last executing test programs: 9m28.486610129s ago: executing program 1 (id=1079): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc786b409ac930c90ff90f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d85893f229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09e3187a10d905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5de0900000000000000cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367638cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e1217c1342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c67df4c6505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a2d4f12e8e717eaaa2a6d14fee0c15f36c203dbc7c06128bec84231d43e152ef19ce027436fb4ebb9fce431b913f4817597a6f53d1626f9d1cb7b36fb18ac19547a9b20ede70c81a75686cea85dcd34408128da7cab045541bc6b9a0a79f63f2e7646356e04b977c9f47467537015240b974184be9c54b7c628ae4d97ebdb06070344468994afbaac71e5ffac2c61d9af66f9de2760a38e968a781528531c1c936a02065be48f1eee77be878873206d65bd0b1241fab9139abd7f40febe81fed3684e6b59273da01f1743c6a5df300ec59c65e8174fc2d95a62ca7b937289ad14107333007eab833a5849eb19f18ae41743dfb949377e"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 9m27.686568277s ago: executing program 1 (id=1081): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000014"], 0x48) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r2) 9m27.418622566s ago: executing program 1 (id=1083): perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x7, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x6, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9m26.99825894s ago: executing program 1 (id=1087): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000006a000085000000860000008500000007000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000014646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) 9m22.480904966s ago: executing program 1 (id=1097): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0xc8, 0x0, 0x0, 0xdb6c, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xff, 0x3, 0x0, 0x0, 0x0, 0x80, 0x264, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, @perf_config_ext={0x8dd3, 0xffffffffffffffff}, 0x2010, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 9m21.701041573s ago: executing program 1 (id=1103): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x60, 0x0, 0x1, 0x6, 0x0, 0x5, 0x10, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfffffffa, 0x6, @perf_bp={&(0x7f0000000040), 0xc}, 0xd213, 0xce65, 0x8000, 0x0, 0x1, 0x81, 0x0, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2a, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0xe}, 0x410, 0x2000001, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x80}, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000060000000450000007"], 0x48) bpf$PROG_LOAD(0x2, 0x0, 0x0) sendmsg$sock(r3, 0x0, 0x20040851) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1c, 0xd, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000003dc7000002"], 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) ioctl$TUNSETLINK(r6, 0x541b, 0x200000000000) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8983, &(0x7f0000000080)) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 9m6.307172353s ago: executing program 32 (id=1103): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x60, 0x0, 0x1, 0x6, 0x0, 0x5, 0x10, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfffffffa, 0x6, @perf_bp={&(0x7f0000000040), 0xc}, 0xd213, 0xce65, 0x8000, 0x0, 0x1, 0x81, 0x0, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2a, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0xe}, 0x410, 0x2000001, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x80}, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000060000000450000007"], 0x48) bpf$PROG_LOAD(0x2, 0x0, 0x0) sendmsg$sock(r3, 0x0, 0x20040851) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1c, 0xd, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000003dc7000002"], 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) ioctl$TUNSETLINK(r6, 0x541b, 0x200000000000) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8983, &(0x7f0000000080)) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 7m46.262263738s ago: executing program 2 (id=1380): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc) 7m45.679891178s ago: executing program 2 (id=1381): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000001040), 0xadc, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m45.471966745s ago: executing program 2 (id=1384): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000014"], 0x48) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r2) 7m45.287544022s ago: executing program 2 (id=1387): close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='N-'], 0x6a) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_netprio_ifpriomap(r3, &(0x7f0000000080)=ANY=[], 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="190000000400000004000000ffff01000000000077c583c50d3c78cdcbd1f314dc3c3b8b58f28c6f4431bfce4a06af73fdc6841936f2ea7cedd2b5e5f09488dfe246c29691274535d3ec912329d375a53f731ec78bd22093fced87dc4b2a2e8c7a9fd9f1212aafe5a26f73", @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES64, @ANYBLOB="000000000200"/17], 0x48) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x51, &(0x7f00000000c0), 0x4c}, 0x4010) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8983, &(0x7f0000000080)) 7m43.646214999s ago: executing program 2 (id=1395): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r0, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2, 0x8, 0x0, 0x0}}, 0x10) 7m43.111642397s ago: executing program 2 (id=1396): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000b000000070000000000100f0300000003000104000000000000ffff3c5f5b000000000000000f010000005d00000000000000"], &(0x7f00000002c0)=""/254, 0x4b, 0xfe, 0x1}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6349363006"], 0xfdef) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_tracing={0x1a, 0x14, &(0x7f00000002c0)=ANY=[@ANYRES64], &(0x7f00000001c0)='GPL\x00', 0x8000, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x4, 0xf, 0xff, 0x8}, 0x10, 0x1f514, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0xc9, 0x0, &(0x7f0000000440)="b41b6b95b716fcac0a5b21221b0a3269fc6875ef6a01e3f8b9b69957a45eb8f037b23f94e2d8091a26ae2141b0c0865a0a448dfc1fed605f46ecacd340e5b542a6a9bdb52bd85e04bca5dbd03277afbcd656acc60e4722f44e1ac9fc6818e9afa66c0ebdc5e913752a9a6b34129759f6c92e892ca62b3ae22faaa3a3789daa47cab803117660964879c9ad7739feee204ac726d9eed0fd806d560fd9d7d633e92e94591667866c58b9aa35600851b6869ec994b91877bc728d0fa139862e1978694ef5f031c39eefce", 0x0, 0xa, 0x0, 0xb, 0x0, &(0x7f0000000080)="7dc6f5f18892f89888d267", 0x0, 0x2, 0x0, 0x4}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="007a707573657420006370750806"], 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000039000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000340), &(0x7f0000000380)=r2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r3, &(0x7f0000000700)="20af", &(0x7f0000000180)=""/203}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfdef) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x43b00000, 0x0, 0x5b, 0x0, 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000380), 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0100000006000000080000000800000040000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000073953ee7b36c779e14a16de665bbf5ab629f4437359fd8863d659a61e3dc47be45d3636f765d411628477401630b655f37c55db3848d7f0235f98c897dd805dba77228ed96bac1d8a534ff440d4894f2d91efe0bafae3468bf63bb353ddfa82cd2a45396d567c5130dd6ef8fbfc251a34ee844eb0bb613e1b3f9dafad86099a37e9f37f533a7cc30940cb7b9291bbc10a7079cd437f676b44cd8c8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7m28.020748186s ago: executing program 33 (id=1396): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000b000000070000000000100f0300000003000104000000000000ffff3c5f5b000000000000000f010000005d00000000000000"], &(0x7f00000002c0)=""/254, 0x4b, 0xfe, 0x1}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6349363006"], 0xfdef) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_tracing={0x1a, 0x14, &(0x7f00000002c0)=ANY=[@ANYRES64], &(0x7f00000001c0)='GPL\x00', 0x8000, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x4, 0xf, 0xff, 0x8}, 0x10, 0x1f514, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0xc9, 0x0, &(0x7f0000000440)="b41b6b95b716fcac0a5b21221b0a3269fc6875ef6a01e3f8b9b69957a45eb8f037b23f94e2d8091a26ae2141b0c0865a0a448dfc1fed605f46ecacd340e5b542a6a9bdb52bd85e04bca5dbd03277afbcd656acc60e4722f44e1ac9fc6818e9afa66c0ebdc5e913752a9a6b34129759f6c92e892ca62b3ae22faaa3a3789daa47cab803117660964879c9ad7739feee204ac726d9eed0fd806d560fd9d7d633e92e94591667866c58b9aa35600851b6869ec994b91877bc728d0fa139862e1978694ef5f031c39eefce", 0x0, 0xa, 0x0, 0xb, 0x0, &(0x7f0000000080)="7dc6f5f18892f89888d267", 0x0, 0x2, 0x0, 0x4}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="007a707573657420006370750806"], 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000039000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000340), &(0x7f0000000380)=r2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r3, &(0x7f0000000700)="20af", &(0x7f0000000180)=""/203}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfdef) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x43b00000, 0x0, 0x5b, 0x0, 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000380), 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0100000006000000080000000800000040000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000073953ee7b36c779e14a16de665bbf5ab629f4437359fd8863d659a61e3dc47be45d3636f765d411628477401630b655f37c55db3848d7f0235f98c897dd805dba77228ed96bac1d8a534ff440d4894f2d91efe0bafae3468bf63bb353ddfa82cd2a45396d567c5130dd6ef8fbfc251a34ee844eb0bb613e1b3f9dafad86099a37e9f37f533a7cc30940cb7b9291bbc10a7079cd437f676b44cd8c8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6m22.092977056s ago: executing program 4 (id=1678): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x66, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 6m21.600490553s ago: executing program 4 (id=1679): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00', 0x800}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 6m20.559739279s ago: executing program 4 (id=1683): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x42}, 0x28) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127) 6m20.279192998s ago: executing program 4 (id=1684): bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x81, 0x4, 0x8000, 0x16, 0xffffffffffffffff, 0xffffffff}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 6m18.831430868s ago: executing program 4 (id=1689): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x5, 0x1000000000000, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000a80), 0x1007, r3}, 0x38) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700368df3757f0086dd6317ce8000377ac9b0e0865a6596aff57b000000000000000000000000007f"], 0xffffffffffffffc7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a00000000a3f500950004000000010045"], 0x0, 0x5}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r0, 0x1, 0x2f, &(0x7f0000000040), 0x3b) 6m18.171970021s ago: executing program 4 (id=1692): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x190, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0xc}, 0x2018, 0x1, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 6m2.995909163s ago: executing program 34 (id=1692): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x190, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0xc}, 0x2018, 0x1, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.32726576s ago: executing program 6 (id=4439): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000380)="e0c7d48de945", 0x6}], 0x1}, 0x81) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 2.110817107s ago: executing program 6 (id=4444): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.799793458s ago: executing program 6 (id=4451): socket$kcm(0x2b, 0x1, 0x0) r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r0}, 0x8) r2 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x6, 0x10000}, 0x8100, 0xcdb, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2008a0c1) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000040)={r1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000002b80)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000061c6e1fdb1d79ba5"], 0x48) sendmsg$kcm(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a19c9d8714060014000000000508000a0043000040a80012001200014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f661", 0x6e}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a325fb5e811fead55530751e6f4bc4b40d94743ed5bd8ec1fff7b0abcc6eaabeb7a2f5f985467a8db", 0x6a}], 0x2}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400), 0xc) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000000f000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x14, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa28f, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x4f, &(0x7f0000000300)=""/79, 0x40f00, 0x40, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000380)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x2, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff, r5, r6, r7, r8], &(0x7f0000000680)=[{0x3, 0x1, 0x5, 0x6}, {0x5, 0x4, 0x3, 0xb}, {0x4, 0x5, 0x10, 0xb}, {0x5, 0x1, 0xf, 0xb}, {0x1, 0x1, 0x1, 0xa}], 0x10, 0x6}, 0x94) 1.716223311s ago: executing program 7 (id=4452): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @dev}) 1.385748572s ago: executing program 5 (id=4457): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000840)={&(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000340)="65f95c", 0x3}, {0x0}], 0x2}, 0x4000) 1.375107732s ago: executing program 3 (id=4458): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)}, 0x0) 1.143616051s ago: executing program 7 (id=4460): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x38) 1.079829093s ago: executing program 3 (id=4461): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.065503383s ago: executing program 0 (id=4462): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x4102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)="1800000069006bcd8e3fe3dc6e00000000", 0x11}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$kcm(0x2, 0x5, 0x84) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1400000043007f029ea6b698e82966af5c0953a6", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x10001, 0x0, 0xfffffffc, 0x2}, {0x2}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a"], 0xfe33) recvmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018edff00000000000c0000000c00000002000000030000000000008c000000000000"], 0x0, 0x26, 0x0, 0x4}, 0x28) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080)) 1.035941244s ago: executing program 5 (id=4463): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 855.507201ms ago: executing program 3 (id=4464): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x4e, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x7000000, &(0x7f0000000000)="e2", &(0x7f00000002c0)="605d2a5de8c22c301d05c189d58a7514e67c7ec8e92ff58edc6a54d36fe4717af1adaaff852107929146f653ac43b6df49db674372d2a62ffde6c3246c330ea3cee19f08b56a4d6147", 0x2}, 0x2c) 823.764461ms ago: executing program 7 (id=4465): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1d, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000b00000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000414000000b7030000400100000000000057bdf9bc8500000000005509010000000000950000000000000018120000cb3bf407e3f652057d6184e79207a2618137f91507c43d294607de8240cef5ae2195a229c75fc1a1d5de81d5b2f2", @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000000000008500000085000000b70000000000"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x30598, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e00000016400000000000005c00000000002816"], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random=' \x00'}) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$kcm(0xa, 0x2, 0x3a) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'team0\x00', @random="2b0100004ec6"}) 767.843374ms ago: executing program 0 (id=4466): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000001a000000d40a000020000000950000000051d900"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) 720.048035ms ago: executing program 5 (id=4467): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000002a00000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0500"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$unix(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="e687", 0x2}], 0x1, 0x0, 0x0, 0x44190}, 0x2004c001) 709.943666ms ago: executing program 3 (id=4468): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x1, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000020000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000028850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x41000, 0x34}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x1, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x85c, 0x0, @perf_config_ext={0x101}, 0x120ca, 0xeb, 0x0, 0x5, 0x59f4}, 0xffffffffffffffff, 0x0, r4, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, 0x0) sendmsg$kcm(r3, &(0x7f0000000340)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be72276ba7829a66886c0078fd7e6c5b317c6c8197767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403463178110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000040004000000002000000000000000000000300000000030000000200000000000000000000000000000105000000200000000000000000000003000000000228000002000000"], 0x0, 0x5a}, 0x28) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)=0x20) bpf$ITER_CREATE(0x21, &(0x7f00000017c0)={r2}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a7e6dc9ab1e7b00ff000000007110bf00000000009500"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) recvmsg$unix(r5, 0x0, 0x81) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xfffffffffffffefa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 596.347539ms ago: executing program 6 (id=4469): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000380)="e0c7d48de945", 0x6}], 0x1}, 0x81) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 568.18434ms ago: executing program 7 (id=4470): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034008410000002000189215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c2000000c000000050000000200005f00b99bb995197bfae5ed681964e4f5b07daad75570b898a70dd350ba582e3b0f18b6c9dacb2376aa81d8675e15fa66c1e309a3b56838ff7435b3ad6072b4c6b0121952957076437f32c0dd7c0801848d54672bc26b7c8a4e274dccba2e4da9c48ea02ad104f53fda710285ed919bff04daa9784d16f739631fb77c30af44895753dfc424b9a65dee40726f6a7b4509d3c6a5c31d573dd52fca5021b7ff"], &(0x7f0000000bc0)=""/205, 0x29, 0xcd, 0x1}, 0x28) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x5411, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) socket$kcm(0x10, 0x2, 0x0) 516.132402ms ago: executing program 0 (id=4471): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)}, 0x0) 515.980382ms ago: executing program 5 (id=4472): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80, 0x0}, 0xd0a0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000003d000000000000000000158500000029"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) 435.740845ms ago: executing program 0 (id=4473): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) 371.595927ms ago: executing program 6 (id=4474): socket$kcm(0x10, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x1, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x85c, 0x0, @perf_config_ext={0x101}, 0x120ca, 0xeb, 0x0, 0x5, 0x59f4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, &(0x7f0000000180)=0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 324.514409ms ago: executing program 5 (id=4475): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x4, 0x1, 0x0, 0x1, 0xba7e}, 0x50) 323.717129ms ago: executing program 3 (id=4476): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x4102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)="1800000069006bcd8e3fe3dc6e00000000010000", 0x14}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$kcm(0x2, 0x5, 0x84) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1400000043007f029ea6b698e82966af5c0953a6", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x10001, 0x0, 0xfffffffc, 0x2}, {0x2}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a"], 0xfe33) recvmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018edff00000000000c0000000c00000002000000030000000000008c000000000000"], 0x0, 0x26, 0x0, 0x4}, 0x28) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080)) 276.35751ms ago: executing program 7 (id=4477): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 204.005003ms ago: executing program 0 (id=4478): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x4e, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x7000000, &(0x7f0000000000)="e2", &(0x7f00000002c0)="605d2a5de8c22c301d05c189d58a7514e67c7ec8e92ff58edc6a54d36fe4717af1adaaff852107929146f653ac43b6df49db674372d2a62ffde6c3246c330ea3cee19f08b56a4d6147", 0x2}, 0x2c) 145.014805ms ago: executing program 5 (id=4479): socket$kcm(0x2b, 0x1, 0x0) r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r0}, 0x8) r2 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x6, 0x10000}, 0x8100, 0xcdb, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2008a0c1) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000040)={r1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000002b80)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000061c6e1fdb1d79ba5"], 0x48) sendmsg$kcm(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a19c9d8714060014000000000508000a0043000040a80012001200014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f661", 0x6e}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a325fb5e811fead55530751e6f4bc4b40d94743ed5bd8ec1fff7b0abcc6eaabeb7a2f5f985467a8db", 0x6a}], 0x2}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400), 0xc) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000000f000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x14, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa28f, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x4f, &(0x7f0000000300)=""/79, 0x40f00, 0x40, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000380)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x2, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff, r5, r6, r7, r8], &(0x7f0000000680)=[{0x3, 0x1, 0x5, 0x6}, {0x5, 0x4, 0x3, 0xb}, {0x4, 0x5, 0x10, 0xb}, {0x5, 0x1, 0xf, 0xb}, {0x1, 0x1, 0x1, 0xa}], 0x10, 0x6}, 0x94) 107.346676ms ago: executing program 3 (id=4480): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1d, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000b00000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000414000000b7030000400100000000000057bdf9bc8500000000005509010000000000950000000000000018120000cb3bf407e3f652057d6184e79207a2618137f91507c43d294607de8240cef5ae2195a229c75fc1a1d5de81d5b2f2", @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000000000008500000085000000b70000000000"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x30598, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e00000016400000000000005c00000000002816"], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random=' \x00'}) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$kcm(0xa, 0x2, 0x3a) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'team0\x00', @random="2b0100004ec6"}) 73.743337ms ago: executing program 6 (id=4481): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, 0xffffffffffffffff, 0x2000000}, 0xc) 107.78µs ago: executing program 0 (id=4482): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r0, &(0x7f00000000c0)}, 0x20) 0s ago: executing program 7 (id=4483): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1}, 0x0) kernel console output (not intermixed with test programs): m5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.836339][ T7740] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.954282][ T4309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.968366][ T4309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.998066][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 389.046479][ T4309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.068078][ T4309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.091761][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 397.007225][ T8038] device wg2 entered promiscuous mode [ 408.564320][ T8183] device wg2 entered promiscuous mode [ 410.257910][ T8215] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.266165][ T8215] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.322138][ T8215] device bridge0 left promiscuous mode [ 414.570362][ T8275] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.577722][ T8275] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.448458][ T8279] device wg2 entered promiscuous mode [ 415.730771][ T8298] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.739051][ T8298] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.559224][ T8353] device vlan0 entered promiscuous mode [ 420.304327][ T8367] device syzkaller0 entered promiscuous mode [ 439.144899][ T8639] device bridge_slave_1 left promiscuous mode [ 439.184644][ T8639] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.681382][ T8639] device bridge_slave_0 left promiscuous mode [ 439.739987][ T8639] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.144907][ T8724] device wg2 left promiscuous mode [ 443.265348][ T8724] device wg2 entered promiscuous mode [ 443.439007][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 443.445428][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.270406][ T8746] device syzkaller0 entered promiscuous mode [ 450.699331][ T8821] device bridge_slave_1 left promiscuous mode [ 450.750879][ T8821] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.088277][ T8821] device bridge_slave_0 left promiscuous mode [ 451.138254][ T8821] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.452506][ T9077] device syzkaller0 entered promiscuous mode [ 469.732650][ T4272] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 469.742465][ T4272] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 469.767791][ T4272] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 469.786700][ T4272] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 469.795249][ T4272] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 469.802582][ T4272] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 471.836736][ T4283] Bluetooth: hci0: command 0x0409 tx timeout [ 472.439075][ T9088] device syzkaller0 entered promiscuous mode [ 472.636862][ T9114] device syzkaller0 entered promiscuous mode [ 473.914789][ T4283] Bluetooth: hci0: command 0x041b tx timeout [ 475.994769][ T4283] Bluetooth: hci0: command 0x040f tx timeout [ 477.802370][ T9102] chnl_net:caif_netlink_parms(): no params data found [ 478.077271][ T4272] Bluetooth: hci0: command 0x0419 tx timeout [ 478.359678][ T9102] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.391944][ T9102] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.491622][ T9102] device bridge_slave_0 entered promiscuous mode [ 478.654237][ T9102] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.793912][ T9102] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.846261][ T9102] device bridge_slave_1 entered promiscuous mode [ 479.032988][ T9102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.127496][ T9102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.648526][ T9102] team0: Port device team_slave_0 added [ 479.747360][ T9102] team0: Port device team_slave_1 added [ 480.120150][ T9102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.354755][ T9102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.835559][ T9102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.977039][ T9102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.984083][ T9102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.510118][ T9102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.835698][ T9102] device hsr_slave_0 entered promiscuous mode [ 481.906519][ T9102] device hsr_slave_1 entered promiscuous mode [ 481.998008][ T9102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 482.064703][ T9102] Cannot create hsr debugfs directory [ 483.183283][ T9102] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 483.254863][ T9102] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 483.323982][ T9102] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 483.407257][ T9102] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 483.760863][ T9102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.809980][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 483.819048][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 483.839510][ T9102] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.860798][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 483.879611][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 483.912770][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.920163][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.945058][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 484.043760][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 484.071488][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 484.169899][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.177216][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.334138][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 484.411561][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 484.494233][ T8655] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.573279][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 484.612229][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 484.631306][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 484.762438][ T8655] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.935817][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 485.038321][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 485.090116][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 485.152314][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 485.278808][ T9102] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 485.295499][ T9102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 485.338582][ T8655] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.448546][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 485.463971][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 485.548536][ T8655] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.450583][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 486.463129][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 486.548696][ T9102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.412883][ T8655] device hsr_slave_0 left promiscuous mode [ 490.425195][ T8655] device hsr_slave_1 left promiscuous mode [ 490.441462][ T8655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.450312][ T8655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.470824][ T8655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.490082][ T8655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.535060][ T8655] device veth1_macvtap left promiscuous mode [ 490.541178][ T8655] device veth0_macvtap left promiscuous mode [ 490.552351][ T8655] device veth1_vlan left promiscuous mode [ 491.270025][ T8655] team0 (unregistering): Port device team_slave_1 removed [ 491.311706][ T8655] team0 (unregistering): Port device team_slave_0 removed [ 491.352960][ T8655] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 491.392529][ T8655] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 491.769279][ T8655] bond0 (unregistering): Released all slaves [ 491.927535][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 491.957679][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 492.069836][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 492.086891][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 492.131632][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 492.154106][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 492.179869][ T9102] device veth0_vlan entered promiscuous mode [ 492.462973][ T9102] device veth1_vlan entered promiscuous mode [ 492.756776][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 492.779506][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 492.813844][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 492.850402][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 493.002906][ T9102] device veth0_macvtap entered promiscuous mode [ 493.025526][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 493.038322][ T9102] device veth1_macvtap entered promiscuous mode [ 493.213722][ T9102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.231001][ T9102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.247874][ T9102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.262008][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 493.325028][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 493.430921][ T9102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.454485][ T9102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.497932][ T9102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.523809][ T9102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.574648][ T9102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.615565][ T9102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.629546][ T9102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.640298][ T9102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.655448][ T9102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.666734][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 493.686938][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 493.718552][ T9102] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.734903][ T9102] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.784619][ T9102] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.824841][ T9102] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.904728][ T4323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.912590][ T4323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.964179][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 495.051146][ T7792] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.071952][ T7792] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.082650][ T8655] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 495.570209][ T9416] device syzkaller0 entered promiscuous mode [ 496.715340][ T4283] Bluetooth: hci5: command 0x0406 tx timeout [ 501.259837][ T9524] device syzkaller0 entered promiscuous mode [ 504.905049][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 504.911443][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.748907][ T9587] device syzkaller0 entered promiscuous mode [ 510.026399][ T9601] device syzkaller0 entered promiscuous mode [ 510.076672][ T9620] device syzkaller0 entered promiscuous mode [ 514.131161][ T9668] device syzkaller0 entered promiscuous mode [ 516.767412][ T9711] device syzkaller0 entered promiscuous mode [ 522.882539][ T9788] device syzkaller0 entered promiscuous mode [ 525.997995][ T9812] device syzkaller0 entered promiscuous mode [ 526.045729][ T9824] device syzkaller0 entered promiscuous mode [ 532.652611][ T9896] device syzkaller0 entered promiscuous mode [ 543.970633][T10042] device syzkaller0 entered promiscuous mode [ 551.530742][T10127] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.538333][T10127] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.481676][T10158] device syzkaller0 entered promiscuous mode [ 556.430819][T10179] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 556.440473][T10179] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 556.454169][T10179] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 556.463920][T10179] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 556.491438][T10179] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 556.504105][T10179] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 558.554776][T10179] Bluetooth: hci4: command 0x0409 tx timeout [ 560.634774][T10179] Bluetooth: hci4: command 0x041b tx timeout [ 561.003655][T10201] device bridge_slave_1 left promiscuous mode [ 561.011623][T10201] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.026990][T10201] device bridge_slave_0 left promiscuous mode [ 561.033316][T10201] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.354325][ T56] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.557205][ T56] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.749971][ T56] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.122468][ T56] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.714962][T10179] Bluetooth: hci4: command 0x040f tx timeout [ 562.781992][T10178] chnl_net:caif_netlink_parms(): no params data found [ 563.817996][T10243] device veth0_vlan left promiscuous mode [ 563.842674][T10243] device veth0_vlan entered promiscuous mode [ 564.049770][T10178] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.065326][T10178] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.111126][T10178] device bridge_slave_0 entered promiscuous mode [ 564.254783][T10178] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.270481][T10178] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.325681][T10178] device bridge_slave_1 entered promiscuous mode [ 564.403557][T10178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.462386][T10178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.794746][T10179] Bluetooth: hci4: command 0x0419 tx timeout [ 564.870759][T10178] team0: Port device team_slave_0 added [ 565.135624][T10178] team0: Port device team_slave_1 added [ 565.516166][T10178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.553752][T10178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 565.725342][T10178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 565.840280][T10178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 565.863182][T10178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 565.975504][T10178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.317986][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 566.324338][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 571.037125][T10178] device hsr_slave_0 entered promiscuous mode [ 571.058114][T10178] device hsr_slave_1 entered promiscuous mode [ 571.107218][T10178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 571.165811][T10178] Cannot create hsr debugfs directory [ 571.662206][ T56] device hsr_slave_0 left promiscuous mode [ 571.687807][ T56] device hsr_slave_1 left promiscuous mode [ 571.725055][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 571.732579][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 571.767769][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 571.789984][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 571.834151][ T56] device veth1_macvtap left promiscuous mode [ 571.848715][ T56] device veth0_macvtap left promiscuous mode [ 571.858024][ T56] device veth1_vlan left promiscuous mode [ 571.864329][ T56] device veth0_vlan left promiscuous mode [ 573.584300][ T56] team0 (unregistering): Port device team_slave_1 removed [ 573.659329][ T56] team0 (unregistering): Port device team_slave_0 removed [ 573.728590][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 573.804119][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 574.338776][ T56] bond0 (unregistering): Released all slaves [ 575.175947][T10357] device veth0_vlan left promiscuous mode [ 575.259921][T10357] device veth0_vlan entered promiscuous mode [ 575.490189][T10178] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 575.694568][T10178] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 575.711480][T10178] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 575.877879][T10178] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 577.191342][T10178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.519982][T10178] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.536788][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 577.552949][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 577.798330][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 577.816505][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 577.904335][ T4339] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.911543][ T4339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.965476][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 577.992366][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 578.095240][ T4339] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.102431][ T4339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.323600][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 578.356748][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 578.392052][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 578.493952][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 578.520648][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 578.569855][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 578.716234][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 578.733704][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 578.887640][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 578.897080][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 578.913270][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 578.932470][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 578.987345][T10178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 584.821847][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 584.830539][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 584.906701][T10178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 586.184950][T10496] device vlan1 entered promiscuous mode [ 586.462144][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 586.556926][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 586.584271][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 586.593700][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 586.621582][T10178] device veth0_vlan entered promiscuous mode [ 586.681065][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 586.715723][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 586.760568][T10178] device veth1_vlan entered promiscuous mode [ 586.995267][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 587.036158][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 587.045786][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 587.094389][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 587.115717][T10178] device veth0_macvtap entered promiscuous mode [ 587.152409][T10178] device veth1_macvtap entered promiscuous mode [ 587.295215][T10178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 587.332948][T10178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.362645][T10178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 587.394547][T10178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.424576][T10178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 587.432014][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 587.509973][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 587.535597][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 587.565858][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 587.676340][T10178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.708195][T10178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.799244][T10178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.830269][T10178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.873674][T10178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.901625][T10178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.946224][T10178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.010442][T10178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.042255][T10178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 588.053102][T10533] device veth0_vlan left promiscuous mode [ 588.170167][T10533] device veth0_vlan entered promiscuous mode [ 588.209133][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 588.233854][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 588.275998][T10178] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.305440][T10178] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.355373][T10178] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.388215][T10178] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.599985][ T4339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.622606][ T4339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.660563][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 588.732475][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.762309][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.800624][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 590.362634][T10574] device wg2 left promiscuous mode [ 590.718855][T10586] device veth0_vlan left promiscuous mode [ 590.735667][T10586] device veth0_vlan entered promiscuous mode [ 590.766424][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 590.789526][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 590.849516][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 593.192654][T10648] validate_nla: 23 callbacks suppressed [ 593.192718][T10648] netlink: 'syz.6.1847': attribute type 28 has an invalid length. [ 593.970522][T10662] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1848'. [ 593.994716][ T4272] Bluetooth: hci0: command 0x0406 tx timeout [ 595.754204][T10698] netlink: 'syz.6.1854': attribute type 10 has an invalid length. [ 595.790486][T10698] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1854'. [ 595.821122][T10698] device vlan1 entered promiscuous mode [ 595.870697][T10698] batman_adv: batadv0: Adding interface: vlan1 [ 595.908977][T10698] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 595.984866][T10698] batman_adv: batadv0: Interface activated: vlan1 [ 596.028887][T10691] netlink: 'syz.7.1851': attribute type 21 has an invalid length. [ 596.038035][T10691] netlink: 'syz.7.1851': attribute type 6 has an invalid length. [ 596.062498][T10691] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1851'. [ 596.507331][T10726] netlink: 'syz.5.1863': attribute type 4 has an invalid length. [ 599.114143][T10794] device syzkaller0 entered promiscuous mode [ 599.715898][T10822] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1899'. [ 601.718299][T10814] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1886'. [ 601.983404][T10847] netlink: 'syz.0.1898': attribute type 10 has an invalid length. [ 602.091330][T10847] team0: Device wg1 is of different type [ 602.467918][T10861] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1905'. [ 602.823469][T10879] netlink: 'syz.6.1912': attribute type 10 has an invalid length. [ 603.004981][T10879] team0: Device wg1 is of different type [ 603.081287][T10872] device veth0_vlan left promiscuous mode [ 603.299412][T10872] device veth0_vlan entered promiscuous mode [ 603.501827][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 603.522240][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 603.536429][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 603.909334][T10902] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 603.955966][T10902] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 604.738902][T10936] netlink: 'syz.0.1934': attribute type 10 has an invalid length. [ 604.825823][T10936] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 605.813744][T10976] sock: sock_set_timeout: `syz.7.1946' (pid 10976) tries to set negative timeout [ 606.120738][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 606.166946][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 606.219328][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 606.261844][T10992] netlink: 'syz.5.1952': attribute type 10 has an invalid length. [ 606.341568][T10992] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 606.637440][T11010] netlink: 'syz.3.1958': attribute type 10 has an invalid length. [ 606.731511][T11010] team0: Device wg1 is of different type [ 607.101063][T11028] device veth0_vlan left promiscuous mode [ 607.120570][T11028] device veth0_vlan entered promiscuous mode [ 607.172509][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 607.212730][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 607.267600][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 607.750277][T11049] netlink: 'syz.3.1971': attribute type 10 has an invalid length. [ 607.900848][T11049] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 608.322118][T11058] netlink: 'syz.3.1975': attribute type 10 has an invalid length. [ 608.344992][T11058] team0: Device wlan1 is up. Set it down before adding it as a team port [ 608.501492][T11064] netlink: 'syz.5.1977': attribute type 10 has an invalid length. [ 611.184129][T11064] team0: Device wg1 is of different type [ 611.208191][T11073] device veth0_vlan left promiscuous mode [ 611.219412][T11073] device veth0_vlan entered promiscuous mode [ 611.240842][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 611.315665][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 611.335564][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 611.807257][T11112] netlink: 'syz.7.1988': attribute type 10 has an invalid length. [ 611.891566][T11112] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.931815][T11112] device bridge_slave_1 left promiscuous mode [ 611.940760][T11112] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.028055][T11112] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 613.453673][T11162] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 613.521339][T11162] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 614.530861][T11193] batman_adv: batadv0: Interface deactivated: vlan1 [ 614.611252][T11197] batman_adv: batadv0: Interface activated: vlan1 [ 614.687112][T11207] netlink: 'syz.7.2022': attribute type 7 has an invalid length. [ 614.703423][T11207] netlink: 'syz.7.2022': attribute type 1 has an