.395400][T17347] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.406762][T17347] bridge_slave_1: entered allmulticast mode [ 611.451715][T17347] bridge_slave_1: entered promiscuous mode [ 611.557026][T17497] macvlan1: entered promiscuous mode [ 611.579876][T17497] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 611.640931][T17287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.657584][T17287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 611.719514][T17287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.873627][T17287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 611.883576][T17287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.043539][T17287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.096296][T17347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.148617][ T5837] Bluetooth: hci5: command tx timeout [ 612.904009][T17523] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3852'. [ 612.924108][T17287] hsr_slave_0: entered promiscuous mode [ 612.935646][T17287] hsr_slave_1: entered promiscuous mode [ 612.944149][T17287] debugfs: 'hsr0' already exists in 'hsr' [ 612.952075][T17287] Cannot create hsr debugfs directory [ 612.967352][T17347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.105074][T17347] team0: Port device team_slave_0 added [ 613.121699][T17347] team0: Port device team_slave_1 added [ 613.398204][T17347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.412723][T17347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.451354][T17347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.470378][ T37] bridge_slave_1: left allmulticast mode [ 613.477770][ T37] bridge_slave_1: left promiscuous mode [ 613.478617][T17547] netlink: 'syz.5.3862': attribute type 10 has an invalid length. [ 613.483970][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.494060][T17547] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3862'. [ 613.537491][ T37] bridge_slave_0: left allmulticast mode [ 613.547001][ T37] bridge_slave_0: left promiscuous mode [ 613.553186][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.864446][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 613.914642][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 613.938456][ T37] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 613.963794][ T37] bond0 (unregistering): Released all slaves [ 613.996774][T17347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 614.015004][T17347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 614.063963][T17347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.077052][T17547] dummy0: entered promiscuous mode [ 614.090676][T17547] dummy0: entered allmulticast mode [ 614.115269][T17547] bridge0: port 3(dummy0) entered blocking state [ 614.138631][T17547] bridge0: port 3(dummy0) entered disabled state [ 614.237292][ T5837] Bluetooth: hci5: command tx timeout [ 614.952660][T17347] hsr_slave_0: entered promiscuous mode [ 614.975342][T17347] hsr_slave_1: entered promiscuous mode [ 614.995392][T17347] debugfs: 'hsr0' already exists in 'hsr' [ 615.023750][T17347] Cannot create hsr debugfs directory [ 617.988751][ T37] hsr_slave_0: left promiscuous mode [ 618.058038][ T37] hsr_slave_1: left promiscuous mode [ 618.066460][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 618.094443][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 618.180305][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 618.214199][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 618.296169][ T37] veth1_macvtap: left promiscuous mode [ 618.333395][ T37] veth0_macvtap: left promiscuous mode [ 618.341682][ T37] veth1_vlan: left promiscuous mode [ 618.358756][ T37] veth0_vlan: left promiscuous mode [ 621.185586][ T37] team0 (unregistering): Port device team_slave_1 removed [ 621.361890][ T37] team0 (unregistering): Port device team_slave_0 removed [ 622.535433][T17663] netlink: 'syz.5.3903': attribute type 10 has an invalid length. [ 625.415010][T17287] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 625.658072][T17287] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 626.031205][T17287] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 626.169669][T17287] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 626.586390][T17692] netlink: 'syz.1.3909': attribute type 10 has an invalid length. [ 627.114013][T17347] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 627.250449][T17347] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 627.454481][T17347] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 627.567760][T17347] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 628.684958][T17287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.779864][T17723] netlink: 'syz.1.3915': attribute type 10 has an invalid length. [ 628.921673][T17287] 8021q: adding VLAN 0 to HW filter on device team0 [ 629.004468][T17347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 629.159754][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.169505][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.363808][ T3520] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.371548][ T3520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 629.527210][T17347] 8021q: adding VLAN 0 to HW filter on device team0 [ 629.638702][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.647624][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.795934][ T1016] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.804489][ T1016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.983370][ T1016] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.991042][ T1016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.463626][T17287] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 632.568167][T17287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 633.115358][T17347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 635.477602][T17287] veth0_vlan: entered promiscuous mode [ 635.631175][T17287] veth1_vlan: entered promiscuous mode [ 636.042562][T17287] veth0_macvtap: entered promiscuous mode [ 636.175717][T17287] veth1_macvtap: entered promiscuous mode [ 636.790408][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 636.969339][T17287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 637.017546][T17347] veth0_vlan: entered promiscuous mode [ 637.152971][T17287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 637.441827][ T1016] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.496541][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.594131][T17347] veth1_vlan: entered promiscuous mode [ 637.635055][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.700824][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.955487][T17347] veth0_macvtap: entered promiscuous mode [ 639.053377][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.098663][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.162146][T17347] veth1_macvtap: entered promiscuous mode [ 639.470221][ T1016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.527936][ T1016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.672396][T17347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 639.784485][T17347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 639.939104][ T1016] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.983379][ T1016] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.093726][ T1016] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.162036][ T37] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.034401][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.090613][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.473883][ T3520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.526828][ T3520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.029846][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 654.821540][T17974] netlink: 'syz.1.3975': attribute type 10 has an invalid length. [ 656.793801][ T3520] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.137145][ T3520] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.483014][ T3520] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.288270][ T3520] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.135744][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 659.149388][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 659.176980][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 659.209631][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 659.229343][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 659.609158][ T3520] bridge_slave_1: left allmulticast mode [ 659.616191][ T3520] bridge_slave_1: left promiscuous mode [ 659.673738][ T3520] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.881602][ T3520] bridge_slave_0: left allmulticast mode [ 659.904204][ T3520] bridge_slave_0: left promiscuous mode [ 659.928900][ T3520] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.361735][ T5837] Bluetooth: hci0: command tx timeout [ 662.229185][ T3520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 662.339252][ T3520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 662.521570][ T3520] bond0 (unregistering): Released all slaves [ 663.314207][T18010] wlan1 speed is unknown, defaulting to 1000 [ 663.428985][ T5837] Bluetooth: hci0: command tx timeout [ 665.103158][ T3520] hsr_slave_0: left promiscuous mode [ 665.158040][ T3520] hsr_slave_1: left promiscuous mode [ 665.167214][ T3520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 665.213403][ T3520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 665.279838][ T3520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 665.295834][ T3520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 665.508032][ T5837] Bluetooth: hci0: command tx timeout [ 665.544445][ T3520] veth1_macvtap: left promiscuous mode [ 665.617838][ T3520] veth0_macvtap: left promiscuous mode [ 665.624026][ T3520] veth1_vlan: left promiscuous mode [ 665.687931][ T3520] veth0_vlan: left promiscuous mode [ 666.149543][T18076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4001'. [ 666.622779][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 666.634548][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 666.643806][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 666.658762][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 666.677811][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 667.597779][ T5836] Bluetooth: hci0: command tx timeout [ 668.787921][ T5836] Bluetooth: hci3: command tx timeout [ 669.126486][ T3520] team0 (unregistering): Port device team_slave_1 removed [ 669.409740][ T3520] team0 (unregistering): Port device team_slave_0 removed [ 669.806255][T18104] netlink: 'syz.1.4007': attribute type 46 has an invalid length. [ 669.981048][T18079] wlan1 speed is unknown, defaulting to 1000 [ 670.578824][T18140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4014'. [ 