last executing test programs: 23.28684252s ago: executing program 4 (id=2972): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x17, &(0x7f0000000800), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@var={0x1, 0x0, 0x0, 0xe, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xf4c9}}]}, {0x0, [0x61]}}, 0x0, 0x43}, 0x28) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r0, &(0x7f00000002c0), 0x0}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a400014002000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xcb}], 0x1}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000), 0xfdef) 22.872190858s ago: executing program 4 (id=2973): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x121, 0x121, 0x3, [@fwd={0xc}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x5}, @typedef={0x9, 0x0, 0x0, 0x8, 0x4}, @datasec={0xe, 0x6, 0x0, 0xf, 0x1, [{0x3, 0x401, 0x1}, {0x4, 0x1ff, 0x1}, {0x4, 0x7c, 0x40}, {0x3, 0xfa5, 0x80}, {0x4, 0x7fffffff, 0x2}, {0x1, 0x75, 0x10000}], "c3"}, @type_tag={0x10, 0x0, 0x0, 0x12, 0x1}, @enum64={0x9, 0x6, 0x0, 0x13, 0x1, 0x3, [{0xe, 0x43d, 0x72a4}, {0xb, 0x300000, 0x6}, {0xf, 0x8, 0xa39d}, {0xa, 0x9, 0x9}, {0xf, 0x2, 0x737}, {0x2, 0x4, 0x6}]}, @enum64={0xa, 0x5, 0x0, 0x13, 0x0, 0x4, [{0x5, 0x5}, {0x5, 0x3, 0x4c09e677}, {0x4, 0xfffffffb}, {0x2, 0x2, 0x4}, {0x7, 0x9, 0xc9}]}]}, {0x0, [0x2e]}}, &(0x7f0000000140)=""/4096, 0x13f, 0x1000, 0x1, 0x8}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002200)={r0, 0x20, &(0x7f00000021c0)={&(0x7f0000001180)=""/25, 0x19, 0x0, &(0x7f00000011c0)=""/4096, 0x1000}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000022c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000002240), &(0x7f0000002280)='%pI4 \x00'}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002380)={0x1, 0x58, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x1f, 0x5, 0x0, 0x6, 0x0, r2, 0x2, '\x00', r4, r0, 0x0, 0x2, 0x3}, 0x50) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f0000002480)='cgroup.procs\x00', 0x2, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000026c0)=@bpf_tracing={0x1a, 0x1c, &(0x7f00000024c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@alu={0x7, 0x1, 0xa, 0x9, 0x11, 0x40, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x1, 0x4, 0x4, 0x0, 0x6}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000025c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40e00, 0x48, '\x00', r4, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000002600)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000002640)={0x1, 0x4, 0x5, 0x8}, 0x10, 0x1750f, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000002680)=[{0x3, 0x4, 0x7}, {0x5, 0x3, 0x8, 0x4}], 0x10, 0x9}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000002780)={r7, r2}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002a40)={{r2, 0xffffffffffffffff}, &(0x7f00000029c0), &(0x7f0000002a00)='%-5lx \x00'}, 0x20) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b00)={0x6, 0x11, &(0x7f00000027c0)=@raw=[@cb_func={0x18, 0x3, 0x4, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7c0}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_fd={0x18, 0x3, 0x1, 0x0, r5}], &(0x7f0000002880)='syzkaller\x00', 0x9, 0x9c, &(0x7f00000028c0)=""/156, 0xc2f00, 0x53, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002980)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000002a80)=[r8], &(0x7f0000002ac0)=[{0x2, 0x3, 0xb, 0x9}], 0x10, 0x7f}, 0x94) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000002bc0)={'dvmrp0\x00', 0x400}) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000002e40)={&(0x7f0000002c00)="c8834adee2226236be100543ef262d97e25d09843fc1413894ae1d0be2adf69e052f46b00502fcbc1314be9484cbe5e8c4b39ee24ce8fe6c0a34c951c6d46885014dfc46c4a76876d7d58d5e6e24ae605e909d6028ba67d5a0f1a982ef679c5b18ffcfb0be0cf16b0ddaee536285599990d52dc136afaeed9d4027d66a4ba0395a39ff03b66ae94e0af8829b2897fc100fb0d039f81684f80e73e34a37ee", &(0x7f0000002cc0)=""/66, &(0x7f0000002d40)="3ad2b32251f12c5fd549776b250660e36508afe97015b95cd55bef3cad7eb78d2522320b1996b9d084ed2aa49a119c1e56812c48d75d5c88643eadb4a5b7e91e0aee1984af31e5f2d4ddcb0356655647bb7f6ef691c9c578b294e87468ecb591eae70b328a55ab3613305a8b90da77372c4333dd9d75d0b425ddc99a41426b9ce50652ca04046ca3712197e0d1fe7eef0b29fc333cef2288a680feffbfc101041d0b33d3520554771b82b1", &(0x7f0000002e00)="11f3da06c00aa656e87a740bbd00c7cb6b6b8ef0d28fa3ed26b3393739310c35", 0x80000000, r5, 0x4}, 0x38) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000002e80), 0x10000, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000002ec0)={'veth0\x00', @random="e4b0a6256b7c"}) bpf$PROG_LOAD(0x5, &(0x7f0000004100)={0x14, 0x18, &(0x7f0000002f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4d7, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@jmp={0x5, 0x0, 0x6, 0x1, 0x2, 0x50, 0xf}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @call={0x85, 0x0, 0x0, 0xbd}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002fc0)='syzkaller\x00', 0x8, 0x1000, &(0x7f0000003000)=""/4096, 0x41000, 0xc, '\x00', r4, @lirc_mode2, 0xffffffffffffffff, 0x8, &(0x7f0000004000)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000004040)={0x1, 0xc, 0x0, 0xf05}, 0x10, r1, r9, 0x1, &(0x7f0000004080)=[r5, r8, r2, r7], &(0x7f00000040c0)=[{0x1, 0x3, 0x8}], 0x10, 0x8}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000053c0)={&(0x7f00000041c0)="9a1071a565a08d289073d6e8028dde6c9e6ad015c67983041e842d7f3d11ecb20c093e06f6e94d4996e10bbb8993019793c6388cf0661240deb7c35322f6b4a87ef2d6505bba03", &(0x7f0000004240)=""/4096, &(0x7f0000005240)="a88b6196f0f8f9761b55b4c6aa31936bc46f3085b06ab85c54b828726d1048f31d88a323f126c7605dc2e0f799d8c019e52183abfeb154bb882c37481adaf5eb61beb5693be4e3c96d35b27f9a2d6baa646b2af810a83ddf42f0ae48e4586caf74a2822c5bb4037942344de8835dfed63bc70c9fd78c86d5224205930dd73585c24ff046d09a606441b0f932cf6472c703e2921d5dcdfeb89cb193283e6e037afdfb4b8b3523479c984dc0ab11e4444f18660a405a95af05baa7c61942046fc19ba15c7e02493385", &(0x7f0000005340)="0c401afc537e1c441dd8ed1d8a7a4d599342315f5cc528d635dea719f203ff4996e2b9ed5b1ad72bca245542e396f80d29306ba614d394b40a73883de56cc67eea3b9371a646cb10efefeac643a786b69055bbe3aad5590d49864671a09e3bafc3183d48742fc1122e3229feb57d096e8ab303fef0d4396f", 0x8, r2, 0x4}, 0x38) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000005400), 0x4) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000005440)={r11}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000005480)=@base={0x16, 0xfd5, 0x8, 0x3, 0x40000, r12, 0x9, '\x00', r4, 0xffffffffffffffff, 0x5, 0x1, 0x5}, 0x50) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000005500)={r3, 0x9}, 0xc) ioctl$TUNSETSTEERINGEBPF(r10, 0x800454e0, &(0x7f0000005540)=r9) socket$kcm(0x29, 0x2, 0x0) r14 = getpid() syz_open_procfs$namespace(r14, &(0x7f0000005580)='ns/time\x00') r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000005640)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x2, '\x00', r4, r12, 0x5, 0x2, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000005780)={0x11, 0x6, &(0x7f00000055c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x81}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffe}, @call={0x85, 0x0, 0x0, 0x44}]}, &(0x7f0000005600)='syzkaller\x00', 0x9c, 0x0, 0x0, 0x41000, 0x10, '\x00', r4, @fallback=0x4, r12, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, r7, 0x5, &(0x7f00000056c0)=[r15, r13], &(0x7f0000005700)=[{0x8, 0x5, 0xa, 0x5}, {0x4, 0x5, 0x0, 0x5}, {0x0, 0x2, 0xb, 0x6}, {0x3, 0x4, 0x5, 0x4}, {0x2, 0x4, 0xf, 0x6}], 0x10, 0xd29}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000005840)=@bloom_filter={0x1e, 0x9, 0x1, 0x8d, 0x5480, r12, 0x101, '\x00', r4, r0, 0x0, 0x2, 0x4, 0x7}, 0x50) recvmsg$unix(r12, &(0x7f0000005a40)={&(0x7f00000058c0), 0x6e, &(0x7f0000005980)=[{&(0x7f0000005940)=""/19, 0x13}], 0x1, &(0x7f00000059c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}, 0x20001) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000005b40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x340e, '\x00', 0x0, r16, 0x1, 0x4, 0x5}, 0x50) 22.650958093s ago: executing program 4 (id=2974): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="030000000400000004000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 22.503047474s ago: executing program 4 (id=2976): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x4001}, 0x50) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0424fc602f6e35400c000200001cc00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="010d000004000000020000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYRESHEX=r1], 0x50) socket$kcm(0x29, 0x5, 0x0) close(0x3) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_subtree(r6, &(0x7f0000000040), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r7) ioctl$SIOCSIFHWADDR(r7, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) write$cgroup_subtree(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="2d68756565746c6220a0db73699541d5e38c82fe00740f3944c91f74bedf06a99fcf"], 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r4) r8 = socket$kcm(0x22, 0x3, 0x0) close(r8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000400)={r10, r4}) r11 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f0000000200)=ANY=[@ANYBLOB='-', @ANYRESOCT], 0x81) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) 22.212477153s ago: executing program 4 (id=2978): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x8, &(0x7f0000000000), 0x4) socket$kcm(0xa, 0x2, 0x3a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x4}, 0x10c002, 0xac61, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0}, 0x10009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x50) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a0000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000040de030000000100000000a168c07ec49551d7000000001b0000000000009d000000541002eb54d955"], 0x50) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r2, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000001c00000095000031b283f8e2"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x5, 0x0, 0x7, 0x0, 0x0, 0x400004d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x1, @perf_bp={&(0x7f00000001c0), 0x4}, 0x102302, 0x2, 0xfefffffa, 0x1, 0x0, 0x0, 0x8, 0x0, 0x76}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 21.860161427s ago: executing program 4 (id=2982): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x17, &(0x7f0000000800), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@var={0x1, 0x0, 0x0, 0xe, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xf4c9}}]}, {0x0, [0x61]}}, 0x0, 0x43}, 0x28) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r0, &(0x7f00000002c0), 0x0}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a400014002000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xcb}], 0x1}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000), 0xfdef) 5.519737943s ago: executing program 3 (id=3057): socket$kcm(0xa, 0x5, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x50) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x3000000, &(0x7f0000000080)=[{&(0x7f0000000040)="0205000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) (async) socket$kcm(0x29, 0x7, 0x0) (async, rerun: 32) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) (rerun: 32) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r2, 0xd, 0x0, 0x9, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0]}, 0x40) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x3, 0x80000000}, 0x0, 0x80000000000000c8, 0x7fff, 0x0, 0xa45, 0xffffffff, 0x0, 0x0, 0x800000, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000300000d0000000000000000000000000c000000000000000600000003000000000000000000000d0d0000000000000000000013040000000000"], &(0x7f0000000900)=""/252, 0x56, 0xfc, 0x1}, 0x28) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) close(r4) (async) r5 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x3e, 0x0, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910209875f37538e486dd6317ce8102033300fe08000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 4.793427692s ago: executing program 3 (id=3058): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) close(r0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2d, 'net_cls'}]}, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x9b06596297b5b486, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x9b06596297b5b486, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'veth0_to_bond\x00', 0x600}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r1, 0x0, 0xca, 0x1000, &(0x7f0000000140)="1fac8b7de165a257f54aab6ba18f6d7b9acb10704cea859f1d38f943521fa0e958e2685dd65177ebad48a4aea57fe1695a6c55ac55ce4d256ef9d9488a03753e88028a484d919b9cad6132718683a0b2cee7fe7b7097b3b2ba89e36d5273eb796878c7f86e54383a19120d7e2cb2f47e4ecfc8c49c73ea3830d605073d016505edd1667c30208b41838118a3e101c7516600578dddf770bd06901fc399ce32e97a321234bce23bf1ef83d56604ee0b40e7b4e9cf3e5eb8160e3d683ac85682a07dcd470a7ca4d8345714", &(0x7f0000000240)=""/4096, 0x7, 0x0, 0x3b, 0x6d, &(0x7f0000001240)="405db4a35c26cc2974a1f85c3f9993ee55b6730e00c2c6dbc7ed0cd9919db93558847f45ade258a721d6d449b509af29426f2b54adfcfc65bf0ea2", &(0x7f0000001280)="e69f9cdf55b9bf4238ff638c8683cea43e6e10f92d8903339e805d98162878aa5afe74b15daefefa0001142452f55f5cfe3d6bd031fcca19c8311b2602d952414640c98bb6f19862cdb753a03ca7297abe7bfad690b4eefa4138af7dd5310df1de54e652675e7a199a764efa7c", 0x4}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r1, 0x0, 0xca, 0x1000, &(0x7f0000000140)="1fac8b7de165a257f54aab6ba18f6d7b9acb10704cea859f1d38f943521fa0e958e2685dd65177ebad48a4aea57fe1695a6c55ac55ce4d256ef9d9488a03753e88028a484d919b9cad6132718683a0b2cee7fe7b7097b3b2ba89e36d5273eb796878c7f86e54383a19120d7e2cb2f47e4ecfc8c49c73ea3830d605073d016505edd1667c30208b41838118a3e101c7516600578dddf770bd06901fc399ce32e97a321234bce23bf1ef83d56604ee0b40e7b4e9cf3e5eb8160e3d683ac85682a07dcd470a7ca4d8345714", &(0x7f0000000240)=""/4096, 0x7, 0x0, 0x3b, 0x6d, &(0x7f0000001240)="405db4a35c26cc2974a1f85c3f9993ee55b6730e00c2c6dbc7ed0cd9919db93558847f45ade258a721d6d449b509af29426f2b54adfcfc65bf0ea2", &(0x7f0000001280)="e69f9cdf55b9bf4238ff638c8683cea43e6e10f92d8903339e805d98162878aa5afe74b15daefefa0001142452f55f5cfe3d6bd031fcca19c8311b2602d952414640c98bb6f19862cdb753a03ca7297abe7bfad690b4eefa4138af7dd5310df1de54e652675e7a199a764efa7c", 0x4}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001380)='./cgroup/syz1\x00', 0x1ff) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000013c0)={'veth1_to_bond\x00', 0x100}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001680)={&(0x7f0000001400)="9898b483a2a18f98ece737c4a1b6ceb05c09c497e925309a204afebb016fe1a2451d48bfb7e717ee22f5def11bd08ce2ee48923e6606e52a8454dd3ef4818357115ff5ed3468875ffb9f3211cf22b1ad116d17848c219b172efe1bbd4b1144c8155684d678d89a9d59e5d460eca9bbe397b4348dd589ba0bc10647bd18f008c9a176ae6088ff1cb9c2d63575727858f274a981043a9bf2d3abe628abf413667a2d619ed6950d83f795858753372620c4135d98aa23f02286ddbe27a66ce2ac3c44ce6e46c01bd7723aeb0b668075aeede83e93584f662d13754fb4a6", &(0x7f0000001500)=""/20, &(0x7f0000001540)="40f62f64d60da5b3cbb0882e9b0225269624e92210778e2ca9a2544a7042ebafe9633cbd623f0d0a1e766406ca34bf05ea286f1b09085fe5558cfddcd0e0beda35768b6773ff63e5e772a639a0b8a84c5a4a24bcd5e8549e26fe7c5d530efa912a9305b86ce6821231d5afb1881477d4f8c31f1ee3ba722f5c144dc011358278710590cd094f01fd3c7a7661208230501fda58195667e4646178382100d0e75da98d92dbbf75d7fc47a571bb4c2e96cbeb4f58e43eb54cb02bebe980781ab950706e10142c908de1", &(0x7f0000001640)="3ac148d3d58375abdec28ca7bfc8f77f8cd41cc0781ca64df322906c7d5a07fb25a2ef744432fbcc44e97c", 0x3, r1}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001680)={&(0x7f0000001400)="9898b483a2a18f98ece737c4a1b6ceb05c09c497e925309a204afebb016fe1a2451d48bfb7e717ee22f5def11bd08ce2ee48923e6606e52a8454dd3ef4818357115ff5ed3468875ffb9f3211cf22b1ad116d17848c219b172efe1bbd4b1144c8155684d678d89a9d59e5d460eca9bbe397b4348dd589ba0bc10647bd18f008c9a176ae6088ff1cb9c2d63575727858f274a981043a9bf2d3abe628abf413667a2d619ed6950d83f795858753372620c4135d98aa23f02286ddbe27a66ce2ac3c44ce6e46c01bd7723aeb0b668075aeede83e93584f662d13754fb4a6", &(0x7f0000001500)=""/20, &(0x7f0000001540)="40f62f64d60da5b3cbb0882e9b0225269624e92210778e2ca9a2544a7042ebafe9633cbd623f0d0a1e766406ca34bf05ea286f1b09085fe5558cfddcd0e0beda35768b6773ff63e5e772a639a0b8a84c5a4a24bcd5e8549e26fe7c5d530efa912a9305b86ce6821231d5afb1881477d4f8c31f1ee3ba722f5c144dc011358278710590cd094f01fd3c7a7661208230501fda58195667e4646178382100d0e75da98d92dbbf75d7fc47a571bb4c2e96cbeb4f58e43eb54cb02bebe980781ab950706e10142c908de1", &(0x7f0000001640)="3ac148d3d58375abdec28ca7bfc8f77f8cd41cc0781ca64df322906c7d5a07fb25a2ef744432fbcc44e97c", 0x3, r1}, 0x38) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000016c0)='./cgroup.cpu/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000016c0)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000001700)=0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001740)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001740)='./cgroup.net/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000001780), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000017c0)={[{0x2b, 'io'}, {0x2d, 'blkio'}, {0x2b, 'hugetlb'}, {0x2d, 'devices'}, {0x2b, 'net'}, {0x2b, 'cpuset'}, {0x2b, 'pids'}]}, 0x30) r5 = socket$kcm(0x29, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001a40)={r1, 0x58, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x1b, 0x12, &(0x7f0000001800)=@raw=[@ldst={0x1, 0x2, 0x0, 0xb, 0x1, 0x20, 0x13}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x95}, @call={0x85, 0x0, 0x0, 0x93}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}], &(0x7f00000018c0)='GPL\x00', 0x40, 0x8f, &(0x7f0000001900)=""/143, 0x40f00, 0x20, '\x00', r6, @fallback=0xc, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5, 0x2, &(0x7f0000001a80)=[r0], &(0x7f0000001ac0)=[{0x5, 0x1, 0x9, 0x6}, {0x0, 0x5, 0xd, 0x9}], 0x10, 0x1}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x1b, 0x12, &(0x7f0000001800)=@raw=[@ldst={0x1, 0x2, 0x0, 0xb, 0x1, 0x20, 0x13}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x95}, @call={0x85, 0x0, 0x0, 0x93}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}], &(0x7f00000018c0)='GPL\x00', 0x40, 0x8f, &(0x7f0000001900)=""/143, 0x40f00, 0x20, '\x00', r6, @fallback=0xc, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5, 0x2, &(0x7f0000001a80)=[r0], &(0x7f0000001ac0)=[{0x5, 0x1, 0x9, 0x6}, {0x0, 0x5, 0xd, 0x9}], 0x10, 0x1}, 0x94) recvmsg(r5, &(0x7f00000020c0)={&(0x7f0000001bc0)=@generic, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001c40)=""/58, 0x3a}, {&(0x7f0000001c80)=""/164, 0xa4}, {&(0x7f0000001d40)=""/170, 0xaa}, {&(0x7f0000001e00)=""/17, 0x11}, {&(0x7f0000001e40)=""/237, 0xed}, {&(0x7f0000001f40)=""/29, 0x1d}, {&(0x7f0000001f80)=""/1, 0x1}], 0x7, &(0x7f0000002040)=""/106, 0x6a}, 0x100) (async) recvmsg(r5, &(0x7f00000020c0)={&(0x7f0000001bc0)=@generic, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001c40)=""/58, 0x3a}, {&(0x7f0000001c80)=""/164, 0xa4}, {&(0x7f0000001d40)=""/170, 0xaa}, {&(0x7f0000001e00)=""/17, 0x11}, {&(0x7f0000001e40)=""/237, 0xed}, {&(0x7f0000001f40)=""/29, 0x1d}, {&(0x7f0000001f80)=""/1, 0x1}], 0x7, &(0x7f0000002040)=""/106, 0x6a}, 0x100) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002300)={r0, &(0x7f0000002100)="36f0da9bfb304873bd9ac39ec1cb0f81725f78890fadb1fac3349397585b1683c2d3da9cd3fe80430da1c8005e8857fb8aeaecaf098a32864fd83e9b9bb769b1940fbc1fcfb102f9d565ca98fb2c58cb2215ecdef23227be320315a4ac6181d4f358d6a00b57c8798298cdf07dd6e0de59ac2e4332850f5172fd9f399e4a5c7ed107eef506b63dfc7b7deaf4f1d96dff424bf33ab35a3ff4bba2503458c3198289b6e3961d0a852f0a4f58d0d9b5d06aec7188b9f4f76bd379b5088ef407c9c30d8290e29891459e36bf7dae0323130f025e362317ab958f20737c57fc44404bded82d18ef7c01e618136dd633ce1ddd2261f10004b0a4", &(0x7f0000002200)=""/222}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002300)={r0, &(0x7f0000002100)="36f0da9bfb304873bd9ac39ec1cb0f81725f78890fadb1fac3349397585b1683c2d3da9cd3fe80430da1c8005e8857fb8aeaecaf098a32864fd83e9b9bb769b1940fbc1fcfb102f9d565ca98fb2c58cb2215ecdef23227be320315a4ac6181d4f358d6a00b57c8798298cdf07dd6e0de59ac2e4332850f5172fd9f399e4a5c7ed107eef506b63dfc7b7deaf4f1d96dff424bf33ab35a3ff4bba2503458c3198289b6e3961d0a852f0a4f58d0d9b5d06aec7188b9f4f76bd379b5088ef407c9c30d8290e29891459e36bf7dae0323130f025e362317ab958f20737c57fc44404bded82d18ef7c01e618136dd633ce1ddd2261f10004b0a4", &(0x7f0000002200)=""/222}, 0x20) socketpair(0x1, 0x0, 0x100, &(0x7f0000002340)) (async) socketpair(0x1, 0x0, 0x100, &(0x7f0000002340)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000002580)={&(0x7f0000002380)=@abs, 0x6e, &(0x7f0000002480)=[{&(0x7f0000002400)=""/123, 0x7b}], 0x1, &(0x7f00000024c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}, 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f00000025c0), 0x8) (async) r9 = bpf$TOKEN_CREATE(0x24, &(0x7f00000025c0), 0x8) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000002600)=@bloom_filter={0x1e, 0x2, 0xfffffe00, 0x6651, 0xc01d4, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0xd}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000002680)=@base={0x7, 0x0, 0x1, 0x8, 0x8, r10, 0xdb, '\x00', r6, r8, 0x4, 0x5, 0x4}, 0x50) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000002700)={'veth1_virt_wifi\x00', 0x400}) openat$cgroup_int(r1, &(0x7f0000002740)='memory.max\x00', 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000003980)={&(0x7f0000002780)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000003940)=[{&(0x7f00000027c0)="7082967c9ef58b6f6a288ccb78338de6aa2cd8f1d91068df0552166f5c8c4316060630aacbd34760a1aec6799bdda65e2e35ff71ce81885b77c3a42542a84ca42177dfad273911e3ee07ae942ed19f33910ecafdaaca688224ef2ad52e944ec3b70b28a7fe0dab8c0d2dad3e5196c5c0ef207f73430c20192f5ff212a2a6c1fc7ebbb67c17ce7dad2e52c6985cca38612e8537f881aa31ea53a496376df9aea103c8f45c6b9378a84311164aadc5f3b2ce23f42fd7a41745555e7c804191c53d84e2aa49fb3cc75304448f7544199257e006aa3a3daa9247758a70acaebe15ad2a0b76ba8197b483f668452737c10e4da3819098d90ed34c5cbbb890dfd5a2d5c19bba809dc34625647394b81f0f0188b07f7f9d501468c405387bde6839a1e56adb1e0736b3bfe01404e2126247a7c5874c800060825e691529a331b7fc3a55be59638d7fc692dd5c9ef667ba6fba56b08d68233fd36fa7d86123ca9f53a9f16fafe85a227c2ef29935c25f1cbab06843594cc9680fd61cb7eb1121321bb53fa0903dfe02c91e1a255975429323b24bfd39b0c8cfc8b96fb7161f17649b036f8b21d838e680355224aafc4aa7d7048c857840f1b785a3061de21750919bad243d3bb1c45475578b437627b642fbc48db94d9f39d2ecc8c9e544dd402b1c9134f8bb7dcf3c1daede0ed3419af0625156e792809e5faf25bd0c4d0e4157dc0da15f39c7ef10e8a4b41bd9d936461afa4e5cf2eb61b8d0540f5ddd736dfe9817d91afb40284a7f76845f7e181d16f302bb5a20ac1177d5cbd84cd5a14614080ae8d3aa2048f7ad8db0423a6aae52ec9489dfb980c263017b3ff7fb87f438d10e2bd8460a0719cb42dacf642d9cfe2c39541e48a0c26a8a5b3345afa51feb60d0b76e7404189daf7077cb7d65acfed87ae4749f020b808a2596dec97eb8ebdfc7d3c3dde7d801e1aca87665ab4ee903ce947d551f83024e0359414f802adff69abc97ae203eff6312b033ca2068e6575b9c44bdaff5d1748f87eb3689c95c04f743486fc9b607509af71babdd390a637dc0ba2fb3fe796e070182a50aae939f04541edbeeeb31d85868ce2298bb064a8fdcc453699e94282dfa1298591ac80c577f30063ce69d80245853ec53b88791f0f8e0c4367dd2dcc7ec0ed02ac6dc2ca02dc6d0da2da82b59c24191fdd9082355ad6a6342fa56cbfaea6bfbca4983f5c255249a3a1d85aa27e0b28bb3a6033a5abfaa58e45a1c829047134b4295d59f12a42f3c4fd675296b703828c2076692255803ee74649afb1985a16faf1ca9392e383dd82d81d113688235d4303927a53678612b0126ab7188840a9a304aa192f53e4366b041ff31419c8f04ae9ce4905ede15e477894ed580ca9c44eb53849c96fb2d82bcb1bff08fb4e060791ded0f50f57cf938997fc1bf520e3bc241d50dd208e192689a7fafc12cac7ff0b185982b8acd5fcda571d4de754be6732a57b36fcd177618bd14ebb47070394e9c168d9a10ccd0400ed36649099c302d7ed419c6e8b35d93739a80bbd6bf506a1b292d8287bf476e3addcee9650f4fd254b616c4b4e7325353e2fb7f15c3443211637e431e480ffcf3eedab984be25f9b23f1b1474baea812eda9206efc52b695988d75a6cc4db4dc6ac4002b746d96ed70f717bf90224376c1228ab5bc00b1d01093ec20ef2bd9a91834d525f7dbcc8690a36d00ebe6b331bf2ed4c57e837362e77dbe61386e4281bcc5b64864c34249afdb547cc5219fc1438be4d4b4801f1e92cfe800a9b2f8d3c3ce4866d7e5f1864fcb5e213d364d13a7a2b6936b7b98aab45a4a2505e00156be98209027b2caacfa82054c338ed9ecc09848411406c4e5981b350b38ac76be932a3729fa7fa03aba10ed0e2809686475e6d5e65b57a6a37e251da8017675c0de1a1823e7bc9fefdba2d82a163ad329f123536b788a80bd99f45f2890851d1e77b10f591ae1d5ffa1ebafd742584f6997312320d7011dd80432f13f438f167540ba27f15c0f0f245852905213c9f09f6f20502444943b377fa641ee65d451f8e370d1217568b55a0f7cb93e6a92cdb203caa2d04eb3163cca465f57b67a3c6509d823560a32bcd0cce8980164fd6ba9e4437cc9dae0e3b8a2d220e4bbbc77d97105244efbbf71e9b235a37bee3c9b05f4fa467bc41ae984009332d443fd58a7dab02af74d0e7042c3e3ae2e6b60e42149c2a1e98072ac98f5f07fe69a7af76eda2894f21562bbfd3f617af7d3646792ad9c15852ff2017f0baf1034ddbb83005081ebf6ca177bb4045b55abb127f02dcbda2cd2ebd6c7b8495e6b74f013053a474f1aa829efbd2638d0e120aff200fe5d22f8166cbfcba7687b8cbca446593c900bd1bcf3d9d8fb29a0917c752cc6501d4c6783f652a0c1b7208b1c468aad9e6c4dc6b12941b97698dbf190618b0980289b623d65c899db81f3be9dcf6a520cafaf62eeb2ae4e4a2e7b8d9b065e8d1a1e2a472fb8b0c8456e428f545f19d9d66df47ee12771de64bfca91b1170f33390bfbcae04fbd8f927dae569297b7e5a33ada104e5790a18a376da41ecaf73f17d6af85a98ac07167c07254e69cadf290e7001b16bcd2bc4c644a7d45182a4c4afabefd497224815ebd176224bacc483b60e602ed6b2178414a59d05d7b1adf2aa31725477262b2300e4e805b8bc27ebeb5ec6a5485a673b24a4eaa9ef3c9ffd5c29f902ebeeed555316ddc29dd26a0a418845ce2860cfa75b84579a4b61cbadf2375e22d049a8d5710474892f2faed946a35705f4086428c748f5a914729b4aec1bfa93f3bba0f536ae80482257e99714127f48d1f3bc83bb731daf0f61ec3f93dc2d039ffd076527d2fbac11a2cd3cdd4362ba32eb7e520a7fe94a32e4fa938f6ce28c37552a95e1b01b8f79568f816a9dd1d305905079f0f26dcc1256579f97dddba6ef16ddd7bc086c55a98f76c38e00a058fdc37913e406873b9e40857d6e463c9e607908b6f2e953f28f18003bd501f0df8f8f40e33846093405145d24d35a761d70854a588e47d3e144ac3c2a9eace0e6245f2b57623ac7cebbc6ff3c87167d5fad7324f69b2ba353519fb38ca0e5781a5916aec04b6bc65af8e44b94e303e198cd4878bf614d87a4760391d1b610f7cbc44804e81b265e309caf318b97e97085c26084e9bead0044ab45c640beddc67d32ee8d038244c18a484367cf6a4494e514cdad320b733ee7f474f4b63f51f8fd413d8cba0031e9c2ffde07cf11a3bca1205df899c51331adb2ddbee1576bd7f42053ec9323a0c921a829ef910b21c1a72f8e2d09982bdc4ac3b876219a8d0cc7d0d4fa7fbf74e21dbb916017a633729be40a48d0f70cfbcc2c3bddec5cb6354e157e6054b39b056462834b90fb91b0f5da688867bd1eaf32b0846f90d1745e5b967b9dedcf6889bf91b89eb995960679922c75a75f878931999af00eac88c7e82cd837ea3b4300f4d5f564633890ba103ca12c9a92c18d1107bc6701a34332b74ae5cc8d65fe525f5623f53c0228646ef1f06c05cd032c16edc49a1cea5e8fb9e02a9ca88da857ef814a432369b7e0b16b1f44e11a5f065f5cb24da858af12bc46e37408b6630e8a49bf22e6ed9e74c946e913febe74bb19f1adb84d7268a8b1aa8486bfe2babd45204e27aafc52ffcbafc0482341a3e9ec7992c103a38b69929beb11e87cb5dbecabb0f70afec790abc4d8392251ba21f3bf88ce3e5a08eda587625d5350e0572eb127cf6c583e426ca43f134104ce2b7ebaf205b62ecc64b5852ae1795a2beac2880724076eac1a4e7273525af63bbe324f077b2cb935ee043d0c3f59ade7c227711e185e54e9272762358f2ad48e36900cd5313965286f4a9f7d8565e09bf6932664e03a5c1960a23c943d5bd539e0970c924e93e8e30f89cd1c47cf4095d2e7dcec00223267bd3c2c042138d430fba88f34d7e309e2d139c819df8f4ce0baff43a84730ac3948e005bea3d6553e08848ddb90d8f7e46938124bd22e251ca558c923394f37e2ee6b122e6d446ce2fe688be68ee588c3cf31ba3dc4cb68032d322fe0612c4838707e60481e1d5bbb9dcf61a066375bf6c4d1e9519239543b7d20d2c657e0e117aa0d037ffc2266818e090b6f0827d8303363c091d236e2cef0d4a7a98311d7ef749443b2337aa53775ad7afe29be947b73ea226cf311ced85979c4af1e22602cd0d20f85dc3766a9b4ef634e0a741589383ca6c38942c5d9f2991357662cca151d49b227e5438390cea61896f5b2afbb75f71dda820cc35ef8714faa4be32aef5ca2b542c4a756c9c66b82cdfaadabfa50ea1564ef5c7cd424d19ef3971073c3f20edbf5b37151d9f2c2bbabaaea74def092c6d14c09d5a89d5ea8831793005c535b287f509f315132921c633f23adc69cce95aed7fbedc4d27fb2ce09f79d68753b50fe1ede2a6f628ae47c89b9db5af4b661d451d4806a45e68f838654d6cfc00bbbfc4f50ae10556fce8a14c9488ac85592893ededc23c6ae58321a057ad8fbe32409b414d9ccba6a6669ad279c41821080559ab0308024215d72092786242737c35c8f45cbf0cc180293ed792a4dd158346cd92c18bdd7651632bb63b357f6dc7cb9048e11f157ad8b180d95f92fcaa27494a13f6f6e5256ae3c9d645eca09e76b7034784881914778cbd7041818f499aef59b718e19f1388a9a2b4f97d222b320a58ec3ebb26430a7d02cfd38e20e918b605b940d476d19269ce60704d4812d26042d2142b53faaf0f617007610e52178704e913403390f7e1c86728b6b03c8d3b6e7ab2be86c61b48ab112d96fa23e55308e6bbfe56ea6322cad36f2243bf97504aba71288efd3c2205b7e394007d2568d2a756d53681e9207d94cac36f6da83ffcdabc1db8b5195e618a3c94a09b620e8d41c1807feea4bc795f55f0cbfe2599e72f66bcd5085c1c4aa641d4bf610895596e48048109edf5973cf90d55bd5d7308f3fada6c7e3d51f599393e6bbb66d4ff0e75c01c5ff570f29e4846ec40e55a80e4677e51ccd55d7fa31dfd2b52c535e810351a1fb56f796ed3730e9ea041f8b2c011b43085486940f41d8cf0fc876a9e7549cde4b77880dfdf712562cc0b970a4de24dbee85af1c4e96c279cc9f07a910f0803b268f543bda41efd3b29b633c17a55afb6fbcdc79ca316cdb55182cc213638050ba0b554c9a25d6cc7d7e3308a2df45b1a82951dc162114e3b601cbc20e8050b0e69756d9b45cda8c9b2f51a72d5cc79fe58482d22a871248058c895bfbbb6f935b3e209fdeb60b3e855ab43fc7ff8c7a91e366d481715054c320b7aa73f360b1b4e00848188134dd56b20dd8a644f4d6b7df28f423bc5a592aed5e160f6c6374551f16f025d46c8fc9dfc02163c9b4176b2b680536c625077e4463f0583ec79b067a405efe8156070a7888e3a34df31dbafdeae510188502411f70f8b845bff3a81f8642f7c298ceab8b817b37f845f38bd79095a2f727dcf9a0555ab0134d77329cc14c80ad60cc60370f3c22597212839f5a2b40f25ae46d6191ffaea6be4b33f95708c861038f8f75bdbb85ff15e58161dc8249d207e45d09de8e9daf27b2cacec637e41bf59611dd06f8e350368f5ad68e6ed92b6cc0ad149fa038626001af64a10844b5f21611d843710726a4dcf510c8d1b2b825ae7cda8b43aa86e5fa21c40f130b74958c4d39256252867b4f84760063c651c13bb0ad40384e13985cf44ae70240d0f35134aeed2cc1d047eec6eb052f93ee1e7645eac7943e7cd1b201b6f3", 0x1000}, {&(0x7f00000037c0)="d3e5e9d7e3d6e7c40c1820c73eebc31ccc4d1793ce1ec7249604bc9a575db5a0ede0d71950ff3866ec86d67e3fe0d68ba9538518da726394fa0af3e3e6ba7a2766ebeb4e4964a128f869458774bc7e607f15f8b495913f73fb6e687b35476371dc44e88cecbd01cae9c79fba8e6649a1301257061fa50f22de615c096eda795b2934a51679836dc28b15377aeb14cea695c135198616", 0x96}, {&(0x7f0000003880)="5c1eaf1268b0c9fe1f5c1151b745935ecfbd8cde6b39b191472e3e9b56d487775ee74a5c63f68884a32cb0e32d22ef388d2472a1263520574b8e18fc33e3a23762e7db50b5c0a1de5c6b02556e9416b37ee0761c11895318f8ddbe09e8e73064a32de68ae4e59f2ca3d0fa298e94caf76296688b746e4bea9705a08257c94775c1f8290f566cf7fa22ff256c", 0x8c}], 0x3}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000003ac0)={@fallback=r9, 0x0, 0x0, 0x81, &(0x7f00000039c0)=[0x0], 0x1, 0x0, &(0x7f0000003a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003a40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000003a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003b00)={@ifindex=r6, r1, 0x32, 0x2000, r3, @value, @void, @void, @void, r11}, 0x20) 4.079205251s ago: executing program 3 (id=3061): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x152610}], 0x1, 0x0, 0x64}, 0x1f00) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpid() sendmsg$unix(r2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {r4, 0xee00, 0xee01}}}], 0x20, 0xd0}, 0x810) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000000e000000720a00ff000000006600000000000000950000000000000018107bf9", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) setsockopt$sock_attach_bpf(r3, 0x1, 0x1d, &(0x7f00000001c0), 0x4) recvmsg(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200), 0x52, 0x0, 0x0, 0x24000004}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x20, &(0x7f00000002c0)={&(0x7f0000000180)=""/121, 0x79, 0x0, &(0x7f0000000200)=""/171, 0xab}}, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x10) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)="14000000320081024e817903dbdcda3d0f3f1696", 0x14}], 0x1}, 0x4000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r5}, 0x94) 3.978157408s ago: executing program 0 (id=3062): r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x17404, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 3.808712139s ago: executing program 1 (id=3063): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@fallback=r0, 0x37, 0x1, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x4, 0x21, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x1, 0x0, 0xfef8}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f0000180059"], 0xfe33) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000cc03000000000000070000005502fcfff4ffffff950000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70800000b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018280000", @ANYRES32=0x1, @ANYBLOB="00fcffffff9500000040000000"], &(0x7f0000000100)='GPL\x00', 0x7, 0x76, &(0x7f0000000140)=""/118, 0x41000, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x3, 0x7, 0x8}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000240)=[0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000280)=[{0x4, 0x5, 0x4, 0x7}, {0x3, 0x1, 0x10, 0xc}, {0x5, 0x4, 0xb, 0x836eb0629fdd4cff}, {0x0, 0x4, 0x0, 0xa}], 0x10, 0x7ff}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000380)={0xffffffffffffffff, r4}) 3.715954846s ago: executing program 0 (id=3064): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%ps \x00'}, 0x20) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff00, 0x3}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x10000, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001b000605142603600e12080005007a010401a800160020e0034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff229, 0x1, @perf_config_ext={0x80000001, 0x1}, 0x8041, 0x7, 0x0, 0x0, 0x0, 0x7, 0x200, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, 0x0, 0x0) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r5, 0x88, 0x67, &(0x7f00000002c0)=r6, 0x4) sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000001a40)="26cc0644c1", 0x5}], 0x1, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast2}}}], 0x20}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r0}, 0x4) r7 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x28, 0x5, 0x0) sendmsg$inet(r8, &(0x7f0000001000)={&(0x7f0000000280)={0x2, 0x4e23, @private=0xa010100}, 0x10, 0x0}, 0x40) sendmsg$inet(r7, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) close(r7) 3.691806247s ago: executing program 2 (id=3065): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000200), &(0x7f0000000380)}, 0x20) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xc, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e17aa31e0cf876c1d0000007ea60864160af36514001ac00800050004000c00060000000364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20040000) r2 = openat$cgroup(r1, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x29, 0xa, 0x0, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000040850000001700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x21, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003, 0x0, @perf_config_ext, 0x100080, 0x3, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000001c0)={0x0, 0x80, 0x43, 0x8, 0x6, 0x81, 0x0, 0x0, 0x1404, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x100, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x3e38, 0x499e2e2a, 0xffdfffff, 0x4, 0x7fffffffffffffff, 0xfffffffd, 0x0, 0x0, 0x8000001, 0x0, 0xa}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="d8000000140081054e81f782db44b904021f08020a000000040000a1180002", 0x1f}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="3eaa0000000000007110ae000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r8 = syz_clone(0x22124700, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001640)={0xffffffffffffffff, 0x58, &(0x7f00000015c0)}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0xffffffffffffff32}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="120000000400000004c311c731000000000000007e408b947dbd6d5bf8076e1cccdbe2229d3ac420bbde3a921c0930d69940d1d857b37617b9cbb29c538d3ac7ec294bcd28f946be633f6d08b53e0f5d40992d9bf062d72a616b5487d08136ffa2ea004c05049d432108a4e8843fa183f684bc598792ec9d4fa60eb122d3f7656852b573cbc431f78b90c0ea77", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="db85a8909528f748e4f5b00441c62feb356dc97aac4e7ab182016f09b937d63943605982", @ANYRES64=0x0], 0x10) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$kcm(0x29, 0x3, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x6}, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) 3.444315945s ago: executing program 1 (id=3066): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8}, 0x28) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36510001ac004000202080002000300010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRES16=0x0], 0xfe33) 2.616222641s ago: executing program 1 (id=3067): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x7c}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="8900", 0x2}, {&(0x7f0000000240)="25b2b3cbea4056eb9d315d760d7e9dfcd9", 0x11}], 0x2, 0x0, 0x0, 0x900}, 0x40000) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x2, 0x4, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x40}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380), 0xc) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab0700040005"], 0xfe33) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d0000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x2a, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x40) syz_clone(0x160480, 0x0, 0x0, 0x0, 0x0, 0x0) 1.848651963s ago: executing program 3 (id=3068): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={0x0, 0x0, 0x14}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1, 0x1}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x121881, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0x3) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.837970684s ago: executing program 0 (id=3069): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x4}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaf, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x810, 0x1, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000880)="d80000001e0081054e81f78206000000000000000a0014260360cf9808000f00245bde1625fcb8b20800094014000000035c0461c1d67f6f94007134cf6efb8000d74748420a963aa007a290457f01898102e807ad522a4807f13af8030ab316277ce07bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8716a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1ca9781ed0bffece0b42a9eca0200e6d5d40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x40800) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x4f}, @ldst={0x0, 0x0, 0x3, 0xa, 0xf, 0x40, 0xfffffffffffffffc}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2201, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1, 0x100000000000003}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) socketpair(0x24, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xf, &(0x7f00000003c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', r5, 0x0, r4, 0x8, &(0x7f0000000240)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000540)=[{0x5, 0x2, 0x6, 0xa}, {0x1, 0x4, 0x9, 0x8}], 0x10, 0x7}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x2, &(0x7f0000000300)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xbf, 0x0, 0x0, 0x0, 0x3c}], &(0x7f0000000340)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x1b, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000400)=[{0x2, 0x2, 0xf, 0x9}, {0x0, 0x3, 0xc, 0x2}], 0x10, 0x101}, 0x94) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$inet(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0xc000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @func_proto, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, &(0x7f00000005c0)=""/240, 0x3e, 0xf0, 0x1}, 0x20) recvmsg$kcm(r0, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x10020) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff0300610d6991ff9e14ff0200", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 1.819149286s ago: executing program 2 (id=3070): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x1ff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xeb6, 0x0, 0x0, 0x0, 0xfffdfffd}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x97}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)={r2}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069002400000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xa4, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport}, 0x94) 1.384098375s ago: executing program 0 (id=3071): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r0}, 0x8) write$cgroup_int(r1, &(0x7f00000001c0), 0xfffffdef) r2 = socket$kcm(0x2, 0x6, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004081) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0xffffeffffffffffc, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={&(0x7f0000000700), 0x9}, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x5, 0xcc, &(0x7f0000000ac0)=""/204, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000003}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socket$kcm(0x2, 0x1000000000000002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x22, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1010, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x0, @perf_config_ext={0x100, 0x4}, 0x4183, 0x3, 0x4, 0x7, 0x1, 0x7, 0x0, 0x0, 0x4, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) close(0xffffffffffffffff) close(r5) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b904020000000080000000001500100014000000000009000d2000000401a80016000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92954b43370e970100", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x400, 0x2, 0xfffffffe}, 0x0, 0x2, 0xffffffffffffffff, 0x2) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a80)="3c00000033000b12d25a80648c2594f90124fc60100c03000b40000000200cbb9215a2281cf6b809f2db60490d20a735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x10c0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f93024fc60040f10", 0x17}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.383802125s ago: executing program 2 (id=3072): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a400014002000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xcb}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef) 1.325325859s ago: executing program 1 (id=3073): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) (rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r1, 0x0, 0x20000000}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r1, &(0x7f00000002c0)="56e1bd39674a6c286b47c58fec1e30f477307bcc477d6a7239c49fb459c1fd887cf744e1748f02ecc997cf920185ec126cf9e8cabd549571733b0677d434c1414dce1b86c25e9c14b9b832dd2cccf78e1faf25aa82bf80d07ec63d65d5640f73c7b0a433dde2", &(0x7f0000000340)=""/72}, 0x20) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000040)={'team_slave_1\x00', @random='\x00\x00\x00\x00\x00 '}) 1.301619931s ago: executing program 3 (id=3074): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0x7f000001}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000100)="a33e0d6023f97710", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x60) 1.113868544s ago: executing program 3 (id=3075): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x10c002, 0xac5d, 0x0, 0x5}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x13}, 0x44, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8850) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x101000, 0x0) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f00000005c0)) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x9) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_clone(0x6988b500, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x72d4d156, 0x18000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000a80), 