invalid length. [ 614.720355][T11207] netlink: 209836 bytes leftover after parsing attributes in process `syz.7.2022'. [ 614.736326][T11207] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2022'. [ 615.246692][T11220] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 615.326001][T11220] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 616.262217][T11252] device veth0_vlan left promiscuous mode [ 616.289637][T11252] device veth0_vlan entered promiscuous mode [ 616.312073][ T8655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 616.356245][ T8655] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 616.392432][ T8655] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 616.668105][T11277] netlink: 'syz.6.2041': attribute type 10 has an invalid length. [ 616.967065][T11277] team0: Device hsr_slave_0 failed to register rx_handler [ 617.830681][T11314] netlink: 'syz.3.2054': attribute type 3 has an invalid length. [ 617.883443][T11314] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2054'. [ 621.542064][T11355] device veth0_vlan left promiscuous mode [ 621.553231][T11355] device veth0_vlan entered promiscuous mode [ 621.922343][T11383] netlink: 10 bytes leftover after parsing attributes in process `syz.5.2076'. [ 621.952287][T11383] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2076'. [ 623.046812][T11412] batman_adv: batadv0: Interface deactivated: vlan1 [ 623.199679][T11416] batman_adv: batadv0: Interface activated: vlan1 [ 623.506720][T11431] netlink: 'syz.0.2091': attribute type 21 has an invalid length. [ 623.534912][T11431] netlink: 'syz.0.2091': attribute type 16 has an invalid length. [ 623.569721][T11431] netlink: 13484 bytes leftover after parsing attributes in process `syz.0.2091'. [ 624.206801][T11462] batman_adv: batadv0: Interface deactivated: vlan1 [ 624.950887][T11466] batman_adv: batadv0: Interface activated: vlan1 [ 624.987283][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 625.052067][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 625.085861][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 627.344100][T11556] netlink: 'syz.5.2128': attribute type 10 has an invalid length. [ 627.475965][T11556] team0: Device hsr_slave_0 failed to register rx_handler [ 627.759290][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 627.766178][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.944820][T11617] netlink: 'syz.0.2154': attribute type 10 has an invalid length. [ 629.327243][T11617] team0: Device wg1 is of different type [ 630.378106][T11656] device veth0_vlan left promiscuous mode [ 630.404396][T11656] device veth0_vlan entered promiscuous mode [ 631.321650][T11678] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2169'. [ 631.958652][T11687] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.433469][T11709] device veth0_vlan left promiscuous mode [ 633.455250][T11709] device veth0_vlan entered promiscuous mode [ 633.491250][T11715] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2180'. [ 633.519958][T11716] IPv6: Can't replace route, no match found [ 633.530354][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 633.559696][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 633.616770][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 634.512360][T11725] device syzkaller0 entered promiscuous mode [ 638.927422][T11745] device bridge_slave_0 left promiscuous mode [ 638.936788][T11745] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.177874][T11785] netlink: 1057 bytes leftover after parsing attributes in process `syz.5.2200'. [ 641.158688][T11823] batman_adv: batadv0: Interface deactivated: vlan1 [ 641.303918][T11825] batman_adv: batadv0: Interface activated: vlan1 [ 641.339267][ T8655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 641.359407][ T8655] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 641.392619][ T8655] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 642.265645][T11864] netlink: 'syz.5.2224': attribute type 29 has an invalid length. [ 642.352169][T11864] netlink: 'syz.5.2224': attribute type 29 has an invalid length. [ 642.393069][T11865] netlink: 'syz.5.2224': attribute type 29 has an invalid length. [ 642.411752][T11864] netlink: 'syz.5.2224': attribute type 29 has an invalid length. [ 642.435309][T11864] netlink: 'syz.5.2224': attribute type 29 has an invalid length. [ 642.978143][T11873] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.2228'. [ 643.329476][T11883] netlink: 14207 bytes leftover after parsing attributes in process `syz.6.2231'. [ 644.014551][T11906] device veth0_vlan left promiscuous mode [ 644.020975][T11906] device veth0_vlan entered promiscuous mode [ 644.066414][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 644.083716][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 644.127492][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 644.462585][T11915] netlink: 1057 bytes leftover after parsing attributes in process `syz.7.2244'. [ 645.069782][T11935] syz.3.2252 uses obsolete (PF_INET,SOCK_PACKET) [ 645.303505][T11943] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2255'. [ 645.523301][T11953] netlink: 579 bytes leftover after parsing attributes in process `syz.0.2256'. [ 646.117677][T11968] netlink: 'syz.3.2265': attribute type 3 has an invalid length. [ 646.189812][T11968] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2265'. [ 647.754546][T12014] netlink: 'syz.0.2282': attribute type 10 has an invalid length. [ 647.806262][T12014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 647.931476][T12014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 648.078798][T12014] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 648.094937][T12016] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2282'. [ 649.490671][T12081] netlink: 'syz.0.2305': attribute type 10 has an invalid length. [ 649.543361][T12081] team0: Port device wlan1 added [ 650.943169][T12130] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2324'. [ 654.172367][T12173] netlink: 'syz.5.2334': attribute type 10 has an invalid length. [ 654.201999][T12173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 654.366064][T12173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 654.493328][T12173] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 654.564787][T12175] netlink: 10 bytes leftover after parsing attributes in process `syz.5.2334'. [ 656.862454][T12226] netlink: 'syz.7.2356': attribute type 10 has an invalid length. [ 656.918123][T12226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 657.316800][T12226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 657.470733][T12226] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 657.534972][T12224] netlink: 10 bytes leftover after parsing attributes in process `syz.7.2356'. [ 658.720321][T12290] netlink: 'syz.3.2379': attribute type 10 has an invalid length. [ 658.758415][T12290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 659.024013][T12290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 659.113606][T12290] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 659.772250][T12287] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2379'. [ 661.173392][T12358] netlink: 'syz.5.2402': attribute type 10 has an invalid length. [ 661.201929][T12358] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2402'. [ 661.231131][T12358] device vlan1 entered promiscuous mode [ 661.264055][T12358] batman_adv: batadv0: Adding interface: vlan1 [ 661.286756][T12358] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 661.374925][T12358] batman_adv: batadv0: Interface activated: vlan1 [ 664.479015][T12442] netlink: 'syz.0.2436': attribute type 6 has an invalid length. [ 664.546517][T12442] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2436'. [ 665.364827][T12464] Ÿë: port 1(ip6gretap0) entered blocking state [ 665.448403][T12464] Ÿë: port 1(ip6gretap0) entered disabled state [ 665.491129][T12473] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 665.498217][T12473] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 665.506389][T12464] device ip6gretap0 entered promiscuous mode [ 665.898807][T12480] netlink: 'syz.0.2449': attribute type 3 has an invalid length. [ 665.955885][T12480] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2449'. [ 666.103556][T12487] netlink: 'syz.3.2452': attribute type 10 has an invalid length. [ 666.250004][T12487] device veth0_macvtap left promiscuous mode [ 667.358531][T12521] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 667.365091][T12521] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 667.615225][T12528] netlink: 'syz.7.2466': attribute type 6 has an invalid length. [ 667.695352][T12528] netlink: 164 bytes leftover after parsing attributes in process `syz.7.2466'. [ 668.865505][T12560] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2479'. [ 672.182341][T12619] netlink: 'syz.3.2499': attribute type 6 has an invalid length. [ 672.296785][T12619] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2499'. [ 674.619877][T12682] netlink: 'syz.6.2520': attribute type 21 has an invalid length. [ 675.223422][T12700] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2525'. [ 675.304679][T12700] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 675.361479][T12695] netlink: 'syz.6.2526': attribute type 21 has an invalid length. [ 676.170732][T12726] netlink: 'syz.0.2537': attribute type 21 has an invalid length. [ 676.706242][T12744] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2545'. [ 676.724282][T12744] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 676.906343][T12748] Ÿë: port 1(ip6gretap0) entered blocking state [ 676.949053][T12748] Ÿë: port 1(ip6gretap0) entered disabled state [ 676.986792][T12748] device ip6gretap0 entered promiscuous mode [ 677.229705][T12760] netlink: 'syz.3.2553': attribute type 21 has an invalid length. [ 677.510694][T12770] netlink: 'syz.3.2557': attribute type 10 has an invalid length. [ 677.552825][T12770] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2557'. [ 677.571067][T12770] device ipvlan1 entered promiscuous mode [ 677.677705][T12770] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 677.713965][T12778] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.2557'. [ 677.946758][T12783] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2559'. [ 679.027269][T12818] device syzkaller0 entered promiscuous mode [ 681.035218][T10179] Bluetooth: hci4: command 0x0406 tx timeout [ 684.963424][T12923] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2614'. [ 685.643676][T12945] netlink: 'syz.0.2623': attribute type 10 has an invalid length. [ 685.661178][T12945] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2623'. [ 685.726888][T12945] device ipvlan1 entered promiscuous mode [ 685.749570][T12945] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 689.198643][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 689.205171][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.530650][T13081] tap0: tun_chr_ioctl cmd 1074025681 [ 690.673939][T13083] Ÿë: port 1(ip6gretap0) entered blocking state [ 690.731529][T13083] Ÿë: port 1(ip6gretap0) entered disabled state [ 690.775183][T13083] device ip6gretap0 entered promiscuous mode [ 697.685398][T13216] netlink: 'syz.7.2738': attribute type 1 has an invalid length. [ 697.786917][T13216] netlink: 116376 bytes leftover after parsing attributes in process `syz.7.2738'. [ 703.182959][T13321] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2779'. [ 703.731763][T13328] Ÿë: port 1(ip6gretap0) entered blocking state [ 703.769813][T13328] Ÿë: port 1(ip6gretap0) entered disabled state [ 703.861901][T13328] device ip6gretap0 entered promiscuous mode [ 707.100782][T13391] netlink: 'syz.5.2806': attribute type 1 has an invalid length. [ 707.175024][T13391] netlink: 'syz.5.2806': attribute type 3 has an invalid length. [ 707.212106][T13391] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2806'. [ 708.862492][ T4272] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 708.872146][ T4272] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 708.880643][ T4272] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 708.916269][ T4272] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 708.925456][ T4272] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 708.933518][ T4272] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 709.001299][ T46] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.127687][ T46] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.260832][ T46] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.503807][ T46] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.072807][T13469] syz.7.2835[13469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 710.073002][T13469] syz.7.2835[13469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 710.580475][T13440] chnl_net:caif_netlink_parms(): no params data found [ 710.913566][ T46] device ip6gretap0 left promiscuous mode [ 710.921303][ T46] Ÿë: port 1(ip6gretap0) entered disabled state [ 711.034679][ T4272] Bluetooth: hci2: command 0x0409 tx timeout [ 711.089688][T13440] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.113764][T13440] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.132893][T13440] device bridge_slave_0 entered promiscuous mode [ 711.299755][T13440] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.344665][T13440] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.352905][T13440] device bridge_slave_1 entered promiscuous mode [ 711.522828][T13506] delete_channel: no stack [ 711.528991][T13505] netlink: 'syz.5.2846': attribute type 21 has an invalid length. [ 711.542055][T13505] IPv6: NLM_F_CREATE should be specified when creating new route [ 711.810007][T13510] netlink: 'syz.5.2846': attribute type 10 has an invalid length. [ 711.876786][T13440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 711.899673][T13440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 712.118353][T13440] team0: Port device team_slave_0 added [ 712.226833][T13440] team0: Port device team_slave_1 added [ 712.462247][T13440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 712.550653][T13440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 712.770296][T13440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 713.108584][T13440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 713.124571][ T4272] Bluetooth: hci2: command 0x041b tx timeout [ 713.141145][T13440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.385027][T13440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 713.745549][T13517] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.752828][T13517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 713.760534][T13517] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.767758][T13517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 713.843317][T13517] device bridge0 entered promiscuous mode [ 714.030786][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 714.073200][T13440] device hsr_slave_0 entered promiscuous mode [ 714.165290][T13440] device hsr_slave_1 entered promiscuous mode [ 714.711765][ T46] device hsr_slave_0 left promiscuous mode [ 714.723344][ T46] device hsr_slave_1 left promiscuous mode [ 714.736026][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 714.744825][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 714.779160][ T46] device veth1_macvtap left promiscuous mode [ 714.789004][ T46] device veth1_vlan left promiscuous mode [ 715.194720][ T4272] Bluetooth: hci2: command 0x040f tx timeout [ 715.213087][T13587] delete_channel: no stack [ 715.317900][T13587] delete_channel: no stack [ 715.648333][ T46] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 715.704866][ T46] team0 (unregistering): Port device team_slave_1 removed [ 715.774887][ T46] team0 (unregistering): Port device team_slave_0 removed [ 715.827135][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 715.875724][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 715.930777][ T46] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 716.076646][ T4272] Bluetooth: hci4: ISO packet for unknown connection handle 2622 [ 716.252043][ T46] bond0 (unregistering): Released all slaves [ 716.322439][T13598] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 716.348008][T13598] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 716.706963][T13606] netlink: 184 bytes leftover after parsing attributes in process `syz.6.2874'. [ 716.975126][ T4272] Bluetooth: hci5: ACL packet for unknown connection handle 0 [ 717.263019][T13631] netlink: 201392 bytes leftover after parsing attributes in process `syz.5.2880'. [ 717.274683][ T4272] Bluetooth: hci2: command 0x0419 tx timeout [ 717.457613][ T4272] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 