670.611295][T18010] chnl_net:caif_netlink_parms(): no params data found [ 670.867753][ T5836] Bluetooth: hci3: command tx timeout [ 670.927089][T18079] chnl_net:caif_netlink_parms(): no params data found [ 671.064122][T18010] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.079319][T18010] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.086788][T18010] bridge_slave_0: entered allmulticast mode [ 671.101242][T18010] bridge_slave_0: entered promiscuous mode [ 671.143095][T18010] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.151577][T18010] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.161772][T18010] bridge_slave_1: entered allmulticast mode [ 671.170087][T18010] bridge_slave_1: entered promiscuous mode [ 671.742075][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.860245][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.891070][T18010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 671.905087][T18010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 672.023689][T18010] team0: Port device team_slave_0 added [ 672.033969][T18010] team0: Port device team_slave_1 added [ 672.092432][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.207196][T18079] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.227064][T18079] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.238096][T18079] bridge_slave_0: entered allmulticast mode [ 672.261562][T18079] bridge_slave_0: entered promiscuous mode [ 672.289676][T18196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4027'. [ 672.404982][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.421878][T18079] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.429758][T18079] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.436958][T18079] bridge_slave_1: entered allmulticast mode [ 672.445241][T18079] bridge_slave_1: entered promiscuous mode [ 672.454571][T18010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 672.468052][T18010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 672.498438][T18010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 672.531817][T18203] netlink: 'syz.5.4030': attribute type 268 has an invalid length. [ 672.661305][T18079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 672.691247][T18010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 672.713679][T18010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 672.742257][T18010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 672.840389][T18079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 672.948105][ T5836] Bluetooth: hci3: command tx timeout [ 673.080647][T18010] hsr_slave_0: entered promiscuous mode [ 673.117120][T18010] hsr_slave_1: entered promiscuous mode [ 673.565887][T18079] team0: Port device team_slave_0 added [ 673.580612][T18079] team0: Port device team_slave_1 added [ 673.746067][T18079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.753975][T18079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.820664][T18079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.905397][T18079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.950395][T18079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.998154][T18079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 674.185036][T18079] hsr_slave_0: entered promiscuous mode [ 674.199583][T18079] hsr_slave_1: entered promiscuous mode [ 674.206711][T18079] debugfs: 'hsr0' already exists in 'hsr' [ 674.209905][T18247] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4042'. [ 674.213091][T18079] Cannot create hsr debugfs directory [ 674.336599][ T12] bridge_slave_1: left allmulticast mode [ 674.342724][ T12] bridge_slave_1: left promiscuous mode [ 674.348978][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.360974][ T12] bridge_slave_0: left allmulticast mode [ 674.367249][ T12] bridge_slave_0: left promiscuous mode [ 674.373826][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.726455][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 674.737434][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 674.751256][ T12] bond0 (unregistering): Released all slaves [ 675.028782][ T5836] Bluetooth: hci3: command tx timeout [ 675.343422][ T12] hsr_slave_0: left promiscuous mode [ 675.354560][ T12] hsr_slave_1: left promiscuous mode [ 675.368749][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 675.387357][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 675.405205][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 675.428247][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 675.528171][ T12] veth1_macvtap: left promiscuous mode [ 675.535031][ T12] veth0_macvtap: left promiscuous mode [ 675.541153][ T12] veth1_vlan: left promiscuous mode [ 675.546662][ T12] veth0_vlan: left promiscuous mode [ 675.802686][T18298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4064'. [ 675.998212][ T12] team0 (unregistering): Port device team_slave_1 removed [ 676.025244][ T12] team0 (unregistering): Port device team_slave_0 removed [ 676.984453][T18010] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 677.028427][T18010] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 677.044591][T18010] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 677.085382][T18010] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 677.269054][T18010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 677.300719][T18010] 8021q: adding VLAN 0 to HW filter on device team0 [ 677.356835][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.365110][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.436934][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.444746][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.600671][T18079] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 677.659249][T18079] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 677.694960][T18079] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 677.805241][T18079] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 677.857149][T18369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4085'. [ 678.156824][T18079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.166540][T18393] netlink: 277 bytes leftover after parsing attributes in process `syz.1.4090'. [ 678.245138][T18079] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.278620][T18010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 678.315673][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.323304][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 678.389633][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.397300][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.926395][T18079] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 679.001474][T18079] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 679.657063][T18010] veth0_vlan: entered promiscuous mode [ 679.710348][T18010] veth1_vlan: entered promiscuous mode [ 679.783173][T18079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 679.879859][T18435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4100'. [ 679.903464][T18010] veth0_macvtap: entered promiscuous mode [ 679.974308][T18010] veth1_macvtap: entered promiscuous mode [ 680.036094][T18010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 680.084598][T18010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 680.242259][ T37] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.275050][ T37] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.304200][ T37] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.372311][ T37] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.589720][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.622890][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.884459][ T1016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.938093][ T1016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.340305][T18079] veth0_vlan: entered promiscuous mode [ 681.503113][T18079] veth1_vlan: entered promiscuous mode [ 681.603696][T18079] veth0_macvtap: entered promiscuous mode [ 681.634556][T18079] veth1_macvtap: entered promiscuous mode [ 681.709478][T18079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 681.762050][T18079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 681.831812][ T84] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.869336][ T84] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.952060][ T84] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.969723][ T84] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.280335][ T84] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.412411][ T84] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.460215][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.497752][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.570794][ T84] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.596178][T18516] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4121'. [ 682.822739][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 682.831358][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 682.842710][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 682.859160][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 682.859810][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.892962][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 682.914183][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 683.007593][T18521] wlan1 speed is unknown, defaulting to 1000 [ 683.220145][T18538] netlink: 'syz.2.4130': attribute type 25 has an invalid length. [ 683.308484][ T84] bridge0: port 3(dummy0) entered disabled state [ 683.325583][ T84] bridge_slave_1: left allmulticast mode [ 683.361585][ T84] bridge_slave_1: left promiscuous mode [ 683.373572][ T84] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.397842][ T84] bridge_slave_0: left allmulticast mode [ 683.417720][ T84] bridge_slave_0: left promiscuous mode [ 683.423770][ T84] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.698906][T18554] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4136'. [ 683.723222][ T84] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 683.745011][T18557] netlink: 'syz.1.4137': attribute type 1 has an invalid length. [ 683.761944][ T84] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 683.776133][ T84] bond0 (unregistering): Released all slaves [ 684.167276][T18568] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4140'. [ 684.715805][ T5908] wlan1 speed is unknown, defaulting to 1000 [ 684.725244][ T5908] óyz2: Port: 1 Link DOWN [ 684.947985][ T5837] Bluetooth: hci2: command tx timeout [ 685.374898][T18521] chnl_net:caif_netlink_parms(): no params data found [ 685.404344][T18605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4147'. [ 685.491681][T18597] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 685.500229][T18597] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 