last executing test programs: 3m38.689814135s ago: executing program 0 (id=2625): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x7e, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x15008}, r0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0xfffffe51) write$cgroup_int(r2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}) 3m37.526450499s ago: executing program 0 (id=2628): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x8}, {0x90010022, 0x4}], 0x10, 0x80}, 0x94) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfc8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979e29857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37ceff9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f0800000000000000af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed210d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734f87da3770845cf442d488afdc0e170000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bbf8ab9c691841ab0931d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f080091c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efde0142cf90ff668b9757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c2f56855b18f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cffe6740f90735f66ca54fd87800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc604d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b85c8086e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000000000000000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7da88d2489fb000a4aa838f911c1a869fa55e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867bf0ff0099d71bb0d2f443e77a44e8c4b0455d95b19c73ef4c98f775aad9e1b317b3cc48f7ad1d82ea6ad6c3c7d943fb0157c250e2ba56301e25c19a7e37ce880bed8a8e1538560f2be7d4cca6539277505826bd61bad2bcd4914344d4a27b29d2eb89bdc7a702e485d68c04e8f6b05336bf8d8e116605eaf375a592fe2382763c3cba76a0e4029dad5d37dd77abb1b7d2e2de23a413"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce00030e00080ff008877fbac141416e000030a89079f03b180ff83080520e0845013f2325f004408050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 3m37.182801575s ago: executing program 0 (id=2630): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20400, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80800, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000040)={'dummy0\x00', @random='\x00\x00\x00\x00\x00 '}) 3m36.820660262s ago: executing program 0 (id=2643): socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2, 0x1, 0x84) socket$kcm(0x11, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a210, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xa2d40, 0x0) socket$kcm(0x2b, 0x1, 0x0) syz_clone(0x8001000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0xfe33) 3m36.091903576s ago: executing program 0 (id=2638): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x400000000000004}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000010000000000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="010000000300000000"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x3, r3, 0x4}, 0x38) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000580)={0x5, 0x80, 0x6, 0x7, 0x8, 0x2, 0x0, 0x0, 0x20000, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f00000003c0), 0x5}, 0x100080, 0x4, 0xfffffff0, 0x9, 0x7, 0xc, 0xf, 0x0, 0x1, 0x0, 0xd}, r4, 0x8, r0, 0x8) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000002ac0)={&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000002a80)=[@rights={{0x14, 0x1, 0x1, [r5]}}], 0x18, 0x800}, 0x40) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000000000000000000000850000006100000085"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fdffffff0000000000000000850000000800000095000000000000006e31e82d019ebf5f3cc674589ada6a33287f6d31d8de8a"], 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r8 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x0, 0x9}, 0x1cad, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x22, 0x0, &(0x7f00000006c0)="e0274239060000009774992f0800c6bd0d890986fef26b9ad47dd97e232656feb8e4", 0x0, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x40004000, 0x0, 0x0, &(0x7f0000000180), &(0x7f0000000240), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000071180a000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400"], 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3m35.022994045s ago: executing program 0 (id=2644): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x400000000000004}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, 0x0, &(0x7f0000001d40)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000f40)={r3, 0x0, 0x0}, 0x20) 3m19.350819723s ago: executing program 32 (id=2644): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x400000000000004}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, 0x0, &(0x7f0000001d40)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000f40)={r3, 0x0, 0x0}, 0x20) 57.087943129s ago: executing program 3 (id=3223): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80350, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x400000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x830, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x40000062) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) 56.356288873s ago: executing program 3 (id=3225): r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffdfffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x4}, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=r1, 0xe, 0x1, 0x9, &(0x7f0000000180)=[0x0], 0x41fa, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x40) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x0, 0x0, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(0x0, 0x0, 0x12, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x3, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8f3, 0x9}, 0x1c208, 0x0, 0xfff7fffa, 0x5, 0x0, 0x100, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x0, 0xf, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0xc8, 0x7, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc12082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x100, 0x7}, 0x481a, 0x0, 0x0, 0x7, 0x0, 0x0, 0xf792, 0x0, 0xffffffff, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) write$cgroup_subtree(r7, &(0x7f00000004c0)=ANY=[], 0xfdef) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x1}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000500)={r8, &(0x7f0000000080)="865e9804a2cafe8aa059f7124696be", &(0x7f0000000440)=""/188}, 0x20) 53.504323626s ago: executing program 3 (id=3226): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000840)=""/196, 0xc4}], 0x1}, 0x10000) 51.853361332s ago: executing program 3 (id=3229): bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x5, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x6f5}, 0x0, 0x7, 0x0, 0x0, 0x13ffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x80, 0x7fffffff}, 0x7e03, 0x0, 0x0, 0x0, 0x5, 0x3ff}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000080)=ANY=[@ANYRES64], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 48.151135104s ago: executing program 3 (id=3244): perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x3, 0x0, 0x10, 0xfc, 0x0, 0x1, 0x20225, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200003, 0x1, @perf_bp={0x0, 0x3}, 0x4048, 0xc8, 0x9, 0x7, 0x2, 0xdc4, 0x0, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x110) 47.930752954s ago: executing program 3 (id=3245): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x81) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x20000a00, &(0x7f0000000240)="38fb9ebb2128bbcb287bc5a98b2f56cddc4469933b361aabab71a2dd8f39fa4d6c207a883b7c776f12697a4f3d1e694ae98e4a3100c9ec1085a6bea82c77198870ff", 0x42, &(0x7f0000000300), &(0x7f0000000340), 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001880)={0xffffffffffffffff, &(0x7f0000000880)}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8920, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@cgroup=r0, 0xc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$cgroup(r0, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) 32.633990695s ago: executing program 33 (id=3245): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x81) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x20000a00, &(0x7f0000000240)="38fb9ebb2128bbcb287bc5a98b2f56cddc4469933b361aabab71a2dd8f39fa4d6c207a883b7c776f12697a4f3d1e694ae98e4a3100c9ec1085a6bea82c77198870ff", 0x42, &(0x7f0000000300), &(0x7f0000000340), 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001880)={0xffffffffffffffff, &(0x7f0000000880)}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8920, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@cgroup=r0, 0xc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$cgroup(r0, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) 10.905822964s ago: executing program 1 (id=3356): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 10.281090323s ago: executing program 1 (id=3360): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80350, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x105d30, 0x0, 0x0, 0x7, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x400000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x830, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)}, 0x40000062) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) 9.48722121s ago: executing program 1 (id=3364): bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x5, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x6f5}, 0x0, 0x7, 0x0, 0x0, 0x13ffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x800, 0x0, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x80, 0x7fffffff}, 0x7e03, 0x0, 0x0, 0x0, 0x5, 0x3ff}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 8.82710981s ago: executing program 2 (id=3368): socket$kcm(0xa, 0x3, 0x3a) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd358}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc40e, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x1, 0xc884, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) syz_clone(0xb00b000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, r2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x20, 0x0, 0x0, 0x1, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0x9, 0x6, 0x200, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x5, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x81, 0x105}, 0x108cd3, 0xa4, 0x2, 0x1, 0x800, 0x9b9b, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r4, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000200)='%-5lx \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000000), 0x0}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x7, 0x10, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6) socket$kcm(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(r2, 0x0, 0x4040000) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, 0x0, 0x0) close(r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe", 0x1a}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0xfe33) write$cgroup_pressure(r2, &(0x7f00000002c0)={'some', 0x20, 0x1, 0x20, 0x80}, 0x2f) 8.353207283s ago: executing program 2 (id=3370): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003300000000009500000000000000db74589d4b38cc306ac390649f72dea0"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 8.261473707s ago: executing program 6 (id=3290): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x63, 0x1, 0x0, 0x0, 0x0, 0xce, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xc}, 0x118002, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x100000000000, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x40, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 7.515171642s ago: executing program 5 (id=3371): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9f, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 7.414196306s ago: executing program 2 (id=3373): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r0, 0x40047451, 0xf0ff1f00000000) 7.398979227s ago: executing program 6 (id=3374): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000100)=r4) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000"], 0xffdd) 7.198041966s ago: executing program 5 (id=3375): openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) socket$kcm(0x1e, 0x1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, 0x0, 0xfe33) socket$kcm(0x22, 0x3, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x7, 0x5, 0xd, 0x7, 0x0, 0xfffffffffffffff7, 0x7a5d4, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xaaa3, 0x2, @perf_config_ext={0xa, 0x3}, 0x2, 0x576b, 0x8, 0x6, 0x6, 0xaeb, 0x3, 0x0, 0x24, 0x0, 0x40fc}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r5 = socket$kcm(0x2b, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0), 0x2, 0xffffffffffffffff, 0x4}, 0x38) sendmsg$kcm(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x24000000) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x890b, &(0x7f0000000100)) 6.760337977s ago: executing program 5 (id=3376): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xfe, 0x3, 0xa, 0x4, 0x0, 0x18a, 0x2547c, 0x14, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x1, 0xffffffff}, 0x108000, 0x80000001, 0x3, 0x9, 0xf, 0x0, 0x3, 0x0, 0x3, 0x0, 0x4}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x7) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f00000001c0)={0x9985b7b7d1ed15ab, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x400000, 0x21050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x800, 0x3, 0x4, 0x6, 0xfffffffffdf7bbfe, 0x1, 0x5, 0x0, 0x7f, 0x0, 0x200000000}, 0x0, 0x4000000000e, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21600, 0x5, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 6.640305812s ago: executing program 2 (id=3377): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x0}, @generic={0x2f}, @map_fd, @exit={0x95, 0x0, 0xc00}], {0x95, 0x0, 0x7000}}, &(0x7f0000000000)='GPL\x00', 0x400, 0xee, &(0x7f0000000340)=""/238}, 0x94) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) write$cgroup_subtree(r1, 0x0, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}, 0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) 6.145809595s ago: executing program 1 (id=3378): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 5.935059964s ago: executing program 1 (id=3379): socket$kcm(0xa, 0x3, 0x3a) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd358}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc40e, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x1, 0xc884, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) syz_clone(0xb00b000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, r2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x20, 0x0, 0x0, 0x1, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0x9, 0x6, 0x200, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x5, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x81, 0x105}, 0x108cd3, 0xa4, 0x2, 0x1, 0x800, 0x9b9b, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r4, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000200)='%-5lx \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000000), 0x0}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x7, 0x10, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6) socket$kcm(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(r2, 0x0, 0x4040000) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, 0x0, 0x0) close(r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe", 0x1a}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0xfe33) write$cgroup_pressure(r2, &(0x7f00000002c0)={'some', 0x20, 0x1, 0x20, 0x80}, 0x2f) 3.871364761s ago: executing program 5 (id=3380): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f9, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x18, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b0000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xdf}, 0x266, 0x400000, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x12, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x2, @perf_config_ext={0x2, 0x40}, 0x0, 0x8, 0x0, 0x5, 0x0, 0x7fff, 0xfffd, 0x0, 0x8, 0x0, 0x4}, 0xffffffffffffffff, 0x880000000000, 0xffffffffffffffff, 0x0) 3.820603373s ago: executing program 4 (id=3381): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2d, 'blkio'}]}, 0x7) 3.651219231s ago: executing program 4 (id=3382): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, 0xffffffffffffffff, 0x2, 0x2}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r1, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x3d, &(0x7f0000000040), 0x8) 3.650960011s ago: executing program 5 (id=3383): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffffe7) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r2, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) syz_clone(0x14000000, &(0x7f0000000280)="9c35fbc536383f19821157fdc061b1845b2fff59ecfa831616078cdc", 0x1c, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="98ac70fff26294eeb90a72f4a1cf0e4c3d7da8a03fa66b925b7873f20127d14dd389f5c2bb3cd7c1e8edc96796eaaad4d40e0436599ab43c4a5a27120d3ed837c82ac58e4a52018aff1f760b4d213831b1c84e48e153c562e5ec00a8cb75c195f330d36b2749f745823441e05a833fb4b092a7e8e61a6ad218e937d7682477a81839") r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000010000000500000008"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x12000, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001880), 0x0, 0x1, r3}, 0x38) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r4, 0x0, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 3.524830236s ago: executing program 4 (id=3384): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x63, 0x1, 0x0, 0x0, 0x0, 0xce, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xc}, 0x118002, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x100000000000, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x40, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.134104965s ago: executing program 4 (id=3385): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000001000000400000004000000041000000", @ANYRES32, @ANYBLOB="00000070c8b8d6", @ANYRES32=0x0], 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) 2.927136044s ago: executing program 4 (id=3386): openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) socket$kcm(0x1e, 0x1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, 0x0, 0xfe33) socket$kcm(0x22, 0x3, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x7, 0x5, 0xd, 0x7, 0x0, 0xfffffffffffffff7, 0x7a5d4, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xaaa3, 0x2, @perf_config_ext={0xa, 0x3}, 0x2, 0x576b, 0x8, 0x6, 0x6, 0xaeb, 0x3, 0x0, 0x24, 0x0, 0x40fc}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r5 = socket$kcm(0x2b, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0), 0x2, 0xffffffffffffffff, 0x4}, 0x38) sendmsg$kcm(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x24000000) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x890b, &(0x7f0000000100)) 1.097742989s ago: executing program 2 (id=3387): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0xffffffffffffffff, 0x1, 0xffffff00}}, 0x10, 0x0}, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8937, &(0x7f0000000000)={'veth0_vlan\x00', @random="0100002010ff"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={0xffffffffffffffff, 0x27, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.056750911s ago: executing program 4 (id=3388): bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x5, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x6f5}, 0x0, 0x7, 0x0, 0x0, 0x13ffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x800, 0x0, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12126, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x80, 0x7fffffff}, 0x7e03, 0x0, 0x0, 0x0, 0x5, 0x3ff}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.020279773s ago: executing program 1 (id=3389): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0xfffffffd, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000005000000080000000f"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d40), &(0x7f0000000180), 0x831f, r0}, 0x38) 1.015466173s ago: executing program 5 (id=3390): bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@cgroup, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x4, 0x4, 0x4, 0x1740, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0xd6, &(0x7f0000000180)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x32, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000740)={0xffffffffffffffff, r0}, 0xc) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x11}, 0xa) r7 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) write$cgroup_int(r7, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000018c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffff7, '\x00', r3, r4, 0x1, 0x2, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) close(r2) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0xfdef) 951.222986ms ago: executing program 6 (id=3391): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x40c, 0x80000000, 0x1, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000002d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 108.612035ms ago: executing program 6 (id=3392): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) 0s ago: executing program 2 (id=3393): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) kernel console output (not intermixed with test programs): : bridge0: link becomes ready [ 250.193612][ T6723] tap0: tun_chr_ioctl cmd 1074025677 [ 250.235219][ T6723] tap0: linktype set to 768 [ 252.041965][ T4979] wlan1: Trigger new scan to find an IBSS to join [ 255.073998][ T4995] wlan1: Trigger new scan to find an IBSS to join [ 255.876390][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.882983][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.511270][ T4979] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 257.653597][ T6837] device syzkaller0 entered promiscuous mode [ 258.041419][ T4979] wlan1: Trigger new scan to find an IBSS to join [ 258.968552][ T4979] wlan1: Creating new IBSS network, BSSID 52:06:85:f0:02:45 [ 259.722625][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 259.730563][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 260.803285][ T6861] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.811608][ T6861] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.838364][ T6859] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.845552][ T6859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.853016][ T6859] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.860120][ T6859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.869388][ T6859] device bridge0 entered promiscuous mode [ 262.098093][ T6897] device syzkaller0 entered promiscuous mode [ 264.794099][ T6930] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.801584][ T6930] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.809434][ T6930] device bridge0 left promiscuous mode [ 264.892584][ T6933] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.899859][ T6933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.907409][ T6933] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.914788][ T6933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.962840][ T6933] device bridge0 entered promiscuous mode [ 266.089046][ T6941] device syzkaller0 entered promiscuous mode [ 272.597647][ T7002] validate_nla: 3 callbacks suppressed [ 272.597667][ T7002] netlink: 'syz.4.869': attribute type 10 has an invalid length. [ 272.650088][ T7002] device bridge_slave_1 left promiscuous mode [ 272.691404][ T7002] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.743776][ T7002] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 273.219452][ T7016] bridge0: port 3(ip6gretap0) entered blocking state [ 273.227739][ T7016] bridge0: port 3(ip6gretap0) entered forwarding state [ 273.237039][ T7016] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.245106][ T7016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.385029][ T7016] device bridge0 entered promiscuous mode [ 273.582663][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 275.072039][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.079695][ C0] bridge0: topology change detected, propagating [ 275.087008][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.094489][ C0] bridge0: topology change detected, propagating [ 275.103458][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 279.088440][ T7093] __nla_validate_parse: 28 callbacks suppressed [ 279.088459][ T7093] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.904'. [ 281.419501][ T7102] device syzkaller0 entered promiscuous mode [ 281.484038][ T4986] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 284.237723][ T7118] netlink: 'syz.1.915': attribute type 27 has an invalid length. [ 284.292798][ T7118] bond0: (slave bond_slave_0): Releasing backup interface [ 284.356963][ T7125] netlink: 'syz.0.914': attribute type 10 has an invalid length. [ 284.380709][ T7125] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.389835][ T7125] device bridge_slave_1 left promiscuous mode [ 284.412015][ T7125] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.431146][ T7125] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 284.579197][ T7109] syz.3.912 (7109) used greatest stack depth: 18128 bytes left [ 284.648116][ T7135] device syzkaller0 entered promiscuous mode [ 284.834114][ T7146] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.922'. [ 285.866088][ T7168] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0500:0023 with DS=0x32 [ 287.827640][ T7151] netlink: 132 bytes leftover after parsing attributes in process `syz.0.924'. [ 287.838238][ T7178] IPv6: Can't replace route, no match found [ 287.850387][ T7181] netlink: 'syz.1.933': attribute type 10 has an invalid length. [ 287.893058][ T7181] device bridge_slave_1 left promiscuous mode [ 287.913619][ T7181] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.956639][ T7181] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 288.176741][ T7189] netlink: 44 bytes leftover after parsing attributes in process `syz.2.936'. [ 288.511929][ T4986] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 288.876758][ T7194] device syzkaller0 entered promiscuous mode [ 291.072100][ T4969] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 294.766843][ T7225] netlink: 132 bytes leftover after parsing attributes in process `syz.2.946'. [ 294.786681][ T7240] netlink: 'syz.4.952': attribute type 10 has an invalid length. [ 294.821429][ T7240] netlink: 40 bytes leftover after parsing attributes in process `syz.4.952'. [ 294.859018][ T7240] bridge0: port 2(bond0) entered blocking state [ 294.891330][ T7240] bridge0: port 2(bond0) entered disabled state [ 294.899702][ T7240] device bond0 entered promiscuous mode [ 294.955339][ T7240] device bond_slave_0 entered promiscuous mode [ 294.979683][ T7240] device bond_slave_1 entered promiscuous mode [ 295.008153][ T7240] device bridge_slave_1 entered promiscuous mode [ 295.023560][ T7240] bridge0: port 2(bond0) entered blocking state [ 295.030492][ T7240] bridge0: port 2(bond0) entered forwarding state [ 295.296559][ T7242] netlink: 132 bytes leftover after parsing attributes in process `syz.3.953'. [ 295.527622][ T7249] netlink: 132 bytes leftover after parsing attributes in process `syz.1.955'. [ 298.305402][ T7274] netlink: 132 bytes leftover after parsing attributes in process `syz.4.965'. [ 298.345744][ T7273] netlink: 'syz.1.966': attribute type 3 has an invalid length. [ 298.391516][ T7273] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.966'. [ 299.687612][ T7305] netlink: 132 bytes leftover after parsing attributes in process `syz.0.975'. [ 299.933525][ T7311] netlink: 'syz.4.979': attribute type 3 has an invalid length. [ 299.957919][ T7311] netlink: 'syz.4.979': attribute type 6 has an invalid length. [ 300.007514][ T7311] netlink: 144448 bytes leftover after parsing attributes in process `syz.4.979'. [ 300.295654][ T7317] netlink: 'syz.2.982': attribute type 10 has an invalid length. [ 300.331606][ T7317] netlink: 2 bytes leftover after parsing attributes in process `syz.2.982'. [ 300.340639][ T7317] device hsr0 entered promiscuous mode [ 300.372333][ T7317] bridge0: port 3(hsr0) entered blocking state [ 300.394748][ T7317] bridge0: port 3(hsr0) entered disabled state [ 300.424542][ T7317] bridge0: port 3(hsr0) entered blocking state [ 300.430885][ T7317] bridge0: port 3(hsr0) entered forwarding state [ 300.725616][ T7331] netlink: 132 bytes leftover after parsing attributes in process `syz.4.988'. [ 302.242630][ T4276] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 302.470225][ T7352] netlink: 132 bytes leftover after parsing attributes in process `syz.2.993'. [ 302.482270][ T7351] delete_channel: no stack [ 302.495808][ T7355] netlink: 'syz.4.997': attribute type 4 has an invalid length. [ 302.862401][ T7355] netlink: 'syz.4.997': attribute type 3 has an invalid length. [ 302.919264][ T7355] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.997'. [ 302.970981][ T7362] netlink: 'syz.3.998': attribute type 41 has an invalid length. [ 303.062254][ T7360] device wlan1 entered promiscuous mode [ 303.144114][ T7364] netlink: 'syz.1.999': attribute type 10 has an invalid length. [ 303.153797][ T7364] netlink: 40 bytes leftover after parsing attributes in process `syz.1.999'. [ 303.244271][ T7364] batman_adv: batadv0: Adding interface: virt_wifi0 [ 303.271662][ T7364] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.430088][ T7364] batman_adv: batadv0: Interface activated: virt_wifi0 [ 305.514729][ T7396] hsr0: VLAN not yet supported [ 309.021855][ T7431] netlink: 'syz.2.1024': attribute type 4 has an invalid length. [ 309.096913][ T7431] netlink: 'syz.2.1024': attribute type 3 has an invalid length. [ 309.220425][ T7431] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1024'. [ 309.437512][ T7434] device wlan1 entered promiscuous mode [ 309.776245][ T7450] netlink: 'syz.4.1031': attribute type 10 has an invalid length. [ 310.186110][ T7450] team0: Device hsr_slave_0 failed to register rx_handler [ 312.750257][ T7462] netlink: 'syz.2.1034': attribute type 21 has an invalid length. [ 312.760076][ T7466] netlink: 'syz.3.1038': attribute type 10 has an invalid length. [ 312.781928][ T7466] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1038'. [ 312.819496][ T7466] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 313.331077][ T7486] netlink: 'syz.0.1044': attribute type 4 has an invalid length. [ 313.411696][ T7486] netlink: 'syz.0.1044': attribute type 3 has an invalid length. [ 313.536397][ T7486] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1044'. [ 313.963289][ T7492] device wlan1 entered promiscuous mode [ 314.207768][ T7504] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1048'. [ 317.321930][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.328597][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.854071][ T7542] netlink: 'syz.3.1064': attribute type 10 has an invalid length. [ 320.892491][ T7542] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1064'. [ 320.917640][ T7542] device ipvlan1 entered promiscuous mode [ 320.951857][ T7542] bridge0: port 3(ipvlan1) entered blocking state [ 320.977833][ T7542] bridge0: port 3(ipvlan1) entered disabled state [ 320.988200][ T7542] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 321.171672][ T4423] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 322.977759][ T7576] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 323.424979][ T7583] netlink: 'syz.3.1080': attribute type 11 has an invalid length. [ 323.485576][ T7583] netlink: 'syz.3.1080': attribute type 11 has an invalid length. [ 323.579541][ T7583] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1080'. [ 329.669604][ T7641] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.1100'. [ 334.139775][ T7694] device syzkaller0 entered promiscuous mode [ 334.420234][ T7698] netlink: 'syz.1.1121': attribute type 11 has an invalid length. [ 334.505860][ T7698] netlink: 'syz.1.1121': attribute type 11 has an invalid length. [ 334.520471][ T7698] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1121'. [ 337.517557][ T7730] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1132'. [ 338.048334][ T7751] netlink: 'syz.2.1139': attribute type 10 has an invalid length. [ 338.152237][ T7751] device wlan1 left promiscuous mode [ 338.187700][ T7751] device wlan1 entered promiscuous mode [ 338.210815][ T7751] team0: Port device wlan1 added [ 338.518578][ T7770] netlink: 'syz.4.1146': attribute type 7 has an invalid length. [ 338.529194][ T7770] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1146'. [ 338.566585][ T7769] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1146'. [ 339.428961][ T7787] bridge0: port 2(veth0_to_bridge) entered blocking state [ 339.445313][ T7787] bridge0: port 2(veth0_to_bridge) entered disabled state [ 339.467181][ T7787] device veth0_to_bridge entered promiscuous mode [ 343.819698][ T7833] netlink: 'syz.2.1171': attribute type 41 has an invalid length. [ 347.214082][ T7891] netlink: 'syz.1.1193': attribute type 3 has an invalid length. [ 347.298189][ T7891] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1193'. [ 348.333376][ T7918] netlink: 'syz.2.1205': attribute type 10 has an invalid length. [ 348.356467][ T7918] batman_adv: batadv0: Adding interface: netdevsim0 [ 348.367654][ T7918] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.397497][ T7918] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 348.445202][ T7926] netlink: 'syz.3.1207': attribute type 10 has an invalid length. [ 348.458955][ T7926] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 349.925789][ T7946] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1214'. [ 352.373763][ T7975] netlink: 'syz.2.1224': attribute type 2 has an invalid length. [ 352.418232][ T7975] netlink: 'syz.2.1224': attribute type 8 has an invalid length. [ 352.471863][ T7975] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1224'. [ 352.526524][ T7976] netlink: 'syz.2.1224': attribute type 2 has an invalid length. [ 352.590227][ T7976] netlink: 'syz.2.1224': attribute type 8 has an invalid length. [ 352.600944][ T7976] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1224'. [ 353.189999][ T4423] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 353.418624][ T7990] device syzkaller0 entered promiscuous mode [ 353.486270][ T7994] netlink: 'syz.4.1230': attribute type 10 has an invalid length. [ 355.225696][ T7994] batman_adv: batadv0: Adding interface: netdevsim0 [ 355.251100][ T7994] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.301372][ T7994] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 361.026786][ T8012] netlink: 'syz.4.1239': attribute type 2 has an invalid length. [ 361.035050][ T8012] netlink: 'syz.4.1239': attribute type 8 has an invalid length. [ 361.044279][ T8012] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1239'. [ 361.055216][ T8015] netlink: 'syz.4.1239': attribute type 2 has an invalid length. [ 361.063916][ T8015] netlink: 'syz.4.1239': attribute type 8 has an invalid length. [ 361.074611][ T8015] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1239'. [ 361.354341][ T8045] netlink: 3554 bytes leftover after parsing attributes in process `syz.4.1250'. [ 361.492918][ T8044] netlink: 'syz.2.1251': attribute type 5 has an invalid length. [ 362.214199][ T8065] netlink: 'syz.4.1258': attribute type 21 has an invalid length. [ 362.239125][ T8065] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1258'. [ 363.360323][ T8079] netlink: 3554 bytes leftover after parsing attributes in process `syz.3.1264'. [ 363.468339][ T8078] netlink: 'syz.2.1261': attribute type 2 has an invalid length. [ 363.539845][ T8078] netlink: 'syz.2.1261': attribute type 8 has an invalid length. [ 363.562219][ T8078] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1261'. [ 363.592487][ T8083] netlink: 'syz.2.1261': attribute type 2 has an invalid length. [ 363.605449][ T8083] netlink: 'syz.2.1261': attribute type 8 has an invalid length. [ 363.619094][ T8083] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1261'. [ 364.044973][ T8095] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1271'. [ 364.935858][ T8110] netlink: 3554 bytes leftover after parsing attributes in process `syz.1.1277'. [ 365.274134][ T8122] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1282'. [ 367.522803][ T8165] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1300'. [ 368.516420][ T8165] device hsr_slave_0 left promiscuous mode [ 369.803021][ T8165] device hsr_slave_1 left promiscuous mode [ 369.822702][ T8165] bridge0: port 3(hsr0) entered disabled state [ 369.926567][ T8165] bridge0: port 3(hsr0) entered disabled state [ 370.132939][ T8187] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.1308'. [ 371.098574][ T8222] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.1323'. [ 371.247635][ T8222] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 371.321024][ T8222] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 378.755057][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.763421][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.042689][ T8299] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.076836][ T8301] validate_nla: 4 callbacks suppressed [ 379.077014][ T8301] netlink: 'syz.4.1350': attribute type 10 has an invalid length. [ 379.229433][ T8301] team0: Device hsr_slave_0 failed to register rx_handler [ 381.078638][ T8344] netlink: 'syz.0.1369': attribute type 10 has an invalid length. [ 381.219605][ T8344] team0: Device hsr_slave_0 failed to register rx_handler [ 381.346765][ T8343] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1368'. [ 382.740213][ T8378] netlink: 'syz.3.1384': attribute type 27 has an invalid length. [ 383.038499][ T8385] netlink: 'syz.2.1385': attribute type 10 has an invalid length. [ 383.130736][ T8385] device hsr_slave_0 entered promiscuous mode [ 383.168211][ T8385] team0: Port device hsr_slave_0 added [ 383.185706][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 383.195048][ T8383] netlink: 'syz.4.1386': attribute type 21 has an invalid length. [ 392.051258][ T8443] netlink: 'syz.0.1407': attribute type 41 has an invalid length. [ 392.690584][ T8460] netlink: 'syz.1.1412': attribute type 3 has an invalid length. [ 392.714091][ T8460] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1412'. [ 394.716005][ T8463] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1413'. [ 395.052521][ T8474] netlink: 'syz.1.1418': attribute type 3 has an invalid length. [ 395.071783][ T8474] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1418'. [ 395.203168][ T8474] device wlan1 entered promiscuous mode [ 395.477108][ T8491] netlink: 'syz.4.1425': attribute type 39 has an invalid length. [ 395.531897][ T8491] device macvlan0 entered promiscuous mode [ 395.695336][ T8493] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1426'. [ 395.721603][ T8497] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1428'. [ 398.769790][ T4276] Bluetooth: hci4: unexpected event 0x1d length: 15 > 5 [ 398.810882][ T8521] netlink: 'syz.2.1438': attribute type 3 has an invalid length. [ 398.830593][ T8521] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1438'. [ 399.039906][ T8531] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1442'. [ 399.082534][ T8529] netlink: 'syz.3.1441': attribute type 39 has an invalid length. [ 399.090569][ T8529] device macvlan0 entered promiscuous mode [ 399.265587][ T8537] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1444'. [ 400.119551][ T8557] dvmrp1: tun_chr_ioctl cmd 1074025675 [ 400.125881][ T8557] dvmrp1: persist disabled [ 402.683023][ T8561] netlink: 'syz.3.1454': attribute type 3 has an invalid length. [ 402.712718][ T8561] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1454'. [ 402.861351][ T8567] device wlan1 entered promiscuous mode [ 403.112843][ T8572] netlink: 'syz.1.1457': attribute type 39 has an invalid length. [ 403.141490][ T8572] device macvlan0 entered promiscuous mode [ 403.214572][ T8578] netlink: 'syz.3.1461': attribute type 10 has an invalid length. [ 403.319096][ T8578] team0: Device wg1 is of different type [ 403.467217][ T8584] device syzkaller0 entered promiscuous mode [ 408.095299][ T8601] netlink: 'syz.0.1470': attribute type 21 has an invalid length. [ 408.103968][ T8601] netlink: 'syz.0.1470': attribute type 6 has an invalid length. [ 408.112336][ T8601] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1470'. [ 408.121613][ T8608] netlink: 'syz.2.1473': attribute type 21 has an invalid length. [ 408.143576][ T8608] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1473'. [ 408.180934][ T8609] netlink: 'syz.2.1473': attribute type 10 has an invalid length. [ 408.202450][ T8609] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1473'. [ 408.230141][ T8609] device ipvlan1 entered promiscuous mode [ 408.254970][ T8609] bridge0: port 3(ipvlan1) entered blocking state [ 408.273955][ T8609] bridge0: port 3(ipvlan1) entered disabled state [ 408.287794][ T8609] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 408.308808][ T8611] netlink: 'syz.3.1474': attribute type 39 has an invalid length. [ 409.120342][ T8641] netlink: 'syz.2.1484': attribute type 1 has an invalid length. [ 409.144909][ T8641] netlink: 'syz.2.1484': attribute type 3 has an invalid length. [ 409.169455][ T8641] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1484'. [ 409.645801][ T8652] device syzkaller0 entered promiscuous mode [ 409.660607][ T8654] netlink: 'syz.3.1490': attribute type 39 has an invalid length. [ 409.684743][ T8658] netlink: 'syz.1.1491': attribute type 10 has an invalid length. [ 409.757007][ T8658] team0: Device wg1 is of different type [ 412.201117][ T8680] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1499'. [ 412.221271][ T8681] netlink: 'syz.2.1499': attribute type 12 has an invalid length. [ 412.260432][ T8681] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1499'. [ 412.512087][ T8692] device macvlan0 entered promiscuous mode [ 412.788721][ T8706] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1508'. [ 413.219307][ T8708] validate_nla: 3 callbacks suppressed [ 413.219327][ T8708] netlink: 'syz.4.1511': attribute type 21 has an invalid length. [ 413.257055][ T8708] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1511'. [ 413.318969][ T8710] netlink: 'syz.4.1511': attribute type 10 has an invalid length. [ 413.367672][ T8710] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1511'. [ 413.371319][ T8716] netlink: 'syz.3.1513': attribute type 3 has an invalid length. [ 413.380831][ T8710] device ipvlan1 entered promiscuous mode [ 413.386236][ T8716] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1513'. [ 413.393853][ T8710] bridge0: port 4(ipvlan1) entered blocking state [ 413.431235][ T8710] bridge0: port 4(ipvlan1) entered disabled state [ 413.463170][ T8710] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 413.597717][ T8721] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1515'. [ 413.659965][ T8721] netlink: 'syz.3.1515': attribute type 10 has an invalid length. [ 413.739886][ T8721] team0: Device hsr_slave_0 failed to register rx_handler [ 413.958958][ T8736] netlink: 'syz.4.1521': attribute type 10 has an invalid length. [ 413.991978][ T8736] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1521'. [ 414.031948][ T8736] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 414.089116][ T8733] netlink: 'syz.0.1522': attribute type 29 has an invalid length. [ 414.103221][ T8733] netlink: 'syz.0.1522': attribute type 29 has an invalid length. [ 414.542679][ T8755] netlink: 'syz.1.1527': attribute type 1 has an invalid length. [ 414.554518][ T8755] netlink: 'syz.1.1527': attribute type 3 has an invalid length. [ 414.563775][ T8755] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1527'. [ 414.799783][ T8763] netlink: 'syz.0.1531': attribute type 21 has an invalid length. [ 414.841450][ T8763] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1531'. [ 414.962248][ T8763] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1531'. [ 415.099055][ T8763] device ipvlan1 entered promiscuous mode [ 415.172774][ T8763] bridge0: port 2(ipvlan1) entered blocking state [ 415.179547][ T8763] bridge0: port 2(ipvlan1) entered disabled state [ 415.188856][ T8763] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 415.569189][ T8776] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1537'. [ 415.605776][ T8776] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 416.417686][ T8795] ¥: port 1(team0) entered blocking state [ 416.433670][ T8795] ¥: port 1(team0) entered disabled state [ 416.441750][ T8795] device team0 entered promiscuous mode [ 416.447705][ T8795] device team_slave_0 entered promiscuous mode [ 416.461882][ T8795] device team_slave_1 entered promiscuous mode [ 418.374417][ T8822] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1555'. [ 418.582345][ T8829] validate_nla: 2 callbacks suppressed [ 418.582367][ T8829] netlink: 'syz.3.1557': attribute type 21 has an invalid length. [ 418.658542][ T8829] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1557'. [ 418.856149][ T8834] netlink: 'syz.2.1560': attribute type 39 has an invalid length. [ 418.942855][ T8827] netlink: 'syz.3.1557': attribute type 10 has an invalid length. [ 418.976665][ T8827] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1557'. [ 419.132894][ T8827] bridge0: port 3(ipvlan1) entered blocking state [ 419.146448][ T4276] Bluetooth: hci0: unexpected event 0x1d length: 15 > 5 [ 419.190048][ T8827] bridge0: port 3(ipvlan1) entered disabled state [ 419.382999][ T8827] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 419.669105][ T8861] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1571'. [ 419.671929][ T8855] netlink: 'syz.2.1569': attribute type 21 has an invalid length. [ 419.753794][ T8855] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1569'. [ 419.797138][ T8861] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1571'. [ 419.876444][ T8862] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1571'. [ 419.915267][ T8863] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1571'. [ 421.115470][ T8896] netlink: 'syz.3.1582': attribute type 39 has an invalid length. [ 422.886016][ T8923] ¥: port 1(team0) entered blocking state [ 422.905162][ T8923] ¥: port 1(team0) entered disabled state [ 422.919211][ T8923] device team0 entered promiscuous mode [ 422.925584][ T8923] device team_slave_0 entered promiscuous mode [ 422.939694][ T8923] device team_slave_1 entered promiscuous mode [ 423.707257][ T8951] netlink: 'syz.2.1607': attribute type 4 has an invalid length. [ 424.320559][ T8960] netlink: 'syz.2.1610': attribute type 39 has an invalid length. [ 424.847323][ T8964] netlink: 'syz.0.1613': attribute type 10 has an invalid length. [ 424.903985][ T4276] Bluetooth: hci3: unexpected event 0x1d length: 15 > 5 [ 425.692936][ T8983] device syzkaller0 entered promiscuous mode [ 431.037124][ T9006] netlink: 'syz.2.1630': attribute type 25 has an invalid length. [ 431.045251][ T9006] netlink: 'syz.2.1630': attribute type 29 has an invalid length. [ 431.055683][ T8996] ¥: port 1(team0) entered blocking state [ 431.067047][ T8996] ¥: port 1(team0) entered disabled state [ 431.075838][ T8996] device team0 entered promiscuous mode [ 431.086746][ T8996] device team_slave_0 entered promiscuous mode [ 431.099530][ T8996] device team_slave_1 entered promiscuous mode [ 431.239224][ T9014] netlink: 'syz.2.1643': attribute type 21 has an invalid length. [ 431.265506][ T9014] netlink: 'syz.2.1643': attribute type 6 has an invalid length. [ 431.305123][ T9014] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1643'. [ 431.604012][ T9022] netlink: 'syz.4.1633': attribute type 39 has an invalid length. [ 432.767993][ T9046] netlink: 'syz.2.1642': attribute type 27 has an invalid length. [ 432.781261][ T9046] netlink: 'syz.2.1642': attribute type 25 has an invalid length. [ 433.069940][ T9058] ¥: port 1(team0) entered blocking state [ 433.078070][ T9058] ¥: port 1(team0) entered disabled state [ 433.093331][ T9058] device team0 entered promiscuous mode [ 433.145640][ T9058] device team_slave_0 entered promiscuous mode [ 433.166726][ T9058] device team_slave_1 entered promiscuous mode [ 433.185188][ T9055] netlink: 'syz.3.1648': attribute type 21 has an invalid length. [ 433.211789][ T9055] netlink: 'syz.3.1648': attribute type 6 has an invalid length. [ 433.230343][ T9055] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1648'. [ 433.475215][ T4276] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5 [ 433.638339][ T9071] netlink: 'syz.3.1654': attribute type 10 has an invalid length. [ 436.047486][ T4276] Bluetooth: hci4: unexpected event 0x1c length: 15 > 5 [ 436.049597][ T9115] validate_nla: 1 callbacks suppressed [ 436.049610][ T9115] netlink: 'syz.0.1667': attribute type 21 has an invalid length. [ 436.078046][ T9115] netlink: 'syz.0.1667': attribute type 6 has an invalid length. [ 436.086406][ T9115] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1667'. [ 436.162856][ T9116] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1670'. [ 438.669350][ T4276] Bluetooth: hci3: unexpected event 0x1c length: 15 > 5 [ 439.906545][ T9157] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1685'. [ 440.003885][ T9159] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1686'. [ 440.110923][ T9159] bond0: (slave bond_slave_0): Releasing backup interface [ 440.215955][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.222411][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.250613][ T9159] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 440.706400][ T9170] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1691'. [ 440.795781][ T9170] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1691'. [ 440.874869][ T9173] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1691'. [ 440.946698][ T9177] device veth0_to_bridge left promiscuous mode [ 