718.381044][T13654] delete_channel: no stack [ 718.401127][T13654] delete_channel: no stack [ 720.392294][T13647] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2885'. [ 720.425036][T13647] team0: Port device team_slave_0 removed [ 720.431409][T13647] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 720.602272][T13666] netlink: 184 bytes leftover after parsing attributes in process `syz.7.2889'. [ 721.135143][T13440] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 721.191272][T13440] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 721.245553][T13440] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 721.335507][T13440] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 722.410982][ T4272] Bluetooth: hci5: unexpected event 0x08 length: 15 > 4 [ 722.444683][T13440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 722.529640][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 722.543057][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 722.592495][T13440] 8021q: adding VLAN 0 to HW filter on device team0 [ 722.642812][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 722.665355][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 722.683102][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.690330][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 722.738794][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 722.759743][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 722.790262][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 722.855905][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.863195][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 722.921882][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 722.970971][T13725] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2905'. [ 723.001810][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 723.029624][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 723.040620][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 723.059633][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 723.080388][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 723.100230][T13440] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 723.110933][T13440] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 723.166912][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 723.191266][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 723.222032][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 723.272479][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 723.316692][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 723.358659][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 724.732882][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 724.823357][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 724.869458][T13440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 724.930345][T13785] delete_channel: no stack [ 724.950996][T13785] delete_channel: no stack [ 724.962042][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 724.974312][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 725.125538][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 725.193038][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 725.270136][T13440] device veth0_vlan entered promiscuous mode [ 725.290636][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 725.319206][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 725.348052][T13440] device veth1_vlan entered promiscuous mode [ 725.392479][T13801] netlink: 212940 bytes leftover after parsing attributes in process `syz.0.2923'. [ 725.439895][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 725.475363][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 725.496108][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 725.516784][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 725.552742][T13440] device veth0_macvtap entered promiscuous mode [ 725.587131][T13440] device veth1_macvtap entered promiscuous mode [ 725.640350][T13440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 725.652749][T13440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.664635][T13440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 725.687220][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 725.703455][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 725.731962][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 725.763374][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 725.810947][T13440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 725.894590][T13440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.936532][T13440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 725.980111][T13440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.021168][T13440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.078588][T13440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.114625][T13440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.165689][T13440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.221840][T13440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 726.261966][T13440] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.301607][T13440] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.343219][T13440] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.383026][T13440] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.441686][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 726.474175][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 727.205118][ T4339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.225309][ T4339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.276400][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.291449][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.301350][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 727.345468][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 727.621507][T13850] netlink: 'syz.3.2815': attribute type 4 has an invalid length. [ 729.316603][T10179] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 729.327943][T10179] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 729.343681][T10179] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 729.352964][T10179] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 729.364005][T10179] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 729.373690][T10179] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 729.562248][ T4272] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 729.781351][T13879] chnl_net:caif_netlink_parms(): no params data found [ 730.319239][ T4309] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.711144][ T4309] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.904865][T13879] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.978712][T13879] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.062648][T13879] device bridge_slave_0 entered promiscuous mode [ 731.435189][ T4272] Bluetooth: hci3: command 0x0409 tx timeout [ 731.714011][ T4309] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.821473][T13879] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.852363][T13879] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.941951][T13879] device bridge_slave_1 entered promiscuous mode [ 732.057334][T13927] delete_channel: no stack [ 732.064881][T13927] delete_channel: no stack [ 732.072924][T13879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 732.229455][ T4309] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.320614][T13879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 732.455088][T13879] team0: Port device team_slave_0 added [ 732.463923][T13879] team0: Port device team_slave_1 added [ 732.578788][T13879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.623631][T13879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 732.784851][T13879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 733.110929][T13879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 733.134635][T13879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 733.301577][T13879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 733.514898][ T4272] Bluetooth: hci3: command 0x041b tx timeout [ 733.532602][T13944] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2970'. [ 733.782156][T13944] team0: Port device team_slave_0 removed [ 733.797522][T13944] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 733.937297][T13879] device hsr_slave_0 entered promiscuous mode [ 733.961870][T13879] device hsr_slave_1 entered promiscuous mode [ 733.983046][T13879] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 734.003000][T13879] Cannot create hsr debugfs directory [ 734.127550][ T4309] device ip6gretap0 left promiscuous mode [ 734.133823][ T4309] Ÿë: port 1(ip6gretap0) entered disabled state [ 735.247468][T13979] delete_channel: no stack [ 735.594578][ T4272] Bluetooth: hci3: command 0x040f tx timeout [ 736.108467][ T4309] team0: Port device wlan1 removed [ 736.561183][ T4309] device hsr_slave_0 left promiscuous mode [ 736.575617][ T4309] device hsr_slave_1 left promiscuous mode [ 736.623751][ T4309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 736.633332][ T4309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 736.715179][ T4309] device veth1_macvtap left promiscuous mode [ 736.721378][ T4309] device veth0_macvtap left promiscuous mode [ 736.739124][ T4309] device veth1_vlan left promiscuous mode [ 736.754263][ T4309] device veth0_vlan left promiscuous mode [ 737.549738][ T4309] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 737.595196][ T4309] team0 (unregistering): Port device team_slave_1 removed [ 737.677188][ T4272] Bluetooth: hci3: command 0x0419 tx timeout [ 737.685107][ T4309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 737.732969][ T4309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 737.780976][ T4309] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 738.066954][ T4309] bond0 (unregistering): Released all slaves [ 738.118893][T14025] netlink: 'syz.6.2988': attribute type 4 has an invalid length. [ 738.129141][T14025] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2988'. [ 738.149345][T14025] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 738.305436][T13879] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 738.355612][T13879] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 738.412682][T13879] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 738.556055][T13879] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 739.231596][T14057] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.3002'. [ 739.304161][T13879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 739.334140][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 739.358346][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 739.412745][T13879] 8021q: adding VLAN 0 to HW filter on device team0 [ 739.719584][T14057] netlink: 'syz.6.3002': attribute type 10 has an invalid length. [ 739.798908][T14057] team0: Port device geneve1 added [ 739.829467][T14063] tap0: tun_chr_ioctl cmd 1074025677 [ 739.835864][T14063] tap0: linktype set to 32 [ 739.845553][T14074] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3004'. [ 739.872901][T14077] netlink: 1047 bytes leftover after parsing attributes in process `syz.7.3004'. [ 739.896401][T14077] bridge_slave_1: default FDB implementation only supports local addresses [ 739.931082][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 739.948412][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 739.962055][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.969422][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 740.002873][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 740.012478][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 740.022984][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.030205][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 740.057306][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 740.107861][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 740.125473][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 740.181014][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 740.232824][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 740.302647][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 740.327779][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 740.359133][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 740.413680][T13879] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 740.439624][T13879] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 740.484955][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 740.500511][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 740.533220][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 740.562002][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 740.612400][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 741.697524][T14105] device syzkaller0 entered promiscuous mode [ 742.150792][T14144] syz.5.3017[14144] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 742.150924][T14144] syz.5.3017[14144] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 744.321882][T14153] netlink: 'syz.3.3020': attribute type 10 has an invalid length. [ 744.423263][T14153] team0: Device wg1 is of different type [ 744.514360][T14151] netlink: 'syz.6.3019': attribute type 4 has an invalid length. [ 744.532124][T14151] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3019'. [ 744.554517][T14151] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 744.594602][T14155] netlink: 'syz.6.3019': attribute type 10 has an invalid length. [ 744.619190][T14155] team0: Device ipvlan1 failed to register rx_handler [ 744.677891][T14165] netlink: 'syz.5.3023': attribute type 10 has an invalid length. [ 744.704725][T14165] netlink: 55 bytes leftover after parsing attributes in process `syz.5.3023'. [ 744.752701][T14165] team0: Port device virt_wifi0 added [ 744.794710][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 744.802645][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 744.855889][T13879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 745.104185][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 745.179847][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 745.379239][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 745.401633][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 745.440597][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 745.507740][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 745.571575][T13879] device veth0_vlan entered promiscuous mode [ 745.596190][T14190] netlink: 'syz.5.3030': attribute type 10 has an invalid length. [ 745.628082][T14190] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3030'. [ 745.696181][T14190] device hsr0 entered promiscuous mode [ 745.790118][T13879] device veth1_vlan entered promiscuous mode [ 745.986230][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 746.008647][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 746.048753][T13879] device veth0_macvtap entered promiscuous mode [ 746.098806][T13879] device veth1_macvtap entered promiscuous mode [ 746.218364][T13879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 746.274185][T13879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.319762][T13879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 746.368866][T13879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.440381][T13879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 746.530774][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 746.550664][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 746.599787][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 746.705617][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 746.765713][T13879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 746.811048][T13879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.922215][T13879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 746.983910][T13879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.041740][T13879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 747.091784][T13879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.141872][T13879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 747.231753][T13879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.284361][T13879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 747.363161][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 747.388822][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 747.446785][T13879] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.478851][T13879] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.507231][T13879] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.532943][T13879] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.536156][ T4339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 749.564999][ T4339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 749.717037][ T4339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 749.745288][ T4339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.404603][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 750.445499][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 750.648495][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 750.654908][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 751.001720][T14256] netlink: 'syz.6.3048': attribute type 10 has an invalid length. [ 751.014784][T14256] netlink: 55 bytes leftover after parsing attributes in process `syz.6.3048'. [ 751.061584][T14256] team0: Port device virt_wifi0 added [ 751.109116][T14258] netlink: 'syz.5.3047': attribute type 10 has an invalid length. [ 751.541686][T14276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 751.591984][T14276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 753.728716][T14312] netlink: 'syz.3.3065': attribute type 10 has an invalid length. [ 753.807728][T14312] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3065'. [ 753.935254][T14312] team0: Port device virt_wifi0 added [ 755.128061][T14342] netlink: 'syz.0.3076': attribute type 10 has an invalid length. [ 755.337876][T14342] team0: Device wg1 is of different type [ 756.006770][T14359] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.014683][T14359] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.277338][T14362] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.348444][T14371] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3088'. [ 756.390193][T14371] team0: Port device team_slave_0 removed [ 756.402575][T14371] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 757.688036][T14404] device bridge_slave_1 left promiscuous mode [ 757.694338][T14404] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.787518][T14404] device bridge_slave_0 left promiscuous mode [ 757.878122][T14404] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.073951][T14407] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.092745][T14412] netlink: 144 bytes leftover after parsing attributes in process `syz.7.3102'. [ 758.156905][T14412] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 758.523982][T14412] team0: Port device team_slave_0 removed [ 758.547376][T14412] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 760.421657][T14466] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.429052][T14466] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.490735][T14466] device bridge0 left promiscuous mode [ 760.709585][T14460] device bridge_slave_1 left promiscuous mode [ 760.738611][T14460] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.053595][T14460] device bridge_slave_0 left promiscuous mode [ 761.097573][T14460] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.558464][T14484] netlink: 'syz.5.3129': attribute type 10 has an invalid length. [ 761.663041][T14484] team0: Device wg1 is of different type [ 765.563693][T14541] netlink: 'syz.7.3149': attribute type 10 has an invalid length. [ 765.990505][T14541] team0: Device wg1 is of different type [ 766.270764][T14548] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3151'. [ 766.453514][T14548] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3151'. [ 766.950418][T14548] netlink: 'syz.6.3151': attribute type 10 has an invalid length. [ 770.060271][T14552] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3151'. [ 774.359491][T14663] tap0: tun_chr_ioctl cmd 1074025680 [ 777.533997][T14713] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.541684][T14713] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.688254][T14708] device bridge_slave_1 left promiscuous mode [ 777.740765][T14708] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.128547][T14708] device bridge_slave_0 left promiscuous mode [ 778.164477][T14708] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.997195][T14776] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3230'. [ 780.086598][T14776] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3230'. [ 780.172917][T14776] netlink: 'syz.5.3230': attribute type 10 has an invalid length. [ 781.092371][T14781] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3230'. [ 782.674393][T14840] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3255'. [ 782.879914][T14840] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3255'. [ 782.999349][T14842] netlink: 'syz.7.3255': attribute type 10 has an invalid length. [ 783.781598][T14845] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3255'. [ 784.804935][T14884] netlink: 'syz.5.3274': attribute type 10 has an invalid length. [ 784.823261][T14884] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3274'. [ 784.834187][T14884] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 784.847542][T14884] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 784.910572][T14884] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 785.078739][T14892] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3276'. [ 785.101011][T14892] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3276'. [ 785.190975][T14892] netlink: 'syz.3.3276': attribute type 10 has an invalid length. [ 786.133858][T14896] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3276'. [ 786.155759][T14913] netlink: 144 bytes leftover after parsing attributes in process `syz.7.3285'. [ 786.184935][T14913] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 786.691961][T14927] netlink: 'syz.6.3290': attribute type 10 has an invalid length. [ 786.755313][T14927] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3290'. [ 786.816138][T14927] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 786.887128][T14927] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 787.082580][T14927] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 788.281904][T14948] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3299'. [ 788.348203][T14948] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 788.789750][T14960] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.3304'. [ 791.930831][T15019] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3328'. [ 791.982192][T15019] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 792.161310][T10179] Bluetooth: hci5: unexpected event 0x14 length: 15 > 6 [ 794.632154][T15051] IPv6: Can't replace route, no match found [ 794.676940][T15050] netlink: 'syz.3.3342': attribute type 10 has an invalid length. [ 794.701900][T15050] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3342'. [ 794.748719][T15050] device hsr0 entered promiscuous mode [ 795.282741][T15076] netlink: 144 bytes leftover after parsing attributes in process `syz.6.3352'. [ 795.293465][T15076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 795.402311][T15076] team0: Port device team_slave_0 removed [ 795.446410][T15076] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 795.535277][T15089] netlink: 'syz.5.3357': attribute type 10 has an invalid length. [ 795.544318][T15089] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3357'. [ 795.658619][T15092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3358'. [ 795.750677][T15092] netlink: 'syz.3.3358': attribute type 10 has an invalid length. [ 795.838560][T15092] device veth0_vlan left promiscuous mode [ 795.865099][T15092] device veth0_vlan entered promiscuous mode [ 795.883042][T15092] team0: Device veth0_vlan failed to register rx_handler [ 796.044774][T15092] syz.3.3358 (15092) used greatest stack depth: 19568 bytes left [ 797.155287][T15121] netlink: 'syz.6.3369': attribute type 10 has an invalid length. [ 797.225049][T15121] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3369'. [ 797.268149][T15121] device hsr0 entered promiscuous mode [ 797.342125][T15127] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3372'. [ 797.745203][T15139] IPv6: Can't replace route, no match found [ 798.198641][T15160] netlink: 'syz.6.3386': attribute type 10 has an invalid length. [ 798.274515][T15160] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3386'. [ 799.030048][T15168] netlink: 152 bytes leftover after parsing attributes in process `syz.7.3389'. [ 800.423104][T15190] netlink: 'syz.5.3398': attribute type 10 has an invalid length. [ 800.464864][T15190] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3398'. [ 801.569753][T15224] netlink: 'syz.3.3413': attribute type 10 has an invalid length. [ 801.624710][T15224] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3413'. [ 802.099715][T15233] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3417'. [ 802.218429][T15233] netlink: 'syz.7.3417': attribute type 10 has an invalid length. [ 802.670528][T15233] device veth0_vlan left promiscuous mode [ 802.738458][T15233] device veth0_vlan entered promiscuous mode [ 802.786765][T15233] team0: Device veth0_vlan failed to register rx_handler [ 803.408815][T15233] syz.7.3417 (15233) used greatest stack depth: 19544 bytes left [ 803.690358][T15263] netlink: 'syz.7.3426': attribute type 10 has an invalid length. [ 803.772507][T15263] netlink: 2 bytes leftover after parsing attributes in process `syz.7.3426'. [ 803.787470][T15263] device hsr0 entered promiscuous mode [ 804.687552][T15269] IPv6: Can't replace route, no match found [ 805.456901][T15305] netlink: 'syz.5.3441': attribute type 10 has an invalid length. [ 805.484892][T15305] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3441'. [ 805.727164][T15313] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3446'. [ 805.808043][T15317] netlink: 'syz.6.3448': attribute type 6 has an invalid length. [ 805.816596][T15317] netlink: 164 bytes leftover after parsing attributes in process `syz.6.3448'. [ 806.023483][T15321] netlink: 'syz.5.3446': attribute type 10 has an invalid length. [ 806.059564][T15321] batman_adv: batadv0: Interface deactivated: vlan1 [ 806.163236][T15321] batman_adv: batadv0: Interface activated: vlan1 [ 806.177847][T15321] team0: Device veth0_vlan failed to register rx_handler [ 806.197668][T15321] batman_adv: batadv0: Interface deactivated: vlan1 [ 806.662335][T15341] netlink: 'syz.0.3456': attribute type 10 has an invalid length. [ 806.694855][T15341] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3456'. [ 806.722156][T15341] device hsr0 entered promiscuous mode [ 807.558154][T15368] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3467'. [ 807.614619][T15368] netlink: 'syz.6.3467': attribute type 10 has an invalid length. [ 807.698678][T15368] batman_adv: batadv0: Interface deactivated: vlan1 [ 807.800564][T15368] batman_adv: batadv0: Interface activated: vlan1 [ 807.809538][T15368] team0: Device veth0_vlan failed to register rx_handler [ 807.830455][T15368] batman_adv: batadv0: Interface deactivated: vlan1 [ 807.901153][T15377] netlink: 'syz.3.3470': attribute type 10 has an invalid length. [ 807.914051][T15377] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3470'. [ 808.030890][T15368] syz.6.3467 (15368) used greatest stack depth: 19120 bytes left [ 808.622687][T15402] netlink: 'syz.6.3484': attribute type 10 has an invalid length. [ 808.652314][T15402] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3484'. [ 808.702791][T15406] netlink: 'syz.0.3483': attribute type 6 has an invalid length. [ 808.717355][T15406] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3483'. [ 809.077299][T15420] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3489'. [ 809.171915][T15420] netlink: 'syz.7.3489': attribute type 10 has an invalid length. [ 809.202261][T15420] device veth0_vlan left promiscuous mode [ 809.229966][T15420] device veth0_vlan entered promiscuous mode [ 809.261111][T15420] team0: Device veth0_vlan failed to register rx_handler [ 809.733128][T15444] netlink: 'syz.6.3498': attribute type 10 has an invalid length. [ 809.742636][T15444] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3498'. [ 810.361362][T15464] netlink: 144 bytes leftover after parsing attributes in process `syz.6.3505'. [ 810.409400][T15464] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 810.681232][T15479] netlink: 'syz.3.3511': attribute type 10 has an invalid length. [ 810.693009][T15479] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3511'. [ 811.711120][T15507] netlink: 'syz.5.3523': attribute type 10 has an invalid length. [ 811.761119][T15507] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3523'. [ 812.078086][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 812.084623][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.533148][T15530] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3534'. [ 812.559541][T15530] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 812.740417][T15541] netlink: 'syz.6.3538': attribute type 10 has an invalid length. [ 812.784759][T15541] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3538'. [ 814.557889][T15585] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3555'. [ 814.591670][T15585] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 815.144521][T15597] netlink: 'syz.6.3560': attribute type 10 has an invalid length. [ 815.234118][T15597] 8021q: adding VLAN 0 to HW filter on device team0 [ 815.299000][T15597] bond0: (slave team0): Enslaving as an active interface with an up link [ 817.212149][T15631] netlink: 'syz.6.3574': attribute type 21 has an invalid length. [ 817.628802][T15636] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3575'. [ 817.716633][T15636] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 819.945925][T15696] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.3600'. [ 820.767322][T15713] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3606'. [ 820.855937][T15713] netlink: 'syz.7.3606': attribute type 10 has an invalid length. [ 820.967199][T15713] device veth0_vlan left promiscuous mode [ 821.008764][T15713] device veth0_vlan entered promiscuous mode [ 821.075947][T15713] team0: Device veth0_vlan failed to register rx_handler [ 825.516447][T15791] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3635'. [ 825.686948][T15797] netlink: 'syz.5.3635': attribute type 10 has an invalid length. [ 825.709046][T15797] batman_adv: batadv0: Interface activated: vlan1 [ 825.727717][T15797] team0: Device veth0_vlan failed to register rx_handler [ 827.546755][T15797] batman_adv: batadv0: Interface deactivated: vlan1 [ 828.198620][T15811] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3643'. [ 828.244165][T15811] netlink: 'syz.6.3643': attribute type 10 has an invalid length. [ 828.384303][T15811] batman_adv: batadv0: Interface activated: vlan1 [ 828.444272][T15811] team0: Device veth0_vlan failed to register rx_handler [ 828.528218][T15811] batman_adv: batadv0: Interface deactivated: vlan1 [ 828.733687][T15830] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3650'. [ 829.203329][T15845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3654'. [ 829.360915][T15846] netlink: 'syz.0.3654': attribute type 10 has an invalid length. [ 832.038108][T15846] device veth0_vlan left promiscuous mode [ 832.056471][T15846] device veth0_vlan entered promiscuous mode [ 832.064149][T15846] team0: Device veth0_vlan failed to register rx_handler [ 832.368665][T15871] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3663'. [ 832.877340][T15888] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3668'. [ 832.923164][T15888] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 833.031096][T15895] netlink: 'syz.3.3670': attribute type 10 has an invalid length. [ 833.052897][T15895] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3670'. [ 833.492865][T15898] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3672'. [ 833.508240][T15904] netlink: 'syz.7.3672': attribute type 10 has an invalid length. [ 833.540771][T15904] device veth0_vlan left promiscuous mode [ 833.554177][T15904] device veth0_vlan entered promiscuous mode [ 833.566792][T15904] team0: Device veth0_vlan failed to register rx_handler [ 833.863593][T15919] netlink: 'syz.7.3677': attribute type 10 has an invalid length. [ 833.907790][T15919] 8021q: adding VLAN 0 to HW filter on device team0 [ 833.950917][T15919] bond0: (slave team0): Enslaving as an active interface with an up link [ 834.028097][T15921] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3678'. [ 834.214768][T15925] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3680'. [ 834.261684][T15925] netlink: 'syz.7.3680': attribute type 10 has an invalid length. [ 834.379152][T15925] device veth0_vlan left promiscuous mode [ 834.434098][T15925] device veth0_vlan entered promiscuous mode [ 834.575631][T15925] team0: Device veth0_vlan failed to register rx_handler [ 834.634915][T10179] Bluetooth: hci2: command 0x0406 tx timeout [ 835.469393][T15956] netlink: 144 bytes leftover after