685.644885][T18615] netlink: 'syz.6.4150': attribute type 1 has an invalid length. [ 685.681058][ T84] hsr_slave_0: left promiscuous mode [ 685.702258][ T84] hsr_slave_1: left promiscuous mode [ 685.765653][ T84] veth1_macvtap: left promiscuous mode [ 685.778266][ T84] veth0_macvtap: left promiscuous mode [ 685.784042][ T84] veth1_vlan: left promiscuous mode [ 685.801592][ T84] veth0_vlan: left promiscuous mode [ 686.265115][ T84] team0 (unregistering): Port device team_slave_1 removed [ 686.293926][ T84] team0 (unregistering): Port device team_slave_0 removed [ 686.557430][T18521] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.587603][T18521] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.619817][T18521] bridge_slave_0: entered allmulticast mode [ 686.653902][T18521] bridge_slave_0: entered promiscuous mode [ 686.664512][T18521] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.698649][T18521] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.710584][T18521] bridge_slave_1: entered allmulticast mode [ 686.736020][T18653] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4159'. [ 686.738772][T18521] bridge_slave_1: entered promiscuous mode [ 686.887114][T18521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 686.940984][T18521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 687.029878][ T5837] Bluetooth: hci2: command tx timeout [ 687.107244][T18521] team0: Port device team_slave_0 added [ 687.173418][T18521] team0: Port device team_slave_1 added [ 687.298806][T18670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4165'. [ 687.324579][T18521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 687.332821][T18521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 687.398537][T18521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 687.440694][T18521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 687.460827][T18521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 687.489120][T18521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 687.681189][T18521] hsr_slave_0: entered promiscuous mode [ 687.700510][T18521] hsr_slave_1: entered promiscuous mode [ 687.708987][T18521] debugfs: 'hsr0' already exists in 'hsr' [ 687.714753][T18521] Cannot create hsr debugfs directory [ 689.167886][ T5837] Bluetooth: hci2: command tx timeout [ 689.485461][T18719] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4179'. [ 689.903596][T18733] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.912805][T18733] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.949948][T18733] bridge0: entered allmulticast mode [ 690.447119][T18521] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 690.806736][T18521] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 690.934319][T18521] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 691.012632][T18521] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 691.032473][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.040311][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.085914][T18774] openvswitch: netlink: IPv4 tun info is not correct [ 691.189347][ T5836] Bluetooth: hci2: command tx timeout [ 691.232259][T18788] dvmrp1: tun_chr_ioctl cmd 21731 [ 691.351516][T18521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 691.409614][T18521] 8021q: adding VLAN 0 to HW filter on device team0 [ 691.441368][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.448818][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.500881][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.508716][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 691.554429][T18801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4193'. [ 691.924322][T18521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 692.275091][T18521] veth0_vlan: entered promiscuous mode [ 692.290043][T18521] veth1_vlan: entered promiscuous mode [ 692.337183][T18521] veth0_macvtap: entered promiscuous mode [ 692.354535][T18521] veth1_macvtap: entered promiscuous mode [ 692.394679][T18521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 692.415378][T18521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 692.433422][ T33] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.452589][ T33] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.503467][ T33] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.535803][ T33] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.670348][T18823] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4201'. [ 692.693121][T18823] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4201'. [ 692.721147][T18825] netlink: 'syz.2.4200': attribute type 10 has an invalid length. [ 692.812093][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.841175][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.953020][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.966805][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.023105][T18867] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4212'. [ 695.858553][T18947] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.4240'. [ 695.898708][T18947] bridge_slave_1: default FDB implementation only supports local addresses [ 696.989002][T19001] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4255'. [ 697.446654][T19008] syzkaller0: entered promiscuous mode [ 697.457797][T19008] syzkaller0: entered allmulticast mode [ 700.352550][T19021] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4261'. [ 700.362761][T19021] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4261'. [ 700.584869][T19061] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4272'. [ 701.594076][T19112] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4288'. [ 702.055801][T19141] netlink: 'syz.1.4299': attribute type 10 has an invalid length. [ 703.322006][T19199] netlink: 'syz.4.4321': attribute type 39 has an invalid length. [ 703.685026][T19211] netlink: 'syz.4.4326': attribute type 7 has an invalid length. [ 704.518249][T19257] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4348'. [ 704.531386][T19257] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4348'. [ 705.522443][T19304] openvswitch: netlink: IPv4 tun info is not correct [ 706.022773][T19327] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4378'. [ 706.023474][T19332] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4381'. [ 706.041875][T19332] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4381'. [ 706.347017][T19349] openvswitch: netlink: IPv4 tun info is not correct [ 706.597054][T19360] netlink: 'syz.6.4394': attribute type 39 has an invalid length. [ 706.647498][T19366] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4396'. [ 706.649034][T19363] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4395'. [ 706.700535][T19363] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4395'. [ 707.741841][T19410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4414'. [ 708.322754][T19433] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4421'. [ 708.626465][T19453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4429'. [ 709.190433][T19472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4437'. [ 709.627555][T19498] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4447'. [ 710.458801][T19534] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4461'. [ 710.478428][T19534] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4461'. [ 710.759933][T19548] bridge_slave_1: default FDB implementation only supports local addresses [ 711.215065][T19567] delete_channel: no stack [ 711.534098][T19578] bridge_slave_1: default FDB implementation only supports local addresses [ 711.883361][T19600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 712.290200][T19629] __nla_validate_parse: 4 callbacks suppressed [ 712.290220][T19629] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4499'. [ 712.411507][T19634] netlink: 'syz.2.4502': attribute type 4 has an invalid length. [ 712.464350][T19634] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4502'. [ 712.566534][T19634] .`: renamed from bond0 (while UP) [ 713.182155][T19653] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4511'. [ 713.311258][T19657] netlink: 'syz.4.4510': attribute type 39 has an invalid length. [ 713.330202][T19660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4514'. [ 713.682783][T19669] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 714.834579][T19689] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.4524'. [ 714.891346][T19689] bridge_slave_1: default FDB implementation only supports local addresses [ 714.965598][T19692] netlink: 'syz.2.4526': attribute type 39 has an invalid length. [ 715.251379][T19699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 715.468649][T19709] IPv6: NLM_F_CREATE should be specified when creating new route [ 715.510967][T19709] IPv6: NLM_F_REPLACE set, but no existing node found! [ 716.009489][ T5836] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 716.322738][T19744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4544'. [ 716.391058][T19746] raw_sendmsg: syz.1.4548 forgot to set AF_INET. Fix it! [ 717.454770][T19802] netlink: 'syz.2.4567': attribute type 11 has an invalid length. [ 717.474411][T19802] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4567'. [ 717.653549][T19810] openvswitch: netlink: EtherType 0 is less than min 600 [ 718.040725][T19830] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4580'. [ 718.051935][T19832] openvswitch: netlink: IPv4 tun info is not correct [ 718.277436][T19845] netlink: 'syz.6.4585': attribute type 39 has an invalid length. [ 718.882040][T19879] netlink: 'syz.4.4602': attribute type 10 has an invalid length. [ 718.900681][T19877] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4600'. [ 718.917558][T19877] bridge_slave_1: default FDB implementation only supports local addresses [ 718.977042][T19882] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.4603'. [ 719.018131][T19882] netlink: ct family unspecified [ 719.142995][T19879] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 719.338498][T19897] netlink: 'syz.5.4607': attribute type 4 has an invalid length. [ 719.349881][T19897] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4607'. [ 719.414002][T19897] .