last executing test programs: 3m42.186930268s ago: executing program 1 (id=4917): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x0, 0x0, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x62, 0x1, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x80000000000, 0x6}, 0x11008, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000340)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000060000000006000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) 3m40.028663751s ago: executing program 1 (id=4920): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffcfa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x1beea, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000300000000000000000000001801000020a0702500000000008000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000000400000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) write$cgroup_subtree(r0, 0x0, 0x0) 3m39.591784663s ago: executing program 1 (id=4925): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000007850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x76}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x76303, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0xfffffe51) 3m38.705652379s ago: executing program 1 (id=4928): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x200}, 0x50) 3m38.275694222s ago: executing program 1 (id=4929): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1e, 0x0, 0x8, 0xff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) close(0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xd, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000c000000540000005400000006000000040000000000000e0400000000000000000000000700000d0000000006000000010000000f0000000500000007000000010000000e000000040000000e000000050000001000000004000000050000000100000000000000610049752852d7"], 0x0, 0x72}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) 3m35.142459524s ago: executing program 1 (id=4938): r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xb0000}, 0x805, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="b9ff0300600d698cff9e14f092dd", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x4, 0x0, &(0x7f00000002c0)="00000002", 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000700)=""/194, 0xcb}], 0x1, 0x0, 0xffffffffffffff68}, 0x0) close(r5) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="05000800078af6bf53108f6e65c9000000080000000500000080000000467b67cb5858a1e5ac0790c6b2baccfb9fa5640a705ed54e5b57b6e95ce3e4c21f978e5ac6a536496ac5f4511af4e3998100033fc4ef92e093c8c5d1b87040b0523c28292cf3d9b9042fd9e0baa02274865b7edae2874a4e9e59f23122b11c483768329101ccb7ea7fb34648c09f433d2a8a4aeebbf06cdd1956593dab391168b83bfdd4c42b3da77026a7817b2149971acb418d4cbd75e868f49a4830a9e742522c9c05d68e34eb8b7e6e413c79bfaeb920a7aacd9911b058225236d2bde85d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000010000000000"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r6, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m19.475356386s ago: executing program 32 (id=4938): r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xb0000}, 0x805, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="b9ff0300600d698cff9e14f092dd", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x4, 0x0, &(0x7f00000002c0)="00000002", 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000700)=""/194, 0xcb}], 0x1, 0x0, 0xffffffffffffff68}, 0x0) close(r5) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="05000800078af6bf53108f6e65c9000000080000000500000080000000467b67cb5858a1e5ac0790c6b2baccfb9fa5640a705ed54e5b57b6e95ce3e4c21f978e5ac6a536496ac5f4511af4e3998100033fc4ef92e093c8c5d1b87040b0523c28292cf3d9b9042fd9e0baa02274865b7edae2874a4e9e59f23122b11c483768329101ccb7ea7fb34648c09f433d2a8a4aeebbf06cdd1956593dab391168b83bfdd4c42b3da77026a7817b2149971acb418d4cbd75e868f49a4830a9e742522c9c05d68e34eb8b7e6e413c79bfaeb920a7aacd9911b058225236d2bde85d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000010000000000"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r6, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m13.784592802s ago: executing program 2 (id=4983): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000004000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 3m13.575798302s ago: executing program 2 (id=4984): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000040000000c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000eb0000008500000006000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = openat$cgroup_freezer_state(r2, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000140)='FREEZING\x00', 0x9) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@cgroup, 0x24, 0x0, 0x7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000340)=[0x0, 0x0], 0x0, &(0x7f00000003c0)}, 0x40) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1, 0xffffffffffffffff}, 0x4) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000000cf, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r7, 0x80082407, 0xfffffffffffffffd) write$cgroup_int(0xffffffffffffffff, &(0x7f00000008c0), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x1, 0x5, 0x2, 0x9, 0xffffffffffffffff}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89b1, &(0x7f0000000000)={'veth0_virt_wifi\x00', @local}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) close(r9) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0xffffffff, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0)=r10, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002480)=@bpf_lsm={0x1d, 0x26, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x917a21c, 0x0, 0x0, 0x0, 0x8}, [@exit, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffc}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3bdc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ldst={0x3, 0x1, 0x3, 0x8, 0x3, 0x6}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x1}]}, &(0x7f00000003c0)='GPL\x00', 0xc982, 0x100a, &(0x7f0000002540)=""/4106, 0x40f00, 0x24, '\x00', 0x0, 0x1b, r9, 0x8, &(0x7f00000004c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000002380)={0x4, 0xd, 0x81, 0x7}, 0x10, r10, 0x0, 0x5, &(0x7f00000023c0)=[0x1, r6, r0], &(0x7f0000002400)=[{0x3, 0x1, 0xd, 0x2}, {0x2000005, 0x2, 0x2, 0xc}, {0x4, 0x2, 0x0, 0xb}, {0x5, 0x1, 0x3, 0x6}, {0x5, 0x1, 0x0, 0x3}], 0x10, 0x7c4}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 3m12.328020257s ago: executing program 2 (id=4988): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1c, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000009000000000000000200000085200000fb550100"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 3m12.104040889s ago: executing program 2 (id=4991): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r1, &(0x7f0000000200)="121bbbdc0120", &(0x7f00000002c0)=""/69}, 0x20) 3m11.867411931s ago: executing program 2 (id=4995): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xfffc000000000000, 0x2}, 0xa108, 0x0, 0x48, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000780)=""/157}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) 3m11.648097172s ago: executing program 2 (id=4996): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xc8ae}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x62, 0x1, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x80000000000, 0x6}, 0x11008, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000060000000006000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) 3m6.515655548s ago: executing program 0 (id=5003): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xcb, 0x5, 0x42, 0x7, 0x0, 0xfffffffffffffffc, 0x996d9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x4}, 0x2d, 0xce4a, 0xfffffff8, 0x0, 0x84, 0x10000, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 3m5.791929936s ago: executing program 0 (id=5004): perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0xe4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007001000040000002500000001"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r0}, 0x38) 3m5.51422548s ago: executing program 0 (id=5005): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe55, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000e300850000009e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 3m5.31775731s ago: executing program 0 (id=5006): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 3m5.095922592s ago: executing program 0 (id=5007): r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x6c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x4c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x4}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0x8, 0xff, 0xfc, 0x0, 0x1, 0x80040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x1590, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) 3m5.002221617s ago: executing program 0 (id=5008): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x7, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xb0000}, 0x805, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c0000001801000020207325000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x2, 0x0, &(0x7f00000002c0)='\x00\x00', 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r4, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0xffffffffffffffff) close(0xffffffffffffffff) 2m55.704140079s ago: executing program 33 (id=4996): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xc8ae}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x62, 0x1, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x80000000000, 0x6}, 0x11008, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000060000000006000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) 2m49.526943419s ago: executing program 34 (id=5008): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x7, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xb0000}, 0x805, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c0000001801000020207325000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x2, 0x0, &(0x7f00000002c0)='\x00\x00', 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r4, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0xffffffffffffffff) close(0xffffffffffffffff) 2m47.983451869s ago: executing program 4 (id=5022): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000004000000080000000280"], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, 0x0, 0x0}, 0x20) 2m47.046798548s ago: executing program 4 (id=5024): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x480783, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x403, 0x6, 0x0, 0x34d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0xc00, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x8, 0x0, 0x0, 0xfdd0}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8128, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x100004}, 0x6000, 0xc8, 0x0, 0x7, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xffc0) 2m46.569331493s ago: executing program 4 (id=5026): bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002440)={0x15, 0x3, 0x0, &(0x7f0000002340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff8f, 0x0, 0x3}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x5, '\x00', 0x0, r1, 0x3, 0x3, 0x4}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) write$cgroup_subtree(r5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x15, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {}, {}, [@map_idx={0x18, 0x14, 0x5, 0x0, 0x6}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x54, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x4, 0xc, 0xb, 0xffffffe9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x40}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x80000001, 0x8, 0x0, 0x8, r4, 0x9, '\x00', 0x0, r1, 0x2, 0x4, 0x3, 0x2}, 0x50) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r7, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 2m43.298083462s ago: executing program 4 (id=5028): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x1e, 0x100000000}, 0x1cad, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) 2m42.489876104s ago: executing program 4 (id=5029): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200182f00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa35f088be"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000300)=0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) close(0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000004c0)=ANY=[@ANYBLOB="00440100d0"]) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66) 2m41.844308828s ago: executing program 4 (id=5032): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000", @ANYRES64=r0], 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x12}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100032900fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2d00f0204bbd6b466edff43ce4ed638f8c806560125f6c898613ebd53d488ca5fad6bfa0864ada22985956bedf7d9ba8671547ea1961ca8514e79f55de488a04404abb56ae8ec0bd7624c1cfc1d3f6bfbcf2b6ff7f000000000000898dd0daa3100c6880a2e4bebf1b47fb60571a0e9a158729e1c086003ddc8ffc3f980aa3e5394de844e620b5d0ef264a3ca985680ef30b3ff7e1f7d62da8f70426a216eb3ed1906a80d4a524e2b659cd6068aded99dc1ef91d24eee7316da5"], 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYRES32], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x420}) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x23, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r4, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}, 0x4240}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x11404, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0xb, 0x6, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000001100)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000500000002000000000000080000000000304f3e"], &(0x7f0000000240)=""/153, 0x29, 0x99, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5, 0xffffffffffffffff}, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="12000000040000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r8}, &(0x7f0000000580)=0x2, &(0x7f00000000c0)=r7}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x7fa8}, 0x114905, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r8, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m26.232191617s ago: executing program 35 (id=5032): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000", @ANYRES64=r0], 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x12}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100032900fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2d00f0204bbd6b466edff43ce4ed638f8c806560125f6c898613ebd53d488ca5fad6bfa0864ada22985956bedf7d9ba8671547ea1961ca8514e79f55de488a04404abb56ae8ec0bd7624c1cfc1d3f6bfbcf2b6ff7f000000000000898dd0daa3100c6880a2e4bebf1b47fb60571a0e9a158729e1c086003ddc8ffc3f980aa3e5394de844e620b5d0ef264a3ca985680ef30b3ff7e1f7d62da8f70426a216eb3ed1906a80d4a524e2b659cd6068aded99dc1ef91d24eee7316da5"], 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYRES32], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x420}) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x23, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r4, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}, 0x4240}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x11404, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0xb, 0x6, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000001100)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000500000002000000000000080000000000304f3e"], &(0x7f0000000240)=""/153, 0x29, 0x99, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5, 0xffffffffffffffff}, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="12000000040000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r8}, &(0x7f0000000580)=0x2, &(0x7f00000000c0)=r7}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x7fa8}, 0x114905, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r8, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m16.422033566s ago: executing program 6 (id=5067): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x0, 0xb, 0x9, 0x0, 0xffffffffffffffff, 0x668, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r0, 0x0, &(0x7f00000003c0)=""/61}, 0x20) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB="0001000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/17], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112180000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16}, 0x6b) bpf$PROG_LOAD(0x1c, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x29, r2, 0x8, &(0x7f0000000100)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0xf, 0x6, 0x8000}, 0x10, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000200)=[{0x4, 0x5, 0x3, 0x4}, {0x5, 0x2, 0xb, 0x8}, {0x3, 0x4, 0x7, 0x1}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@fallback=r6, r8, 0x16, 0x2, 0xffffffffffffffff, @void, @value=r2}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m15.799988238s ago: executing program 6 (id=5071): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1a1102, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff3) write$cgroup_devices(r0, 0x0, 0xfffffeff) 2m15.500565304s ago: executing program 6 (id=5073): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r0, 0x0, 0x0) 2m15.295853134s ago: executing program 6 (id=5074): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbf, 0x5, 0x0, 0x0, 0x0, 0x5, 0x80420, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c97a160, 0x1, @perf_config_ext={0x100000000040, 0x9}, 0x300, 0x103, 0x200000, 0x7, 0x29a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 2m12.461978811s ago: executing program 6 (id=5082): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000300)=r4) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000"], 0xffdd) 2m6.987237355s ago: executing program 6 (id=5078): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000080000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000b0"], 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x628, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 1m51.594855524s ago: executing program 36 (id=5078): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000080000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000b0"], 