last executing test programs: 22.102559239s ago: executing program 0 (id=2321): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_config_ext={0x1, 0x2}, 0x104101, 0x4, 0x1, 0x1, 0x6, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x1, 0x18}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYRES8=r4, @ANYRES8=r6], 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r5, 0x0, 0xab, 0x67, &(0x7f0000000480)="62a8fa688624cca97de60738932a2765d992cd42b7f55b0857e4c8b93dafb1f4949c9ad9cdd4cb2b1f4f10e8e1ac5c5189b1619e02596d853b3016f3d2b1814e0607dea2a03045c9f23a01ae261e54e1fe1918a5b91a532b1130e7181e4d4bf20da478d78403f2874cb5d868e51fa9e21aa9865ade856b8675621f776171132561258371f373c162d5f3ebafa4912e88ec34591d32af560e30053a787c38fc90506e9223466dbbb77ea408", &(0x7f0000000540)=""/103, 0x2, 0x0, 0x68, 0xdf, &(0x7f00000005c0)="033d0ce4034390fcaf116f27afaa9c6501ab9c85c7dca65bbf0bc2ce6034ef395683ad25bc151daf7c2506758019368d8d03c946d1968f8e6c669484aa132dd8467af3c01fe117bdf43a2101f5e7f0392e3d7b8a75101a57a393e9e2d7241dec1a2ff9ac4e078847", &(0x7f0000000640)="9c2318025a07065aa8161032a0a327fa5bad89bff04814f0b8732c73d6db7e5204f205c1574827bd4f17f5ca5867cdfb303c7ccabf3c363d6b5cf1e7df4790473d9d8cedd01679790195c65583a1483230f64f2df121fd96da827166dec388425802b0a8b6a8cb7b44bc3198f4d85cf1cc0552dc13c9e890de319936bfb661c3e23fa8bf8d953593bcbef563492b75666b7944ce4c200fa2813ab06cdacc33c9cf2736c7023a1ce4a48fbda2c04f2436784ddedc2335f3501fb433503bc913b23e7c96cff2d2baedbebcce8bd0d3cb96c071bb4c4859cffc33643e4f6851aa", 0x4, 0x0, 0x27c0eed2}, 0x50) socket$kcm(0x11, 0x200000000000003, 0x300) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x4e28, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000007c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010102}}}], 0x20}, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x10002}, 0x50) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x14, 0x14, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@generic={0xc, 0x5, 0x8, 0xb4, 0x80000000}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x10001, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0xb, 0x10001, 0x94}, 0x10, 0x0, r0, 0x5, 0x0, &(0x7f0000000340)=[{0x4, 0x5, 0x0, 0x1}, {0x4, 0x4, 0x8, 0xa}, {0x2, 0x3, 0x9, 0x3}, {0x2, 0x3, 0x8, 0x1}, {0x1, 0x3, 0xe, 0x8}], 0x10, 0x1}, 0x94) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) r9 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) 21.723975125s ago: executing program 0 (id=2324): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r0, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, &(0x7f00000007c0)="10c46de6ca57460438cd729a7e953aa50503789d589bd68927bd9d43be1d70484c8d6c2ce3d8413797b98f9dbad19596fc8224aa2cd6f29ea041c50e6f4b686cebac0c7a0b30e244d073ba621ac898b8952bb1465e629150fe93dc8ba23ab8cb2b", 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000feffff3f000000000000000085100000060000008510000004000000c60800000200000018000000000000000000000000000000950000000000000035950000000000000095000000000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 21.138030191s ago: executing program 0 (id=2330): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10002, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="0207070002000700e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r0}, 0x18) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r4}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095000000000000002f81c461b3fea834ceb0e17d9838c2830ca7ce46e581a192326a3698c79205e02f1561b0a3c595448e9f7024b45fb2006c9917fe2a42fcd2ce278009682dc8f7c867b177ec5bd50b92aedef35b6cd87b56690b4c96f63ab021ee1cf616d8af74911d5e51b76d2c31b8bece7b0f"], &(0x7f0000000080)='GPL\x00'}, 0x65) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103", @ANYRESDEC=r1, @ANYRES8=0x0, @ANYRES16=r5], 0xfe33) close(0x3) socket$kcm(0xa, 0x3, 0x0) 20.981802376s ago: executing program 1 (id=2333): r0 = getpid() perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x5, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_bp={0x0, 0x6}, 0x14b25, 0x2e, 0xffffebff, 0x3, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)) socket$kcm(0x21, 0x2, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800190007000200060001c00200bc24eab556a705251e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 20.852732948s ago: executing program 2 (id=2334): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0021000000000000000000000000b6aa24609ebe8d9d5f00000000e20000000000000000e526d9da68224236da4ac5f7d8c2b676000000000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x97d2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000040), 0x0}, 0x20) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="13000000100000000200000000000000", @ANYRES32, @ANYBLOB="0000001200000000070000000000000000000008c6c8fdc8aa6b84983f81b3882bea8e9dd4ee45ed9935be192f4ea8c6a1e92c389d975c4ce3fa188f4554fcdce80b29b820e047ba2c57b2a6e904570021de1d4e9336e0c0722cc8eb600068dd4c4058c4eb73df22f261a74d0dc3f70da0bd74cfab097a9aec03eccefdb7e201da2f9da4db64798037de2c64dbbc51339da6e41cad630a709a606e2858de12910a8dded4cf721ce3150995303c72e375540c09362ae784f14303caefc4a9faa773d7796672c6a38b180dfde3ecbea04b977f6593ef7a2b67206d37dc0c2d92224fca2312d569c2c56d405bd41c6eb55080", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x4000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r6, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000004900"/16], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', r7, 0x0, r6}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="000400"/18, @ANYRES32=r7, @ANYRES32, @ANYBLOB="010000000400"/18], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast}) 20.402788582s ago: executing program 1 (id=2336): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, 0x0}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="13000000100000000200"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={r2, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x20, &(0x7f0000000840)={&(0x7f0000000740)=""/122, 0x7a, 0x0, &(0x7f00000007c0)=""/107, 0x6b}}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r2, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xe, 0x0, &(0x7f0000000200), &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x1, '\x00', r5, @fallback=0xd, r6, 0x8, &(0x7f00000006c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x4, 0x9, 0x7f, 0xffffffff}, 0x10, r7, 0xffffffffffffffff, 0x6, &(0x7f0000000980)=[r4, r2, r3, r8], &(0x7f00000009c0)=[{0x2, 0x3, 0xc, 0xb}, {0x5, 0x3, 0xb, 0xa}, {0x0, 0x3, 0xb, 0x2}, {0x3, 0x8, 0x0, 0x7}, {0x2, 0x5, 0x6, 0x5}, {0x2, 0x1, 0xe, 0xa}], 0x10, 0x2e6}, 0x94) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0xfffffffe}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0xd, 0x10, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r9, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0xfeb, &(0x7f0000001e00)=""/4075, 0x41000}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="00000000030000000300"/21], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x4000}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8914, &(0x7f0000000080)) (async) socket$kcm(0x29, 0x2, 0x0) (async) socketpair(0x23, 0x6, 0x3, &(0x7f0000000d00)) socketpair(0x23, 0x3, 0x8000, &(0x7f0000000d40)) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) 20.214819349s ago: executing program 2 (id=2337): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005940)={0xffffffffffffffff}) sendmsg$sock(r1, &(0x7f0000006e40)={0x0, 0x0, 0x0}, 0x4004010) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40086602, &(0x7f0000000100)=0x50) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x23, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x8927, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x28, 0x13, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x80ffffff}}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 20.21335114s ago: executing program 0 (id=2338): r0 = socket$kcm(0xa, 0x0, 0x73) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x14, 0x5, &(0x7f00000008c0)=ANY=[@ANYRESOCT], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) (async) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) (async) r3 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x4, 0x3, 0x0, 0x6, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x100002, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000a00)=ANY=[@ANYRES16=r3, @ANYRES16=r4, @ANYRESDEC=r3, @ANYBLOB="e270c6220e3419bd000af9dc47d12c1eb4064d5ac068412407871bc2d38dc2430f87aa5d3234a27e5ddd79b39af85b7277cee41b568f08599e7a7af51e8420a9db25817543d68947cdcc61ea5ce7446596cd61c198c553554c4396eb929aa6db297246b7f63513b6f8a07d0f58741efa626cc010c655169c53092c7fb11986e07ccd7e440ae17b08d5aeef69ae0ec02f9cea11fe20", @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) (async) socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000009e8685000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000cbd520850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x891e, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\xe0\xff\xff\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}, 0x4) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_int(r11, &(0x7f00000003c0)=0x103, 0x12) r12 = openat$cgroup_ro(r9, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r12, &(0x7f0000000080), 0x12) (async) sendmsg$inet(r12, &(0x7f0000000880)={&(0x7f0000000280)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, &(0x7f0000000800)=[{&(0x7f00000002c0)="39e59e2c05ea0d896623b0366bc8b4ba1665eb6f34ff84f52ef079c9ced22ebcc621082e9dfd586563639bdb7e8b6967c6bc", 0x32}, {&(0x7f0000000340)="cf270a", 0x3}, {&(0x7f0000000600)="908c108915ce8d895c8ef8d7d2b6e95b207c63668a0cf5c5691b2fe0d9702007abc0b109edaf1310b9f9f07870caea0fe7f0feb9efc5f5a33a9b7f12e30da39b592e5ae42e077b0447654cc9e258ef703738808846e6784ce01b915796247f757d3fc60c2d3f6fa96fac9c61c8b61f94336433213d3b013a025d92266d5748e147ebce8e333eef3b9ae84e937293eec7593ee9a86a26b7364ba70fc68fcc4f5d7887f9b70bd57453e20ea9561c27a9f6d6a137e6218913b4fd811a18c3857ece4c11", 0xc2}, {&(0x7f00000004c0)="421ad7108558f21f310d39aa7079c22c441b0ac5b9e444604a20f9d3c2a35cf987712492b0beb384322e0907f8508e4f9a5a2f712534", 0x36}, {&(0x7f0000000700)="0c23412af898f5a42486ba4cc60193894110a3f5e7831b6ccdd75dc4a2b8905617eff7b3870da29cac8ed409cc141f0de18e6006e6b73bd44a169c9ff60e1432089dcb26a192e2cad1f14f5c15dbeb62f0e9334d74783f42055c630f72aeac714145345f", 0x64}, {&(0x7f0000000780)="7e2cd062b9cd6b096a9bf7452c2507e590c41668fcad30785dd820c79b26d65e66f2e43207a3d2d9322515b0fd4d0059aaa7046145ded6ac7ad9c6a0d538a2e4056d334f7a43b5a74b536fa8691b06e8c2297e9227a9e3", 0x57}], 0x6}, 0x40000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r8}, 0x4) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000940)='memory.swap.current\x00', 0x26e1, 0x0) 20.049740706s ago: executing program 3 (id=2340): perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) r2 = socket$kcm(0x2c, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x11b, 0x3, &(0x7f0000000040)=r3, 