parsing attributes in process `syz.7.3689'. [ 835.527205][T15956] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 835.580190][T15959] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3690'. [ 836.747539][T15999] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3705'. [ 836.846850][T16007] netlink: 'syz.6.3709': attribute type 10 has an invalid length. [ 836.854992][T16007] netlink: 55 bytes leftover after parsing attributes in process `syz.6.3709'. [ 837.543068][T16007] batman_adv: batadv0: Removing interface: vlan1 [ 837.723596][T16030] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3715'. [ 837.746017][T16030] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 838.401957][T16050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3724'. [ 838.470209][T16050] netlink: 'syz.0.3724': attribute type 10 has an invalid length. [ 838.527613][T16050] device veth0_vlan left promiscuous mode [ 838.538212][T16050] device veth0_vlan entered promiscuous mode [ 838.553658][T16050] team0: Device veth0_vlan failed to register rx_handler [ 838.693803][T16057] netlink: 'syz.6.3725': attribute type 10 has an invalid length. [ 838.739474][T16057] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 839.448158][T16086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3738'. [ 839.579307][T16090] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3740'. [ 839.607016][T16090] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 839.750493][T16090] team0: Port device team_slave_0 removed [ 839.776849][T16090] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 839.802878][T16101] netlink: 'syz.6.3744': attribute type 10 has an invalid length. [ 839.818868][T16099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3743'. [ 839.875189][T16099] netlink: 'syz.3.3743': attribute type 10 has an invalid length. [ 841.352650][T16129] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3754'. [ 841.817799][T16138] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3757'. [ 841.885872][T16138] netlink: 'syz.5.3757': attribute type 10 has an invalid length. [ 842.046017][T16138] batman_adv: batadv0: Interface activated: vlan1 [ 842.102700][T16138] team0: Device veth0_vlan failed to register rx_handler [ 842.201520][T16138] batman_adv: batadv0: Interface deactivated: vlan1 [ 842.330047][T16140] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3758'. [ 842.651360][T16140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 842.680646][T16140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 842.700274][T16140] bond0 (unregistering): Released all slaves [ 842.739686][T16166] netlink: 'syz.5.3764': attribute type 10 has an invalid length. [ 842.757589][T16166] netlink: 55 bytes leftover after parsing attributes in process `syz.5.3764'. [ 843.116195][T16166] batman_adv: batadv0: Removing interface: vlan1 [ 843.313094][T16180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3769'. [ 843.710784][T16195] netlink: 'syz.0.3772': attribute type 10 has an invalid length. [ 844.524616][T16222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3786'. [ 844.672452][T16226] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3787'. [ 844.683962][T16226] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 845.359277][T16239] tap0: tun_chr_ioctl cmd 1074025677 [ 845.378147][T16239] tap0: linktype set to 778 [ 845.406070][T16239] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3793'. [ 845.773260][T16254] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3799'. [ 847.870517][T16295] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3813'. [ 848.089409][T16298] netlink: 56537 bytes leftover after parsing attributes in process `syz.3.3814'. [ 849.181065][T16328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3825'. [ 849.453654][T16334] netlink: 56537 bytes leftover after parsing attributes in process `syz.5.3828'. [ 849.561786][T10179] Bluetooth: hci2: unexpected subevent 0x12 length: 150 > 5 [ 850.130000][T16347] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3833'. [ 851.279851][T16363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3840'. [ 851.511737][T16372] netlink: 56537 bytes leftover after parsing attributes in process `syz.7.3843'. [ 851.842600][T16383] tap0: tun_chr_ioctl cmd 1074025677 [ 851.851943][T16383] tap0: linktype set to 778 [ 851.861724][T16383] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3847'. [ 852.461688][T16407] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3858'. [ 852.559176][T16407] netlink: 'syz.6.3858': attribute type 10 has an invalid length. [ 852.588540][T16412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3860'. [ 853.022061][T16424] tap0: tun_chr_ioctl cmd 1074025677 [ 853.031175][T16424] tap0: linktype set to 778 [ 853.056614][T16424] __nla_validate_parse: 1 callbacks suppressed [ 853.056726][T16424] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3866'. [ 855.114590][ T4272] Bluetooth: hci3: command 0x0406 tx timeout [ 856.150106][T16443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3874'. [ 856.188603][T16444] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3875'. [ 856.217422][T16449] netlink: 'syz.3.3874': attribute type 10 has an invalid length. [ 857.061446][T16485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3889'. [ 857.081434][T16488] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3891'. [ 857.102508][T16485] netlink: 'syz.3.3889': attribute type 10 has an invalid length. [ 857.275699][ T4272] Bluetooth: hci5: unexpected event 0x36 length: 15 > 7 [ 857.994971][T16518] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3905'. [ 858.040608][T16518] netlink: 'syz.5.3905': attribute type 10 has an invalid length. [ 858.263177][T16526] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3907'. [ 858.580121][ T4272] Bluetooth: hci4: unexpected event 0x36 length: 15 > 7 [ 858.910478][T16549] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3918'. [ 859.031384][T16549] netlink: 'syz.6.3918': attribute type 10 has an invalid length. [ 859.420662][T16560] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3923'. [ 859.642751][T16570] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3927'. [ 859.673581][T16570] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 862.008258][T16603] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3939'. [ 863.965689][T16639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3954'. [ 864.030150][T16644] netlink: 144 bytes leftover after parsing attributes in process `syz.6.3956'. [ 864.055532][T16644] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 864.774384][T16661] netlink: 'syz.3.3961': attribute type 39 has an invalid length. [ 865.470052][T16676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3966'. [ 865.560460][T16676] netlink: 'syz.0.3966': attribute type 10 has an invalid length. [ 865.628834][T16676] device veth0_vlan left promiscuous mode [ 865.661433][T16676] device veth0_vlan entered promiscuous mode [ 865.689392][T16676] team0: Device veth0_vlan failed to register rx_handler [ 865.752256][T16685] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3969'. [ 866.304401][T16705] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3976'. [ 866.366279][T16705] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 868.022595][T16732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3985'. [ 868.751623][T16750] netlink: 188 bytes leftover after parsing attributes in process `syz.5.3990'. [ 868.922206][T16753] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3993'. [ 868.970667][T16754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3991'. [ 868.988523][T16753] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3993'. [ 869.036187][T16754] netlink: 'syz.3.3991': attribute type 10 has an invalid length. [ 869.063955][T16760] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3993'. [ 869.122209][T16757] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3993'. [ 869.519693][T16776] netlink: 'syz.0.3998': attribute type 39 has an invalid length. [ 869.922563][T16775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4000'. [ 869.948837][T16773] netlink: 144 bytes leftover after parsing attributes in process `syz.7.3997'. [ 869.996190][T16773] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 870.227313][T16795] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4006'. [ 870.428958][T16798] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4007'. [ 870.506671][T16798] netlink: 'syz.5.4007': attribute type 10 has an invalid length. [ 870.938702][T16811] device syzkaller0 entered promiscuous mode [ 871.157716][T16825] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4016'. [ 873.178569][T16832] netlink: 156 bytes leftover after parsing attributes in process `syz.6.4019'. [ 873.410565][T16837] netlink: 'syz.5.4020': attribute type 39 has an invalid length. [ 873.519967][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 873.526372][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.724989][T16840] netlink: 144 bytes leftover after parsing attributes in process `syz.7.4022'. [ 873.739377][T16840] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 873.772593][T16850] netlink: 'syz.3.4024': attribute type 10 has an invalid length. [ 874.069067][T16859] __nla_validate_parse: 1 callbacks suppressed [ 874.069179][T16859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4031'. [ 874.385442][T16867] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4034'. [ 874.803941][T16881] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4040'. [ 874.838953][T16881] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4040'. [ 874.884931][T16884] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4040'. [ 874.916670][T16883] netlink: 'syz.6.4039': attribute type 10 has an invalid length. [ 875.086926][T16881] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4040'. [ 875.233179][T16893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4045'. [ 875.290801][T16897] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4044'. [ 875.500323][T16897] netlink: 'syz.5.4044': attribute type 10 has an invalid length. [ 875.638213][T16909] netlink: 156 bytes leftover after parsing attributes in process `syz.7.4048'. [ 875.850455][T16916] netlink: 144 bytes leftover after parsing attributes in process `syz.5.4052'. [ 875.874856][T16916] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 876.472654][T16930] netlink: 'syz.6.4058': attribute type 10 has an invalid length. [ 877.163711][T16953] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 877.321022][T16957] netlink: 'syz.7.4068': attribute type 10 has an invalid length. [ 877.393928][T16957] device veth0_vlan left promiscuous mode [ 877.483957][T16957] device veth0_vlan entered promiscuous mode [ 877.536489][T16957] team0: Device veth0_vlan failed to register rx_handler [ 878.938345][T17009] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 881.829997][T17022] __nla_validate_parse: 9 callbacks suppressed [ 881.830052][T17022] netlink: 156 bytes leftover after parsing attributes in process `syz.7.4095'. [ 882.877528][T17045] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4104'. [ 882.899340][T10179] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 882.910321][T10179] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 882.927495][T10179] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 882.955370][T10179] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 882.963198][T10179] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 882.972611][T10179] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 882.995877][T17043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4103'. [ 883.017341][T17045] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4104'. [ 883.059974][T17050] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4104'. [ 883.071411][T17053] netlink: 156 bytes leftover after parsing attributes in process `syz.6.4107'. [ 883.269099][ T4323] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.418115][ T4323] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.592384][ T4323] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.699144][T17071] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4115'. [ 883.742523][T17071] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 883.820852][T17079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4118'. [ 884.238631][T17046] chnl_net:caif_netlink_parms(): no params data found [ 884.307855][T17089] netlink: 156 bytes leftover after parsing attributes in process `syz.6.4121'. [ 885.009462][T17046] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.023366][T17046] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.034665][T10179] Bluetooth: hci1: command 0x0409 tx timeout [ 885.074280][T17046] device bridge_slave_0 entered promiscuous mode [ 885.132149][T17116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4129'. [ 885.173844][T17120] netlink: 'syz.0.4129': attribute type 10 has an invalid length. [ 885.239010][T17120] device veth0_vlan left promiscuous mode [ 885.270833][T17120] device veth0_vlan entered promiscuous mode [ 885.286104][T17120] team0: Device veth0_vlan failed to register rx_handler [ 885.408499][T17046] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.420989][T17046] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.433112][T17046] device bridge_slave_1 entered promiscuous mode [ 885.903433][T17046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 885.996671][T17046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 886.180319][T17150] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 886.353441][T17046] team0: Port device team_slave_0 added [ 886.391209][T17046] team0: Port device team_slave_1 added [ 886.424745][T17145] device syzkaller0 entered promiscuous mode [ 886.618363][T17046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 886.633363][T17046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 886.724781][T17046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 886.829360][T17046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 886.843279][T17046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 886.941394][T17046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 887.114604][T10179] Bluetooth: hci1: command 0x041b tx timeout [ 887.804877][T17170] __nla_validate_parse: 1 callbacks suppressed [ 887.804915][T17170] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4144'. [ 887.881855][T17174] netlink: 'syz.6.4144': attribute type 10 has an invalid length. [ 888.252044][T17046] device hsr_slave_0 entered promiscuous mode [ 888.291473][T17046] device hsr_slave_1 entered promiscuous mode [ 888.324777][T17046] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 888.341785][T17046] Cannot create hsr debugfs directory [ 888.626974][T17204] netlink: 144 bytes leftover after parsing attributes in process `syz.6.4154'. [ 888.700482][T17204] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 888.836105][ T4323] device hsr_slave_0 left promiscuous mode [ 888.851674][ T4323] device hsr_slave_1 left promiscuous mode [ 888.869900][ T4323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 888.904518][ T4323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 888.953506][ T4323] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 888.982979][ T4323] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 889.194707][T10179] Bluetooth: hci1: command 0x040f tx timeout [ 890.233415][ T4323] team0 (unregistering): Port device virt_wifi0 removed [ 890.613769][ T4323] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 890.662437][ T4323] team0 (unregistering): Port device team_slave_1 removed [ 890.742559][ T4323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 890.787183][ T4323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 890.831928][ T4323] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 891.096373][ T4323] bond0 (unregistering): Released all slaves [ 891.140358][T17226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4159'. [ 891.149641][T17228] netlink: 'syz.0.4159': attribute type 10 has an invalid length. [ 891.163523][T17228] device veth0_vlan left promiscuous mode [ 891.170484][T17228] device veth0_vlan entered promiscuous mode [ 891.178128][T17228] team0: Device veth0_vlan failed to register rx_handler [ 891.284746][T10179] Bluetooth: hci1: command 0x0419 tx timeout [ 891.998726][T17290] netlink: 'syz.3.4176': attribute type 10 has an invalid length. [ 892.055588][T17281] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4173'. [ 892.109927][T17281] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 892.199614][T17287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4176'. [ 892.684156][T17046] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 