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x628, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 2.635915124s ago: executing program 7 (id=5652): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040018}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 2.613892004s ago: executing program 3 (id=5654): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, 0x0, 0xfdef) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001500)=""/4098, 0x1002}], 0x1}, 0x101a0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413", 0x11}], 0x1}, 0x0) 2.240848564s ago: executing program 3 (id=5657): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x5084, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) 1.803382196s ago: executing program 8 (id=5660): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffc48, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000580)='cpu.idle\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000540)=ANY=[@ANYBLOB='-0', @ANYRES64], 0x9) 1.611552637s ago: executing program 7 (id=5661): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, 0x0) 1.593810707s ago: executing program 5 (id=5662): r0 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x0) 1.504044442s ago: executing program 3 (id=5663): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a80000008500000050"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.451977245s ago: executing program 8 (id=5664): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) close(r0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x100) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x10) 1.373955549s ago: executing program 5 (id=5665): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) socket$kcm(0x2b, 0x1, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x51, 0x8}}], 0x18}, 0x4000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.303858693s ago: executing program 7 (id=5666): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c0000002d006bcd9e3fe3dc6e48aa31086b87033c0000001f03000000000000040014000d000a8a0d0000a122bf8dd34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.215184427s ago: executing program 3 (id=5667): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, 0x0, 0x8004) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) 1.180967209s ago: executing program 8 (id=5668): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0xd, 0x0, 0x0) 1.064178345s ago: executing program 7 (id=5669): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000e, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0xe, 0x7ff}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xf7fff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc37, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x10, &(0x7f0000001280), 0x4) r5 = getpid() sendmsg$unix(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000004c0)="e6", 0x1}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xee00}}}], 0x20, 0x10}, 0x10044001) sendmsg$unix(r3, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000080)='Z\t', 0x2}], 0x1, 0x0, 0x0, 0x841}, 0x2005) recvmsg(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2002) 1.019551617s ago: executing program 3 (id=5670): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="0c867e0629c8", 0x6}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x48011}, 0x4064014) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2102) 885.992134ms ago: executing program 3 (id=5671): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x83}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x66f51723ebf194b}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f00000001c0)=r4) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 804.694849ms ago: executing program 8 (id=5672): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={0xffffffffffffffff, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000c40)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000c80)=[0x0, 0x0], &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x1a, &(0x7f0000000d00)=[{}], 0x8, 0x10, &(0x7f0000000d40), &(0x7f0000000d80), 0x8, 0x46, 0x8, 0x8, &(0x7f0000000dc0)}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000004000000080000000280"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, 0x0, 0x0}, 0x20) 672.035635ms ago: executing program 5 (id=5673): r0 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x0) 563.721491ms ago: executing program 7 (id=5674): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, 0x0) 474.550826ms ago: executing program 5 (id=5675): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000210081044e810382db44b9040a00007ffe7f0500002015000600142603600e1209000600fe7f00007f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ae5abb3dbe08141a90bffece0b42a9ecbee5de6ccd40df8e4edef3d93c42a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xcb}], 0x1}, 0x0) 272.040866ms ago: executing program 8 (id=5676): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) close(r0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x100) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x10) 256.637377ms ago: executing program 7 (id=5677): perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x820, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x1}, 0x0, 0xa, 0x0, 0x0, 0x0, 0x20000002, 0x0, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r1, &(0x7f0000002c80)={&(0x7f0000000180)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000002bc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @remote}}}], 0x20}, 0x20000004) 206.5278ms ago: executing program 5 (id=5678): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c0000002d006bcd9e3fe3dc6e48aa31086b87033c0000001f03000000000000040014000d000a8a0d0000a122bf8dd34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 11.9772ms ago: executing program 8 (id=5679): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="0c867e0629c8", 0x6}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x48011}, 0x4064014) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2102) 0s ago: executing program 5 (id=5680): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1000000000000, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x11, 0x2, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x810000a6, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): tables:568 [ 622.772506][T16468] sec_pagetables:0 bounce:0 [ 622.772506][T16468] kernel_misc_reclaimable:0 [ 622.772506][T16468] free:1339282 free_pcp:12370 free_cma:0 [ 622.827280][T16468] Node 0 active_anon:27348kB inactive_anon:0kB active_file:76212kB inactive_file:160384kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98740kB dirty:244kB writeback:200kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10612kB pagetables:2272kB sec_pagetables:0kB all_unreclaimable? no [ 622.862085][T16468] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 623.016411][T16468] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 623.092977][T16468] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 623.099089][T16468] Node 0 DMA32 free:1449756kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:27212kB inactive_anon:0kB active_file:76212kB inactive_file:159556kB unevictable:1536kB writepending:244kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:30596kB local_pcp:17584kB free_cma:0kB [ 623.185937][T16468] lowmem_reserve[]: 0 0 0 0 0 [ 623.194966][T16468] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 623.268144][T16468] lowmem_reserve[]: 0 0 0 0 0 [ 623.273031][T16468] Node 1 Normal free:3891880kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19324kB local_pcp:7524kB free_cma:0kB [ 623.311214][T16468] lowmem_reserve[]: 0 0 0 0 0 [ 623.326693][T16468] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 623.361416][T16468] Node 0 DMA32: 389*4kB (UM) 893*8kB (UME) 1100*16kB (UME) 1397*32kB (UME) 342*64kB (UME) 151*128kB (UME) 67*256kB (UM) 37*512kB (M) 19*1024kB (UME) 8*2048kB (UM) 309*4096kB (UM) = 1449820kB [ 623.388001][T16468] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 623.409448][T16468] Node 1 Normal: 174*4kB (UME) 50*8kB (UME) 42*16kB (UME) 82*32kB (UME) 26*64kB (UME) 4*128kB (UM) 3*256kB (UME) 1*512kB (U) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3891880kB [ 623.456311][T16468] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 623.487318][T16468] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 623.506437][T16468] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 623.528329][T16468] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 623.541976][T16468] 60561 total pagecache pages [ 623.547054][T16468] 0 pages in swap cache [ 623.551434][T16468] Free swap = 124996kB [ 623.555894][T16468] Total swap = 124996kB [ 623.560322][T16468] 2097051 pages RAM [ 623.564340][T16468] 0 pages HighMem/MovableOnly [ 623.569806][T16468] 416927 pages reserved [ 623.574174][T16468] 0 pages cma reserved [ 623.718080][T16485] netlink: 3890 bytes leftover after parsing attributes in process `syz.0.3444'. [ 624.903996][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.910673][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.231168][ T5782] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 628.322521][T16574] netlink: 'syz.1.3472': attribute type 1 has an invalid length. [ 628.355678][T16574] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.3472'. [ 628.449281][T16574] netlink: 'syz.1.3472': attribute type 1 has an invalid length. [ 629.028524][T16590] netlink: 'syz.1.3476': attribute type 21 has an invalid length. [ 629.794831][T16618] sit0: entered allmulticast mode [ 629.853657][T16621] sit0: entered promiscuous mode [ 630.273505][T16635] netlink: 'syz.1.3491': attribute type 21 has an invalid length. [ 631.897308][T16670] netlink: 'syz.2.3502': attribute type 21 has an invalid length. [ 632.440789][T16685] netlink: 'syz.2.3505': attribute type 46 has an invalid length. [ 632.475871][T16685] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3505'. [ 634.021864][T16723] netlink: 'syz.3.3513': attribute type 21 has an invalid length. [ 638.343711][T16787] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3536'. [ 638.358698][T16787] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3536'. [ 638.380957][T16787] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3536'. [ 638.437942][T16787] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3536'. [ 638.853933][T16806] netlink: 'syz.2.3542': attribute type 21 has an invalid length. [ 639.373764][T16823] netlink: 'syz.1.3538': attribute type 10 has an invalid length. [ 639.388115][T16823] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3538'. [ 639.400689][T16823] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 639.409204][T16823] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.440160][T16823] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 640.136053][T16847] netlink: 'syz.3.3555': attribute type 5 has an invalid length. [ 640.151552][T16848] netlink: 'syz.3.3555': attribute type 5 has an invalid length. [ 640.895761][T10027] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 641.734532][T16891] netlink: 'syz.1.3568': attribute type 10 has an invalid length. [ 641.742999][T16891] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3568'. [ 641.754381][T16891] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 645.813439][T16911] tap0: tun_chr_ioctl cmd 1074025677 [ 645.820790][T16911] tap0: linktype set to 6 [ 646.239881][T16921] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.3573'. [ 648.031467][T16974] syzkaller0: entered promiscuous mode [ 648.041547][T16974] syzkaller0: entered allmulticast mode [ 650.498099][T16998] netlink: 'syz.1.3605': attribute type 21 has an invalid length. [ 650.548686][T16996] team0: Port device team_slave_0 removed [ 650.555336][T16996] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 651.287460][T17024] netlink: 'syz.0.3613': attribute type 2 has an invalid length. [ 651.308451][T17024] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3613'. [ 651.445906][T17030] netlink: 'syz.1.3614': attribute type 21 has an invalid length. [ 652.953542][T17072] netlink: 'syz.2.3628': attribute type 21 has an invalid length. [ 653.840387][T17097] netlink: 'syz.2.3639': attribute type 2 has an invalid length. [ 653.852768][T17097] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3639'. [ 655.343459][T17125] netlink: 'syz.2.3648': attribute type 10 has an invalid length. [ 655.589696][T17138] netlink: 'syz.3.3651': attribute type 2 has an invalid length. [ 655.599889][T17138] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3651'. [ 656.780240][T17176] netlink: 'syz.3.3664': attribute type 3 has an invalid length. [ 656.806667][T17176] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3664'. [ 656.933390][T17176] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3664'. [ 657.427507][T17190] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3669'. [ 657.457752][T17190] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3669'. [ 657.764099][T17197] netlink: 127924 bytes leftover after parsing attributes in process `syz.3.3672'. [ 657.865761][T17197] netlink: 16384 bytes leftover after parsing attributes in process `syz.3.3672'. [ 657.881809][T17199] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.3672'. [ 658.989686][ T5782] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 658.993553][T17226] raw_sendmsg: syz.0.3684 forgot to set AF_INET. Fix it! [ 659.041186][T17222] syzkaller0: entered promiscuous mode [ 659.095609][T17222] syzkaller0: entered allmulticast mode [ 659.813972][ T5782] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 662.350927][ T5782] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 662.730717][T17290] netlink: 127924 bytes leftover after parsing attributes in process `syz.2.3708'. [ 662.842995][T17292] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.3708'. [ 662.903602][T17290] netlink: 16384 bytes leftover after parsing attributes in process `syz.2.3708'. [ 663.888980][ T5782] Bluetooth: hci1: unknown advertising packet type: 0x65 [ 663.889024][ T5782] Bluetooth: hci1: unknown advertising packet type: 0x0a [ 663.901168][ T5782] Bluetooth: hci1: Malformed LE Event: 0x02 [ 664.080517][ T5782] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 664.419977][T17320] netlink: 'syz.3.3719': attribute type 4 has an invalid length. [ 664.437266][T17320] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3719'. [ 664.536133][T17320] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 664.972666][T17341] netlink: 127924 bytes leftover after parsing attributes in process `syz.0.3722'. [ 664.995826][T17341] netlink: 16384 bytes leftover after parsing attributes in process `syz.0.3722'. [ 665.033003][T17343] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.3722'. [ 665.161597][ T5782] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 667.428904][ T5782] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 667.681916][T17386] netlink: 'syz.2.3738': attribute type 2 has an invalid length. [ 667.715792][T17386] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3738'. [ 667.766251][T17386] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3738'. [ 667.794536][T17382] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3737'. [ 667.806897][T17392] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.3740'. [ 667.842354][T17382] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3737'. [ 667.851857][T17392] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.3740'. [ 667.905099][T17387] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3737'. [ 670.682636][T17450] C: renamed from team_slave_0 (while UP) [ 671.199767][T17450] netlink: 'syz.0.3759': attribute type 4 has an invalid length. [ 671.219803][T17450] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3759'. [ 671.232737][T17450] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 671.390080][T17472] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.3765'. [ 671.834279][T17483] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3769'. [ 671.871328][T17483] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3769'. [ 672.931764][T17512] __nla_validate_parse: 2 callbacks suppressed [ 672.931785][T17512] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3779'. [ 673.291186][T17521] netlink: 'syz.0.3781': attribute type 10 has an invalid length. [ 673.304734][T17521] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3781'. [ 673.324704][T17521] dummy0: entered promiscuous mode [ 673.330567][T17521] dummy0: entered allmulticast mode [ 673.341598][T17521] bridge0: port 3(dummy0) entered blocking state [ 673.349596][T17521] bridge0: port 3(dummy0) entered disabled state [ 673.392259][T17521] bridge0: port 3(dummy0) entered blocking state [ 673.398959][T17521] bridge0: port 3(dummy0) entered forwarding state [ 673.660341][T17533] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3786'. [ 673.986483][T17536] netlink: 'syz.0.3785': attribute type 10 has an invalid length. [ 674.017233][T17536] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3785'. [ 674.048821][T17536] ipvlan1: entered promiscuous mode [ 674.054358][T17536] ipvlan1: entered allmulticast mode [ 674.063618][T17536] veth0_vlan: entered allmulticast mode [ 674.072737][T17536] bridge0: port 4(ipvlan1) entered blocking state [ 674.109652][T17536] bridge0: port 4(ipvlan1) entered disabled state [ 674.142337][T17536] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 674.304838][ T5782] Bluetooth: hci2: unexpected event 0x2c length: 151 > 17 [ 674.312902][T17540] netlink: 'syz.3.3787': attribute type 28 has an invalid length. [ 674.345762][T17540] netlink: 'syz.3.3787': attribute type 3 has an invalid length. [ 674.365663][T17540] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3787'. [ 674.811650][T17542] netlink: 'syz.3.3787': attribute type 39 has an invalid length. [ 674.817924][T10035] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 675.367552][T17553] netlink: 'syz.2.3789': attribute type 21 has an invalid length. [ 675.683651][T17564] syzkaller0: entered promiscuous mode [ 675.690215][T17564] syzkaller0: entered allmulticast mode [ 675.819489][T17563] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3792'. [ 675.855745][T17563] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3792'. [ 678.013969][T17563] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3792'. [ 678.029610][T17586] netlink: 'syz.2.3799': attribute type 21 has an invalid length. [ 678.632708][T17607] netlink: 'syz.3.3806': attribute type 6 has an invalid length. [ 678.693096][T17607] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3806'. [ 679.432798][T17600] netlink: 'syz.2.3804': attribute type 3 has an invalid length. [ 679.830003][T17627] netlink: 'syz.2.3809': attribute type 21 has an invalid length. [ 680.539398][T17642] netlink: 'syz.3.3816': attribute type 39 has an invalid length. [ 681.945453][T17659] netlink: 'syz.3.3820': attribute type 21 has an invalid length. [ 682.126266][T17670] netlink: 'syz.2.3826': attribute type 6 has an invalid length. [ 682.134502][T17670] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3826'. [ 682.840230][ T5782] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17 [ 682.887625][T17688] netlink: 'syz.0.3831': attribute type 28 has an invalid length. [ 682.955924][T17688] netlink: 'syz.0.3831': attribute type 3 has an invalid length. [ 682.963989][T17688] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3831'. [ 683.134817][T17688] netlink: 'syz.0.3831': attribute type 39 has an invalid length. [ 683.194469][T17690] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3832'. [ 683.523128][T17694] netlink: 'syz.3.3833': attribute type 21 has an invalid length. [ 683.571152][T17694] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3833'. [ 683.613121][T17694] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3833'. [ 683.999414][T17707] netlink: 'syz.0.3836': attribute type 21 has an invalid length. [ 684.296989][T17716] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3840'. [ 684.306835][T17716] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 684.362023][T17719] netlink: 'syz.3.3842': attribute type 10 has an invalid length. [ 685.453011][T17751] netlink: 'syz.1.3849': attribute type 21 has an invalid length. [ 685.540933][T17752] netlink: 'syz.0.3850': attribute type 6 has an invalid length. [ 685.601061][T17752] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3850'. [ 686.478053][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.484456][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.113637][T17800] netlink: 'syz.0.3864': attribute type 21 has an invalid length. [ 688.509109][T17782] netlink: 'syz.3.3859': attribute type 10 has an invalid length. [ 688.744557][T17819] netlink: 'syz.1.3869': attribute type 6 has an invalid length. [ 688.765247][T17819] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3869'. [ 688.871670][T17817] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3870'. [ 688.924700][T17821] mac80211_hwsim hwsim28 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 690.723043][T17842] netlink: 'syz.3.3876': attribute type 10 has an invalid length. [ 691.401756][T10029] wlan1: Trigger new scan to find an IBSS to join [ 691.531771][T17870] netlink: 'syz.1.3886': attribute type 10 has an invalid length. [ 691.553659][ T5782] Bluetooth: hci0: Dropping invalid advertising data [ 691.580984][T17870] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3886'. [ 691.591114][T17870] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 691.952913][ T5782] Bluetooth: hci1: Dropping invalid advertising data [ 691.960285][ T5782] Bluetooth: hci1: Malformed LE Event: 0x02 [ 692.026694][T17882] syzkaller0: entered promiscuous mode [ 692.045744][T17882] syzkaller0: entered allmulticast mode [ 693.114893][T17916] sctp: [Deprecated]: syz.2.3899 (pid 17916) Use of struct sctp_assoc_value in delayed_ack socket option. [ 693.114893][T17916] Use struct sctp_sack_info instead [ 695.304947][T17909] netlink: 'syz.0.3898': attribute type 10 has an invalid length. [ 695.312937][T17909] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3898'. [ 695.322026][T17909] hsr0: entered promiscuous mode [ 695.328432][T17909] bridge0: port 4(hsr0) entered blocking state [ 695.334861][T17909] bridge0: port 4(hsr0) entered disabled state [ 695.341421][T17909] hsr0: entered allmulticast mode [ 695.346745][T17909] hsr_slave_0: entered allmulticast mode [ 695.352484][T17909] hsr_slave_1: entered allmulticast mode [ 695.360095][T17909] bridge0: port 4(hsr0) entered blocking state [ 695.366406][T17909] bridge0: port 4(hsr0) entered forwarding state [ 695.634161][T17937] netlink: 'syz.0.3904': attribute type 7 has an invalid length. [ 695.865098][T17934] netlink: 'syz.2.3907': attribute type 2 has an invalid length. [ 695.905628][T17934] netlink: 'syz.2.3907': attribute type 8 has an invalid length. [ 695.913801][T17934] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3907'. [ 696.012846][T17934] netlink: 'syz.2.3907': attribute type 11 has an invalid length. [ 696.419122][T10029] wlan1: Trigger new scan to find an IBSS to join [ 697.578457][ T49] wlan1: Creating new IBSS network, BSSID 52:9f:27:79:f8:39 [ 697.940452][T17998] netlink: 'syz.1.3924': attribute type 21 has an invalid length. [ 698.327901][T18006] netlink: 'syz.2.3927': attribute type 10 has an invalid length. [ 698.366547][T18006] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.3927'. [ 698.541458][T18010] lo: entered allmulticast mode [ 699.995263][T18036] netlink: 'syz.1.3936': attribute type 11 has an invalid length. [ 700.009023][T18031] netlink: 'syz.1.3936': attribute type 2 has an invalid length. [ 700.017393][T18031] netlink: 'syz.1.3936': attribute type 8 has an invalid length. [ 700.025171][T18031] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3936'. [ 701.124832][T18062] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3944'. [ 701.134302][ T5782] Bluetooth: hci2: Dropping invalid advertising data [ 701.141748][ T5782] Bluetooth: hci2: Malformed LE Event: 0x02 [ 701.803080][T18075] netlink: 'syz.2.3946': attribute type 21 has an invalid length. [ 705.662612][T18095] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.3954'. [ 705.869732][ T5782] Bluetooth: hci1: ISO packet for unknown connection handle 62 [ 706.860651][ T34] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 707.945311][T18131] netlink: 'syz.2.3965': attribute type 9 has an invalid length. [ 708.078252][ T5782] Bluetooth: hci2: Dropping invalid advertising data [ 708.186521][T18134] ref_ctr_offset mismatch. inode: 0x26 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 708.801957][T18140] netlink: 'syz.3.3968': attribute type 21 has an invalid length. [ 709.060554][T18153] netlink: 'syz.1.3970': attribute type 21 has an invalid length. [ 710.770738][T18191] netlink: 'syz.2.3981': attribute type 21 has an invalid length. [ 710.975736][T18195] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3982'. [ 711.814989][T18220] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.3991'. [ 711.830115][T18220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3991'. [ 713.051783][T18258] netlink: 'syz.3.4003': attribute type 21 has an invalid length. [ 713.071908][T18258] netlink: 'syz.3.4003': attribute type 1 has an invalid length. [ 713.083585][T18258] netlink: 'syz.3.4003': attribute type 21 has an invalid length. [ 713.094905][T18258] netlink: 'syz.3.4003': attribute type 1 has an invalid length. [ 713.636404][T18261] syzkaller0: entered promiscuous mode [ 713.642366][T18261] syzkaller0: entered allmulticast mode [ 716.153208][T18280] netlink: 'syz.2.4008': attribute type 21 has an invalid length. [ 716.161594][T18287] netlink: 'syz.0.4011': attribute type 39 has an invalid length. [ 716.308603][T18296] lo: entered allmulticast mode [ 716.464822][T18304] netlink: 'syz.3.4017': attribute type 2 has an invalid length. [ 717.515215][T18334] netlink: 'syz.2.4023': attribute type 21 has an invalid length. [ 717.854046][T18350] netlink: 'syz.3.4029': attribute type 6 has an invalid length. [ 719.389914][T18378] netlink: 192 bytes leftover after parsing attributes in process `syz.3.4040'. [ 719.434573][T18384] netlink: 184 bytes leftover after parsing attributes in process `syz.0.4042'. [ 719.457598][T18385] netlink: 184 bytes leftover after parsing attributes in process `syz.0.4042'. [ 719.559297][T18388] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4041'. [ 719.597435][T18388] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4041'. [ 719.629203][T18386] netlink: 'syz.1.4039': attribute type 21 has an invalid length. [ 720.213585][T18400] netlink: 'syz.0.4045': attribute type 1 has an invalid length. [ 720.265372][T18400] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.4045'. [ 723.032147][ T5782] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 724.019517][ T5782] Bluetooth: hci2: Dropping invalid advertising data [ 724.079739][T18440] syzkaller0: entered promiscuous mode [ 724.085304][T18440] syzkaller0: entered allmulticast mode [ 724.203925][ T5782] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 726.493958][T18452] netlink: 'syz.0.4064': attribute type 13 has an invalid length. [ 726.502495][T18452] netlink: 'syz.0.4064': attribute type 58 has an invalid length. [ 726.511144][T18452] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4064'. [ 727.139648][ T5782] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 727.716666][T18482] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4073'. [ 728.867199][T18504] pim6reg1: entered promiscuous mode [ 728.873304][T18504] pim6reg1: entered allmulticast mode [ 730.463877][T18546] netlink: 'syz.1.4091': attribute type 21 has an invalid length. [ 730.486690][ T3506] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 731.347553][T18575] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.4099'. [ 732.130693][T18589] netlink: 'syz.1.4103': attribute type 21 has an invalid length. [ 732.884044][T18606] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4107'. [ 733.755952][T18606] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 734.178971][T18636] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.4115'. [ 734.666363][T18644] netlink: 'syz.0.4117': attribute type 21 has an invalid length. [ 735.774497][T18661] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4123'. [ 735.887675][T18662] syzkaller0: entered promiscuous mode [ 735.893400][T18662] syzkaller0: entered allmulticast mode [ 736.004972][T18661] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 736.509856][ T5782] Bluetooth: hci1: unexpected event 0x30 length: 15 > 3 [ 738.815698][T10035] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 739.272435][T18699] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.4134'. [ 739.443282][ T5782] Bluetooth: hci2: unexpected event 0x14 length: 15 > 6 [ 739.807538][T18714] netlink: 'syz.1.4138': attribute type 10 has an invalid length. [ 739.826947][T18714] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4138'. [ 740.396944][T18726] pim6reg1: entered promiscuous mode [ 740.402432][T18726] pim6reg1: entered allmulticast mode [ 741.751136][T18752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 742.114191][T18759] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4152'. [ 743.008717][T18773] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.4154'. [ 743.114343][T18769] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4155'. [ 743.276946][T18769] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.4155'. [ 747.785698][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.792452][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.322523][T18817] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4168'. [ 748.335929][ T5782] Bluetooth: hci0: unexpected event 0x10 length: 15 > 1 [ 748.338281][T14107] Bluetooth: hci0: hardware error 0x00 [ 748.357300][ T5782] Bluetooth: hci1: ISO packet for unknown connection handle 2608 [ 748.581615][T18824] netlink: 'syz.2.4171': attribute type 10 has an invalid length. [ 748.619842][T18824] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.647054][T18824] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.670418][T18824] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.703504][T18824] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.058159][T18824] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.103391][T18824] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.166187][T18824] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.241990][T18824] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.390649][T18824] team0: Port device geneve1 added [ 749.967876][T18844] netlink: 'syz.2.4180': attribute type 21 has an invalid length. [ 750.425758][T14107] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 751.052109][T18868] netlink: 'syz.0.4186': attribute type 10 has an invalid length. [ 751.240537][T18868] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.252143][T18868] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.347238][T18868] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.425889][T18868] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.533913][T18868] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.636611][T18868] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.695547][T18868] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.715568][T18868] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.751274][T18868] team0: Port device geneve1 added [ 752.037903][T14107] Bluetooth: hci2: unexpected event 0x31 length: 15 > 6 [ 752.052208][T18891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4192'. [ 752.118730][T18898] netlink: 'syz.1.4196': attribute type 41 has an invalid length. [ 752.646458][T18910] netlink: 'syz.0.4200': attribute type 28 has an invalid length. [ 752.665045][T18910] netlink: 'syz.0.4200': attribute type 3 has an invalid length. [ 752.679753][T18910] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4200'. [ 752.826424][T18914] netlink: 'syz.0.4200': attribute type 39 has an invalid length. [ 753.112651][T18915] netlink: 'syz.3.4201': attribute type 10 has an invalid length. [ 753.737364][T18915] team0: Port device geneve1 added [ 754.178141][T14107] Bluetooth: hci2: unexpected event 0x10 length: 15 > 1 [ 754.179531][T14107] Bluetooth: hci2: hardware error 0x00 [ 755.367739][T18950] netlink: 'syz.2.4212': attribute type 10 has an invalid length. [ 755.477896][T18950] veth0_vlan: left promiscuous mode [ 755.507852][T18950] veth0_vlan: entered promiscuous mode [ 755.563702][T18950] team0: Device veth0_vlan failed to register rx_handler [ 756.249130][T14107] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 757.013545][T18987] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.4221'. [ 758.548889][T19018] netlink: 'syz.0.4227': attribute type 10 has an invalid length. [ 758.582642][T19018] veth0_vlan: left promiscuous mode [ 758.593572][T19018] veth0_vlan: entered promiscuous mode [ 758.608678][T19018] team0: Device veth0_vlan failed to register rx_handler [ 759.420304][T19045] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.4233'. [ 760.920666][T19058] netlink: 'syz.2.4238': attribute type 10 has an invalid length. [ 760.964456][T19058] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 760.991937][T19075] netlink: 'syz.1.4243': attribute type 10 has an invalid length. [ 761.294967][T19075] veth0_vlan: left promiscuous mode [ 761.343224][T19075] veth0_vlan: entered promiscuous mode [ 761.379429][T19087] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 761.387260][T19075] team0: Device veth0_vlan failed to register rx_handler [ 761.849522][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 761.896429][T19106] netlink: 'syz.3.4250': attribute type 39 has an invalid length. [ 761.939781][T19106] netlink: 'syz.3.4250': attribute type 19 has an invalid length. [ 761.948517][T19106] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4250'. [ 764.409545][T19121] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4256'. [ 764.586141][T19121] bridge_slave_1: default FDB implementation only supports local addresses [ 765.403935][T10038] tipc: Subscription rejected, illegal request [ 765.461109][T19121] netlink: 'syz.2.4256': attribute type 10 has an invalid length. [ 765.494871][T19121] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.526831][T19121] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.537019][T19121] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.548050][T19121] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.963565][T19168] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4270'. [ 770.807523][T10024] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 773.436087][T19265] netlink: 'syz.1.4303': attribute type 4 has an invalid length. [ 773.472367][T19265] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4303'. [ 773.587698][T19265] .`: renamed from bond0 (while UP) [ 774.696119][T19309] netlink: 16358 bytes leftover after parsing attributes in process `syz.1.4315'. [ 778.949331][T19435] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 778.963714][T14107] Bluetooth: hci1: unexpected event 0x31 length: 15 > 6 [ 779.068961][T19437] wg2: entered promiscuous mode [ 779.090607][T19437] wg2: entered allmulticast mode [ 779.214103][T19446] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.4359'. [ 779.231994][T19446] netlink: zone id is out of range [ 779.239700][T19446] netlink: zone id is out of range [ 779.256028][T19446] netlink: zone id is out of range [ 779.272110][T19446] netlink: zone id is out of range [ 779.316521][T19446] netlink: zone id is out of range [ 779.363398][T19446] netlink: zone id is out of range [ 779.375824][T19446] netlink: zone id is out of range [ 779.386390][T19446] netlink: zone id is out of range [ 779.404285][T19446] netlink: zone id is out of range [ 779.433646][T19446] netlink: zone id is out of range [ 781.804793][T19497] netlink: 'syz.0.4370': attribute type 10 has an invalid length. [ 781.831574][T19497] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4370'. [ 782.264074][T19516] netlink: 'syz.3.4374': attribute type 4 has an invalid length. [ 782.273546][T19516] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4374'. [ 782.318355][T19516] .