0x4) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000014006b030231a6080c000af32c0cae93000f00e5aa000017d34460bc24ea000007000000000000002756f475ce36c2d13b48df0000ecb8f6ec63c9f4d493803fd88635a6d10000f8ea56a52600e6657594f1817d00000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0xffffffffffffffff}, 0x0, 0x800, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c850000002b000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2000000}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 19.737673385s ago: executing program 0 (id=2341): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdir(0x0, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="b702000000001700bfa300000000000007030000f0ffffff720af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee2922bd165a5a68488e010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7f22b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d74bf0a305790c9d644735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f535447cc0facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf00000048d2570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f09f4db033e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e7f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec50f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754d98b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8cf632c2604eab3a62a28611da1cae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412e1bdebae06edb51a134301b4627d4927287daf9dcae6720334862f3a18094f1edd9e3503379815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2f09e99f4ab5546ba1e5ad6a329f24e73a9c38eec34bd4dcc1609f6150e2de72f6599a2310c3841f4bb7f39cabc82c9fdfff5587ed4fa84090635fa3445c4cc54478b2f98320944ac7cb1c4e414556f7b0b763a00a84327cec7e11b3470f0384b27bbfdd8b2472497e7fe8c5df7e0a00641872472efa21c9ad3979e642dcc85c17ca8e084aa9689b83426e2fdaa01f500000000000000000000f9fd84fa991466ff749afe900d02281b2bb60d458340c4f68ec34835760ceca945bf181a000000c000000000b4a76515564ae189de7c1765f0ff68a0388ca8dd2aa831d0e01f0d7ce74401a58cef60e63e97a50c18de54121ce66380224ab7b9c0d4710f2347bad2c9b3e41cc738c1092728687f33e5cdb077223dc82c2137b4e3ba6791a2cd764e654f904c9505b7c5e3b2897072e747534952dcda50cde3e4deb6ebf85a04c3e415112b01eed6515c845a8a20519cd21787d560e9d8283fa8ff0c17b63ba06577c26678ff45420a1f85df47dbfc44e534f71aae5693fb5df61c5096219091ce0cd8e1e2e79bf9d37779e52007c66a00e6ded1499ed3892ed1544d1577906b52e16c734d4aec07dd15faa768c97298be87dd34ce704ffe3da8b46708cf972de4f31c0705ac933db80bdcfcb35c0d4620d4ec270ff7c9ce1b78994dd2b28b9d1c5c469d4c1a61781dce2f1b54d6"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@ip_ttl={{0x14}}, @ip_pktinfo={{0x12, 0x84, 0x6, {0x0, @multicast2}}}], 0x38}, 0x0) 19.554707193s ago: executing program 1 (id=2342): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0x7}, 0x104101, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000e40)="2e0000003e000511d25a80698c6394090124fc602f6e354016000180006000000000000000002cd65c65c3d7d756", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0xd, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffff47}, [@call={0x85, 0x0, 0x0, 0x53}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="160000000000000004010000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000d900000000000000000000000082883a7a21f419f4f2e5454bcbbb1b4b7f4014207ac8ccf74760a8893b6396a3bb8b91623b3541e1e1e5ac92acb51217c6ee084cdc5c58eaf651e769e58159c8b116eb4f4ddba0024b606e5bb55474f439651f0247bf77d7afee8c8a2c6d1f8c3e8b9d829267c2a3dc623cd946a96d1e619b511d61e568037106e85b6ac865017d3ab51cd64e035ec3"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x5, &(0x7f0000000d40)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xf, 0x10}, [@map_val={0x18, 0x3, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x8}], {0x95, 0x0, 0x5}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f0000000040)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000000)={0x2}, 0x10}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={&(0x7f0000000200)="74864d932573918f04de1f6cad6544ad515e8801f944fee0c9ec160d15866196972a28e56e52e5db2cc9d1d9", &(0x7f0000000240)=""/152, &(0x7f0000000440)="7cc19460d808fec1d837aa2dca6372f215072c5390a5cf15acd8ae7bf8e60c1d5251421d39b4a894b3656521b670818d760318760aefa79bcc3a02f708876fdd2089c13d4785ace73964185ecb00bfa57da500f911b5ff36936a4bddc636bed0fa5ecfb0957dfd00035e69a1c673b34300e74e7316f34f8224d75572b0ea2eff", &(0x7f0000000300)="149af5e5894ce4e5ff660e62eadb162cb7e4de97f4a52e1b8abb2b27abb5c994", 0x4, r7}, 0x38) 19.295227707s ago: executing program 3 (id=2343): socket$kcm(0xa, 0x0, 0x11) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x0, 0x42}, 0x28) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) socket$kcm(0x2a, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='freezer.parent_freezing\x00', 0x0, 0x0) sendmsg$inet(r1, &(0x7f00000005c0)={&(0x7f0000000300)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000440)=[{0x0}], 0x1, &(0x7f0000000580)}, 0x20008041) r2 = perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0xa, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x10001) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r6 = socket$kcm(0x2, 0xa, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdc7}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000380)="3f121b5ae730a16b38ec3c25a36f", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r6, 0x1, 0x2e, &(0x7f0000000640)=r5, 0x4) recvmsg(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xff79}, 0x60) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000140)={r6}) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001880)="5c00000012006b1e003de3d86e6c1dff05137e0300000000000000b68675f8001d000a00a0e69ee517d34442bc24eab556a7e60f1e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r4, 0x0, 0x40000000) sendmsg$kcm(r1, 0x0, 0x20044041) 19.226281784s ago: executing program 0 (id=2344): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x28, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffd46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402000a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) r2 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x23, &(0x7f0000000040), 0xcf) r5 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212970902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r6) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) 19.102672616s ago: executing program 2 (id=2345): socket$kcm(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)="bb00000031000b63ddd2806c8c6f94f903f4b76ffa24fc60100103000a0046afcdffa67544a771ef35020005358ac137800500026ced000300d518b01827bc6f0691bb68b49ed4e6e12a1515bb1f58a2ff0e5c845a742bd6e67555153cb5981d33ba9a63540ab4983ce049c30d4ddd3aecc7cc7170a14d34dc4fc6b7f460b1b878b9ccae5d3ff11f8f6d1c6bdc5980368f76a126861146615a317e2f627c0e71b3f7825bf428f8", 0xa7}, {&(0x7f0000000380)="e166186d6cb09acad6ffadb2be01b8263d3abab0c802ff3938", 0x19}, {0x0}], 0x3}, 0x20000004) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x29, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x3, 0x0, 0x0, 0x0, 0x41}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x10, 0xa69ddc5f67226f17, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xe, &(0x7f0000004000)=ANY=[], 0x0, 0x13, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x9, 0x7fff, 0x7, 0x9, 0x6, 0x2, 0x0, 0xfd, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d0002887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x12) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=r6, @ANYBLOB="00000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r5}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x2, 0x201, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x103d34}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) 18.999369026s ago: executing program 1 (id=2346): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) (async) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={0xffffffffffffffff}, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000b40)={r0, r1}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000240)={r0, r2}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f0000"], 0x48) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/227, 0xe3}}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) close(0xffffffffffffffff) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xffdd) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x5}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) (async) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 18.834704221s ago: executing program 3 (id=2347): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, @fallback=0x41, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0xa, 0x3, 0x3a) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x7c, 0x0, 0xa, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x890b, &(0x7f0000000100)) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x890c, &(0x7f0000000100)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r4 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000005c0)=r4, 0x12) r7 = openat$cgroup_freezer_state(r2, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r7, &(0x7f00000000c0)='THAWED\x00', 0x7) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r8 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r8, 0x107, 0x12, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0000000041130000000000000000001d00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.678751266s ago: executing program 2 (id=2348): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000bf0000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', r2, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x12, &(0x7f00000001c0)=@framed={{0x5, 0x0, 0x0, 0x0, 0x2, 0x71, 0x11, 0x31}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r3}, 0x94) 18.576448566s ago: executing program 1 (id=2349): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x5, 0x8, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x0, '\x00', r2, r3, 0x4, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079d}) ioctl$TUNSETVNETLE(r4, 0x400454dc, 0x0) 18.477490065s ago: executing program 2 (id=2350): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYRES32], 0x50) close(r1) (async) close(r1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000000000000, 0x7}, 0x113915, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000000000000, 0x7}, 0x113915, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r6}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000006000000400000004000000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x50) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x11, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100000, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f0000000400)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000900000000000000080000008500000027000000850000000700000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) (async) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) write$cgroup_subtree(r8, &(0x7f0000001080)=ANY=[@ANYRESOCT=r0, @ANYBLOB="3e0002"], 0x9a) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x0, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x4}, 0x8, 0x33, 