0xc}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, r0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x11080000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000000dc050000100000009500"/32], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r6, 0xffffffffffffffff}, 0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) 1.112359504s ago: executing program 2 (id=3076): socket$kcm(0x2, 0x200000000000001, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x10c002, 0xac5d}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r0, 0xe0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001180)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000001440)=[0x0], &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc8, &(0x7f00000014c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001500), &(0x7f0000001540), 0x8, 0x7f, 0x8, 0x8, &(0x7f0000001580)}}, 0x10) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001140)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x2a979d) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000001100)={'veth1_vlan\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r2, &(0x7f00000010c0)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) (async) close(r2) (async, rerun: 64) r3 = socket$kcm(0x11, 0x5, 0x300) (rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r5 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f0000000200)="83d2ff5f007b09bc7e648518fae4664d327d90424d550300280000000000006a86f1c52d84d7a00000000000f2e1b4dd1b8dec9df2b4bd9a450b8b88bc9010d6ee8c6edcf0626bd0e4cc8910ace9fe2749464fc231cad9c300e288d3f7c2e8485d151d19f68273daa44fece27bc98c5916e3f24f8567467469c1d6a91d35cf714d", 0x81}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0x1b, &(0x7f0000000100), 0x4) (async) setsockopt$sock_attach_bpf(r3, 0x107, 0x8, 0x0, 0x300) 999.971071ms ago: executing program 1 (id=3077): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x17, &(0x7f0000000800), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@var={0x1, 0x0, 0x0, 0xe, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xf4c9}}]}, {0x0, [0x61]}}, 0x0, 0x43}, 0x28) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r0, &(0x7f00000002c0), 0x0}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a400014002000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xcb}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0xbf}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4f}, 0x80) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000), 0xfdef) 865.081901ms ago: executing program 2 (id=3078): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70003000140e2ffca1b1f00f0000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x9, &(0x7f0000000000)=@raw=[@printk={@u, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xbf}}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xfff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) 764.208187ms ago: executing program 0 (id=3079): socket$kcm(0x21, 0x2, 0x2) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) close(0xffffffffffffffff) (async) r1 = socket$kcm(0x10, 0x5, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="9902000012006b989e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d6f7900a0e69ee517d24460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b41ad206000000f40800030004", 0x51}, {&(0x7f0000000700)}, {&(0x7f0000000500)="5e191aea3468a5eab1c3d6024b43dece099475c81c53aa9244d866f68b8e31e93b41b432fb0454234620a25706bfb6f01ce01093b7ff634785d8b345ef8f7a928034820bbd37467d1049ac7a724c153c358d6f7efd919bb918734e846598b03733a6f4bbce06471d3a440e14dae67170cbfea76bc33481c28ec2cfad1f3d83ddece3006d5bb30dc4288dd40bd476cc7f94d143c56e54ed4d84b9c1ecc87fc035c7c992767edcfe2218bc6542a6a3a9b879e8aa6d652d277ee640cc15d2e9efe30584ed57ab208ca4db6cf63381804a5e", 0xd0}, {&(0x7f00000008c0)="fd7617adb877574c4a4489fcaccde0c97bdb2d9d89dba8ab9fc9ebbdcedc770661e1971989a787890de32eebe4008ac8bfafa034add91f6ea4acc741521abecc6cbb4fcfeb61d7d08a8911e59550055d00897194afc1ffd04c18c2506d41bec374a6e5b1ed5fd07db55483fef2dc9ad8ae7c6044b08a303f256ff7e7dd720c72fc0d513110468d44e31a8fcd833d521b95c3b04378ca1c67b4faca350009045628c7f7196510f14ebdc6", 0xaa}], 0x4, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) (async) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000300)=""/180}, 0x20) (async) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) (async) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x605, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x6, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) r4 = socket$kcm(0x1e, 0x4, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r4, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000c40)=ANY=[], 0x1458}, 0x20048811) (async) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) 146.18597ms ago: executing program 2 (id=3080): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000900)=r2, 0x4) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r4, &(0x7f00000001c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)="f4000900062b8825fe80000000000000dc8f850f23846632189c54ebcc00007a000000ad6e911b51", 0x28}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f0, &(0x7f0000000080)) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="ef", 0x1}], 0x1}, 0x40000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 141.35507ms ago: executing program 1 (id=3081): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d8000000580081044e9bf782db44b904021d08000900030001000000000000000600140903600e120900210000000401", 0x30}], 0x1}, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a1180015000600140000000012080004", 0x2b}], 0x1}, 0x20000004) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000300), 0x22}, 0x40) (async) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x541b, &(0x7f0000000800)) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40092}, 0x80, 0x0}, 0x0) (async) r2 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r2, 0x0, 0x4000091) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x9}, 0x809, 0x0, 0x0, 0x6, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg(r3, &(0x7f0000000f40)={&(0x7f0000000a80)=@hci={0x1f, 0x3, 0x1}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000b00)="8bca2468f6a5c30f11ba0692da3e7a1d5c413332c0251bd00eb0fe213b532b275a188701b5897ced29b3683362878fda5e0a1a19383a8368cd81d3f469e35b71e449087434c4ac4dbb4a02856a0a2ee54578f39e0a5105", 0x57}], 0x1, &(0x7f0000000c40)=[{0x10, 0x110, 0xae}, {0x48, 0x107, 0x3, "7f0de46126440eba74fd279de1b4b28b0d81ce158d683030a3997291643118a5e010ee69fe0efe4cfb28be1189052cd38e3ef025e485"}], 0x58}, 0x80) socket$kcm(0x2, 0x200000000000001, 0x106) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000f80), 0x8}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x4) (async, rerun: 64) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000740)={r3}) (rerun: 64) sendmsg$sock(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)}, 0x1) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) (async) perf_event_open(&(0x7f0000001040)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, @perf_bp={0x0, 0x1}, 0x1aa63, 0x0, 0x7fffffff, 0x1, 0x8, 0x3, 0x7, 0x0, 0x7fffffff, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef029dd2b97576b11d210a"], 0x33fe0) (async, rerun: 32) r5 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000bc0)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e8fe55a1080001000002000000000000080005007a010401a80016002000034004020000035c0461c9d67f4f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee501534eedba07d6e239b7a1ca16854695d1f79064485e75106300fa125f3d4ece1a0fa80983a3f1fdb3fefe626503fd22d1cc58463d0346a61fde641561ee9c851dc0c1cd706ff2f41398d8e7429039e7ff837d3150d78569e4243b96f7e5080199891344de62a210156a7b0a", 0xd8}], 0x1}, 0x4) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) (async) r6 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r6, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0xfe8a}], 0x1}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') 0s ago: executing program 0 (id=3082): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000c00)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="8548c9f98f4e689cce786b5f6a3b0a6a968f0c8c03ffc85c6c98523b749da85ec4b94ce6034eafe527644e5e33ca5d8b5b4cd6be2f711099d05787b65fd00a0fab58e30c86cebbb0770d82553778e8909eef1cc21d1008974bae8ed946008f9ceacf85c58e6019dd448bf03e979279bc1e017a86460615f229edb18ea1d628dac7ae8cfa595b7759daa8681dd8925355b5a515329545bd6c6da822aed05bdd1d95a3399e544044d9", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcdb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000340)}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x1}, 0x0, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0xff, 0x0, 0x0, 0x4, 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe, 0x1000, 0x0, 0x3, 0x80}, 0x0, 0xc, 0xffffffffffffffff, 0x7) bpf$ITER_CREATE(0xb, &(0x7f0000000240), 0x18) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100), 0x4) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0xfe33) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x7fffffffffffffff}, 0x0, 0x0, 0xc2ba, 0x9, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0xcb, &(0x7f0000000780)=""/203}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000652d1205734e3b18002a25746a7998ca4900"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r6, &(0x7f0000000200)="65a0245a08b9bad0313290260532b41e67787d60b39156e042d0702ed7f93624b4724cb976c03c44dfd88f68ff683b48e9", &(0x7f0000000680)=""/168}, 0x20) r7 = socket$kcm(0xf, 0x3, 0x2) write$cgroup_devices(r7, &(0x7f0000000080)=ANY=[], 0xfefb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x4008, r0}, 0x18) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120800110000000401a80016000500014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x48d0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) close(0x3) kernel console output (not intermixed with test programs): 46033][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.752527][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.907699][ T7340] tap0: tun_chr_ioctl cmd 1074025677 [ 255.913226][ T7340] tap0: linktype set to 780 [ 256.181353][ T7349] netlink: 'syz.4.764': attribute type 21 has an invalid length. [ 256.223349][ T7349] netlink: 156 bytes leftover after parsing attributes in process `syz.4.764'. [ 257.228497][ T7389] netlink: 'syz.1.773': attribute type 3 has an invalid length. [ 257.288353][ T7389] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.773'. [ 257.685931][ T7398] netlink: 56 bytes leftover after parsing attributes in process `syz.1.777'. [ 258.228622][ T7403] netlink: 'syz.2.778': attribute type 21 has an invalid length. [ 258.268349][ T7403] netlink: 156 bytes leftover after parsing attributes in process `syz.2.778'. [ 258.321307][ T7406] IPv6: Can't replace route, no match found [ 258.343582][ T7411] IPv6: pim6reg1: Disabled Multicast RS [ 258.899183][ T7425] netlink: 'syz.0.783': attribute type 3 has an invalid length. [ 258.918383][ T7425] netlink: 132 bytes leftover after parsing attributes in process `syz.0.783'. [ 262.064848][ T7431] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.783'. [ 262.094185][ T7428] device veth0_to_team entered promiscuous mode [ 263.071033][ T7459] netlink: 'syz.4.790': attribute type 12 has an invalid length. [ 263.114215][ T7459] netlink: 80 bytes leftover after parsing attributes in process `syz.4.790'. [ 263.913536][ T7475] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.794'. [ 264.439234][ T6714] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 264.488962][ T7501] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.798'. [ 264.872488][ T7506] netlink: 'syz.1.798': attribute type 2 has an invalid length. [ 267.042741][ T7493] netlink: 132 bytes leftover after parsing attributes in process `syz.2.800'. [ 267.062476][ T7501] netlink: 6955 bytes leftover after parsing attributes in process `syz.1.798'. [ 267.098366][ T7506] device 0 entered promiscuous mode [ 267.125109][ T7509] device wlan1 entered promiscuous mode [ 267.453318][ T7531] netlink: 'syz.0.807': attribute type 3 has an invalid length. [ 267.568691][ T7531] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.807'. [ 267.899580][ T7540] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 267.918424][ T7540] dvmrp1: ignored: set checksum disabled [ 269.642885][ T7571] netlink: 'syz.2.820': attribute type 3 has an invalid length. [ 269.751397][ T7571] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.820'. [ 269.773219][ T7572] netlink: 'syz.2.820': attribute type 12 has an invalid length. [ 269.852553][ T7572] netlink: 'syz.2.820': attribute type 15 has an invalid length. [ 270.149937][ T7561] netlink: 132 bytes leftover after parsing attributes in process `syz.4.817'. [ 270.176111][ T4277] Bluetooth: hci3: unexpected event 0x20 length: 15 > 7 [ 270.222580][ T7584] netlink: 126632 bytes leftover after parsing attributes in process `syz.0.825'. [ 270.345175][ T7584] netlink: 8192 bytes leftover after parsing attributes in process `syz.0.825'. [ 270.876450][ T7608] netlink: 'syz.1.829': attribute type 21 has an invalid length. [ 270.893886][ T7608] netlink: 'syz.1.829': attribute type 6 has an invalid length. [ 270.915303][ T7608] netlink: 132 bytes leftover after parsing attributes in process `syz.1.829'. [ 271.432451][ T7607] netlink: 'syz.0.830': attribute type 3 has an invalid length. [ 271.447270][ T7607] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.830'. [ 271.758811][ T7629] device wlan1 entered promiscuous mode [ 271.925325][ T7635] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.836'. [ 272.171662][ T7648] netlink: 'syz.2.841': attribute type 3 has an invalid length. [ 272.221460][ T7648] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.841'. [ 272.472896][ T7652] netlink: 'syz.2.841': attribute type 9 has an invalid length. [ 272.518284][ T7652] netlink: 399 bytes leftover after parsing attributes in process `syz.2.841'. [ 273.109433][ T7661] netlink: 'syz.3.845': attribute type 2 has an invalid length. [ 273.168895][ T7668] netlink: 'syz.2.847': attribute type 3 has an invalid length. [ 273.179639][ T7661] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.845'. [ 274.372563][ T7688] bridge_slave_1: default FDB implementation only supports local addresses [ 274.759125][ T7691] __nla_validate_parse: 3 callbacks suppressed [ 274.759165][ T7691] netlink: 188 bytes leftover after parsing attributes in process `syz.2.852'. [ 274.819821][ T7690] delete_channel: no stack [ 275.056129][ T7713] netlink: 44 bytes leftover after parsing attributes in process `syz.2.860'. [ 275.283855][ T7719] device pim6reg1 entered promiscuous mode [ 276.726086][ T7744] sctp: [Deprecated]: syz.1.868 (pid 7744) Use of struct sctp_assoc_value in delayed_ack socket option. [ 276.726086][ T7744] Use struct sctp_sack_info instead [ 276.894375][ T7745] validate_nla: 1 callbacks suppressed [ 276.894398][ T7745] netlink: 'syz.3.869': attribute type 21 has an invalid length. [ 276.920779][ T7745] netlink: 156 bytes leftover after parsing attributes in process `syz.3.869'. [ 277.405200][ T7762] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 277.930977][ T7770] IPv6: Can't replace route, no match found [ 278.034492][ T7775] netlink: 'syz.4.877': attribute type 39 has an invalid length. [ 278.236096][ T7775] device hsr_slave_1 left promiscuous mode [ 278.659618][ T7780] netlink: 156 bytes leftover after parsing attributes in process `syz.2.879'. [ 279.058328][ T7795] netlink: 'syz.2.884': attribute type 21 has an invalid length. [ 279.133567][ T7795] netlink: 156 bytes leftover after parsing attributes in process `syz.2.884'. [ 279.290035][ T7800] IPv6: Can't replace route, no match found [ 279.687534][ T7813] netlink: 132 bytes leftover after parsing attributes in process `syz.3.891'. [ 280.311558][ T6683] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 281.247903][ T7847] netlink: 'syz.3.899': attribute type 21 has an invalid length. [ 281.688069][ T7861] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.901'. [ 281.710637][ T7862] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.901'. [ 281.743495][ T7862] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 281.768812][ T7861] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 282.060876][ T7870] netlink: 'syz.4.904': attribute type 3 has an invalid length. [ 282.079363][ T7870] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.904'. [ 282.227252][ T7870] netlink: 'syz.4.904': attribute type 3 has an invalid length. [ 282.364707][ T7870] netlink: 'syz.4.904': attribute type 8 has an invalid length. [ 282.411272][ T7870] netlink: 197344 bytes leftover after parsing attributes in process `syz.4.904'. [ 282.479292][ T7883] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 282.519676][ T7883] syzkaller0: linktype set to 778 [ 282.952575][ T7892] netlink: 'syz.4.910': attribute type 10 has an invalid length. [ 283.042810][ T7892] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 283.554955][ T7908] netlink: 'syz.2.915': attribute type 2 has an invalid length. [ 283.597954][ T7908] device 1 entered promiscuous mode [ 284.070599][ T7922] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.918'. [ 284.460146][ T7927] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.920'. [ 284.511070][ T7927] bridge_slave_1: default FDB implementation only supports local addresses [ 291.114391][ T7979] netlink: 'syz.2.933': attribute type 21 has an invalid length. [ 291.117408][ T7983] netlink: 'syz.4.934': attribute type 28 has an invalid length. [ 291.141267][ T7983] netlink: 'syz.4.934': attribute type 3 has an invalid length. [ 291.159432][ T7983] netlink: 132 bytes leftover after parsing attributes in process `syz.4.934'. [ 291.862206][ T8005] netlink: 56 bytes leftover after parsing attributes in process `syz.4.942'. [ 291.885772][ T8004] netlink: 132 bytes leftover after parsing attributes in process `syz.2.941'. [ 292.774158][ T4277] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 293.177966][ T8037] netlink: 15487 bytes leftover after parsing attributes in process `syz.4.949'. [ 294.821393][ T8080] netlink: 'syz.2.960': attribute type 46 has an invalid length. [ 294.905508][ T8080] netlink: 55 bytes leftover after parsing attributes in process `syz.2.960'. [ 294.945079][ T8081] netlink: 63763 bytes leftover after parsing attributes in process `syz.2.960'. [ 295.407551][ T8092] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.963'. [ 295.758987][ T8108] netlink: 'syz.3.966': attribute type 27 has an invalid length. [ 295.799966][ T8108] netlink: 'syz.3.966': attribute type 3 has an invalid length. [ 295.830311][ T8108] netlink: 132 bytes leftover after parsing attributes in process `syz.3.966'. [ 296.032454][ T8110] netlink: 152 bytes leftover after parsing attributes in process `syz.1.968'. [ 296.065058][ T8110] tc_dump_action: action bad kind [ 297.817411][ T8155] IPv6: Can't replace route, no match found [ 297.958058][ T6714] wlan1: Trigger new scan to find an IBSS to join [ 298.053903][ T8159] netlink: 'syz.4.978': attribute type 21 has an invalid length. [ 300.955797][ T8170] netlink: 14 bytes leftover after parsing attributes in process `syz.3.983'. [ 301.019658][ T8170] device hsr_slave_0 left promiscuous mode [ 301.202977][ T8185] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.986'. [ 301.227964][ T8170] device hsr_slave_1 left promiscuous mode [ 301.962120][ T8192] netlink: 'syz.0.988': attribute type 21 has an invalid length. [ 302.004277][ T8192] netlink: 156 bytes leftover after parsing attributes in process `syz.0.988'. [ 302.060330][ T8193] IPv6: Can't replace route, no match found [ 302.352814][ T8205] netlink: 'syz.4.991': attribute type 10 has an invalid length. [ 302.443088][ T8205] device wlan1 left promiscuous mode [ 302.555845][ T8205] bond0: (slave wlan1): Releasing backup interface [ 302.761827][ T8205] team0: Port device wlan1 added [ 302.944871][ T6691] wlan1: Trigger new scan to find an IBSS to join [ 303.365927][ T8192] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 303.389601][ T8195] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 303.866121][ T8228] netlink: 'syz.1.998': attribute type 3 has an invalid length. [ 303.875107][ T8228] netlink: 132 bytes leftover after parsing attributes in process `syz.1.998'. [ 304.048390][ T6709] wlan1: Creating new IBSS network, BSSID da:ea:cd:93:23:eb [ 304.289436][ T8239] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1000'. [ 305.732696][ T8277] IPv6: Can't replace route, no match found [ 306.942576][ T8291] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1012'. [ 307.706354][ T8302] device syzkaller0 entered promiscuous mode [ 308.287719][ T8317] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1021'. [ 308.313888][ T8317] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1021'. [ 308.346983][ T8317] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1021'. [ 308.371117][ T8317] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1021'. [ 308.866345][ T8318] netlink: 'syz.0.1021': attribute type 3 has an invalid length. [ 308.949896][ T8318] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1021'. [ 309.536541][ T8351] netlink: 'syz.2.1030': attribute type 21 has an invalid length. [ 309.634464][ T8350] netlink: 'syz.2.1030': attribute type 21 has an invalid length. [ 309.692129][ T8357] netlink: 'syz.1.1032': attribute type 11 has an invalid length. [ 309.697870][ T8347] netlink: 'syz.4.1029': attribute type 19 has an invalid length. [ 309.758621][ T8357] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1032'. [ 309.862962][ T8357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.864049][ T8378] IPv6: Can't replace route, no match found [ 311.481426][ T8388] netlink: 'syz.3.1042': attribute type 1 has an invalid length. [ 311.503258][ T8388] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.1042'. [ 311.794154][ T8407] device virt_wifi0 entered promiscuous mode [ 311.828095][ T8409] netlink: 'syz.3.1046': attribute type 2 has an invalid length. [ 311.850484][ T6705] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 312.377105][ T8409] device 0 entered promiscuous mode [ 312.908306][ T8429] netlink: 'syz.3.1053': attribute type 16 has an invalid length. [ 312.926734][ T8429] netlink: 'syz.3.1053': attribute type 3 has an invalid length. [ 313.009384][ T8429] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1053'. [ 315.093198][ T8431] IPv6: Can't replace route, no match found [ 315.732950][ T8456] device syzkaller0 entered promiscuous mode [ 315.847106][ T8467] netlink: 'syz.4.1061': attribute type 6 has an invalid length. [ 315.905870][ T8467] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1061'. [ 316.008997][ T8480] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.1064'. [ 317.190987][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.202500][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.585511][ T8484] IPv6: Can't replace route, no match found [ 319.033856][ T8513] netlink: 'syz.2.1070': attribute type 21 has an invalid length. [ 320.894761][ T8542] netlink: 'syz.2.1080': attribute type 3 has an invalid length. [ 320.902574][ T8542] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1080'. [ 321.210788][ T8551] IPv6: Can't replace route, no match found [ 322.200751][ T8585] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1092'. [ 322.246110][ T8585] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1092'. [ 322.280677][ T8590] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1092'. [ 322.344493][ T8585] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1092'. [ 323.356657][ T8602] netlink: 9015 bytes leftover after parsing attributes in process `syz.1.1095'. [ 323.926669][ T8599] netlink: 'syz.3.1092': attribute type 3 has an invalid length. [ 323.991848][ T8599] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1092'. [ 324.802759][ T8623] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1099'. [ 325.053148][ T8644] netlink: 'syz.1.1108': attribute type 17 has an invalid length. [ 325.114189][ T8644] netlink: 'syz.1.1108': attribute type 16 has an invalid length. [ 325.133885][ T8644] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1108'. [ 325.523464][ T8653] netlink: 'syz.2.1109': attribute type 2 has an invalid length. [ 328.685705][ T8709] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1124'. [ 328.962064][ T8716] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1129'. [ 329.830659][ T8736] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1134'. [ 330.261145][ T8736] team0: Port device team_slave_0 removed [ 331.443278][ T8765] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1141'. [ 332.359891][ T8777] netlink: 'syz.1.1144': attribute type 2 has an invalid length. [ 332.410100][ T8777] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1144'. [ 333.347942][ T8792] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1149'. [ 333.799944][ T8785] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 333.904294][ T8785] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 334.023986][ T8785] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 334.086657][ T6691] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 334.371855][ T8805] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1150'. [ 335.310488][ T8810] netlink: 'syz.0.1152': attribute type 21 has an invalid length. [ 336.170083][ T8815] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1154'. [ 337.495784][ T8821] netlink: 'syz.1.1156': attribute type 10 has an invalid length. [ 337.622101][ T8821] device veth0_macvtap left promiscuous mode [ 339.696323][ T8859] netlink: 'syz.4.1163': attribute type 2 has an invalid length. [ 339.884255][ T8859] netlink: 'syz.4.1163': attribute type 8 has an invalid length. [ 339.900939][ T8859] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1163'. [ 339.969274][ T8858] netlink: 'syz.4.1163': attribute type 19 has an invalid length. [ 340.009284][ T8858] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1163'. [ 340.192301][ T8870] netlink: 'syz.3.1167': attribute type 10 has an invalid length. [ 340.587682][ T8870] device geneve0 entered promiscuous mode [ 340.923116][ T8870] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 342.920273][ T8929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.018987][ T8929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.036399][ T8929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.048787][ T8929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.108300][ T8929] bridge0: port 1(batadv0) entered disabled state [ 343.326515][ T8929] bridge0: port 1(batadv0) entered disabled state [ 343.503255][ T8951] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1187'. [ 344.012256][ T8931] device syzkaller0 entered promiscuous mode [ 344.095162][ T8951] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 344.103136][ T8951] CPU: 1 PID: 8951 Comm: syz.1.1187 Not tainted syzkaller #0 [ 344.110731][ T8951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 344.121081][ T8951] Call Trace: [ 344.124379][ T8951] [ 344.124426][ T8951] dump_stack_lvl+0x188/0x24e [ 344.124467][ T8951] ? show_regs_print_info+0x12/0x12 [ 344.124497][ T8951] ? load_image+0x400/0x400 [ 344.142359][ T8951] sysfs_warn_dup+0x8a/0xa0 [ 344.147102][ T8951] sysfs_do_create_link_sd+0xc0/0x110 [ 344.152704][ T8951] device_add+0x7ed/0xfb0 [ 344.157175][ T8951] wiphy_register+0x1d9f/0x2ac0 [ 344.162104][ T8951] ? cfg80211_event_work+0x40/0x40 [ 344.167364][ T8951] ? minstrel_ht_alloc+0x894/0xa20 [ 344.172530][ T8951] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 344.178713][ T8951] ieee80211_register_hw+0x2d00/0x39f0 [ 344.184337][ T8951] ? ieee80211_register_hw+0xf11/0x39f0 [ 344.189939][ T8951] ? ieee80211_register_hw+0xf11/0x39f0 [ 344.195726][ T8951] ? ieee80211_tasklet_handler+0x20/0x20 [ 344.201611][ T8951] ? memset+0x1e/0x40 [ 344.205712][ T8951] ? __hrtimer_init+0x186/0x270 [ 344.210688][ T8951] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 344.216703][ T8951] hwsim_new_radio_nl+0xafa/0xce0 [ 344.222178][ T8951] genl_family_rcv_msg_doit+0x22a/0x330 [ 344.228408][ T8951] ? end_current_label_crit_section+0x170/0x170 [ 344.234868][ T8951] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 344.240830][ T8951] ? bpf_lsm_capable+0x5/0x10 [ 344.245535][ T8951] ? security_capable+0x85/0xb0 [ 344.250580][ T8951] genl_rcv_msg+0x604/0x790 [ 344.255151][ T8951] ? genl_bind+0x360/0x360 [ 344.259763][ T8951] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 344.266300][ T8951] netlink_rcv_skb+0x1fb/0x450 [ 344.271300][ T8951] ? genl_bind+0x360/0x360 [ 344.275818][ T8951] ? netlink_ack+0x1170/0x1170 [ 344.280612][ T8951] ? down_read+0x1a8/0x2d0 [ 344.285180][ T8951] genl_rcv+0x24/0x40 [ 344.289258][ T8951] netlink_unicast+0x74d/0x8d0 [ 344.294051][ T8951] netlink_sendmsg+0x8ad/0xbd0 [ 344.298949][ T8951] ? netlink_getsockopt+0x550/0x550 [ 344.304417][ T8951] ? aa_sock_msg_perm+0x94/0x150 [ 344.309552][ T8951] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 344.315222][ T8951] ? security_socket_sendmsg+0x7c/0xa0 [ 344.320821][ T8951] ? netlink_getsockopt+0x550/0x550 [ 344.326428][ T8951] ____sys_sendmsg+0x5be/0x970 [ 344.331592][ T8951] ? __sys_sendmsg_sock+0x30/0x30 [ 344.336954][ T8951] ? __import_iovec+0x315/0x500 [ 344.342116][ T8951] ? import_iovec+0x6f/0xa0 [ 344.346990][ T8951] ___sys_sendmsg+0x2a2/0x360 [ 344.351780][ T8951] ? try_to_wake_up+0x67c/0x1080 [ 344.357087][ T8951] ? __sys_sendmsg+0x290/0x290 [ 344.362091][ T8951] __se_sys_sendmsg+0x1bb/0x2a0 [ 344.367169][ T8951] ? __x64_sys_sendmsg+0x80/0x80 [ 344.372311][ T8951] ? lockdep_hardirqs_on+0x94/0x140 [ 344.377757][ T8951] do_syscall_64+0x4c/0xa0 [ 344.382367][ T8951] ? clear_bhb_loop+0x60/0xb0 [ 344.387361][ T8951] ? clear_bhb_loop+0x60/0xb0 [ 344.392254][ T8951] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 344.398171][ T8951] RIP: 0033:0x7f002f59c819 [ 344.402598][ T8951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.422679][ T8951] RSP: 002b:00007f002cfd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.431210][ T8951] RAX: ffffffffffffffda RBX: 00007f002f816360 RCX: 00007f002f59c819 [ 344.439202][ T8951] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 344.447297][ T8951] RBP: 00007f002f632c91 R08: 0000000000000000 R09: 0000000000000000 [ 344.455828][ T8951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.463994][ T8951] R13: 00007f002f8163f8 R14: 00007f002f816360 R15: 00007ffd84bb7b28 [ 344.472699][ T8951] [ 345.037596][ T8980] netlink: 'syz.0.1195': attribute type 1 has an invalid length. [ 345.174234][ T8980] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.1195'. [ 345.326612][ T8971] netlink: 'syz.2.1192': attribute type 10 has an invalid length. [ 345.353625][ T8987] netlink: 'syz.1.1198': attribute type 4 has an invalid length. [ 345.382800][ T8987] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1198'. [ 345.666217][ T8971] team0: Device hsr_slave_0 failed to register rx_handler [ 346.393846][ T9019] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1207'. [ 346.448851][ T9025] netlink: 'syz.3.1209': attribute type 21 has an invalid length. [ 346.683830][ T9036] netlink: 'syz.1.1212': attribute type 2 has an invalid length. [ 346.703454][ T9036] netlink: 'syz.1.1212': attribute type 1 has an invalid length. [ 346.722260][ T9036] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1212'. [ 348.397591][ T9090] netlink: 'syz.1.1226': attribute type 39 has an invalid length. [ 348.548541][ T9097] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.1228'. [ 348.604316][ T9090] device hsr_slave_1 left promiscuous mode [ 348.693667][ T9095] netlink: 'syz.4.1225': attribute type 10 has an invalid length. [ 348.735797][ T9100] sctp: [Deprecated]: syz.4.1225 (pid 9100) Use of int in maxseg socket option. [ 348.735797][ T9100] Use struct sctp_assoc_value instead [ 348.757005][ T9095] team0: Port device geneve1 added [ 349.337890][ T9123] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.1234'. [ 349.401030][ T9123] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 349.571143][ T9131] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1237'. [ 351.967201][ T9151] netlink: 'syz.3.1241': attribute type 2 has an invalid length. [ 351.975497][ T9151] netlink: 119 bytes leftover after parsing attributes in process `syz.3.1241'. [ 352.453434][ T9161] netlink: 'syz.4.1245': attribute type 4 has an invalid length. [ 352.607417][ T9176] raw_sendmsg: syz.2.1249 forgot to set AF_INET. Fix it! [ 352.648377][ T9180] sctp: [Deprecated]: syz.3.1250 (pid 9180) Use of struct sctp_assoc_value in delayed_ack socket option. [ 352.648377][ T9180] Use struct sctp_sack_info instead [ 352.772639][ T9185] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1251'. [ 353.042562][ T9198] tap0: tun_chr_ioctl cmd 2147767517 [ 353.354759][ T9198] netlink: 'syz.3.1253': attribute type 2 has an invalid length. [ 353.382677][ T9198] netlink: 'syz.3.1253': attribute type 8 has an invalid length. [ 353.395625][ T9198] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1253'. [ 353.847217][ T9218] netlink: 'syz.4.1261': attribute type 2 has an invalid length. [ 353.859860][ T9218] netlink: 'syz.4.1261': attribute type 8 has an invalid length. [ 353.870166][ T9218] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1261'. [ 353.946065][ T9218] netlink: 'syz.4.1261': attribute type 19 has an invalid length. [ 353.955746][ T9218] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1261'. [ 354.293825][ T9232] netlink: 'syz.3.1266': attribute type 1 has an invalid length. [ 355.187428][ T9249] netlink: 'syz.4.1269': attribute type 3 has an invalid length. [ 355.220359][ T9249] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1269'. [ 355.812252][ T9267] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1275'. [ 355.980684][ T9268] netlink: 'syz.4.1274': attribute type 22 has an invalid length. [ 355.993107][ T9268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1274'. [ 356.033344][ T9270] netlink: 763 bytes leftover after parsing attributes in process `syz.4.1274'. [ 356.033405][ T9273] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.1275'. [ 357.816278][ T9342] netlink: 'syz.2.1292': attribute type 2 has an invalid length. [ 357.983069][ T9342] __nla_validate_parse: 2 callbacks suppressed [ 357.983096][ T9342] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.1292'. [ 358.014261][ T9336] netlink: 'syz.1.1289': attribute type 22 has an invalid length. [ 358.023170][ T9336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1289'. [ 358.245507][ T9338] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1289'. [ 358.683217][ T4277] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11 [ 358.746560][ T9365] netlink: 'syz.1.1300': attribute type 6 has an invalid length. [ 358.811926][ T9365] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1300'. [ 360.038718][ T9393] netlink: 'syz.2.1303': attribute type 1 has an invalid length. [ 360.500925][ T9413] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1312'. [ 360.521690][ T9417] netlink: 'syz.3.1311': attribute type 22 has an invalid length. [ 360.603317][ T9417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1311'. [ 360.707670][ T4277] Bluetooth: hci1: command 0x0419 tx timeout [ 360.715111][ T9418] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1311'. [ 360.744435][ T9426] netlink: 'syz.1.1314': attribute type 10 has an invalid length. [ 361.284264][ T9431] netlink: 'syz.3.1316': attribute type 1 has an invalid length. [ 361.909445][ T9463] netlink: 'syz.1.1330': attribute type 29 has an invalid length. [ 361.929883][ T9463] netlink: 'syz.1.1330': attribute type 29 has an invalid length. [ 361.959513][ T9465] netlink: 'syz.1.1330': attribute type 29 has an invalid length. [ 362.784290][ T4277] Bluetooth: hci1: command 0x0406 tx timeout [ 363.059501][ T9493] netlink: 1034 bytes leftover after parsing attributes in process `syz.4.1338'. [ 363.719677][ T9508] netlink: 'syz.4.1342': attribute type 2 has an invalid length. [ 363.767072][ T9508] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.1342'. [ 366.647469][ T9497] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.1339'. [ 366.991552][ T9540] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1349'. [ 367.027210][ T9538] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1349'. [ 367.091908][ T9541] netlink: 'syz.0.1350': attribute type 21 has an invalid length. [ 367.153104][ T9541] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1350'. [ 367.249313][ T6700] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 369.866440][ T9611] netlink: 'syz.0.1368': attribute type 3 has an invalid length. [ 370.545635][ T9634] netlink: 'syz.1.1374': attribute type 10 has an invalid length. [ 371.632910][ T9634] team0: Port device geneve1 added [ 371.982041][ T9674] netlink: 'syz.3.1384': attribute type 41 has an invalid length. [ 372.031479][ T9671] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1383'. [ 372.382118][ T48] Bluetooth: hci2: unexpected event 0x0b length: 15 > 11 [ 372.476093][ T9689] netlink: 'syz.0.1385': attribute type 6 has an invalid length. [ 372.584276][ T9689] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1385'. [ 372.972104][ T9702] netlink: 'syz.3.1387': attribute type 6 has an invalid length. [ 373.134058][ T9702] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1387'. [ 374.213662][ T9742] netlink: 'syz.2.1394': attribute type 39 has an invalid length. [ 376.303750][ T9790] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1412'. [ 376.353010][ T9784] device syzkaller0 entered promiscuous mode [ 377.171302][ T9826] netlink: 'syz.4.1422': attribute type 15 has an invalid length. [ 377.184246][ T9826] netlink: 'syz.4.1422': attribute type 5 has an invalid length. [ 377.198789][ T9826] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1422'. [ 378.629374][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.636358][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.732724][ T9893] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 379.767989][ T9887] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 379.804401][ T9887] syzkaller0: linktype set to 769 [ 379.827199][ T9890] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 379.864266][ T9896] netlink: 'syz.0.1440': attribute type 17 has an invalid length. [ 379.898817][ T9896] netlink: 'syz.0.1440': attribute type 16 has an invalid length. [ 379.991091][ T9896] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1440'. [ 380.128843][ T9897] netlink: 'syz.0.1440': attribute type 21 has an invalid length. [ 380.234088][ T9897] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.1440'. [ 381.291893][ T9927] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1447'. [ 383.243458][ T9960] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.1457'. [ 383.313506][ T9960] netlink: zone id is out of range [ 383.394354][ T9960] netlink: zone id is out of range [ 383.441612][ T9960] netlink: zone id is out of range [ 383.534760][ T9960] netlink: zone id is out of range [ 383.565952][ T9960] netlink: zone id is out of range [ 383.634306][ T9960] netlink: zone id is out of range [ 383.685838][ T9960] netlink: zone id is out of range [ 383.706087][ T9948] delete_channel: no stack [ 383.770443][ T9960] netlink: zone id is out of range [ 383.828399][ T9960] netlink: zone id is out of range [ 383.884734][ T9960] netlink: zone id is out of range [ 384.661720][ T9975] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1460'. [ 385.523920][ T9984] netlink: 26 bytes leftover after parsing attributes in process `syz.3.1463'. [ 387.799096][T10040] netlink: 'syz.3.1478': attribute type 10 has an invalid length. [ 388.089511][T10040] bond0: (slave geneve0): Releasing backup interface [ 389.015731][T10077] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1485'. [ 389.423289][T10092] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1488'. [ 389.811193][T10092] netlink: 'syz.3.1488': attribute type 10 has an invalid length. [ 389.950081][T10092] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.058340][T10092] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.065886][T10092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.102884][T10092] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 390.509919][T10118] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1500'. [ 390.806315][T10130] device syzkaller0 entered promiscuous mode [ 391.460799][T10145] netlink: 'syz.3.1506': attribute type 16 has an invalid length. [ 391.473566][T10145] netlink: 'syz.3.1506': attribute type 3 has an invalid length. [ 391.489181][T10145] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1506'. [ 392.195633][T10162] netlink: 'syz.2.1513': attribute type 2 has an invalid length. [ 392.203631][T10162] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1513'. [ 392.332767][T10167] netlink: 'syz.3.1515': attribute type 9 has an invalid length. [ 392.361279][T10167] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1515'. [ 392.523226][T10169] netlink: 'syz.2.1516': attribute type 11 has an invalid length. [ 392.612048][T10172] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1516'. [ 393.544050][T10178] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1517'. [ 393.560373][T10178] bridge_slave_1: default FDB implementation only supports local addresses [ 393.869148][T10202] netlink: 'syz.3.1524': attribute type 2 has an invalid length. [ 393.903370][T10202] netlink: 'syz.3.1524': attribute type 8 has an invalid length. [ 393.942130][T10202] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1524'. [ 394.019617][T10206] netlink: 'syz.2.1526': attribute type 11 has an invalid length. [ 394.050309][T10206] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1526'. [ 394.434638][T10222] netlink: 175 bytes leftover after parsing attributes in process `syz.0.1530'. [ 394.496825][T10222] netlink: 'syz.0.1530': attribute type 10 has an invalid length. [ 395.720614][T10238] netlink: 'syz.2.1534': attribute type 2 has an invalid length. [ 395.792195][T10238] device 0 entered promiscuous mode [ 395.982495][T10245] device syzkaller0 entered promiscuous mode [ 396.394553][T10255] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1539'. [ 398.387823][ T6691] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 401.360612][T10244] netlink: 11518 bytes leftover after parsing attributes in process `syz.0.1536'. [ 401.606390][T10296] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.1547'. [ 404.669120][T10354] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1565'. [ 404.766701][T10356] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1563'. [ 404.807322][T10356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1563'. [ 404.982404][T10361] netlink: 'syz.2.1566': attribute type 21 has an invalid length. [ 405.066111][T10361] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1566'. [ 408.110037][T10377] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.1568'. [ 408.263852][T10377] bridge_slave_1: default FDB implementation only supports local addresses [ 408.433528][T10384] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1569'. [ 408.594149][T10376] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1569'. [ 408.681155][T10398] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1575'. [ 409.418599][T10400] netlink: 'syz.1.1576': attribute type 29 has an invalid length. [ 409.509262][T10400] netlink: 'syz.1.1576': attribute type 29 has an invalid length. [ 411.040099][T10443] netlink: 'syz.1.1588': attribute type 7 has an invalid length. [ 411.145015][T10443] netlink: 'syz.1.1588': attribute type 6 has an invalid length. [ 411.207740][T10438] netlink: 'syz.0.1587': attribute type 13 has an invalid length. [ 411.273627][T10446] netlink: 'syz.3.1589': attribute type 2 has an invalid length. [ 411.363488][T10438] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1587'. [ 411.414376][T10446] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1589'. [ 411.649498][T10438] syz_tun: refused to change device tx_queue_len [ 411.661910][T10438] net_ratelimit: 155 callbacks suppressed [ 411.661956][T10438] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 411.704873][T10452] netlink: 'syz.4.1590': attribute type 4 has an invalid length. [ 411.749292][T10452] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1590'. [ 411.766105][T10450] netlink: 'syz.4.1590': attribute type 10 has an invalid length. [ 411.874715][T10450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.901811][T10450] team0: Port device bond0 added [ 415.515297][T10499] netlink: 'syz.2.1605': attribute type 25 has an invalid length. [ 415.523743][T10499] netlink: 'syz.2.1605': attribute type 29 has an invalid length. [ 415.577137][T10503] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1603'. [ 415.632960][T10501] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1603'. [ 415.666106][T10510] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1605'. [ 416.061074][T10525] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1612'. [ 416.091572][T10525] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 416.180947][T10532] netlink: 'syz.2.1613': attribute type 3 has an invalid length. [ 416.204598][T10532] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1613'. [ 416.208099][T10525] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.1612'. [ 416.250206][T10532] netlink: 'syz.2.1613': attribute type 39 has an invalid length. [ 416.436861][T10537] device bridge_slave_0 left promiscuous mode [ 416.497317][T10537] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.610375][T10537] bond0: (slave bridge0): Releasing backup interface [ 416.762495][T10542] netlink: 'syz.2.1618': attribute type 10 has an invalid length. [ 416.896663][T10536] netlink: 'syz.0.1615': attribute type 21 has an invalid length. [ 417.086981][T10555] netlink: 130181 bytes leftover after parsing attributes in process `syz.3.1620'. [ 417.327147][T10565] netlink: 'syz.0.1624': attribute type 2 has an invalid length. [ 419.038493][T10604] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1637'. [ 419.159798][T10604] device caif0 entered promiscuous mode [ 419.318641][T10606] device syzkaller0 entered promiscuous mode [ 419.978197][T10626] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 419.987352][T10626] syzkaller0: linktype set to 778 [ 420.221162][T10641] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1644'. [ 420.373757][T10648] netlink: 'syz.0.1648': attribute type 27 has an invalid length. [ 420.385009][T10648] netlink: 'syz.0.1648': attribute type 3 has an invalid length. [ 420.392986][T10648] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1648'. [ 423.832522][T10649] : port 1(ip6gretap0) entered blocking state [ 423.839436][T10649] : port 1(ip6gretap0) entered disabled state [ 423.846786][T10649] device ip6gretap0 entered promiscuous mode [ 423.891944][T10650] device ip6gretap0 left promiscuous mode [ 423.899200][T10650] : port 1(ip6gretap0) entered disabled state [ 424.426725][T10677] netlink: 130181 bytes leftover after parsing attributes in process `syz.1.1658'. [ 424.486640][T10678] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1657'. [ 424.826910][T10688] netlink: 'syz.3.1660': attribute type 10 has an invalid length. [ 425.400693][T10688] batman_adv: batadv0: Adding interface: netdevsim0 [ 425.445751][T10688] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.465384][T10700] netlink: 'syz.1.1661': attribute type 29 has an invalid length. [ 425.490237][T10688] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 425.511093][T10700] netlink: 'syz.1.1661': attribute type 3 has an invalid length. [ 425.511212][T10700] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1661'. [ 425.833246][T10706] delete_channel: no stack [ 425.906151][T10706] delete_channel: no stack [ 427.796891][T10749] netlink: 130181 bytes leftover after parsing attributes in process `syz.2.1672'. [ 428.635943][T10771] netlink: 'syz.0.1679': attribute type 3 has an invalid length. [ 428.664236][T10771] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1679'. [ 428.679905][T10774] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1680'. [ 429.405283][ T6663] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 430.169353][T10816] delete_channel: no stack [ 430.331109][T10823] netlink: 'syz.2.1689': attribute type 29 has an invalid length. [ 430.403005][T10823] netlink: 'syz.2.1689': attribute type 3 has an invalid length. [ 430.512855][T10819] netlink: 'syz.3.1690': attribute type 10 has an invalid length. [ 430.586511][T10823] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1689'. [ 430.792038][T10819] team0: Port device wlan1 added [ 431.508098][T10852] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1697'. [ 431.600240][T10852] openvswitch: netlink: Message has 6 unknown bytes. [ 432.340805][T10870] netlink: 463 bytes leftover after parsing attributes in process `syz.0.1703'. [ 432.782969][T10886] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1708'. [ 432.871926][ T6700] wlan1: Trigger new scan to find an IBSS to join [ 433.342246][T10881] netlink: 71168 bytes leftover after parsing attributes in process `syz.1.1707'. [ 433.505653][T10886] team0: Port device team_slave_0 removed [ 433.621771][T10890] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1707'. [ 434.008834][T10907] netlink: 'syz.2.1711': attribute type 41 has an invalid length. [ 434.134403][T10911] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1714'. [ 434.159573][T10911] device hsr_slave_0 left promiscuous mode [ 434.816158][T10927] netlink: 'syz.0.1717': attribute type 29 has an invalid length. [ 434.898835][T10934] netlink: 'syz.2.1721': attribute type 21 has an invalid length. [ 434.911437][T10927] netlink: 'syz.0.1717': attribute type 3 has an invalid length. [ 434.940968][T10934] netlink: 'syz.2.1721': attribute type 11 has an invalid length. [ 434.998535][T10934] netlink: 'syz.2.1721': attribute type 2 has an invalid length. [ 435.047446][T10934] netlink: 'syz.2.1721': attribute type 1 has an invalid length. [ 435.064054][T10934] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.1721'. [ 435.105391][T10927] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1717'. [ 435.399413][T10946] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1723'. [ 435.487006][T10946] bridge_slave_1: default FDB implementation only supports local addresses [ 436.140857][T10957] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 436.246690][T10960] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 437.904975][ T6700] wlan1: Trigger new scan to find an IBSS to join [ 438.617762][T10967] netlink: 'syz.4.1727': attribute type 2 has an invalid length. [ 438.628268][T10967] netlink: 'syz.4.1727': attribute type 8 has an invalid length. [ 438.636510][T10967] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1727'. [ 438.799345][ T6709] wlan1: Creating new IBSS network, BSSID a6:93:eb:4d:14:73 [ 438.851511][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 438.878931][T10979] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.1730'. [ 439.072613][T10985] netlink: 'syz.1.1733': attribute type 10 has an invalid length. [ 440.075183][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.081832][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.381517][T10985] team0: Device hsr_slave_0 failed to register rx_handler [ 440.570130][T11000] netlink: 'syz.0.1736': attribute type 5 has an invalid length. [ 441.225717][T11024] netlink: 'syz.4.1742': attribute type 21 has an invalid length. [ 441.237010][T11024] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1742'. [ 441.774747][T11004] device syzkaller0 entered promiscuous mode [ 445.420522][T11083] netlink: 'syz.4.1745': attribute type 46 has an invalid length. [ 445.429112][T11083] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1745'. [ 445.438568][T11097] netlink: 'syz.1.1749': attribute type 1 has an invalid length. [ 445.446570][T11097] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1749'. [ 445.479713][T11111] netlink: 'syz.0.1750': attribute type 21 has an invalid length. [ 445.540702][T11115] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.1751'. [ 445.745740][T11130] netlink: 'syz.0.1755': attribute type 1 has an invalid length. [ 445.795445][T11133] netlink: 'syz.4.1756': attribute type 27 has an invalid length. [ 445.825132][T11133] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.1756'. [ 446.048165][T11143] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.1760'. [ 446.090969][T11148] netlink: 'syz.1.1757': attribute type 19 has an invalid length. [ 446.189409][T11148] netlink: 14552 bytes leftover after parsing attributes in process `syz.1.1757'. [ 446.533165][T11162] netlink: 'syz.3.1765': attribute type 3 has an invalid length. [ 446.547130][T11162] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1765'. [ 446.581883][T11163] netlink: 'syz.4.1766': attribute type 2 has an invalid length. [ 446.591918][T11163] netlink: 'syz.4.1766': attribute type 11 has an invalid length. [ 446.609686][T11163] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1766'. [ 446.632289][T11160] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1764'. [ 446.649696][T11162] netlink: 16162 bytes leftover after parsing attributes in process `syz.3.1765'. [ 447.449073][T11183] netlink: 'syz.4.1768': attribute type 3 has an invalid length. [ 448.012449][T11199] device syzkaller0 entered promiscuous mode [ 451.164675][T11228] netlink: 'syz.2.1780': attribute type 2 has an invalid length. [ 451.172543][T11230] netlink: 'syz.1.1781': attribute type 21 has an invalid length. [ 451.184220][T11230] __nla_validate_parse: 2 callbacks suppressed [ 451.184248][T11230] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1781'. [ 451.476324][T11238] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.1784'. [ 451.498609][T11241] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1785'. [ 451.622941][T11241] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.429527][T11244] netlink: 'syz.3.1785': attribute type 29 has an invalid length. [ 452.665873][T11241] device bridge_slave_0 left promiscuous mode [ 452.687522][T11241] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.969465][T11244] netlink: 'syz.3.1785': attribute type 29 has an invalid length. [ 453.757543][T11282] netlink: 'syz.4.1793': attribute type 2 has an invalid length. [ 453.810720][T11282] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1793'. [ 455.264345][T11333] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1807'. [ 455.293779][T11336] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1807'. [ 455.412173][T11342] netlink: 'syz.3.1809': attribute type 10 has an invalid length. [ 455.972369][T11360] IPv6: Can't replace route, no match found [ 456.557831][T11374] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1819'. [ 456.864856][T11385] netlink: 'syz.4.1821': attribute type 21 has an invalid length. [ 456.872887][T11385] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1821'. [ 458.432346][T11437] netlink: 'syz.2.1835': attribute type 29 has an invalid length. [ 458.463941][T11437] netlink: 'syz.2.1835': attribute type 29 has an invalid length. [ 458.596331][T11439] sock: sock_set_timeout: `syz.4.1836' (pid 11439) tries to set negative timeout [ 458.799621][T11456] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1841'. [ 459.712461][T11478] netlink: 'syz.4.1847': attribute type 21 has an invalid length. [ 459.741404][T11478] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1847'. [ 459.782872][T11484] netlink: 'syz.2.1849': attribute type 10 has an invalid length. [ 459.802008][T11479] netlink: 'syz.2.1849': attribute type 10 has an invalid length. [ 460.014069][T11493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1850'. [ 460.049097][T11493] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1850'. [ 460.089895][T11504] netlink: 'syz.2.1854': attribute type 25 has an invalid length. [ 460.099431][T11504] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.1854'. [ 460.143700][T11501] netlink: 'syz.3.1851': attribute type 39 has an invalid length. [ 460.901863][T11531] netlink: 'syz.1.1859': attribute type 3 has an invalid length. [ 460.957626][T11531] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1859'. [ 461.176097][T11536] netlink: 'syz.1.1859': attribute type 39 has an invalid length. [ 461.469589][T11519] team0: Device wg1 is of different type [ 462.247657][T11557] validate_nla: 1 callbacks suppressed [ 462.247677][T11557] netlink: 'syz.0.1865': attribute type 3 has an invalid length. [ 462.291848][T11557] netlink: 'syz.0.1865': attribute type 4 has an invalid length. [ 462.313742][T11557] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1865'. [ 463.268679][T11596] netlink: 'syz.0.1877': attribute type 39 has an invalid length. [ 464.559809][T11621] netlink: 'syz.2.1884': attribute type 21 has an invalid length. [ 464.818286][T11628] netlink: 'syz.3.1885': attribute type 15 has an invalid length. [ 464.842198][T11628] netlink: 'syz.3.1885': attribute type 5 has an invalid length. [ 464.940861][T11628] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1885'. [ 466.289306][T11651] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.1892'. [ 466.329207][T11651] netlink: 'syz.3.1892': attribute type 1 has an invalid length. [ 466.438596][T11651] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.1892'. [ 468.709998][T11690] netlink: 'syz.4.1900': attribute type 13 has an invalid length. [ 468.741074][T11690] netlink: 'syz.4.1900': attribute type 58 has an invalid length. [ 468.807729][T11690] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1900'. [ 468.852664][ T41] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 469.980112][T11717] netlink: 'syz.0.1908': attribute type 9 has an invalid length. [ 470.014335][T11717] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1908'. [ 470.646704][T11738] netlink: 'syz.0.1913': attribute type 10 has an invalid length. [ 470.871777][T11738] team0 (unregistering): Port device team_slave_1 removed [ 470.928338][T11738] team0 (unregistering): Port device bridge_slave_1 removed [ 470.951254][T11745] netlink: 'syz.3.1916': attribute type 22 has an invalid length. [ 470.979556][T11745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1916'. [ 471.472164][T11769] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1920'. [ 471.668888][T11769] device caif0 entered promiscuous mode [ 472.162963][T11784] netlink: 'syz.1.1926': attribute type 2 has an invalid length. [ 472.197677][T11784] netlink: 'syz.1.1926': attribute type 11 has an invalid length. [ 472.238260][T11784] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1926'. [ 472.262551][T11787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1927'. [ 472.400000][T11793] netlink: 'syz.3.1930': attribute type 21 has an invalid length. [ 472.485831][T11793] tap0: tun_chr_ioctl cmd 2147767517 [ 472.974767][T11804] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1932'. [ 473.722421][T11811] netlink: 'syz.4.1935': attribute type 10 has an invalid length. [ 473.878476][T11811] bond0: (slave bond_slave_0): Releasing backup interface [ 474.499371][T11820] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1936'. [ 475.396191][T11828] netlink: 'syz.3.1938': attribute type 9 has an invalid length. [ 475.433418][T11834] netlink: 'syz.1.1939': attribute type 3 has an invalid length. [ 475.444990][T11828] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1938'. [ 475.472358][T11834] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.1939'. [ 476.012176][T11838] delete_channel: no stack [ 476.018941][T11848] netlink: 'syz.2.1944': attribute type 3 has an invalid length. [ 476.040435][T11848] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1944'. [ 476.225724][T11857] netlink: 'syz.1.1943': attribute type 4 has an invalid length. [ 476.834776][T11879] netlink: 'syz.0.1950': attribute type 10 has an invalid length. [ 476.847410][T11871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1949'. [ 477.379761][T11910] IPv6: NLM_F_CREATE should be specified when creating new route [ 477.398098][T11910] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1960'. [ 477.743596][T11913] can: request_module (can-proto-5) failed. [ 479.470897][T11960] netlink: 'syz.2.1974': attribute type 10 has an invalid length. [ 479.629552][T11965] netlink: 'syz.3.1975': attribute type 10 has an invalid length. [ 480.274957][T11965] team0 (unregistering): Port device team_slave_1 removed [ 480.369235][T11965] team0 (unregistering): Port device bridge_slave_1 removed [ 480.415678][T11965] team0 (unregistering): Port device wlan1 removed [ 480.603495][T11991] netlink: 'syz.3.1981': attribute type 10 has an invalid length. [ 480.622268][T11991] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1981'. [ 480.644602][T11991] device dummy0 entered promiscuous mode [ 480.651191][T11991] bridge0: port 1(dummy0) entered blocking state [ 480.671213][T11991] bridge0: port 1(dummy0) entered disabled state [ 480.687348][T11991] bridge0: port 1(dummy0) entered blocking state [ 480.694031][T11991] bridge0: port 1(dummy0) entered forwarding state [ 480.818726][T11997] netlink: 65027 bytes leftover after parsing attributes in process `syz.4.1983'. [ 481.103054][T12007] IPv6: Can't replace route, no match found [ 481.260875][T12004] netlink: 'syz.2.1987': attribute type 29 has an invalid length. [ 481.369823][T12004] netlink: 'syz.2.1987': attribute type 29 has an invalid length. [ 482.289466][T12019] netlink: 'syz.0.1990': attribute type 4 has an invalid length. [ 482.502172][T12035] netlink: 'syz.2.1993': attribute type 10 has an invalid length. [ 483.148940][T12035] team0 (unregistering): Port device team_slave_0 removed [ 483.198435][T12035] team0 (unregistering): Port device team_slave_1 removed [ 483.245550][T12035] team0 (unregistering): Port device bridge_slave_1 removed [ 483.324095][T12043] netlink: 'syz.1.1995': attribute type 21 has an invalid length. [ 483.333384][T12043] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1995'. [ 483.395151][T12043] netlink: 'syz.1.1995': attribute type 4 has an invalid length. [ 483.412740][T12043] netlink: 'syz.1.1995': attribute type 5 has an invalid length. [ 483.435760][T12043] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1995'. [ 483.758413][T12072] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2002'. [ 483.845467][T12072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2002'. [ 483.893355][T12066] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2000'. [ 484.522424][T12100] validate_nla: 2 callbacks suppressed [ 484.522445][T12100] netlink: 'syz.2.2008': attribute type 3 has an invalid length. [ 484.572381][T12100] netlink: 'syz.2.2008': attribute type 1 has an invalid length. [ 484.632492][T12100] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2008'. [ 484.735095][T12103] netlink: 'syz.1.2010': attribute type 13 has an invalid length. [ 484.797475][T12103] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2010'. [ 484.915044][T12103] syz_tun: refused to change device tx_queue_len [ 484.939175][T12103] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 485.016183][T12114] netlink: 'syz.3.2011': attribute type 4 has an invalid length. [ 485.679461][T12128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2014'. [ 486.067537][T12148] -1: renamed from syzkaller0 [ 486.181992][T12153] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2023'. [ 487.676513][T12168] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2026'. [ 488.017613][T12186] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2030'. [ 488.063692][T12186] bridge_slave_1: default FDB implementation only supports local addresses [ 488.123014][T12185] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2030'. [ 488.154310][T12185] bridge_slave_1: default FDB implementation only supports local addresses [ 488.631307][T12199] netlink: 12542 bytes leftover after parsing attributes in process `syz.1.2033'. [ 488.726720][T12205] netlink: 12542 bytes leftover after parsing attributes in process `syz.1.2033'. [ 488.815355][T12217] netlink: 'syz.2.2037': attribute type 27 has an invalid length. [ 488.843634][T12217] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2037'. [ 489.006931][T12222] netlink: 'syz.0.2038': attribute type 2 has an invalid length. [ 489.085458][T12227] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2038'. [ 489.142380][T12222] device 0 entered promiscuous mode [ 489.163643][T12227] netlink: zone id is out of range [ 489.238695][T12227] netlink: zone id is out of range [ 489.254198][T12227] netlink: zone id is out of range [ 489.259443][T12227] netlink: zone id is out of range [ 489.315188][T12227] netlink: zone id is out of range [ 489.320561][T12227] netlink: zone id is out of range [ 489.326248][T12227] netlink: zone id is out of range [ 489.331838][T12227] netlink: zone id is out of range [ 489.371821][T12227] netlink: zone id is out of range [ 489.665411][T12246] netlink: 'syz.0.2045': attribute type 21 has an invalid length. [ 489.673348][T12246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2045'. [ 489.787218][T12251] device syzkaller0 entered promiscuous mode [ 491.009488][T12286] netlink: 'syz.2.2057': attribute type 28 has an invalid length. [ 491.030890][T12286] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2057'. [ 491.247672][T12295] netlink: 'syz.3.2059': attribute type 1 has an invalid length. [ 491.278339][T12295] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.2059'. [ 491.637135][T12304] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.2063'. [ 492.040460][T12329] netlink: 'syz.4.2069': attribute type 21 has an invalid length. [ 492.049273][T12329] netlink: 'syz.4.2069': attribute type 1 has an invalid length. [ 492.059492][T12329] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2069'. [ 492.480311][T12336] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.2071'. [ 492.738342][T12345] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2073'. [ 493.790729][T12361] tap0: tun_chr_ioctl cmd 2147767517 [ 493.856872][T12362] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.2078'. [ 495.466348][T12394] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2087'. [ 495.858857][T12415] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2092'. [ 496.106922][T12420] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2094'. [ 501.510439][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.517056][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.591113][T12469] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 501.626957][T12469] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 501.643379][T12469] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 502.101115][T12498] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2110'. [ 502.349504][T12504] netlink: 'syz.3.2112': attribute type 3 has an invalid length. [ 502.670584][T12511] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2115'. [ 502.878482][T12524] netlink: 'syz.2.2118': attribute type 29 has an invalid length. [ 502.892876][T12524] netlink: 'syz.2.2118': attribute type 29 has an invalid length. [ 502.990635][T12528] netlink: 'syz.2.2118': attribute type 29 has an invalid length. [ 503.109609][T12520] bond0: (slave bridge0): Error: Slave device does not support XDP [ 503.208653][T12535] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2130'. [ 503.897323][T12545] netlink: 60583 bytes leftover after parsing attributes in process `syz.3.2122'. [ 503.929893][T12545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2122'. [ 504.368991][ T48] Bluetooth: hci0: ISO packet for unknown connection handle 29 [ 505.752359][T12566] netlink: 'syz.4.2128': attribute type 3 has an invalid length. [ 505.761191][T12566] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2128'. [ 505.859270][T12580] tipc: Started in network mode [ 505.878743][T12580] tipc: Node identity 9215a268, cluster identity 4711 [ 505.907356][T12580] tipc: Node number set to 2450891368 [ 505.929411][T12580] netlink: 'syz.2.2132': attribute type 10 has an invalid length. [ 506.026042][T12590] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2135'. [ 506.365572][T12593] device syzkaller0 entered promiscuous mode [ 506.813861][T12615] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.2139'. [ 510.507017][T12641] netlink: 'syz.3.2143': attribute type 11 has an invalid length. [ 510.809354][T12657] netlink: 'syz.4.2148': attribute type 10 has an invalid length. [ 512.515394][T12703] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2158'. [ 513.696545][T12736] device syzkaller0 entered promiscuous mode [ 513.726156][T12742] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2172'. [ 513.946958][T12746] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.2174'. [ 515.811049][T12752] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2176'. [ 515.821851][T12754] netlink: 'syz.4.2175': attribute type 10 has an invalid length. [ 515.848060][T12754] team0: Port device hsr_slave_0 added [ 515.952248][T12749] tipc: Started in network mode [ 515.957874][T12749] tipc: Node identity 9215a268, cluster identity 4711 [ 515.974414][T12749] tipc: Node number set to 2450891368 [ 515.994361][T12758] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2177'. [ 516.253510][T12772] netlink: 17861 bytes leftover after parsing attributes in process `syz.3.2178'. [ 516.443621][T12768] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2180'. [ 516.466137][T12772] netlink: 17861 bytes leftover after parsing attributes in process `syz.3.2178'. [ 517.361988][T12790] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.722029][T12807] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2188'. [ 517.749520][T12809] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2189'. [ 518.373724][T12820] netlink: 'syz.3.2192': attribute type 21 has an invalid length. [ 518.404179][T12820] IPv6: NLM_F_CREATE should be specified when creating new route [ 518.434381][T12820] IPv6: Can't replace route, no match found [ 518.440604][T12823] netlink: 'syz.0.2193': attribute type 22 has an invalid length. [ 518.450886][T12828] netlink: 'syz.1.2195': attribute type 2 has an invalid length. [ 519.376868][T12859] netlink: 'syz.2.2206': attribute type 13 has an invalid length. [ 519.482649][T12859] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2206'. [ 519.928449][T12872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2208'. [ 520.126973][T12881] netlink: 'syz.0.2211': attribute type 27 has an invalid length. [ 520.824811][T12881] bond0: (slave bond_slave_0): Releasing backup interface [ 520.856318][T12888] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.2212'. [ 520.919668][T12885] netlink: 'syz.4.2213': attribute type 1 has an invalid length. [ 521.502462][T12903] netlink: 'syz.0.2218': attribute type 10 has an invalid length. [ 522.309185][T12912] netlink: 'syz.4.2220': attribute type 2 has an invalid length. [ 522.388435][T12912] netlink: 'syz.4.2220': attribute type 8 has an invalid length. [ 522.455693][T12912] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2220'. [ 522.587859][T12926] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2223'. [ 522.674289][T12926] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2223'. [ 522.688110][T12927] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2223'. [ 523.307433][T12937] netlink: 'syz.4.2226': attribute type 28 has an invalid length. [ 523.467379][T12937] netlink: 'syz.4.2226': attribute type 29 has an invalid length. [ 523.540520][T12937] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2226'. [ 523.980774][T12935] netlink: 'syz.4.2226': attribute type 10 has an invalid length. [ 524.071563][T12935] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2226'. [ 524.462396][T12922] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2222'. [ 526.149033][T12922] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2222'. [ 526.167485][T12956] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2228'. [ 526.272945][T12959] netlink: 'syz.2.2229': attribute type 46 has an invalid length. [ 526.969329][T12980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.037092][T12985] netlink: 'syz.1.2237': attribute type 14 has an invalid length. [ 527.158999][T12985] delete_channel: no stack [ 527.174115][T12983] netlink: 'syz.1.2237': attribute type 14 has an invalid length. [ 527.228576][T12985] delete_channel: no stack [ 529.800419][T13005] netlink: 'syz.3.2240': attribute type 10 has an invalid length. [ 529.828534][T13005] netlink: 'syz.3.2240': attribute type 10 has an invalid length. [ 529.859480][T13005] netlink: 'syz.3.2240': attribute type 10 has an invalid length. [ 529.934453][T13005] netlink: 'syz.3.2240': attribute type 10 has an invalid length. [ 529.970142][T13005] netlink: 'syz.3.2240': attribute type 10 has an invalid length. [ 530.050644][T13005] netlink: 'syz.3.2240': attribute type 10 has an invalid length. [ 530.101844][T13005] netlink: 'syz.3.2240': attribute type 10 has an invalid length. [ 530.147332][T13008] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2241'. [ 533.078681][T13040] validate_nla: 28 callbacks suppressed [ 533.078704][T13040] netlink: 'syz.0.2242': attribute type 28 has an invalid length. [ 533.131443][T13040] netlink: 'syz.0.2242': attribute type 29 has an invalid length. [ 533.266225][T13040] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2242'. [ 533.563730][T13039] netlink: 'syz.0.2242': attribute type 10 has an invalid length. [ 533.621355][T13039] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2242'. [ 535.830508][T13079] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.2257'. [ 535.974913][T13087] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2260'. [ 536.031156][T13087] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2260'. [ 539.729787][T13091] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2260'. [ 539.746530][T13106] netlink: 'syz.4.2267': attribute type 13 has an invalid length. [ 539.774208][T13106] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2267'. [ 539.786681][T13106] syz_tun: refused to change device tx_queue_len [ 539.793341][T13106] net_ratelimit: 224 callbacks suppressed [ 539.793355][T13106] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 539.992941][T13111] netlink: 'syz.1.2268': attribute type 10 has an invalid length. [ 540.047121][T13111] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2268'. [ 540.170717][T13129] netlink: 'syz.4.2271': attribute type 29 has an invalid length. [ 540.177150][T13111] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 540.291101][T13129] netlink: 'syz.4.2271': attribute type 29 has an invalid length. [ 540.547330][T13152] netlink: 'syz.4.2276': attribute type 15 has an invalid length. [ 540.583646][T13152] netlink: 'syz.4.2276': attribute type 7 has an invalid length. [ 540.640553][T13153] netlink: 'syz.4.2276': attribute type 15 has an invalid length. [ 540.649580][T13153] netlink: 'syz.4.2276': attribute type 7 has an invalid length. [ 540.650315][T13146] delete_channel: no stack [ 540.806844][T13146] delete_channel: no stack [ 540.860346][T13167] syz.0.2281[13167] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 540.860456][T13167] syz.0.2281[13167] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 541.841436][T13199] bridge0: mtu less than device minimum [ 542.288049][T13231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2295'. [ 542.313028][T13212] netlink: 'syz.0.2292': attribute type 21 has an invalid length. [ 542.341949][T13212] netlink: 'syz.0.2292': attribute type 2 has an invalid length. [ 542.499670][T13221] delete_channel: no stack [ 543.039570][T13248] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2300'. [ 543.054360][T13248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 543.062682][T13248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 543.130034][T13246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2299'. [ 543.338036][T13252] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2299'. [ 543.430384][T13252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2299'. [ 543.552189][T13265] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2302'. [ 544.117159][T13279] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2309'. [ 545.189896][T13294] validate_nla: 4 callbacks suppressed [ 545.189917][T13294] netlink: 'syz.1.2312': attribute type 22 has an invalid length. [ 545.353661][T13294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2312'. [ 546.003739][T13327] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.2319'. [ 546.144273][T13327] netlink: zone id is out of range [ 546.175720][T13327] netlink: get zone limit has 8 unknown bytes [ 546.233622][T13342] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2324'. [ 547.804017][T13355] netlink: 'syz.4.2329': attribute type 12 has an invalid length. [ 547.812055][T13355] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2329'. [ 548.474164][T13378] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.2335'. [ 548.643759][T13383] netlink: 'syz.4.2336': attribute type 21 has an invalid length. [ 548.675351][T13383] IPv6: NLM_F_CREATE should be specified when creating new route [ 548.910270][T13387] netlink: 'syz.4.2336': attribute type 1 has an invalid length. [ 549.595195][T13368] device syzkaller0 entered promiscuous mode [ 550.631176][T13447] netlink: 'syz.0.2350': attribute type 1 has an invalid length. [ 550.639476][T13447] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.2350'. [ 552.081042][T13401] tap0: tun_chr_ioctl cmd 2147767517 [ 552.097337][T13437] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 552.114542][T13437] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 552.132511][T13437] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 552.461275][T13458] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2354'. [ 552.774585][T13473] netlink: 'syz.3.2359': attribute type 21 has an invalid length. [ 553.056619][T13488] netlink: 'syz.0.2363': attribute type 10 has an invalid length. [ 553.097990][T13488] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2363'. [ 553.121293][T13488] device bond0 entered promiscuous mode [ 553.129480][T13488] device bond_slave_1 entered promiscuous mode [ 553.140400][T13488] device batadv_slave_0 entered promiscuous mode [ 553.430991][T13493] netlink: 'syz.3.2364': attribute type 1 has an invalid length. [ 553.445790][T13493] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.2364'. [ 553.474676][T13496] netlink: 'syz.3.2364': attribute type 21 has an invalid length. [ 553.518265][T13494] netlink: 'syz.2.2362': attribute type 22 has an invalid length. [ 553.548426][T13494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2362'. [ 553.734369][T13512] netlink: 'syz.4.2367': attribute type 21 has an invalid length. [ 554.310304][T13539] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2376'. [ 555.003567][T13560] netlink: 'syz.2.2380': attribute type 13 has an invalid length. [ 555.081326][T13560] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.2380'. [ 558.178215][T13631] device bridge_slave_1 left promiscuous mode [ 558.194664][T13631] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.772342][T13653] netlink: 'syz.3.2401': attribute type 10 has an invalid length. [ 560.203028][T13685] delete_channel: no stack [ 560.236788][T13685] delete_channel: no stack [ 560.911119][T13707] device wlan1 entered promiscuous mode [ 561.110192][T13711] pimreg: tun_chr_ioctl cmd 1074812118 [ 561.132971][T13704] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.2413'. [ 561.185404][T13713] netlink: 'syz.4.2416': attribute type 21 has an invalid length. [ 561.259836][T13718] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2415'. [ 562.144831][T13742] netlink: 'syz.2.2421': attribute type 21 has an invalid length. [ 562.152751][T13742] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.2421'. [ 562.215995][T13739] netlink: 'syz.4.2423': attribute type 3 has an invalid length. [ 562.279218][T13739] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2423'. [ 562.476556][T13747] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.2424'. [ 562.949016][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.955432][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.929186][T13801] netlink: 'syz.2.2439': attribute type 7 has an invalid length. [ 563.959102][T13801] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2439'. [ 564.797026][T13804] netlink: 'syz.4.2440': attribute type 2 has an invalid length. [ 564.840160][T13804] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2440'. [ 564.888502][T13807] netlink: 'syz.2.2439': attribute type 10 has an invalid length. [ 564.959126][T13807] device veth1_macvtap left promiscuous mode [ 564.987704][T13819] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2443'. [ 565.636650][T13829] netlink: 'syz.4.2447': attribute type 1 has an invalid length. [ 565.748203][T13829] netlink: 639 bytes leftover after parsing attributes in process `syz.4.2447'. [ 567.803685][T13831] netlink: 639 bytes leftover after parsing attributes in process `syz.4.2447'. [ 568.101848][T13839] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.2450'. [ 568.720487][T13861] netlink: 'syz.3.2454': attribute type 2 has an invalid length. [ 570.027834][T13858] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 570.636300][T13858] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 570.738311][T13861] device 0 entered promiscuous mode [ 571.358403][T13894] netlink: 'syz.1.2463': attribute type 1 has an invalid length. [ 571.487302][T13894] netlink: 126632 bytes leftover after parsing attributes in process `syz.1.2463'. [ 571.534780][T13894] netlink: 8192 bytes leftover after parsing attributes in process `syz.1.2463'. [ 571.731900][T13912] netlink: 'syz.4.2469': attribute type 10 has an invalid length. [ 571.939812][T13912] team0: Device wg1 is of different type [ 572.113353][ T48] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 572.202629][T13921] netlink: 'syz.4.2469': attribute type 10 has an invalid length. [ 572.258304][T13916] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.2470'. [ 573.132159][T13958] netlink: 'syz.2.2479': attribute type 10 has an invalid length. [ 573.183185][T13956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.238500][T13956] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.269767][T13956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 573.286555][T13956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.312292][T13956] batman_adv: batadv0: Interface deactivated: vlan1 [ 573.322987][T13956] batman_adv: batadv0: Removing interface: vlan1 [ 574.787905][T14009] netlink: 'syz.3.2493': attribute type 7 has an invalid length. [ 574.834037][T14009] netlink: 191184 bytes leftover after parsing attributes in process `syz.3.2493'. [ 577.209167][T14084] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.2515'. [ 578.364407][T14124] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2524'. [ 580.717118][T14158] netlink: 'syz.1.2535': attribute type 10 has an invalid length. [ 580.764149][T14158] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.2535'. [ 580.780411][T14161] netlink: 'syz.4.2537': attribute type 29 has an invalid length. [ 580.792623][T14157] netlink: 'syz.2.2536': attribute type 10 has an invalid length. [ 580.833438][T14157] device bridge0 entered promiscuous mode [ 580.898734][T14157] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.905966][T14157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 581.013762][T14157] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 581.174695][T14161] netlink: 'syz.4.2537': attribute type 29 has an invalid length. [ 581.183132][T14164] netlink: 'syz.0.2538': attribute type 2 has an invalid length. [ 581.224266][T14164] netlink: 'syz.0.2538': attribute type 8 has an invalid length. [ 581.254341][T14164] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2538'. [ 581.417382][T14168] device sit0 entered promiscuous mode [ 582.428438][T14195] netlink: 'syz.4.2545': attribute type 1 has an invalid length. [ 582.444024][T14195] netlink: 'syz.4.2545': attribute type 3 has an invalid length. [ 582.462066][T14195] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2545'. [ 583.104924][T14187] device sit0 left promiscuous mode [ 583.319588][T14190] device sit0 entered promiscuous mode [ 583.594370][T14199] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2546'. [ 583.606543][T14199] bridge_slave_1: default FDB implementation only supports local addresses [ 583.886628][T14212] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2549'. [ 583.934173][T14212] bridge_slave_1: default FDB implementation only supports local addresses [ 583.936609][T14210] delete_channel: no stack [ 584.075732][T14210] delete_channel: no stack [ 584.450393][T14219] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2552'. [ 589.306129][T14272] netlink: 'syz.2.2568': attribute type 3 has an invalid length. [ 589.365529][T14272] netlink: 'syz.2.2568': attribute type 4 has an invalid length. [ 589.381196][T14272] netlink: 9067 bytes leftover after parsing attributes in process `syz.2.2568'. [ 589.449232][T14278] netlink: 'syz.0.2570': attribute type 1 has an invalid length. [ 589.506339][T14278] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.2570'. [ 590.311635][T14295] netlink: 'syz.1.2573': attribute type 9 has an invalid length. [ 590.424205][T14295] netlink: 399 bytes leftover after parsing attributes in process `syz.1.2573'. [ 592.338898][T14332] netlink: 'syz.0.2585': attribute type 10 has an invalid length. [ 592.939256][T14344] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 592.984165][T14344] syzkaller0: linktype set to 778 [ 593.776674][T14369] netlink: 'syz.4.2595': attribute type 3 has an invalid length. [ 593.804064][T14369] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.2595'. [ 593.867720][T14365] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2593'. [ 593.881629][T14365] openvswitch: netlink: Message has 6 unknown bytes. [ 594.419430][T14379] device syzkaller0 entered promiscuous mode [ 597.723120][T14406] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2606'. [ 597.861199][T14406] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 597.871077][T14406] device bond_slave_1 left promiscuous mode [ 597.897232][T14406] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 597.924939][T14406] device batadv_slave_0 left promiscuous mode [ 597.950605][T14406] bond0 (unregistering): Released all slaves [ 598.419266][T14439] device syzkaller0 entered promiscuous mode [ 599.766649][T14476] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2624'. [ 601.423598][T14471] netlink: 'syz.3.2622': attribute type 21 has an invalid length. [ 601.432206][T14471] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2622'. [ 601.441563][T14471] netlink: 'syz.3.2622': attribute type 4 has an invalid length. [ 601.449435][T14471] netlink: 'syz.3.2622': attribute type 5 has an invalid length. [ 601.457258][T14471] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2622'. [ 601.742367][T14498] netlink: 'syz.2.2629': attribute type 10 has an invalid length. [ 601.773758][T14498] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2629'. [ 603.272400][T14553] netlink: 'syz.1.2645': attribute type 10 has an invalid length. [ 603.303426][T14553] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2645'. [ 603.412192][T14553] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 603.738312][T14569] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2650'. [ 603.880780][T14572] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2653'. [ 604.510664][T14595] netlink: 'syz.4.2659': attribute type 39 has an invalid length. [ 604.897034][T14611] netlink: 'syz.4.2663': attribute type 10 has an invalid length. [ 604.914522][T14611] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2663'. [ 605.118808][T14620] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2666'. [ 605.590255][T14637] netlink: 'syz.2.2670': attribute type 3 has an invalid length. [ 605.621644][T14637] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2670'. [ 605.761167][T14642] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 605.774940][T14642] syzkaller1: group set to 778 [ 605.815827][T14641] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 605.823303][T14641] IPv6: NLM_F_CREATE should be set when creating new route [ 605.830666][T14641] IPv6: NLM_F_CREATE should be set when creating new route [ 605.838081][T14641] IPv6: NLM_F_CREATE should be set when creating new route [ 606.264469][T14659] netlink: 'syz.4.2674': attribute type 21 has an invalid length. [ 606.790972][T14676] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2680'. [ 607.403620][T14695] netlink: 'syz.1.2686': attribute type 21 has an invalid length. [ 607.426674][T14695] netlink: 'syz.1.2686': attribute type 6 has an invalid length. [ 607.443185][T14695] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2686'. [ 608.142775][T14713] netlink: 'syz.4.2691': attribute type 2 has an invalid length. [ 608.161140][T14713] netlink: 'syz.4.2691': attribute type 1 has an invalid length. [ 608.191519][T14713] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.2691'. [ 608.868510][T14730] ÿÿÿÿÿÿ: renamed from bond_slave_0 [ 611.401451][T14798] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2716'. [ 611.431652][T14798] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2716'. [ 611.453114][T14801] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2716'. [ 611.483601][T14798] netlink: 'syz.2.2716': attribute type 40 has an invalid length. [ 612.184430][T14818] netlink: 'syz.3.2724': attribute type 2 has an invalid length. [ 612.276705][T14818] device 1 entered promiscuous mode [ 612.893787][T14827] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2727'. [ 613.421180][T14849] delete_channel: no stack [ 613.432451][T14849] syz.4.2733[14849] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 613.432516][T14849] syz.4.2733[14849] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 613.803828][T14858] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.2737'. [ 613.904044][T14858] openvswitch: netlink: Flow actions attr not present in new flow. [ 614.998017][T14879] delete_channel: no stack [ 616.057806][T14903] netlink: 'syz.2.2748': attribute type 21 has an invalid length. [ 616.076495][T14903] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 616.084023][T14903] IPv6: NLM_F_CREATE should be set when creating new route [ 616.091374][T14903] IPv6: NLM_F_CREATE should be set when creating new route [ 616.098650][T14903] IPv6: NLM_F_CREATE should be set when creating new route [ 617.743716][T14940] netlink: 'syz.4.2757': attribute type 21 has an invalid length. [ 617.784142][T14940] netlink: 'syz.4.2757': attribute type 6 has an invalid length. [ 617.830909][T14940] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2757'. [ 618.039392][T14947] netlink: 'syz.3.2759': attribute type 10 has an invalid length. [ 618.823406][T14957] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 618.840756][T14957] syzkaller0: linktype set to 778 [ 618.847612][T14958] syzkaller0: tun_chr_ioctl cmd 35108 [ 618.864719][T14958] netlink: 'syz.2.2763': attribute type 28 has an invalid length. [ 618.875190][T14958] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2763'. [ 619.048017][T14964] netlink: 'syz.3.2764': attribute type 6 has an invalid length. [ 619.074180][T14964] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2764'. [ 622.425575][T15033] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2782'. [ 625.084358][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.090715][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.330268][ T48] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 627.957575][T15115] netlink: 'syz.4.2806': attribute type 33 has an invalid length. [ 628.001196][T15115] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2806'. [ 628.027728][T15117] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2807'. [ 628.239977][T15129] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2811'. [ 628.953800][T15142] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 628.994223][T15142] syzkaller0: linktype set to 778 [ 629.012107][T15140] netlink: 'syz.0.2813': attribute type 27 has an invalid length. [ 629.101756][T15145] netlink: 'syz.1.2815': attribute type 2 has an invalid length. [ 629.215515][T15145] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2815'. [ 629.344036][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 630.526546][T15171] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 630.537888][T15171] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 630.547760][T15169] device wlan1 entered promiscuous mode [ 630.564564][T15171] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 630.579291][T15171] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 630.587245][T15171] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 630.595267][T15171] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 630.768279][ T6689] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.072590][ T6689] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.593080][ T6689] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.757357][ T6689] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.218384][ T6689] device 0 left promiscuous mode [ 632.369250][ T6689] device 1 left promiscuous mode [ 632.424622][T15165] chnl_net:caif_netlink_parms(): no params data found [ 632.536496][ T6689] device 0 left promiscuous mode [ 632.624011][ T4277] Bluetooth: hci0: command 0x0409 tx timeout [ 632.749129][ T6689] tipc: Left network mode [ 633.097753][T15165] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.115612][T15165] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.144418][T15165] device bridge_slave_0 entered promiscuous mode [ 633.193489][T15229] netlink: 'syz.0.2832': attribute type 6 has an invalid length. [ 633.235286][T15229] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2832'. [ 633.444570][T15165] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.451908][T15165] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.485315][T15165] device bridge_slave_1 entered promiscuous mode [ 633.520685][T15250] netlink: 'syz.4.2838': attribute type 39 has an invalid length. [ 633.635460][T15250] device veth0_macvtap left promiscuous mode [ 633.971091][T15165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 634.060209][T15272] netlink: 'syz.4.2842': attribute type 3 has an invalid length. [ 634.110029][T15272] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2842'. [ 634.209638][T15165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.545819][T15165] team0: Port device team_slave_0 added [ 634.703971][ T4277] Bluetooth: hci0: command 0x041b tx timeout [ 634.748572][T15165] team0: Port device team_slave_1 added [ 634.823032][T15287] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2846'. [ 634.867941][T15165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 634.903808][T15165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 634.936197][T15165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 634.949732][T15287] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2846'. [ 635.049515][T15165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.060516][T15165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.136038][T15165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 635.178052][T15289] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2846'. [ 635.470736][T15165] device hsr_slave_0 entered promiscuous mode [ 635.548051][T15165] device hsr_slave_1 entered promiscuous mode [ 635.564836][T15165] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 635.572563][T15165] Cannot create hsr debugfs directory [ 635.707047][T15312] netlink: 'syz.0.2851': attribute type 10 has an invalid length. [ 635.737934][T15312] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2851'. [ 636.199233][T15318] netlink: 'syz.0.2854': attribute type 2 has an invalid length. [ 636.566683][T15318] device 1 entered promiscuous mode [ 636.583165][T15328] netlink: 'syz.1.2855': attribute type 10 has an invalid length. [ 636.606667][T15328] team0: Device hsr_slave_0 failed to register rx_handler [ 636.647106][T15329] netlink: 'syz.1.2855': attribute type 10 has an invalid length. [ 636.664880][T15329] team0: Device hsr_slave_0 failed to register rx_handler [ 636.793957][ T4277] Bluetooth: hci0: command 0x040f tx timeout [ 637.379835][T15347] netlink: 'syz.3.2860': attribute type 3 has an invalid length. [ 637.453640][T15347] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2860'. [ 638.126375][ T6689] device hsr_slave_0 left promiscuous mode [ 638.146704][ T6689] device hsr_slave_1 left promiscuous mode [ 638.166787][ T6689] device bridge_slave_0 left promiscuous mode [ 638.174709][ T6689] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.301460][ T6689] device veth0_macvtap left promiscuous mode [ 638.868637][ T4277] Bluetooth: hci0: command 0x0419 tx timeout [ 642.115784][ T6689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 642.371173][ T6689] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 642.380057][ T6689] bond0 (unregistering): Released all slaves [ 642.869567][T15165] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 642.926218][T15165] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 642.955147][T15165] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 643.001855][T15165] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 643.380340][T15165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.558573][ T6691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 643.579664][ T6691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 643.628844][T15165] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.662972][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 643.684845][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 643.705344][ T4735] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.712653][ T4735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.874928][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 643.934696][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 643.976814][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 644.030017][ T4735] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.037258][ T4735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.117601][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 644.159726][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 644.199409][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 644.270213][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 644.352789][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 644.401755][ T6691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 644.421332][ T6691] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 644.529441][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 644.548856][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 644.609497][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 644.634900][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 645.854779][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 645.872815][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 645.932105][T15165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 646.089160][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 646.144794][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 646.175201][T15490] netlink: 'syz.0.2892': attribute type 21 has an invalid length. [ 646.183103][T15490] IPv6: NLM_F_CREATE should be specified when creating new route [ 646.501432][T15165] device veth0_vlan entered promiscuous mode [ 646.529266][T12450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 646.530779][T15503] netlink: 'syz.4.2895': attribute type 29 has an invalid length. [ 646.547045][T12450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 646.579863][T12450] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 646.615045][T12450] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 646.643558][T15503] netlink: 'syz.4.2895': attribute type 29 has an invalid length. [ 646.664885][T15165] device veth1_vlan entered promiscuous mode [ 646.717176][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 646.743336][T15512] netlink: 'syz.4.2895': attribute type 29 has an invalid length. [ 646.772700][T15514] netlink: 'syz.4.2895': attribute type 29 has an invalid length. [ 646.818483][T15503] netlink: 'syz.4.2895': attribute type 29 has an invalid length. [ 646.850738][T15512] netlink: 'syz.4.2895': attribute type 29 has an invalid length. [ 646.957304][ T6689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 646.978243][ T6689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 647.035347][T15165] device veth0_macvtap entered promiscuous mode [ 647.060564][T15165] device veth1_macvtap entered promiscuous mode [ 647.120997][T15165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.149997][T15165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.183284][T15165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 647.201387][ T6689] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 647.217897][ T6689] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 647.245463][ T6689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 647.267680][ T6689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 647.301536][T15165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 647.314481][ T6689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 647.330100][ T6689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 647.352202][T15165] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.387498][T15165] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.413963][T15165] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.438725][T15165] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.707556][T12450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.717442][T15542] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2904'. [ 647.769005][T12450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.058644][T15542] team0: Port device team_slave_0 removed [ 648.076944][T15542] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 648.099869][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 648.156868][T15556] tap0: tun_chr_ioctl cmd 1074025677 [ 648.174886][T15556] tap0: linktype set to 0 [ 648.194488][ T4735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.195146][T15556] tap0: tun_chr_ioctl cmd 2148553947 [ 648.240656][ T4735] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.373467][ T6697] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 650.115627][T15171] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 650.127381][T15171] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 650.137554][T15171] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 650.151670][ T48] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 650.159677][T15171] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 650.167811][T15171] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 651.903155][T15583] netlink: 'syz.2.2816': attribute type 2 has an invalid length. [ 651.911584][T15583] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2816'. [ 652.194872][T12450] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.224283][T15171] Bluetooth: hci5: command 0x0409 tx timeout [ 652.234087][T15608] netlink: 'syz.2.2916': attribute type 1 has an invalid length. [ 652.241878][T15608] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.2916'. [ 652.388218][T12450] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.520707][T12450] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.552702][T15589] chnl_net:caif_netlink_parms(): no params data found [ 652.623679][T12450] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.899736][T15589] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.907913][T15589] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.920311][T15589] device bridge_slave_0 entered promiscuous mode [ 652.930519][T15589] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.938113][T15589] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.948769][T15589] device bridge_slave_1 entered promiscuous mode [ 653.161063][T15589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 653.282116][T15589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 653.492516][T15589] team0: Port device team_slave_0 added [ 653.605346][T15589] team0: Port device team_slave_1 added [ 653.732302][T12450] device 0 left promiscuous mode [ 653.767747][T15589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.795090][T15589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.908929][T15589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.200245][T15589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.223559][T15589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.304305][T15171] Bluetooth: hci5: command 0x041b tx timeout [ 654.319717][T15666] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2932'. [ 654.347885][T15589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.670433][T15589] device hsr_slave_0 entered promiscuous mode [ 654.699951][T15589] device hsr_slave_1 entered promiscuous mode [ 656.384294][T15171] Bluetooth: hci5: command 0x040f tx timeout [ 657.056138][T12450] device hsr_slave_0 left promiscuous mode [ 657.102139][T12450] device veth1_vlan left promiscuous mode [ 657.660975][T12450] team0 (unregistering): Port device geneve1 removed [ 657.823160][T12450] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 658.464293][T15171] Bluetooth: hci5: command 0x0419 tx timeout [ 658.847693][T12450] team0 (unregistering): Port device team_slave_1 removed [ 658.981641][T12450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 659.111597][T12450] team0 (unregistering): Port device bridge_slave_1 removed [ 659.448534][T12450] bond0 (unregistering): Released all slaves [ 659.507695][T15589] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 659.522926][T15758] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 659.533795][T15758] syzkaller1: group set to 778 [ 659.570652][T15766] netlink: 'syz.2.2951': attribute type 6 has an invalid length. [ 659.580839][T15766] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2951'. [ 659.619240][T15589] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 659.674561][T15589] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 659.748866][T15589] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 660.221103][T15589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 660.289336][ T6697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 660.298089][ T6697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 660.341358][T15589] 8021q: adding VLAN 0 to HW filter on device team0 [ 660.358612][ T6697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 660.392046][ T6697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 660.420163][ T6697] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.427403][ T6697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 660.518593][ T6697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 660.545357][ T6697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 660.567768][ T6697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 660.585234][ T6697] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.592409][ T6697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.625694][ T6697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 660.654939][ T6697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 660.693091][ T6691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 660.719510][ T6691] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 660.740913][ T6691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 660.758799][ T6691] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 660.777560][ T6691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 660.805525][ T6691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 660.841085][T15589] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 660.867234][T15589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 660.887594][ T6691] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 660.896753][ T6691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 660.935032][ T6691] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 661.499507][T15797] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.2956'. [ 661.578416][T15797] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 661.968018][T12450] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 661.988415][T12450] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 662.012890][T15589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 662.068271][ T6691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 