`: renamed from bond0 (while UP) [ 782.818174][T19539] netlink: 'syz.2.4381': attribute type 2 has an invalid length. [ 782.842813][T19539] netlink: 'syz.2.4381': attribute type 8 has an invalid length. [ 782.894874][T19539] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4381'. [ 787.840979][T19621] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4402'. [ 788.572044][T19650] netlink: 'syz.3.4410': attribute type 4 has an invalid length. [ 788.585744][T19650] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4410'. [ 788.990523][T19656] netlink: 'syz.0.4412': attribute type 2 has an invalid length. [ 789.026107][T19656] netlink: 'syz.0.4412': attribute type 8 has an invalid length. [ 789.056097][T19656] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4412'. [ 789.506532][T19680] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4420'. [ 789.536588][T19679] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4420'. [ 789.591898][T19679] netlink: 'syz.0.4420': attribute type 21 has an invalid length. [ 789.613289][T19679] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4420'. [ 789.636792][T19679] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4420'. [ 789.724489][T19684] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.4421'. [ 790.324617][T19704] netlink: 'syz.1.4425': attribute type 10 has an invalid length. [ 790.458879][T19704] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.494723][T19704] .`: (slave team0): Enslaving as an active interface with an up link [ 791.510737][T19718] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.4430'. [ 793.195835][T19742] pim6reg1: entered promiscuous mode [ 793.204203][T19742] pim6reg1: entered allmulticast mode [ 793.640897][T19749] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4437'. [ 793.850533][T10024] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 796.018741][T19759] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4442'. [ 796.045752][T19759] net_ratelimit: 57 callbacks suppressed [ 796.045771][T19759] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 800.303141][T19834] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4462'. [ 800.326285][T19834] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 800.349729][T19834] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 801.017611][T19853] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4467'. [ 801.056286][T19853] bond0: (slave bond_slave_0): Releasing backup interface [ 801.108872][T19853] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 802.232923][T19874] netlink: 'syz.2.4471': attribute type 3 has an invalid length. [ 802.255845][T19874] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.4471'. [ 802.326495][T19876] netlink: 'syz.2.4471': attribute type 9 has an invalid length. [ 802.334385][T19876] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4471'. [ 802.806222][T10024] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 803.074012][T19888] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4475'. [ 803.179732][T19888] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 803.217280][T19888] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 806.416574][T19925] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4484'. [ 807.549305][T19940] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4486'. [ 807.706016][T19940] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 807.935110][T19940] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 809.214520][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.221365][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.647851][T20044] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4512'. [ 813.683203][T20044] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4512'. [ 813.726740][T20046] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4512'. [ 813.891389][T20056] netlink: 21 bytes leftover after parsing attributes in process `syz.0.4515'. [ 813.909547][T20056] ksmbd: Unknown IPC event: 0, ignore. [ 815.180326][T20087] netlink: 'syz.3.4526': attribute type 21 has an invalid length. [ 815.205610][T20087] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.4526'. [ 815.549548][T20092] syzkaller0: entered promiscuous mode [ 815.564749][T20092] syzkaller0: entered allmulticast mode [ 818.628055][T20134] FAULT_INJECTION: forcing a failure. [ 818.628055][T20134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 818.677991][T20134] CPU: 0 PID: 20134 Comm: syz.3.4538 Not tainted syzkaller #0 [ 818.685560][T20134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 818.695755][T20134] Call Trace: [ 818.699080][T20134] [ 818.702061][T20134] dump_stack_lvl+0x18c/0x250 [ 818.706987][T20134] ? show_regs_print_info+0x20/0x20 [ 818.712244][T20134] ? load_image+0x420/0x420 [ 818.716814][T20134] ? __might_fault+0xaa/0x120 [ 818.721580][T20134] ? __lock_acquire+0x7d40/0x7d40 [ 818.726755][T20134] should_fail_ex+0x39d/0x4d0 [ 818.731583][T20134] _copy_from_user+0x2f/0xe0 [ 818.736225][T20134] ___sys_sendmsg+0x1c7/0x360 [ 818.740949][T20134] ? __sys_sendmsg+0x2a0/0x2a0 [ 818.745761][T20134] ? perf_trace_preemptirq_template+0x269/0x330 [ 818.752250][T20134] __se_sys_sendmsg+0x1c2/0x2b0 [ 818.757156][T20134] ? __x64_sys_sendmsg+0x80/0x80 [ 818.762206][T20134] ? lockdep_hardirqs_on+0x98/0x150 [ 818.767458][T20134] do_syscall_64+0x55/0xa0 [ 818.771914][T20134] ? clear_bhb_loop+0x40/0x90 [ 818.776643][T20134] ? clear_bhb_loop+0x40/0x90 [ 818.781365][T20134] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 818.787296][T20134] RIP: 0033:0x7f3bf459c819 [ 818.791732][T20134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 818.811550][T20134] RSP: 002b:00007f3bf540c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 818.819999][T20134] RAX: ffffffffffffffda RBX: 00007f3bf4816180 RCX: 00007f3bf459c819 [ 818.827999][T20134] RDX: 0000000000000800 RSI: 0000200000000940 RDI: 000000000000000b [ 818.836025][T20134] RBP: 00007f3bf540c090 R08: 0000000000000000 R09: 0000000000000000 [ 818.844036][T20134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 818.852038][T20134] R13: 00007f3bf4816218 R14: 00007f3bf4816180 R15: 00007fff290f1e78 [ 818.860047][T20134] [ 820.953437][T20141] netlink: 'syz.2.4539': attribute type 21 has an invalid length. [ 821.207355][T20150] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4540'. [ 821.232714][T20150] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4540'. [ 821.324106][T20147] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4540'. [ 822.277476][T20172] netlink: 'syz.0.4550': attribute type 21 has an invalid length. [ 822.705337][T20187] netlink: 'syz.0.4554': attribute type 21 has an invalid length. [ 822.793761][T20199] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4556'. [ 824.452849][T20244] netlink: 123072 bytes leftover after parsing attributes in process `syz.2.4569'. [ 824.512267][T20246] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.4569'. [ 824.523220][T20246] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.4569'. [ 825.238895][T20281] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.4580'. [ 825.849597][T10035] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 826.183693][T20326] netlink: 'syz.2.4594': attribute type 21 has an invalid length. [ 827.712465][T20374] netlink: 'syz.2.4607': attribute type 13 has an invalid length. [ 827.722640][T20374] netlink: 160 bytes leftover after parsing attributes in process `syz.2.4607'. [ 827.734271][T20377] netlink: 'syz.1.4608': attribute type 11 has an invalid length. [ 827.748237][T20377] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4608'. [ 827.816733][T20374] erspan0: refused to change device tx_queue_len [ 827.830697][T20374] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 827.852920][T20377] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4608'. [ 828.618317][T20397] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4615'. [ 828.654358][T20397] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4615'. [ 828.717638][T20397] netlink: 'syz.1.4615': attribute type 21 has an invalid length. [ 829.324910][T20414] ip6gretap0: refused to change device tx_queue_len [ 830.217395][T20443] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4629'. [ 832.225704][T20483] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4640'. [ 832.343259][T20480] Dead loop on virtual device ip6_vti0, fix it urgently! [ 833.310883][T20503] netlink: 'syz.2.4646': attribute type 10 has an invalid length. [ 834.610617][T20533] Dead loop on virtual device ip6_vti0, fix it urgently! [ 834.837184][ T3520] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 836.727577][T20580] Dead loop on virtual device ip6_vti0, fix it urgently! [ 837.093820][T20589] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.4670'. [ 837.557182][T20600] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4676'. [ 839.224218][T20631] netlink: 'syz.0.4683': attribute type 3 has an invalid length. [ 839.261922][T20631] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.4683'. [ 839.278033][T20633] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 839.300219][T20633] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 839.311712][T20633] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 839.321440][T20628] netlink: 'syz.0.4683': attribute type 3 has an invalid length. [ 839.329564][T20633] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 839.339111][T20628] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.4683'. [ 839.349943][T20633] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 839.358479][T20633] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 840.612216][ T3506] bond0: (slave netdevsim0): Releasing backup interface [ 840.679030][T20630] chnl_net:caif_netlink_parms(): no params data found [ 841.167825][T20630] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.254754][T20630] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.263217][T20630] bridge_slave_0: entered allmulticast mode [ 841.276030][T20630] bridge_slave_0: entered promiscuous mode [ 841.285416][T20630] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.299244][T20630] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.316439][T20630] bridge_slave_1: entered allmulticast mode [ 841.323754][T20630] bridge_slave_1: entered promiscuous mode [ 841.419260][T20679] : port 1(veth0_to_team) entered blocking state [ 841.428909][T20679] : port 1(veth0_to_team) entered disabled state [ 841.440250][T20679] veth0_to_team: entered allmulticast mode [ 841.446659][T20633] Bluetooth: hci3: command tx timeout [ 841.473347][T20679] veth0_to_team: entered promiscuous mode [ 841.813812][T20630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 841.830673][T20630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 842.124950][T20630] team0: Port device team_slave_0 added [ 842.190413][T20697] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.4698'. [ 842.227603][T20697] tc_dump_action: action bad kind [ 842.272496][T20630] team0: Port device team_slave_1 added [ 843.526130][T20633] Bluetooth: hci3: command tx timeout [ 844.224917][T20630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 844.232444][T20630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 844.264998][T20630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 844.281367][T20716] pim6reg1: entered promiscuous mode [ 844.289607][T20716] pim6reg1: entered allmulticast mode [ 844.434923][T20630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 844.456299][T20630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 844.550286][T20630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 844.799304][T20739] syzkaller0: entered promiscuous mode [ 844.804885][T20739] syzkaller0: entered allmulticast mode [ 844.818397][T20744] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.4707'. [ 844.837782][T20630] hsr_slave_0: entered promiscuous mode [ 844.846138][T20630] hsr_slave_1: entered promiscuous mode [ 844.852896][T20630] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 844.861590][T20630] Cannot create hsr debugfs directory [ 844.928814][T20747] netlink: 'syz.0.4706': attribute type 1 has an invalid length. [ 845.608031][T20633] Bluetooth: hci3: command tx timeout [ 847.696472][T20633] Bluetooth: hci3: command tx timeout [ 848.074133][T20759] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4710'. [ 848.257226][T20775] delete_channel: no stack [ 848.334379][ T3506] hsr_slave_0: left promiscuous mode [ 848.362258][ T3506] hsr_slave_1: left promiscuous mode [ 848.387394][ T3506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 848.410739][ T3506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 848.429821][ T3506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 848.455535][ T3506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 848.476775][ T3506] bridge0: port 3(dummy0) entered disabled state [ 848.512988][ T3506] bridge_slave_1: left allmulticast mode [ 848.542509][ T3506] bridge_slave_1: left promiscuous mode [ 848.569252][ T3506] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.611090][ T3506] bridge_slave_0: left allmulticast mode [ 848.624585][ T3506] bridge_slave_0: left promiscuous mode [ 848.631193][ T3506] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.666253][ T3506] veth1_macvtap: left promiscuous mode [ 848.672194][ T3506] veth0_macvtap: left promiscuous mode [ 848.678919][ T3506] veth1_vlan: left promiscuous mode [ 848.886771][ T3506] team0 (unregistering): Port device geneve1 removed [ 849.402773][ T3506] team0 (unregistering): Port device 0 removed [ 849.510852][ T3506] bond0 (unregistering): (slave 4@0): Releasing backup interface [ 849.950887][ T3506] bond0 (unregistering): Released all slaves [ 850.072728][T20795] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 850.093259][T20804] netlink: 'syz.0.4718': attribute type 21 has an invalid length. [ 851.344835][T20630] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 851.371484][T20630] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 851.421248][T20630] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 851.477495][T20630] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 851.741181][T20630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 851.810602][T20630] 8021q: adding VLAN 0 to HW filter on device team0 [ 851.834684][T20851] aD: renamed from lo (while UP) [ 851.862120][T10024] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.869578][T10024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 851.973416][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.980837][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 852.283638][T20861] syzkaller0: entered promiscuous mode [ 852.289903][T20861] syzkaller0: entered allmulticast mode [ 852.406759][ T12] wlan1: Trigger new scan to find an IBSS to join [ 852.551362][T20876] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4734'. [ 852.576984][T20876] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4734'. [ 852.620077][T20876] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4734'. [ 852.740702][T20884] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4736'. [ 852.770459][T20884] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4736'. [ 852.792036][T20889] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4736'. [ 852.922098][T20630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 853.363163][T20630] veth0_vlan: entered promiscuous mode [ 853.441003][T20630] veth1_vlan: entered promiscuous mode [ 853.642171][T20630] veth0_macvtap: entered promiscuous mode [ 853.704660][T20630] veth1_macvtap: entered promiscuous mode [ 853.740104][T20900] syzkaller1: entered promiscuous mode [ 853.748505][T20900] syzkaller1: entered allmulticast mode [ 854.012196][T20630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 854.053063][T20630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.080127][T20630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 854.178280][T20910] syzkaller0: entered promiscuous mode [ 854.193693][T20910] syzkaller0: entered allmulticast mode [ 854.258798][T20630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.297420][T20630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.319374][T20630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 856.731540][T20630] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.740871][T20630] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.750082][T20630] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.761923][T20630] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.012178][T10024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 857.030654][T10024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 857.085001][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 857.111736][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 857.388455][ T49] wlan1: Trigger new scan to find an IBSS to join [ 857.846293][ T3506] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 857.935806][T20966] tap0: tun_chr_ioctl cmd 1074025677 [ 857.941390][T20966] tap0: linktype set to 769 [ 858.305297][T14107] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 858.317186][T14107] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 858.326782][T14107] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 858.376188][T14107] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 858.388365][T14107] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 858.396233][T14107] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 858.408561][ T3506] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.483615][T10024] wlan1: Creating new IBSS network, BSSID d2:7f:68:39:cf:f7 [ 858.844708][ T3506] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.904805][T20984] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 858.953542][T20984] syzkaller0: entered promiscuous mode [ 858.965574][T20984] syzkaller0: entered allmulticast mode [ 859.018707][ T3506] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.510342][T14107] Bluetooth: hci0: command tx timeout [ 861.205197][ T3506] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.227683][T20996] veth1_macvtap: left promiscuous mode [ 861.852262][T20975] chnl_net:caif_netlink_parms(): no params data found [ 862.093215][T21011] pim6reg1: entered allmulticast mode [ 862.116873][T21010] pim6reg1: left allmulticast mode [ 862.205235][T20975] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.212990][T20975] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.221141][T20975] bridge_slave_0: entered allmulticast mode [ 862.229980][T20975] bridge_slave_0: entered promiscuous mode [ 862.356901][T20975] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.364154][T20975] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.390263][T20975] bridge_slave_1: entered allmulticast mode [ 862.402445][T20975] bridge_slave_1: entered promiscuous mode [ 862.514985][T20975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 862.542415][T20975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 862.565633][T14107] Bluetooth: hci0: command tx timeout [ 862.727898][T20975] team0: Port device team_slave_0 added [ 862.811516][T21023] syzkaller0: entered promiscuous mode [ 862.821233][T21023] syzkaller0: entered allmulticast mode [ 862.849555][T20975] team0: Port device team_slave_1 added [ 863.018184][T20975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 863.031983][T20975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 863.063169][T20975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 864.661893][T14107] Bluetooth: hci0: command tx timeout [ 865.164682][T20975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 865.171945][T20975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 865.198793][T20975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 865.654832][T20975] hsr_slave_0: entered promiscuous mode [ 865.701007][T20975] hsr_slave_1: entered promiscuous mode [ 865.958976][T21059] syzkaller0: entered promiscuous mode [ 865.964644][T21059] syzkaller0: entered allmulticast mode [ 866.733440][T14107] Bluetooth: hci0: command tx timeout [ 868.318331][ T3506] veth0_to_team: left allmulticast mode [ 868.324182][ T3506] veth0_to_team: left promiscuous mode [ 868.364399][ T3506] : port 1(veth0_to_team) entered disabled state [ 868.432384][ T3506] hsr_slave_0: left promiscuous mode [ 868.439233][ T3506] hsr_slave_1: left promiscuous mode [ 868.452189][ T3506] hsr0: left allmulticast mode [ 868.464955][ T3506] bridge0: port 4(hsr0) entered disabled state [ 868.474146][ T3506] bridge0: port 3(dummy0) entered disabled state [ 868.484017][ T3506] bridge_slave_1: left allmulticast mode [ 868.490436][ T3506] bridge_slave_1: left promiscuous mode [ 868.496723][ T3506] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.510876][ T3506] bridge_slave_0: left allmulticast mode [ 868.516869][ T3506] bridge_slave_0: left promiscuous mode [ 868.522792][ T3506] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.596834][ T3506] veth1_macvtap: left promiscuous mode [ 868.602548][ T3506] veth0_macvtap: left promiscuous mode [ 868.613468][ T3506] veth1_vlan: left promiscuous mode [ 868.827796][ T3506] team0 (unregistering): Port device geneve1 removed [ 869.369048][ T3506] team0 (unregistering): Port device team_slave_1 removed [ 869.420162][ T3506] team0 (unregistering): Port device C removed [ 869.475639][ T3506] bond0 (unregistering): (slave 4@0): Releasing backup interface [ 869.529548][ T3506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 869.945866][ T3506] bond0 (unregistering): Released all slaves [ 870.651642][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.658297][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.817217][T21119] gretap0: refused to change device tx_queue_len [ 872.110753][T21121] syzkaller0: entered promiscuous mode [ 872.120235][T21121] syzkaller0: entered allmulticast mode [ 872.128955][T20975] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 874.302748][T20975] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 874.312984][T20975] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 874.332965][T20975] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 874.580979][T20975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 874.754570][T20975] 8021q: adding VLAN 0 to HW filter on device team0 [ 874.844405][ T3520] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.851772][ T3520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 874.917419][ T3506] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.924729][ T3506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 875.174978][T20975] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 878.549701][T20975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 878.857375][T20975] veth0_vlan: entered promiscuous mode [ 878.878644][T20975] veth1_vlan: entered promiscuous mode [ 879.084137][T20975] veth0_macvtap: entered promiscuous mode [ 879.141943][T20975] veth1_macvtap: entered promiscuous mode [ 879.466468][T20975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 879.477385][T20975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.487912][T20975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 879.499245][T20975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.511374][T20975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 879.529085][T20975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 879.551249][T20975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.570733][T20975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 879.592010][T20975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.644653][T20975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 879.717715][T20975] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.745499][T20975] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.754393][T20975] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.785659][T20975] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.716482][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 880.724401][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 880.833191][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 880.860970][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 881.193897][T21218] 0: renamed from bond_slave_0 (while UP) [ 882.248668][T21248] sock: sock_timestamping_bind_phc: sock not bind to device [ 882.621749][T20633] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 882.631762][T20633] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 882.642390][T20633] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 882.660649][T20633] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 882.675854][T20633] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 882.686315][T20633] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 883.169863][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.380357][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.483690][T21276] can: request_module (can-proto-0) failed. [ 883.595465][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.855310][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.903560][T21256] chnl_net:caif_netlink_parms(): no params data found [ 884.099105][T21256] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.110354][T21256] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.142832][T21256] bridge_slave_0: entered allmulticast mode [ 884.178615][T21256] bridge_slave_0: entered promiscuous mode [ 884.212602][T21256] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.165585][T20633] Bluetooth: hci1: command tx timeout [ 887.195610][T21256] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.246122][T21256] bridge_slave_1: entered allmulticast mode [ 887.509055][T21256] bridge_slave_1: entered promiscuous mode [ 888.493572][T21256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 888.616579][T21256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 888.944116][T21256] team0: Port device team_slave_0 added [ 889.010079][T21256] team0: Port device team_slave_1 added [ 889.205967][T20633] Bluetooth: hci1: command tx timeout [ 889.384868][T21256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 889.406971][T21256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 889.480493][T21256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 889.719170][T21313] syzkaller0: entered promiscuous mode [ 889.724820][T21313] syzkaller0: entered allmulticast mode [ 889.753367][T21256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 889.770843][T21256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 889.809723][T21256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 889.846283][ T3506] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 889.893795][T21318] syzkaller0: entered promiscuous mode [ 889.904546][T21318] syzkaller0: entered allmulticast mode [ 890.497098][T10038] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 891.294847][T20633] Bluetooth: hci1: command tx timeout [ 893.376046][T20633] Bluetooth: hci1: command tx timeout [ 894.832597][T21256] hsr_slave_0: entered promiscuous mode [ 894.852456][T21256] hsr_slave_1: entered promiscuous mode [ 894.876716][T21256] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 894.890526][T21256] Cannot create hsr debugfs directory [ 897.846126][ T49] hsr_slave_0: left promiscuous mode [ 897.874131][ T49] hsr_slave_1: left promiscuous mode [ 897.882039][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 897.893366][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 897.912962][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 897.922366][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 897.931077][ T49] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 897.938721][ T49] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 897.961690][ T49] veth0_macvtap: left promiscuous mode [ 897.968366][ T49] veth1_vlan: left promiscuous mode [ 898.227862][ T49] .` (unregistering): (slave geneve0): Releasing backup interface [ 898.786948][ T49] team0 (unregistering): Port device team_slave_1 removed [ 898.839108][ T49] team0 (unregistering): Port device C removed [ 898.887696][ T49] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 898.940591][ T49] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 899.295714][ T49] .` (unregistering): (slave team0): Releasing backup interface [ 899.346914][ T49] .` (unregistering): Released all slaves [ 899.423759][T21399] syzkaller0: entered promiscuous mode [ 899.429801][T21399] syzkaller0: entered allmulticast mode [ 901.812511][T21256] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 901.856933][T21256] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 901.902991][T21256] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 901.975613][T21256] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 902.286566][T21256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 902.338566][T21256] 8021q: adding VLAN 0 to HW filter on device team0 [ 902.377294][T10032] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.384586][T10032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 902.440013][T10032] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.447561][T10032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 902.675825][T21433] syzkaller0: entered promiscuous mode [ 902.687192][T21433] syzkaller0: entered allmulticast mode [ 902.718426][T21441] nr0: port 1(hsr0) entered blocking state [ 902.724684][T21441] nr0: port 1(hsr0) entered disabled state [ 902.737256][T21441] hsr0: entered allmulticast mode [ 902.743084][T21441] hsr_slave_0: entered allmulticast mode [ 902.749702][T21441] hsr_slave_1: entered allmulticast mode [ 902.757490][T21441] hsr0: entered promiscuous mode [ 902.787616][T21437] nr0: port 1(hsr0) entered blocking state [ 902.793697][T21437] nr0: port 1(hsr0) entered forwarding state [ 906.942281][T21256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 907.157889][T21256] veth0_vlan: entered promiscuous mode [ 907.235174][T21256] veth1_vlan: entered promiscuous mode [ 907.399549][T21486] syzkaller0: entered promiscuous mode [ 907.405133][T21486] syzkaller0: entered allmulticast mode [ 907.505464][T21256] veth0_macvtap: entered promiscuous mode [ 909.607723][T21256] veth1_macvtap: entered promiscuous mode [ 909.744203][T21256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 909.760481][T21256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.772860][T21256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 909.785156][T21256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.798024][T21256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 909.824167][T21256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 909.837023][T21256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.847915][T21256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 909.859489][T21256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.871705][T21256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 909.924804][T21256] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.992578][T21256] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.018047][T21256] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.038400][T21256] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.907884][T10032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 910.919600][T10032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 910.992097][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 911.010216][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 911.147896][T21512] syz.1.4819[21512] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 911.148046][T21512] syz.1.4819[21512] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 912.666749][T21538] syzkaller0: entered promiscuous mode [ 912.685710][T21538] syzkaller0: entered allmulticast mode [ 920.983107][T21637] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 921.186348][T21637] syzkaller0: entered promiscuous mode [ 921.200200][T21637] syzkaller0: entered allmulticast mode [ 921.269820][T21639] syzkaller0: entered promiscuous mode [ 921.276219][T21639] syzkaller0: entered allmulticast mode [ 921.847756][T10024] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 925.316959][T21661] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.324543][T21661] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.332683][T21661] bridge0: entered allmulticast mode [ 930.400550][T21693] syzkaller0: entered promiscuous mode [ 930.406370][T21693] syzkaller0: entered allmulticast mode [ 932.100422][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.107236][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.150718][T21705] syzkaller0: entered promiscuous mode [ 933.156465][T21705] syzkaller0: entered allmulticast mode [ 935.877926][T21721] tap0: tun_chr_ioctl cmd 2147767507 [ 937.139543][T21733] syzkaller0: entered promiscuous mode [ 937.145320][T21733] syzkaller0: entered allmulticast mode [ 937.202625][T21728] syzkaller0: entered promiscuous mode [ 937.209081][T21728] syzkaller0: entered allmulticast mode [ 941.593432][T14107] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 941.612604][T14107] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 941.630448][T14107] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 941.649383][T14107] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 941.657570][T14107] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 941.668608][T14107] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 943.765644][T14107] Bluetooth: hci4: command tx timeout [ 944.927373][T21761] chnl_net:caif_netlink_parms(): no params data found [ 945.737193][T21761] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.764916][T21761] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.817172][T21761] bridge_slave_0: entered allmulticast mode [ 945.824131][T21761] bridge_slave_0: entered promiscuous mode [ 945.845792][T14107] Bluetooth: hci4: command tx timeout [ 946.026617][T21761] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.257274][T21761] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.264796][T21761] bridge_slave_1: entered allmulticast mode [ 946.326686][T21761] bridge_slave_1: entered promiscuous mode [ 946.774889][T21761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 946.978799][T21761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 947.215104][T21761] team0: Port device team_slave_0 added [ 947.549424][T21761] team0: Port device team_slave_1 added [ 947.667961][T21836] veth0_vlan: entered allmulticast mode [ 947.925743][T14107] Bluetooth: hci4: command tx timeout [ 948.151539][T21839] : renamed from vlan0 [ 948.264475][T21761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 948.287551][T21761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 948.363804][T21761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 948.379423][T21761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 948.387139][T21761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 948.451410][T21761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 948.627689][T21761] hsr_slave_0: entered promiscuous mode [ 948.691264][T21761] hsr_slave_1: entered promiscuous mode [ 948.736230][T21761] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 948.762734][T21761] Cannot create hsr debugfs directory [ 950.157456][T14107] Bluetooth: hci4: command tx timeout [ 950.274099][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.402677][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.514548][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.667721][T21882] syzkaller0: entered promiscuous mode [ 950.673600][T21882] syzkaller0: entered allmulticast mode [ 950.721312][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.858165][ T3506] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 953.904256][T21761] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 953.939554][T21761] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 953.961723][T21761] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 953.978228][T21761] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 