0x43a1bd72, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x3efd7ab4c41335d9, @perf_config_ext, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) recvmsg$unix(r8, &(0x7f0000000840)={&(0x7f0000000580), 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000600)=""/137, 0x89}, {&(0x7f00000006c0)=""/64, 0x40}, {&(0x7f0000000700)=""/111, 0x6f}, {&(0x7f0000000780)=""/141, 0x8d}, {&(0x7f0000002a00)=""/4096, 0x1000}], 0x5, &(0x7f0000001000)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x78}, 0x10022) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r9, 0x6, 0x3, 0x0, 0x0) 18.110795921s ago: executing program 1 (id=2351): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0xb, 0x0, 0x0, 0x95, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f97c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000004}, 0x94) (async) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r1, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x4008050) (async) socket$kcm(0x2b, 0x1, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000000000000, 0x7}, 0x113915, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000300)={'wlan1\x00'}) 18.083718043s ago: executing program 2 (id=2352): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="91102e000000000095"], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfbffffffffffffbf, r0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32], 0x50) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$SIOCSIFHWADDR(r1, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x21e2, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xcfbcd61446e2f85d}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x79, 0x0, 0x0, 0x0, 0x4000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2, 0x5, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x62, 0xfffffffffffffe74, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000cc0)=""/265, 0xcb95, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x3ff}, 0x24) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xd3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000640)='cpu&08\n&\f0\xed') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1d, 0x0, 0x0, &(0x7f0000000d00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x0, 0x6, 0x0, &(0x7f0000000100)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) 17.991769142s ago: executing program 3 (id=2353): r0 = socket$kcm(0x2, 0x200000000000006, 0x106) setsockopt$sock_attach_bpf(r0, 0x0, 0x5, 0x0, 0x300) 17.090945728s ago: executing program 3 (id=2354): r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000004ac0)=""/157, 0x9d}, {&(0x7f0000000c80)=""/230, 0xe6}, {&(0x7f0000001880)=""/4105, 0x1009}, {&(0x7f0000003800)=""/174, 0xae}, {&(0x7f0000000140)=""/109, 0x6d}], 0x5}, 0x0) 16.839525612s ago: executing program 3 (id=2355): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x6, 0x12) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7fffffff, 0x20000}, 0x4001, 0x0, 0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='sock_rcvqueue_full\x00', r4}, 0x18) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0050000000100008877fbac141416e000030a89079f03b180ff83080520e0845013f2325f004408050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) r8 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x801c581f, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x40, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x3002500, 0x0, 0x0, 0x0, 0x0, 0x0) 3.617177455s ago: executing program 32 (id=2344): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x28, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffd46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402000a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) r2 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x23, &(0x7f0000000040), 0xcf) r5 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212970902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r6) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) 2.222757278s ago: executing program 33 (id=2351): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0xb, 0x0, 0x0, 0x95, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f97c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000004}, 0x94) (async) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r1, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x4008050) (async) socket$kcm(0x2b, 0x1, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000000000000, 0x7}, 0x113915, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000300)={'wlan1\x00'}) 1.353211011s ago: executing program 34 (id=2352): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="91102e000000000095"], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfbffffffffffffbf, r0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32], 0x50) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$SIOCSIFHWADDR(r1, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x21e2, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xcfbcd61446e2f85d}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x79, 0x0, 0x0, 0x0, 0x4000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2, 0x5, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x62, 0xfffffffffffffe74, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000cc0)=""/265, 0xcb95, 0x0, 0xff, 0x194, &(0x7f0000000980)="ffc4438e5c3081d0e133e812196ec0ed923733aa8b5aba32c8650e7a66d6136853773dfbc6226be13039e230d511f1ac50cc7811aac0400e4c833fedf842ae2918e6fddb550729246fcf4c0a01bc64989ea3985fb362751a83991bd56e761379caa64f6148893ff25f38d5cd6dd695bbf9ca709a9960e0e6b054d5e2239bcb7c0fb2ac66dc4c8f534e439ff20ccaf0d48a98c19c92a3b437a699350f49606d21a403f8c112c46fea5486bf367a854b0f6c1e563b656e4794f6793a08bb3656c391643f6df71d0255054368a938d38503d064da82d5dbf395ad47ed3932669168d324ed0f6de8360d499042ddc7d02b6c0772128257702bfe6d0971f00fea85da062cdc", &(0x7f00000007c0)="4c87fe555ceb79157b1e507ff4d3cc053321e42ae89f596427188b4877ab8f1776c0685784f1174c6401ecc1dd6e2a77bc79238f87ad9215a92ff203a30099e77c543e702b4a4438d358616381745f24f74e585498af129c4b173b242f445b08135f7fa40eb7ba78160ff4f0c80e1b324d0c234cb7f43a3ff9e9535dc16000c797113a039f4508a09144090000009f38a90a24f173b3e68377e4272950a80cfcd3aa6850e917bc7e57370060f5e6db941d67fc98a1e98103830b821657438325578d2af822dd4fc13ea7a7eef8d9be4e715aec8fd6cadc41c8da5ce9da2b9e1559d92a1936fc2b3a00000000000000000072200e10ba6269b634f10f7098c65ba67ba65c0e2687637e131fb8d5ba6c12c09c8356853c434a44ff0878e496dcf9a4f5ca02c293279948f37ebb28843f92c87c057a3b410e04418557d5deda7ddd3bd1d384d64ec980187e8b64a0696571a49e847db79349c9b3c3fab5f1f977bde4d802d9026ae0c11744eb1525c5195fd215d7a432497f35c2f2cfcd2b6336b26dfef0cb968c910ea2af5cdd4d58cc08535d5514", 0x2, 0x0, 0x3ff}, 0x24) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xd3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000640)='cpu&08\n&\f0\xed') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1d, 0x0, 0x0, &(0x7f0000000d00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x0, 0x6, 0x0, &(0x7f0000000100)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) 0s ago: executing program 35 (id=2355): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x6, 0x12) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7fffffff, 0x20000}, 0x4001, 0x0, 0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='sock_rcvqueue_full\x00', r4}, 0x18) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0050000000100008877fbac141416e000030a89079f03b180ff83080520e0845013f2325f004408050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) r8 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x801c581f, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x40, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x3002500, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ T6001] veth1_vlan: left promiscuous mode [ 262.810151][ T6001] veth0_vlan: left promiscuous mode [ 264.040503][ T6001] team0 (unregistering): Port device team_slave_1 removed [ 264.155424][ T6001] team0 (unregistering): Port device team_slave_0 removed [ 264.239258][ T6001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.346985][ T6001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.601837][ T6001] bond0 (unregistering): Released all slaves [ 265.816388][ T9489] netlink: 14 bytes leftover after parsing attributes in process `syz.3.937'. [ 266.582691][ T9519] netlink: 'syz.1.944': attribute type 5 has an invalid length. [ 267.209991][ T9539] netlink: 'syz.0.949': attribute type 21 has an invalid length. [ 267.249023][ T9541] netlink: 4943 bytes leftover after parsing attributes in process `syz.2.951'. [ 267.688027][ T9554] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.955'. [ 268.134921][ T9568] netlink: 'syz.1.960': attribute type 10 has an invalid length. [ 268.201718][ T9568] batman_adv: batadv0: Adding interface: wlan0 [ 268.211059][ T9568] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.244459][ T9568] batman_adv: batadv0: Interface activated: wlan0 [ 269.369616][ T9596] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.970'. [ 271.120584][ T9613] syz.1.975[9613] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 271.120737][ T9613] syz.1.975[9613] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 272.157791][ T9635] netlink: 'syz.1.982': attribute type 11 has an invalid length. [ 272.282540][ T9635] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.982'. [ 274.336521][ T9635] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 274.725056][ T9646] netlink: 'syz.0.985': attribute type 1 has an invalid length. [ 274.737925][ T9646] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.985'. [ 274.769363][ T9646] netlink: 'syz.0.985': attribute type 10 has an invalid length. [ 275.569755][ T9662] netlink: 60 bytes leftover after parsing attributes in process `syz.2.991'. [ 275.580805][ T9662] netlink: 60 bytes leftover after parsing attributes in process `syz.2.991'. [ 275.607026][ T9662] netlink: 60 bytes leftover after parsing attributes in process `syz.2.991'. [ 275.764554][ T5770] Bluetooth: hci2: unexpected event 0x14 length: 15 > 6 [ 275.922882][ T9656] delete_channel: no stack [ 276.284511][ T9670] netlink: 'syz.2.993': attribute type 9 has an invalid length. [ 276.300089][ T9670] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.993'. [ 277.061781][ T9692] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 277.175870][ T9702] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1001'. [ 277.212846][ T9696] Q±6ã×\b‹¡Y­4: renamed from lo (while UP) [ 277.318963][ T9704] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1002'. [ 277.485994][ T9714] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 277.494311][ T9714] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 277.505885][ T9713] netlink: 'syz.2.1006': attribute type 39 has an invalid length. [ 277.564512][ T9714] netlink: 'syz.1.1007': attribute type 28 has an invalid length. [ 277.586748][ T9714] netlink: 'syz.1.1007': attribute type 29 has an invalid length. [ 277.595437][ T9714] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1007'. [ 277.676864][ T9718] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1009'. [ 277.693003][ T9718] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 277.707596][ T9718] CPU: 1 PID: 9718 Comm: syz.3.1009 Not tainted syzkaller #0 [ 277.715167][ T9718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 277.725278][ T9718] Call Trace: [ 277.728634][ T9718] [ 277.731589][ T9718] dump_stack_lvl+0x16c/0x230 [ 277.736322][ T9718] ? show_regs_print_info+0x20/0x20 [ 277.741737][ T9718] ? load_image+0x3b0/0x3b0 [ 277.746381][ T9718] sysfs_warn_dup+0x8e/0xa0 [ 277.750930][ T9718] sysfs_do_create_link_sd+0xc0/0x110 [ 277.756349][ T9718] device_add_class_symlinks+0x1cf/0x240 [ 277.762025][ T9718] device_add+0x507/0xc20 [ 277.766585][ T9718] wiphy_register+0x1e74/0x2c00 [ 277.771532][ T9718] ? cfg80211_event_work+0x40/0x40 [ 277.776705][ T9718] ? minstrel_ht_alloc+0x88a/0x990 [ 277.781879][ T9718] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 277.788018][ T9718] ieee80211_register_hw+0x2de8/0x3b10 [ 277.793547][ T9718] ? ieee80211_register_hw+0xf61/0x3b10 [ 277.799148][ T9718] ? ieee80211_tasklet_handler+0x20/0x20 [ 277.804829][ T9718] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 277.810828][ T9718] ? __debug_object_init+0xe8/0x430 [ 277.816110][ T9718] ? __asan_memset+0x22/0x40 [ 277.820763][ T9718] ? __hrtimer_init+0x186/0x270 [ 277.825673][ T9718] mac80211_hwsim_new_radio+0x2a00/0x4cf0 [ 277.831474][ T9718] ? mac80211_hwsim_free+0x220/0x220 [ 277.836829][ T9718] ? rcu_is_watching+0x15/0xb0 [ 277.841661][ T9718] ? kstrndup+0xbd/0x140 [ 277.845975][ T9718] hwsim_new_radio_nl+0xd78/0x19d0 [ 277.851148][ T9718] ? __nla_validate+0x50/0x50 [ 277.855894][ T9718] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 277.862288][ T9718] ? __nla_parse+0x40/0x50 [ 277.866766][ T9718] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 277.873165][ T9718] genl_family_rcv_msg_doit+0x209/0x2f0 [ 277.878780][ T9718] ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0 [ 277.884739][ T9718] ? bpf_lsm_capable+0x9/0x10 [ 277.889471][ T9718] ? security_capable+0x89/0xb0 [ 277.894379][ T9718] genl_rcv_msg+0x60b/0x790 [ 277.898939][ T9718] ? genl_bind+0x360/0x360 [ 277.903404][ T9718] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 277.909786][ T9718] ? trace_event_raw_event_lock_acquire+0x2a0/0x2a0 [ 277.916449][ T9718] ? perf_trace_lock+0xf7/0x380 [ 277.921382][ T9718] netlink_rcv_skb+0x216/0x480 [ 277.926199][ T9718] ? genl_bind+0x360/0x360 [ 277.930668][ T9718] ? netlink_ack+0x1110/0x1110 [ 277.935493][ T9718] ? __lock_acquire+0x7c80/0x7c80 [ 277.940573][ T9718] ? down_read+0x1ac/0x2e0 [ 277.945039][ T9718] genl_rcv+0x28/0x40 [ 277.949081][ T9718] netlink_unicast+0x751/0x8d0 [ 277.953929][ T9718] netlink_sendmsg+0x8c1/0xbe0 [ 277.958834][ T9718] ? netlink_getsockopt+0x580/0x580 [ 277.964076][ T9718] ? aa_sock_msg_perm+0x94/0x150 [ 277.969069][ T9718] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 277.974415][ T9718] ? security_socket_sendmsg+0x80/0xa0 [ 277.979935][ T9718] ? netlink_getsockopt+0x580/0x580 [ 277.985179][ T9718] ____sys_sendmsg+0x5bf/0x950 [ 277.990009][ T9718] ? __asan_memset+0x22/0x40 [ 277.994649][ T9718] ? __sys_sendmsg_sock+0x30/0x30 [ 277.999717][ T9718] ? __import_iovec+0x5f2/0x860 [ 278.004630][ T9718] ? import_iovec+0x73/0xa0 [ 278.009188][ T9718] ___sys_sendmsg+0x220/0x290 [ 278.013930][ T9718] ? __sys_sendmsg+0x270/0x270 [ 278.018795][ T9718] __se_sys_sendmsg+0x1a5/0x270 [ 278.023706][ T9718] ? __x64_sys_sendmsg+0x80/0x80 [ 278.028705][ T9718] ? lockdep_hardirqs_on+0x98/0x150 [ 278.033967][ T9718] do_syscall_64+0x55/0xb0 [ 278.038428][ T9718] ? clear_bhb_loop+0x40/0x90 [ 278.043148][ T9718] ? clear_bhb_loop+0x40/0x90 [ 278.047873][ T9718] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 278.053823][ T9718] RIP: 0033:0x7f5dc8b8f749 [ 278.058280][ T9718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.077951][ T9718] RSP: 002b:00007f5dc9954038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.086426][ T9718] RAX: ffffffffffffffda RBX: 00007f5dc8de5fa0 RCX: 00007f5dc8b8f749 [ 278.094529][ T9718] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 278.102633][ T9718] RBP: 00007f5dc8c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 278.110654][ T9718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.118668][ T9718] R13: 00007f5dc8de6038 R14: 00007f5dc8de5fa0 R15: 00007fff9427cef8 [ 278.126700][ T9718] [ 279.770716][ T9743] netlink: 'syz.2.1016': attribute type 29 has an invalid length. [ 279.783993][ T9743] netlink: 'syz.2.1016': attribute type 29 has an invalid length. [ 279.809630][ T9743] netlink: 'syz.2.1016': attribute type 29 has an invalid length. [ 279.916965][ T9745] mac80211_hwsim hwsim13 O3ãc¤±: renamed from wlan1 (while UP) [ 281.020276][ T9779] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1026'. [ 281.036712][ T9779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.056126][ T9779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.077950][ T9779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.094696][ T9779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.112031][ T9779] batadv_slave_1: entered promiscuous mode [ 281.349468][ T9787] netlink: 'syz.1.1028': attribute type 10 has an invalid length. [ 281.460975][ T9793] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.1030'. [ 281.489101][ T9793] netlink: 'syz.0.1030': attribute type 1 has an invalid length. [ 281.589133][ T9797] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1033'. [ 282.040997][ T9814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.201115][ T9841] netlink: 'syz.2.1043': attribute type 10 has an invalid length. [ 286.211397][ T9841] veth1_macvtap: left promiscuous mode [ 286.457992][ T9870] IPv6: NLM_F_CREATE should be specified when creating new route [ 286.471273][ T9870] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1051'. [ 286.549078][ T9875] netlink: 'syz.0.1052': attribute type 1 has an invalid length. [ 286.581380][ T9875] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.1052'. [ 286.986490][ T9883] netlink: 'syz.3.1055': attribute type 10 has an invalid length. [ 287.130916][ T9883] bond0: left allmulticast mode [ 287.135888][ T9883] bond_slave_0: left allmulticast mode [ 287.151567][ T9883] bond_slave_1: left allmulticast mode [ 287.983729][ T9905] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.1063'. [ 288.148743][ T9911] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1065'. [ 288.163581][ T9911] openvswitch: netlink: Flow actions attr not present in new flow. [ 288.205306][ T9911] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1065'. [ 288.229442][ T9911] openvswitch: netlink: Flow actions attr not present in new flow. [ 288.372766][ T9919] syzkaller0: entered promiscuous mode [ 288.378531][ T9919] syzkaller0: entered allmulticast mode [ 288.957969][ T9939] netlink: 'syz.3.1076': attribute type 14 has an invalid length. [ 288.967517][ T9939] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1076'. [ 289.079557][ T9945] syzkaller0: entered allmulticast mode [ 289.275523][ T9956] netlink: 'syz.0.1080': attribute type 10 has an invalid length. [ 289.283937][ T9956] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1080'. [ 289.294961][ T9956] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 289.307331][ T9956] netlink: 'syz.0.1080': attribute type 10 has an invalid length. [ 289.672003][ T9966] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1083'. [ 289.796133][ T9966] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1083'. [ 289.952109][ T9971] netlink: 'syz.2.1084': attribute type 11 has an invalid length. [ 289.976741][ T9971] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.1084'. [ 290.072395][ T9973] netlink: 'syz.1.1085': attribute type 2 has an invalid length. [ 290.878543][T10001] netlink: 'syz.0.1090': attribute type 1 has an invalid length. [ 291.543329][T10015] -1: renamed from syzkaller0 [ 292.364095][T10037] netlink: 'syz.3.1102': attribute type 2 has an invalid length. [ 292.396086][T10037] __nla_validate_parse: 3 callbacks suppressed [ 292.396105][T10037] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1102'. [ 292.472878][T10037] netlink: 'syz.3.1102': attribute type 10 has an invalid length. [ 292.521094][T10037] syz_tun: entered promiscuous mode [ 292.991239][T10037] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 293.043181][T10040] netlink: 'syz.2.1103': attribute type 10 has an invalid length. [ 293.083270][T10040] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1103'. [ 293.139311][T10037] syz.3.1102 (10037) used greatest stack depth: 18920 bytes left [ 293.148307][T10040] veth0_macvtap: left promiscuous mode [ 293.492172][T10044] netlink: 'syz.2.1103': attribute type 23 has an invalid length. [ 293.931308][T10056] netlink: 'syz.2.1108': attribute type 7 has an invalid length. [ 294.364977][T10078] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1114'. [ 296.447161][T10111] netlink: 'syz.3.1125': attribute type 9 has an invalid length. [ 296.467890][T10111] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1125'. [ 296.757912][T10108] bond0: entered promiscuous mode [ 296.763047][T10108] bond_slave_0: entered promiscuous mode [ 296.776222][T10108] bond_slave_1: entered promiscuous mode [ 296.782264][T10108] batadv0: entered promiscuous mode [ 296.788580][T10106] netlink: 'syz.1.1123': attribute type 10 has an invalid length. [ 297.123692][T10110] delete_channel: no stack [ 297.539892][T10132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1131'. [ 297.551450][T10132] netlink: 'syz.1.1131': attribute type 27 has an invalid length. [ 297.565847][T10132] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1131'. [ 297.934064][T10146] netlink: 'syz.0.1136': attribute type 3 has an invalid length. [ 297.964795][T10146] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1136'. [ 298.064150][T10149] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1137'. [ 298.628257][T10159] netlink: 'syz.1.1140': attribute type 10 has an invalid length. [ 298.815610][T10159] dummy0: entered promiscuous mode [ 298.845668][T10159] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 300.284366][T10194] netlink: 'syz.1.1147': attribute type 39 has an invalid length. [ 300.616921][T10196] netlink: 'syz.0.1151': attribute type 5 has an invalid length. [ 300.624819][T10197] netlink: 'syz.2.1148': attribute type 10 has an invalid length. [ 300.667150][T10197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.698568][T10197] team0: Port device batadv0 added [ 300.705266][T10196] netlink: 'syz.0.1151': attribute type 10 has an invalid length. [ 303.272879][T10258] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1157'. [ 305.332585][T10292] netlink: 'syz.0.1165': attribute type 3 has an invalid length. [ 305.340673][T10292] netlink: 'syz.0.1165': attribute type 1 has an invalid length. [ 305.352539][T10292] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.1165'. [ 307.140870][T10300] netlink: 'syz.0.1167': attribute type 19 has an invalid length. [ 307.810735][T10319] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1172'. [ 307.833838][T10319] openvswitch: netlink: Key type 4112 is out of range max 32 [ 307.921788][T10320] cgroup: fork rejected by pids controller in /syz0 [ 308.112125][T10363] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1175'. [ 308.545174][T10435] netlink: 'syz.3.1179': attribute type 1 has an invalid length. [ 308.560123][T10435] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.1179'. [ 308.570604][T10435] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1179'. [ 308.679438][ T5780] team0: Port device  removed [ 308.708149][T10432] netlink: 'syz.1.1178': attribute type 10 has an invalid length. [ 308.719537][T10432] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1178'. [ 308.746419][T10432] team0: entered promiscuous mode [ 308.752035][T10432] team_slave_0: entered promiscuous mode [ 308.778598][T10432] team_slave_1: entered promiscuous mode [ 308.801184][T10432] team0: entered allmulticast mode [ 308.809483][T10432] team_slave_0: entered allmulticast mode [ 308.826446][T10432] team_slave_1: entered allmulticast mode [ 308.847713][T10432] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 308.890229][T10433] netlink: 'syz.1.1178': attribute type 10 has an invalid length. [ 308.922705][T10433] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1178'. [ 308.945986][T10441] netlink: 'syz.2.1180': attribute type 22 has an invalid length. [ 309.021368][ T5987] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.150219][ T5987] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.211622][T10452] netlink: 'syz.1.1183': attribute type 1 has an invalid length. [ 309.223476][T10452] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1183'. [ 309.280953][ T5987] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.320973][T10453] netlink: 'syz.2.1184': attribute type 10 has an invalid length. [ 309.393463][T10453] bond0: (slave bond_slave_0): Releasing backup interface [ 309.539319][ T5987] bond0: (slave netdevsim0): Releasing backup interface [ 309.562761][ T5987] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.889419][ T5777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 309.906670][ T5777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 309.916573][ T5777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 309.936261][ T5777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 309.948166][ T5777] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 309.955844][ T5777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 310.294849][T10479] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1191'. [ 310.329242][T10478] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1191'. [ 310.458498][T10479] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 310.469365][T10479] CPU: 1 PID: 10479 Comm: syz.1.1191 Not tainted syzkaller #0 [ 310.476919][T10479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 310.487744][T10479] Call Trace: [ 310.491068][T10479] [ 310.494042][T10479] dump_stack_lvl+0x16c/0x230 [ 310.498826][T10479] ? show_regs_print_info+0x20/0x20 [ 310.504205][T10479] ? load_image+0x3b0/0x3b0 [ 310.508779][T10479] sysfs_warn_dup+0x8e/0xa0 [ 310.513340][T10479] sysfs_do_create_link_sd+0xc0/0x110 [ 310.518775][T10479] device_add_class_symlinks+0x1cf/0x240 [ 310.524469][T10479] device_add+0x507/0xc20 [ 310.528864][T10479] wiphy_register+0x1e74/0x2c00 [ 310.533810][T10479] ? cfg80211_event_work+0x40/0x40 [ 310.538987][T10479] ? minstrel_ht_alloc+0x88a/0x990 [ 310.544192][T10479] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 310.550356][T10479] ieee80211_register_hw+0x2de8/0x3b10 [ 310.556061][T10479] ? ieee80211_register_hw+0xf61/0x3b10 [ 310.561700][T10479] ? ieee80211_tasklet_handler+0x20/0x20 [ 310.567471][T10479] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 310.573429][T10479] ? __debug_object_init+0xe8/0x430 [ 310.578771][T10479] ? __asan_memset+0x22/0x40 [ 310.583437][T10479] ? __hrtimer_init+0x186/0x270 [ 310.588342][T10479] mac80211_hwsim_new_radio+0x2a00/0x4cf0 [ 310.594137][T10479] ? mac80211_hwsim_free+0x220/0x220 [ 310.599491][T10479] ? rcu_is_watching+0x15/0xb0 [ 310.604392][T10479] ? kstrndup+0xbd/0x140 [ 310.608707][T10479] hwsim_new_radio_nl+0xd78/0x19d0 [ 310.613879][T10479] ? __nla_validate+0x50/0x50 [ 310.618670][T10479] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 310.625068][T10479] ? __nla_parse+0x40/0x50 [ 310.629629][T10479] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 310.636119][T10479] genl_family_rcv_msg_doit+0x209/0x2f0 [ 310.641734][T10479] ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0 [ 310.647785][T10479] ? bpf_lsm_capable+0x9/0x10 [ 310.652602][T10479] ? security_capable+0x89/0xb0 [ 310.657517][T10479] genl_rcv_msg+0x60b/0x790 [ 310.662137][T10479] ? genl_bind+0x360/0x360 [ 310.666612][T10479] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 310.673208][T10479] ? ref_tracker_free+0x634/0x7d0 [ 310.678387][T10479] netlink_rcv_skb+0x216/0x480 [ 310.683212][T10479] ? genl_bind+0x360/0x360 [ 310.687771][T10479] ? netlink_ack+0x1110/0x1110 [ 310.692870][T10479] ? __lock_acquire+0x7c80/0x7c80 [ 310.698175][T10479] ? down_read+0x1ac/0x2e0 [ 310.702650][T10479] genl_rcv+0x28/0x40 [ 310.706692][T10479] netlink_unicast+0x751/0x8d0 [ 310.711619][T10479] netlink_sendmsg+0x8c1/0xbe0 [ 310.716534][T10479] ? netlink_getsockopt+0x580/0x580 [ 310.721813][T10479] ? aa_sock_msg_perm+0x94/0x150 [ 310.727003][T10479] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 310.732359][T10479] ? security_socket_sendmsg+0x80/0xa0 [ 310.737967][T10479] ? netlink_getsockopt+0x580/0x580 [ 310.743228][T10479] ____sys_sendmsg+0x5bf/0x950 [ 310.748079][T10479] ? __asan_memset+0x22/0x40 [ 310.752792][T10479] ? __sys_sendmsg_sock+0x30/0x30 [ 310.757962][T10479] ? __import_iovec+0x5f2/0x860 [ 310.762898][T10479] ? import_iovec+0x73/0xa0 [ 310.767461][T10479] ___sys_sendmsg+0x220/0x290 [ 310.772196][T10479] ? __sys_sendmsg+0x270/0x270 [ 310.777057][T10479] ? debug_mutex_init+0x38/0x70 [ 310.782113][T10479] __se_sys_sendmsg+0x1a5/0x270 [ 310.787220][T10479] ? __x64_sys_sendmsg+0x80/0x80 [ 310.792279][T10479] ? lockdep_hardirqs_on+0x98/0x150 [ 310.797544][T10479] do_syscall_64+0x55/0xb0 [ 310.802009][T10479] ? clear_bhb_loop+0x40/0x90 [ 310.806737][T10479] ? clear_bhb_loop+0x40/0x90 [ 310.811466][T10479] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.817518][T10479] RIP: 0033:0x7f12d058f749 [ 310.821992][T10479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.843694][T10479] RSP: 002b:00007f12d1494038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.852201][T10479] RAX: ffffffffffffffda RBX: 00007f12d07e6090 RCX: 00007f12d058f749 [ 310.860235][T10479] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 310.868357][T10479] RBP: 00007f12d0613f91 R08: 0000000000000000 R09: 0000000000000000 [ 310.876379][T10479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.884489][T10479] R13: 00007f12d07e6128 R14: 00007f12d07e6090 R15: 00007fffee8aa338 [ 310.892647][T10479] [ 311.641966][T10466] chnl_net:caif_netlink_parms(): no params data found [ 311.840272][T10466] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.854371][T10466] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.862031][T10466] bridge_slave_0: entered allmulticast mode [ 311.869990][T10466] bridge_slave_0: entered promiscuous mode [ 311.914273][T10466] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.936447][T10466] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.943894][T10466] bridge_slave_1: entered allmulticast mode [ 311.961633][T10466] bridge_slave_1: entered promiscuous mode [ 312.038249][ T5770] Bluetooth: hci3: command tx timeout [ 312.079386][T10466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.134437][T10466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.281354][T10466] team0: Port device team_slave_0 added [ 312.336634][T10466] team0: Port device team_slave_1 added [ 312.467624][ T5987] bond0: (slave O3ãc¤±): Releasing backup interface [ 312.514290][T10538] netlink: 17023 bytes leftover after parsing attributes in process `syz.3.1207'. [ 312.613685][T10466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.623797][T10466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.674300][T10466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.753063][T10466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.777095][T10466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.803858][T10466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.045168][T10466] hsr_slave_0: entered promiscuous mode [ 313.053470][T10466] hsr_slave_1: entered promiscuous mode [ 313.062708][T10466] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.071059][T10466] Cannot create hsr debugfs directory [ 313.344785][ T5987] hsr_slave_1: left promiscuous mode [ 313.378248][ T5987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.388798][ T5987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.417910][ T5987] dummy0: left allmulticast mode [ 313.427776][ T5987] bridge0: port 2(dummy0) entered disabled state [ 313.481760][ T5987] bridge_slave_0: left allmulticast mode [ 313.497524][ T5987] bridge_slave_0: left promiscuous mode [ 313.517896][ T5987] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.669350][ T5987] veth0_vlan: left promiscuous mode [ 314.120317][ T5770] Bluetooth: hci3: command tx timeout [ 314.546915][ T5987] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 314.641999][ T5987] team0 (unregistering): Port device team_slave_1 removed [ 314.748667][ T5987] team0 (unregistering): Port device team_slave_0 removed [ 314.834285][ T5987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.932695][ T5987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.020091][ T5987] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 315.238880][ T5987] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 315.419956][ T5987] team0 (unregistering): Port device bond0 removed [ 315.428064][ T5987] team0 (unregistering): Port device bridge0 removed [ 315.598792][ T5987] bond0 (unregistering): Released all slaves [ 315.695134][T10575] netlink: 'syz.1.1216': attribute type 11 has an invalid length. [ 315.704420][T10576] netlink: 'syz.1.1216': attribute type 6 has an invalid length. [ 315.893877][T10589] netlink: 'syz.1.1219': attribute type 21 has an invalid length. [ 315.924773][T10589] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1219'. [ 316.196535][ T5770] Bluetooth: hci3: command tx timeout [ 316.260920][T10594] bond_slave_1: mtu less than device minimum [ 316.546900][T10597] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 316.964380][T10466] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 317.304734][T10466] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 317.357395][T10466] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 317.426785][T10466] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 317.562178][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.568901][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.710758][T10466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.782474][T10466] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.828916][ T5985] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.836209][ T5985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.872615][ T2901] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.880005][ T2901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.276235][ T5770] Bluetooth: hci3: command tx timeout [ 318.624851][T10466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.792331][T10466] veth0_vlan: entered promiscuous mode [ 318.832568][T10466] veth1_vlan: entered promiscuous mode [ 318.864642][T10652] bridge0: port 3(team0) entered disabled state [ 319.150586][T10652] bridge_slave_1: left allmulticast mode [ 319.163150][T10652] bridge_slave_1: left promiscuous mode [ 319.206994][T10652] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.235960][T10652] bridge_slave_0: left allmulticast mode [ 319.243328][T10652] bridge_slave_0: left promiscuous mode [ 319.268421][T10652] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.362413][T10660] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1238'. [ 319.398461][T10660] openvswitch: netlink: Flow actions attr not present in new flow. [ 319.890645][T10466] veth0_macvtap: entered promiscuous mode [ 319.907881][T10663] : renamed from veth0_to_bond (while UP) [ 319.967097][T10466] veth1_macvtap: entered promiscuous mode [ 320.016572][T10466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.027962][T10466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.052872][T10466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.096155][T10667] netlink: 'syz.1.1240': attribute type 13 has an invalid length. [ 320.104080][T10667] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.1240'. [ 320.147338][T10466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.166721][T10466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.193878][T10466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.226134][T10466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.249616][T10466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.265780][T10466] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.277894][T10674] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1241'. [ 320.288150][T10466] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.316467][T10466] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.325261][T10466] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.502552][T10466] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 320.525461][T10466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.547699][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.568729][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.625611][ T5985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.666859][ T5985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.193184][T10686] netlink: 'syz.1.1245': attribute type 17 has an invalid length. [ 321.236117][T10686] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1245'. [ 321.281853][T10686] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 321.382194][T10686] netlink: 'syz.1.1245': attribute type 10 has an invalid length. [ 322.066688][T10705] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1250'. [ 322.363302][T10713] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 322.376937][T10715] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1254'. [ 322.377163][T10713] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 322.530940][T10715] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.1254'. [ 322.590892][T10719] netlink: 'syz.0.1255': attribute type 3 has an invalid length. [ 322.612056][T10719] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1255'. [ 322.904422][T10726] delete_channel: no stack [ 323.121697][T10737] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1260'. [ 323.148504][T10737] netlink: 'syz.1.1260': attribute type 21 has an invalid length. [ 323.602658][T10746] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1262'. [ 324.433565][T10755] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1265'. [ 324.519074][T10755] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 325.203785][T10769] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1270'. [ 325.522915][T10787] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1274'. [ 325.595150][T10793] netlink: 'syz.2.1277': attribute type 10 has an invalid length. [ 325.617492][T10793] veth0_vlan: left promiscuous mode [ 325.622874][T10790] netlink: 'syz.3.1276': attribute type 29 has an invalid length. [ 325.659596][T10793] veth0_vlan: entered promiscuous mode [ 325.672369][T10793] veth0_vlan: entered allmulticast mode [ 325.741123][T10793] bridge0: port 3(veth0_vlan) entered blocking state [ 325.750817][T10793] bridge0: port 3(veth0_vlan) entered disabled state [ 325.803314][T10793] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 325.822262][T10790] netlink: 'syz.3.1276': attribute type 29 has an invalid length. [ 328.655809][T10832] __nla_validate_parse: 1 callbacks suppressed [ 328.655848][T10832] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1289'. [ 328.789370][T10828] delete_channel: no stack [ 329.233695][T10849] netlink: 'syz.3.1292': attribute type 27 has an invalid length. [ 329.255989][T10849] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.1292'. [ 329.412876][T10858] netlink: 207496 bytes leftover after parsing attributes in process `syz.1.1295'. [ 329.621659][T10867] netlink: 'syz.0.1299': attribute type 4 has an invalid length. [ 329.812701][T10873] netlink: 'syz.3.1301': attribute type 21 has an invalid length. [ 329.946822][T10878] netlink: 'syz.1.1303': attribute type 10 has an invalid length. [ 330.677967][ T5777] Bluetooth: hci1: command 0x0406 tx timeout [ 331.154283][T10899] netlink: 61955 bytes leftover after parsing attributes in process `syz.2.1309'. [ 331.459513][T10914] ÿÿÿÿÿÿ: renamed from veth1_to_bond (while UP) [ 331.517784][T10917] netlink: 'syz.3.1313': attribute type 1 has an invalid length. [ 331.525863][T10917] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1313'. [ 332.094784][T10946] netlink: 'syz.3.1321': attribute type 10 has an invalid length. [ 332.121405][T10946] O3ãc¤±: mtu less than device minimum [ 332.131601][T10946] bond0: (slave O3ãc¤±): Error -22 calling dev_set_mtu [ 332.150946][T10945] netlink: 'syz.3.1321': attribute type 10 has an invalid length. [ 332.159406][T10945] O3ãc¤±: mtu less than device minimum [ 332.165061][T10945] bond0: (slave O3ãc¤±): Error -22 calling dev_set_mtu [ 332.827467][T10973] netlink: 'syz.0.1328': attribute type 1 has an invalid length. [ 333.489800][T10991] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1331'. [ 334.050308][T10987] delete_channel: no stack [ 334.257020][T10995] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1342'. [ 336.553393][T11024] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1341'. [ 336.636217][T11030] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1344'. [ 336.645337][T11030] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1344'. [ 336.744535][T11035] netlink: 'syz.2.1346': attribute type 2 has an invalid length. [ 336.766821][T11035] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1346'. [ 337.624732][T11060] syzkaller0: entered allmulticast mode [ 337.742402][T11067] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.1355'. [ 338.201780][T11080] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.1359'. [ 338.648560][T11103] netdevsim netdevsim1: Direct firmware load for ß failed with error -2 [ 338.657917][T11103] netdevsim netdevsim1: Falling back to sysfs fallback for: ß [ 338.991886][T11121] netlink: 'syz.2.1369': attribute type 1 has an invalid length. [ 339.012040][T11121] netlink: 'syz.2.1369': attribute type 3 has an invalid length. [ 339.026423][T11121] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1369'. [ 340.593866][T11148] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1375'. [ 341.132662][T11156] netlink: 'syz.2.1379': attribute type 21 has an invalid length. [ 341.171937][T11156] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1379'. [ 342.063556][T11171] netdevsim netdevsim0: Direct firmware load for ß failed with error -2 [ 342.156937][T11171] netdevsim netdevsim0: Falling back to sysfs fallback for: ß [ 342.172787][T11181] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1385'. [ 342.192147][T11173] bridge0: port 3(hsr_slave_1) entered blocking state [ 342.214786][T11173] bridge0: port 3(hsr_slave_1) entered disabled state [ 342.259108][T11182] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1386'. [ 342.268886][T11173] hsr_slave_1: entered allmulticast mode [ 342.293605][T11173] hsr_slave_1: left allmulticast mode [ 342.337002][T11182] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1386'. [ 342.495578][T11182] delete_channel: no stack [ 342.757138][T11190] netlink: 'syz.3.1388': attribute type 10 has an invalid length. [ 343.250025][T11200] netlink: 'syz.2.1391': attribute type 4 has an invalid length. [ 343.286014][T11200] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1391'. [ 343.353776][T11200] .`: renamed from bond0 (while UP) [ 343.964582][T11214] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1395'. [ 345.202159][T11223] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1399'. [ 345.296530][T11223] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 346.121190][T11238] netdevsim netdevsim3: Direct firmware load for ß failed with error -2 [ 346.186614][T11238] netdevsim netdevsim3: Falling back to sysfs fallback for: ß [ 346.542924][T11244] netlink: 'syz.2.1405': attribute type 39 has an invalid length. [ 346.693696][T11247] netlink: 'syz.0.1403': attribute type 9 has an invalid length. [ 346.843147][T11247] netlink: 399 bytes leftover after parsing attributes in process `syz.0.1403'. [ 347.043919][T11247] netlink: 'syz.0.1403': attribute type 25 has an invalid length. [ 347.100176][T11247] netlink: 'syz.0.1403': attribute type 1 has an invalid length. [ 347.187500][T11247] bridge0: port 1(bridge_slave_0) entered learning state [ 347.251482][T11250] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1406'. [ 348.333005][T11272] tap0: tun_chr_ioctl cmd 1074025677 [ 348.426243][T11272] tap0: linktype set to 774 [ 348.614604][T11267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.254168][T11277] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.1414'. [ 350.022693][T11292] netlink: 'syz.1.1419': attribute type 10 has an invalid length. [ 350.076403][T11292] netlink: 'syz.1.1419': attribute type 16 has an invalid length. [ 350.089499][T11292] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1419'. [ 351.372269][T11311] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1425'. [ 351.422856][T11311] netlink: 'syz.1.1425': attribute type 29 has an invalid length. [ 351.586507][T11311] netlink: 'syz.1.1425': attribute type 29 has an invalid length. [ 351.604620][T11315] netlink: 'syz.1.1425': attribute type 29 has an invalid length. [ 351.637158][T11314] netlink: 'syz.1.1425': attribute