`: renamed from bond0 (while UP) [ 719.729907][T19915] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4616'. [ 719.793372][T19922] netlink: 'syz.6.4618': attribute type 21 has an invalid length. [ 719.802725][T19922] IPv6: NLM_F_CREATE should be specified when creating new route [ 720.599037][T19944] netlink: 'syz.5.4629': attribute type 27 has an invalid length. [ 720.977480][T19956] delete_channel: no stack [ 721.411666][T19977] netlink: 'syz.4.4642': attribute type 10 has an invalid length. [ 722.024043][T19995] delete_channel: no stack [ 722.301085][T20005] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.309608][T20005] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.318688][T20005] bridge0: left promiscuous mode [ 722.324093][T20005] bridge0: entered allmulticast mode [ 723.101094][T20031] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4666'. [ 723.375267][T20055] netlink: 'syz.2.4674': attribute type 6 has an invalid length. [ 723.393328][T20055] netlink: 3936 bytes leftover after parsing attributes in process `syz.2.4674'. [ 723.444576][T20055] netlink: 'syz.2.4674': attribute type 1 has an invalid length. [ 723.591135][T20055] nbd0: detected capacity change from 0 to 339754496 [ 723.606592][ T5836] block nbd0: Receive control failed (result -104) [ 723.836735][T20074] openvswitch: netlink: IPv4 tun info is not correct [ 726.838369][T20113] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4696'. [ 726.860899][T20113] netem: incorrect gi model size [ 726.868644][T20113] netem: change failed [ 727.045600][T20125] netlink: 'syz.2.4699': attribute type 39 has an invalid length. [ 728.079347][T20163] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4715'. [ 728.373049][T20174] syzkaller0: entered promiscuous mode [ 728.400719][T20174] syzkaller0: entered allmulticast mode [ 731.440682][ T5836] Bluetooth: hci2: unexpected event 0x23 length: 15 > 13 [ 731.610029][T20203] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4731'. [ 731.700251][T20209] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 732.329111][T20230] netlink: 'syz.1.4744': attribute type 10 has an invalid length. [ 732.478421][T20230] mac80211_hwsim hwsim26 wlan1: entered promiscuous mode [ 732.490354][T20230] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 732.780375][T20243] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4750'. [ 733.451644][T20280] netlink: 'syz.2.4766': attribute type 1 has an invalid length. [ 733.730678][T20290] openvswitch: netlink: IPv4 tun info is not correct [ 734.438465][T20322] openvswitch: netlink: IPv4 tun info is not correct [ 734.439228][T20320] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4787'. [ 734.623388][T20335] netlink: 'syz.1.4790': attribute type 10 has an invalid length. [ 734.700838][T20334] syzkaller0: entered promiscuous mode [ 734.706356][T20334] syzkaller0: entered allmulticast mode [ 735.149548][T20366] openvswitch: netlink: IPv4 tun info is not correct [ 735.234130][T20362] delete_channel: no stack [ 736.003641][T20361] syzkaller0: entered promiscuous mode [ 736.009395][T20361] syzkaller0: entered allmulticast mode [ 736.017455][T20377] netlink: 'syz.4.4807': attribute type 10 has an invalid length. [ 736.184484][T20399] netlink: 'syz.2.4816': attribute type 4 has an invalid length. [ 736.207208][T20399] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4816'. [ 736.219226][T20395] netlink: 'syz.4.4815': attribute type 39 has an invalid length. [ 736.963391][T20406] openvswitch: netlink: IPv4 tun info is not correct [ 737.905641][T20407] delete_channel: no stack [ 738.375920][T20420] netlink: 'syz.5.4825': attribute type 10 has an invalid length. [ 738.403055][T20415] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 738.650546][T20436] openvswitch: netlink: Message has 4 unknown bytes. [ 738.975697][T20443] delete_channel: no stack [ 738.978692][T20442] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4833'. [ 739.750387][T20450] syzkaller0: entered promiscuous mode [ 739.808055][T20450] syzkaller0: entered allmulticast mode [ 740.101049][T20469] openvswitch: netlink: IPv4 tun info is not correct [ 740.145352][T20471] netlink: 'syz.2.4842': attribute type 2 has an invalid length. [ 740.157419][T20471] netlink: 'syz.2.4842': attribute type 2 has an invalid length. [ 740.750205][T20488] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4849'. [ 742.090316][T20466] netlink: 'syz.5.4838': attribute type 10 has an invalid length. [ 742.340999][T20505] openvswitch: netlink: IPv4 tun info is not correct [ 742.467756][T20510] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 742.529940][T20512] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4856'. [ 742.687390][T20517] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4861'. [ 743.208088][T20531] syzkaller0: entered promiscuous mode [ 743.213715][T20531] syzkaller0: entered allmulticast mode [ 743.356411][T20542] openvswitch: netlink: IPv4 tun info is not correct [ 743.750299][T20553] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4872'. [ 746.195440][T20600] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4889'. [ 746.570174][T20598] netlink: 'syz.4.4890': attribute type 27 has an invalid length. [ 746.756955][T20616] netlink: 'syz.5.4895': attribute type 39 has an invalid length. [ 747.324124][T20648] netlink: 'syz.6.4907': attribute type 10 has an invalid length. [ 747.354816][T20648] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 747.918510][T20675] delete_channel: no stack [ 748.024693][T20687] netlink: 'syz.5.4925': attribute type 10 has an invalid length. [ 748.106703][T20690] openvswitch: netlink: IPv4 tun info is not correct [ 748.407419][T20687] wlan1: mtu less than device minimum [ 748.437293][T20687] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 748.888263][T20711] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4935'. [ 748.921639][T20711] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4935'. [ 749.025149][T20713] delete_channel: no stack [ 749.175653][T20719] openvswitch: netlink: IPv4 tun info is not correct [ 750.142423][T20749] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4950'. [ 750.170944][T20749] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4950'. [ 750.414842][T20769] openvswitch: netlink: IPv4 tun info is not correct [ 750.586561][T20776] netlink: 'syz.4.4959': attribute type 33 has an invalid length. [ 750.609939][T20776] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4959'. [ 750.959460][T20793] netlink: 'syz.6.4967': attribute type 2 has an invalid length. [ 750.967795][T20793] netlink: 'syz.6.4967': attribute type 2 has an invalid length. [ 751.050716][T20794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4966'. [ 751.306964][T20815] netlink: 'syz.5.4976': attribute type 39 has an invalid length. [ 751.700529][T20831] netlink: 'syz.4.4982': attribute type 2 has an invalid length. [ 751.732831][T20831] netlink: 'syz.4.4982': attribute type 2 has an invalid length. [ 752.100039][T20850] netlink: 'syz.2.4991': attribute type 10 has an invalid length. [ 752.230981][T20850] wlan1: mtu less than device minimum [ 752.256899][T20850] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 752.439766][T20865] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4996'. [ 752.529507][T20863] IPv6: NLM_F_CREATE should be specified when creating new route [ 752.550323][T20863] IPv6: NLM_F_REPLACE set, but no existing node found! [ 752.566876][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.573824][T20867] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4996'. [ 752.574349][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.724814][T20876] netlink: 'syz.2.4998': attribute type 2 has an invalid length. [ 752.741501][T20876] netlink: 'syz.2.4998': attribute type 2 has an invalid length. [ 753.238893][T20902] openvswitch: netlink: Missing valid actions attribute. [ 753.246543][T20902] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 753.271088][T20904] IPv6: NLM_F_CREATE should be specified when creating new route [ 753.304993][T20904] IPv6: NLM_F_REPLACE set, but no existing node found! [ 753.636048][T20919] netlink: 'syz.4.5017': attribute type 10 has an invalid length. [ 753.644905][T20919] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5017'. [ 753.656431][T20919] ipvlan1: entered promiscuous mode [ 753.665016][T20919] ipvlan1: entered allmulticast mode [ 753.674556][T20919] veth0_vlan: entered allmulticast mode [ 753.707200][T20919] bridge0: port 3(ipvlan1) entered blocking state [ 753.715533][T20919] bridge0: port 3(ipvlan1) entered disabled state [ 753.737064][T20919] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 753.765690][ T25] block nbd0: Possible stuck request ffff888026a80000: control (read@0,4096B). Runtime 30 seconds [ 754.013006][T20930] nbd: must specify an index to disconnect [ 754.036239][T20934] netlink: 'syz.6.5023': attribute type 39 has an invalid length. [ 754.183507][T20944] IPv6: NLM_F_REPLACE set, but no existing node found! [ 754.529326][T20959] netlink: 'syz.6.5030': attribute type 2 has an invalid length. [ 754.584044][T20959] netlink: 'syz.6.5030': attribute type 2 has an invalid length. [ 754.933442][T20963] netlink: 'syz.2.5033': attribute type 10 has an invalid length. [ 754.959921][T20963] wlan1: mtu less than device minimum [ 754.965387][T20963] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 755.324128][T20980] IPv6: NLM_F_REPLACE set, but no existing node found! [ 756.017394][T21021] IPv6: NLM_F_CREATE should be specified when creating new route [ 756.038428][T21021] IPv6: NLM_F_REPLACE set, but no existing node found! [ 759.417092][T21061] validate_nla: 6 callbacks suppressed [ 759.417111][T21061] netlink: 'syz.2.5067': attribute type 39 has an invalid length. [ 759.620487][T21074] netlink: 'syz.5.5075': attribute type 2 has an invalid length. [ 759.629456][T21074] netlink: 'syz.5.5075': attribute type 2 has an invalid length. [ 759.657524][T21075] netlink: 'syz.1.5076': attribute type 10 has an invalid length. [ 759.993586][T21079] netlink: 'syz.4.5078': attribute type 27 has an invalid length. [ 760.299405][T21098] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5086'. [ 760.319497][T21100] netlink: 'syz.1.5087': attribute type 2 has an invalid length. [ 760.339524][T21100] netlink: 'syz.1.5087': attribute type 2 has an invalid length. [ 760.940354][T21129] netlink: 'syz.5.5097': attribute type 27 has an invalid length. [ 761.130893][T21143] IPv6: NLM_F_REPLACE set, but no existing node found! [ 761.931659][T21169] IPv6: NLM_F_REPLACE set, but no existing node found! [ 761.958485][T21171] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 763.005138][T21217] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5137'. [ 763.354620][T21233] netlink: 'syz.5.5144': attribute type 10 has an invalid length. [ 763.442642][T21233] wlan1: mtu less than device minimum [ 763.463546][T21233] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 764.499992][T21260] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5151'. [ 765.858838][T21240] mac80211_hwsim hwsim26 ..