440.983548][ T9177] bridge0: port 2(veth0_to_bridge) entered disabled state [ 441.020606][ T9177] device ip6gretap0 left promiscuous mode [ 441.049781][ T9177] bridge0: port 3(ip6gretap0) entered disabled state [ 441.079491][ T9177] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.284623][ T9174] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1691'. [ 441.548413][ T9184] netlink: 'syz.0.1695': attribute type 11 has an invalid length. [ 441.595923][ T9184] netlink: 'syz.0.1695': attribute type 11 has an invalid length. [ 441.652137][ T9184] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1695'. [ 441.708422][ T9192] netlink: 'syz.1.1697': attribute type 29 has an invalid length. [ 441.720696][ T9182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 441.723059][ T9192] netlink: 'syz.1.1697': attribute type 29 has an invalid length. [ 442.343849][ T9217] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1708'. [ 442.828706][ T9227] netlink: 'syz.4.1710': attribute type 27 has an invalid length. [ 442.881308][ T9227] netlink: 'syz.4.1710': attribute type 25 has an invalid length. [ 442.953960][ T9229] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1711'. [ 442.981297][ T9229] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 443.008059][ T9229] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 443.212506][ T9273] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1712'. [ 444.585650][ T9298] netlink: 'syz.1.1715': attribute type 2 has an invalid length. [ 444.927497][ T9303] netlink: 'syz.4.1717': attribute type 4 has an invalid length. [ 445.002767][ T9303] __nla_validate_parse: 1 callbacks suppressed [ 445.002873][ T9303] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1717'. [ 445.179716][ T9309] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1719'. [ 445.306825][ T9303] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 451.039911][ T9446] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1776'. [ 451.053880][ T9446] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1776'. [ 451.064894][ T9446] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1776'. [ 451.087110][ T9446] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1776'. [ 453.548523][ T9479] netlink: 'syz.0.1789': attribute type 27 has an invalid length. [ 453.565743][ T9475] netlink: 'syz.3.1788': attribute type 2 has an invalid length. [ 453.589407][ T9475] netlink: 'syz.3.1788': attribute type 1 has an invalid length. [ 453.606443][ T9481] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1790'. [ 453.616985][ T9479] netlink: 'syz.0.1789': attribute type 25 has an invalid length. [ 453.688871][ T9481] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1790'. [ 453.759255][ T9482] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1790'. [ 453.808252][ T9481] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1790'. [ 454.008052][ T9491] netlink: 'syz.1.1795': attribute type 21 has an invalid length. [ 454.026882][ T9491] netlink: 'syz.1.1795': attribute type 6 has an invalid length. [ 454.047129][ T9491] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1795'. [ 454.731385][ T9512] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1804'. [ 454.736212][ T9514] netlink: 'syz.4.1805': attribute type 27 has an invalid length. [ 454.750367][ T9514] netlink: 'syz.4.1805': attribute type 25 has an invalid length. [ 454.850714][ T9517] netlink: 'syz.2.1806': attribute type 2 has an invalid length. [ 454.901106][ T9517] netlink: 'syz.2.1806': attribute type 1 has an invalid length. [ 456.216570][ T9565] device syzkaller0 entered promiscuous mode [ 459.638815][ T9579] validate_nla: 2 callbacks suppressed [ 459.638834][ T9579] netlink: 'syz.3.1833': attribute type 27 has an invalid length. [ 459.652719][ T9579] netlink: 'syz.3.1833': attribute type 25 has an invalid length. [ 459.944349][ T9604] netlink: 'syz.0.1842': attribute type 2 has an invalid length. [ 459.990164][ T9604] netlink: 'syz.0.1842': attribute type 1 has an invalid length. [ 465.028917][ T9675] __nla_validate_parse: 3 callbacks suppressed [ 465.028969][ T9675] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1872'. [ 465.416734][ T9684] netlink: 'syz.0.1873': attribute type 10 has an invalid length. [ 465.444192][ T9684] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1873'. [ 466.934894][ T9732] netlink: 'syz.0.1896': attribute type 29 has an invalid length. [ 466.951130][ T9732] netlink: 'syz.0.1896': attribute type 3 has an invalid length. [ 466.968183][ T9732] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1896'. [ 469.338537][ T9770] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.941902][ T9786] netlink: 'syz.3.1917': attribute type 10 has an invalid length. [ 469.974960][ T9786] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1917'. [ 470.025819][ T9786] device team0 left promiscuous mode [ 470.065708][ T9786] device team_slave_0 left promiscuous mode [ 470.176735][ T9786] device team_slave_1 left promiscuous mode [ 470.187385][ T9786] ¥: port 1(team0) entered disabled state [ 470.267760][ T9786] bridge0: port 3(team0) entered blocking state [ 470.301323][ T9786] bridge0: port 3(team0) entered disabled state [ 470.327739][ T9786] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 470.734576][ T9808] raw_sendmsg: syz.3.1925 forgot to set AF_INET. Fix it! [ 470.754624][ T9796] device syzkaller0 entered promiscuous mode [ 470.817450][ T9808] netlink: 'syz.3.1925': attribute type 10 has an invalid length. [ 470.829571][ T9808] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.838069][ T9808] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.858845][ T9808] device bridge0 left promiscuous mode [ 471.418715][ T9828] netlink: 'syz.3.1932': attribute type 2 has an invalid length. [ 471.437245][ T9828] netlink: 'syz.3.1932': attribute type 1 has an invalid length. [ 473.270567][ T9833] netlink: 'syz.3.1934': attribute type 10 has an invalid length. [ 473.381373][ T9835] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1935'. [ 473.390526][ T9835] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1935'. [ 473.414017][ T9835] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1935'. [ 475.030720][ T9868] device syzkaller0 entered promiscuous mode [ 477.894867][ T9893] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1958'. [ 477.911192][ T9893] bridge_slave_1: default FDB implementation only supports local addresses [ 478.141210][ T9909] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1962'. [ 478.418550][ T9910] netlink: 'syz.0.1959': attribute type 10 has an invalid length. [ 478.557583][ T9910] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.659600][ T9910] device bridge0 left promiscuous mode [ 478.941785][ T9910] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.951972][ T9910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.049449][ T9910] device bridge0 entered promiscuous mode [ 479.087212][ T9910] team0: Port device bridge0 added [ 479.119440][ T9279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 479.144707][ T9925] netlink: 'syz.1.1966': attribute type 10 has an invalid length. [ 479.164738][ T9925] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1966'. [ 479.196960][ T9925] device team0 left promiscuous mode [ 479.351708][ T9925] device team_slave_0 left promiscuous mode [ 479.391237][ T9925] device team_slave_1 left promiscuous mode [ 479.401645][ T9925] ¥: port 1(team0) entered disabled state [ 479.434665][ T9925] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 479.491510][ T9936] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1971'. [ 479.531240][ T9936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1971'. [ 479.773980][ T4276] Bluetooth: hci0: unexpected event 0x34 length: 15 > 6 [ 479.858569][ T9949] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1977'. [ 482.671671][ T9949] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1977'. [ 488.914582][T10008] netlink: 'syz.3.1997': attribute type 10 has an invalid length. [ 488.926407][T10008] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1997'. [ 488.939534][T10008] bridge0: port 3(team0) entered blocking state [ 488.950469][T10008] bridge0: port 3(team0) entered disabled state [ 488.986194][T10008] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 489.071539][T10011] netlink: 'syz.0.1999': attribute type 39 has an invalid length. [ 489.338354][T10026] netlink: 'syz.2.2005': attribute type 2 has an invalid length. [ 489.347364][T10026] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.2005'. [ 489.359015][T10026] netlink: 'syz.2.2005': attribute type 21 has an invalid length. [ 489.702733][T10030] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2008'. [ 489.729063][T10030] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2008'. [ 489.749843][T10030] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2008'. [ 489.760207][T10030] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2008'. [ 490.058054][T10029] netlink: 'syz.0.2007': attribute type 10 has an invalid length. [ 490.570127][T10029] device dummy0 left promiscuous mode [ 490.606452][T10029] device dummy0 entered promiscuous mode [ 490.630350][T10029] team0: Port device dummy0 added [ 492.042766][T10108] netlink: 'syz.1.2018': attribute type 39 has an invalid length. [ 492.422935][T10116] device syzkaller0 entered promiscuous mode [ 497.865402][T10155] netlink: 'syz.2.2036': attribute type 39 has an invalid length. [ 498.043006][T10166] netlink: 126632 bytes leftover after parsing attributes in process `syz.2.2040'. [ 498.095078][T10166] netlink: 8192 bytes leftover after parsing attributes in process `syz.2.2040'. [ 498.859277][T10194] netlink: 'syz.3.2052': attribute type 39 has an invalid length. [ 501.633267][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.639988][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.909068][T10344] netlink: 'syz.0.2101': attribute type 2 has an invalid length. [ 503.918615][T10344] netlink: 'syz.0.2101': attribute type 1 has an invalid length. [ 505.338153][T10333] netlink: 'syz.1.2090': attribute type 10 has an invalid length. [ 505.360585][T10333] team0: Port device dummy0 added [ 506.000327][T10371] netlink: 'syz.1.2112': attribute type 2 has an invalid length. [ 506.033314][T10371] netlink: 'syz.1.2112': attribute type 1 has an invalid length. [ 506.198065][T10361] device syzkaller0 entered promiscuous mode [ 506.416702][T10388] netlink: 'syz.1.2128': attribute type 2 has an invalid length. [ 506.429437][T10388] netlink: 'syz.1.2128': attribute type 1 has an invalid length. [ 509.030669][T10400] netlink: 'syz.3.2118': attribute type 10 has an invalid length. [ 509.048325][T10400] team0: Port device dummy0 added [ 509.457175][T10421] netlink: 'syz.2.2130': attribute type 2 has an invalid length. [ 509.471208][T10421] netlink: 'syz.2.2130': attribute type 1 has an invalid length. [ 510.711491][T10460] netlink: 'syz.1.2148': attribute type 2 has an invalid length. [ 510.740148][T10460] netlink: 'syz.1.2148': attribute type 1 has an invalid length. [ 511.626164][T10497] netlink: 'syz.4.2165': attribute type 2 has an invalid length. [ 511.695143][T10497] netlink: 'syz.4.2165': attribute type 1 has an invalid length. [ 513.467638][T10543] netlink: 'syz.0.2184': attribute type 2 has an invalid length. [ 513.491258][T10543] netlink: 'syz.0.2184': attribute type 1 has an invalid length. [ 514.297808][T10567] device syzkaller0 entered promiscuous mode [ 515.507679][T10591] netlink: 'syz.0.2201': attribute type 2 has an invalid length. [ 515.528168][T10591] netlink: 'syz.0.2201': attribute type 1 has an invalid length. [ 517.369571][T10594] device syzkaller0 entered promiscuous mode [ 518.968338][ T4276] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5 [ 519.124956][T10638] netlink: 'syz.1.2216': attribute type 2 has an invalid length. [ 519.144101][T10638] netlink: 'syz.1.2216': attribute type 1 has an invalid length. [ 524.201480][ T4276] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5 [ 529.035668][ T4276] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5 [ 530.895636][ T4276] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5 [ 531.534555][T10747] device syzkaller0 entered promiscuous mode [ 534.860172][T10765] netlink: 'syz.0.2262': attribute type 10 has an invalid length. [ 534.912834][T10765] device gre0 entered promiscuous mode [ 534.918818][T10765] team0: Device gre0 is of different type [ 542.560321][T10936] netlink: 'syz.0.2326': attribute type 2 has an invalid length. [ 542.599580][T10936] netlink: 'syz.0.2326': attribute type 1 has an invalid length. [ 542.606047][T10939] device syzkaller0 entered promiscuous mode [ 547.457448][T10999] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 547.474609][T10997] netlink: 'syz.1.2350': attribute type 2 has an invalid length. [ 547.483136][T10999] syzkaller1: group set to 0 [ 547.500859][T10997] netlink: 'syz.1.2350': attribute type 1 has an invalid length. [ 547.653043][T11005] pimreg: tun_chr_ioctl cmd 1074025672 [ 547.668079][T11005] pimreg: ignored: set checksum enabled [ 547.757129][T11011] tap0: tun_chr_ioctl cmd 35111 [ 547.763895][T11011] tap0: tun_chr_ioctl cmd 2147767521 [ 547.910223][T11005] pimreg: tun_chr_ioctl cmd 1074812118 [ 549.576259][T11041] netlink: 'syz.1.2368': attribute type 2 has an invalid length. [ 549.620395][T11041] netlink: 'syz.1.2368': attribute type 1 has an invalid length. [ 549.737334][T11046] tap0: tun_chr_ioctl cmd 35111 [ 549.755626][T11046] tap0: tun_chr_ioctl cmd 2147767521 [ 549.882815][T11050] device syzkaller0 entered promiscuous mode [ 553.046269][T11082] tap0: tun_chr_ioctl cmd 35111 [ 553.055351][T11083] tap0: tun_chr_ioctl cmd 2147767521 [ 553.758414][T11115] device syzkaller0 entered promiscuous mode [ 558.898740][T11150] device syzkaller0 entered promiscuous mode [ 563.073436][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.079820][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.200232][T11247] device syzkaller0 entered promiscuous mode [ 571.446424][T11274] device syzkaller0 entered promiscuous mode [ 571.457198][T11282] bridge0: port 2(veth1_virt_wifi) entered blocking state [ 571.465486][T11282] bridge0: port 2(veth1_virt_wifi) entered disabled state [ 574.058259][T11299] device syzkaller0 entered promiscuous mode [ 581.053900][T11345] device syzkaller0 entered promiscuous mode [ 581.953060][T11358] netlink: 'syz.4.2470': attribute type 2 has an invalid length. [ 582.064735][T11358] netlink: 'syz.4.2470': attribute type 1 has an invalid length. [ 586.494436][T11379] device syzkaller0 entered promiscuous mode [ 589.410282][T11405] device syzkaller0 entered promiscuous mode [ 590.410773][T11438] netlink: 'syz.3.2487': attribute type 2 has an invalid length. [ 590.440532][T11438] netlink: 'syz.3.2487': attribute type 1 has an invalid length. [ 595.812201][T11474] device syzkaller0 entered promiscuous mode [ 604.923902][T11551] device veth1_macvtap entered promiscuous mode [ 604.975483][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 607.987536][T11593] device syzkaller0 entered promiscuous mode [ 610.960803][T11607] device syzkaller0 entered promiscuous mode [ 622.403561][ T4276] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5 [ 624.520426][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.539934][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.479526][T11796] device veth1_macvtap left promiscuous mode [ 625.489002][T11796] device macsec0 entered promiscuous mode [ 625.555375][T11796] device veth1_macvtap entered promiscuous mode [ 625.668379][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 626.737972][ T4276] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5 [ 628.153348][T11843] device veth1_macvtap left promiscuous mode [ 628.172455][T11843] device macsec0 entered promiscuous mode [ 628.313685][T11846] device veth1_macvtap entered promiscuous mode [ 628.334148][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 628.914840][ T4276] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5 [ 630.907174][T11904] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.914838][T11904] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.947764][T11904] device bridge0 left promiscuous mode [ 631.687577][ T4276] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5 [ 634.982326][ T4276] Bluetooth: hci4: unexpected event 0x1c length: 15 > 5 [ 642.068705][ T4276] Bluetooth: hci3: unexpected event 0x1c length: 15 > 5 [ 643.854791][T12026] device syzkaller0 entered promiscuous mode [ 648.529875][ T4276] Bluetooth: hci4: unexpected event 0x1c length: 15 > 5 [ 648.958752][ T4287] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 648.976286][ T4287] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 648.984672][ T4287] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 648.993016][ T4287] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 649.000729][ T4287] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 649.008490][ T4287] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 650.453387][T12054] chnl_net:caif_netlink_parms(): no params data found [ 651.148685][T12054] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.151025][ T4276] Bluetooth: hci5: command 0x0409 tx timeout [ 651.205052][T12054] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.248927][T12054] device bridge_slave_0 entered promiscuous mode [ 651.346084][T12054] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.355568][T12054] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.373371][T12054] device bridge_slave_1 entered promiscuous mode [ 651.452676][T12054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.545085][T12054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.751876][T12054] team0: Port device team_slave_0 added [ 651.778158][T12054] team0: Port device team_slave_1 added [ 651.926282][ T4995] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.019273][T12054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 652.048233][T12054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 652.158184][T12054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 652.289270][ T4995] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.231010][ T4276] Bluetooth: hci5: command 0x041b tx timeout [ 653.751467][T12054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 653.779340][T12054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.845551][T12054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 653.965169][ T4995] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.179168][ T4995] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.317414][T12054] device hsr_slave_0 entered promiscuous mode [ 654.380431][T12054] device hsr_slave_1 entered promiscuous mode [ 654.484857][T12107] bridge0: port 2(bond0) entered disabled state [ 654.491668][T12107] bridge0: port 3(ip6gretap0) entered disabled state [ 654.498867][T12107] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.617935][T12107] device bridge0 left promiscuous mode [ 655.317648][ T4276] Bluetooth: hci5: command 0x040f tx timeout [ 655.732250][T12121] netlink: 'syz.4.2695': attribute type 2 has an invalid length. [ 656.027127][T12121] netlink: 'syz.4.2695': attribute type 1 has an invalid length. [ 656.613810][T12054] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 656.668986][ T4276] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5 [ 656.732669][T12054] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 657.391045][ T4276] Bluetooth: hci5: command 0x0419 tx timeout [ 659.440499][T12054] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 659.590281][T12054] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 660.088782][T12054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 660.390069][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 660.412162][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 660.484057][T12054] 8021q: adding VLAN 0 to HW filter on device team0 [ 660.517400][T12192] netlink: 'syz.4.2710': attribute type 2 has an invalid length. [ 660.564036][T12192] netlink: 'syz.4.2710': attribute type 1 has an invalid length. [ 660.886115][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 660.944861][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 660.989858][ T4990] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.997148][ T4990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 661.015969][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 661.064525][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 661.094993][ T4276] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5 [ 661.102509][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 661.186549][ T4990] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.193774][ T4990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 661.231102][ T4995] device team0 left promiscuous mode [ 661.236706][ T4995] device team_slave_0 left promiscuous mode [ 661.263540][ T4995] device team_slave_1 left promiscuous mode [ 661.286778][ T4995] device bridge0 left promiscuous mode [ 661.338308][ T4995] device dummy0 left promiscuous mode [ 661.374530][ T4995] ¥: port 1(team0) entered disabled state [ 661.414617][ T4995] device hsr_slave_0 left promiscuous mode [ 661.427789][ T4995] device hsr_slave_1 left promiscuous mode [ 661.481055][ T4995] device bridge_slave_0 left promiscuous mode [ 661.488891][ T4995] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.647851][ T4995] device veth0_macvtap left promiscuous mode [ 661.704834][ T4995] device veth1_vlan left promiscuous mode [ 662.910792][ T4995] team0 (unregistering): Port device team_slave_1 removed [ 662.957766][ T4995] team0 (unregistering): Port device team_slave_0 removed [ 663.007707][ T4995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 663.053761][ T4995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 663.106135][ T4995] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 663.224269][T12246] netlink: 'syz.2.2723': attribute type 2 has an invalid length. [ 663.234762][T12246] netlink: 'syz.2.2723': attribute type 1 has an invalid length. [ 663.392060][ T4995] team0 (unregistering): Port device dummy0 removed [ 663.419169][ T4995] team0 (unregistering): Port device bridge0 removed [ 663.457680][ T4995] bond0 (unregistering): Released all slaves [ 663.558212][ T9272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 663.626128][ T9272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 663.647812][ T9272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 663.683079][ T9272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 663.761835][ T9272] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 663.796335][ T9272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 663.851917][ T9272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 663.863458][ T9272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 663.889341][ T9272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 663.977826][T12054] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 664.034400][ T4276] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5 [ 664.036925][T12054] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 664.058531][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 664.098688][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 665.226243][T12054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 665.254565][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 665.274146][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 666.195923][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 666.218787][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 666.241795][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 666.263571][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 666.312291][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 666.348371][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 666.402301][T12054] device veth0_vlan entered promiscuous mode [ 666.502085][T12054] device veth1_vlan entered promiscuous mode [ 666.655985][ T9272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 666.684386][ T9272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 666.754596][ T9272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 666.799951][ T9272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 666.857403][T12054] device veth0_macvtap entered promiscuous mode [ 666.903773][T12054] device veth1_macvtap entered promiscuous mode [ 667.003339][T12054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 667.059718][T12054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.100587][T12054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 667.155792][T12054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.215987][T12054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 667.267341][T12054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.340340][T12054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 667.380045][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 667.400062][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 667.445891][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 667.555226][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 667.666127][T12054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.741413][T12054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.810922][T12054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.877568][T12054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.990963][T12054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.025418][T12054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.071101][T12054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 668.113765][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 668.143535][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 668.195750][T12054] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.235831][T12054] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.260970][T12054] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.313548][T12054] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.681316][T12339] netlink: 'syz.4.2736': attribute type 2 has an invalid length. [ 668.761031][T12339] netlink: 'syz.4.2736': attribute type 1 has an invalid length. [ 668.890686][ T9272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.919763][ T9272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.953463][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 669.040727][ T4981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.052589][ T4981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.131885][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 669.324944][ T4276] Bluetooth: hci3: unexpected event 0x1c length: 15 > 5 [ 671.316783][T12388] netlink: 'syz.1.2751': attribute type 2 has an invalid length. [ 671.391665][T12388] netlink: 'syz.1.2751': attribute type 1 has an invalid length. [ 674.091334][T12392] device syzkaller0 entered promiscuous mode [ 674.219001][ T4276] Bluetooth: hci3: unexpected event 0x1c length: 15 > 5 [ 675.859040][T12450] netlink: 'syz.5.2767': attribute type 2 has an invalid length. [ 675.880837][T12450] netlink: 'syz.5.2767': attribute type 1 has an invalid length. [ 677.899404][ T4276] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5 [ 682.553409][T12524] netlink: 'syz.1.2788': attribute type 2 has an invalid length. [ 682.739581][T12524] netlink: 'syz.1.2788': attribute type 1 has an invalid length. [ 683.419323][T12533] device syzkaller0 entered promiscuous mode [ 685.177375][ T4276] Bluetooth: hci3: unexpected event 0x1c length: 15 > 5 [ 685.953941][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.967539][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.054170][T12573] netlink: 'syz.3.2803': attribute type 2 has an invalid length. [ 687.074531][T12573] netlink: 'syz.3.2803': attribute type 1 has an invalid length. [ 689.794731][ T4276] Bluetooth: hci5: unexpected event 0x1c length: 15 > 5 [ 692.570669][T12645] netlink: 'syz.1.2818': attribute type 2 has an invalid length. [ 692.627225][T12645] netlink: 'syz.1.2818': attribute type 1 has an invalid length. [ 693.477425][ T4276] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5 [ 697.030116][T12720] netlink: 'syz.3.2834': attribute type 2 has an invalid length. [ 697.174880][T12720] netlink: 'syz.3.2834': attribute type 1 has an invalid length. [ 698.472959][ T4276] Bluetooth: hci4: unexpected event 0x1c length: 15 > 5 [ 700.397233][T12770] netlink: 'syz.3.2849': attribute type 2 has an invalid length. [ 700.476879][T12770] netlink: 'syz.3.2849': attribute type 1 has an invalid length. [ 703.288732][T12801] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 703.341270][T12801] device syzkaller0 entered promiscuous mode [ 703.483974][ T4276] Bluetooth: hci5: unexpected event 0x1c length: 15 > 5 [ 704.295393][T12836] netlink: 'syz.1.2868': attribute type 2 has an invalid length. [ 704.311695][T12836] netlink: 'syz.1.2868': attribute type 1 has an invalid length. [ 706.341887][ T4276] Bluetooth: hci3: unexpected event 0x1c length: 15 > 5 [ 709.015806][T12056] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 709.034150][T12056] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 709.053180][T12056] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 709.062919][T12056] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 709.071124][T12056] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 709.078916][T12056] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 710.407407][T12886] chnl_net:caif_netlink_parms(): no params data found [ 710.520023][T12917] netlink: 'syz.1.2883': attribute type 2 has an invalid length. [ 710.608961][T12917] netlink: 'syz.1.2883': attribute type 1 has an invalid length. [ 710.663569][T12886] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.692819][T12886] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.726419][T12886] device bridge_slave_0 entered promiscuous mode [ 710.750193][T12886] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.777968][T12886] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.797131][T12886] device bridge_slave_1 entered promiscuous mode [ 710.859857][T12886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 710.904558][T12886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 711.030255][T12886] team0: Port device team_slave_0 added [ 711.058827][T12886] team0: Port device team_slave_1 added [ 711.148313][T12886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 711.155618][T12056] Bluetooth: hci1: command 0x0409 tx timeout [ 711.185617][T12886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 711.220249][T12886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 711.245069][T12886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 711.259367][T12886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 711.292795][T12886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 712.226372][T12886] device hsr_slave_0 entered promiscuous mode [ 712.250255][T12886] device hsr_slave_1 entered promiscuous mode [ 713.188740][T12886] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 713.203061][T12886] Cannot create hsr debugfs directory [ 713.231110][T12056] Bluetooth: hci1: command 0x041b tx timeout [ 713.401904][T12056] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5 [ 713.737896][ T4987] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.259603][ T4987] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.471597][ T4987] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.587714][T12982] netlink: 'syz.3.2895': attribute type 2 has an invalid length. [ 714.605621][T12982] netlink: 'syz.3.2895': attribute type 1 has an invalid length. [ 715.113917][ T4987] batman_adv: batadv0: Removing interface: netdevsim0 [ 715.311161][T12056] Bluetooth: hci1: command 0x040f tx timeout [ 715.433947][T12056] Bluetooth: hci3: unexpected event 0x0f length: 15 > 4 [ 716.686852][T13029] netlink: 'syz.3.2906': attribute type 2 has an invalid length. [ 716.710098][T13029] netlink: 'syz.3.2906': attribute type 1 has an invalid length. [ 717.401117][T12056] Bluetooth: hci1: command 0x0419 tx timeout [ 717.632773][ T4276] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4 [ 717.792189][T12886] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 719.120678][T13077] netlink: 'syz.1.2917': attribute type 2 has an invalid length. [ 719.140942][T13077] netlink: 'syz.1.2917': attribute type 1 has an invalid length. [ 720.446663][T12886] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 720.481562][T12886] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 720.512233][T12886] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 720.726947][ T4276] Bluetooth: hci3: unexpected event 0x0f length: 15 > 4 [ 722.104435][ T4987] team0: Port device wlan1 removed [ 722.319427][T12886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 722.398245][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 722.463427][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 722.503135][T12886] 8021q: adding VLAN 0 to HW filter on device team0 [ 722.599712][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 722.626498][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 722.710732][ T4995] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.718031][ T4995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 