662.080951][ T6691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 662.129744][ T6691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 662.149894][ T6691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 662.176903][ T6691] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 662.188665][ T6691] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 662.210273][T15589] device veth0_vlan entered promiscuous mode [ 662.241542][T15589] device veth1_vlan entered promiscuous mode [ 662.309587][ T6691] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 662.325055][ T6691] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 662.400018][ T6691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 662.429284][ T6691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 662.471768][T15589] device veth0_macvtap entered promiscuous mode [ 662.502187][T15589] device veth1_macvtap entered promiscuous mode [ 662.535789][T12450] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 662.568328][T12450] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 662.622784][T15589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.640453][T15589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.651551][T15589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.662749][T15589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.696183][T15589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 662.708661][T15848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 662.728852][T15848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 662.836023][T15848] batman_adv: batadv0: Removing interface: netdevsim0 [ 663.282565][T12450] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 663.296984][T12450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 663.310649][T15589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 663.356006][T15589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.405446][T15589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 663.412843][T15853] netlink: 3748 bytes leftover after parsing attributes in process `syz.2.2970'. [ 663.479666][T15589] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.513954][T15589] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.535664][T15589] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.544690][T15589] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.566012][T15854] netlink: 'syz.3.2969': attribute type 21 has an invalid length. [ 663.584205][T15854] netlink: 'syz.3.2969': attribute type 6 has an invalid length. [ 663.593204][T15854] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2969'. [ 663.701682][T15875] netlink: 'syz.4.2976': attribute type 2 has an invalid length. [ 663.718808][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 663.738358][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 663.988971][T12450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.046100][T12450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.103529][ T6691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.131519][ T6691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.133978][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 664.178988][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 664.320830][T15898] netlink: 'syz.0.2990': attribute type 2 has an invalid length. [ 664.426876][T15898] netlink: 'syz.0.2990': attribute type 1 has an invalid length. [ 664.475124][T15898] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.2990'. [ 667.442724][T15945] IPv6: õš: Disabled Multicast RS [ 667.505310][ T4277] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 667.517057][ T4277] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 667.527038][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 667.538591][ T4277] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 667.554374][ T4277] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 667.562047][ T4277] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 667.899587][ T6717] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.920770][T15965] netlink: 'syz.2.2998': attribute type 9 has an invalid length. [ 667.943757][T15965] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.2998'. [ 668.049475][ T6717] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.169876][ T6717] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.365422][ T6717] bond0: (slave netdevsim0): Releasing backup interface [ 668.418052][ T6717] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.526165][T15987] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3007'. [ 668.627660][T15951] chnl_net:caif_netlink_parms(): no params data found [ 668.830065][T16010] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3018'. [ 668.993843][ T6717] tipc: Left network mode [ 669.039200][T15951] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.091993][T15951] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.222434][T15951] device bridge_slave_0 entered promiscuous mode [ 669.513284][T15951] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.528403][T15951] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.587547][T15951] device bridge_slave_1 entered promiscuous mode [ 669.590818][T15171] Bluetooth: hci1: command 0x0409 tx timeout [ 669.708297][T16022] netlink: 'syz.3.3011': attribute type 10 has an invalid length. [ 670.268486][T15951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 670.350931][T15951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 670.422803][T16046] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.3016'. [ 670.578304][T15951] team0: Port device team_slave_0 added [ 670.609581][T15951] team0: Port device team_slave_1 added [ 670.871525][T15951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 670.878751][T15951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 670.945169][T15951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 671.017995][T15951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 671.053819][T15951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 671.142319][T15951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 671.182112][T16056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 671.207207][T16056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 671.250809][T16056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 671.288299][T16056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 671.633555][T16062] netlink: 'syz.2.3017': attribute type 21 has an invalid length. [ 671.656096][T16062] netlink: 'syz.2.3017': attribute type 6 has an invalid length. [ 671.672788][T16062] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3017'. [ 671.680212][T15171] Bluetooth: hci1: command 0x041b tx timeout [ 671.751810][T16070] netlink: 'syz.3.3022': attribute type 7 has an invalid length. [ 672.010443][T15951] device hsr_slave_0 entered promiscuous mode [ 672.088362][T15951] device hsr_slave_1 entered promiscuous mode [ 672.116030][T15951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 672.202946][T15951] Cannot create hsr debugfs directory [ 673.744173][T15171] Bluetooth: hci1: command 0x040f tx timeout [ 673.856386][ T6717] team0: Port device wlan1 removed [ 674.877630][ T6717] device veth1_macvtap left promiscuous mode [ 675.297940][ T6717] team0 (unregistering): Port device geneve1 removed [ 675.378534][ T6717] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 675.450946][T16157] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3038'. [ 675.824379][T15171] Bluetooth: hci1: command 0x0419 tx timeout [ 675.855871][ T6717] team0 (unregistering): Port device hsr_slave_0 removed [ 676.508992][ T6717] team0 (unregistering): Port device team_slave_1 removed [ 676.717590][ T6717] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 677.295542][ T6717] team0 (unregistering): Port device dummy0 removed [ 677.336602][ T6717] team0 (unregistering): Port device bond0 removed [ 677.383833][ T6717] bond0 (unregistering): Released all slaves [ 677.450565][T16176] netlink: 'syz.3.3043': attribute type 39 has an invalid length. [ 677.550956][T16177] netlink: 'syz.3.3043': attribute type 39 has an invalid length. [ 677.956044][T15951] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 678.016563][T15951] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 678.079813][T15951] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 678.218775][T15951] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 678.326827][T16184] netlink: 'syz.3.3047': attribute type 13 has an invalid length. [ 678.397708][T16184] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3047'. [ 678.851743][T15951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.924479][ T6681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 678.938327][ T6681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 678.969934][T15951] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.998964][ T6681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 679.014730][ T6681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 679.084829][ T6681] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.092125][ T6681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.137950][T16208] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3050'. [ 679.157558][ T6681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 679.185596][ T6681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 679.204789][ T6681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 679.234387][ T6681] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.241661][ T6681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.290362][ T6681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 679.338132][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 679.350556][T16215] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 679.365732][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 679.404461][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 679.431887][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 679.457278][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 679.480376][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 679.502886][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 679.521248][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 679.566062][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 679.585361][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 679.627147][T15951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 680.491265][T16242] delete_channel: no stack [ 680.544550][T16242] delete_channel: no stack [ 681.052322][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 681.067709][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 681.103641][T15951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 682.449227][T16283] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3063'. [ 682.563452][T16288] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3065'. [ 682.646108][T16288] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.666069][T16286] netlink: 'syz.0.3064': attribute type 27 has an invalid length. [ 682.697997][T16286] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3064'. [ 683.028184][T16288] device bridge_slave_0 left promiscuous mode [ 683.103921][T16288] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.137803][T16290] netlink: 'syz.2.3065': attribute type 29 has an invalid length. [ 683.312858][T16290] netlink: 'syz.2.3065': attribute type 29 has an invalid length. [ 683.591598][ T6717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 683.613762][ T6717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 683.698311][ T6681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 683.712494][ T6681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 683.903189][T15951] device veth0_vlan entered promiscuous mode [ 683.947301][T16308] netlink: 'syz.1.3067': attribute type 13 has an invalid length. [ 684.038278][T16308] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3067'. [ 684.063396][T16308] syz_tun: refused to change device tx_queue_len [ 684.081434][T16308] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 684.098772][ T6681] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 684.107063][ T6681] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 684.121649][T15951] device veth1_vlan entered promiscuous mode [ 684.139782][T16309] netlink: 'syz.1.3067': attribute type 13 has an invalid length. [ 684.148924][T16309] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3067'. [ 684.165647][T16309] syz_tun: refused to change device tx_queue_len [ 684.211997][T16309] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 684.318035][T16307] netlink: 'syz.1.3067': attribute type 10 has an invalid length. [ 684.468508][T16307] team0: Port device netdevsim0 added [ 684.497135][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 684.516477][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 684.580875][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 684.612488][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 684.656622][T15951] device veth0_macvtap entered promiscuous mode [ 684.712321][T15951] device veth1_macvtap entered promiscuous mode [ 684.839727][T15951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.864720][T15951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.895257][T15951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 684.923060][T12450] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 684.935142][T12450] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 684.963837][T12450] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 684.993246][T12450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 685.016144][T16330] netlink: 'syz.0.3071': attribute type 22 has an invalid length. [ 685.075120][T16330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3071'. [ 685.125416][T15951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.186041][T15951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.229480][T15951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 685.281390][T15951] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.311274][T15951] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.324600][T15951] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.343776][T15951] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.417067][T12450] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 685.440994][T12450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 685.829512][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.836052][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.378956][ T6681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.874029][ T6681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.929830][ T6681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.938883][ T6681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.083963][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 687.092903][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 712.704802][ T2185] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2627 jiffies s: 67425 root: 0x2/. [ 712.719975][ T2185] rcu: blocking rcu_node structures (internal RCU debug): [ 712.727531][ T2185] Sending NMI from CPU 0 to CPUs 1: [ 712.732879][ C1] NMI backtrace for cpu 1 [ 712.732896][ C1] CPU: 1 PID: 16372 Comm: syz.1.3081 Not tainted syzkaller #0 [ 712.732912][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 712.732920][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x2a/0x80 [ 712.732946][ C1] Code: 48 8b 04 24 65 48 8b 15 44 f7 7f 7e 65 8b 0d 45 f7 7f 7e 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 1c 16 00 00 00 <74> 52 8b 8a f8 15 00 00 83 f9 03 75 47 48 8b 8a 00 16 00 00 44 8b [ 712.732958][ C1] RSP: 0018:ffffc900001e0500 EFLAGS: 00000046 [ 712.732973][ C1] RAX: ffffffff8185fe0b RBX: ffff8880793fbb80 RCX: 0000000000000100 [ 712.732985][ C1] RDX: ffff8880793fbb80 RSI: 0000000000000000 RDI: 0000000000000000 [ 712.732995][ C1] RBP: 0000000000000011 R08: ffff8880793fbb87 R09: 1ffff1100f27f770 [ 712.733006][ C1] R10: dffffc0000000000 R11: ffffed100f27f771 R12: 000000000000400c [ 712.733016][ C1] R13: 0000000000000101 R14: 0000000000000000 R15: 0000000000000000 [ 712.733026][ C1] FS: 00007f9b47fd56c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 712.733040][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 712.733051][ C1] CR2: 00007f9d64fe1000 CR3: 00000000757f2000 CR4: 00000000003506e0 [ 712.733067][ C1] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000200000000300 [ 712.733077][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 712.733087][ C1] Call Trace: [ 712.733092][ C1] [ 712.733097][ C1] tracing_gen_ctx_irq_test+0x9b/0x150 [ 712.733121][ C1] perf_trace_buf_update+0xa8/0x230 [ 712.733138][ C1] ? perf_tp_event+0xc30/0xc30 [ 712.733159][ C1] ? perf_trace_buf_alloc+0x300/0x300 [ 712.733182][ C1] perf_tp_event+0x217/0xc30 [ 712.733202][ C1] ? perf_tp_event+0xc30/0xc30 [ 712.733224][ C1] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 712.733274][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 712.733288][ C1] ? sched_clock_cpu+0x6e/0x260 [ 712.733307][ C1] perf_trace_run_bpf_submit+0xf3/0x1c0 [ 712.733332][ C1] perf_trace_preemptirq_template+0x268/0x320 [ 712.733352][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 712.733372][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 712.733393][ C1] ? __irq_exit_rcu+0x147/0x230 [ 712.733408][ C1] ? irq_exit_rcu+0x20/0x20 [ 712.733425][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 712.733442][ C1] trace_irq_enable_rcuidle+0xd3/0x140 [ 712.733464][ C1] trace_hardirqs_on+0x24/0x40 [ 712.733481][ C1] asm_sysvec_irq_work+0x16/0x20 [ 712.733498][ C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 712.733514][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 d2 33 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 712.733526][ C1] RSP: 0018:ffffc900001e0ac0 EFLAGS: 00000206 [ 712.733538][ C1] RAX: 6ec39bc361cf5500 RBX: 1ffff9200003c160 RCX: 6ec39bc361cf5500 [ 712.733549][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c10a0 RDI: ffffffff8adf0d20 [ 712.733559][ C1] RBP: ffffc900001e0bb0 R08: ffff8880b8f3580b R09: 1ffff110171e6b01 [ 712.733570][ C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: 0000000000000246 [ 712.733580][ C1] R13: dffffc0000000000 R14: ffff8880b8f3b900 R15: 0000000000000002 [ 712.733602][ C1] ? mac80211_hwsim_beacon_tx+0x61e/0xae0 [ 712.733622][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 712.733645][ C1] __rcu_read_unlock+0x78/0xd0 [ 712.733658][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 712.733679][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 712.733694][ C1] ieee80211_iterate_active_interfaces_atomic+0x156/0x170 [ 712.733717][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 712.733740][ C1] __hrtimer_run_queues+0x54a/0xd50 [ 712.733762][ C1] ? hw_scan_work+0xf50/0xf50 [ 712.733788][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 712.733804][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 712.733828][ C1] hrtimer_run_softirq+0x183/0x2a0 [ 712.733847][ C1] handle_softirqs+0x2a1/0x930 [ 712.733869][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 712.733895][ C1] ? do_softirq+0x210/0x210 [ 712.733916][ C1] __irq_exit_rcu+0x13b/0x230 [ 712.733931][ C1] ? irq_exit_rcu+0x20/0x20 [ 712.733954][ C1] irq_exit_rcu+0x5/0x20 [ 712.733966][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 712.733983][ C1] [ 712.733988][ C1] [ 712.733993][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 712.734011][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 712.734028][ C1] Code: 2e 0f 1f 84 00 00 00 00 00 90 53 48 89 fb e8 17 00 00 00 48 8b 3d 90 6c 9d 0c 48 89 de 5b e9 97 41 50 00 00 00 cc cc 00 00 cc <48> 8b 04 24 65 48 8b 0d a4 fa 7f 7e 65 8b 15 a5 fa 7f 7e 81 e2 00 [ 712.734040][ C1] RSP: 0018:ffffc90004c7fa08 EFLAGS: 00000283 [ 712.734052][ C1] RAX: 000000000000000a RBX: dffffc0000000000 RCX: 0000000000000001 [ 712.734062][ C1] RDX: ffffffff8a1eb916 RSI: ffffffff8e08f740 RDI: 0000000000000058 [ 712.734072][ C1] RBP: ffff0000ffffff00 R08: ffff8880793fbb80 R09: 000000000000000a [ 712.734082][ C1] R10: 0000000000000078 R11: 0000000000000000 R12: ffff0000ffffff00 [ 712.734093][ C1] R13: 1ffffffff15b0ce4 R14: ffffffff8ad86724 R15: 0000000000000033 [ 712.734109][ C1] ? format_decode+0x776/0x1300 [ 712.734129][ C1] format_decode+0x88e/0x1300 [ 712.734151][ C1] vsnprintf+0xef/0x1c20 [ 712.734173][ C1] snprintf+0xe5/0x140 [ 712.734192][ C1] ? vscnprintf+0x80/0x80 [ 712.734208][ C1] ? tomoyo_check_acl+0x378/0x3f0 [ 712.734232][ C1] tomoyo_path_number_perm+0x3de/0x650 [ 712.734251][ C1] ? tomoyo_path_number_perm+0x205/0x650 [ 712.734269][ C1] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 712.734313][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 712.734333][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 712.734355][ C1] security_file_ioctl+0x6c/0xa0 [ 712.734375][ C1] __se_sys_ioctl+0x48/0x170 [ 712.734397][ C1] do_syscall_64+0x4c/0xa0 [ 712.734416][ C1] ? clear_bhb_loop+0x60/0xb0 [ 712.734432][ C1] ? clear_bhb_loop+0x60/0xb0 [ 712.734450][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 712.734467][ C1] RIP: 0033:0x7f9b49d9c819 [ 712.734480][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 712.734492][ C1] RSP: 002b:00007f9b47fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 712.734507][ C1] RAX: ffffffffffffffda RBX: 00007f9b4a016090 RCX: 00007f9b49d9c819 [ 712.734518][ C1] RDX: 0000200000000740 RSI: 00000000000089e2 RDI: 0000000000000007 [ 712.734528][ C1] RBP: 00007f9b49e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 712.734537][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 712.734546][ C1] R13: 00007f9b4a016128 R14: 00007f9b4a016090 R15: 00007ffc48975cc8 [ 712.734566][ C1]