ãc¤±: renamed from wlan1 [ 766.304379][T21284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5159'. [ 766.403066][ T5836] Bluetooth: hci4: unexpected event 0x1d length: 151 > 5 [ 766.606323][T21296] netlink: 5204 bytes leftover after parsing attributes in process `syz.1.5164'. [ 766.637822][T21296] nbd: socks must be embedded in a SOCK_ITEM attr [ 767.877846][T21327] netlink: 5204 bytes leftover after parsing attributes in process `syz.6.5176'. [ 767.901685][T21326] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5177'. [ 767.976250][T21329] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5179'. [ 768.003456][T21333] bridge_slave_1: left allmulticast mode [ 768.009489][T21333] bridge_slave_1: left promiscuous mode [ 768.015903][T21333] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.057543][T21335] openvswitch: netlink: IPv4 tun info is not correct [ 768.060338][T21333] bridge_slave_0: left allmulticast mode [ 768.081845][T21333] bridge_slave_0: left promiscuous mode [ 768.089149][T21333] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.523495][T21347] netlink: 'syz.6.5185': attribute type 1 has an invalid length. [ 768.551564][T21347] netlink: 2704 bytes leftover after parsing attributes in process `syz.6.5185'. [ 768.979686][T21354] IPv6: NLM_F_REPLACE set, but no existing node found! [ 769.121107][T21361] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5192'. [ 769.364216][T21371] openvswitch: netlink: IPv4 tun info is not correct [ 769.838108][T21390] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5203'. [ 769.881529][T21392] netlink: 5204 bytes leftover after parsing attributes in process `syz.4.5205'. [ 770.113447][T21402] openvswitch: netlink: IPv4 tun info is not correct [ 770.418799][T21412] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5214'. [ 770.531861][T21420] IPv6: NLM_F_CREATE should be specified when creating new route [ 770.543097][T21420] IPv6: NLM_F_REPLACE set, but no existing node found! [ 770.774652][T21422] netlink: 'syz.6.5217': attribute type 27 has an invalid length. [ 771.214288][T21454] IPv6: NLM_F_REPLACE set, but no existing node found! [ 771.513084][T21467] __nla_validate_parse: 3 callbacks suppressed [ 771.513141][T21467] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5237'. [ 771.742915][T21478] openvswitch: netlink: IPv4 tun info is not correct [ 771.773975][T21479] netlink: 'syz.6.5244': attribute type 10 has an invalid length. [ 771.789579][T21479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 771.813207][T21479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 771.845475][T21479] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 772.036801][T21487] IPv6: NLM_F_REPLACE set, but no existing node found! [ 772.072390][T21486] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5247'. [ 772.214184][T21498] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5253'. [ 772.499406][T21511] netlink: 'syz.1.5258': attribute type 25 has an invalid length. [ 772.607187][T21515] openvswitch: netlink: IPv4 tun info is not correct [ 772.666550][T21522] IPv6: NLM_F_REPLACE set, but no existing node found! [ 772.825747][T21528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5265'. [ 772.894560][T21531] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5267'. [ 773.504049][T21555] IPv6: NLM_F_REPLACE set, but no existing node found! [ 773.512921][T21562] netlink: 'syz.2.5277': attribute type 2 has an invalid length. [ 773.549380][T21562] netlink: 'syz.2.5277': attribute type 2 has an invalid length. [ 773.610377][T21561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5279'. [ 773.857446][T21569] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5281'. [ 774.159924][T21581] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5286'. [ 774.304288][T21588] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5289'. [ 774.865863][T21596] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5292'. [ 775.775772][ T5836] Bluetooth: hci0: unexpected event 0x18 length: 82 > 23 [ 776.523004][T21618] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5300'. [ 776.671042][T21623] netlink: 'syz.2.5302': attribute type 2 has an invalid length. [ 776.688157][T21623] netlink: 'syz.2.5302': attribute type 2 has an invalid length. [ 780.462276][T21654] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5313'. [ 780.731589][T21657] IPv6: NLM_F_REPLACE set, but no existing node found! [ 782.621539][T21681] netlink: 'syz.4.5322': attribute type 2 has an invalid length. [ 782.637781][T21681] netlink: 'syz.4.5322': attribute type 2 has an invalid length. [ 783.204141][T21694] IPv6: NLM_F_REPLACE set, but no existing node found! [ 783.844149][ T25] block nbd0: Possible stuck request ffff888026a80000: control (read@0,4096B). Runtime 60 seconds [ 784.277485][T21704] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5328'. [ 785.221742][T21720] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5334'. [ 785.269280][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 785.847003][T21724] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5336'. [ 786.245161][T21734] IPv6: NLM_F_REPLACE set, but no existing node found! [ 786.604614][T21731] syzkaller0: entered promiscuous mode [ 786.628047][T21731] syzkaller0: entered allmulticast mode [ 787.043251][T21749] netlink: 'syz.5.5342': attribute type 27 has an invalid length. [ 788.622543][T21758] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5347'. [ 790.398000][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 790.523172][ T5836] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 791.139125][T21829] IPv6: NLM_F_REPLACE set, but no existing node found! [ 791.233000][T21833] netlink: 5252 bytes leftover after parsing attributes in process `syz.1.5367'. [ 791.258335][T21833] nbd: must specify at least one socket [ 793.013215][T21854] IPv6: NLM_F_REPLACE set, but no existing node found! [ 793.157401][T21865] netlink: 5252 bytes leftover after parsing attributes in process `syz.4.5379'. [ 793.175789][T21865] nbd: must specify at least one socket [ 793.479072][T21880] netlink: 'syz.2.5387': attribute type 10 has an invalid length. [ 793.491052][T21880] wlan1: mtu less than device minimum [ 793.503698][T21880] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 793.528874][T21882] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5388'. [ 793.641092][T21886] IPv6: NLM_F_REPLACE set, but no existing node found! [ 793.785137][T21889] syzkaller0: entered promiscuous mode [ 793.791675][T21889] syzkaller0: entered allmulticast mode [ 794.290056][T21910] netlink: 5252 bytes leftover after parsing attributes in process `syz.2.5399'. [ 794.304422][T21910] nbd: must specify at least one socket [ 794.480089][T21916] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5401'. [ 795.941089][T21949] IPv6: NLM_F_REPLACE set, but no existing node found! [ 796.258306][T21956] netlink: 'syz.5.5418': attribute type 10 has an invalid length. [ 796.770252][T21956] wlan1: mtu less than device minimum [ 796.775969][T21956] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 797.061803][T21972] netlink: 5096 bytes leftover after parsing attributes in process `syz.5.5423'. [ 797.225949][T21977] IPv6: NLM_F_REPLACE set, but no existing node found! [ 797.669628][T21997] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5431'. [ 797.758592][T22003] netlink: 'syz.4.5434': attribute type 10 has an invalid length. [ 798.049573][T22019] IPv6: NLM_F_REPLACE set, but no existing node found! [ 798.680436][T22050] netlink: 'syz.4.5450': attribute type 10 has an invalid length. [ 798.768777][T22053] netlink: 5252 bytes leftover after parsing attributes in process `syz.2.5452'. [ 798.828875][T22053] nbd: must specify at least one socket [ 799.076169][T22061] IPv6: NLM_F_REPLACE set, but no existing node found! [ 799.339301][T22076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5463'. [ 799.369061][T22080] netlink: 'syz.6.5464': attribute type 2 has an invalid length. [ 799.515118][T22088] netlink: 'syz.4.5466': attribute type 10 has an invalid length. [ 799.532644][T22089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5468'. [ 799.548942][T22089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5468'. [ 799.684163][T22094] IPv6: NLM_F_REPLACE set, but no existing node found! [ 800.003230][T22109] netlink: 'syz.1.5477': attribute type 2 has an invalid length. [ 800.222424][T22112] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5478'. [ 800.250726][T22116] netlink: 'syz.2.5480': attribute type 10 has an invalid length. [ 800.269864][T22116] wlan1: mtu less than device minimum [ 800.283832][T22116] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 800.432253][T22123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5484'. [ 800.451856][T22124] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5483'. [ 800.476509][T22128] netlink: 5240 bytes leftover after parsing attributes in process `syz.4.5485'. [ 801.054012][T22155] netlink: 'syz.2.5496': attribute type 10 has an invalid length. [ 801.087019][T22155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 801.120791][T22155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 801.185904][T22155] .`: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 801.421843][T22172] netlink: 'syz.1.5502': attribute type 6 has an invalid length. [ 801.874283][T22197] netlink: 'syz.1.5513': attribute type 10 has an invalid length. [ 801.998833][T22205] netlink: 'syz.5.5518': attribute type 6 has an invalid length. [ 802.138201][ T5836] Bluetooth: hci1: unexpected event 0x1c length: 151 > 5 [ 802.490184][T22223] __nla_validate_parse: 2 callbacks suppressed [ 802.490238][T22223] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5524'. [ 802.701360][T22240] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.711166][T22240] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.742995][T22240] bridge0: entered allmulticast mode [ 803.744721][T22278] netlink: 'syz.1.5546': attribute type 6 has an invalid length. [ 803.822763][T22280] netlink: 'syz.2.5547': attribute type 10 has an invalid length. [ 805.216262][T22310] netlink: 'syz.1.5560': attribute type 6 has an invalid length. [ 805.371677][T22322] netlink: 'syz.6.5565': attribute type 10 has an invalid length. [ 805.561634][T22332] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5569'. [ 805.747771][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 806.213419][T22351] netlink: 'syz.5.5579': attribute type 10 has an invalid length. [ 806.227999][T22351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 806.241323][T22351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 806.435515][T22351] .`: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 806.787627][T22368] IPv6: NLM_F_REPLACE set, but no existing node found! [ 806.821016][T22370] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5587'. [ 806.955259][T22379] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5593'. [ 806.987799][T22379] netlink: 560 bytes leftover after parsing attributes in process `syz.5.5593'. [ 807.067505][T22384] netlink: 'syz.6.5595': attribute type 10 has an invalid length. [ 807.952087][T22401] netlink: 'syz.5.5603': attribute type 16 has an invalid length. [ 807.969947][T22401] netlink: 'syz.5.5603': attribute type 17 has an invalid length. [ 808.144449][T22414] netlink: 'syz.4.5609': attribute type 10 has an invalid length. [ 808.167846][T22414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 808.193458][T22414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 808.232434][T22414] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 808.472414][T22427] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5615'. [ 808.871119][T22449] netlink: 'syz.6.5625': attribute type 10 has an invalid length. [ 809.305357][T22473] netlink: 'syz.1.5634': attribute type 1 has an invalid length. [ 809.314515][T22473] netlink: 2704 bytes leftover after parsing attributes in process `syz.1.5634'. [ 809.346639][T22472] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5633'. [ 809.808427][T22493] IPv6: NLM_F_REPLACE set, but no existing node found! [ 810.678709][T22534] netlink: 'syz.1.5659': attribute type 10 has an invalid length. [ 810.713292][T22533] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5660'. [ 810.802601][T22534] batadv_slave_0: entered promiscuous mode [ 810.810366][T22534] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 811.115724][T22550] netlink: 'syz.2.5668': attribute type 10 has an invalid length. [ 811.126477][T22550] wlan1: mtu less than device minimum [ 811.154417][T22550] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 811.593988][T22575] netlink: 'syz.5.5677': attribute type 10 has an invalid length. [ 812.081011][T22602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5689'. [ 812.726831][T22635] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5702'. [ 813.062357][T22647] openvswitch: netlink: Invalid VLAN frame [ 813.084845][T22649] netlink: 'syz.1.5709': attribute type 10 has an invalid length. [ 813.258181][T22659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5713'. [ 813.845941][T22683] netlink: 'syz.2.5724': attribute type 10 has an invalid length. [ 813.864042][T22679] netlink: 'syz.6.5721': attribute type 1 has an invalid length. [ 813.883338][T22679] netlink: 2704 bytes leftover after parsing attributes in process `syz.6.5721'. [ 813.919532][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.925998][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.968711][T22679] nbd: nbd0 already in use [ 814.149210][T22692] netlink: 'syz.1.5725': attribute type 10 has an invalid length. [ 814.322956][T22698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5728'. [ 814.524134][ T25] block nbd0: Possible stuck request ffff888026a80000: control (read@0,4096B). Runtime 90 seconds [ 815.053799][T22721] syzkaller0: entered promiscuous mode [ 815.083404][T22721] syzkaller0: entered allmulticast mode [ 815.088163][T22725] netlink: 'syz.5.5739': attribute type 10 has an invalid length. [ 815.115893][T22726] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 815.129094][ T5836] Bluetooth: hci4: unexpected event 0x1c length: 151 > 5 [ 815.222198][T22730] netlink: 'syz.6.5741': attribute type 10 has an invalid length. [ 815.720630][T22755] netlink: 5204 bytes leftover after parsing attributes in process `syz.2.5751'. [ 815.815511][T22759] netlink: 'syz.6.5754': attribute type 27 has an invalid length. [ 815.937979][T22765] netlink: 'syz.2.5757': attribute type 10 has an invalid length. [ 815.961245][T22765] wlan1: mtu less than device minimum [ 815.974309][T22765] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 816.059444][T22772] IPv6: NLM_F_REPLACE set, but no existing node found! [ 816.497391][T22797] IPv6: NLM_F_REPLACE set, but no existing node found! [ 816.633075][T22800] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5772'. [ 816.635272][T22806] netlink: 'syz.5.5775': attribute type 1 has an invalid length. [ 816.962686][T22825] IPv6: NLM_F_REPLACE set, but no existing node found! [ 817.351144][T22847] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5794'. [ 817.924083][T22877] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5808'. [ 818.119205][T22884] netlink: 'syz.1.5810': attribute type 61 has an invalid length. [ 819.843184][T22936] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5829'. [ 820.887481][T22981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5847'. [ 820.923367][T22984] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5848'. [ 821.545010][T23010] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5861'. [ 821.672237][T23020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5863'. [ 821.894302][T23032] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5869'. [ 822.231049][T23046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5875'. [ 822.446009][T23048] syzkaller0: entered promiscuous mode [ 822.451592][T23048] syzkaller0: entered allmulticast mode [ 822.878339][T23073] netlink: 'syz.1.5883': attribute type 10 has an invalid length. [ 824.805696][T23085] netlink: 'syz.1.5886': attribute type 27 has an invalid length. [ 824.993730][T23101] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5893'. [ 825.861872][T23145] syzkaller0: entered promiscuous mode [ 825.881671][T23145] syzkaller0: entered allmulticast mode [ 826.306283][T23168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5922'. [ 828.452236][T23203] netlink: 'syz.6.5936': attribute type 61 has an invalid length. [ 829.020544][T23232] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5950'. [ 829.166569][T23241] netlink: 'syz.2.5953': attribute type 61 has an invalid length. [ 829.473066][T23262] netlink: 'syz.4.5962': attribute type 1 has an invalid length. [ 829.481958][T23262] netlink: 2704 bytes leftover after parsing attributes in process `syz.4.5962'. [ 829.550473][T23259] syzkaller0: entered promiscuous mode [ 829.564576][T23259] syzkaller0: entered allmulticast mode [ 829.750245][T23270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5965'. [ 830.312807][T23286] netlink: 'syz.2.5968': attribute type 61 has an invalid length. [ 832.415074][T23307] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5977'. [ 832.557701][ T5195] udevd[5195]: worker [17290] /devices/virtual/block/nbd0 is taking a long time [ 832.800256][T23317] netlink: 'syz.5.5983': attribute type 10 has an invalid length. [ 832.984515][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 832.994032][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 833.004145][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 833.013891][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 833.022192][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 833.308423][T23325] chnl_net:caif_netlink_parms(): no params data found [ 833.469169][T23325] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.483266][T23344] netlink: 'syz.4.5989': attribute type 61 has an invalid length. [ 833.493534][T23325] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.509877][T23325] bridge_slave_0: entered allmulticast mode [ 833.518668][T23325] bridge_slave_0: entered promiscuous mode [ 833.528772][T23325] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.536118][T23325] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.543853][T23325] bridge_slave_1: entered allmulticast mode [ 833.556888][T23325] bridge_slave_1: entered promiscuous mode [ 833.623306][T23348] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5991'. [ 833.655527][T23325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 833.690954][T23325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 833.764847][T23353] netlink: 'syz.6.5994': attribute type 10 has an invalid length. [ 833.796193][T23325] team0: Port device team_slave_0 added [ 833.838655][T23325] team0: Port device team_slave_1 added [ 833.935230][T23325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 833.946080][T23325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.973120][T23325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 833.987123][T23325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 833.995118][T23325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 834.024335][T23325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 834.173567][T23325] hsr_slave_0: entered promiscuous mode [ 834.189001][T23325] hsr_slave_1: entered promiscuous mode [ 834.205089][T23325] debugfs: 'hsr0' already exists in 'hsr' [ 834.211691][T23325] Cannot create hsr debugfs directory [ 834.279066][T23376] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6003'. [ 834.601994][T23325] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.822198][T23325] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.987748][T23325] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.049982][T23407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6015'. [ 835.107757][ T5837] Bluetooth: hci1: command tx timeout [ 835.134343][T23325] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.505004][T23432] netlink: 'syz.1.6025': attribute type 1 has an invalid length. [ 835.516588][T23432] netlink: 2704 bytes leftover after parsing attributes in process `syz.1.6025'. [ 836.437983][T23446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6029'. [ 836.570963][T23449] netlink: 'syz.1.6030': attribute type 2 has an invalid length. [ 836.589684][T23449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6030'. [ 837.187819][ T5837] Bluetooth: hci1: command tx timeout [ 837.671703][T23325] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 837.690680][T23325] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 837.710801][T23460] netlink: 'syz.5.6035': attribute type 1 has an invalid length. [ 837.731628][T23325] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 837.738769][T23460] netlink: 2704 bytes leftover after parsing attributes in process `syz.5.6035'. [ 837.763569][T23325] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 837.913172][T23325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 838.003183][T23476] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6039'. [ 838.049122][T23325] 8021q: adding VLAN 0 to HW filter on device team0 [ 838.062945][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.070222][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 838.134820][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.142213][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 838.559162][T23503] netlink: 'syz.6.6048': attribute type 1 has an invalid length. [ 838.566950][T23503] netlink: 2704 bytes leftover after parsing attributes in process `syz.6.6048'. [ 838.636486][T23507] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6050'. [ 839.277236][ T5837] Bluetooth: hci1: command tx timeout [ 841.323206][T23325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 841.347945][ T5837] Bluetooth: hci1: command tx timeout [ 841.469877][T23325] veth0_vlan: entered promiscuous mode [ 841.482319][T23534] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6061'. [ 841.511868][T23325] veth1_vlan: entered promiscuous mode [ 841.587498][T23325] veth0_macvtap: entered promiscuous mode [ 841.607476][T23325] veth1_macvtap: entered promiscuous mode [ 841.751522][T23325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 841.764903][T23325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 842.433919][T15547] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.586201][T15547] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.606071][T15547] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.704930][T15547] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.722054][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.746317][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.793291][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.817951][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.945938][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 843.967877][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 843.979067][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 843.987445][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 844.003797][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 844.065059][T23599] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6081'. [ 844.473040][T15547] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.510139][T23594] chnl_net:caif_netlink_parms(): no params data found [ 844.657474][ T25] block nbd0: Possible stuck request ffff888026a80000: control (read@0,4096B). Runtime 120 seconds [ 844.792374][T15547] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.701780][T15547] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.797045][T15547] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.854624][T23594] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.864319][T23594] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.881500][T23594] bridge_slave_0: entered allmulticast mode [ 845.909868][T23594] bridge_slave_0: entered promiscuous mode [ 845.931149][T23647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6097'. [ 845.939401][T23594] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.973156][T23594] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.999663][T23594] bridge_slave_1: entered allmulticast mode [ 846.023194][T23594] bridge_slave_1: entered promiscuous mode [ 846.077753][ T5836] Bluetooth: hci5: command tx timeout [ 846.196975][T23594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 846.210636][T23594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 846.417400][T23594] team0: Port device team_slave_0 added [ 846.453284][T23594] team0: Port device team_slave_1 added [ 846.554644][T23594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 846.594574][T23594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 846.634590][T23594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 846.679475][T23594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 846.707906][T23594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 846.739808][T23594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 846.770430][T15547] bridge_slave_1: left allmulticast mode [ 846.776869][T15547] bridge_slave_1: left promiscuous mode [ 846.783339][T15547] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.793318][T15547] bridge_slave_0: left allmulticast mode [ 846.802490][T15547] bridge_slave_0: left promiscuous mode [ 846.808569][T15547] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.976105][T23678] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6108'. [ 847.222514][T15547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 847.232340][T15547] bond_slave_0: left promiscuous mode [ 847.241840][T15547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 847.251566][T15547] bond_slave_1: left promiscuous mode [ 847.269146][T15547] bond0 (unregistering): (slave ..ãc¤±): Releasing backup interface [ 847.285559][T15547] mac80211_hwsim hwsim26 ..ãc¤±: left promiscuous mode [ 847.295151][T15547] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 847.305716][T15547] batadv_slave_0: left promiscuous mode [ 847.313895][T15547] bond0 (unregistering): Released all slaves [ 847.443759][T23594] hsr_slave_0: entered promiscuous mode [ 847.451205][T23594] hsr_slave_1: entered promiscuous mode [ 847.483439][T23594] debugfs: 'hsr0' already exists in 'hsr' [ 847.503014][T23594] Cannot create hsr debugfs directory [ 847.956098][T23716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6120'. [ 848.139441][T15547] hsr_slave_0: left promiscuous mode [ 848.152199][ T5836] Bluetooth: hci5: command tx timeout [ 848.160929][T15547] hsr_slave_1: left promiscuous mode [ 848.289599][T15547] veth1_macvtap: left promiscuous mode [ 848.503014][T15547] veth0_macvtap: left promiscuous mode [ 848.544106][T15547] veth1_vlan: left promiscuous mode [ 848.568019][T15547] veth0_vlan: left promiscuous mode [ 849.157175][T15547] team_slave_1 (unregistering): left promiscuous mode [ 849.167531][T15547] team0 (unregistering): Port device team_slave_1 removed [ 849.181954][T15547] team_slave_0 (unregistering): left promiscuous mode [ 849.194284][T15547] team0 (unregistering): Port device team_slave_0 removed [ 849.967014][T23775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6134'. [ 850.232450][ T5836] Bluetooth: hci5: command tx timeout [ 850.290565][T23594] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 850.346339][T23594] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 850.415057][T23594] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 850.443812][T23594] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 850.712599][T23594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 850.753293][T23594] 8021q: adding VLAN 0 to HW filter on device team0 [ 850.784808][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.792046][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 850.833711][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.840947][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 850.861723][T23822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6147'. [ 850.918333][T23824] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6149'. [ 852.824896][ T5836] Bluetooth: hci5: command tx timeout [ 854.722452][T23594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 855.248802][T23594] veth0_vlan: entered promiscuous mode [ 855.563483][T23594] veth1_vlan: entered promiscuous mode [ 855.649688][T23594] veth0_macvtap: entered promiscuous mode [ 855.732139][T23594] veth1_macvtap: entered promiscuous mode [ 857.911577][T23594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 857.953608][T23594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 858.060735][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.101361][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.167711][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.176535][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.326694][T15547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 858.359826][T15547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 858.419800][ T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 858.442247][ T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 859.336177][T24006] sit0: entered allmulticast mode [ 860.298333][T24015] sit0: entered promiscuous mode [ 860.551467][T24032] netlink: 'syz.1.6215': attribute type 1 has an invalid length. [ 860.559527][T24032] netlink: 2704 bytes leftover after parsing attributes in process `syz.1.6215'. [ 860.816675][T24021] syzkaller0: entered promiscuous mode [ 860.824928][T24021] syzkaller0: entered allmulticast mode [ 861.267800][T24052] netlink: 'syz.6.6224': attribute type 10 has an invalid length. [ 862.661554][T24067] netlink: 'syz.4.6229': attribute type 1 has an invalid length. [ 862.669772][T24067] netlink: 2704 bytes leftover after parsing attributes in process `syz.4.6229'. [ 865.364904][T24073] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.373279][T24073] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.391008][T24073] bridge0: entered allmulticast mode [ 865.409475][T24074] bridge_slave_1: left allmulticast mode [ 865.424843][T24074] bridge_slave_1: left promiscuous mode [ 865.438952][T24074] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.456886][T24074] bridge_slave_0: left allmulticast mode [ 865.463622][T24074] bridge_slave_0: left promiscuous mode [ 865.471324][T24074] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.482131][T24095] netlink: 'syz.6.6241': attribute type 1 has an invalid length. [ 865.508184][T24095] netlink: 2704 bytes leftover after parsing attributes in process `syz.6.6241'. [ 866.126119][T24112] veth1_vlan: entered allmulticast mode [ 866.152575][T24112] veth0_vlan: entered allmulticast mode [ 866.540280][T24125] netlink: 'syz.2.6251': attribute type 10 has an invalid length. [ 866.947886][T24127] netlink: 'syz.4.6253': attribute type 1 has an invalid length. [ 866.957091][T24127] netlink: 2704 bytes leftover after parsing attributes in process `syz.4.6253'. [ 866.996880][T24125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 867.013725][T24125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 867.066306][T24125] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 868.062404][T24159] netlink: 'syz.4.6266': attribute type 1 has an invalid length. [ 868.071416][T24159] netlink: 2704 bytes leftover after parsing attributes in process `syz.4.6266'. [ 868.962713][T24178] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6273'. [ 869.996021][T24200] netlink: 'syz.6.6280': attribute type 1 has an invalid length. [ 870.019622][T24200] netlink: 2704 bytes leftover after parsing attributes in process `syz.6.6280'. [ 870.682542][ T5837] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 871.266659][T24238] netlink: 'syz.2.6295': attribute type 1 has an invalid length. [ 871.298756][T24238] netlink: 2704 bytes leftover after parsing attributes in process `syz.2.6295'. [ 871.524658][ T5837] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 871.846733][T24271] netlink: 'syz.4.6311': attribute type 1 has an invalid length. [ 871.892971][T24271] netlink: 2704 bytes leftover after parsing attributes in process `syz.4.6311'. [ 872.866149][ T5837] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 873.308741][T24309] netlink: 5240 bytes leftover after parsing attributes in process `syz.6.6326'. [ 874.711386][ T25] block nbd0: Possible stuck request ffff888026a80000: control (read@0,4096B). Runtime 150 seconds [ 874.813101][T24348] netlink: 5240 bytes leftover after parsing attributes in process `syz.4.6341'. [ 875.352713][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.359422][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.761860][T24388] netlink: 