type 29 has an invalid length. [ 352.753655][T11328] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.1428'. [ 353.668392][T11340] netlink: 'syz.0.1431': attribute type 3 has an invalid length. [ 353.716109][T11340] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1431'. [ 355.201963][T11374] netlink: 'syz.1.1442': attribute type 1 has an invalid length. [ 355.898722][T11393] sctp: [Deprecated]: syz.0.1447 (pid 11393) Use of int in maxseg socket option. [ 355.898722][T11393] Use struct sctp_assoc_value instead [ 357.731668][T11426] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.1456'. [ 358.425800][T11443] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1461'. [ 358.463423][T11438] netlink: 'syz.3.1459': attribute type 10 has an invalid length. [ 359.147392][T11458] netlink: 'syz.1.1462': attribute type 6 has an invalid length. [ 359.167469][T11458] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1462'. [ 359.691133][T11472] netlink: 'syz.1.1466': attribute type 7 has an invalid length. [ 359.705952][T11472] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1466'. [ 359.893950][T11472] syzkaller0: entered promiscuous mode [ 359.932698][T11472] syzkaller0: entered allmulticast mode [ 360.221701][T11500] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1471'. [ 363.360884][T11498] netlink: 'syz.0.1472': attribute type 4 has an invalid length. [ 363.369217][T11498] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1472'. [ 366.373570][T11541] netlink: 'syz.1.1481': attribute type 1 has an invalid length. [ 367.083441][T11561] netlink: 'syz.2.1489': attribute type 1 has an invalid length. [ 367.097878][T11562] netlink: 'syz.2.1489': attribute type 1 has an invalid length. [ 367.110773][T11561] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.1489'. [ 367.125668][T11562] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.1489'. [ 367.463267][T11575] netlink: 'syz.0.1492': attribute type 21 has an invalid length. [ 368.686414][T11572] delete_channel: no stack [ 368.852967][T11601] delete_channel: no stack [ 369.166221][T11621] netlink: 'syz.0.1505': attribute type 2 has an invalid length. [ 369.204280][T11621] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1505'. [ 369.885298][T11632] pim6reg1: entered promiscuous mode [ 369.895853][T11632] pim6reg1: entered allmulticast mode [ 370.359681][T11654] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1515'. [ 370.633906][T11661] netlink: 'syz.1.1516': attribute type 21 has an invalid length. [ 370.898591][T11669] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1519'. [ 371.014332][T11674] sctp: [Deprecated]: syz.1.1521 (pid 11674) Use of int in maxseg socket option. [ 371.014332][T11674] Use struct sctp_assoc_value instead [ 371.043845][T11669] netlink: 'syz.2.1519': attribute type 29 has an invalid length. [ 371.113712][T11669] netlink: 'syz.2.1519': attribute type 29 has an invalid length. [ 371.181957][T11672] netlink: 'syz.2.1519': attribute type 29 has an invalid length. [ 371.273931][T11669] netlink: 'syz.2.1519': attribute type 29 has an invalid length. [ 371.354151][T11672] netlink: 'syz.2.1519': attribute type 29 has an invalid length. [ 371.646883][T11678] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1522'. [ 371.722860][T11678] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1522'. [ 371.776570][T11678] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1522'. [ 371.839393][T11683] netlink: 'syz.2.1523': attribute type 1 has an invalid length. [ 371.850372][T11683] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.1523'. [ 371.959295][T11688] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1525'. [ 372.569173][T11707] __nla_validate_parse: 3 callbacks suppressed [ 372.569196][T11707] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.1530'. [ 372.633527][T11707] netlink: 'syz.3.1530': attribute type 1 has an invalid length. [ 372.642013][T11707] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1530'. [ 372.663007][T11703] delete_channel: no stack [ 372.894395][T11719] netlink: 'syz.2.1534': attribute type 21 has an invalid length. [ 372.910876][T11719] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1534'. [ 374.614341][T11773] netlink: 'syz.1.1548': attribute type 10 has an invalid length. [ 374.654955][T11773] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.1548'. [ 374.854415][T11777] netlink: 'syz.0.1549': attribute type 10 has an invalid length. [ 374.892522][T11777] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 374.939600][T11776] delete_channel: no stack [ 375.066069][T11779] netlink: 'syz.3.1550': attribute type 10 has an invalid length. [ 375.466906][T11799] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1557'. [ 375.496120][T11799] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1557'. [ 375.511397][T11800] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1557'. [ 375.551612][T11801] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1554'. [ 376.231537][T11817] netlink: 'syz.0.1562': attribute type 33 has an invalid length. [ 376.672283][T11824] netlink: 'syz.0.1565': attribute type 10 has an invalid length. [ 376.856680][T11834] netlink: 'syz.1.1567': attribute type 4 has an invalid length. [ 376.885630][T11824] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 376.893078][T11834] netlink: 'syz.1.1567': attribute type 16 has an invalid length. [ 376.944158][T11834] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1567'. [ 377.493851][T11848] netlink: 'syz.3.1570': attribute type 41 has an invalid length. [ 377.566435][T11848] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1570'. [ 377.601517][T11852] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.1573'. [ 377.641194][T11852] netlink: 'syz.0.1573': attribute type 1 has an invalid length. [ 377.679394][T11852] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1573'. [ 377.700193][T11850] delete_channel: no stack [ 378.000244][T11873] netlink: 'syz.0.1579': attribute type 7 has an invalid length. [ 379.047952][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.054442][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.564757][T11892] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1584'. [ 379.574711][T11892] openvswitch: netlink: Key type 4112 is out of range max 32 [ 380.153249][T11900] netlink: 6783 bytes leftover after parsing attributes in process `syz.3.1585'. [ 382.080083][T11908] netlink: 'syz.0.1588': attribute type 27 has an invalid length. [ 382.119507][T11908] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1588'. [ 382.220382][T11912] netlink: 'syz.1.1590': attribute type 10 has an invalid length. [ 382.322547][T11910] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.1586'. [ 382.471193][T11914] netlink: 'syz.3.1589': attribute type 4 has an invalid length. [ 382.492171][T11910] netlink: 'syz.2.1586': attribute type 1 has an invalid length. [ 382.556177][T11910] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1586'. [ 382.634261][T11921] netlink: 'syz.1.1592': attribute type 1 has an invalid length. [ 382.657820][T11921] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.1592'. [ 382.670276][T11909] delete_channel: no stack [ 382.676115][T11921] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1592'. [ 383.077673][T11930] @0Ù: renamed from bond_slave_1 (while UP) [ 383.523008][T11945] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1599'. [ 383.614449][T11945] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1599'. [ 383.632433][T11948] netlink: 'syz.2.1598': attribute type 1 has an invalid length. [ 383.706041][T11948] netlink: 15870 bytes leftover after parsing attributes in process `syz.2.1598'. [ 385.567807][T11979] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1607'. [ 386.860706][T11995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.879724][T11995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.931851][T11995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.960376][T11995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.990477][T11995] batman_adv: batadv0: Interface deactivated: wlan0 [ 387.016174][T11995] batman_adv: batadv0: Removing interface: wlan0 [ 387.074924][T11995] bond0: (slave batadv0): Releasing backup interface [ 387.088591][T11995] batadv0 (unregistering): left promiscuous mode [ 387.608147][T12013] netlink: 'syz.3.1617': attribute type 10 has an invalid length. [ 387.616466][T12013] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1617'. [ 387.625830][T12013] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 387.638793][T12013] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 387.662488][T12010] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1616'. [ 387.690077][T12013] netlink: 'syz.3.1617': attribute type 3 has an invalid length. [ 387.698825][T12014] veth0_virt_wifi: entered promiscuous mode [ 387.704825][T12014] veth0_virt_wifi: entered allmulticast mode [ 387.711366][T12010] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 387.726676][T12013] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.1617'. [ 387.967970][T12018] netlink: 'syz.3.1619': attribute type 7 has an invalid length. [ 388.818541][T12026] netlink: 'syz.3.1621': attribute type 10 has an invalid length. [ 388.846155][T12026] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1621'. [ 388.897529][T12026] bond0: (slave syz_tun): Releasing backup interface [ 388.917599][T12026] syz_tun: left promiscuous mode [ 388.951350][T12026] syz_tun: entered promiscuous mode [ 388.966531][T12026] syz_tun: entered allmulticast mode [ 388.979055][T12026] team0: Port device syz_tun added [ 389.148405][T12028] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1622'. [ 389.889332][T12049] netlink: 'syz.3.1628': attribute type 9 has an invalid length. [ 389.897568][T12049] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1628'. [ 390.894356][T12057] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 390.905506][T12057] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 391.221110][T12077] netlink: 'syz.3.1635': attribute type 3 has an invalid length. [ 391.243864][T12077] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1635'. [ 391.860278][ T5770] Bluetooth: hci1: unexpected event 0x03 length: 15 > 11 [ 392.114348][T12097] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1638'. [ 392.388631][T12102] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1640'. [ 392.461567][T12102] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1640'. [ 392.993297][T12123] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1644'. [ 393.353927][T12129] netlink: 'syz.1.1646': attribute type 10 has an invalid length. [ 393.584304][T12129] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 393.595259][T12129] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 393.608526][T12129] team0: Port device netdevsim0 added [ 393.636450][T12135] lo: entered allmulticast mode [ 393.669672][T12141] netlink: 'syz.2.1650': attribute type 21 has an invalid length. [ 393.705556][T12141] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1650'. [ 