722.798880][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 722.809617][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 722.821448][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 722.837466][ T4995] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.844869][ T4995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 722.887979][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 722.935069][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 722.955853][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 723.051557][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 723.164439][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 723.202215][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 723.248021][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 723.272173][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 723.307631][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 723.333019][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 723.360368][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 723.401966][T12886] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 723.719802][T13139] netlink: 'syz.5.2933': attribute type 2 has an invalid length. [ 723.738086][T13139] netlink: 'syz.5.2933': attribute type 1 has an invalid length. [ 723.859014][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 723.869832][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 723.898970][T12886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 723.940670][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 723.950525][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 723.996715][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 724.007723][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 724.020827][T12886] device veth0_vlan entered promiscuous mode [ 724.039875][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 724.055690][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 724.079920][T12886] device veth1_vlan entered promiscuous mode [ 724.124449][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 724.141639][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 724.150255][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 724.165679][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 724.178886][T12886] device veth0_macvtap entered promiscuous mode [ 724.200179][T12886] device veth1_macvtap entered promiscuous mode [ 724.239355][T12886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.257596][T12886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.267725][T12886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.286531][T12886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.298006][T12886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.309196][T12886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.319164][T12886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.330716][T12886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.364081][T12886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 724.374503][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 724.383920][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 724.393039][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 724.404248][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 724.416590][T12886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.427958][T12886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.447475][T12886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.465909][T12886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.477496][T12886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.496841][T12886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.508272][T12886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.549269][T12886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.582511][T12886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 724.609463][ T9279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 724.679497][ T9279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 724.724394][T12886] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.764268][T12886] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.784269][T12886] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.793662][T12886] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.685657][ T4987] device team0 left promiscuous mode [ 725.695826][ T4987] device team_slave_0 left promiscuous mode [ 725.726065][ T4987] device team_slave_1 left promiscuous mode [ 725.735442][ T4987] device hsr_slave_0 left promiscuous mode [ 725.751281][ T4987] ¥: port 1(team0) entered disabled state [ 725.794600][ T4987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 725.868019][ T4987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 725.900597][ T4987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 725.920574][ T4987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 725.941757][ T4987] device bridge_slave_1 left promiscuous mode [ 725.961370][ T4987] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.975950][ T4987] device bridge_slave_0 left promiscuous mode [ 725.987376][ T4987] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.076120][ T4987] device veth0_macvtap left promiscuous mode [ 726.092482][ T4987] device veth1_vlan left promiscuous mode [ 729.439863][T13178] netlink: 'syz.1.2947': attribute type 2 has an invalid length. [ 729.511778][T13178] netlink: 'syz.1.2947': attribute type 1 has an invalid length. [ 731.094338][ T4987] team0 (unregistering): Port device hsr_slave_0 removed [ 731.262294][ T4987] team0 (unregistering): Port device team_slave_1 removed [ 731.310744][ T4987] team0 (unregistering): Port device team_slave_0 removed [ 731.357865][ T4987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 731.722396][ T4987] bond0 (unregistering): Released all slaves [ 731.959023][ T4995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.991070][ T4995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.159800][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 732.193549][ T4972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.225671][ T4972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.256884][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 734.590408][T13219] netlink: 'syz.2.2961': attribute type 2 has an invalid length. [ 734.611040][T13219] netlink: 'syz.2.2961': attribute type 1 has an invalid length. [ 735.945195][T13260] netlink: 'syz.2.2975': attribute type 2 has an invalid length. [ 735.961816][T13260] netlink: 'syz.2.2975': attribute type 1 has an invalid length. [ 737.818589][T13297] netlink: 'syz.4.2989': attribute type 2 has an invalid length. [ 737.840973][T13297] netlink: 'syz.4.2989': attribute type 1 has an invalid length. [ 742.513258][T13342] netlink: 'syz.3.3005': attribute type 2 has an invalid length. [ 742.547382][T13342] netlink: 'syz.3.3005': attribute type 1 has an invalid length. [ 743.095038][T12056] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 743.103620][T12056] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 743.112929][T12056] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 743.121982][T12056] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 743.129828][T12056] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 743.137676][T12056] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 743.431606][T13348] chnl_net:caif_netlink_parms(): no params data found [ 743.566592][T13348] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.574553][T13348] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.583489][T13348] device bridge_slave_0 entered promiscuous mode [ 743.593102][T13348] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.600733][T13348] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.611696][T13348] device bridge_slave_1 entered promiscuous mode [ 743.656678][T13348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 743.669647][T13348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 743.703489][T13348] team0: Port device team_slave_0 added [ 743.713440][T13348] team0: Port device team_slave_1 added [ 743.745640][T13348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 743.752936][T13348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.789940][T13348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 743.814563][T13348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 743.830473][T13348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.866104][T13348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 744.804981][T13348] device hsr_slave_0 entered promiscuous mode [ 745.162028][T12056] Bluetooth: hci2: command 0x0409 tx timeout [ 745.451346][T13348] device hsr_slave_1 entered promiscuous mode [ 745.513612][T13348] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 745.528962][T13348] Cannot create hsr debugfs directory [ 745.903358][ T9283] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.084949][ T9283] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.353777][ T9283] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.219884][T13402] netlink: 'syz.2.3026': attribute type 2 has an invalid length. [ 747.231099][T12056] Bluetooth: hci2: command 0x041b tx timeout [ 747.261093][T13402] netlink: 'syz.2.3026': attribute type 1 has an invalid length. [ 747.771267][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.777617][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.311012][T12056] Bluetooth: hci2: command 0x040f tx timeout [ 751.394814][T12056] Bluetooth: hci2: command 0x0419 tx timeout [ 754.197206][T13348] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 754.239244][T13348] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 754.248308][T13471] netlink: 'syz.3.3041': attribute type 2 has an invalid length. [ 754.287657][T13471] netlink: 'syz.3.3041': attribute type 1 has an invalid length. [ 754.348905][T13348] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 754.463820][T13348] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 755.416411][T13348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 755.595256][ T9283] device hsr_slave_0 left promiscuous mode [ 755.635646][ T9283] device hsr_slave_1 left promiscuous mode [ 758.540213][ T9283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 758.575823][ T9283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 758.611982][ T9283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 758.619730][ T9283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 758.632238][T13524] netlink: 'syz.2.3055': attribute type 2 has an invalid length. [ 758.643717][T13524] netlink: 'syz.2.3055': attribute type 1 has an invalid length. [ 758.654088][ T9283] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 758.662026][ T9283] batman_adv: batadv0: Removing interface: virt_wifi0 [ 758.686161][ T9283] device veth1_macvtap left promiscuous mode [ 758.695146][ T9283] device veth0_macvtap left promiscuous mode [ 758.702800][ T9283] device veth1_vlan left promiscuous mode [ 759.639229][ T9283] team0 (unregistering): Port device team_slave_1 removed [ 759.727979][ T9283] team0 (unregistering): Port device team_slave_0 removed [ 759.807651][ T9283] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 759.883961][ T9283] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 760.226947][ T9283] team0 (unregistering): Port device dummy0 removed [ 760.282894][ T9283] bond0 (unregistering): Released all slaves [ 760.365473][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 760.442743][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 760.474662][T13348] 8021q: adding VLAN 0 to HW filter on device team0 [ 760.506629][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 760.525689][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 760.565352][ T4987] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.572590][ T4987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 760.594604][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 760.605131][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 760.618098][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 760.636238][ T4987] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.643492][ T4987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 760.675157][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 760.711611][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 760.743984][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 760.766980][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 760.787194][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 760.796642][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 760.807053][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 760.817137][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 760.844390][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 760.870534][T13348] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 760.959713][T13348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 760.979610][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 760.993416][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 761.181101][T13558] syzkaller0: create flow: hash 3355295872 index 1 [ 761.287813][T13551] syzkaller0: delete flow: hash 3355295872 index 1 [ 763.846914][T13575] netlink: 'syz.5.3073': attribute type 2 has an invalid length. [ 763.865324][T13575] netlink: 'syz.5.3073': attribute type 1 has an invalid length. [ 764.799289][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 764.814014][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 764.830047][T13348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 764.871205][ T9279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 764.930752][ T9279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 765.004333][T13348] device veth0_vlan entered promiscuous mode [ 765.013073][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 765.027741][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 765.049032][T13348] device veth1_vlan entered promiscuous mode [ 765.057306][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 765.119093][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 765.133120][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 765.160407][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 765.170382][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 765.186357][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 765.203452][T13348] device veth0_macvtap entered promiscuous mode [ 765.252721][T13348] device veth1_macvtap entered promiscuous mode [ 765.294075][T13348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 765.308359][T13348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.326249][T13348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 765.337601][T13348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.353139][T13348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 765.366525][T13348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.384204][T13348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 765.394870][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 765.406517][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 765.423735][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 765.436206][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 765.450694][T13348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 765.462303][T13348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.473679][T13348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 765.484333][T13348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.494744][T13348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 765.505637][T13348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.517233][T13348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 765.537220][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 765.550103][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 765.568396][T13348] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.580354][T13348] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.595096][T13348] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.604269][T13348] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.766038][ T9283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.781546][ T9283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.806051][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 765.846614][ T4987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.861600][ T4987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.889710][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 767.222102][T12056] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 767.240797][T12056] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 767.265402][T12056] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 767.274371][ T4287] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 767.282856][ T4287] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 767.290239][T12056] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 768.188449][T13617] chnl_net:caif_netlink_parms(): no params data found [ 768.634659][T13617] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.664522][T13617] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.697928][T13617] device bridge_slave_0 entered promiscuous mode [ 768.731017][T13617] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.738267][T13617] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.788375][T13617] device bridge_slave_1 entered promiscuous mode [ 769.467396][T12056] Bluetooth: hci0: command 0x0409 tx timeout [ 769.618700][T13617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 769.633990][T13617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 769.757311][ T4995] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.960474][T13617] team0: Port device team_slave_0 added [ 770.137149][ T4995] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.233688][T13617] team0: Port device team_slave_1 added [ 770.482435][T13617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 770.489771][T13617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 770.570001][T13617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 770.601862][ T4995] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.650976][T13617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 770.663853][T13617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 770.716887][T13617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 770.770435][ T4995] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.892866][T13617] device hsr_slave_0 entered promiscuous mode [ 770.940155][T13617] device hsr_slave_1 entered promiscuous mode [ 770.961211][T13617] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 771.010181][T13617] Cannot create hsr debugfs directory [ 771.551069][T12056] Bluetooth: hci0: command 0x041b tx timeout [ 773.633353][ T4276] Bluetooth: hci0: command 0x040f tx timeout [ 773.828880][T13617] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 773.959376][T13617] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 773.991533][T13617] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 774.285074][T13617] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 774.856765][ T4995] device hsr_slave_0 left promiscuous mode [ 774.888913][ T4995] device hsr_slave_1 left promiscuous mode [ 774.933447][ T4995] device bridge_slave_1 left promiscuous mode [ 774.939879][ T4995] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.955141][ T4995] device bridge_slave_0 left promiscuous mode [ 774.964708][ T4995] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.000733][ T4995] device veth1_macvtap left promiscuous mode [ 775.021415][ T4995] device veth1_vlan left promiscuous mode [ 775.074244][ T4276] Bluetooth: hci5: command 0x0406 tx timeout [ 775.722417][T12056] Bluetooth: hci0: command 0x0419 tx timeout [ 776.276030][ T4995] team0 (unregistering): Port device team_slave_1 removed [ 776.326859][ T4995] team0 (unregistering): Port device team_slave_0 removed [ 776.374850][ T4995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 776.422318][ T4995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 776.746563][ T4995] team0 (unregistering): Port device dummy0 removed [ 776.777457][ T4995] team0 (unregistering): Port device bridge0 removed [ 776.822364][ T4995] bond0 (unregistering): Released all slaves [ 776.951192][T13617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 777.007700][T13798] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.059839][ T9279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 777.090101][ T9279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 777.102191][T13617] 8021q: adding VLAN 0 to HW filter on device team0 [ 777.139704][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 777.195046][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 777.239960][ T9283] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.247171][ T9283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 777.291647][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 777.320720][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 777.333601][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 777.344375][ T9283] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.351598][ T9283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 777.394592][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 777.404101][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 777.414961][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 777.425155][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 777.434706][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 777.455914][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 777.465319][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 777.551476][ T9279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 777.583740][ T9279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 777.666545][ T9279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 777.692216][ T9279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 777.731790][T13617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 778.229491][ T9279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 778.248891][ T9279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 778.288592][T13617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 778.327829][ T9279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 778.373052][ T9279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 778.403946][ T9279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 778.413748][ T9279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 778.434536][T13617] device veth0_vlan entered promiscuous mode [ 778.452861][ T9279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 778.463574][ T9279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 778.478844][T13617] device veth1_vlan entered promiscuous mode [ 778.532179][ T9272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 778.561749][ T9272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 778.570021][ T9272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 778.581566][ T9272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 778.597015][T13617] device veth0_macvtap entered promiscuous mode [ 778.623483][T13617] device veth1_macvtap entered promiscuous mode [ 778.659934][T13617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 778.731273][T13617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.850913][T13617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 778.861714][T13617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.871787][T13617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 778.882450][T13617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.897105][T13617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 778.908263][T13617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.921977][T13617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 778.933121][T13617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 778.944284][T13617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.961611][T13617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 778.987564][T13617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.004753][T13617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 779.018297][T13617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.034741][T13617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 779.048859][T13617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.069595][T13617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 779.090395][T13617] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.105706][T13617] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.116652][T13617] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.134266][T13617] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.200451][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 779.237902][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 779.280300][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 779.307721][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 779.317639][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 779.346194][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 779.558079][ T9279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.573691][ T9279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.665379][ T9279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 779.767105][ T9279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.807202][ T9279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.824289][ T9279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 780.075971][T13862] netlink: 'syz.3.3086': attribute type 2 has an invalid length. [ 780.100893][T13862] netlink: 'syz.3.3086': attribute type 1 has an invalid length. [ 781.129190][ T4276] Bluetooth: hci1: Malformed LE Event: 0x02 [ 781.294528][T13885] netlink: 'syz.3.3174': attribute type 2 has an invalid length. [ 781.320962][T13885] netlink: 'syz.3.3174': attribute type 1 has an invalid length. [ 781.551393][T12056] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 781.591724][T12056] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 781.601991][T12056] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 781.610335][T12056] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 781.618938][T12056] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 781.626476][T12056] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 781.875781][ T4990] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.190499][ T4990] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.759984][ T4276] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 782.770185][ T4276] Bluetooth: hci2: Injecting HCI hardware error event [ 782.772814][ T4990] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.779270][ T4287] Bluetooth: hci2: hardware error 0x00 [ 782.912766][ T4990] batman_adv: batadv0: Removing interface: netdevsim0 [ 782.964145][ T4990] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.340221][T13929] netlink: 'syz.2.3187': attribute type 2 has an invalid length. [ 783.379079][T13893] chnl_net:caif_netlink_parms(): no params data found [ 783.401007][T13929] netlink: 'syz.2.3187': attribute type 1 has an invalid length. [ 783.610057][ T4990] device ip6gretap0 left promiscuous mode [ 783.643427][ T4990] bridge0: port 3(ip6gretap0) entered disabled state [ 783.721200][ T4276] Bluetooth: hci3: command 0x0409 tx timeout [ 784.173013][T13893] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.203190][T13893] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.257100][T13893] device bridge_slave_0 entered promiscuous mode [ 784.325650][T13893] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.371150][T13893] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.418132][T13893] device bridge_slave_1 entered promiscuous mode [ 784.568935][T13893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 784.633108][T13893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 784.836842][T13893] team0: Port device team_slave_0 added [ 784.852967][ T4287] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 785.344316][T13893] team0: Port device team_slave_1 added [ 785.527129][T13893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 785.581287][T13893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 785.690963][T13893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 785.715471][ T4287] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5 [ 785.797067][ T4287] Bluetooth: hci3: command 0x041b tx timeout [ 785.862038][T13893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 785.869144][T13893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 785.944358][T13893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 786.015739][T13978] netlink: 'syz.5.3201': attribute type 2 has an invalid length. [ 786.038495][T13978] netlink: 'syz.5.3201': attribute type 1 has an invalid length. [ 786.325179][T13893] device hsr_slave_0 entered promiscuous mode [ 786.353172][T13893] device hsr_slave_1 entered promiscuous mode [ 786.411570][T13893] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 786.419233][T13893] Cannot create hsr debugfs directory [ 787.557799][T13994] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3207'. [ 787.871141][ T4287] Bluetooth: hci3: command 0x040f tx timeout [ 788.027644][ T4990] device team0 left promiscuous mode [ 788.033749][ T4990] device team_slave_0 left promiscuous mode [ 788.050348][ T4990] device team_slave_1 left promiscuous mode [ 788.060741][ T4990] ¥: port 1(team0) entered disabled state [ 788.093520][ T4990] device hsr_slave_0 left promiscuous mode [ 788.108845][ T4990] device hsr_slave_1 left promiscuous mode [ 788.136235][ T4990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 788.155656][ T4990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 788.173203][T14026] netlink: 'syz.1.3214': attribute type 2 has an invalid length. [ 788.183296][ T4990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 788.192856][ T4990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 788.200801][T14026] netlink: 'syz.1.3214': attribute type 1 has an invalid length. [ 788.213619][ T4990] device bond0 left promiscuous mode [ 788.221432][ T4990] device bond_slave_0 left promiscuous mode [ 788.227536][ T4990] device bond_slave_1 left promiscuous mode [ 788.236692][ T4990] device bridge_slave_1 left promiscuous mode [ 788.243486][ T4990] bridge0: port 2(bond0) entered disabled state [ 788.252191][ T4990] device bridge_slave_0 left promiscuous mode [ 788.258447][ T4990] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.310999][ T4990] device veth1_macvtap left promiscuous mode [ 788.325064][ T4990] device veth0_macvtap left promiscuous mode [ 788.338420][ T4990] device veth1_vlan left promiscuous mode [ 788.358154][ T4990] device veth0_vlan left promiscuous mode [ 789.409314][ T4990] team0 (unregistering): Port device team_slave_1 removed [ 789.458584][ T4990] team0 (unregistering): Port device team_slave_0 removed [ 789.507576][ T4990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 789.609408][ T4990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 789.719077][ T4990] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 789.951367][ T4287] Bluetooth: hci3: command 0x0419 tx timeout [ 790.330104][ T4990] bond0 (unregistering): Released all slaves [ 790.474798][T14041] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3220'. [ 791.067657][ T4276] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5 [ 797.084782][T13893] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 797.236273][T13893] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 797.256635][T13893] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 797.348286][T13893] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 797.383734][T14087] netlink: 'syz.2.3231': attribute type 2 has an invalid length. [ 797.441114][T14087] netlink: 'syz.2.3231': attribute type 1 has an invalid length. [ 797.767830][T13893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 797.787357][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 797.804446][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 797.821293][T13893] 8021q: adding VLAN 0 to HW filter on device team0 [ 797.839300][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 797.857676][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 797.869934][ T4987] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.877245][ T4987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 797.889495][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 797.898998][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 797.908055][ T4987] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.915341][ T4987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 797.933406][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 797.974632][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 797.984239][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 797.994441][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 798.015740][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 798.042329][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 798.051660][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 798.060785][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 798.070782][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 798.081122][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 798.096637][T13893] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 798.112920][T13893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 798.137220][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 798.160560][ T4276] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5 [ 798.162629][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 799.282180][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 799.305730][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 799.348799][T13893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 799.651568][T14132] netlink: 'syz.5.3241': attribute type 2 has an invalid length. [ 799.703449][T14132] netlink: 'syz.5.3241': attribute type 1 has an invalid length. [ 800.229761][ T4276] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5 [ 801.193939][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 801.265816][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 801.372791][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 801.391647][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 801.433986][T13893] device veth0_vlan entered promiscuous mode [ 801.462702][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 801.485896][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 801.527875][T13893] device veth1_vlan entered promiscuous mode [ 801.663953][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 801.676811][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 801.777020][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 801.809468][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 801.842833][T13893] device veth0_macvtap entered promiscuous mode [ 801.956641][T13893] device veth1_macvtap entered promiscuous mode [ 802.050046][T13893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 802.109451][T13893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.158769][T13893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 802.217110][T13893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.258328][T13893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 802.301036][T13893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.332258][T13893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 802.365838][T13893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.440711][T13893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 802.503203][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 802.515268][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 802.600551][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 802.662613][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 802.760315][T13893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 802.790955][T13893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.817664][T13893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 802.879569][T13893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.910484][T13893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 802.939856][T13893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.959655][T13893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 802.979084][T13893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.032762][T13893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 803.081608][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 803.107381][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 803.169400][T13893] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.203763][T13893] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.247590][T13893] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.307665][T13893] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.514604][T14189] netlink: 'syz.1.3256': attribute type 2 has an invalid length. [ 803.585682][T14189] netlink: 'syz.1.3256': attribute type 1 has an invalid length. [ 804.401238][ T4995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.409223][ T4995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.473636][ T4276] Bluetooth: hci5: unexpected event 0x1c length: 15 > 5 [ 804.550390][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 804.882287][ T4982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.910697][ T4982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.042846][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 805.773405][T14231] netlink: 'syz.1.3267': attribute type 2 has an invalid length. [ 805.802035][T14231] netlink: 'syz.1.3267': attribute type 1 has an invalid length. [ 806.844711][ T4276] Bluetooth: hci3: unexpected event 0x1c length: 15 > 5 [ 808.837659][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.852277][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.888818][ T4276] Bluetooth: hci5: unexpected event 0x1c length: 15 > 5 [ 810.560542][ T4276] Bluetooth: hci5: unexpected event 0x05 length: 15 > 4 [ 815.668205][ T4287] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 815.693266][ T4287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 815.707760][ T4287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 815.716094][ T4287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 815.723900][ T4287] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 815.732378][ T4287] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 817.791423][ T4276] Bluetooth: hci4: command 0x0409 tx timeout [ 818.987045][T14298] chnl_net:caif_netlink_parms(): no params data found [ 819.684291][ T4276] Bluetooth: hci3: unexpected event 0x01 length: 151 > 1 [ 819.788639][T14298] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.871085][ T4276] Bluetooth: hci4: command 0x041b tx timeout [ 819.931455][T14298] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.022409][T14298] device bridge_slave_0 entered promiscuous mode [ 820.086272][T14298] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.134268][T14298] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.186189][T14298] device bridge_slave_1 entered promiscuous mode [ 820.378107][T14298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 820.503813][T14298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 820.844875][T14298] team0: Port device team_slave_0 added [ 820.853273][T14298] team0: Port device team_slave_1 added [ 820.878689][T14298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 820.903672][T14298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 821.101123][T14298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 821.179770][T14298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 821.294479][T14298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 821.510890][T14298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 821.912605][T14298] device hsr_slave_0 entered promiscuous mode [ 821.960914][ T4287] Bluetooth: hci4: command 0x040f tx timeout [ 821.999410][T14298] device hsr_slave_1 entered promiscuous mode [ 822.087292][T14298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 822.233506][T14298] Cannot create hsr debugfs directory [ 823.316337][ T4276] Bluetooth: hci5: unexpected event 0x01 length: 151 > 1 [ 823.757462][T14298] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 823.806471][T14298] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 823.915670][T14298] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 824.033834][ T4276] Bluetooth: hci4: command 0x0419 tx timeout [ 824.037671][T14298] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 824.801259][T14298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 824.882364][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 824.912745][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 825.063976][T14298] 8021q: adding VLAN 0 to HW filter on device team0 [ 825.206888][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 825.285201][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 825.362000][ T4995] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.369216][ T4995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 825.504717][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 825.535227][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 825.593851][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 825.701176][ T4995] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.708335][ T4995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 825.791234][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 825.843813][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 831.553987][ T4276] Bluetooth: hci1: command 0x0406 tx timeout [ 831.813143][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 831.827050][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 831.835822][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 831.844914][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 831.878167][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 831.928780][T14298] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 831.984324][T14298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 832.071181][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 832.079989][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 832.112327][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 832.157477][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 832.197302][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 835.240191][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 835.248466][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 835.278369][T14298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 837.230551][ T9272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 837.312011][ T9272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 837.323334][T14568] netlink: 184 bytes leftover after parsing attributes in process `syz.5.3355'. [ 837.398091][T14298] device veth0_vlan entered promiscuous mode [ 837.437188][ T9272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 837.454234][ T9272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 837.472055][ T9272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 837.491166][ T9272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 837.521875][T14298] device veth1_vlan entered promiscuous mode [ 837.626796][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 837.639946][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 837.652204][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 837.669246][ T4987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 837.690442][T14298] device veth0_macvtap entered promiscuous mode [ 837.710584][T14298] device veth1_macvtap entered promiscuous mode [ 837.802773][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 837.851360][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.862990][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 837.875519][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.886905][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 837.897909][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.908339][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 837.923312][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.942269][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 837.963463][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.002318][T14298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 838.019975][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 838.030145][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 838.045327][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 838.087473][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 838.144255][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 838.180745][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.226787][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 838.269764][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.318144][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 838.335772][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.353573][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 838.375297][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.395427][T14298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 838.409552][T14298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.538709][T14298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 838.565158][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 838.611870][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 838.730416][T14298] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.757758][T14298] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.773823][T14298] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.785852][T14298] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.188093][ T9272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.225618][ T9272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.258407][T14600] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3368'. [ 839.332861][ T9272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 839.356589][ T9272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.375039][ T9272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.397429][ T4972] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 841.003113][T14624] device syzkaller0 entered promiscuous mode [ 846.610943][T14641] netlink: 184 bytes leftover after parsing attributes in process `syz.1.3379'. [ 847.899574][T14678] [ 847.903343][T14678] ============================= [ 847.908220][T14678] WARNING: suspicious RCU usage [ 847.913587][T14678] syzkaller #0 Not tainted [ 847.918025][T14678] ----------------------------- [ 847.922920][T14678] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 847.931727][T14678] [ 847.931727][T14678] other info that might help us debug this: [ 847.931727][T14678] [ 847.942116][T14678] [ 847.942116][T14678] rcu_scheduler_active = 2, debug_locks = 1 [ 847.950240][T14678] 1 lock held by syz.2.3393/14678: [ 847.955411][T14678] #0: ffffffff8cb2dda0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 847.965815][T14678] [ 847.965815][T14678] stack backtrace: [ 847.971754][T14678] CPU: 0 PID: 14678 Comm: syz.2.3393 Not tainted syzkaller #0 [ 847.979338][T14678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 847.989604][T14678] Call Trace: [ 847.992965][T14678] [ 847.995961][T14678] dump_stack_lvl+0x188/0x24e [ 848.000999][T14678] ? show_regs_print_info+0x12/0x12 [ 848.006296][T14678] ? load_image+0x410/0x410 [ 848.010926][T14678] ? __lock_acquire+0x138a/0x7c40 [ 848.016131][T14678] lockdep_rcu_suspicious+0x1dd/0x300 [ 848.021558][T14678] get_callchain_entry+0x2a5/0x3b0 [ 848.026744][T14678] get_perf_callchain+0xc4/0x490 [ 848.031718][T14678] ? put_callchain_entry+0xb0/0xb0 [ 848.036873][T14678] ? plist_add+0x3d7/0x490 [ 848.041541][T14678] ? verify_lock_unused+0x140/0x140 [ 848.046789][T14678] __bpf_get_stack+0x2de/0x520 [ 848.051726][T14678] ? stack_map_get_build_id_offset+0x9d0/0x9d0 [ 848.057917][T14678] ? bpf_prog_14d9fb3786f83342+0x3d/0x41 [ 848.063582][T14678] bpf_get_stack_raw_tp+0x189/0x1c0 [ 848.068942][T14678] bpf_prog_14d9fb3786f83342+0x3d/0x41 [ 848.074546][T14678] bpf_prog_run_pin_on_cpu+0xaa/0x150 [ 848.079990][T14678] bpf_prog_test_run_syscall+0x31c/0x4b0 [ 848.085671][T14678] ? sock_gen_cookie+0x60/0x60 [ 848.090484][T14678] ? sock_gen_cookie+0x60/0x60 [ 848.095370][T14678] bpf_prog_test_run+0x31c/0x390 [ 848.100503][T14678] __sys_bpf+0x62b/0x780 [ 848.104977][T14678] ? bpf_link_show_fdinfo+0x380/0x380 [ 848.110392][T14678] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 848.116408][T14678] ? lock_chain_count+0x20/0x20 [ 848.121308][T14678] __x64_sys_bpf+0x78/0x90 [ 848.125755][T14678] do_syscall_64+0x4c/0xa0 [ 848.130224][T14678] ? clear_bhb_loop+0x60/0xb0 [ 848.134939][T14678] ? clear_bhb_loop+0x60/0xb0 [ 848.139671][T14678] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 848.145718][T14678] RIP: 0033:0x7fe10679e159 [ 848.150242][T14678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 848.169999][T14678] RSP: 002b:00007fe1076d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 848.178453][T14678] RAX: ffffffffffffffda RBX: 00007fe106a25fa0 RCX: 00007fe10679e159 [ 848.186457][T14678] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 848.194459][T14678] RBP: 00007fe10683503b R08: 0000000000000000 R09: 0000000000000000 [ 848.202460][T14678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 848.210555][T14678] R13: 00007fe106a26038 R14: 00007fe106a25fa0 R15: 00007ffc5f2e45b8 [ 848.218575][T14678]