954.453385][T21900] bridge0: port 3(veth0_to_hsr) entered blocking state [ 954.483495][T21900] bridge0: port 3(veth0_to_hsr) entered disabled state [ 954.509887][T21900] veth0_to_hsr: entered allmulticast mode [ 954.537436][T21900] veth0_to_hsr: entered promiscuous mode [ 954.563168][T21900] bridge0: port 3(veth0_to_hsr) entered blocking state [ 954.570355][T21900] bridge0: port 3(veth0_to_hsr) entered forwarding state [ 954.867714][T21761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 955.042277][T21761] 8021q: adding VLAN 0 to HW filter on device team0 [ 955.189440][ T3506] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.196871][ T3506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 955.268107][ T3506] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.275495][ T3506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 956.121936][T21761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 956.732788][T21943] syzkaller0: entered promiscuous mode [ 956.759178][T21943] syzkaller0: entered allmulticast mode [ 956.938337][ T12] hsr_slave_0: left promiscuous mode [ 956.961950][ T12] hsr_slave_1: left promiscuous mode [ 956.992829][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 957.010819][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 957.049605][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 957.089903][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 957.121283][ T12] bridge_slave_1: left allmulticast mode [ 957.157807][ T12] bridge_slave_1: left promiscuous mode [ 957.179670][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.219686][ T12] bridge_slave_0: left allmulticast mode [ 957.243241][ T12] bridge_slave_0: left promiscuous mode [ 957.343201][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.630806][ T12] veth1_macvtap: left promiscuous mode [ 957.647579][ T12] veth0_macvtap: left promiscuous mode [ 957.667703][ T12] veth1_vlan: left promiscuous mode [ 957.673128][ T12] veth0_vlan: left promiscuous mode [ 959.026741][ T12] team0 (unregistering): Port device team_slave_1 removed [ 959.086745][ T12] team0 (unregistering): Port device team_slave_0 removed [ 959.164593][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 959.227340][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 959.709337][ T12] bond0 (unregistering): Released all slaves [ 962.581771][T21761] veth0_vlan: entered promiscuous mode [ 963.151479][T21761] veth1_vlan: entered promiscuous mode [ 964.355919][T21761] veth0_macvtap: entered promiscuous mode [ 964.414666][T21761] veth1_macvtap: entered promiscuous mode [ 964.887066][T14107] Bluetooth: hci3: command 0x0406 tx timeout [ 965.452772][T14107] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 965.466645][T14107] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 965.477215][T14107] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 965.487147][T14107] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 965.495058][T14107] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 965.503986][T14107] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 966.037379][T21761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 966.051550][T21761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.061763][T21761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 966.072286][T21761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.084334][T21761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 966.154752][T21761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 966.165889][T21761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.180762][T21761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 966.191827][T21761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.213085][T21761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 966.365265][T21761] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.374833][T21761] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.388137][T21761] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.397232][T21761] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.877942][T10024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.978454][T10024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.265261][T22012] syzkaller0: entered promiscuous mode [ 967.281613][T22012] syzkaller0: entered allmulticast mode [ 967.315507][ T3506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 967.335870][ T3506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.401196][T21999] chnl_net:caif_netlink_parms(): no params data found [ 967.606255][T14107] Bluetooth: hci1: command tx timeout [ 969.692489][T14107] Bluetooth: hci1: command tx timeout [ 971.193103][T21999] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.316820][T21999] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.324132][T21999] bridge_slave_0: entered allmulticast mode [ 971.533836][T21999] bridge_slave_0: entered promiscuous mode [ 971.757224][T21999] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.775959][T14107] Bluetooth: hci1: command tx timeout [ 971.795579][T21999] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.935675][T21999] bridge_slave_1: entered allmulticast mode [ 972.038696][T21999] bridge_slave_1: entered promiscuous mode [ 972.478003][T21999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 972.558592][T21999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 972.771934][T21999] team0: Port device team_slave_0 added [ 972.807472][T21999] team0: Port device team_slave_1 added [ 972.882186][T20633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 972.896193][T20633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 972.914655][T21999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 972.915970][T20633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 972.971159][T20633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 972.980624][T20633] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 972.988243][T20633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 973.015582][T21999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 973.227823][T21999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 973.338416][T21999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 973.405765][T21999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 973.657521][T21999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 973.845717][T20633] Bluetooth: hci1: command tx timeout [ 974.017107][T21999] hsr_slave_0: entered promiscuous mode [ 974.088231][T21999] hsr_slave_1: entered promiscuous mode [ 974.125060][T21999] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 974.141277][T21999] Cannot create hsr debugfs directory [ 974.507139][ T3506] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.584094][T22077] syzkaller0: entered promiscuous mode [ 974.589982][T22077] syzkaller0: entered allmulticast mode [ 974.913548][ T3506] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.048307][T20633] Bluetooth: hci5: command tx timeout [ 977.126793][T20633] Bluetooth: hci5: command tx timeout [ 977.244094][ T3506] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.430837][ T3506] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.473950][T22083] syzkaller0: entered promiscuous mode [ 977.480189][T22083] syzkaller0: entered allmulticast mode [ 977.781303][T22056] chnl_net:caif_netlink_parms(): no params data found [ 977.950125][T22056] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.965645][T22056] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.973038][T22056] bridge_slave_0: entered allmulticast mode [ 977.988069][T22056] bridge_slave_0: entered promiscuous mode [ 978.037860][T22056] bridge0: port 2(bridge_slave_1) entered blocking state [ 978.045274][T22056] bridge0: port 2(bridge_slave_1) entered disabled state [ 978.101758][T22056] bridge_slave_1: entered allmulticast mode [ 978.111899][T22056] bridge_slave_1: entered promiscuous mode [ 978.142753][T21999] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 978.259088][T21999] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 978.291775][T22056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 978.311422][T21999] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 978.348863][T22056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 978.436003][T22106] syzkaller0: entered promiscuous mode [ 978.449803][T22106] syzkaller0: entered allmulticast mode [ 978.489884][T21999] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 978.630313][T22056] team0: Port device team_slave_0 added [ 978.671229][T22056] team0: Port device team_slave_1 added [ 978.852201][T22056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 978.878074][T22056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 978.918707][T22056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 979.025058][T22056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 979.071670][T22056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 979.115624][T22056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 979.205661][T20633] Bluetooth: hci5: command tx timeout [ 981.190697][T22056] hsr_slave_0: entered promiscuous mode [ 981.230686][T22056] hsr_slave_1: entered promiscuous mode [ 981.246516][T22056] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 981.254471][T22056] Cannot create hsr debugfs directory [ 981.301158][T20633] Bluetooth: hci5: command tx timeout [ 981.640756][T21999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 981.846217][T21999] 8021q: adding VLAN 0 to HW filter on device team0 [ 981.893628][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.901114][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 981.913085][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.920507][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 982.811176][T22056] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 982.856417][T22056] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 982.997721][T22056] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 983.099173][T22056] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 983.269873][ T3506] hsr_slave_0: left promiscuous mode [ 983.386394][ T3506] hsr_slave_1: left promiscuous mode [ 983.428701][ T3506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 983.440497][ T3506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 983.457138][ T3506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 983.464647][ T3506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 983.477142][ T3506] veth0_to_hsr: left allmulticast mode [ 983.482697][ T3506] veth0_to_hsr: left promiscuous mode [ 983.489480][ T3506] bridge0: port 3(veth0_to_hsr) entered disabled state [ 983.500165][ T3506] bridge_slave_1: left allmulticast mode [ 983.506563][ T3506] bridge_slave_1: left promiscuous mode [ 983.512475][ T3506] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.523944][ T3506] bridge_slave_0: left allmulticast mode [ 983.530259][ T3506] bridge_slave_0: left promiscuous mode [ 983.536162][ T3506] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.572707][ T3506] veth1_macvtap: left promiscuous mode [ 983.580121][ T3506] veth0_macvtap: left promiscuous mode [ 983.587148][ T3506] veth1_vlan: left promiscuous mode [ 983.592572][ T3506] veth0_vlan: left promiscuous mode [ 984.457080][ T3506] team0 (unregistering): Port device team_slave_1 removed [ 984.510808][ T3506] team0 (unregistering): Port device team_slave_0 removed [ 984.563434][ T3506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 984.622194][ T3506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 985.039226][ T3506] bond0 (unregistering): Released all slaves [ 985.467734][T21999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 985.799349][T22056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 985.875602][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 985.934997][T22056] 8021q: adding VLAN 0 to HW filter on device team0 [ 985.988213][T10024] bridge0: port 1(bridge_slave_0) entered blocking state [ 985.995555][T10024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 986.090860][T10024] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.098204][T10024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 986.662431][ T3506] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.103315][ T3506] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.228785][T21999] veth0_vlan: entered promiscuous mode [ 987.303149][ T3506] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.411064][ T3506] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.428303][T21999] veth1_vlan: entered promiscuous mode [ 987.502509][T22056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 987.538907][T21999] veth0_macvtap: entered promiscuous mode [ 987.582608][T21999] veth1_macvtap: entered promiscuous mode [ 987.670479][T21999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 987.690369][T21999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 987.707980][T21999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 987.724084][T21999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 987.736717][T21999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 987.798178][T21999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 987.836963][T21999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 987.855497][T21999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 987.875638][T21999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 987.917421][T21999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 987.986177][T21999] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.995069][T21999] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.006852][T21999] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.016171][T21999] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.303879][T22056] veth0_vlan: entered promiscuous mode [ 988.418794][T22056] veth1_vlan: entered promiscuous mode [ 988.440918][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 988.464814][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 988.546587][T10032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 988.554651][T10032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 988.602142][T22056] veth0_macvtap: entered promiscuous mode [ 988.620186][T22056] veth1_macvtap: entered promiscuous mode [ 988.691965][T22056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 988.708595][T22056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 988.720132][T22056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 988.732353][T22056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 988.742658][T22056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 988.754761][T22056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 988.767763][T22056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 988.797114][T22056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 988.814799][T22056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 988.835289][T22056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 988.851664][T22056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 988.862234][T22056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 988.873351][T22056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 988.897428][T22056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 989.050227][T22056] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.065641][T22056] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.077344][T22056] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.086883][T22056] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.244625][T22225] syzkaller0: entered promiscuous mode [ 989.263055][T22225] syzkaller0: entered allmulticast mode [ 992.102516][ T3520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 992.160705][ T3520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 992.375266][ T3520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 992.394804][ T3520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 992.514089][ T3506] hsr_slave_0: left promiscuous mode [ 992.547764][ T3506] hsr_slave_1: left promiscuous mode [ 992.568148][ T3506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 992.585694][ T3506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 992.606458][ T3506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 992.614129][ T3506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 992.639913][ T3506] bridge_slave_1: left allmulticast mode [ 992.665809][ T3506] bridge_slave_1: left promiscuous mode [ 992.675801][ T3506] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.701883][ T3506] bridge_slave_0: left allmulticast mode [ 992.725484][ T3506] bridge_slave_0: left promiscuous mode [ 992.731356][ T3506] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.897312][ T3506] veth1_macvtap: left promiscuous mode [ 992.903135][ T3506] veth0_macvtap: left promiscuous mode [ 992.917420][ T3506] veth1_vlan: left promiscuous mode [ 993.548844][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.555426][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.071949][T14107] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 995.109906][T14107] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 995.133835][T14107] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 995.184624][T14107] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 995.192652][T14107] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 995.205277][T14107] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 995.237130][ T3506] team0 (unregistering): Port device team_slave_1 removed [ 995.290520][ T3506] team0 (unregistering): Port device team_slave_0 removed [ 995.345096][ T3506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 995.400486][ T3506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 995.826820][ T3506] bond0 (unregistering): Released all slaves [ 997.285616][T14107] Bluetooth: hci0: command tx timeout [ 997.538395][T22261] chnl_net:caif_netlink_parms(): no params data found [ 997.999905][T22261] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.025711][T22261] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.041310][T22261] bridge_slave_0: entered allmulticast mode [ 998.079457][T22261] bridge_slave_0: entered promiscuous mode [ 998.136538][T22261] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.143877][T22261] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.163797][T22261] bridge_slave_1: entered allmulticast mode [ 998.190058][T22261] bridge_slave_1: entered promiscuous mode [ 998.263689][T22261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 998.294961][T22261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 998.457944][T22261] team0: Port device team_slave_0 added [ 998.478567][T22261] team0: Port device team_slave_1 added [ 998.532770][T22311] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.560072][T22311] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.732353][T22311] bridge0: entered allmulticast mode [ 999.010248][T22261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 999.025663][T22261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 999.052778][T22261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 999.065186][T22314] bridge_slave_1: left allmulticast mode [ 999.071055][T22314] bridge_slave_1: left promiscuous mode [ 999.078334][T22314] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.089095][T22314] bridge_slave_0: left allmulticast mode [ 999.095058][T22314] bridge_slave_0: left promiscuous mode [ 999.101857][T22314] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.272641][T22261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 999.283052][T22261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 999.314299][T22261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 999.380380][T14107] Bluetooth: hci0: command tx timeout [ 999.474854][T22261] hsr_slave_0: entered promiscuous mode [ 999.509902][T22261] hsr_slave_1: entered promiscuous mode [ 1000.691281][T22338] syzkaller0: entered promiscuous mode [ 1000.715251][T22338] syzkaller0: entered allmulticast mode [ 1000.778188][T22353] gretap0: refused to change device tx_queue_len [ 1000.835821][T22261] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1000.926679][T22261] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1001.114165][T22261] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1001.449306][T14107] Bluetooth: hci0: command tx timeout [ 1003.525707][T14107] Bluetooth: hci0: command tx timeout [ 1003.612643][T22261] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1003.719284][T22361] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.727126][T22361] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.755317][T22361] bridge0: entered allmulticast mode [ 1003.789057][T22362] bridge_slave_1: left allmulticast mode [ 1003.809986][T22362] bridge_slave_1: left promiscuous mode [ 1003.824064][T22362] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.846317][T22362] bridge_slave_0: left allmulticast mode [ 1003.852232][T22362] bridge_slave_0: left promiscuous mode [ 1003.863907][T22362] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.351440][T22261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1004.539706][T22261] 8021q: adding VLAN 0 to HW filter on device team0 [ 1004.650938][ T3506] bridge0: port 1(bridge_slave_0) entered blocking state [ 1004.658213][ T3506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1004.728899][ T3506] bridge0: port 2(bridge_slave_1) entered blocking state [ 1004.736178][ T3506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1005.226047][T22389] syzkaller0: entered promiscuous mode [ 1005.231756][T22389] syzkaller0: entered allmulticast mode [ 1008.053317][T22407] syzkaller0: entered promiscuous mode [ 1008.060269][T22407] syzkaller0: entered allmulticast mode [ 1010.793222][T22429] syzkaller0: entered promiscuous mode [ 1010.801202][T22429] syzkaller0: entered allmulticast mode [ 1013.467510][T22261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1014.522394][T22480] syzkaller0: entered promiscuous mode [ 1014.542541][T22480] syzkaller0: entered allmulticast mode [ 1019.459126][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1021.864132][T22507] syzkaller0: entered promiscuous mode [ 1021.870135][T22507] syzkaller0: entered allmulticast mode [ 1024.270813][T22261] veth0_vlan: entered promiscuous mode [ 1024.493254][T22261] veth1_vlan: entered promiscuous mode [ 1024.790037][T22261] veth0_macvtap: entered promiscuous mode [ 1024.839017][T22261] veth1_macvtap: entered promiscuous mode [ 1024.940739][T22261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1024.982446][T22261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.009823][T22261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.049603][T22261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.088096][T22261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.132439][T22261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.181316][T22261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1025.250773][T22261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.291028][T22261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.311603][T22261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.335591][T22261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.355518][T22261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.384277][T22261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.412412][T22261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1025.440585][T22261] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.462246][T22261] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.512301][T22261] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.543121][T22261] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.913346][T10035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1025.941335][T10035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1026.026894][T22549] syzkaller0: entered promiscuous mode [ 1026.032487][T22549] syzkaller0: entered allmulticast mode [ 1026.071823][ T3520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1026.097235][ T3520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1026.981133][T20633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1026.990779][T20633] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1027.000677][T20633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1027.022798][T20633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1027.047472][T20633] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1027.056244][T20633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1029.081862][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.127230][T20633] Bluetooth: hci2: command tx timeout [ 1029.369553][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.575086][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.768447][ T49] .`: (slave netdevsim0): Releasing backup interface [ 1029.795289][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.978085][T14107] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1029.989499][T14107] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1029.998829][T14107] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1030.009349][T14107] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1030.073911][T14107] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1030.081916][T14107] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1030.772349][T22560] chnl_net:caif_netlink_parms(): no params data found [ 1031.088657][T22589] syzkaller0: entered promiscuous mode [ 1031.094318][T22589] syzkaller0: entered allmulticast mode [ 1031.205583][T14107] Bluetooth: hci2: command tx timeout [ 1031.335050][T22560] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.355061][T22560] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.371193][T22560] bridge_slave_0: entered allmulticast mode [ 1031.388081][T22560] bridge_slave_0: entered promiscuous mode [ 1031.555894][T22560] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.563375][T22560] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.592073][T22560] bridge_slave_1: entered allmulticast mode [ 1031.618557][T22560] bridge_slave_1: entered promiscuous mode [ 1032.168446][T14107] Bluetooth: hci3: command tx timeout [ 1033.285635][T14107] Bluetooth: hci2: command tx timeout [ 1034.247755][T14107] Bluetooth: hci3: command tx timeout [ 1035.367813][T14107] Bluetooth: hci2: command tx timeout [ 1036.261017][T22576] chnl_net:caif_netlink_parms(): no params data found [ 1036.325644][T14107] Bluetooth: hci3: command tx timeout [ 1036.337930][T22560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1036.442920][T22560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1036.530925][T22560] team0: Port device team_slave_0 added [ 1036.589010][T22560] team0: Port device team_slave_1 added [ 1036.748949][T22576] bridge0: port 1(bridge_slave_0) entered blocking state [ 1036.758761][T22576] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.767474][T22576] bridge_slave_0: entered allmulticast mode [ 1036.778736][T22576] bridge_slave_0: entered promiscuous mode [ 1036.794354][T22560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1036.810347][T22560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1036.837431][T22560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1036.874500][T22576] bridge0: port 2(bridge_slave_1) entered blocking state [ 1036.891858][T22576] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.916254][T22576] bridge_slave_1: entered allmulticast mode [ 1036.936553][T22576] bridge_slave_1: entered promiscuous mode [ 1036.986643][T22560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1036.993699][T22560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1037.086803][T22560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1037.506136][ T49] hsr0: left allmulticast mode [ 1037.511033][ T49] hsr_slave_0: left allmulticast mode [ 1037.545647][ T49] hsr_slave_1: left allmulticast mode [ 1037.551151][ T49] hsr0: left promiscuous mode [ 1037.567387][ T49] nr0: port 1(hsr0) entered disabled state [ 1037.626536][ T49] hsr_slave_0: left promiscuous mode [ 1037.634549][ T49] hsr_slave_1: left promiscuous mode [ 1037.744367][ T49] veth1_macvtap: left promiscuous mode [ 1037.755528][ T49] veth0_macvtap: left promiscuous mode [ 1038.494275][T14107] Bluetooth: hci3: command tx timeout [ 1039.030351][ T49] team0 (unregistering): Port device geneve1 removed [ 1039.873413][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1039.956651][ T49] team0 (unregistering): Port device C removed [ 1040.049359][ T49] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1040.132943][ T49] .` (unregistering): (slave 10): Releasing backup interface [ 1040.778891][ T49] .` (unregistering): Released all slaves [ 1040.836647][T22576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1040.869340][T22560] hsr_slave_0: entered promiscuous mode [ 1040.889064][T22560] hsr_slave_1: entered promiscuous mode [ 1040.925990][T22560] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1040.933808][T22560] Cannot create hsr debugfs directory [ 1040.989244][T22576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1041.097237][T22576] team0: Port device team_slave_0 added [ 1041.132368][T22576] team0: Port device team_slave_1 added [ 1041.312922][T22576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1041.325486][T22576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1041.415832][T22576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1041.490764][T22576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1041.505438][T22576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1041.544747][T22576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1041.653757][T22683] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1041.664180][T22683] syzkaller0: linktype set to 774 [ 1041.787046][T22576] hsr_slave_0: entered promiscuous mode [ 1041.806593][T22576] hsr_slave_1: entered promiscuous mode [ 1041.818626][T22576] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1041.844182][T22576] Cannot create hsr debugfs directory [ 1042.150789][ T49] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.392142][ T49] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.592150][ T49] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.750599][ T49] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.856952][T22707] syzkaller0: entered promiscuous mode [ 1042.862692][T22707] syzkaller0: entered allmulticast mode [ 1046.038143][T22560] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1046.101058][T22560] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1046.293143][T22560] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1046.319476][T22560] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1046.583207][T22576] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1046.620183][T22576] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1046.716662][T22576] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1046.741047][T22576] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1047.041439][T22560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1047.153936][T22576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1047.177680][T22560] 8021q: adding VLAN 0 to HW filter on device team0 [ 1047.216605][ T3463] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.224060][ T3463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1047.265180][T22576] 8021q: adding VLAN 0 to HW filter on device team0 [ 1047.296947][ T3520] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.304122][ T3520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1047.320929][ T3520] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.328307][ T3520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1047.377024][T10024] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.384233][T10024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1047.504901][ T49] hsr_slave_0: left promiscuous mode [ 1047.514443][ T49] hsr_slave_1: left promiscuous mode [ 1047.523455][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1047.533700][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1047.541798][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1047.549405][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1047.571247][ T49] veth0_macvtap: left promiscuous mode [ 1047.577133][ T49] veth1_vlan: left promiscuous mode [ 1047.582821][ T49] veth0_vlan: left promiscuous mode [ 1048.302008][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1048.353219][ T49] team0 (unregistering): Port device team_slave_0 removed [ 1048.414062][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1048.467853][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1048.908855][ T49] bond0 (unregistering): Released all slaves [ 1049.002252][T22560] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1049.574128][T22560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1049.612628][T22576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1049.721843][T22560] veth0_vlan: entered promiscuous mode [ 1049.760848][T22560] veth1_vlan: entered promiscuous mode [ 1049.848708][T22560] veth0_macvtap: entered promiscuous mode [ 1049.876850][T22560] veth1_macvtap: entered promiscuous mode [ 1049.947111][T22560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1049.962682][T22560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.974821][T22560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1049.996640][T22560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.008628][T22560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1050.020761][T22560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.032766][T22560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1050.057695][T22560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1050.071581][T22560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.081687][T22560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1050.094219][T22560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.104642][T22560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1050.118002][T22560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.130486][T22560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1050.150883][T22560] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.159760][T22560] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.169398][T22560] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.178801][T22560] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.317792][T22576] veth0_vlan: entered promiscuous mode [ 1050.341814][ T3520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1050.358131][ T3520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1050.368754][T22576] veth1_vlan: entered promiscuous mode [ 1050.412969][T10024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1050.428450][T10024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1050.470209][T22576] veth0_macvtap: entered promiscuous mode [ 1050.494145][T22576] veth1_macvtap: entered promiscuous mode [ 1050.521999][T22576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1050.533220][T22576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.543675][T22576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1050.576934][T22576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.614295][T22576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1050.635709][T22576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.810519][T22576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1050.826361][T22576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.838773][T22576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1050.873828][T22576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1050.890418][T22576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.937151][T22576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1050.955256][T22576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.974203][T22576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1050.985078][T22576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.002097][T22576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1051.015459][T22576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.048192][T22576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1051.090944][T22576] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.102568][T22576] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.117308][T22576] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.135167][T22576] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.431974][T10038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1051.488750][T10038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1051.579341][T10024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1051.611732][T10024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.515525][T22763] syzkaller0: entered promiscuous mode [ 1052.523363][T22763] syzkaller0: entered allmulticast mode [ 1054.971623][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.989169][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.462549][T22798] syzkaller0: entered promiscuous mode [ 1056.475997][T22798] syzkaller0: entered allmulticast mode [ 1061.252787][T22841] syzkaller0: entered promiscuous mode [ 1061.263363][T22841] syzkaller0: entered allmulticast mode [ 1061.363299][T22836] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.405950][T22836] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.583162][T22836] bridge0: entered allmulticast mode [ 1061.596409][T22849] bridge_slave_1: left allmulticast mode [ 1061.605749][T22849] bridge_slave_1: left promiscuous mode [ 1061.611589][T22849] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.625276][T22849] bridge_slave_0: left allmulticast mode [ 1061.632842][T22849] bridge_slave_0: left promiscuous mode [ 1061.645206][T22849] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.298304][T14107] Bluetooth: hci4: command 0x0406 tx timeout [ 1071.145867][T22961] bridge0: port 3(hsr_slave_1) entered blocking state [ 1071.153025][T22961] bridge0: port 3(hsr_slave_1) entered disabled state [ 1071.175340][T22961] hsr_slave_1: entered allmulticast mode [ 1071.185616][T22961] hsr_slave_1: left allmulticast mode [ 1072.680049][T22978] syzkaller0: entered promiscuous mode [ 1072.691957][T22978] syzkaller0: entered allmulticast mode [ 1077.807630][T23023] -w: renamed from bridge0 (while UP) [ 1082.001889][T23121] syzkaller0: entered allmulticast mode [ 1087.774643][T14107] Bluetooth: hci1: command 0x0406 tx timeout [ 1093.048551][T23361] netlink: 156 bytes leftover after parsing attributes in process `syz.5.5321'. [ 1093.235741][T23374] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5324'. [ 1093.564191][T23390] netlink: 'syz.5.5327': attribute type 10 has an invalid length. [ 1093.679508][T23390] 8021q: adding VLAN 0 to HW filter on device team0 [ 1093.731325][T23390] bond0: (slave team0): Enslaving as an active interface with an up link [ 1093.962970][T20633] Bluetooth: hci3: unexpected event 0x03 length: 15 > 11 [ 1095.891317][T23452] netlink: 188 bytes leftover after parsing attributes in process `syz.8.5340'. [ 1096.980432][T23474] netlink: 'syz.3.5342': attribute type 29 has an invalid length. [ 1097.008108][T23474] netlink: 'syz.3.5342': attribute type 29 has an invalid length. [ 1097.050264][T23474] netlink: 'syz.3.5342': attribute type 29 has an invalid length. [ 1097.716994][T23500] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5352'. [ 1097.878356][T23498] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5350'. [ 1101.542113][T23617] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5381'. [ 1103.571409][T23676] netlink: 'syz.8.5399': attribute type 33 has an invalid length. [ 1103.607787][T23676] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5399'. [ 1105.246594][T23711] : port 1(gretap0) entered blocking state [ 1105.271105][T23711] : port 1(gretap0) entered disabled state [ 1105.295143][T23711] gretap0: entered allmulticast mode [ 1105.314432][T23711] gretap0: entered promiscuous mode [ 1108.419270][T23756] syzkaller0: entered promiscuous mode [ 1108.425023][T23756] syzkaller0: entered allmulticast mode [ 1113.062227][T23819] delete_channel: no stack [ 1115.521575][T10032] wlan1: Trigger new scan to find an IBSS to join [ 1116.458065][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.464483][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.506428][T23921] netlink: 'syz.5.5473': attribute type 6 has an invalid length. [ 1116.564521][T23921] netlink: 168 bytes leftover after parsing attributes in process `syz.5.5473'. [ 1116.593475][T23918] delete_channel: no stack [ 1116.998428][T23931] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.5476'. [ 1118.487971][T20633] Bluetooth: hci0: command 0x0406 tx timeout [ 1119.449373][ T3520] wlan1: Trigger new scan to find an IBSS to join [ 1119.920824][T14107] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 1120.547734][ T3506] wlan1: Creating new IBSS network, BSSID 16:68:29:ba:56:cb [ 1120.897259][T24067] syzkaller0: entered promiscuous mode [ 1120.903021][T24067] syzkaller0: entered allmulticast mode [ 1121.167118][T24082] netlink: 'syz.7.5530': attribute type 6 has an invalid length. [ 1121.175032][T24082] netlink: 168 bytes leftover after parsing attributes in process `syz.7.5530'. [ 1123.373023][ T12] wlan1: Trigger new scan to find an IBSS to join [ 1124.641998][T24122] netlink: 'syz.8.5543': attribute type 13 has an invalid length. [ 1124.657662][T24122] netlink: 152 bytes leftover after parsing attributes in process `syz.8.5543'. [ 1126.232345][T24183] sctp: [Deprecated]: syz.7.5564 (pid 24183) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1126.232345][T24183] Use struct sctp_sack_info instead [ 1126.407752][ T3520] wlan1: Trigger new scan to find an IBSS to join [ 1129.759523][ T3520] wlan1: Creating new IBSS network, BSSID d6:d4:5b:36:7a:b6 [ 1135.366575][T10032] wlan1: Trigger new scan to find an IBSS to join [ 1140.083770][T24521] syzkaller0: entered promiscuous mode [ 1140.118904][T24521] syzkaller0: entered allmulticast mode [ 1140.406975][T10024] wlan1: Trigger new scan to find an IBSS to join [ 1142.018491][ T29] INFO: task syz.4.5032:22123 blocked for more than 144 seconds. [ 1142.026876][ T29] Not tainted syzkaller #0 [ 1142.031866][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1142.054736][ T29] task:syz.4.5032 state:D stack:23464 pid:22123 ppid:21761 flags:0x00004006 [ 1142.064496][ T29] Call Trace: [ 1142.074627][ T29] [ 1142.096890][ T29] __schedule+0x1553/0x45a0 [ 1142.106580][ T29] ? rcu_is_watching+0x15/0xb0 [ 1142.114210][ T29] ? asan.module_dtor+0x20/0x20 [ 1142.123130][ T29] ? trace_contention_end+0x39/0xe0 [ 1142.131535][ T29] ? perf_event_ctx_lock_nested+0x490/0x490 [ 1142.138048][ T29] ? task_work_cancel+0xa5/0x220 [ 1142.143199][ T29] ? task_work_cancel_func+0x210/0x210 [ 1142.149071][ T29] schedule+0xbd/0x170 [ 1142.153504][ T29] ? _free_event+0xfe/0xf30 [ 1142.158829][ T29] _free_event+0x174/0xf30 [ 1142.163810][ T29] perf_event_release_kernel+0x842/0x8d0 [ 1142.170037][ T29] ? __might_sleep+0xe0/0xe0 [ 1142.175193][ T29] ? calc_timer_values+0x400/0x400 [ 1142.182006][ T29] ? __fput+0x61c/0x970 [ 1142.186736][ T29] ? perf_mmap+0x15c0/0x15c0 [ 1142.191573][ T29] perf_release+0x3b/0x40 [ 1142.196302][ T29] __fput+0x234/0x970 [ 1142.200621][ T29] task_work_run+0x1d4/0x260 [ 1142.205585][ T29] ? task_work_cancel+0x220/0x220 [ 1142.211138][ T29] get_signal+0x1235/0x13f0 [ 1142.215908][ T29] ? create_io_thread+0x190/0x190 [ 1142.221207][ T29] arch_do_signal_or_restart+0xc2/0x800 [ 1142.227204][ T29] ? __x64_sys_clone+0x1b7/0x230 [ 1142.233272][ T29] ? get_sigframe_size+0x20/0x20 [ 1142.238746][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 1142.244486][ T29] exit_to_user_mode_loop+0x70/0x110 [ 1142.250324][ T29] exit_to_user_mode_prepare+0xee/0x180 [ 1142.257390][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 1142.263007][ T29] do_syscall_64+0x61/0xa0 [ 1142.268077][ T29] ? clear_bhb_loop+0x40/0x90 [ 1142.272897][ T29] ? clear_bhb_loop+0x40/0x90 [ 1142.279641][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1142.286031][ T29] RIP: 0033:0x7f3a1b99c819 [ 1142.290787][ T29] RSP: 002b:00007f3a1c7b8fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1142.299950][ T29] RAX: fffffffffffffffc RBX: 00007f3a1bc16090 RCX: 00007f3a1b99c819 [ 1142.309541][ T29] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1142.318422][ T29] RBP: 00007f3a1ba32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1142.327186][ T29] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1142.336176][ T29] R13: 00007f3a1bc16128 R14: 00007f3a1bc16090 R15: 00007ffffd7d4ac8 [ 1142.344328][ T29] [ 1142.367889][ T3463] wlan1: Creating new IBSS network, BSSID 86:f8:fc:53:94:b6 [ 1142.389163][ T29] [ 1142.389163][ T29] Showing all locks held in the system: [ 1142.398943][ T29] 1 lock held by khungtaskd/29: [ 1142.404182][ T29] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 1142.423814][ T29] 3 locks held by kworker/u4:12/3520: [ 1142.429794][ T29] #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1142.443455][ T29] #1: ffffc9000d017d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1142.461171][ T29] #2: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1142.472992][ T29] 3 locks held by klogd/5129: [ 1142.496556][ T29] #0: ffff8880b8e3c018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 1142.510575][ T29] #1: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: ___perf_sw_event+0x199/0x730 [ 1142.521398][ T29] #2: ffff88807f684618 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0x60/0x1190 [ 1142.530800][ T29] 2 locks held by dhcpcd/5434: [ 1142.536227][ T29] #0: ffff8880196fd690 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0xf4/0x810 [ 1142.546880][ T29] #1: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: netlink_dump+0x78f/0xe50 [ 1142.556178][ T29] 2 locks held by getty/5531: [ 1142.561338][ T29] #0: ffff88823bdc28a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1142.571592][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 1142.583279][ T29] 2 locks held by kworker/1:0/21779: [ 1142.592833][ T29] #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1142.604548][ T29] #1: ffffc900052b7d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1142.618610][ T29] 2 locks held by syz.3.5671/24520: [ 1142.623876][ T29] #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 1142.639496][ T29] #1: ffffffff8d137ab8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 1142.652349][ T29] 1 lock held by syz.7.5677/24544: [ 1142.662006][ T29] #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: ipv6_route_ioctl+0x322/0x500 [ 1142.672629][ T29] 1 lock held by syz.5.5680/24549: [ 1142.678106][ T29] #0: ffffffff8d188128 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2e/0x140 [ 1142.690041][ T29] 1 lock held by syz.5.5680/24550: [ 1142.701523][ T29] 2 locks held by dhcpcd/24553: [ 1142.707061][ T29] #0: ffff88805e21a620 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x9b/0x230 [ 1142.717874][ T29] #1: ffffffff8d137ab8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 1142.739738][ T29] 1 lock held by dhcpcd/24558: [ 1142.744613][ T29] #0: ffff888053ece220 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x9b/0x230 [ 1142.755548][ T29] 1 lock held by dhcpcd/24559: [ 1142.760495][ T29] #0: ffff88807712ac20 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x9b/0x230 [ 1142.771717][ T29] 1 lock held by dhcpcd/24562: [ 1142.776794][ T29] #0: ffff888053e89a20 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x9b/0x230 [ 1142.787445][ T29] 1 lock held by dhcpcd/24563: [ 1142.793952][ T29] #0: ffff888053e8be20 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x9b/0x230 [ 1142.842240][ T29] [ 1142.844667][ T29] ============================================= [ 1142.844667][ T29] [ 1142.854200][ T29] NMI backtrace for cpu 1 [ 1142.858591][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1142.865922][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1142.876034][ T29] Call Trace: [ 1142.879446][ T29] [ 1142.882674][ T29] dump_stack_lvl+0x18c/0x250 [ 1142.887416][ T29] ? show_regs_print_info+0x20/0x20 [ 1142.892749][ T29] ? load_image+0x420/0x420 [ 1142.897316][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 1142.902310][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 1142.908719][ T29] ? _printk+0xde/0x130 [ 1142.913036][ T29] ? load_image+0x420/0x420 [ 1142.917760][ T29] ? load_image+0x420/0x420 [ 1142.922311][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1142.928530][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 1142.934789][ T29] watchdog+0xf3d/0xf80 [ 1142.939013][ T29] ? watchdog+0x1e1/0xf80 [ 1142.943392][ T29] kthread+0x2fa/0x390 [ 1142.947522][ T29] ? hungtask_pm_notify+0x90/0x90 [ 1142.952938][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1142.957568][ T29] ret_from_fork+0x48/0x80 [ 1142.962104][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1142.966799][ T29] ret_from_fork_asm+0x11/0x20 [ 1142.971751][ T29] [ 1142.976471][ T29] Sending NMI from CPU 1 to CPUs 0: [ 1142.981831][ C0] NMI backtrace for cpu 0 [ 1142.981843][ C0] CPU: 0 PID: 22560 Comm: syz-executor Not tainted syzkaller #0 [ 1142.981859][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1142.981867][ C0] RIP: 0010:put_cpu_partial+0x30/0x250 [ 1142.981888][ C0] Code: 55 41 54 53 48 83 ec 20 89 54 24 04 49 89 f7 48 89 fb 65 48 8b 04 25 28 00 00 00 48 89 44 24 18 48 c7 44 24 10 00 00 00 00 9c <8f> 44 24 10 48 8b 6c 24 10 fa f7 c5 00 02 00 00 74 05 e8 19 a9 ae [ 1142.981901][ C0] RSP: 0018:ffffc900039e7740 EFLAGS: 00000286 [ 1142.981914][ C0] RAX: 26de8a4894c5ca00 RBX: ffff888017c41b40 RCX: 000000008010000f [ 1142.981926][ C0] RDX: 0000000000000001 RSI: ffffea0001de0900 RDI: ffff888017c41b40 [ 1142.981936][ C0] RBP: ffff888017c41b40 R08: 0000000000000001 R09: 0000000000000000 [ 1142.981945][ C0] R10: 0000000000000000 R11: fffffbfff2238aa6 R12: ffff888017c41b40 [ 1142.981955][ C0] R13: 0000000000100010 R14: 000000008010000f R15: ffffea0001de0900 [ 1142.981965][ C0] FS: 0000555574c3c500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1142.981978][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1142.981989][ C0] CR2: 000055850c436660 CR3: 0000000065732000 CR4: 00000000003506f0 [ 1142.982003][ C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 1142.982012][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1142.982022][ C0] Call Trace: [ 1142.982027][ C0] [ 1142.982033][ C0] ? put_cpu_partial+0x6e/0x250 [ 1142.982049][ C0] __slab_free+0x319/0x400 [ 1142.982064][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1142.982082][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1142.982098][ C0] ? __phys_addr+0xba/0x170 [ 1142.982116][ C0] qlist_free_all+0x75/0xd0 [ 1142.982137][ C0] kasan_quarantine_reduce+0x143/0x160 [ 1142.982158][ C0] __kasan_slab_alloc+0x22/0x80 [ 1142.982175][ C0] slab_post_alloc_hook+0x6e/0x4b0 [ 1142.982197][ C0] kmem_cache_alloc+0x11a/0x2d0 [ 1142.982216][ C0] ? alloc_empty_file+0x9e/0x1d0 [ 1142.982239][ C0] alloc_empty_file+0x9e/0x1d0 [ 1142.982268][ C0] path_openat+0x113/0x3230 [ 1142.982292][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1142.982308][ C0] ? do_sys_openat2+0xda/0x1d0 [ 1142.982323][ C0] ? __x64_sys_openat+0x139/0x160 [ 1142.982339][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1142.982357][ C0] ? verify_lock_unused+0x140/0x140 [ 1142.982374][ C0] ? do_filp_open+0x430/0x430 [ 1142.982391][ C0] ? __virt_addr_valid+0x18c/0x540 [ 1142.982412][ C0] do_filp_open+0x1f5/0x430 [ 1142.982429][ C0] ? vfs_tmpfile+0x490/0x490 [ 1142.982453][ C0] ? _raw_spin_unlock+0x28/0x40 [ 1142.982468][ C0] ? alloc_fd+0x58f/0x630 [ 1142.982490][ C0] do_sys_openat2+0x134/0x1d0 [ 1142.982508][ C0] ? do_sys_open+0xe0/0xe0 [ 1142.982525][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1142.982542][ C0] ? lock_chain_count+0x20/0x20 [ 1142.982560][ C0] __x64_sys_openat+0x139/0x160 [ 1142.982579][ C0] do_syscall_64+0x55/0xa0 [ 1142.982593][ C0] ? clear_bhb_loop+0x40/0x90 [ 1142.982609][ C0] ? clear_bhb_loop+0x40/0x90 [ 1142.982627][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1142.982643][ C0] RIP: 0033:0x7fc31cd9bb3c [ 1142.982655][ C0] Code: 4c 89 54 24 18 41 89 f2 41 83 e2 40 75 40 89 f0 f7 d0 a9 00 00 41 00 74 35 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 <48> 3d 00 f0 ff ff 77 44 48 8b 54 24 18 64 48 2b 14 25 28 00 00 00 [ 1142.982666][ C0] RSP: 002b:00007ffff4f89960 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 1142.982680][ C0] RAX: ffffffffffffffda RBX: 0000000000000139 RCX: 00007fc31cd9bb3c [ 1142.982690][ C0] RDX: 0000000000090800 RSI: 00007fc31ce325d3 RDI: 00000000ffffff9c [ 1142.982700][ C0] RBP: 00007ffff4f89a0c R08: 0000000000000000 R09: 0000000000000000 [ 1142.982709][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000008d [ 1142.982717][ C0] R13: 0000000000000000 R14: 00000000001165a0 R15: 00007ffff4f89a60 [ 1142.982734][ C0] [ 1142.999468][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 1142.999484][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1142.999502][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1142.999519][ T29] Call Trace: [ 1142.999526][ T29] [ 1142.999533][ T29] dump_stack_lvl+0x18c/0x250 [ 1142.999567][ T29] ? show_regs_print_info+0x20/0x20 [ 1142.999592][ T29] ? load_image+0x420/0x420 [ 1142.999624][ T29] panic+0x2dc/0x730 [ 1142.999643][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 1142.999672][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 1142.999691][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 1142.999716][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 1142.999740][ T29] watchdog+0xf7c/0xf80 [ 1142.999763][ T29] ? watchdog+0x1e1/0xf80 [ 1142.999790][ T29] kthread+0x2fa/0x390 [ 1142.999806][ T29] ? hungtask_pm_notify+0x90/0x90 [ 1142.999827][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1142.999844][ T29] ret_from_fork+0x48/0x80 [ 1142.999863][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1142.999880][ T29] ret_from_fork_asm+0x11/0x20 [ 1142.999913][ T29] [ 1143.008307][ T29] Kernel Offset: disabled [ 1143.485039][ T29] Rebooting in 86400 seconds..