892.703589][T17046] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 892.756037][T17046] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 892.786165][T17046] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 892.883858][T17313] device syzkaller0 entered promiscuous mode [ 893.135815][T17046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 893.192197][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 893.219981][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 893.271571][T17046] 8021q: adding VLAN 0 to HW filter on device team0 [ 893.319480][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 893.339038][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 893.366330][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.373485][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 893.402222][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 893.554991][ T8655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 893.595165][ T8655] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 893.605424][ T8655] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.612634][ T8655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 893.714830][ T8655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 893.735244][ T8655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 893.790272][ T8655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 893.845657][ T8655] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 893.901911][ T8655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 893.932773][ T8655] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 894.013874][ T8655] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 894.061100][ T8655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 894.096548][ T8655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 894.114260][ T8655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 894.143989][ T8655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 894.214979][T17046] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 894.382755][T17356] netlink: 144 bytes leftover after parsing attributes in process `syz.7.4196'. [ 894.455130][T17356] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 894.560404][T17359] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4197'. [ 895.208878][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 895.244821][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 895.330794][T17046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 895.487644][T17385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4205'. [ 895.619636][T17385] netlink: 'syz.0.4205': attribute type 10 has an invalid length. [ 895.658522][T17385] device veth0_vlan left promiscuous mode [ 895.719206][T17385] device veth0_vlan entered promiscuous mode [ 895.780530][T17385] team0: Device veth0_vlan failed to register rx_handler [ 895.921443][T17396] netlink: 'syz.7.4207': attribute type 10 has an invalid length. [ 896.264637][T17409] netlink: 'syz.6.4211': attribute type 10 has an invalid length. [ 896.300466][T17409] team0: Device wg1 is of different type [ 896.460455][T17423] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4216'. [ 896.512159][T17423] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4216'. [ 896.533803][T17426] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4216'. [ 896.546149][T17423] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4216'. [ 896.942873][T17442] netlink: 'syz.0.4221': attribute type 10 has an invalid length. [ 897.259690][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 897.273681][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 897.347788][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 897.373536][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 897.398147][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 897.480010][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 897.503563][T17046] device veth0_vlan entered promiscuous mode [ 897.551057][T17046] device veth1_vlan entered promiscuous mode [ 897.639733][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 897.653145][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 897.667566][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 897.702087][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 897.721313][T17046] device veth0_macvtap entered promiscuous mode [ 897.737419][T17046] device veth1_macvtap entered promiscuous mode [ 897.795738][T17046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.853397][T17046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.873815][T17046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.892349][T17046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.903162][T17046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.923201][T17046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.941384][T17046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 897.971115][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 898.003189][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 898.012809][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 898.063836][ T7792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 898.107734][T17046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 898.169202][T17046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.203599][T17046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 898.231464][T17046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.292679][T17046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 898.304786][T17046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.325734][T17046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 898.348574][T17046] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.364233][T17046] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.374763][T17046] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.383640][T17046] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.397180][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 898.407474][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 898.429809][T17490] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4233'. [ 898.470809][T17494] netlink: 'syz.6.4233': attribute type 10 has an invalid length. [ 898.677369][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 898.700829][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.740778][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 898.779324][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 898.843676][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.901109][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 899.442786][T17526] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4245'. [ 899.494840][T17526] netlink: 'syz.6.4245': attribute type 10 has an invalid length. [ 899.805789][T17541] netlink: 'syz.3.4247': attribute type 10 has an invalid length. [ 899.912515][T17541] team0: Device hsr_slave_0 failed to register rx_handler [ 900.095441][T10179] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 900.526134][T17569] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4259'. [ 900.561137][T17569] netlink: 'syz.6.4259': attribute type 10 has an invalid length. [ 900.697878][T17575] netlink: 'syz.5.4261': attribute type 10 has an invalid length. [ 900.986046][T17585] netlink: 'syz.0.4265': attribute type 10 has an invalid length. [ 901.059956][T17585] team0: Device wg1 is of different type [ 901.908237][T10179] Bluetooth: hci2: unexpected event 0x35 length: 15 > 6 [ 902.295892][T17628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4274'. [ 902.430440][T17628] netlink: 'syz.3.4274': attribute type 10 has an invalid length. [ 902.554928][T17638] netlink: 'syz.5.4278': attribute type 10 has an invalid length. [ 902.675208][T17638] team0: Port device wlan1 added [ 903.092791][T10179] Bluetooth: hci3: unexpected event 0x35 length: 15 > 6 [ 903.230922][T17661] netlink: 'syz.6.4287': attribute type 20 has an invalid length. [ 903.400574][T17667] netlink: 'syz.7.4291': attribute type 10 has an invalid length. [ 903.502190][T17667] team0: Device hsr_slave_0 failed to register rx_handler [ 903.571155][T17675] netlink: 'syz.0.4294': attribute type 10 has an invalid length. [ 903.655997][T17675] team0: Port device wlan1 added [ 904.029862][T10179] Bluetooth: hci2: unexpected event 0x35 length: 15 > 6 [ 904.328566][T17699] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4306'. [ 904.435440][T17699] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 904.529276][T17704] netlink: 'syz.3.4308': attribute type 10 has an invalid length. [ 904.553372][T17704] team0: Device hsr_slave_0 failed to register rx_handler [ 904.794605][T17714] netlink: 'syz.3.4310': attribute type 10 has an invalid length. [ 905.352996][T17725] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 905.537061][T10179] Bluetooth: hci0: unexpected event 0x35 length: 15 > 6 [ 906.178008][T17762] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 906.393100][T10179] Bluetooth: hci0: unexpected event 0x35 length: 15 > 6 [ 906.551670][T17774] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.566220][T17774] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.692363][T17773] device bridge_slave_1 left promiscuous mode [ 906.782928][T17773] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.168717][T17773] device bridge_slave_0 left promiscuous mode [ 907.228255][T17773] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.358492][T17781] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4340'. [ 907.375222][T17780] netlink: 'syz.7.4340': attribute type 10 has an invalid length. [ 907.388740][T17780] device veth0_vlan left promiscuous mode [ 907.397519][T17780] device veth0_vlan entered promiscuous mode [ 907.407808][T17780] team0: Device veth0_vlan failed to register rx_handler [ 907.464955][T17800] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 907.474348][T17795] netlink: 'syz.3.4344': attribute type 20 has an invalid length. [ 907.809348][T10179] Bluetooth: hci4: unexpected event 0x35 length: 15 > 6 [ 908.335019][ T41] wlan1: Trigger new scan to find an IBSS to join [ 908.664405][T17835] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4361'. [ 908.812580][T17835] netlink: 'syz.7.4361': attribute type 10 has an invalid length. [ 908.856708][T17835] device veth0_vlan left promiscuous mode [ 908.887266][T17835] device veth0_vlan entered promiscuous mode [ 908.924042][T17835] team0: Device veth0_vlan failed to register rx_handler [ 908.991344][T10179] Bluetooth: hci3: unexpected event 0x10 length: 15 > 1 [ 908.991450][T10179] Bluetooth: hci3: hardware error 0x00 [ 909.779073][T17876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4378'. [ 909.807732][T17872] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 909.900759][T17876] netlink: 'syz.3.4378': attribute type 10 has an invalid length. [ 910.030706][ T4272] Bluetooth: hci3: unexpected event 0x10 length: 15 > 1 [ 910.815383][T17907] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 911.034781][T10179] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 911.041392][T10179] Bluetooth: hci3: hardware error 0x00 [ 911.159912][T17911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4393'. [ 911.241304][T17917] netlink: 'syz.0.4393': attribute type 10 has an invalid length. [ 911.335875][T17917] device veth0_vlan left promiscuous mode [ 911.357452][T17917] device veth0_vlan entered promiscuous mode [ 911.410695][T17917] team0: Device veth0_vlan failed to register rx_handler [ 912.146770][T17951] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 912.521457][T17968] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4414'. [ 912.683790][T17974] netlink: 'syz.5.4414': attribute type 10 has an invalid length. [ 912.916610][T17974] device veth0_vlan left promiscuous mode [ 912.936753][T17974] device veth0_vlan entered promiscuous mode [ 912.948825][T17974] team0: Device veth0_vlan failed to register rx_handler [ 913.124481][T10179] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 913.464270][T18001] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4426'. [ 913.495993][T18001] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 914.109312][T18022] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4435'. [ 914.174366][T18022] netlink: 'syz.5.4435': attribute type 10 has an invalid length. [ 914.220144][T18022] device veth0_vlan left promiscuous mode [ 914.273480][T18022] device veth0_vlan entered promiscuous mode [ 914.315398][ T7792] wlan1: Trigger new scan to find an IBSS to join [ 914.330357][T18022] team0: Device veth0_vlan failed to register rx_handler [ 915.247113][T18056] netlink: 144 bytes leftover after parsing attributes in process `syz.6.4451'. [ 915.306524][T18056] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 915.428885][T18064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4454'. [ 915.462697][T18064] netlink: 'syz.3.4454': attribute type 10 has an invalid length. [ 916.374343][T18092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4468'. [ 916.454099][T18092] netlink: 'syz.3.4468': attribute type 10 has an invalid length. [ 916.527738][T18097] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 916.941261][T18117] netlink: 144 bytes leftover after parsing attributes in process `syz.5.4479'. [ 916.995802][T18121] [ 916.998754][T18121] ============================= [ 917.003730][T18121] WARNING: suspicious RCU usage [ 917.006918][T18117] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 917.009369][T18121] syzkaller #0 Not tainted [ 917.024651][T18121] ----------------------------- [ 917.030247][T18121] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 917.039295][T18121] [ 917.039295][T18121] other info that might help us debug this: [ 917.039295][T18121] [ 917.050757][T18121] [ 917.050757][T18121] rcu_scheduler_active = 2, debug_locks = 1 [ 917.058952][T18121] 1 lock held by syz.6.4481/18121: [ 917.064107][T18121] #0: ffffffff8cb2d720 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 917.074991][T18121] [ 917.074991][T18121] stack backtrace: [ 917.081099][T18121] CPU: 1 PID: 18121 Comm: syz.6.4481 Not tainted syzkaller #0 [ 917.088769][T18121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 917.099120][T18121] Call Trace: [ 917.102520][T18121] [ 917.105548][T18121] dump_stack_lvl+0x188/0x24e [ 917.110521][T18121] ? show_regs_print_info+0x12/0x12 [ 917.115842][T18121] ? load_image+0x400/0x400 [ 917.120493][T18121] lockdep_rcu_suspicious+0x1dd/0x300 [ 917.126235][T18121] get_callchain_entry+0x2a5/0x3b0 [ 917.131517][T18121] get_perf_callchain+0xc4/0x490 [ 917.136510][T18121] ? put_callchain_entry+0xb0/0xb0 [ 917.141672][T18121] ? plist_add+0x3d4/0x480 [ 917.146238][T18121] ? verify_lock_unused+0x140/0x140 [ 917.151499][T18121] __bpf_get_stack+0x2de/0x520 [ 917.156559][T18121] ? stack_map_get_build_id_offset+0x970/0x970 [ 917.162772][T18121] ? __cant_sleep+0x220/0x220 [ 917.167565][T18121] ? bpf_prog_d43750871481577d+0x3d/0x41 [ 917.173316][T18121] bpf_get_stack_raw_tp+0x189/0x1c0 [ 917.178775][T18121] bpf_prog_d43750871481577d+0x3d/0x41 [ 917.184459][T18121] bpf_prog_run_pin_on_cpu+0x64/0x150 [ 917.189872][T18121] bpf_prog_test_run_syscall+0x313/0x4a0 [ 917.195521][T18121] ? sock_gen_cookie+0x60/0x60 [ 917.200298][T18121] ? sock_gen_cookie+0x60/0x60 [ 917.205088][T18121] bpf_prog_test_run+0x31e/0x390 [ 917.210240][T18121] __sys_bpf+0x62b/0x780 [ 917.214504][T18121] ? bpf_link_show_fdinfo+0x380/0x380 [ 917.219935][T18121] ? lock_chain_count+0x20/0x20 [ 917.224842][T18121] __x64_sys_bpf+0x78/0x90 [ 917.229284][T18121] do_syscall_64+0x4c/0xa0 [ 917.233732][T18121] ? clear_bhb_loop+0x60/0xb0 [ 917.238573][T18121] ? clear_bhb_loop+0x60/0xb0 [ 917.243273][T18121] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 917.249223][T18121] RIP: 0033:0x7f6fc699c819 [ 917.253679][T18121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 917.273327][T18121] RSP: 002b:00007f6fc7770028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 917.281779][T18121] RAX: ffffffffffffffda RBX: 00007f6fc6c15fa0 RCX: 00007f6fc699c819 [ 917.289879][T18121] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 917.297944][T18121] RBP: 00007f6fc6a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 917.305916][T18121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 917.313890][T18121] R13: 00007f6fc6c16038 R14: 00007f6fc6c15fa0 R15: 00007ffc4dd6b068 [ 917.321979][T18121] [ 917.399385][T18117] team0: Port device team_slave_0 removed [ 917.410729][T18117] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 918.316104][ T9568] wlan1: Trigger new scan to find an IBSS to join [ 920.326803][ T7792] wlan1: Creating new IBSS network, BSSID 4a:05:95:3d:b6:e0 [ 920.345177][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready