last executing test programs: 8m7.253087506s ago: executing program 32 (id=10629): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000073"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 4m31.333482379s ago: executing program 33 (id=12483): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e381, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x1, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500100001000010000000000000000007f0000010000edffffff0000000000007f00000100000000000000000000000000000000000000000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f00000100000000000000000000000000be3412320000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002000000000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060"], 0x150}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="940000002900010000000000000000007f00000100000000000000000000000000be3412020032007f0000020000000000000000000000007f00000100000000000000000000000000000000000000007f0000010000000000000000000000007f000001000000000000000000000000000000000000000002002020000000000000000000000000010000000000000002"], 0x94}, 0x1, 0x0, 0x0, 0x801}, 0x0) 4m26.973291989s ago: executing program 5 (id=12656): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x7, 0x80, 0xff, 0x0, 0x0, 0xfc, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x5000, 0xfffffffffffffffd, 0x10, 0x0, 0x3, 0x100000a, 0x0, 0x0, 0xfffffffa, 0x0, 0xd}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r0, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) 4m26.878698893s ago: executing program 5 (id=12657): mkdir(&(0x7f0000000140)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 4m26.637633852s ago: executing program 5 (id=12660): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) 4m11.543386541s ago: executing program 34 (id=12660): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) 3m27.667980316s ago: executing program 35 (id=13134): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) 3m12.971064995s ago: executing program 8 (id=13232): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x0, 0x6, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x400200000000003e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x18, &(0x7f0000000780)=ANY=[@ANYBLOB="18050000080000000000000007040000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70400000800000085000000950000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000700000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000000900)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m12.675203741s ago: executing program 8 (id=13237): r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e381, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x1, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400200000000003b}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x80002, r1}, 0x38) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x5, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) close(0xffffffffffffffff) 3m11.540533619s ago: executing program 8 (id=13244): perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c291, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x8}, 0x8008, 0x0, 0x0, 0x5, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x400200000000003b}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x570, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000040) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000"], 0xa4}}, 0x0) 3m11.311458642s ago: executing program 8 (id=13248): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4044, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/ipc\x00') perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x15, 0x3, &(0x7f00000005c0)=@framed={{0x72, 0xa, 0x0, 0xfe00, 0x0, 0x71, 0x10, 0x1f}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x80) 3m11.106721974s ago: executing program 8 (id=13250): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x5}, 0x114945, 0x4, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2100060, 0x0) 3m10.687168358s ago: executing program 8 (id=13253): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00}, 0x94) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x100002, 0x20000}, 0x112065, 0x0, 0x4, 0x3, 0x7, 0x1, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xf2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 3m1.542254722s ago: executing program 6 (id=13311): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0xf08, 0x0, 0x0, 0x8, 0x80000000003fe}, 0x0, 0x0, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e381, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x3, 0x0, 0x5, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x400200000000003b}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000018c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001900)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18000000240007012ebd7000fbdb040001"], 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 3m1.187248509s ago: executing program 6 (id=13314): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@updpolicy={0xb8, 0x19, 0xdbe47753d50165c1, 0x0, 0xfffffffc, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x100000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80, 0xfffffffffffffffb}, {0x0, 0x3ffffffffffffd, 0x200000000000000}, 0x22}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2, 0x0, 0x0, 0x0, 0x4}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 3m0.980779337s ago: executing program 6 (id=13315): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xe4, 0x5, 0xd, 0xc, 0x0, 0xfffffffffffffffe, 0xc4000, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x0, @perf_config_ext={0x1, 0x10}, 0x2, 0x8, 0x3, 0x0, 0x81, 0x5, 0x9, 0x0, 0x0, 0x0, 0xcd}, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 3m0.674029151s ago: executing program 6 (id=13318): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x5}, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x6}, {0xf}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x7}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000c00) 2m58.754186612s ago: executing program 6 (id=13329): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x5}, 0x114945, 0x4, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2100060, 0x0) 2m58.480407829s ago: executing program 6 (id=13333): r0 = syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x20208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003, 0x2, @perf_bp={0x0, 0x2}, 0x11efa, 0x4, 0x98, 0x6, 0x2, 0xfffff271, 0xffdc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000c00)="d8000000180081064e81f782db4cb904021d0800067c7c09e8fe0ba1bc0008000600000003600e120800110002000401a8000600200e02400400027c03a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee404e622d3ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94100"/216, 0xd8}], 0x1}, 0x0) 2m55.577087008s ago: executing program 36 (id=13253): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00}, 0x94) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x100002, 0x20000}, 0x112065, 0x0, 0x4, 0x3, 0x7, 0x1, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xf2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 2m44.242454106s ago: executing program 7 (id=13401): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x15000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x1, 0x0, 0x8, 0x0, 0xfffbfffc, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000440)='THAWED\x00', 0x7) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000015c0), 0x4) sendmsg$kcm(r0, &(0x7f0000001600)={&(0x7f0000001640)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001700)="62042720920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000001800)="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", 0x114}, {&(0x7f0000001940)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000001a00)="6f4720baeb54", 0x6}], 0x4}, 0x0) 2m43.734746636s ago: executing program 7 (id=13392): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x44, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x4, @perf_config_ext={0x0, 0xc}, 0x58, 0x5, 0x0, 0x4, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000880)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x8, 0x830b}, 0x40, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xf}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x81}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4c}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000640)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2m43.170277792s ago: executing program 37 (id=13333): r0 = syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x20208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003, 0x2, @perf_bp={0x0, 0x2}, 0x11efa, 0x4, 0x98, 0x6, 0x2, 0xfffff271, 0xffdc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000c00)="d8000000180081064e81f782db4cb904021d0800067c7c09e8fe0ba1bc0008000600000003600e120800110002000401a8000600200e02400400027c03a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee404e622d3ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94100"/216, 0xd8}], 0x1}, 0x0) 2m43.093313078s ago: executing program 7 (id=13400): perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x5, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x20, 0x28, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 2m42.775735383s ago: executing program 7 (id=13404): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r3, &(0x7f0000000340), 0x0}, 0x20) 2m42.567195254s ago: executing program 7 (id=13405): mkdir(&(0x7f0000000ac0)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x104000, 0x0) 2m42.47645966s ago: executing program 7 (id=13406): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e381, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x5, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x400200000000003b}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000180)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x891d, &(0x7f00000011c0)={'veth1_to_bridge\x00', @random="0200c100d8f1"}) 2m26.993168753s ago: executing program 38 (id=13406): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e381, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x5, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x400200000000003b}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000180)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x891d, &(0x7f00000011c0)={'veth1_to_bridge\x00', @random="0200c100d8f1"}) 1m57.527438706s ago: executing program 1 (id=13623): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x80108, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x1, @perf_bp={0x0, 0xe}, 0x0, 0x2, 0xfffffffe, 0x8, 0x2, 0x3, 0x873f, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000880)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014004000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000a40)=@generic={0x0, r3}, 0x18) 1m57.191552622s ago: executing program 1 (id=13628): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x100002, 0x20000}, 0x112065, 0x0, 0x4, 0x3, 0x7, 0x1, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 1m55.970064937s ago: executing program 1 (id=13635): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0d2e0020fdcc6177d93790ff", @ANYRES32, @ANYBLOB='\b'], 0x0}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='.'}, 0x30) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 1m55.799826936s ago: executing program 1 (id=13640): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) 1m55.585831506s ago: executing program 1 (id=13645): socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a3f", @ANYRES16=r0], 0xfe33) 1m53.831441928s ago: executing program 1 (id=13652): perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x200, 0xfffffffffffefffb}, 0x8, 0x80000001, 0x0, 0x7, 0x766e0b24, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400200000000003a}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xf, &(0x7f0000000240), 0x4) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000380)=r1, 0x4) 1m53.141503019s ago: executing program 39 (id=13652): perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x200, 0xfffffffffffefffb}, 0x8, 0x80000001, 0x0, 0x7, 0x766e0b24, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400200000000003a}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xf, &(0x7f0000000240), 0x4) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000380)=r1, 0x4) 1m52.231814081s ago: executing program 0 (id=13665): r0 = syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x2}, 0x11efa, 0x200000004, 0x98, 0x6, 0x2, 0xfffff271, 0xffdc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000010801f7"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) 1m52.116656112s ago: executing program 9 (id=13666): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0xe, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="1802000080100000000000000400000085000000a000000095"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000008c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f0000000940), &(0x7f0000000980)=r1}, 0x20) sendmsg$inet(r0, &(0x7f00000009c0)={0x0, 0x6000, &(0x7f0000000a00)=[{&(0x7f0000000a40)='U', 0xa00120}], 0x1}, 0x3) 1m51.93207488s ago: executing program 2 (id=13667): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x1}, 0x114905, 0x4, 0x0, 0x5, 0x7, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000000700000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0xe, 0x0, &(0x7f0000000480)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.time\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x17, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffc}, @generic={0x2, 0xd, 0xe, 0x0, 0x7f}, @generic={0xe, 0x3, 0x9, 0x6, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0xb}, 0x94) 1m51.622013369s ago: executing program 0 (id=13669): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x10000) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0xa4, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1, 0x56, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xb]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0xa4}}, 0x0) 1m51.522561261s ago: executing program 9 (id=13670): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x20208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x2}, 0x19efa, 0x4, 0x98, 0x6, 0x2, 0xfffff271, 0xffdc, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 1m51.3591242s ago: executing program 2 (id=13671): r0 = getpid() r1 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x114244, 0x1, 0xafec, 0x4, 0x7ffe, 0x7fffffff, 0x200}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000160007012cbd7000fedbdf251a7c00000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 1m50.945666262s ago: executing program 0 (id=13673): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="02000000000000000088"], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 1m50.643789411s ago: executing program 0 (id=13674): r0 = syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x20208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x2}, 0x11efa, 0x4, 0x98, 0x6, 0x2, 0xfffff271, 0xffdc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x20, 0x52, 0x1, 0x70bd26, 0x200, {0x2}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0xfffffffe}]}, 0x20}}, 0x0) 1m50.643361143s ago: executing program 9 (id=13675): openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e381, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x5, 0x6, 0x6, 0x1, 0x0, 0x0, 0x0, 0x400200000000003b}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x5}, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'M'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 1m50.059613923s ago: executing program 2 (id=13676): r0 = syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x20208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x2}, 0x19efa, 0x4, 0x98, 0x6, 0x2, 0xfffff271, 0xffdc, 0x0, 0x0, 0x0, 0x24}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x5, &(0x7f0000000900)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PERF_EVENT_IOC_ID(r3, 0x40047459, 0x0) 1m48.478047661s ago: executing program 9 (id=13678): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x830b}, 0x10000, 0x2, 0xfffffffe, 0x5, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x18, 0x34, 0x107, 0x70bd27, 0xfffffdfe, {0x10, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c014}, 0xc0d4) recvmsg$unix(0xffffffffffffffff, 0x0, 0x10040) socket$kcm(0xa, 0x5, 0x0) 1m48.065705558s ago: executing program 2 (id=13679): socket$unix(0x1, 0x1, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=ANY=[], 0x5c8}, 0xf7e5) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) 1m47.746273856s ago: executing program 2 (id=13680): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3000000002030101000000000000000002000000080001000100000209000200000000fa0100"], 0x30}}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1m47.453666082s ago: executing program 9 (id=13681): r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f00000001c0)={'wg1\x00'}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0), 0x2, 0xffffffffffffffff, 0x4}, 0x38) sendmsg$kcm(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x24000000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000100)) 1m47.165310877s ago: executing program 2 (id=13682): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000004, 0x1, @perf_config_ext={0x4, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x1000005, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x5, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000300)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000340)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000c80)={'wlan1\x00', @random="2e2ee363a4b1"}) 1m46.954140576s ago: executing program 0 (id=13683): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x800}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000c, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0xa7, 0x8, 0x0, 0x0}}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 1m43.671254695s ago: executing program 9 (id=13684): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000b40)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e381, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x1, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400200000000003b}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x5, 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000cc0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000d40)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x14, 0x2a, 0x9, 0x70bd25, 0x25dfdbfc, {0x1}}, 0x14}}, 0x48090) 1m43.295021637s ago: executing program 0 (id=13685): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x110028, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x6c, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xe}, {0xffff, 0xffff}, {0x2, 0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x20000141}, @TCA_TBF_PRATE64={0xc, 0x5, 0x84eae1006895906f}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x0, 0xeeb, 0xd39, 0x2a, 0x9784}, {0x7, 0x2, 0x5, 0x0, 0xf07, 0x9}, 0xfffffffc, 0xfffffff8, 0x4000e56}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8004003}, 0x8080) 1m31.728825804s ago: executing program 40 (id=13682): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000004, 0x1, @perf_config_ext={0x4, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x1000005, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x5, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000300)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000340)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000c80)={'wlan1\x00', @random="2e2ee363a4b1"}) 1m26.805052454s ago: executing program 41 (id=13685): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x110028, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x6c, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xe}, {0xffff, 0xffff}, {0x2, 0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x20000141}, @TCA_TBF_PRATE64={0xc, 0x5, 0x84eae1006895906f}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x0, 0xeeb, 0xd39, 0x2a, 0x9784}, {0x7, 0x2, 0x5, 0x0, 0xf07, 0x9}, 0xfffffffc, 0xfffffff8, 0x4000e56}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8004003}, 0x8080) 1m24.145455041s ago: executing program 42 (id=13684): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000b40)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e381, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x1, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400200000000003b}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x5, 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000cc0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000d40)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x14, 0x2a, 0x9, 0x70bd25, 0x25dfdbfc, {0x1}}, 0x14}}, 0x48090) 1m4.03288226s ago: executing program 5 (id=13655): mkdir(&(0x7f0000000140)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000000)='/\x00\x02\x00\x00/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2\xbe\xf0\x81x\x97'}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x398d0ce, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x9d9055, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) 1m3.74928844s ago: executing program 5 (id=13692): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x1, 0x0, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="64000000100001060000000600000000000014005fff00000000000000000000100003007665746830000000000000002400120008000100766574681800020014000100000000007fff0000030000000000000010000300766574685900000000000000", 0x64}], 0x1}, 0x0) 56.527659834s ago: executing program 5 (id=13704): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xe, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000ec0)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000f00)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000001000), 0x366, 0x10, &(0x7f0000001040), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000010c0)={r0, r1, 0x26, 0x0, @void}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000b80)={0x9, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000bc0)=r2, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000c00)=r3, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000c40)=r3, 0x4) 55.092226591s ago: executing program 43 (id=13704): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xe, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000000ec0)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000f00)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000001000), 0x366, 0x10, &(0x7f0000001040), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000010c0)={r0, r1, 0x26, 0x0, @void}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000b80)={0x9, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000bc0)=r2, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000c00)=r3, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000c40)=r3, 0x4) 43.533512418s ago: executing program 4 (id=13720): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="f5ffffff0100000000a500000000000018490000fe"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033b687277b9b108b4ab51c"], 0xfe33) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000018"], 0xfe33) 41.824847125s ago: executing program 4 (id=13722): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) perf_event_open(&(0x7f0000001480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x6, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {0x0, 0x0, 0x3d, 0x0, 0x20000}, {0x0, 0x0, 0x0, 0x4, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x10}, {0x0, 0x404, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x42, 0x0, 0x400000, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x2000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20, 0xfffffffc}, {0x8}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x1, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0xffffffff, 0xffffffff, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff, 0x10000000}, {}, {0x0, 0x0, 0xc, 0x7, 0x0, 0x6}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x52a}, {0xffffffff, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x29, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x28e, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x100000, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x6, 0x3}, {0x0, 0x15, 0x0, 0x48510}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xcb}, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x4000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4b8}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1, 0xfffffffd}, {0x0, 0x8, 0x0, 0x88}, {0x5}, {}, {0x0, 0xfffffffc, 0x0, 0x3ff, 0x40000000}, {0xfffffffe, 0x0, 0x0, 0xfffffffd}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x5}, {}, {0x0, 0x0, 0x0, 0x4000, 0x0, 0x4e}, {0x0, 0x54e4}, {0x0, 0x101, 0x0, 0x4, 0x0, 0xffffffff}, {}, {0x2f, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {0x0, 0x0, 0x1}, {0x0, 0x2, 0xfffffffd, 0x80000, 0x3}, {}, {0x800000, 0x9, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x6, 0x0, 0x4}, {0x0, 0x80}, {}, {0x0, 0xfffffffd}, {0x6, 0x0, 0x0, 0x0, 0x8}, {0x7f, 0x0, 0xfffffffe, 0xfffffffe}, {}, {}, {0xffffffff, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x8, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x2000000}, {0x0, 0x80000000, 0x0, 0x7619, 0x0, 0x101}, {0x5, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x200, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c, 0x3, 0x0, 0x7, 0x7f53}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x4, 0x7fffffff}, {}, {0x1, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x4, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0xffffffff, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc, 0x2}, {0x0, 0x80000000, 0x0, 0x7dff800}, {0x3, 0x0, 0x0, 0x0, 0xffffffff}], [{0x3}, {}, {}, {}, {}, {0x3}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x1}, {0x4, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {0x2}, {}, {}, {}, {}, {}, {0x749eb9ae44d9651f}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {0x3}, {}, {0x1}, {}, {}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x8, 0x1}, {}, {0x1}, {0x4}, {}, {0x0, 0x1}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x7}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {0x6}, {0x2, 0x1}, {}, {}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {}, {0x2}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r1, 0x58, &(0x7f0000000600)}, 0x10) 40.029723715s ago: executing program 4 (id=13723): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000140), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x43) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[], 0x101d0) sendmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x1458}, 0x20048811) recvmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)=""/102, 0x66}], 0x1}, 0x40) 38.967144618s ago: executing program 4 (id=13724): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0xf08, 0x0, 0x0, 0x8, 0x80000000003fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 37.269042745s ago: executing program 4 (id=13726): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0xf08, 0x0, 0x0, 0x8, 0x80000000003fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x29, 0x8, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x6f}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000001440)='GPL\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220000000000000000000000000000000000000001"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 33.920467969s ago: executing program 4 (id=13729): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf250100000008000800", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 32.063016978s ago: executing program 44 (id=13729): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf250100000008000800", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 4.989983515s ago: executing program 3 (id=13766): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e381, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x1, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400200000000003b}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000180)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 3.043294037s ago: executing program 3 (id=13767): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000280)={0x0, 0x2, &(0x7f00000002c0)=[{&(0x7f0000001c40)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) openat$tun(0xffffffffffffff9c, &(0x7f0000002c40), 0x18100, 0x0) write$cgroup_devices(r0, &(0x7f0000002cc0)=ANY=[], 0xfffffeff) recvmsg$unix(r1, &(0x7f0000002d00)={0x0, 0x0, 0x0}, 0x10061) 1.294762482s ago: executing program 3 (id=13768): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0100000003"], 0x48) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e381, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0xb, 0xfffffffffffffffc}, 0x8, 0x0, 0x0, 0x5, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x400200000000003b}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x10}, 0x100000, 0x7, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x16, 0x10, &(0x7f0000000d00)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff450200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000d80)='GPL\x00', 0x7, 0x0, 0x0, 0x2a079ff5b90a2b9f, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 620.943746ms ago: executing program 3 (id=13769): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018010000786c6c250000000000202020731af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0000008500000006000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180700000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 65.417113ms ago: executing program 3 (id=13770): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100001, 0xca, 0x0, 0x5, 0x1000000000000, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e00000003000000ea04000001"], 0x50) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12) 0s ago: executing program 3 (id=13771): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e381, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x1, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400200000000003b}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x5, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000700)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000740)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)="5c00000015006b030231a6080c000af32d00000000f800250502000f00e5aa000017d34460bc24eab556bd0525816d6b67bf927e4a75ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0xd726ea3370651e9c) kernel console output (not intermixed with test programs): ode [ 968.036818][ T31] hsr_slave_1: left promiscuous mode [ 968.048273][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 968.048297][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 968.064707][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 968.064729][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 968.107323][ T31] veth1_macvtap: left promiscuous mode [ 968.107400][ T31] veth0_macvtap: left promiscuous mode [ 968.107512][ T31] veth1_vlan: left promiscuous mode [ 968.107587][ T31] veth0_vlan: left promiscuous mode [ 968.416050][T31954] netlink: 'syz.2.11700': attribute type 3 has an invalid length. [ 968.416110][T31954] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11700'. [ 969.039130][T24203] Bluetooth: hci2: command tx timeout [ 969.653073][ T31] team0 (unregistering): Port device team_slave_1 removed [ 969.676545][T24203] Bluetooth: hci3: command 0x0406 tx timeout [ 969.737173][ T31] team0 (unregistering): Port device team_slave_0 removed [ 969.985089][T31984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11714'. [ 970.158891][ T5297] 8021q: adding VLAN 0 to HW filter on device eth5 [ 971.117068][ T5655] Bluetooth: hci2: command tx timeout [ 971.567621][T31869] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.567816][T31869] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.567971][T31869] bridge_slave_0: entered allmulticast mode [ 971.569860][T31869] bridge_slave_0: entered promiscuous mode [ 971.587251][T31869] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.587548][T31869] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.587911][T31869] bridge_slave_1: entered allmulticast mode [ 971.592352][T31869] bridge_slave_1: entered promiscuous mode [ 971.661909][T31869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 971.675585][T31869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 971.830222][T31869] team0: Port device team_slave_0 added [ 971.842824][T31869] team0: Port device team_slave_1 added [ 972.011850][T31869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 972.011872][T31869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 972.011902][T31869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 972.049615][T31869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 972.049668][T31869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 972.049744][T31869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 972.325103][T31869] hsr_slave_0: entered promiscuous mode [ 972.334230][T31869] hsr_slave_1: entered promiscuous mode [ 972.341727][T31869] debugfs: 'hsr0' already exists in 'hsr' [ 972.341790][T31869] Cannot create hsr debugfs directory [ 972.943160][ T5297] 8021q: adding VLAN 0 to HW filter on device eth6 [ 973.197072][ T5655] Bluetooth: hci2: command tx timeout [ 974.029056][T32075] netlink: 'syz.0.11744': attribute type 2 has an invalid length. [ 974.428444][T31869] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 974.459709][T31869] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 974.490887][T31869] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 974.518248][T31869] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 974.524179][T31869] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 974.681646][T31869] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 974.704501][T31869] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 974.787578][T31869] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 975.163377][T31869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 975.220712][T32120] netlink: 104 bytes leftover after parsing attributes in process `syz.4.11759'. [ 975.281644][ T5701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 975.387322][T31869] 8021q: adding VLAN 0 to HW filter on device team0 [ 975.423409][ T316] bridge0: port 1(bridge_slave_0) entered blocking state [ 975.423522][ T316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 975.475465][T21043] bridge0: port 2(bridge_slave_1) entered blocking state [ 975.475605][T21043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 975.597088][T32130] xt_nfacct: accounting object `' does not exist [ 975.609431][T32128] mac80211_hwsim hwsim65 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 976.320159][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.672063][T31869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 977.013337][T31869] veth0_vlan: entered promiscuous mode [ 977.058011][T31869] veth1_vlan: entered promiscuous mode [ 977.093609][T32168] netlink: 104 bytes leftover after parsing attributes in process `syz.0.11769'. [ 977.271565][T31869] veth0_macvtap: entered promiscuous mode [ 977.305681][T31869] veth1_macvtap: entered promiscuous mode [ 977.356911][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.358105][T31869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 977.392455][T31869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 977.507384][T28213] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.507435][T28213] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.507474][T28213] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.507519][T28213] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.574566][T32182] mac80211_hwsim hwsim67 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 977.709896][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 977.709920][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 977.794197][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 977.794221][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 978.083576][ T13] wlan1: Trigger new scan to find an IBSS to join [ 978.397188][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.532390][T32218] netlink: 68 bytes leftover after parsing attributes in process `syz.5.11786'. [ 978.532437][T32218] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11786'. [ 978.757804][T32227] netlink: 'syz.5.11789': attribute type 2 has an invalid length. [ 978.757838][T32227] netlink: 'syz.5.11789': attribute type 2 has an invalid length. [ 978.775141][T32228] netlink: 'syz.3.11787': attribute type 3 has an invalid length. [ 978.775167][T32228] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11787'. [ 979.098668][T32236] netlink: 'syz.4.11793': attribute type 2 has an invalid length. [ 979.441529][T26963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.802768][T32258] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.11800'. [ 980.096549][ T31] wlan1: Trigger new scan to find an IBSS to join [ 980.495802][T26963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.037427][ T63] wlan1: Trigger new scan to find an IBSS to join [ 981.186540][T32270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 981.518626][T26963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.775399][T32307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11811'. [ 982.558314][T26963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.597163][T26963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 984.084818][ T13] wlan1: Creating new IBSS network, BSSID 8a:29:79:79:f8:e1 [ 985.195329][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.450542][T32328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 985.656008][T32342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11827'. [ 986.077187][ T31] wlan1: Creating new IBSS network, BSSID 1a:01:0f:68:a1:9b [ 986.237562][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 986.550762][T32381] sch_tbf: burst 1 is lower than device bridge_slave_0 mtu (1514) ! [ 986.577618][T32382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11847'. [ 987.277045][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 988.359903][T26963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 988.731305][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 988.732419][T26963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 988.733859][T26963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 988.735405][T16960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 988.735616][T16960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 988.735834][T16960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.066244][T32430] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11869'. [ 989.482048][T26963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.607079][T26963] net_ratelimit: 1 callbacks suppressed [ 991.607103][T26963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.756839][T16958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.647053][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.200441][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.200520][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.677507][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.448684][T32490] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11896'. [ 994.448720][T32490] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11896'. [ 994.448740][T32490] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11896'. [ 994.740121][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.777495][T32505] netlink: 'syz.0.11902': attribute type 21 has an invalid length. [ 994.777526][T32505] netlink: 168 bytes leftover after parsing attributes in process `syz.0.11902'. [ 994.798684][T28215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.983818][T32515] netlink: 'syz.3.11907': attribute type 29 has an invalid length. [ 994.983919][T32515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11907'. [ 994.983954][T32515] netlink: 1 bytes leftover after parsing attributes in process `syz.3.11907'. [ 995.780871][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.798000][T26963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.073677][T32594] netlink: 'syz.4.11943': attribute type 10 has an invalid length. [ 997.073702][T32594] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.11943'. [ 997.387386][T32604] netlink: 'syz.3.11949': attribute type 2 has an invalid length. [ 998.099663][T32626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11959'. [ 998.909144][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.958339][T26963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.466939][T32661] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11979'. [ 999.971017][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.051638][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.996813][T16961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.083636][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.973224][T32716] netlink: 'syz.4.12001': attribute type 13 has an invalid length. [ 1002.973251][T32716] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.12001'. [ 1003.118288][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.919082][T32757] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12021'. [ 1004.045672][T32763] netlink: 'syz.5.12023': attribute type 16 has an invalid length. [ 1004.174987][T26963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.974031][T32763] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.974917][T32763] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.037229][T16960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.176252][T32763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1005.194487][T32763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1005.608125][ T317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.707722][ T316] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.708454][ T31] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.708501][ T31] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.708543][ T31] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.926605][ T335] netlink: 60 bytes leftover after parsing attributes in process `syz.5.12038'. [ 1005.947770][ T335] netlink: 60 bytes leftover after parsing attributes in process `syz.5.12038'. [ 1005.952043][ T335] netlink: 60 bytes leftover after parsing attributes in process `syz.5.12038'. [ 1006.073977][ T341] netlink: 'syz.3.12042': attribute type 10 has an invalid length. [ 1006.074058][ T341] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12042'. [ 1006.297829][ T352] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12046'. [ 1006.605074][ T367] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12055'. [ 1006.639754][T21266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1007.073177][ T385] netlink: 'syz.3.12062': attribute type 61 has an invalid length. [ 1007.073210][ T385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12062'. [ 1007.175180][ T389] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12064'. [ 1007.682045][ T403] cgroup: Unknown subsys name 'pcr' [ 1007.692154][ T318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1007.928650][ T410] netlink: 220 bytes leftover after parsing attributes in process `syz.3.12074'. [ 1007.949093][ T412] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12073'. [ 1008.077045][T16958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1008.719863][ T318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1008.861167][ T457] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1008.861253][ T457] syzkaller0: linktype set to 6 [ 1008.861720][ T457] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 1008.861826][ T452] tap0: tun_chr_ioctl cmd 1074025675 [ 1008.861842][ T452] tap0: persist enabled [ 1008.867147][ T455] netlink: 'syz.5.12094': attribute type 16 has an invalid length. [ 1008.867250][ T455] netlink: 'syz.5.12094': attribute type 1 has an invalid length. [ 1008.929881][ T452] tap0: tun_chr_ioctl cmd 1074025675 [ 1008.929907][ T452] tap0: persist enabled [ 1009.635252][ T484] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1009.635296][ T484] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1009.635342][ T484] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1009.816550][T21266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.133510][ T31] smbdirect: ib_dev[syz2] removed [ 1010.877900][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.117210][T16958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.631015][ T528] netlink: 'syz.3.12129': attribute type 4 has an invalid length. [ 1011.916888][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1012.496322][ T564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12140'. [ 1012.728514][ T570] netlink: 'syz.4.12141': attribute type 1 has an invalid length. [ 1012.956996][ T318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.008268][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.124668][ T316] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1014.125135][ T316] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1014.156791][T16958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.041153][T21266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.063571][ T606] netlink: 703 bytes leftover after parsing attributes in process `syz.0.12147'. [ 1016.077345][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.599240][ T644] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12165'. [ 1017.117034][T21266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.200763][T16961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.157293][T21266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.364635][ T670] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12175'. [ 1018.695775][ T681] netlink: 17 bytes leftover after parsing attributes in process `syz.2.12179'. [ 1018.744020][ T683] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12181'. [ 1019.205842][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.239080][ T318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.239262][T16958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.535284][ T723] netlink: 'syz.3.12200': attribute type 2 has an invalid length. [ 1020.583804][ T728] netlink: 36 bytes leftover after parsing attributes in process `syz.5.12201'. [ 1020.583844][ T728] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12201'. [ 1021.277024][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.617847][ T774] pim6reg1: entered promiscuous mode [ 1021.617872][ T774] pim6reg1: entered allmulticast mode [ 1021.893773][ T780] tun0: tun_chr_ioctl cmd 1074025681 [ 1021.898491][ T780] tun0: tun_chr_ioctl cmd 1074812118 [ 1022.318169][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.425041][ T801] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12228'. [ 1022.425067][ T801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12228'. [ 1022.911831][ T823] netlink: 'syz.5.12239': attribute type 10 has an invalid length. [ 1022.942990][ T825] netlink: 152 bytes leftover after parsing attributes in process `syz.3.12240'. [ 1023.232265][ T834] tun0: tun_chr_ioctl cmd 1074812117 [ 1023.233243][ T834] tun0: tun_chr_ioctl cmd 1074025678 [ 1023.233264][ T834] tun0: group set to 0 [ 1023.288825][T28215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.364220][ T318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.848792][ T862] netlink: 'syz.5.12257': attribute type 10 has an invalid length. [ 1023.893863][ T862] team0: Port device dummy0 added [ 1024.398239][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.441642][T21266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.597355][ T915] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1025.597398][ T915] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1025.597458][ T915] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1025.814816][T21043] smbdirect: ib_dev[syz2] removed [ 1026.317198][T28215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.478132][ T5776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.605682][ T957] netlink: 'syz.2.12290': attribute type 2 has an invalid length. [ 1026.662337][ T963] netlink: 260 bytes leftover after parsing attributes in process `syz.3.12293'. [ 1027.525868][T21266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.552759][ T985] netlink: 56 bytes leftover after parsing attributes in process `syz.2.12302'. [ 1027.552876][ T985] netlink: 56 bytes leftover after parsing attributes in process `syz.2.12302'. [ 1027.782959][ T996] tun0: tun_chr_ioctl cmd 1074812117 [ 1027.783330][ T996] tun0: tun_chr_ioctl cmd 2147767521 [ 1028.109956][ T1007] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0500:0023 with DS=0x32 [ 1028.557924][ T318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.035579][ T1048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.186800][ T1054] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12331'. [ 1029.271806][ T1061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12334'. [ 1029.357484][T16959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.363101][ T1067] netlink: 64 bytes leftover after parsing attributes in process `syz.3.12335'. [ 1029.598058][ T318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.635769][ T1074] tun0: tun_chr_ioctl cmd 1074025678 [ 1029.635794][ T1074] tun0: group set to 0 [ 1029.636043][ T1074] tun0: tun_chr_ioctl cmd 35108 [ 1029.901660][ T1086] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1029.901702][ T1086] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1029.901746][ T1086] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1029.989057][ T1087] netlink: 'syz.0.12351': attribute type 4 has an invalid length. [ 1030.054132][ T31] smbdirect: ib_dev[syz2] removed [ 1030.444634][ T1108] netlink: 'syz.4.12347': attribute type 1 has an invalid length. [ 1030.564560][ T1112] netlink: 'syz.2.12350': attribute type 16 has an invalid length. [ 1031.246037][ T1121] netlink: 'syz.4.12355': attribute type 16 has an invalid length. [ 1031.493582][ T1131] netlink: 'syz.3.12359': attribute type 21 has an invalid length. [ 1031.493662][ T1131] IPv6: NLM_F_CREATE should be specified when creating new route [ 1032.505211][ T1141] netlink: 'syz.0.12361': attribute type 1 has an invalid length. [ 1032.623368][ T1145] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12364'. [ 1035.918490][ T63] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1035.918530][ T63] netdevsim netdevsim2 netdevsim3: unset [0, 1] type 1 family 0 port 31488 - 0 [ 1035.918558][ T63] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.918601][ T63] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1035.918628][ T63] netdevsim netdevsim2 netdevsim2: unset [0, 1] type 1 family 0 port 31488 - 0 [ 1035.918655][ T63] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.918699][ T63] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1035.918726][ T63] netdevsim netdevsim2 netdevsim1: unset [0, 1] type 1 family 0 port 31488 - 0 [ 1035.918754][ T63] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.918790][ T63] netdevsim netdevsim2 ªªªªªª: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1035.918816][ T63] netdevsim netdevsim2 ªªªªªª: unset [0, 1] type 1 family 0 port 31488 - 0 [ 1035.918843][ T63] netdevsim netdevsim2 ªªªªªª: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.479001][ T1178] netlink: 'syz.2.12374': attribute type 10 has an invalid length. [ 1036.479044][ T1178] ipvlan0: entered allmulticast mode [ 1036.479063][ T1178] veth0_vlan: entered allmulticast mode [ 1038.355414][ T1240] netlink: 104 bytes leftover after parsing attributes in process `syz.3.12397'. [ 1039.224255][ T1287] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12412'. [ 1039.741718][ T1308] netlink: 260 bytes leftover after parsing attributes in process `syz.3.12419'. [ 1040.982840][ T1340] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12429'. [ 1041.755718][ T1371] netlink: 14 bytes leftover after parsing attributes in process `syz.0.12439'. [ 1041.810972][ T1379] sctp: [Deprecated]: syz.3.12444 (pid 1379) Use of int in maxseg socket option. [ 1041.810972][ T1379] Use struct sctp_assoc_value instead [ 1042.171026][ T1388] netlink: 'syz.0.12446': attribute type 16 has an invalid length. [ 1042.953286][ T1388] bridge0: port 2(bridge_slave_1) entered disabled state [ 1042.957020][ T1388] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.354147][ T1388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1043.378450][ T1388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1043.866733][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.866788][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.866829][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.800602][ T1446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12472'. [ 1045.049803][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1045.213366][ T1457] netlink: 'syz.4.12475': attribute type 16 has an invalid length. [ 1045.981982][ T1457] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.985836][ T1457] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.196774][ T1457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1046.203773][ T1457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1046.390668][ T1463] : renamed from bridge_slave_1 [ 1046.428087][ T31] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.428248][ T31] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.428322][ T31] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.428475][ T31] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.643231][ T1479] netlink: 'syz.2.12486': attribute type 4 has an invalid length. [ 1046.643265][ T1479] netlink: 152 bytes leftover after parsing attributes in process `syz.2.12486'. [ 1047.305912][ T1506] netlink: 'syz.0.12501': attribute type 2 has an invalid length. [ 1048.739116][ T1546] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.12520'. [ 1048.845631][ T1550] netlink: 'syz.5.12521': attribute type 10 has an invalid length. [ 1048.845675][ T1550] ipvlan0: entered allmulticast mode [ 1048.845695][ T1550] veth0_vlan: entered allmulticast mode [ 1048.985537][ T1550] team0: Device ipvlan0 failed to register rx_handler [ 1049.019372][ T1552] sock: sock_set_timeout: `syz.4.12523' (pid 1552) tries to set negative timeout [ 1054.089988][ T1603] openvswitch: netlink: Actions may not be safe on all matching packets [ 1054.177909][ T5655] Bluetooth: hci0: unexpected subevent 0x03 length: 150 > 9 [ 1054.627209][ T1625] hsr0: Slave A (§) is not up; please bring it up to get a fully working HSR network [ 1054.627238][ T1625] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1054.627412][ T1625] hsr0: entered promiscuous mode [ 1054.627434][ T1625] hsr0: entered allmulticast mode [ 1054.627451][ T1625] §: entered allmulticast mode [ 1054.627474][ T1625] hsr_slave_1: entered allmulticast mode [ 1054.665620][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.665801][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.038750][ T1638] tap0: tun_chr_ioctl cmd 1074025677 [ 1055.038871][ T1638] tap0: linktype set to 1 [ 1055.041423][ T1638] tap0: tun_chr_ioctl cmd 1074025672 [ 1055.041443][ T1638] tap0: ignored: set checksum disabled [ 1055.413471][ T1653] netlink: 656 bytes leftover after parsing attributes in process `syz.5.12570'. [ 1055.413502][ T1653] netlink: 656 bytes leftover after parsing attributes in process `syz.5.12570'. [ 1056.978606][ T1675] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12581'. [ 1057.080808][ T1680] netlink: 19 bytes leftover after parsing attributes in process `syz.4.12582'. [ 1057.123059][ T1681] netlink: 'syz.2.12583': attribute type 29 has an invalid length. [ 1057.160563][ T1680] netlink: 19 bytes leftover after parsing attributes in process `syz.4.12582'. [ 1057.849689][ T1704] netdevsim netdevsim5 netdevsim1: Unsupported IPsec algorithm [ 1058.033924][ T1708] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12597'. [ 1058.048710][ T1708] netlink: 'syz.0.12597': attribute type 12 has an invalid length. [ 1058.048745][ T1708] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12597'. [ 1058.113147][ T1712] netlink: 65019 bytes leftover after parsing attributes in process `syz.2.12598'. [ 1058.472556][ T1720] netlink: 88 bytes leftover after parsing attributes in process `syz.5.12601'. [ 1058.994013][ T1740] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12611'. [ 1060.853288][ T1770] __nla_validate_parse: 1 callbacks suppressed [ 1060.853312][ T1770] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12626'. [ 1060.853349][ T1770] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12626'. [ 1061.022434][ T1775] netlink: 132 bytes leftover after parsing attributes in process `syz.5.12628'. [ 1061.055711][ T1775] netlink: 'syz.5.12628': attribute type 12 has an invalid length. [ 1061.055741][ T1775] netlink: 132 bytes leftover after parsing attributes in process `syz.5.12628'. [ 1061.118135][ T1779] netlink: 65027 bytes leftover after parsing attributes in process `syz.0.12631'. [ 1061.859017][T24203] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1061.865448][T24203] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1061.885932][T24203] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1061.898859][T24203] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1061.901047][T24203] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1062.870570][ T1799] rxe_eth0 speed is unknown, defaulting to 1000 [ 1064.001976][T24203] Bluetooth: hci5: command tx timeout [ 1064.485431][ T31] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.471947][ T1837] tap1: tun_chr_ioctl cmd 1074025672 [ 1065.471984][ T1837] tap1: ignored: set checksum enabled [ 1065.472195][ T1839] tap1: tun_chr_ioctl cmd 1074025675 [ 1065.472213][ T1839] tap1: persist disabled [ 1065.591815][ T31] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.725063][ T31] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.918847][ T1856] xt_LOG: level 115 >= 8 [ 1065.978517][ T31] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.076769][T24203] Bluetooth: hci5: command tx timeout [ 1066.558529][ T31] bridge_slave_1: left allmulticast mode [ 1066.558559][ T31] bridge_slave_1: left promiscuous mode [ 1066.558799][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.591871][ T31] bridge_slave_0: left allmulticast mode [ 1066.591899][ T31] bridge_slave_0: left promiscuous mode [ 1066.592131][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.971867][ T1884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12669'. [ 1067.476034][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1067.501494][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1067.519391][ T31] bond0 (unregistering): Released all slaves [ 1067.946027][T24203] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 1068.156652][T24203] Bluetooth: hci5: command tx timeout [ 1068.286329][ T1799] bridge0: port 1(bridge_slave_0) entered blocking state [ 1068.286552][ T1799] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.286727][ T1799] bridge_slave_0: entered allmulticast mode [ 1068.314004][ T1799] bridge_slave_0: entered promiscuous mode [ 1068.329127][ T1799] bridge0: port 2(bridge_slave_1) entered blocking state [ 1068.329304][ T1799] bridge0: port 2(bridge_slave_1) entered disabled state [ 1068.329447][ T1799] bridge_slave_1: entered allmulticast mode [ 1068.360158][ T1799] bridge_slave_1: entered promiscuous mode [ 1068.703968][ T1799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1068.719423][ T1799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1068.905758][ T1799] team0: Port device team_slave_0 added [ 1068.962143][ T1799] team0: Port device team_slave_1 added [ 1069.233572][ T1799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1069.233594][ T1799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1069.233624][ T1799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1069.235252][ T1928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12683'. [ 1069.272601][ T1928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12683'. [ 1069.319314][ T1799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1069.319333][ T1799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1069.319364][ T1799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1069.551623][ T5297] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1069.762052][ T1799] hsr_slave_0: entered promiscuous mode [ 1069.772990][ T1799] hsr_slave_1: entered promiscuous mode [ 1069.775568][ T1799] debugfs: 'hsr0' already exists in 'hsr' [ 1069.775590][ T1799] Cannot create hsr debugfs directory [ 1069.821753][ T31] hsr_slave_0: left promiscuous mode [ 1069.822938][ T31] hsr_slave_1: left promiscuous mode [ 1069.824033][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1069.824054][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1069.826228][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1069.826248][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1069.898641][ T31] veth1_macvtap: left promiscuous mode [ 1069.898716][ T31] veth0_macvtap: left promiscuous mode [ 1069.898829][ T31] veth1_vlan: left promiscuous mode [ 1069.898904][ T31] veth0_vlan: left promiscuous mode [ 1070.246434][T24203] Bluetooth: hci5: command tx timeout [ 1070.830196][ T1954] netlink: 'syz.0.12694': attribute type 2 has an invalid length. [ 1070.830223][ T1954] netlink: 'syz.0.12694': attribute type 1 has an invalid length. [ 1070.830239][ T1954] netlink: 152 bytes leftover after parsing attributes in process `syz.0.12694'. [ 1071.009680][ T31] team0 (unregistering): Port device team_slave_1 removed [ 1071.043439][ T31] team0 (unregistering): Port device team_slave_0 removed [ 1072.142356][ T1799] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1074.490551][ T1799] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1074.491575][ T1799] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1074.534424][ T1799] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1074.609902][ T5297] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1074.620131][ T1799] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1074.651590][ T1799] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1074.656050][ T1799] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1074.703773][ T1799] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1074.867074][ T1994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12704'. [ 1074.867106][ T1994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12704'. [ 1075.285559][ T1799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1075.418963][ T1799] 8021q: adding VLAN 0 to HW filter on device team0 [ 1075.471790][T28213] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.471906][T28213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1075.512849][T28213] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.512966][T28213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1076.264782][ T2022] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12710'. [ 1076.264828][ T2022] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12710'. [ 1076.972345][ T2044] netlink: 'syz.2.12717': attribute type 3 has an invalid length. [ 1077.210318][ T5297] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1077.750486][ T1799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1078.686307][ T1799] veth0_vlan: entered promiscuous mode [ 1078.722470][ T1799] veth1_vlan: entered promiscuous mode [ 1078.779982][T24203] Bluetooth: hci1: unexpected subevent 0x05 length: 150 > 12 [ 1078.841106][ T1799] veth0_macvtap: entered promiscuous mode [ 1078.860633][ T1799] veth1_macvtap: entered promiscuous mode [ 1078.952432][ T1799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1079.001369][ T1799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1079.059987][T21043] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.060408][T21043] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.060593][T21043] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.060632][T21043] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.284437][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1079.284461][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1079.424938][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1079.424961][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1079.723205][ T5297] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1080.013254][ T2123] netlink: 65047 bytes leftover after parsing attributes in process `syz.6.12635'. [ 1080.103942][T24203] Bluetooth: hci5: SCO packet too small [ 1080.796739][T24203] Bluetooth: hci1: command 0x0406 tx timeout [ 1081.291316][ T2166] netlink: 'syz.4.12756': attribute type 21 has an invalid length. [ 1081.291449][ T2166] netlink: 'syz.4.12756': attribute type 6 has an invalid length. [ 1081.291471][ T2166] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12756'. [ 1081.549902][ T5655] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1081.553925][ T5655] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1081.554933][ T5655] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1081.556993][ T5655] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1081.559277][ T5655] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1081.877920][ T2169] netlink: 'syz.0.12757': attribute type 10 has an invalid length. [ 1082.144205][ T2169] 8021q: adding VLAN 0 to HW filter on device team0 [ 1082.182488][ T2169] bond0: (slave team0): Enslaving as an active interface with an up link [ 1082.823326][ T5655] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1083.323189][ T2218] netlink: 'syz.6.12773': attribute type 2 has an invalid length. [ 1083.323214][ T2218] netlink: 'syz.6.12773': attribute type 1 has an invalid length. [ 1083.323229][ T2218] netlink: 60387 bytes leftover after parsing attributes in process `syz.6.12773'. [ 1083.676952][ T5655] Bluetooth: hci2: command tx timeout [ 1083.699286][ T2173] rxe_eth0 speed is unknown, defaulting to 1000 [ 1083.793587][ T31] bridge_slave_1: left allmulticast mode [ 1083.793617][ T31] bridge_slave_1: left promiscuous mode [ 1083.793860][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.824370][ T31] bridge_slave_0: left allmulticast mode [ 1083.824396][ T31] bridge_slave_0: left promiscuous mode [ 1083.824612][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.346890][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1084.354784][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1084.378852][ T31] bond0 (unregistering): Released all slaves [ 1084.473115][ T31] !;: left promiscuous mode [ 1084.537269][ T2243] netlink: 'syz.0.12782': attribute type 2 has an invalid length. [ 1084.924854][ T2252] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12784'. [ 1085.757284][ T5655] Bluetooth: hci2: command tx timeout [ 1085.758611][ T5297] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1086.061141][ T2296] netlink: 'syz.6.12796': attribute type 12 has an invalid length. [ 1086.061182][ T2296] netlink: 164 bytes leftover after parsing attributes in process `syz.6.12796'. [ 1086.554617][ T2289] netlink: 'syz.2.12794': attribute type 4 has an invalid length. [ 1086.554955][ T2289] netlink: 152 bytes leftover after parsing attributes in process `syz.2.12794'. [ 1087.836611][ T5655] Bluetooth: hci2: command tx timeout [ 1088.730199][ T31] hsr_slave_0: left promiscuous mode [ 1088.733548][ T31] hsr_slave_1: left promiscuous mode [ 1088.735319][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1088.743378][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1088.962120][ T2314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12799'. [ 1089.309640][ T2324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1089.413168][ T31] team0 (unregistering): Port device team_slave_1 removed [ 1089.466227][ T31] team0 (unregistering): Port device team_slave_0 removed [ 1089.761239][ T31] team0 (unregistering): Port device dummy0 removed [ 1089.853695][ T2173] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.854117][ T2173] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.854290][ T2173] bridge_slave_0: entered allmulticast mode [ 1089.877593][ T2173] bridge_slave_0: entered promiscuous mode [ 1089.888587][ T2173] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.888697][ T2173] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.888843][ T2173] bridge_slave_1: entered allmulticast mode [ 1089.891083][ T2173] bridge_slave_1: entered promiscuous mode [ 1089.917090][ T5655] Bluetooth: hci2: command tx timeout [ 1090.063878][ T2173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1090.096320][ T2173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1090.335448][ T2173] team0: Port device team_slave_0 added [ 1090.354077][ T2173] team0: Port device team_slave_1 added [ 1090.419790][ T2173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1090.419811][ T2173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1090.419839][ T2173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1090.422469][ T2173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1090.422486][ T2173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1090.422515][ T2173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1090.587144][ T2173] hsr_slave_0: entered promiscuous mode [ 1090.588223][ T2173] hsr_slave_1: entered promiscuous mode [ 1091.505496][ T2384] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12827'. [ 1091.505533][ T2384] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12827'. [ 1091.512716][ T2173] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1091.588030][ T2173] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1091.596136][ T2173] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1091.644774][ T2173] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1091.660768][ T2173] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1091.688440][ T2173] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1091.691546][ T2173] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1091.717730][ T2173] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1092.349828][ T2405] netlink: 'syz.6.12833': attribute type 7 has an invalid length. [ 1092.349884][ T2405] netlink: 'syz.6.12833': attribute type 8 has an invalid length. [ 1092.412358][ T2173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1092.448594][ T5297] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1092.453051][ T2173] 8021q: adding VLAN 0 to HW filter on device team0 [ 1092.481489][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.481644][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1092.523031][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.523154][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1093.377536][ T2449] sit0: entered allmulticast mode [ 1093.427753][ T2449] sit0: entered promiscuous mode [ 1093.846053][ T2473] netlink: 104 bytes leftover after parsing attributes in process `syz.0.12848'. [ 1094.356267][ T5297] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1094.450677][ T2500] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.12856'. [ 1094.532019][ T2173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1095.641052][ T2173] veth0_vlan: entered promiscuous mode [ 1095.747144][ T2558] : entered promiscuous mode [ 1095.783343][ T2173] veth1_vlan: entered promiscuous mode [ 1095.930220][ T2173] veth0_macvtap: entered promiscuous mode [ 1095.970723][ T2173] veth1_macvtap: entered promiscuous mode [ 1096.040004][ T2173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1096.042622][ T5297] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1096.092695][ T2173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1096.148121][ T31] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.148173][ T31] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.148211][ T31] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.148249][ T31] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.494456][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1096.494479][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1096.703617][T21043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1096.703640][T21043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1097.024905][ T2589] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12875'. [ 1097.163968][ T2596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12878'. [ 1097.411620][ T2605] netlink: 830 bytes leftover after parsing attributes in process `syz.7.12755'. [ 1097.697587][ T2611] netlink: 8628 bytes leftover after parsing attributes in process `syz.6.12880'. [ 1098.507671][ T2640] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 1098.545274][ T2642] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12888'. [ 1099.441921][ T2684] netlink: 104 bytes leftover after parsing attributes in process `syz.2.12898'. [ 1099.480817][ T2680] rxe_eth0 speed is unknown, defaulting to 1000 [ 1099.846079][ T2689] netlink: 168 bytes leftover after parsing attributes in process `syz.2.12899'. [ 1100.221736][ T2702] xt_cgroup: invalid path, errno=-2 [ 1101.015693][ T2732] netlink: 104 bytes leftover after parsing attributes in process `syz.4.12910'. [ 1101.301869][ T2723] €Â0: renamed from pim6reg1 [ 1101.843352][ T2752] netlink: 'syz.6.12916': attribute type 1 has an invalid length. [ 1102.322907][ T2763] rxe_eth0 speed is unknown, defaulting to 1000 [ 1103.830782][ T2833] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12935'. [ 1104.818547][ T2867] netlink: 104 bytes leftover after parsing attributes in process `syz.7.12940'. [ 1106.849142][ T2942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12955'. [ 1108.612385][ T2995] netlink: 'syz.6.12980': attribute type 4 has an invalid length. [ 1108.612482][ T2995] netlink: 152 bytes leftover after parsing attributes in process `syz.6.12980'. [ 1108.769626][ T2995] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1108.907954][ T3006] sit0: entered allmulticast mode [ 1108.922457][ T3006] sit0: entered promiscuous mode [ 1109.774337][ T3041] netlink: 'syz.0.12995': attribute type 4 has an invalid length. [ 1109.774435][ T3041] netlink: 152 bytes leftover after parsing attributes in process `syz.0.12995'. [ 1109.905168][ T3041] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1111.279107][ T3076] netlink: 'syz.2.13007': attribute type 39 has an invalid length. [ 1111.279360][ T3076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13007'. [ 1111.283790][ T3076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13007'. [ 1111.323377][ T3076] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1111.703234][ T3085] netlink: 84 bytes leftover after parsing attributes in process `syz.0.13010'. [ 1111.703274][ T3085] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13010'. [ 1111.703296][ T3085] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13010'. [ 1111.762288][ T3094] netlink: 'syz.2.13012': attribute type 10 has an invalid length. [ 1111.762336][ T3094] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 1113.258076][ T3139] netlink: 'syz.0.13022': attribute type 21 has an invalid length. [ 1113.258155][ T3139] IPv6: NLM_F_CREATE should be specified when creating new route [ 1116.082077][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.082141][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.411010][ T3235] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13053'. [ 1118.070196][ T3293] netlink: 'syz.7.13076': attribute type 4 has an invalid length. [ 1118.070228][ T3293] netlink: 152 bytes leftover after parsing attributes in process `syz.7.13076'. [ 1118.297669][ T3291] netlink: 'syz.4.13075': attribute type 10 has an invalid length. [ 1118.297703][ T3291] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13075'. [ 1118.641267][ T3293] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1118.643073][ T3291] team0: entered promiscuous mode [ 1118.643100][ T3291] team_slave_0: entered promiscuous mode [ 1118.645392][ T3291] team_slave_1: entered promiscuous mode [ 1118.645602][ T3291] team0: entered allmulticast mode [ 1118.645622][ T3291] team_slave_0: entered allmulticast mode [ 1118.645641][ T3291] team_slave_1: entered allmulticast mode [ 1118.711954][ T3291] 8021q: adding VLAN 0 to HW filter on device team0 [ 1118.719197][ T3291] bridge0: port 3(team0) entered blocking state [ 1118.723612][ T3291] bridge0: port 3(team0) entered disabled state [ 1119.161547][ T3319] netlink: 'syz.7.13082': attribute type 21 has an invalid length. [ 1119.161639][ T3319] netlink: 132 bytes leftover after parsing attributes in process `syz.7.13082'. [ 1120.510450][ T3351] netlink: 'syz.2.13090': attribute type 3 has an invalid length. [ 1120.510476][ T3351] netlink: 'syz.2.13090': attribute type 1 has an invalid length. [ 1120.510490][ T3351] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.13090'. [ 1121.027254][ T3365] rxe_eth0 speed is unknown, defaulting to 1000 [ 1121.740137][ T3384] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13104'. [ 1123.136831][ T3418] netlink: 'syz.7.13121': attribute type 21 has an invalid length. [ 1123.138712][ T3418] IPv6: NLM_F_CREATE should be specified when creating new route [ 1123.139364][ T3418] netlink: 'syz.7.13121': attribute type 1 has an invalid length. [ 1123.575089][ T3433] bridge0: port 3(dummy0) entered disabled state [ 1123.594912][ T3433] bridge_slave_1: left allmulticast mode [ 1123.594944][ T3433] bridge_slave_1: left promiscuous mode [ 1123.599166][ T3433] bridge0: port 2(bridge_slave_1) entered disabled state [ 1123.634094][ T3433] bridge_slave_0: left allmulticast mode [ 1123.634128][ T3433] bridge_slave_0: left promiscuous mode [ 1123.648853][ T3433] bridge0: port 1(bridge_slave_0) entered disabled state [ 1123.700029][ T3434] netlink: 'syz.0.13126': attribute type 21 has an invalid length. [ 1123.700706][ T3434] IPv6: NLM_F_CREATE should be specified when creating new route [ 1123.964322][ T3441] rxe_eth0 speed is unknown, defaulting to 1000 [ 1124.100535][ T3446] netlink: 'syz.2.13133': attribute type 10 has an invalid length. [ 1125.164032][ T3471] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13139'. [ 1125.441902][T24203] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1125.445822][T24203] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1125.462527][T24203] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1125.472842][T24203] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1125.475809][T24203] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1125.496076][T21043] bridge0: port 3(team0) entered disabled state [ 1125.562677][T21043] bridge_slave_1: left allmulticast mode [ 1125.562705][T21043] bridge_slave_1: left promiscuous mode [ 1125.562932][T21043] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.591235][T21043] bridge_slave_0: left allmulticast mode [ 1125.591262][T21043] bridge_slave_0: left promiscuous mode [ 1125.591485][T21043] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.088425][ T3483] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13141'. [ 1126.284281][ T3490] netlink: 'syz.0.13142': attribute type 2 has an invalid length. [ 1126.618272][T21043] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1126.622472][T21043] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1126.624886][T21043] bond0 (unregistering): Released all slaves [ 1126.839939][ T3513] netlink: 'syz.7.13146': attribute type 10 has an invalid length. [ 1127.221663][ T3513] mac80211_hwsim hwsim88 wlan0: entered allmulticast mode [ 1127.301424][ T3513] team0: Port device wlan0 added [ 1127.518143][ T5655] Bluetooth: hci1: command tx timeout [ 1127.921076][ T3533] Cannot find add_set index 0 as target [ 1128.190394][ T5297] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1128.196829][ T3540] netlink: 65047 bytes leftover after parsing attributes in process `syz.7.13152'. [ 1128.909283][ T3553] : entered promiscuous mode [ 1128.965923][T21043] hsr_slave_0: left promiscuous mode [ 1128.988245][T21043] hsr_slave_1: left promiscuous mode [ 1128.991267][T21043] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1128.994851][T21043] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1129.599467][ T5655] Bluetooth: hci1: command tx timeout [ 1130.382112][ T3596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13167'. [ 1130.382155][ T3596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13167'. [ 1130.478578][ T3598] netlink: 'syz.0.13168': attribute type 16 has an invalid length. [ 1130.502774][T21043] team_slave_1 (unregistering): left promiscuous mode [ 1130.503893][T21043] team_slave_1 (unregistering): left allmulticast mode [ 1130.511975][T21043] team0 (unregistering): Port device team_slave_1 removed [ 1130.550334][T21043] team_slave_0 (unregistering): left promiscuous mode [ 1130.550365][T21043] team_slave_0 (unregistering): left allmulticast mode [ 1130.551590][T21043] team0 (unregistering): Port device team_slave_0 removed [ 1131.331476][ T5297] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1131.429172][ T3475] rxe_eth0 speed is unknown, defaulting to 1000 [ 1131.678508][ T5655] Bluetooth: hci1: command tx timeout [ 1132.269609][ T3475] bridge0: port 1(bridge_slave_0) entered blocking state [ 1132.269799][ T3475] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.269936][ T3475] bridge_slave_0: entered allmulticast mode [ 1132.271806][ T3475] bridge_slave_0: entered promiscuous mode [ 1132.301728][ T3475] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.301912][ T3475] bridge0: port 2(bridge_slave_1) entered disabled state [ 1132.302077][ T3475] bridge_slave_1: entered allmulticast mode [ 1132.303919][ T3475] bridge_slave_1: entered promiscuous mode [ 1132.363440][ T3475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1132.368943][ T3475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1132.415930][ T3475] team0: Port device team_slave_0 added [ 1132.423136][ T3475] team0: Port device team_slave_1 added [ 1132.462481][ T3475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1132.462501][ T3475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1132.462530][ T3475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1132.464585][ T3475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1132.464601][ T3475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1132.464629][ T3475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1132.563230][ T5297] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1132.603573][ T3475] hsr_slave_0: entered promiscuous mode [ 1132.604373][ T3475] hsr_slave_1: entered promiscuous mode [ 1132.604901][ T3475] debugfs: 'hsr0' already exists in 'hsr' [ 1132.604920][ T3475] Cannot create hsr debugfs directory [ 1132.917793][ T3475] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1132.923484][ T3475] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1132.925011][ T3475] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1132.953791][ T3475] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1132.955250][ T3475] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1132.981626][ T3475] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1132.982928][ T3475] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1133.003536][ T3475] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1133.136035][ T3475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1133.161996][ T3475] 8021q: adding VLAN 0 to HW filter on device team0 [ 1133.179544][T21043] bridge0: port 1(bridge_slave_0) entered blocking state [ 1133.179671][T21043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1133.201576][T21043] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.201691][T21043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1133.374571][ T5297] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1133.755204][ T3475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1133.756443][ T5655] Bluetooth: hci1: command tx timeout [ 1133.983792][ T3475] veth0_vlan: entered promiscuous mode [ 1134.003597][ T3475] veth1_vlan: entered promiscuous mode [ 1134.036744][ T3475] veth0_macvtap: entered promiscuous mode [ 1134.040501][ T3475] veth1_macvtap: entered promiscuous mode [ 1134.064891][ T3475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1134.082494][ T3475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1134.096694][T21043] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.096778][T28213] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.096839][T28213] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.096876][T28213] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.219645][T21043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1134.219663][T21043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1134.263941][T21043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1134.263964][T21043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1134.581041][ T3680] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13181'. [ 1134.790730][ T3688] netlink: 65047 bytes leftover after parsing attributes in process `syz.7.13172'. [ 1134.946847][ T5655] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1135.162900][ T3700] netlink: 'syz.8.13176': attribute type 4 has an invalid length. [ 1135.162940][ T3700] netlink: 132 bytes leftover after parsing attributes in process `syz.8.13176'. [ 1135.242504][ T3701] netlink: 'syz.6.13178': attribute type 2 has an invalid length. [ 1135.309135][ T3706] netlink: 68 bytes leftover after parsing attributes in process `syz.2.13185'. [ 1135.943019][ T3729] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13193'. [ 1136.408050][ T3732] netlink: 'syz.7.13194': attribute type 2 has an invalid length. [ 1136.960610][ T5655] Bluetooth: hci2: command 0x2016 tx timeout [ 1137.288428][ T3762] netlink: 16083 bytes leftover after parsing attributes in process `syz.7.13206'. [ 1137.521191][ T3768] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13208'. [ 1138.223997][ T3800] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13221'. [ 1138.225153][ T3797] netlink: 'syz.6.13220': attribute type 1 has an invalid length. [ 1138.362270][ T3802] netlink: 'syz.7.13222': attribute type 9 has an invalid length. [ 1138.370505][ T3802] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.13222'. [ 1138.508808][ T3811] netlink: 'syz.2.13225': attribute type 21 has an invalid length. [ 1138.508838][ T3811] netlink: 128 bytes leftover after parsing attributes in process `syz.2.13225'. [ 1138.510733][ T3811] netlink: 'syz.2.13225': attribute type 4 has an invalid length. [ 1139.041335][ T5655] Bluetooth: hci2: command 0x2016 tx timeout [ 1139.575889][ T3830] block nbd0: not configured, cannot reconfigure [ 1144.531441][ T3919] rxe_eth0 speed is unknown, defaulting to 1000 [ 1144.863361][ T3927] netlink: 'syz.0.13267': attribute type 10 has an invalid length. [ 1145.483477][ T3927] veth0_vlan: left promiscuous mode [ 1145.511626][ T3927] team0: Device veth0_vlan failed to register rx_handler [ 1146.163964][ T3952] __nla_validate_parse: 2 callbacks suppressed [ 1146.164004][ T3952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13272'. [ 1147.270838][ T3974] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1148.051055][ T3986] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.13279'. [ 1148.405588][ T3994] netlink: 108 bytes leftover after parsing attributes in process `syz.6.13284'. [ 1148.590208][ T4001] sch_tbf: burst 128 is lower than device batadv_slave_1 mtu (1514) ! [ 1148.764030][ T4008] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.13286'. [ 1149.073246][ T4012] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13288'. [ 1149.843703][ T4036] netlink: 'syz.0.13294': attribute type 5 has an invalid length. [ 1150.041262][ T4041] netlink: 164 bytes leftover after parsing attributes in process `syz.6.13295'. [ 1150.953594][ T4069] rxe_eth0 speed is unknown, defaulting to 1000 [ 1150.996187][ T4075] netlink: 65047 bytes leftover after parsing attributes in process `syz.6.13308'. [ 1151.275327][ T4080] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13311'. [ 1152.119458][ T4102] netlink: 'syz.6.13318': attribute type 16 has an invalid length. [ 1152.264611][ T4104] netlink: 'syz.2.13320': attribute type 10 has an invalid length. [ 1152.323200][ T4107] netlink: 'syz.2.13320': attribute type 10 has an invalid length. [ 1152.961665][ T4102] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.965221][ T4102] bridge0: port 1(bridge_slave_0) entered disabled state [ 1153.359705][ T4102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1153.391462][ T4102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1153.860148][T21045] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.862341][ T13] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.862387][ T13] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.862432][ T13] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.134132][T24203] Bluetooth: hci2: unexpected event 0x03 length: 151 > 11 [ 1157.330438][ T5655] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1157.333034][ T5655] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1157.333756][ T5655] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1157.334726][ T5655] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1157.335391][ T5655] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1157.622443][ T4183] netlink: 220 bytes leftover after parsing attributes in process `syz.2.13353'. [ 1158.193059][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.510852][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.723761][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.852114][ T4173] rxe_eth0 speed is unknown, defaulting to 1000 [ 1159.220561][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.438111][T24203] Bluetooth: hci3: command tx timeout [ 1159.929746][ T12] bridge_slave_1: left allmulticast mode [ 1159.929776][ T12] bridge_slave_1: left promiscuous mode [ 1159.930030][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.973035][ T12] bridge_slave_0: left allmulticast mode [ 1159.973063][ T12] bridge_slave_0: left promiscuous mode [ 1159.973279][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.184087][T24203] Bluetooth: hci2: unexpected event 0x2c length: 151 > 17 [ 1160.702909][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1160.725845][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1160.743622][ T12] bond0 (unregistering): Released all slaves [ 1161.517567][ T5655] Bluetooth: hci3: command tx timeout [ 1162.437701][ T4173] bridge0: port 1(bridge_slave_0) entered blocking state [ 1162.439418][ T4173] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.441158][ T4173] bridge_slave_0: entered allmulticast mode [ 1162.470717][ T4173] bridge_slave_0: entered promiscuous mode [ 1162.516036][ T12] hsr_slave_0: left promiscuous mode [ 1162.530876][ T12] hsr_slave_1: left promiscuous mode [ 1162.531873][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1162.531895][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1162.560488][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1162.560513][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1162.605338][ T4295] netlink: 'syz.7.13384': attribute type 3 has an invalid length. [ 1162.605363][ T4295] netlink: 132 bytes leftover after parsing attributes in process `syz.7.13384'. [ 1162.632135][ T12] veth1_macvtap: left promiscuous mode [ 1162.632177][ T12] veth0_macvtap: left promiscuous mode [ 1162.632286][ T12] veth1_vlan: left promiscuous mode [ 1162.632359][ T12] veth0_vlan: left promiscuous mode [ 1163.597670][T24203] Bluetooth: hci3: command tx timeout [ 1164.062322][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1164.100104][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1164.287907][ T4173] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.288108][ T4173] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.288266][ T4173] bridge_slave_1: entered allmulticast mode [ 1164.290175][ T4173] bridge_slave_1: entered promiscuous mode [ 1164.365724][ T5297] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1164.454904][ T4173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1164.469536][ T4173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1164.560022][ T4173] team0: Port device team_slave_0 added [ 1164.566187][ T4173] team0: Port device team_slave_1 added [ 1164.666750][ T4173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1164.666769][ T4173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1164.666798][ T4173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1164.669091][ T4173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1164.669108][ T4173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1164.669136][ T4173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1164.856524][ T4173] hsr_slave_0: entered promiscuous mode [ 1164.858110][ T4173] hsr_slave_1: entered promiscuous mode [ 1164.858879][ T4173] debugfs: 'hsr0' already exists in 'hsr' [ 1164.858899][ T4173] Cannot create hsr debugfs directory [ 1165.160096][ T4173] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1165.178694][ T4173] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1165.179961][ T4173] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1165.198934][ T4173] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1165.204076][ T4173] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1165.224249][ T4173] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1165.234472][ T4173] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1165.250177][ T4173] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1165.479131][ T4173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1165.525748][ T4173] 8021q: adding VLAN 0 to HW filter on device team0 [ 1165.543434][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1165.543549][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1165.579977][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1165.580090][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1165.648410][ T5297] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1165.676748][T24203] Bluetooth: hci3: command tx timeout [ 1166.505564][ T4173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1166.772202][ T5297] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1167.111961][ T4173] veth0_vlan: entered promiscuous mode [ 1167.128173][ T4173] veth1_vlan: entered promiscuous mode [ 1167.169618][ T4173] veth0_macvtap: entered promiscuous mode [ 1167.175279][ T4173] veth1_macvtap: entered promiscuous mode [ 1167.212337][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1167.234005][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1167.316952][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.320283][T28213] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.329271][ T63] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.331530][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.478732][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1167.478756][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1167.575548][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1167.575572][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1167.844007][ T5297] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1168.714737][ T4413] rxe_eth0 speed is unknown, defaulting to 1000 [ 1168.953486][ T4419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13391'. [ 1169.669218][ T4432] netlink: 'syz.7.13400': attribute type 1 has an invalid length. [ 1169.880329][ T5655] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1169.884959][ T5655] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1169.885742][ T5655] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1169.910953][ T5655] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1169.913427][ T5655] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1171.441985][ T4439] rxe_eth0 speed is unknown, defaulting to 1000 [ 1171.792433][ T13] bridge_slave_1: left allmulticast mode [ 1171.792461][ T13] bridge_slave_1: left promiscuous mode [ 1171.792698][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.822928][ T13] bridge_slave_0: left allmulticast mode [ 1171.822954][ T13] bridge_slave_0: left promiscuous mode [ 1171.829176][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.996898][T24203] Bluetooth: hci1: command tx timeout [ 1173.263602][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1173.284875][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1173.292293][ T13] bond0 (unregistering): Released all slaves [ 1174.078323][T24203] Bluetooth: hci1: command tx timeout [ 1176.156529][T24203] Bluetooth: hci1: command tx timeout [ 1176.785523][ T13] hsr_slave_0: left promiscuous mode [ 1176.844611][ T13] hsr_slave_1: left promiscuous mode [ 1176.861966][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1176.906062][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1177.541017][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.541089][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.236449][T24203] Bluetooth: hci1: command tx timeout [ 1180.350403][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1180.541423][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1181.095596][ T5297] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1181.560887][ T4439] bridge0: port 1(bridge_slave_0) entered blocking state [ 1181.563112][ T4439] bridge0: port 1(bridge_slave_0) entered disabled state [ 1181.563290][ T4439] bridge_slave_0: entered allmulticast mode [ 1181.594505][ T4439] bridge_slave_0: entered promiscuous mode [ 1181.615916][ T4439] bridge0: port 2(bridge_slave_1) entered blocking state [ 1181.620628][ T4439] bridge0: port 2(bridge_slave_1) entered disabled state [ 1181.620804][ T4439] bridge_slave_1: entered allmulticast mode [ 1181.655387][ T4439] bridge_slave_1: entered promiscuous mode [ 1181.748036][ T4439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1181.751692][ T4439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1181.972637][ T4439] team0: Port device team_slave_0 added [ 1182.002089][ T4439] team0: Port device team_slave_1 added [ 1182.241454][ T4439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1182.241474][ T4439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1182.241500][ T4439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1182.245679][ T4439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1182.245697][ T4439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1182.245724][ T4439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1182.595258][ T5297] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1182.910359][ T4439] hsr_slave_0: entered promiscuous mode [ 1182.913755][ T4439] hsr_slave_1: entered promiscuous mode [ 1182.914580][ T4439] debugfs: 'hsr0' already exists in 'hsr' [ 1182.914601][ T4439] Cannot create hsr debugfs directory [ 1184.513880][ T5297] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1184.596975][ T4439] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1184.612061][ T4439] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1184.626594][ T4439] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1184.633675][ T4439] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1184.655015][ T4439] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1184.671354][ T4439] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1184.672334][ T4439] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1184.687492][ T4439] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1184.862262][ T4439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1184.902446][ T4439] 8021q: adding VLAN 0 to HW filter on device team0 [ 1184.916375][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.916486][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1184.949579][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1184.949691][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1185.670761][ T5297] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1185.807338][ T4686] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1185.807358][ T4686] IPv6: NLM_F_CREATE should be set when creating new route [ 1185.807407][ T4686] IPv6: NLM_F_CREATE should be set when creating new route [ 1185.807442][ T4686] IPv6: NLM_F_CREATE should be set when creating new route [ 1186.124485][ T5655] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1186.145983][ T5655] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1186.154513][ T5655] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1186.163859][ T5655] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1186.173773][ T5655] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1186.711640][ T4439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1186.917695][ T4439] veth0_vlan: entered promiscuous mode [ 1186.965765][ T4439] veth1_vlan: entered promiscuous mode [ 1187.145427][ T4439] veth0_macvtap: entered promiscuous mode [ 1187.176354][ T4439] veth1_macvtap: entered promiscuous mode [ 1187.459832][ T4439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1187.514230][ T4439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1187.568245][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.569144][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.569182][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.569215][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.710557][ T4727] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13462'. [ 1187.754787][ T3464] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.961567][ T3464] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.036126][ T3526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1188.036150][ T3526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1188.039939][ T4694] rxe_eth0 speed is unknown, defaulting to 1000 [ 1188.196189][ T4735] ebt_limit: overflow, try lower: 0/0 [ 1188.237042][T24203] Bluetooth: hci5: command tx timeout [ 1189.100494][ T3464] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.214367][ T3526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1189.214390][ T3526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1189.428963][ T3464] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.617318][ T4756] netlink: 'syz.2.13468': attribute type 153 has an invalid length. [ 1190.018069][ T4770] ebt_limit: overflow, try lower: 0/0 [ 1190.141484][ T3464] bridge_slave_1: left allmulticast mode [ 1190.141514][ T3464] bridge_slave_1: left promiscuous mode [ 1190.141785][ T3464] bridge0: port 2(bridge_slave_1) entered disabled state [ 1190.185453][ T3464] bridge_slave_0: left allmulticast mode [ 1190.185485][ T3464] bridge_slave_0: left promiscuous mode [ 1190.185751][ T3464] bridge0: port 1(bridge_slave_0) entered disabled state [ 1190.339530][T24203] Bluetooth: hci5: command tx timeout [ 1192.202652][ T3464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1192.261695][ T3464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1192.283476][ T3464] bond0 (unregistering): Released all slaves [ 1192.396484][T24203] Bluetooth: hci5: command tx timeout [ 1192.465013][ T3464] : left promiscuous mode [ 1192.519308][ T4829] netlink: 'syz.1.13483': attribute type 21 has an invalid length. [ 1192.555049][ T4830] netlink: 28 bytes leftover after parsing attributes in process `syz.9.13484'. [ 1194.033171][ T3464] team0: Port device wlan0 removed [ 1194.476508][T24203] Bluetooth: hci5: command tx timeout [ 1194.530154][ T4874] netlink: 5108 bytes leftover after parsing attributes in process `syz.0.13503'. [ 1194.530184][ T4874] netlink: 5108 bytes leftover after parsing attributes in process `syz.0.13503'. [ 1194.815876][ T4884] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13495'. [ 1194.831846][ T4694] bridge0: port 1(bridge_slave_0) entered blocking state [ 1194.832002][ T4694] bridge0: port 1(bridge_slave_0) entered disabled state [ 1194.832137][ T4694] bridge_slave_0: entered allmulticast mode [ 1194.866173][ T4694] bridge_slave_0: entered promiscuous mode [ 1194.890718][ T4694] bridge0: port 2(bridge_slave_1) entered blocking state [ 1194.891657][ T4694] bridge0: port 2(bridge_slave_1) entered disabled state [ 1194.892766][ T4694] bridge_slave_1: entered allmulticast mode [ 1194.928373][ T4694] bridge_slave_1: entered promiscuous mode [ 1195.051212][ T4892] netlink: 14 bytes leftover after parsing attributes in process `syz.9.13499'. [ 1195.246209][ T3464] hsr_slave_0: left promiscuous mode [ 1195.272251][ T3464] hsr_slave_1: left promiscuous mode [ 1195.285096][ T3464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1195.285136][ T3464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1195.323010][ T3464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1195.323047][ T3464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1195.387735][ T3464] veth1_macvtap: left promiscuous mode [ 1195.387887][ T3464] veth0_macvtap: left promiscuous mode [ 1195.388241][ T3464] veth1_vlan: left promiscuous mode [ 1195.388449][ T3464] veth0_vlan: left promiscuous mode [ 1196.187276][ T3464] team0 (unregistering): Port device team_slave_1 removed [ 1196.214829][ T3464] team0 (unregistering): Port device team_slave_0 removed [ 1196.349920][ T4694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1196.361328][ T4694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1196.550946][ T4694] team0: Port device team_slave_0 added [ 1196.666152][ T4694] team0: Port device team_slave_1 added [ 1197.380738][ T4694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1197.380756][ T4694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1197.380785][ T4694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1197.405343][ T4694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1197.405396][ T4694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1197.405475][ T4694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1197.790818][ T4694] hsr_slave_0: entered promiscuous mode [ 1197.798669][ T4694] hsr_slave_1: entered promiscuous mode [ 1200.505141][ T4694] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1200.517591][ T4694] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1200.519033][ T4694] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1200.523132][ T4694] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1200.524536][ T4694] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1200.563860][ T4694] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1200.565273][ T4694] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1200.586899][ T4694] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1200.704162][ T4694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1200.730882][ T4694] 8021q: adding VLAN 0 to HW filter on device team0 [ 1200.746328][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1200.746439][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1200.765144][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1200.765441][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1201.376270][ T4694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1201.445417][ T4694] veth0_vlan: entered promiscuous mode [ 1201.463761][ T4694] veth1_vlan: entered promiscuous mode [ 1201.506106][ T4694] veth0_macvtap: entered promiscuous mode [ 1201.518401][ T4694] veth1_macvtap: entered promiscuous mode [ 1201.543642][ T4694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1201.561837][ T4694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1201.666455][ T2828] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.666505][ T2828] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.666542][ T2828] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.666578][ T2828] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.742383][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1201.742406][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1201.801727][ T2828] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1201.801751][ T2828] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1202.120053][ T5047] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.13530'. [ 1202.177077][ T5039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13531'. [ 1202.177178][ T5039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13531'. [ 1204.146107][ T5087] syzkaller0: tun_chr_ioctl cmd 35111 [ 1204.413514][ T5093] netlink: 'syz.0.13533': attribute type 2 has an invalid length. [ 1204.532021][ T5104] netlink: 'syz.1.13536': attribute type 10 has an invalid length. [ 1204.532051][ T5104] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13536'. [ 1205.410690][ T5127] netlink: 'syz.0.13545': attribute type 1 has an invalid length. [ 1207.129598][ T5196] netlink: 10 bytes leftover after parsing attributes in process `syz.0.13567'. [ 1210.463621][ T5266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13572'. [ 1210.463722][ T5266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13572'. [ 1210.599074][ T5273] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13574'. [ 1211.093769][ T5289] netlink: 'syz.0.13578': attribute type 3 has an invalid length. [ 1212.324193][ T5348] netlink: 'syz.1.13596': attribute type 17 has an invalid length. [ 1212.461604][ T5352] tap0: tun_chr_ioctl cmd 1074025677 [ 1212.461631][ T5352] tap0: Linktype set failed because interface is up [ 1212.488112][ T1127] tap0: tun_net_xmit 90 [ 1214.062552][ T5297] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1215.763908][ T5459] netlink: 'syz.2.13630': attribute type 10 has an invalid length. [ 1215.763942][ T5459] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13630'. [ 1215.764508][ T5459] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1216.624314][ T5297] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1217.221628][ T5496] netlink: 64 bytes leftover after parsing attributes in process `syz.3.13643'. [ 1217.406638][ T5510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13647'. [ 1218.645332][ T5523] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.13649'. [ 1218.746878][T24203] Bluetooth: hci4: Malformed Event: 0x02 [ 1219.075348][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.303071][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.422631][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.623582][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.905242][ T5655] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1219.916703][ T5655] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1219.917659][ T5655] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1219.922893][ T5655] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1219.925179][ T5655] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1220.637773][ T5297] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1220.830774][ T12] bridge_slave_1: left allmulticast mode [ 1220.830804][ T12] bridge_slave_1: left promiscuous mode [ 1220.831080][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1220.885749][ T12] bridge_slave_0: left allmulticast mode [ 1220.887905][ T12] bridge_slave_0: left promiscuous mode [ 1220.888170][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1221.354119][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1221.370596][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1221.373736][ T12] bond0 (unregistering): Released all slaves [ 1222.350375][ T5557] rxe_eth0 speed is unknown, defaulting to 1000 [ 1222.469360][ T5655] Bluetooth: hci1: command tx timeout [ 1224.807958][ T5655] Bluetooth: hci1: command tx timeout [ 1225.002100][ T5648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13680'. [ 1225.704298][ T5297] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1226.813892][ T5655] Bluetooth: hci1: command tx timeout [ 1228.932017][ T5655] Bluetooth: hci1: command tx timeout [ 1231.056974][ T5657] mac80211_hwsim hwsim8 ..ãc¤±: renamed from wlan1 [ 1240.820280][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.820350][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1246.069136][ T5655] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1247.255831][ T5655] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1248.566400][ T5655] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1250.338788][ T5690] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1250.342279][ T5703] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1250.343575][ T5703] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1250.346937][ T5690] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1250.347181][ T5704] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1250.347774][ T5704] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1250.356275][T24203] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1250.357730][ T5704] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1250.359779][ T5704] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1250.360246][ T5704] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1250.360853][ T5704] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1250.399176][ T5655] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1251.975329][ T5557] bridge0: port 1(bridge_slave_0) entered blocking state [ 1251.975442][ T5557] bridge0: port 1(bridge_slave_0) entered disabled state [ 1251.975604][ T5557] bridge_slave_0: entered allmulticast mode [ 1251.998379][ T5557] bridge_slave_0: entered promiscuous mode [ 1252.008264][ T5557] bridge0: port 2(bridge_slave_1) entered blocking state [ 1252.008412][ T5557] bridge0: port 2(bridge_slave_1) entered disabled state [ 1252.008555][ T5557] bridge_slave_1: entered allmulticast mode [ 1252.011323][ T5557] bridge_slave_1: entered promiscuous mode [ 1252.812284][ T5557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1252.836379][ T5557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1253.012001][ T12] hsr_slave_0: left promiscuous mode [ 1253.012928][ T12] hsr_slave_1: left promiscuous mode [ 1253.013894][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1253.013916][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1253.015081][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1253.015100][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1253.022841][ T12] veth1_macvtap: left promiscuous mode [ 1253.022877][ T12] veth0_macvtap: left promiscuous mode [ 1253.023029][ T12] veth1_vlan: left promiscuous mode [ 1253.023097][ T12] veth0_vlan: left promiscuous mode [ 1253.148756][ T5704] Bluetooth: hci7: command tx timeout [ 1253.149403][ T5704] Bluetooth: hci6: command tx timeout [ 1253.149633][ T5704] Bluetooth: hci2: command tx timeout [ 1253.828254][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1253.836570][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1254.263924][ T5557] team0: Port device team_slave_0 added [ 1254.277663][ T5557] team0: Port device team_slave_1 added [ 1254.402033][ T5674] rxe_eth0 speed is unknown, defaulting to 1000 [ 1254.417463][ T5557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1254.417482][ T5557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1254.417511][ T5557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1254.470661][ T5557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1254.470681][ T5557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1254.470710][ T5557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1254.730896][ T5557] hsr_slave_0: entered promiscuous mode [ 1254.731953][ T5557] hsr_slave_1: entered promiscuous mode [ 1254.732762][ T5557] debugfs: 'hsr0' already exists in 'hsr' [ 1254.732782][ T5557] Cannot create hsr debugfs directory [ 1255.350418][ T5655] Bluetooth: hci2: command tx timeout [ 1255.350458][ T5655] Bluetooth: hci6: command tx timeout [ 1255.350483][ T5655] Bluetooth: hci7: command tx timeout [ 1255.811518][ T5685] rxe_eth0 speed is unknown, defaulting to 1000 [ 1256.816871][ T5693] rxe_eth0 speed is unknown, defaulting to 1000 [ 1257.358266][ T5704] Bluetooth: hci7: command tx timeout [ 1257.358305][ T5704] Bluetooth: hci6: command tx timeout [ 1257.358329][ T5704] Bluetooth: hci2: command tx timeout [ 1257.990113][ T5674] bridge0: port 1(bridge_slave_0) entered blocking state [ 1257.990307][ T5674] bridge0: port 1(bridge_slave_0) entered disabled state [ 1257.990461][ T5674] bridge_slave_0: entered allmulticast mode [ 1257.995736][ T5674] bridge_slave_0: entered promiscuous mode [ 1258.036775][ T5674] bridge0: port 2(bridge_slave_1) entered blocking state [ 1258.036892][ T5674] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.037061][ T5674] bridge_slave_1: entered allmulticast mode [ 1258.042226][ T5674] bridge_slave_1: entered promiscuous mode [ 1258.251903][ T5674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1258.254874][ T5674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1258.783184][ T5674] team0: Port device team_slave_0 added [ 1258.824924][ T5674] team0: Port device team_slave_1 added [ 1259.126330][ T5674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1259.126350][ T5674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1259.126379][ T5674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1259.129661][ T5685] bridge0: port 1(bridge_slave_0) entered blocking state [ 1259.132060][ T5685] bridge0: port 1(bridge_slave_0) entered disabled state [ 1259.132217][ T5685] bridge_slave_0: entered allmulticast mode [ 1259.135595][ T5685] bridge_slave_0: entered promiscuous mode [ 1259.221850][ T5674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1259.221868][ T5674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1259.221895][ T5674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1259.297857][ T5685] bridge0: port 2(bridge_slave_1) entered blocking state [ 1259.297989][ T5685] bridge0: port 2(bridge_slave_1) entered disabled state [ 1259.298432][ T5685] bridge_slave_1: entered allmulticast mode [ 1259.304813][ T5685] bridge_slave_1: entered promiscuous mode [ 1259.384895][ T5685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1259.427988][ T5674] hsr_slave_0: entered promiscuous mode [ 1259.429080][ T5674] hsr_slave_1: entered promiscuous mode [ 1259.429836][ T5674] debugfs: 'hsr0' already exists in 'hsr' [ 1259.429857][ T5674] Cannot create hsr debugfs directory [ 1259.432963][ T5685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1259.476997][ T5655] Bluetooth: hci2: command tx timeout [ 1259.477032][ T5655] Bluetooth: hci6: command tx timeout [ 1259.477056][ T5655] Bluetooth: hci7: command tx timeout [ 1260.298575][ T5685] team0: Port device team_slave_0 added [ 1260.301676][ T5685] team0: Port device team_slave_1 added [ 1261.307225][ T5685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1261.307246][ T5685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1261.307275][ T5685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1261.381181][ T5685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1261.381198][ T5685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1261.381221][ T5685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1261.780533][ T5685] hsr_slave_0: entered promiscuous mode [ 1261.781350][ T5685] hsr_slave_1: entered promiscuous mode [ 1261.781898][ T5685] debugfs: 'hsr0' already exists in 'hsr' [ 1261.781918][ T5685] Cannot create hsr debugfs directory [ 1261.831978][ T5693] bridge0: port 1(bridge_slave_0) entered blocking state [ 1261.832094][ T5693] bridge0: port 1(bridge_slave_0) entered disabled state [ 1261.832249][ T5693] bridge_slave_0: entered allmulticast mode [ 1261.834113][ T5693] bridge_slave_0: entered promiscuous mode [ 1261.863897][ T5693] bridge0: port 2(bridge_slave_1) entered blocking state [ 1261.864049][ T5693] bridge0: port 2(bridge_slave_1) entered disabled state [ 1261.864212][ T5693] bridge_slave_1: entered allmulticast mode [ 1261.866155][ T5693] bridge_slave_1: entered promiscuous mode [ 1261.987185][ T5693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1261.995559][ T5693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1262.088916][ T5693] team0: Port device team_slave_0 added [ 1262.095237][ T5693] team0: Port device team_slave_1 added [ 1262.184760][ T5693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1262.184788][ T5693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1262.184817][ T5693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1262.236993][ T5693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1262.237018][ T5693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1262.237047][ T5693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1262.418616][ T5693] hsr_slave_0: entered promiscuous mode [ 1262.419794][ T5693] hsr_slave_1: entered promiscuous mode [ 1262.420635][ T5693] debugfs: 'hsr0' already exists in 'hsr' [ 1262.420657][ T5693] Cannot create hsr debugfs directory [ 1263.214961][ T5557] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1263.501673][ T5557] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1263.505071][ T5557] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1263.533371][ T5557] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1263.961477][ T5557] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1263.967198][ T5557] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1263.983494][ T5557] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1264.250203][ T5557] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1264.295572][ T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.487571][ T5557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1264.514904][ T5557] 8021q: adding VLAN 0 to HW filter on device team0 [ 1264.529827][ T2828] bridge0: port 1(bridge_slave_0) entered blocking state [ 1264.529944][ T2828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1264.554260][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 1264.554373][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1265.461764][ T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.196992][ T5557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1266.939777][ T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.289183][ T5557] veth0_vlan: entered promiscuous mode [ 1267.303639][ T5557] veth1_vlan: entered promiscuous mode [ 1267.344222][ T5557] veth0_macvtap: entered promiscuous mode [ 1267.356238][ T5557] veth1_macvtap: entered promiscuous mode [ 1267.388147][ T5557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1267.406487][ T5557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1267.617380][ T3526] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.619005][ T3526] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.619083][ T3526] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.621904][ T3526] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.751134][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1267.751157][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1267.864156][ T3464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1267.864180][ T3464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1268.548640][ T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.984474][ T5845] netlink: 'syz.3.13698': attribute type 3 has an invalid length. [ 1268.984498][ T5845] netlink: 'syz.3.13698': attribute type 1 has an invalid length. [ 1268.984512][ T5845] netlink: 128 bytes leftover after parsing attributes in process `syz.3.13698'. [ 1272.023408][ T5674] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1272.032597][ T5674] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1272.033742][ T5674] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1272.039449][ T5674] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1272.567004][ T5674] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1272.571311][ T5674] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1272.572853][ T5674] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1272.576446][ T5674] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1272.826704][ T5674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1272.874721][ T5674] 8021q: adding VLAN 0 to HW filter on device team0 [ 1272.971780][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 1272.971888][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1273.033236][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 1273.033373][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1275.623118][ T12] batman_adv: batadv0: Removing interface: netdevsim1 [ 1276.124785][ T5674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1277.165424][ T5674] veth0_vlan: entered promiscuous mode [ 1277.191361][ T5674] veth1_vlan: entered promiscuous mode [ 1277.265604][ T5674] veth0_macvtap: entered promiscuous mode [ 1277.283507][ T5674] veth1_macvtap: entered promiscuous mode [ 1277.328883][ T5674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1277.354018][ T5674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1277.562479][ T3464] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.132872][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1278.132896][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1278.250764][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1278.250788][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1278.462488][ T3464] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.496678][ T3464] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.496773][ T3464] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.893567][ T5655] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1278.900607][ T5655] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1278.916087][ T5655] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1278.925731][ T5655] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1278.935177][ T5655] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1279.886295][ T5962] netlink: 'syz.4.13709': attribute type 16 has an invalid length. [ 1279.886342][ T5962] netlink: 'syz.4.13709': attribute type 17 has an invalid length. [ 1279.886460][ T5962] lo: entered allmulticast mode [ 1279.893584][ T5962] tunl0: entered allmulticast mode [ 1279.898835][ T5962] gre0: entered allmulticast mode [ 1279.904729][ T5962] gretap0: entered allmulticast mode [ 1279.938955][ T5962] erspan0: entered allmulticast mode [ 1280.024629][ T5962] ip_vti0: entered allmulticast mode [ 1280.043346][ T5962] ip6_vti0: entered allmulticast mode [ 1280.076827][ T5962] sit0: entered allmulticast mode [ 1280.097764][ T5962] ip6tnl0: entered allmulticast mode [ 1280.114677][ T5962] ip6gre0: entered allmulticast mode [ 1280.127638][ T5962] syz_tun: entered allmulticast mode [ 1280.163963][ T5962] ip6gretap0: entered allmulticast mode [ 1280.185397][ T5962] bridge0: entered allmulticast mode [ 1280.211961][ T5962] vcan0: entered allmulticast mode [ 1280.229548][ T5962] bond0: entered allmulticast mode [ 1280.229599][ T5962] bond_slave_0: entered allmulticast mode [ 1280.231044][ T5962] bond_slave_1: entered allmulticast mode [ 1280.288213][ T5962] team0: entered allmulticast mode [ 1280.288258][ T5962] team_slave_0: entered allmulticast mode [ 1280.288332][ T5962] team_slave_1: entered allmulticast mode [ 1280.337636][ T5962] dummy0: entered allmulticast mode [ 1280.359810][ T5962] nlmon0: entered allmulticast mode [ 1280.391666][ T5962] batadv0: entered allmulticast mode [ 1280.425886][ T5962] vxcan0: entered allmulticast mode [ 1280.445249][ T5962] vxcan1: entered allmulticast mode [ 1280.463954][ T5962] veth0: entered allmulticast mode [ 1280.485254][ T5962] veth1: entered allmulticast mode [ 1280.497379][ T5962] wg0: entered allmulticast mode [ 1280.500720][ T5962] wg1: entered allmulticast mode [ 1280.504190][ T5962] wg2: entered allmulticast mode [ 1280.526149][ T5962] veth0_to_bridge: entered allmulticast mode [ 1280.548799][ T5962] veth1_to_bridge: entered allmulticast mode [ 1280.576404][ T5962] veth0_to_bond: entered allmulticast mode [ 1280.593171][ T5962] veth1_to_bond: entered allmulticast mode [ 1280.618421][ T5962] veth0_to_team: entered allmulticast mode [ 1280.637927][ T5962] veth1_to_team: entered allmulticast mode [ 1280.660984][ T5962] veth0_to_batadv: entered allmulticast mode [ 1280.682684][ T5962] batadv_slave_0: entered allmulticast mode [ 1280.703381][ T5962] veth1_to_batadv: entered allmulticast mode [ 1280.721599][ T5962] batadv_slave_1: entered allmulticast mode [ 1280.738006][ T5962] xfrm0: entered allmulticast mode [ 1280.744105][ T5962] veth0_to_hsr: entered allmulticast mode [ 1280.770361][ T5962] hsr_slave_0: entered allmulticast mode [ 1280.787265][ T5962] veth1_to_hsr: entered allmulticast mode [ 1280.795445][ T5962] hsr_slave_1: entered allmulticast mode [ 1280.812509][ T5962] hsr0: entered allmulticast mode [ 1280.815596][ T5962] veth1_virt_wifi: entered allmulticast mode [ 1280.830624][ T5962] veth0_virt_wifi: entered allmulticast mode [ 1280.834336][ T5962] virt_wifi0: entered allmulticast mode [ 1280.852049][ T5962] veth1_vlan: entered allmulticast mode [ 1280.855010][ T5962] veth0_vlan: entered allmulticast mode [ 1280.869992][ T5962] vlan0: entered allmulticast mode [ 1280.872925][ T5962] vlan1: entered allmulticast mode [ 1280.888368][ T5962] macvlan0: entered allmulticast mode [ 1280.891059][ T5962] macvlan1: entered allmulticast mode [ 1280.894089][ T5962] ipvlan0: entered allmulticast mode [ 1280.920512][ T5962] ipvlan1: entered allmulticast mode [ 1280.924763][ T5962] veth1_macvtap: entered allmulticast mode [ 1280.940871][ T5962] veth0_macvtap: entered allmulticast mode [ 1280.942861][ T5962] macvtap0: entered allmulticast mode [ 1280.963228][ T5962] macsec0: entered allmulticast mode [ 1280.964426][ T5962] geneve0: entered allmulticast mode [ 1280.981846][ T5962] geneve1: entered allmulticast mode [ 1280.984690][ T5962] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1281.002375][ T5962] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 1281.014105][ T5962] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 1281.024215][ T5962] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 1281.036534][ T5962] mac80211_hwsim hwsim103 wlan0: entered allmulticast mode [ 1281.039065][ T5962] mac80211_hwsim hwsim104 wlan1: entered allmulticast mode [ 1281.186306][ T5704] Bluetooth: hci0: command tx timeout [ 1282.609490][ T5704] Bluetooth: hci5: Unable to find connection for big 0x00 [ 1283.193550][ T5948] rxe_eth0 speed is unknown, defaulting to 1000 [ 1283.216672][ T5655] Bluetooth: hci0: command tx timeout [ 1285.574760][ T5655] Bluetooth: hci0: command tx timeout [ 1285.609969][ T6007] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13716'. [ 1287.610018][ T5655] Bluetooth: hci0: command tx timeout [ 1287.769039][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 1287.770800][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 1287.770977][ T5948] bridge_slave_0: entered allmulticast mode [ 1287.774887][ T5948] bridge_slave_0: entered promiscuous mode [ 1287.782726][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 1287.784470][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.784648][ T5948] bridge_slave_1: entered allmulticast mode [ 1287.789273][ T5948] bridge_slave_1: entered promiscuous mode [ 1287.972971][ T5948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1287.993706][ T5948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1288.517823][ T5948] team0: Port device team_slave_0 added [ 1288.527602][ T5948] team0: Port device team_slave_1 added [ 1289.095635][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1289.095654][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1289.095682][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1289.097677][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1289.097693][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1289.097721][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1289.144173][ T6027] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.13720'. [ 1289.925033][ T5948] hsr_slave_0: entered promiscuous mode [ 1289.926162][ T5948] hsr_slave_1: entered promiscuous mode [ 1289.926931][ T5948] debugfs: 'hsr0' already exists in 'hsr' [ 1289.926952][ T5948] Cannot create hsr debugfs directory [ 1296.905832][ T6103] netlink: 100 bytes leftover after parsing attributes in process `syz.3.13728'. [ 1300.490336][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.490400][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.503982][ T12] bridge_slave_1: left allmulticast mode [ 1300.504013][ T12] bridge_slave_1: left promiscuous mode [ 1300.504243][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1300.507323][ T12] bridge_slave_0: left allmulticast mode [ 1300.507347][ T12] bridge_slave_0: left promiscuous mode [ 1300.507549][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.122310][ T12] : left allmulticast mode [ 1301.122339][ T12] : left promiscuous mode [ 1301.122554][ T12] bridge0: port 2() entered disabled state [ 1301.509567][ T5704] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1301.512396][ T5704] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1301.514156][ T5704] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1301.525640][ T5704] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1301.527995][ T5704] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1301.542604][ T12] bridge_slave_0: left allmulticast mode [ 1301.542629][ T12] bridge_slave_0: left promiscuous mode [ 1301.542852][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1302.764295][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1302.782601][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1302.784029][ T12] bond0 (unregistering): Released all slaves [ 1303.118372][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1303.119835][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1303.121272][ T12] bond0 (unregistering): (slave team0): Releasing backup interface [ 1303.123597][ T12] bond0 (unregistering): Released all slaves [ 1303.727848][ T12] : left promiscuous mode [ 1304.385234][ T5704] Bluetooth: hci1: command tx timeout [ 1304.538005][ T6126] rxe_eth0 speed is unknown, defaulting to 1000 [ 1306.036212][ T6150] netlink: 'syz.3.13736': attribute type 4 has an invalid length. [ 1306.049468][ T6150] netlink: 'syz.3.13736': attribute type 7 has an invalid length. [ 1306.115349][ T6126] bridge0: port 1(bridge_slave_0) entered blocking state [ 1306.115544][ T6126] bridge0: port 1(bridge_slave_0) entered disabled state [ 1306.115690][ T6126] bridge_slave_0: entered allmulticast mode [ 1306.138296][ T6126] bridge_slave_0: entered promiscuous mode [ 1306.148466][ T6126] bridge0: port 2(bridge_slave_1) entered blocking state [ 1306.148667][ T6126] bridge0: port 2(bridge_slave_1) entered disabled state [ 1306.148816][ T6126] bridge_slave_1: entered allmulticast mode [ 1306.150868][ T6126] bridge_slave_1: entered promiscuous mode [ 1306.221042][ T6126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1306.224786][ T6126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1306.277752][ T6126] team0: Port device team_slave_0 added [ 1306.282376][ T6126] team0: Port device team_slave_1 added [ 1306.323560][ T6126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1306.323580][ T6126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1306.323608][ T6126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1306.325736][ T6126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1306.325750][ T6126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1306.325778][ T6126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1306.470500][ T6126] hsr_slave_0: entered promiscuous mode [ 1306.471658][ T6126] hsr_slave_1: entered promiscuous mode [ 1306.472486][ T6126] debugfs: 'hsr0' already exists in 'hsr' [ 1306.472507][ T6126] Cannot create hsr debugfs directory [ 1306.716706][ T5704] Bluetooth: hci1: command tx timeout [ 1307.763416][ T5655] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1307.764952][ T5655] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1307.765714][ T5655] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1307.788266][ T5655] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1307.788950][ T5655] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1308.727507][ T6159] rxe_eth0 speed is unknown, defaulting to 1000 [ 1308.996994][ T5704] Bluetooth: hci1: command tx timeout [ 1309.867389][ T5704] Bluetooth: hci2: command tx timeout [ 1311.087817][ T5655] Bluetooth: hci1: command tx timeout [ 1311.301416][ T5703] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1311.323396][ T5703] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1311.325352][ T5703] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1311.341218][ T5703] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1311.341902][ T5703] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1311.542189][ T6159] bridge0: port 1(bridge_slave_0) entered blocking state [ 1311.544486][ T6159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1311.544665][ T6159] bridge_slave_0: entered allmulticast mode [ 1311.572642][ T6159] bridge_slave_0: entered promiscuous mode [ 1311.585170][ T6159] bridge0: port 2(bridge_slave_1) entered blocking state [ 1311.585373][ T6159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.585833][ T6159] bridge_slave_1: entered allmulticast mode [ 1311.613744][ T6159] bridge_slave_1: entered promiscuous mode [ 1311.755104][ T6159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1311.771622][ T6159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1311.896179][ T6159] team0: Port device team_slave_0 added [ 1311.914420][ T6159] team0: Port device team_slave_1 added [ 1311.937578][ T5703] Bluetooth: hci2: command tx timeout [ 1312.010948][ T6159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1312.010968][ T6159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1312.010996][ T6159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1312.066423][ T6159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1312.066441][ T6159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1312.066471][ T6159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1312.868748][ T6159] hsr_slave_0: entered promiscuous mode [ 1312.873228][ T6159] hsr_slave_1: entered promiscuous mode [ 1312.875680][ T6159] debugfs: 'hsr0' already exists in 'hsr' [ 1312.875702][ T6159] Cannot create hsr debugfs directory [ 1313.067091][ T5703] Bluetooth: hci5: command 0x0406 tx timeout [ 1313.324414][ T6202] rxe_eth0 speed is unknown, defaulting to 1000 [ 1313.356550][ T5703] Bluetooth: hci3: command tx timeout [ 1314.027284][ T5704] Bluetooth: hci2: command tx timeout [ 1315.160532][ T6202] bridge0: port 1(bridge_slave_0) entered blocking state [ 1315.160755][ T6202] bridge0: port 1(bridge_slave_0) entered disabled state [ 1315.160947][ T6202] bridge_slave_0: entered allmulticast mode [ 1315.163512][ T6202] bridge_slave_0: entered promiscuous mode [ 1315.205109][ T6202] bridge0: port 2(bridge_slave_1) entered blocking state [ 1315.205326][ T6202] bridge0: port 2(bridge_slave_1) entered disabled state [ 1315.205942][ T6202] bridge_slave_1: entered allmulticast mode [ 1315.229985][ T6202] bridge_slave_1: entered promiscuous mode [ 1315.822330][ T5704] Bluetooth: hci3: command tx timeout [ 1316.081956][ T5703] Bluetooth: hci2: command tx timeout [ 1316.840238][ T6202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1316.843589][ T6202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1317.586947][ T6202] team0: Port device team_slave_0 added [ 1317.590075][ T6202] team0: Port device team_slave_1 added [ 1318.038026][ T6202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1318.038045][ T6202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1318.038076][ T6202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1318.040242][ T6202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1318.040258][ T6202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1318.040286][ T6202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1318.066784][ T5703] Bluetooth: hci3: command tx timeout [ 1318.281802][ T6202] hsr_slave_0: entered promiscuous mode [ 1318.284544][ T6202] hsr_slave_1: entered promiscuous mode [ 1318.285382][ T6202] debugfs: 'hsr0' already exists in 'hsr' [ 1318.285402][ T6202] Cannot create hsr debugfs directory [ 1320.422500][ T5703] Bluetooth: hci3: command tx timeout [ 1323.348172][ T6327] netlink: 'syz.3.13760': attribute type 2 has an invalid length. [ 1332.494924][ T5703] Bluetooth: hci5: unexpected event 0x04 length: 15 > 10 [ 1334.566784][ T5703] Bluetooth: hci5: command 0x0406 tx timeout [ 1417.552581][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1417.552650][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1495.809266][ C0] BUG: workqueue lockup - pool cpus=0-1 node=0 flags=0x4 nice=-20 stuck for 155s! [ 1495.809346][ C0] Showing busy workqueues and worker pools: [ 1495.809358][ C0] workqueue events: flags=0x100 [ 1495.809398][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=7 refcnt=8 [ 1495.809449][ C0] pending: 6*nsim_dev_hwstats_traffic_work, vmstat_shepherd [ 1495.809706][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=6 refcnt=7 [ 1495.809751][ C0] pending: 3*nsim_dev_hwstats_traffic_work, psi_avgs_work, switchdev_deferred_process_work, rht_deferred_worker [ 1495.810007][ C0] workqueue events_long: flags=0x100 [ 1495.810021][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1495.810065][ C0] pending: br_multicast_gc_work [ 1495.810161][ C0] workqueue events_unbound: flags=0x2 [ 1495.810173][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=30 refcnt=31 [ 1495.810212][ C0] in-flight: 3464:linkwatch_event for 163s ,63:toggle_allocation_gate for 155s ,4563:idle_cull_fn for 160s idle_cull_fn ,316:cfg80211_wiphy_work for 155s ,21043:cfg80211_wiphy_work for 78s [ 1495.810553][ C0] pending: 4*cfg80211_wiphy_work, 8*nsim_dev_trap_report_work, macvlan_process_broadcast, flush_memcg_stats_dwork, cfg80211_wiphy_work, 3*macvlan_process_broadcast, 5*cfg80211_wiphy_work, nsim_dev_trap_report_work [ 1495.810788][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=6 refcnt=7 [ 1495.810826][ C0] in-flight: 31:idle_cull_fn for 155s [ 1495.810884][ C0] pending: crng_reseed, macvlan_process_broadcast, idle_cull_fn, 2*macvlan_process_broadcast [ 1495.811031][ C0] workqueue events_freezable: flags=0x104 [ 1495.811043][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1495.811157][ C0] pending: update_balloon_stats_func [ 1495.811272][ C0] workqueue events_power_efficient: flags=0x180 [ 1495.811286][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=32 refcnt=33 [ 1495.811330][ C0] in-flight: 16957:neigh_periodic_work for 78s [ 1495.811402][ C0] pending: check_lifetime, 5*neigh_periodic_work, do_cache_clean, gc_worker, 4*check_lifetime, nf_flow_offload_work_gc, check_lifetime, hash_mac4_gc, check_lifetime, 14*neigh_periodic_work, check_lifetime [ 1495.811890][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=9 refcnt=10 [ 1495.811935][ C0] pending: wg_ratelimiter_gc_entries, hash_netportnet4_gc, 7*neigh_periodic_work [ 1495.812100][ C0] workqueue events_dfl_long: flags=0x2 [ 1495.812111][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=13 refcnt=14 [ 1495.812148][ C0] pending: 13*defense_work_handler [ 1495.812195][ C0] workqueue rcu_gp: flags=0x108 [ 1495.812206][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1495.812249][ C0] pending: process_srcu [ 1495.812295][ C0] workqueue kvfree_rcu_reclaim: flags=0xa [ 1495.812307][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1495.812345][ C0] pending: kfree_rcu_monitor [ 1495.812388][ C0] workqueue netns: flags=0x6000a [ 1495.812400][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=5 [ 1495.812435][ C0] in-flight: 12:cleanup_net for 232s [ 1495.812543][ C0] inactive: cleanup_net [ 1495.812591][ C0] workqueue mm_percpu_wq: flags=0x108 [ 1495.812602][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1495.812646][ C0] pending: vmstat_update [ 1495.812674][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1495.812717][ C0] pending: vmstat_update [ 1495.812745][ C0] workqueue writeback: flags=0x4a [ 1495.812756][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1495.812794][ C0] pending: wb_workfn [ 1495.812892][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1495.812930][ C0] pending: wb_update_bandwidth_workfn [ 1495.812966][ C0] workqueue kblockd: flags=0x118 [ 1495.812976][ C0] pwq 3: cpus=0 node=0 flags=0x0 nice=-20 active=1 refcnt=2 [ 1495.813014][ C0] pending: blk_mq_timeout_work [ 1495.813072][ C0] pwq 7: cpus=1 node=0 flags=0x0 nice=-20 active=1 refcnt=2 [ 1495.813113][ C0] pending: blk_mq_requeue_work [ 1495.813147][ C0] workqueue ipv6_addrconf: flags=0x6000a [ 1495.813157][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=14 [ 1495.813193][ C0] pending: addrconf_verify_work [ 1495.813277][ C0] inactive: 10*addrconf_verify_work [ 1495.813317][ C0] workqueue ksmbd-conn-release: flags=0xa [ 1495.813330][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1495.813370][ C0] pending: ksmbd_session_expiration_worker [ 1495.813507][ C0] workqueue krxrpcd: flags=0x2001a [ 1495.813521][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=13 [ 1495.813565][ C0] pending: rxrpc_peer_keepalive_worker [ 1495.813664][ C0] inactive: 9*rxrpc_peer_keepalive_worker [ 1495.813712][ C0] workqueue bat_events: flags=0x6000a [ 1495.813724][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=85 [ 1495.813764][ C0] pending: batadv_iv_send_outstanding_bat_ogm_packet [ 1495.813866][ C0] inactive: 3*batadv_iv_send_outstanding_bat_ogm_packet, batadv_tt_purge, 11*batadv_mcast_mla_update, batadv_iv_send_outstanding_bat_ogm_packet, 10*batadv_purge_orig, 4*batadv_iv_send_outstanding_bat_ogm_packet, batadv_purge_orig, 15*batadv_iv_send_outstanding_bat_ogm_packet, batadv_bla_periodic_work, 3*batadv_iv_send_outstanding_bat_ogm_packet, 3*batadv_tt_purge, batadv_dat_purge, 2*batadv_tt_purge, batadv_dat_purge, batadv_bla_periodic_work, batadv_tt_purge, batadv_bla_periodic_work, 2*batadv_tt_purge, 3*batadv_dat_purge, 2*batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, 2*batadv_dat_purge, 2*batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, batadv_tt_purge, batadv_dat_purge, batadv_bla_periodic_work, batadv_tt_purge [ 1495.814750][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1495.814763][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1495.814803][ C0] pending: wg_packet_handshake_send_worker [ 1495.814838][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1495.814879][ C0] pending: wg_packet_handshake_send_worker [ 1495.814914][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 1495.814926][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1495.814972][ C0] pending: wg_packet_tx_worker [ 1495.815007][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1495.815018][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1495.815058][ C0] pending: wg_packet_handshake_send_worker [ 1495.815094][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 1495.815106][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1495.815151][ C0] pending: wg_packet_tx_worker [ 1495.815185][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1495.815195][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1495.815235][ C0] pending: wg_packet_handshake_send_worker [ 1495.815271][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 1495.815283][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1495.815328][ C0] pending: wg_packet_tx_worker [ 1495.815364][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1495.815375][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1495.815415][ C0] pending: wg_packet_handshake_send_worker [ 1495.815449][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1495.815489][ C0] pending: wg_packet_handshake_send_worker [ 1495.815525][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 1495.815537][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 1495.815581][ C0] pending: wg_packet_tx_worker, wg_packet_decrypt_worker [ 1495.815640][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1495.815651][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1495.815690][ C0] pending: wg_packet_handshake_send_worker [ 1495.815726][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 1495.815738][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 1495.815783][ C0] pending: wg_packet_tx_worker, wg_packet_encrypt_worker [ 1495.815834][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1495.815878][ C0] pending: wg_packet_tx_worker [ 1495.815909][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1495.815920][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1495.815979][ C0] pending: wg_packet_handshake_send_worker [ 1495.816014][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1495.816054][ C0] pending: wg_packet_handshake_send_worker [ 1495.816090][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 1495.816101][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 1495.816145][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 1495.816250][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1495.816263][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1495.816304][ C0] pending: wg_packet_handshake_send_worker [ 1495.816340][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 1495.816351][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 1495.816396][ C0] pending: wg_packet_tx_worker, wg_packet_decrypt_worker [ 1495.816448][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1495.816492][ C0] pending: wg_packet_encrypt_worker [ 1495.816523][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1495.816536][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1495.816576][ C0] pending: wg_packet_handshake_send_worker [ 1495.816617][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 1495.816629][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1495.816673][ C0] pending: wg_packet_tx_worker [ 1495.816707][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1495.816719][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1495.816759][ C0] pending: wg_packet_handshake_send_worker [ 1495.816793][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 1495.816805][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 1495.816849][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 1495.816901][ C0] workqueue hci7: flags=0x20012 [ 1495.816913][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=4 [ 1495.816957][ C0] pending: hci_conn_timeout [ 1495.817029][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1495.817041][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1495.817080][ C0] pending: wg_packet_handshake_send_worker [ 1495.817115][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1495.817155][ C0] pending: wg_packet_handshake_send_worker [ 1495.817191][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 1495.817202][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 1495.817246][ C0] pending: wg_packet_tx_worker, wg_packet_decrypt_worker [ 1495.817299][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1495.817312][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1495.817352][ C0] pending: wg_packet_handshake_send_worker [ 1495.817387][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 1495.817398][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 1495.817442][ C0] pending: wg_packet_tx_worker, wg_packet_decrypt_worker [ 1495.817496][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1495.817509][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1495.817549][ C0] pending: wg_packet_handshake_send_worker [ 1495.817589][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 1495.817601][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1495.817646][ C0] pending: wg_packet_tx_worker [ 1495.817689][ C0] workqueue hci0: flags=0x20012 [ 1495.817700][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=4 [ 1495.817745][ C0] pending: hci_conn_timeout [ 1495.817776][ C0] workqueue hci1: flags=0x20012 [ 1495.817788][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=4 [ 1495.817832][ C0] pending: hci_conn_timeout [ 1495.817863][ C0] workqueue hci2: flags=0x20012 [ 1495.817875][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=4 [ 1495.817920][ C0] pending: hci_conn_timeout [ 1495.817947][ C0] workqueue hci3: flags=0x20012 [ 1495.817959][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=4 [ 1495.818003][ C0] pending: hci_conn_timeout [ 1495.818044][ C0] pool 2: cpus=0 node=0 flags=0x0 nice=0 hung=78s workers=8 idle: 1127 1154 1134 1152 1155 864 28215 [ 1495.818183][ C0] pool 6: cpus=1 node=0 flags=0x0 nice=0 hung=0s workers=9 idle: 21266 5701 323 315 318 26963 1133 [ 1495.818328][ C0] pool 8: cpus=0-1 flags=0x4 nice=0 hung=78s workers=14 idle: 13 3526 2828 3524 28213 21045 118 [ 1495.821568][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1495.821636][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1495.963910][ T33] INFO: task kworker/u8:0:12 blocked for more than 155 seconds. [ 1495.963941][ T33] Not tainted syzkaller #0 [ 1495.963959][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1495.963970][ T33] task:kworker/u8:0 state:D stack:21768 pid:12 tgid:12 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1495.964035][ T33] Workqueue: netns cleanup_net [ 1495.964078][ T33] Call Trace: [ 1495.964159][ T33] [ 1495.964208][ T33] __schedule+0x17dd/0x5830 [ 1495.964401][ T33] ? __pfx___schedule+0x10/0x10 [ 1495.964465][ T33] ? schedule+0x90/0x2b0 [ 1495.964508][ T33] ? schedule+0x90/0x2b0 [ 1495.964549][ T33] schedule+0x164/0x2b0 [ 1495.964589][ T33] schedule_preempt_disabled+0x13/0x30 [ 1495.964624][ T33] __mutex_lock+0x7c4/0x15a0 [ 1495.964656][ T33] ? __mutex_lock+0x5cd/0x15a0 [ 1495.964688][ T33] ? wiphy_unregister+0x26f/0xb30 [ 1495.964719][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 1495.964742][ T33] ? __up_read+0x29c/0x930 [ 1495.964787][ T33] ? __pfx___up_read+0x10/0x10 [ 1495.964845][ T33] wiphy_unregister+0x26f/0xb30 [ 1495.964873][ T33] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 1495.964935][ T33] ? __pfx_wiphy_unregister+0x10/0x10 [ 1495.964968][ T33] ? kasan_quarantine_put+0xbb/0x1f0 [ 1495.964999][ T33] ? lockdep_hardirqs_on+0x7b/0x110 [ 1495.965033][ T33] ? ieee80211_unregister_hw+0x150/0x2d0 [ 1495.965110][ T33] ieee80211_unregister_hw+0x1ee/0x2d0 [ 1495.965145][ T33] mac80211_hwsim_del_radio+0x31a/0x500 [ 1495.965200][ T33] ? trace_irq_disable+0x3b/0x140 [ 1495.965268][ T33] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 1495.965311][ T33] hwsim_exit_net+0xe91/0xf50 [ 1495.965341][ T33] ? hwsim_exit_net+0x326/0xf50 [ 1495.966944][ T33] ? __pfx_hwsim_exit_net+0x10/0x10 [ 1495.966989][ T33] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 1495.967027][ T33] ops_undo_list+0x451/0x8f0 [ 1495.967072][ T33] ? __pfx_ops_undo_list+0x10/0x10 [ 1495.967110][ T33] ? idr_destroy+0x227/0x290 [ 1495.967143][ T33] cleanup_net+0x572/0x810 [ 1495.967182][ T33] ? __pfx_cleanup_net+0x10/0x10 [ 1495.967224][ T33] ? rcu_is_watching+0x16/0xb0 [ 1495.967263][ T33] ? process_scheduled_works+0x97a/0x1630 [ 1495.967299][ T33] process_scheduled_works+0xc3d/0x1630 [ 1495.967382][ T33] ? __pfx_process_scheduled_works+0x10/0x10 [ 1495.967428][ T33] ? assign_work+0x3cf/0x5d0 [ 1495.967471][ T33] worker_thread+0xa47/0xfb0 [ 1495.967549][ T33] kthread+0x38b/0x480 [ 1495.967576][ T33] ? __pfx_worker_thread+0x10/0x10 [ 1495.967609][ T33] ? __pfx_kthread+0x10/0x10 [ 1495.967639][ T33] ret_from_fork+0x514/0xb70 [ 1495.967699][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 1495.967727][ T33] ? __switch_to+0xc78/0x1410 [ 1495.967768][ T33] ? __pfx_kthread+0x10/0x10 [ 1495.967798][ T33] ret_from_fork_asm+0x1a/0x30 [ 1495.967860][ T33] [ 1495.968009][ T33] INFO: task dhcpcd:5297 blocked for more than 155 seconds. [ 1495.968027][ T33] Not tainted syzkaller #0 [ 1495.968038][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1495.968049][ T33] task:dhcpcd state:D stack:21416 pid:5297 tgid:5297 ppid:5296 task_flags:0x400140 flags:0x00080000 [ 1495.968109][ T33] Call Trace: [ 1495.968117][ T33] [ 1495.968132][ T33] __schedule+0x17dd/0x5830 [ 1495.968190][ T33] ? perf_trace_lock+0x100/0x410 [ 1495.968241][ T33] ? __pfx___schedule+0x10/0x10 [ 1495.968279][ T33] ? schedule+0x90/0x2b0 [ 1495.968321][ T33] ? schedule+0x90/0x2b0 [ 1495.968362][ T33] schedule+0x164/0x2b0 [ 1495.968401][ T33] schedule_preempt_disabled+0x13/0x30 [ 1495.969984][ T33] __mutex_lock+0x7c4/0x15a0 [ 1495.970019][ T33] ? __mutex_lock+0x5cd/0x15a0 [ 1495.970052][ T33] ? inet_rtm_deladdr+0x1cd/0x7a0 [ 1495.970089][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 1495.970116][ T33] ? is_bpf_text_address+0x26/0x2b0 [ 1495.970164][ T33] ? __nla_parse+0x40/0x60 [ 1495.970251][ T33] inet_rtm_deladdr+0x1cd/0x7a0 [ 1495.970295][ T33] ? __pfx_perf_trace_lock+0x10/0x10 [ 1495.970328][ T33] ? __pfx_inet_rtm_deladdr+0x10/0x10 [ 1495.970396][ T33] ? __pfx_inet_rtm_deladdr+0x10/0x10 [ 1495.970427][ T33] rtnetlink_rcv_msg+0x802/0xc00 [ 1495.970472][ T33] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1495.970506][ T33] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1495.970544][ T33] ? __lock_acquire+0x747/0x2de0 [ 1495.970593][ T33] netlink_rcv_skb+0x226/0x4a0 [ 1495.970667][ T33] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1495.970706][ T33] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1495.970758][ T33] ? netlink_deliver_tap+0x2e/0x1b0 [ 1495.970788][ T33] ? netlink_deliver_tap+0x2e/0x1b0 [ 1495.970828][ T33] netlink_unicast+0x8ef/0xa80 [ 1495.970883][ T33] netlink_sendmsg+0x7f0/0xb20 [ 1495.970925][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1495.970968][ T33] ? aa_sock_msg_perm+0x144/0x210 [ 1495.971074][ T33] ? apparmor_socket_sendmsg+0x98/0x360 [ 1495.971110][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1495.971140][ T33] sock_sendmsg_nosec+0x14e/0x190 [ 1495.971197][ T33] ____sys_sendmsg+0x54e/0x850 [ 1495.971266][ T33] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1495.971318][ T33] ? import_iovec+0x73/0xa0 [ 1495.971374][ T33] ___sys_sendmsg+0x2a5/0x360 [ 1495.971406][ T33] ? __pfx____sys_sendmsg+0x10/0x10 [ 1495.973027][ T33] ? __pfx_perf_trace_lock+0x10/0x10 [ 1495.973059][ T33] ? lock_vma_under_rcu+0x45a/0x500 [ 1495.973100][ T33] __x64_sys_sendmsg+0x1b1/0x290 [ 1495.973129][ T33] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1495.973186][ T33] do_syscall_64+0x166/0x520 [ 1495.973210][ T33] ? trace_irq_disable+0x3b/0x140 [ 1495.973242][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.973290][ T33] ? clear_bhb_loop+0x70/0xc0 [ 1495.973321][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.973350][ T33] RIP: 0033:0x7f88e7af3407 [ 1495.973372][ T33] RSP: 002b:00007ffcbeb84fb0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 1495.973424][ T33] RAX: ffffffffffffffda RBX: 00007f88e7a69780 RCX: 00007f88e7af3407 [ 1495.973441][ T33] RDX: 0000000000000000 RSI: 00007ffcbeb99190 RDI: 0000000000000004 [ 1495.973456][ T33] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1495.973470][ T33] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffcbeba93c0 [ 1495.973485][ T33] R13: 00007f88e7a69708 R14: 0000000000000020 R15: 00007ffcbeb99190 [ 1495.973528][ T33] [ 1495.973571][ T33] INFO: task kworker/u8:10:3464 blocked for more than 155 seconds. [ 1495.973588][ T33] Not tainted syzkaller #0 [ 1495.973599][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1495.973610][ T33] task:kworker/u8:10 state:D stack:22400 pid:3464 tgid:3464 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1495.973670][ T33] Workqueue: events_unbound linkwatch_event [ 1495.973698][ T33] Call Trace: [ 1495.973706][ T33] [ 1495.973721][ T33] __schedule+0x17dd/0x5830 [ 1495.973801][ T33] ? __pfx___schedule+0x10/0x10 [ 1495.973850][ T33] ? schedule+0x90/0x2b0 [ 1495.973891][ T33] schedule+0x164/0x2b0 [ 1495.973931][ T33] schedule_preempt_disabled+0x13/0x30 [ 1495.973972][ T33] __mutex_lock+0x7c4/0x15a0 [ 1495.974004][ T33] ? __mutex_lock+0x5cd/0x15a0 [ 1495.974036][ T33] ? linkwatch_event+0xe/0x60 [ 1495.974067][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 1495.974094][ T33] ? lock_acquire+0x115/0x350 [ 1495.974137][ T33] ? rcu_is_watching+0x16/0xb0 [ 1495.974174][ T33] ? process_scheduled_works+0x97a/0x1630 [ 1495.974210][ T33] linkwatch_event+0xe/0x60 [ 1495.974236][ T33] process_scheduled_works+0xc3d/0x1630 [ 1495.974319][ T33] ? __pfx_process_scheduled_works+0x10/0x10 [ 1495.974364][ T33] ? assign_work+0x3cf/0x5d0 [ 1495.974407][ T33] worker_thread+0xa47/0xfb0 [ 1495.974465][ T33] ? __kthread_parkme+0x71/0x1f0 [ 1495.976085][ T33] kthread+0x38b/0x480 [ 1495.976118][ T33] ? __pfx_worker_thread+0x10/0x10 [ 1495.976189][ T33] ? __pfx_kthread+0x10/0x10 [ 1495.976220][ T33] ret_from_fork+0x514/0xb70 [ 1495.976253][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 1495.976280][ T33] ? __switch_to+0xc78/0x1410 [ 1495.976321][ T33] ? __pfx_kthread+0x10/0x10 [ 1495.976350][ T33] ret_from_fork_asm+0x1a/0x30 [ 1495.976402][ T33] [ 1495.976445][ T33] INFO: task syz-executor:5948 blocked for more than 198 seconds. [ 1495.976462][ T33] Not tainted syzkaller #0 [ 1495.976473][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1495.976484][ T33] task:syz-executor state:D stack:22344 pid:5948 tgid:5948 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1495.976544][ T33] Call Trace: [ 1495.976551][ T33] [ 1495.976567][ T33] __schedule+0x17dd/0x5830 [ 1495.976631][ T33] ? register_lock_class+0x31/0x2e0 [ 1495.976672][ T33] ? __pfx___schedule+0x10/0x10 [ 1495.976722][ T33] ? schedule+0x90/0x2b0 [ 1495.976763][ T33] schedule+0x164/0x2b0 [ 1495.976802][ T33] schedule_preempt_disabled+0x13/0x30 [ 1495.976837][ T33] __mutex_lock+0x7c4/0x15a0 [ 1495.976869][ T33] ? __mutex_lock+0x5cd/0x15a0 [ 1495.976902][ T33] ? del_device_store+0xd6/0x370 [ 1495.976936][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 1495.976967][ T33] ? __mutex_lock+0x305/0x15a0 [ 1495.976992][ T33] ? sysfs_file_kobj+0x1a/0x230 [ 1495.977099][ T33] ? lock_acquire+0x115/0x350 [ 1495.977128][ T33] ? sysfs_file_kobj+0x1a/0x230 [ 1495.977167][ T33] del_device_store+0xd6/0x370 [ 1495.977198][ T33] ? sysfs_file_kobj+0x1a/0x230 [ 1495.977230][ T33] ? __pfx_del_device_store+0x10/0x10 [ 1495.977263][ T33] ? sysfs_file_kobj+0x1e4/0x230 [ 1495.977297][ T33] ? sysfs_kf_write+0x166/0x260 [ 1495.977335][ T33] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1495.977366][ T33] kernfs_fop_write_iter+0x3a4/0x540 [ 1495.977405][ T33] vfs_write+0x612/0xba0 [ 1495.977451][ T33] ? __pfx_vfs_write+0x10/0x10 [ 1495.977487][ T33] ? do_sys_openat2+0x18d/0x200 [ 1495.977510][ T33] ? kmem_cache_free+0x182/0x650 [ 1495.979075][ T33] ? fdget+0x16b/0x250 [ 1495.979148][ T33] ksys_write+0x150/0x270 [ 1495.979185][ T33] ? __pfx_ksys_write+0x10/0x10 [ 1495.979234][ T33] do_syscall_64+0x166/0x520 [ 1495.979260][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.979284][ T33] ? clear_bhb_loop+0x70/0xc0 [ 1495.979315][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.979339][ T33] RIP: 0033:0x7f4e7696034e [ 1495.979360][ T33] RSP: 002b:00007ffea81679f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1495.979383][ T33] RAX: ffffffffffffffda RBX: 0000555584fce500 RCX: 00007f4e7696034e [ 1495.979400][ T33] RDX: 0000000000000001 RSI: 00007ffea8167a80 RDI: 0000000000000005 [ 1495.979415][ T33] RBP: 00007f4e76a38447 R08: 0000000000000000 R09: 0000000000000000 [ 1495.979429][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1495.979443][ T33] R13: 00007ffea8167a80 R14: 00007ffea81682c0 R15: 0000000000000003 [ 1495.979487][ T33] [ 1495.979503][ T33] INFO: task syz-executor:6126 blocked for more than 178 seconds. [ 1495.979519][ T33] Not tainted syzkaller #0 [ 1495.979530][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1495.979540][ T33] task:syz-executor state:D stack:22856 pid:6126 tgid:6126 ppid:6110 task_flags:0x400140 flags:0x00080000 [ 1495.979599][ T33] Call Trace: [ 1495.979607][ T33] [ 1495.979622][ T33] __schedule+0x17dd/0x5830 [ 1495.979686][ T33] ? register_lock_class+0x31/0x2e0 [ 1495.979728][ T33] ? __pfx___schedule+0x10/0x10 [ 1495.979777][ T33] ? schedule+0x90/0x2b0 [ 1495.979819][ T33] schedule+0x164/0x2b0 [ 1495.979858][ T33] schedule_preempt_disabled+0x13/0x30 [ 1495.979893][ T33] __mutex_lock+0x7c4/0x15a0 [ 1495.979925][ T33] ? __mutex_lock+0x5cd/0x15a0 [ 1495.979964][ T33] ? del_device_store+0xd6/0x370 [ 1495.979998][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 1495.980021][ T33] ? __mutex_lock+0x305/0x15a0 [ 1495.980045][ T33] ? sysfs_file_kobj+0x1a/0x230 [ 1495.980088][ T33] ? lock_acquire+0x115/0x350 [ 1495.980117][ T33] ? sysfs_file_kobj+0x1a/0x230 [ 1495.980156][ T33] del_device_store+0xd6/0x370 [ 1495.980186][ T33] ? sysfs_file_kobj+0x1a/0x230 [ 1495.980218][ T33] ? __pfx_del_device_store+0x10/0x10 [ 1495.980251][ T33] ? sysfs_file_kobj+0x1e4/0x230 [ 1495.980284][ T33] ? sysfs_kf_write+0x166/0x260 [ 1495.980323][ T33] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1495.980353][ T33] kernfs_fop_write_iter+0x3a4/0x540 [ 1495.980392][ T33] vfs_write+0x612/0xba0 [ 1495.980437][ T33] ? __pfx_vfs_write+0x10/0x10 [ 1495.980473][ T33] ? do_sys_openat2+0x18d/0x200 [ 1495.980496][ T33] ? kmem_cache_free+0x182/0x650 [ 1495.984589][ T33] ? fdget+0x16b/0x250 [ 1495.984641][ T33] ksys_write+0x150/0x270 [ 1495.984678][ T33] ? __pfx_ksys_write+0x10/0x10 [ 1495.984729][ T33] do_syscall_64+0x166/0x520 [ 1495.984753][ T33] ? trace_irq_disable+0x3b/0x140 [ 1495.984786][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.984809][ T33] ? clear_bhb_loop+0x70/0xc0 [ 1495.984840][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.984864][ T33] RIP: 0033:0x7f8e52d6034e [ 1495.984885][ T33] RSP: 002b:00007ffcc3c1d658 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1495.984908][ T33] RAX: ffffffffffffffda RBX: 0000555573b81500 RCX: 00007f8e52d6034e [ 1495.984968][ T33] RDX: 0000000000000001 RSI: 00007ffcc3c1d6e0 RDI: 0000000000000005 [ 1495.984984][ T33] RBP: 00007f8e52e38447 R08: 0000000000000000 R09: 0000000000000000 [ 1495.984999][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1495.985012][ T33] R13: 00007ffcc3c1d6e0 R14: 00007ffcc3c1df20 R15: 0000000000000003 [ 1495.985056][ T33] [ 1495.985070][ T33] INFO: task syz-executor:6159 blocked for more than 178 seconds. [ 1495.985086][ T33] Not tainted syzkaller #0 [ 1495.985098][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1495.985108][ T33] task:syz-executor state:D stack:22472 pid:6159 tgid:6159 ppid:6154 task_flags:0x400140 flags:0x00080000 [ 1495.985169][ T33] Call Trace: [ 1495.985176][ T33] [ 1495.985193][ T33] __schedule+0x17dd/0x5830 [ 1495.985256][ T33] ? register_lock_class+0x31/0x2e0 [ 1495.985298][ T33] ? __pfx___schedule+0x10/0x10 [ 1495.985348][ T33] ? schedule+0x90/0x2b0 [ 1495.985389][ T33] schedule+0x164/0x2b0 [ 1495.985428][ T33] schedule_preempt_disabled+0x13/0x30 [ 1495.985463][ T33] __mutex_lock+0x7c4/0x15a0 [ 1495.985495][ T33] ? __mutex_lock+0x5cd/0x15a0 [ 1495.985528][ T33] ? del_device_store+0xd6/0x370 [ 1495.985562][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 1495.985585][ T33] ? __mutex_lock+0x305/0x15a0 [ 1495.985609][ T33] ? sysfs_file_kobj+0x1a/0x230 [ 1495.985653][ T33] ? lock_acquire+0x115/0x350 [ 1495.985682][ T33] ? sysfs_file_kobj+0x1a/0x230 [ 1495.985721][ T33] del_device_store+0xd6/0x370 [ 1495.985752][ T33] ? sysfs_file_kobj+0x1a/0x230 [ 1495.985784][ T33] ? __pfx_del_device_store+0x10/0x10 [ 1495.985817][ T33] ? sysfs_file_kobj+0x1e4/0x230 [ 1495.985850][ T33] ? sysfs_kf_write+0x166/0x260 [ 1495.985889][ T33] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1495.985920][ T33] kernfs_fop_write_iter+0x3a4/0x540 [ 1495.985965][ T33] vfs_write+0x612/0xba0 [ 1495.986010][ T33] ? __pfx_vfs_write+0x10/0x10 [ 1495.986046][ T33] ? do_sys_openat2+0x18d/0x200 [ 1495.986068][ T33] ? kmem_cache_free+0x182/0x650 [ 1495.986108][ T33] ? fdget+0x16b/0x250 [ 1495.986203][ T33] ksys_write+0x150/0x270 [ 1495.986240][ T33] ? __pfx_ksys_write+0x10/0x10 [ 1495.986290][ T33] do_syscall_64+0x166/0x520 [ 1495.986314][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.986338][ T33] ? clear_bhb_loop+0x70/0xc0 [ 1495.986369][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.987988][ T33] RIP: 0033:0x7fb72996034e [ 1495.988025][ T33] RSP: 002b:00007ffd80207208 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1495.988050][ T33] RAX: ffffffffffffffda RBX: 0000555575681500 RCX: 00007fb72996034e [ 1495.988068][ T33] RDX: 0000000000000001 RSI: 00007ffd80207290 RDI: 0000000000000005 [ 1495.988083][ T33] RBP: 00007fb729a38447 R08: 0000000000000000 R09: 0000000000000000 [ 1495.988098][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1495.988112][ T33] R13: 00007ffd80207290 R14: 00007ffd80207ad0 R15: 0000000000000003 [ 1495.988155][ T33] [ 1495.988168][ T33] INFO: task syz-executor:6202 blocked for more than 155 seconds. [ 1495.988185][ T33] Not tainted syzkaller #0 [ 1495.988196][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1495.988207][ T33] task:syz-executor state:D stack:22416 pid:6202 tgid:6202 ppid:6197 task_flags:0x400140 flags:0x00080000 [ 1495.988267][ T33] Call Trace: [ 1495.988275][ T33] [ 1495.988291][ T33] __schedule+0x17dd/0x5830 [ 1495.988366][ T33] ? register_lock_class+0x31/0x2e0 [ 1495.988409][ T33] ? __pfx___schedule+0x10/0x10 [ 1495.988459][ T33] ? schedule+0x90/0x2b0 [ 1495.988500][ T33] schedule+0x164/0x2b0 [ 1495.988540][ T33] schedule_preempt_disabled+0x13/0x30 [ 1495.988575][ T33] __mutex_lock+0x7c4/0x15a0 [ 1495.988607][ T33] ? __mutex_lock+0x5cd/0x15a0 [ 1495.988639][ T33] ? del_device_store+0xd6/0x370 [ 1495.988674][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 1495.988696][ T33] ? __mutex_lock+0x305/0x15a0 [ 1495.988722][ T33] ? sysfs_file_kobj+0x1a/0x230 [ 1495.988764][ T33] ? lock_acquire+0x115/0x350 [ 1495.988793][ T33] ? sysfs_file_kobj+0x1a/0x230 [ 1495.988832][ T33] del_device_store+0xd6/0x370 [ 1495.988863][ T33] ? sysfs_file_kobj+0x1a/0x230 [ 1495.988895][ T33] ? __pfx_del_device_store+0x10/0x10 [ 1495.988928][ T33] ? sysfs_file_kobj+0x1e4/0x230 [ 1495.988968][ T33] ? sysfs_kf_write+0x166/0x260 [ 1495.989014][ T33] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1495.989046][ T33] kernfs_fop_write_iter+0x3a4/0x540 [ 1495.989085][ T33] vfs_write+0x612/0xba0 [ 1495.989131][ T33] ? __pfx_vfs_write+0x10/0x10 [ 1495.989166][ T33] ? do_sys_openat2+0x18d/0x200 [ 1495.989189][ T33] ? kmem_cache_free+0x182/0x650 [ 1495.989230][ T33] ? fdget+0x16b/0x250 [ 1495.989271][ T33] ksys_write+0x150/0x270 [ 1495.989307][ T33] ? __pfx_ksys_write+0x10/0x10 [ 1495.989357][ T33] do_syscall_64+0x166/0x520 [ 1495.989382][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.989407][ T33] ? clear_bhb_loop+0x70/0xc0 [ 1495.990966][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.990994][ T33] RIP: 0033:0x7f5039b6034e [ 1495.991023][ T33] RSP: 002b:00007ffcc4a72118 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1495.991046][ T33] RAX: ffffffffffffffda RBX: 0000555567e14500 RCX: 00007f5039b6034e [ 1495.991063][ T33] RDX: 0000000000000001 RSI: 00007ffcc4a721a0 RDI: 0000000000000005 [ 1495.991077][ T33] RBP: 00007f5039c38447 R08: 0000000000000000 R09: 0000000000000000 [ 1495.991092][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1495.991106][ T33] R13: 00007ffcc4a721a0 R14: 00007ffcc4a729e0 R15: 0000000000000003 [ 1495.991150][ T33] [ 1495.991179][ T33] [ 1495.991179][ T33] Showing all locks held in the system: [ 1495.991251][ T33] locks held by kworker/u8:0/12: 4, on CPU#1: [ 1495.991333][ T33] #0: ffff88801d28e148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1495.991429][ T33] #1: ffffc90000117c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1495.991494][ T33] #2: ffffffff916830e8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1495.991560][ T33] #3: ffffffff91691da0 (rtnl_mutex){+.+.}-{4:4}, at: wiphy_unregister+0x26f/0xb30 [ 1495.991620][ T33] locks held by kworker/u8:2/31: 2, on CPU#0: [ 1495.991636][ T33] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1495.991702][ T33] #1: ffffc90000a77c40 ((work_completion)(&pool->idle_cull_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1495.991769][ T33] locks held by khungtaskd/33: 1, last CPU#0: [ 1495.991786][ T33] #0: ffffffff9015a320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1495.991859][ T33] locks held by kworker/u8:5/63: 5, last CPU#0: [ 1495.991874][ T33] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1495.991940][ T33] #1: ffffc9000205fc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1495.992047][ T33] #2: ffffffff8ffe6090 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 1495.992115][ T33] #3: ffffffff9023cc40 (jump_label_mutex){+.+.}-{4:4}, at: static_key_enable_cpuslocked+0xcb/0x240 [ 1495.992173][ T33] #4: ffffffff8fffd0e0 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 1495.992239][ T33] locks held by kworker/u8:9/316: 5, last CPU#1: [ 1495.992255][ T33] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1495.992321][ T33] #1: ffffc90002f97c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1495.992386][ T33] #2: ffff888034740800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1495.993953][ T33] #3: ffffffff9015a320 (rcu_read_lock){....}-{1:3}, at: advance_sched+0x9e8/0xc80 [ 1495.994065][ T33] #4: ffffffff9c0ef800 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_deactivate+0x9a/0x250 [ 1495.994173][ T33] locks held by dhcpcd/5297: 1, on CPU#1: [ 1495.994190][ T33] #0: ffffffff91691da0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_deladdr+0x1cd/0x7a0 [ 1495.994263][ T33] locks held by getty/5392: 2, on CPU#1: [ 1495.994278][ T33] #0: ffff8880369b50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1495.994366][ T33] #1: ffffc9000322e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1495.994456][ T33] locks held by kworker/0:8/16957: 4, on CPU#0: [ 1495.994472][ T33] #0: ffff88813fec6d48 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1495.994544][ T33] #1: ffffc90003717c40 ((work_completion)(&(&ssp->srcu_sup->work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1495.994610][ T33] #2: ffffffff9015b1e8 (&ssp->srcu_sup->srcu_gp_mutex){+.+.}-{4:4}, at: srcu_advance_state+0x4f/0x16d0 [ 1495.994673][ T33] #3: ffffffff901609a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2cb/0x760 [ 1495.994728][ T33] locks held by kworker/u8:3/21043: 4, last CPU#0: [ 1495.994744][ T33] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1495.994809][ T33] #1: ffffc90006e6fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1495.994874][ T33] #2: ffff888032630800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 1495.994931][ T33] #3: ffffffff9015a320 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1495.995009][ T33] locks held by kworker/1:6/314: 3, on CPU#1: [ 1495.995026][ T33] #0: ffff88813fe0ed48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1495.995091][ T33] #1: ffffc90005c47c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1495.995156][ T33] #2: ffffffff91691da0 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1495.995217][ T33] locks held by kworker/u8:10/3464: 3, on CPU#0: [ 1495.995233][ T33] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1495.995298][ T33] #1: ffffc9000e497c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1495.995363][ T33] #2: ffffffff91691da0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1495.996964][ T33] locks held by kworker/u8:13/4563: 2, last CPU#0: [ 1495.996982][ T33] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1495.997058][ T33] #1: ffffc90007527c40 ((work_completion)(&pool->idle_cull_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1495.997128][ T33] locks held by syz-executor/5693: 8, on CPU#0: [ 1495.997144][ T33] #0: ffff88807ff6e460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1495.997210][ T33] #1: ffff88801d2da480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 1495.997269][ T33] #2: ffff888029fe4008 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 1495.997334][ T33] #3: ffffffff90eeba80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1495.997395][ T33] #4: ffff8880509fc128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa9/0x7d0 [ 1495.997514][ T33] #5: ffff8880509fd258 (&devlink->lock_key#13){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 1495.997607][ T33] #6: ffffffff91691da0 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 1495.997665][ T33] #7: ffffffff901609a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x388/0x760 [ 1495.997720][ T33] locks held by kworker/u9:3/5703: 3, on CPU#0: [ 1495.997736][ T33] #0: ffff8880526a7148 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1495.997801][ T33] #1: ffffc900039d7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1495.997866][ T33] #2: ffff88805f420ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430 [ 1495.997957][ T33] locks held by kworker/u9:4/5704: 3, on CPU#1: [ 1495.997973][ T33] #0: ffff88802fa91148 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1495.998046][ T33] #1: ffffc90004867c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1495.998111][ T33] #2: ffff888051710ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430 [ 1495.998173][ T33] locks held by syz-executor/5948: 4, on CPU#1: [ 1495.998188][ T33] #0: ffff88807ff6e460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1495.998252][ T33] #1: ffff88805297c880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 1495.998311][ T33] #2: ffff888029fe4008 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 1495.999930][ T33] #3: ffffffff90eeba80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1495.999993][ T33] locks held by udevd/6093: 2, last CPU#0: [ 1496.000020][ T33] #0: ffff88807c80a1c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 1496.000075][ T33] #1: ffffffff9015a320 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1496.000129][ T33] locks held by syz-executor/6126: 4, on CPU#0: [ 1496.000145][ T33] #0: ffff88807ff6e460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1496.000209][ T33] #1: ffff88807964b480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 1496.000268][ T33] #2: ffff888029fe4008 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 1496.000332][ T33] #3: ffffffff90eeba80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1496.000394][ T33] locks held by syz-executor/6159: 4, on CPU#0: [ 1496.000410][ T33] #0: ffff88807ff6e460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1496.000474][ T33] #1: ffff88803552a880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 1496.000533][ T33] #2: ffff888029fe4008 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 1496.000597][ T33] #3: ffffffff90eeba80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1496.000658][ T33] locks held by syz-executor/6202: 4, on CPU#0: [ 1496.000674][ T33] #0: ffff88807ff6e460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1496.000738][ T33] #1: ffff888067102880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 1496.000797][ T33] #2: ffff888029fe4008 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 1496.000868][ T33] #3: ffffffff90eeba80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1496.000931][ T33] [ 1496.000938][ T33] ============================================= [ 1496.000938][ T33] [ 1496.000949][ T33] NMI backtrace for cpu 0 [ 1496.000975][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1496.001000][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1496.001018][ T33] Call Trace: [ 1496.001028][ T33] [ 1496.001038][ T33] dump_stack_lvl+0xe8/0x150 [ 1496.001077][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 1496.001145][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1496.001183][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1496.001221][ T33] sys_info+0x135/0x170 [ 1496.001249][ T33] watchdog+0x1073/0x10f0 [ 1496.001304][ T33] ? watchdog+0x209/0x10f0 [ 1496.001349][ T33] kthread+0x38b/0x480 [ 1496.001376][ T33] ? __pfx_watchdog+0x10/0x10 [ 1496.001403][ T33] ? __pfx_kthread+0x10/0x10 [ 1496.001433][ T33] ret_from_fork+0x514/0xb70 [ 1496.001464][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 1496.001491][ T33] ? __switch_to+0xc78/0x1410 [ 1496.001530][ T33] ? __pfx_kthread+0x10/0x10 [ 1496.001560][ T33] ret_from_fork_asm+0x1a/0x30 [ 1496.001609][ T33] [ 1496.001635][ T33] Sending NMI from CPU 0 to CPUs 1: [ 1496.001669][ C1] NMI backtrace for cpu 1 [ 1496.001682][ C1] CPU: 1 UID: 0 PID: 316 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 1496.001702][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1496.001714][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 1496.001738][ C1] RIP: 0010:__lock_acquire+0xb7d/0x2de0 [ 1496.001763][ C1] Code: 00 00 48 09 dd 49 8b 45 20 89 c1 81 e1 00 80 04 00 81 f9 00 00 04 00 0f 85 36 02 00 00 25 ff 1f 00 00 48 0f a3 05 d3 60 42 14 <72> 30 83 3d aa f0 45 1a 00 75 27 90 e8 32 37 47 03 85 c0 74 1c 83 [ 1496.001780][ C1] RSP: 0018:ffffc90000a08b00 EFLAGS: 00000003 [ 1496.001795][ C1] RAX: 0000000000000c34 RBX: 0000000056fb2c7b RCX: 0000000000040000 [ 1496.001808][ C1] RDX: 000000000302683d RSI: 000000002b8363ff RDI: ffff888021f48000 [ 1496.001821][ C1] RBP: 3cf2fe1256fb2c7b R08: ffffffff8a082862 R09: 0000000000000001 [ 1496.001834][ C1] R10: dffffc0000000000 R11: ffffffff8a0827a0 R12: 0000000000000000 [ 1496.001846][ C1] R13: ffff888021f48c28 R14: ffff888021f48c28 R15: 0000000000000003 [ 1496.001859][ C1] FS: 0000000000000000(0000) GS:ffff888123513000(0000) knlGS:0000000000000000 [ 1496.001875][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1496.001887][ C1] CR2: 0000563e03518660 CR3: 0000000079880000 CR4: 00000000003526f0 [ 1496.001903][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 1496.001915][ C1] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1496.001927][ C1] Call Trace: [ 1496.001934][ C1] [ 1496.001946][ C1] ? __lock_acquire+0x747/0x2de0 [ 1496.001978][ C1] ? __pfx_perf_trace_lock+0x10/0x10 [ 1496.002008][ C1] lock_acquire+0x115/0x350 [ 1496.002030][ C1] ? advance_sched+0xc2/0xc80 [ 1496.002063][ C1] ? __pfx_perf_trace_lock+0x10/0x10 [ 1496.002091][ C1] _raw_spin_lock+0x2e/0x40 [ 1496.002117][ C1] ? advance_sched+0xc2/0xc80 [ 1496.002141][ C1] advance_sched+0xc2/0xc80 [ 1496.002167][ C1] ? __hrtimer_run_queues+0x2bf/0xa10 [ 1496.002205][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1496.002231][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 1496.002252][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1496.002278][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 1496.002312][ C1] hrtimer_interrupt+0x4cd/0xaa0 [ 1496.002355][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 1496.002383][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1496.002401][ C1] [ 1496.002408][ C1] [ 1496.002415][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1496.002435][ C1] RIP: 0010:in_task_stack+0x8/0x40 [ 1496.002460][ C1] Code: 79 f7 8f 4c 89 fe e8 17 02 29 f9 b0 01 e9 53 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 8b 4e 20 <48> 8d b1 00 80 00 00 48 39 cf 41 0f 93 c0 48 39 f7 0f 92 c0 44 20 [ 1496.002475][ C1] RSP: 0018:ffffc90002f97550 EFLAGS: 00000282 [ 1496.002490][ C1] RAX: 1ffff920005f2ec8 RBX: ffffc90002f97608 RCX: ffffc90002f90000 [ 1496.002510][ C1] RDX: ffffc90002f97608 RSI: ffff888021f48000 RDI: ffffc90002f975b0 [ 1496.002524][ C1] RBP: ffffc90002f97630 R08: ffffc90002f97667 R09: 0000000000000000 [ 1496.002537][ C1] R10: ffffc90002f97608 R11: fffff520005f2ecd R12: ffffc90002f975b0 [ 1496.002550][ C1] R13: dffffc0000000000 R14: ffffc90002f975b0 R15: ffff888021f48000 [ 1496.002577][ C1] get_stack_info_noinstr+0x19/0x130 [ 1496.002605][ C1] get_stack_info+0x3a/0xf0 [ 1496.002628][ C1] __unwind_start+0x3c5/0x660 [ 1496.002654][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1496.002679][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1496.002702][ C1] arch_stack_walk+0xe3/0x150 [ 1496.002731][ C1] ? __unwind_start+0xed/0x660 [ 1496.002759][ C1] stack_trace_save+0xa9/0x100 [ 1496.002782][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1496.002808][ C1] ? __lock_acquire+0x747/0x2de0 [ 1496.002834][ C1] kasan_save_track+0x3e/0x80 [ 1496.002899][ C1] ? ieee80211_iface_work+0x925/0xfa0 [ 1496.002961][ C1] kasan_save_free_info+0x40/0x50 [ 1496.002980][ C1] __kasan_slab_free+0x5c/0x80 [ 1496.003006][ C1] kmem_cache_free+0x182/0x650 [ 1496.003037][ C1] ieee80211_iface_work+0x925/0xfa0 [ 1496.003064][ C1] cfg80211_wiphy_work+0x29e/0x420 [ 1496.003088][ C1] ? process_scheduled_works+0x97a/0x1630 [ 1496.003116][ C1] process_scheduled_works+0xc3d/0x1630 [ 1496.003167][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1496.003199][ C1] ? assign_work+0x3cf/0x5d0 [ 1496.003229][ C1] worker_thread+0xa47/0xfb0 [ 1496.003278][ C1] kthread+0x38b/0x480 [ 1496.003298][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1496.003324][ C1] ? __pfx_kthread+0x10/0x10 [ 1496.003345][ C1] ret_from_fork+0x514/0xb70 [ 1496.003367][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1496.003388][ C1] ? __switch_to+0xc78/0x1410 [ 1496.003417][ C1] ? __pfx_kthread+0x10/0x10 [ 1496.003438][ C1] ret_from_fork_asm+0x1a/0x30 [ 1496.003471][ C1] [ 1496.008117][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 1500.443178][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1500.452490][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1500.462574][ T33] Call Trace: [ 1500.465883][ T33] [ 1500.468847][ T33] vpanic+0x26f/0x710 [ 1500.472889][ T33] panic+0xc5/0xd0 [ 1500.476641][ T33] ? __pfx_panic+0x10/0x10 [ 1500.481098][ T33] ? preempt_schedule_common+0x7f/0xd0 [ 1500.486589][ T33] ? preempt_schedule_thunk+0x16/0x40 [ 1500.492021][ T33] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1500.498222][ T33] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1500.504424][ T33] watchdog+0x10e7/0x10f0 [ 1500.508804][ T33] ? watchdog+0x209/0x10f0 [ 1500.513271][ T33] kthread+0x38b/0x480 [ 1500.517377][ T33] ? __pfx_watchdog+0x10/0x10 [ 1500.522094][ T33] ? __pfx_kthread+0x10/0x10 [ 1500.526812][ T33] ret_from_fork+0x514/0xb70 [ 1500.531443][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 1500.536609][ T33] ? __switch_to+0xc78/0x1410 [ 1500.541361][ T33] ? __pfx_kthread+0x10/0x10 [ 1500.546041][ T33] ret_from_fork_asm+0x1a/0x30 [ 1500.550893][ T33] [ 1501.721593][ T33] Shutting down cpus with NMI [ 1501.726961][ T33] Kernel Offset: disabled [ 1501.731309][ T33] Rebooting in 86400 seconds..