5240 bytes leftover after parsing attributes in process `syz.6.6359'. [ 876.333996][T24397] syzkaller0: entered promiscuous mode [ 876.415991][T24397] syzkaller0: entered allmulticast mode [ 876.808198][ T5837] Bluetooth: hci0: ACL packet for unknown connection handle 24 [ 877.869961][T24425] netlink: 5240 bytes leftover after parsing attributes in process `syz.4.6375'. [ 878.829320][ T5837] Bluetooth: hci3: ACL packet for unknown connection handle 24 [ 880.249489][T24456] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 880.279526][T24453] ------------[ cut here ]------------ [ 880.285866][T24453] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000) [ 880.311953][T24453] WARNING: kernel/bpf/verifier.c:2830 at reg_bounds_sanity_check+0x201/0xc30, CPU#1: syz.5.6388/24453 [ 880.323264][T24453] Modules linked in: [ 880.327465][T24453] CPU: 1 UID: 0 PID: 24453 Comm: syz.5.6388 Not tainted syzkaller #0 PREEMPT(full) [ 880.337311][T24453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 880.351555][T24453] RIP: 0010:reg_bounds_sanity_check+0x3e6/0xc30 [ 880.359199][T24453] Code: 98 00 00 00 4c 8b 8c 24 88 00 00 00 41 ff 34 24 41 57 55 41 55 ff b4 24 f0 00 00 00 ff b4 24 a8 00 00 00 ff b4 24 c0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84 [ 880.381950][T24453] RSP: 0018:ffffc9000489eeb0 EFLAGS: 00010246 [ 880.390358][T24453] RAX: dffffc0000000000 RBX: 1ffff110057e9c4a RCX: 00000000ffffdfcd [ 880.399469][T24453] RDX: ffffffff8bd474e0 RSI: ffffffff8bd4fe20 RDI: ffffffff9015e730 [ 880.408682][T24453] RBP: 00000000ffffdfcc R08: ffffffffffffdfcc R09: 80000000ffffdfcd [ 880.417509][T24453] R10: ffff88802bf4e358 R11: 1ffff110057e9c50 R12: ffff88802bf4e250 [ 880.427646][T24453] R13: 00000000ffffdfcd R14: 1ffff110057e9c49 R15: 00000000ffffdfcc [ 880.436209][T24453] FS: 00007f51058e66c0(0000) GS:ffff888125551000(0000) knlGS:0000000000000000 [ 880.445545][T24453] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 880.452432][T24453] CR2: 0000001b32014ffc CR3: 000000007b9c4000 CR4: 00000000003526f0 [ 880.460742][T24453] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 880.471838][T24453] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 880.481369][T24453] Call Trace: [ 880.484998][T24453] [ 880.488218][T24453] reg_set_min_max+0x264/0x340 [ 880.493234][T24453] check_cond_jmp_op+0x1dbb/0x31a0 [ 880.498833][T24453] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 880.504430][T24453] ? compute_scc_callchain+0x2f9/0x350 [ 880.510117][T24453] ? bpf_reset_stack_write_marks+0x1eb/0x260 [ 880.516247][T24453] do_check+0x7970/0x10610 [ 880.521570][T24453] ? __pfx_do_check+0x10/0x10 [ 880.526531][T24453] ? init_func_state+0x1ab2/0x28d0 [ 880.531928][T24453] do_check_common+0x19c8/0x25b0 [ 880.537015][T24453] bpf_check+0x5f3e/0x1ce00 [ 880.542083][T24453] ? __lock_acquire+0x6b5/0x2cf0 [ 880.547241][T24453] ? __lock_acquire+0x6b5/0x2cf0 [ 880.552370][T24453] ? __mutex_trylock_common+0x158/0x260 [ 880.558880][T24453] ? __pfx___mutex_trylock_common+0x10/0x10 [ 880.565387][T24453] ? __lock_acquire+0x6b5/0x2cf0 [ 880.572559][T24453] ? css_rstat_updated+0x23a/0x530 [ 880.579731][T24453] ? __pfx_css_rstat_updated+0x10/0x10 [ 880.585600][T24453] ? pcpu_alloc_noprof+0xe8f/0x19c0 [ 880.591701][T24453] ? __lock_acquire+0x6b5/0x2cf0 [ 880.596964][T24453] ? __pfx_bpf_check+0x10/0x10 [ 880.602370][T24453] ? perf_trace_preemptirq_template+0xb2/0x350 [ 880.608884][T24453] ? seqcount_lockdep_reader_access+0x70/0x100 [ 880.615576][T24453] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 880.623476][T24453] ? ktime_get_with_offset+0x93/0x2a0 [ 880.629267][T24453] ? ktime_get_with_offset+0x93/0x2a0 [ 880.635128][T24453] ? __asan_memset+0x22/0x50 [ 880.639911][T24453] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 880.645398][T24453] ? security_bpf_prog_load+0x125/0x3c0 [ 880.651281][T24453] bpf_prog_load+0x1484/0x1ae0 [ 880.656262][T24453] ? __pfx_bpf_prog_load+0x10/0x10 [ 880.661698][T24453] ? futex_wait+0x29a/0x380 [ 880.666637][T24453] ? bpf_lsm_bpf+0x9/0x20 [ 880.673931][T24453] ? security_bpf+0x7e/0x2d0 [ 880.679939][T24453] __sys_bpf+0x618/0x950 [ 880.684510][T24453] ? __pfx___sys_bpf+0x10/0x10 [ 880.689670][T24453] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 880.696637][T24453] ? rcu_is_watching+0x15/0xb0 [ 880.701863][T24453] __x64_sys_bpf+0x7c/0x90 [ 880.706757][T24453] do_syscall_64+0x14d/0xf80 [ 880.711883][T24453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.718709][T24453] ? clear_bhb_loop+0x40/0x90 [ 880.723801][T24453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.729871][T24453] RIP: 0033:0x7f510499c819 [ 880.734486][T24453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 880.754897][T24453] RSP: 002b:00007f51058e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 880.763545][T24453] RAX: ffffffffffffffda RBX: 00007f5104c15fa0 RCX: 00007f510499c819 [ 880.774055][T24453] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 880.783699][T24453] RBP: 00007f5104a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 880.792009][T24453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 880.800224][T24453] R13: 00007f5104c16038 R14: 00007f5104c15fa0 R15: 00007ffc2defd978 [ 880.808550][T24453] [ 880.811757][T24453] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 880.819266][T24453] CPU: 1 UID: 0 PID: 24453 Comm: syz.5.6388 Not tainted syzkaller #0 PREEMPT(full) [ 880.828643][T24453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 880.839239][T24453] Call Trace: [ 880.842534][T24453] [ 880.845578][T24453] vpanic+0x56c/0xa60 [ 880.849653][T24453] ? __pfx__printk+0x10/0x10 [ 880.854356][T24453] ? __pfx_vpanic+0x10/0x10 [ 880.859085][T24453] ? is_bpf_text_address+0x292/0x2b0 [ 880.864455][T24453] ? is_bpf_text_address+0x26/0x2b0 [ 880.869826][T24453] panic+0xc5/0xd0 [ 880.873863][T24453] ? __pfx_panic+0x10/0x10 [ 880.878451][T24453] __warn+0x315/0x4f0 [ 880.882523][T24453] ? reg_bounds_sanity_check+0x201/0xc30 [ 880.888329][T24453] ? reg_bounds_sanity_check+0x201/0xc30 [ 880.894093][T24453] __report_bug+0x29a/0x540 [ 880.898723][T24453] ? __pfx_stack_trace_save+0x10/0x10 [ 880.904099][T24453] ? reg_bounds_sanity_check+0x201/0xc30 [ 880.909729][T24453] ? __pfx___report_bug+0x10/0x10 [ 880.915018][T24453] ? check_cond_jmp_op+0x1c5b/0x31a0 [ 880.920301][T24453] ? do_check+0x7970/0x10610 [ 880.924985][T24453] ? do_check_common+0x19c8/0x25b0 [ 880.930222][T24453] ? bpf_check+0x5f3e/0x1ce00 [ 880.935264][T24453] ? bpf_prog_load+0x1484/0x1ae0 [ 880.940203][T24453] ? __sys_bpf+0x618/0x950 [ 880.944876][T24453] ? __x64_sys_bpf+0x7c/0x90 [ 880.949663][T24453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.955731][T24453] report_bug_entry+0x19a/0x290 [ 880.960680][T24453] ? reg_bounds_sanity_check+0x3e6/0xc30 [ 880.966492][T24453] ? reg_bounds_sanity_check+0x3eb/0xc30 [ 880.972118][T24453] handle_bug+0xce/0x200 [ 880.976372][T24453] exc_invalid_op+0x1a/0x50 [ 880.980912][T24453] asm_exc_invalid_op+0x1a/0x20 [ 880.985960][T24453] RIP: 0010:reg_bounds_sanity_check+0x3e6/0xc30 [ 880.992326][T24453] Code: 98 00 00 00 4c 8b 8c 24 88 00 00 00 41 ff 34 24 41 57 55 41 55 ff b4 24 f0 00 00 00 ff b4 24 a8 00 00 00 ff b4 24 c0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84 [ 881.012732][T24453] RSP: 0018:ffffc9000489eeb0 EFLAGS: 00010246 [ 881.019240][T24453] RAX: dffffc0000000000 RBX: 1ffff110057e9c4a RCX: 00000000ffffdfcd [ 881.027509][T24453] RDX: ffffffff8bd474e0 RSI: ffffffff8bd4fe20 RDI: ffffffff9015e730 [ 881.035583][T24453] RBP: 00000000ffffdfcc R08: ffffffffffffdfcc R09: 80000000ffffdfcd [ 881.043978][T24453] R10: ffff88802bf4e358 R11: 1ffff110057e9c50 R12: ffff88802bf4e250 [ 881.052046][T24453] R13: 00000000ffffdfcd R14: 1ffff110057e9c49 R15: 00000000ffffdfcc [ 881.060370][T24453] reg_set_min_max+0x264/0x340 [ 881.065257][T24453] check_cond_jmp_op+0x1dbb/0x31a0 [ 881.070386][T24453] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 881.075846][T24453] ? compute_scc_callchain+0x2f9/0x350 [ 881.081568][T24453] ? bpf_reset_stack_write_marks+0x1eb/0x260 [ 881.087646][T24453] do_check+0x7970/0x10610 [ 881.092114][T24453] ? __pfx_do_check+0x10/0x10 [ 881.096900][T24453] ? init_func_state+0x1ab2/0x28d0 [ 881.102216][T24453] do_check_common+0x19c8/0x25b0 [ 881.107272][T24453] bpf_check+0x5f3e/0x1ce00 [ 881.111996][T24453] ? __lock_acquire+0x6b5/0x2cf0 [ 881.117684][T24453] ? __lock_acquire+0x6b5/0x2cf0 [ 881.122654][T24453] ? __mutex_trylock_common+0x158/0x260 [ 881.128401][T24453] ? __pfx___mutex_trylock_common+0x10/0x10 [ 881.134321][T24453] ? __lock_acquire+0x6b5/0x2cf0 [ 881.139305][T24453] ? css_rstat_updated+0x23a/0x530 [ 881.144421][T24453] ? __pfx_css_rstat_updated+0x10/0x10 [ 881.150095][T24453] ? pcpu_alloc_noprof+0xe8f/0x19c0 [ 881.156123][T24453] ? __lock_acquire+0x6b5/0x2cf0 [ 881.161452][T24453] ? __pfx_bpf_check+0x10/0x10 [ 881.166340][T24453] ? perf_trace_preemptirq_template+0xb2/0x350 [ 881.172677][T24453] ? seqcount_lockdep_reader_access+0x70/0x100 [ 881.179039][T24453] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 881.185856][T24453] ? ktime_get_with_offset+0x93/0x2a0 [ 881.191506][T24453] ? ktime_get_with_offset+0x93/0x2a0 [ 881.197678][T24453] ? __asan_memset+0x22/0x50 [ 881.202717][T24453] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 881.208001][T24453] ? security_bpf_prog_load+0x125/0x3c0 [ 881.213736][T24453] bpf_prog_load+0x1484/0x1ae0 [ 881.218527][T24453] ? __pfx_bpf_prog_load+0x10/0x10 [ 881.223908][T24453] ? futex_wait+0x29a/0x380 [ 881.228516][T24453] ? bpf_lsm_bpf+0x9/0x20 [ 881.232944][T24453] ? security_bpf+0x7e/0x2d0 [ 881.237585][T24453] __sys_bpf+0x618/0x950 [ 881.241949][T24453] ? __pfx___sys_bpf+0x10/0x10 [ 881.246913][T24453] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 881.253530][T24453] ? rcu_is_watching+0x15/0xb0 [ 881.258426][T24453] __x64_sys_bpf+0x7c/0x90 [ 881.262871][T24453] do_syscall_64+0x14d/0xf80 [ 881.268076][T24453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.274431][T24453] ? clear_bhb_loop+0x40/0x90 [ 881.279837][T24453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.285915][T24453] RIP: 0033:0x7f510499c819 [ 881.290417][T24453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 881.310807][T24453] RSP: 002b:00007f51058e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 881.319221][T24453] RAX: ffffffffffffffda RBX: 00007f5104c15fa0 RCX: 00007f510499c819 [ 881.327270][T24453] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 881.335334][T24453] RBP: 00007f5104a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 881.343757][T24453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 881.352002][T24453] R13: 00007f5104c16038 R14: 00007f5104c15fa0 R15: 00007ffc2defd978 [ 881.360081][T24453] [ 881.363935][T24453] Kernel Offset: disabled [ 881.368544][T24453] Rebooting in 86400 seconds..