393.728332][T12141] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1650'. [ 394.219406][T12152] netlink: 'syz.0.1655': attribute type 1 has an invalid length. [ 394.286090][T12152] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1655'. [ 394.371024][T12157] netlink: 14478 bytes leftover after parsing attributes in process `syz.3.1654'. [ 397.100120][T12163] netlink: 'syz.2.1657': attribute type 4 has an invalid length. [ 397.129774][T12163] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1657'. [ 397.168825][T12164] netlink: 'syz.3.1656': attribute type 21 has an invalid length. [ 397.250539][T12168] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1656'. [ 397.304846][T12167] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1657'. [ 397.366267][T12164] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1656'. [ 397.469771][T12164] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1656'. [ 397.994095][T12166] netlink: 'syz.0.1658': attribute type 5 has an invalid length. [ 398.876537][T12183] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.884825][T12183] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.896686][T12183] bridge0: entered allmulticast mode [ 399.369931][T12183] bridge_slave_1: left allmulticast mode [ 399.426259][T12183] bridge_slave_1: left promiscuous mode [ 399.452921][T12183] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.699642][T12183] bridge_slave_0: left allmulticast mode [ 399.705466][T12183] bridge_slave_0: left promiscuous mode [ 399.736930][T12183] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.946005][T12181] __nla_validate_parse: 2 callbacks suppressed [ 399.946028][T12181] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1661'. [ 401.696317][T12209] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode [ 401.706107][T12209] mac80211_hwsim hwsim20 wlan0: entered allmulticast mode [ 401.878454][T12211] netlink: 'syz.3.1671': attribute type 1 has an invalid length. [ 401.897800][T12211] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1671'. [ 402.560344][T12219] netlink: 'syz.2.1674': attribute type 10 has an invalid length. [ 402.712620][T12219] wlan1: mtu less than device minimum [ 402.730472][T12219] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 403.544935][T12234] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1677'. [ 403.588038][T12234] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 406.208661][T12303] netlink: 'syz.3.1699': attribute type 1 has an invalid length. [ 406.241444][T12303] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1699'. [ 406.297481][T12304] netlink: 'syz.3.1699': attribute type 1 has an invalid length. [ 406.350873][T12304] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1699'. [ 406.824285][T12326] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1703'. [ 406.970221][T12330] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1704'. [ 407.094603][T12338] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1707'. [ 407.217805][T12338] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1707'. [ 407.238970][T12332] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1707'. [ 407.600961][T12350] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1711'. [ 407.637966][T12356] netlink: 'syz.1.1712': attribute type 10 has an invalid length. [ 407.646355][T12356] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1712'. [ 407.656878][T12350] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1711'. [ 407.674626][T12350] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 407.706842][T12356] netlink: 'syz.1.1712': attribute type 10 has an invalid length. [ 408.465408][T12372] syzkaller0: entered promiscuous mode [ 408.482379][T12372] syzkaller0: entered allmulticast mode [ 408.676785][T12378] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 408.871580][T12383] wg2: entered promiscuous mode [ 408.898884][T12383] wg2: entered allmulticast mode [ 409.386044][T12407] netlink: 'syz.0.1724': attribute type 16 has an invalid length. [ 409.395440][T12407] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.677996][T12415] netlink: 'syz.1.1725': attribute type 10 has an invalid length. [ 409.729659][T12415] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 409.843117][T12419] sit0: entered promiscuous mode [ 409.848541][T12419] sit0: entered allmulticast mode [ 410.310066][T12434] netlink: 'syz.3.1731': attribute type 9 has an invalid length. [ 411.219060][T12451] netlink: 'syz.3.1735': attribute type 15 has an invalid length. [ 411.241623][T12451] netlink: 'syz.3.1735': attribute type 7 has an invalid length. [ 411.380585][T12450] netlink: 'syz.0.1736': attribute type 39 has an invalid length. [ 411.632678][T12458] netlink: 'syz.0.1737': attribute type 11 has an invalid length. [ 411.645144][T12458] __nla_validate_parse: 8 callbacks suppressed [ 411.645182][T12458] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1737'. [ 411.735458][ T5770] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 412.142284][T12463] netlink: 'syz.2.1739': attribute type 5 has an invalid length. [ 412.366396][T12466] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1740'. [ 413.212722][T12491] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1747'. [ 413.560840][T12506] netlink: 61963 bytes leftover after parsing attributes in process `syz.1.1752'. [ 415.276228][T12524] validate_nla: 2 callbacks suppressed [ 415.276249][T12524] netlink: 'syz.1.1756': attribute type 10 has an invalid length. [ 415.739581][T12540] netlink: 'syz.2.1757': attribute type 10 has an invalid length. [ 415.912594][T12540] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.940722][T12540] .`: (slave team0): Enslaving as an active interface with an up link [ 416.510290][T12560] netlink: 'syz.3.1765': attribute type 10 has an invalid length. [ 416.931766][T12566] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1766'. [ 417.375265][T12576] netlink: 'syz.1.1769': attribute type 1 has an invalid length. [ 417.404479][T12576] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1769'. [ 417.686040][T12586] netlink: 'syz.3.1774': attribute type 10 has an invalid length. [ 417.700262][T12586] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1774'. [ 417.719226][T12586] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 417.758346][T12587] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 417.774859][T12589] netlink: 'syz.3.1774': attribute type 10 has an invalid length. [ 417.787039][T12589] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1774'. [ 417.809937][T12589] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 417.829158][T12591] netlink: 'syz.2.1775': attribute type 10 has an invalid length. [ 417.949556][T12593] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 418.098393][T12601] netlink: 'syz.0.1779': attribute type 6 has an invalid length. [ 418.134465][T12601] netlink: 'syz.0.1779': attribute type 7 has an invalid length. [ 418.172487][T12601] netlink: 198076 bytes leftover after parsing attributes in process `syz.0.1779'. [ 418.264321][T12596] wg2: left promiscuous mode [ 418.277339][T12596] wg2: left allmulticast mode [ 418.310911][T12607] C: renamed from team_slave_0 (while UP) [ 418.337300][T12607] netlink: 'syz.1.1780': attribute type 3 has an invalid length. [ 418.345219][T12607] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1780'. [ 418.364849][T12607] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 418.396628][T12605] wg2: entered promiscuous mode [ 418.401585][T12605] wg2: entered allmulticast mode [ 418.427937][T12613] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1782'. [ 419.143196][T12641] team0: left promiscuous mode [ 419.210833][T12641] team_slave_0: left promiscuous mode [ 419.262561][T12641] team_slave_1: left promiscuous mode [ 419.307870][T12641] syz_tun: left promiscuous mode [ 419.340626][T12641] team0: left allmulticast mode [ 419.383517][T12641] team_slave_0: left allmulticast mode [ 419.419958][T12641] team_slave_1: left allmulticast mode [ 419.444358][T12640] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1789'. [ 419.452259][T12641] syz_tun: left allmulticast mode [ 419.714736][T12641] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.769136][T12641] team0: entered promiscuous mode [ 419.796126][T12641] team_slave_0: entered promiscuous mode [ 419.874337][T12641] team_slave_1: entered promiscuous mode [ 419.900858][T12641] syz_tun: entered promiscuous mode [ 419.930810][T12641] bond0: (slave team0): Enslaving as an active interface with an up link [ 421.795318][T12792] validate_nla: 2 callbacks suppressed [ 421.795338][T12792] netlink: 'syz.0.1803': attribute type 10 has an invalid length. [ 421.889095][T12792] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.936761][T12792] bond0: (slave team0): Enslaving as an active interface with an up link [ 422.515756][T12800] netlink: 52711 bytes leftover after parsing attributes in process `syz.0.1807'. [ 422.567227][T12802] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1806'. [ 422.857966][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 422.873061][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 422.881734][ T5777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 422.892935][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 422.902105][ T5777] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 422.912603][ T5777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 423.414710][T12806] chnl_net:caif_netlink_parms(): no params data found [ 423.512610][T12819] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1813'. [ 423.570049][ T2901] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.724171][ T2901] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.915816][ T2901] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.933760][T12806] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.941322][T12806] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.948880][T12806] bridge_slave_0: entered allmulticast mode [ 423.956809][T12806] bridge_slave_0: entered promiscuous mode [ 423.968095][T12806] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.975442][T12806] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.984103][T12806] bridge_slave_1: entered allmulticast mode [ 423.994768][T12806] bridge_slave_1: entered promiscuous mode [ 424.056162][T12831] netlink: 'syz.3.1816': attribute type 21 has an invalid length. [ 424.066400][T12831] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1816'. [ 424.122483][ T2901] .`: (slave netdevsim0): Releasing backup interface [ 424.123757][T12834] netlink: 'syz.0.1817': attribute type 10 has an invalid length. [ 424.140839][ T2901] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.176289][T12834] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1817'. [ 424.188971][T12806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.220868][T12831] netlink: 'syz.3.1816': attribute type 1 has an invalid length. [ 424.247505][T12831] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.1816'. [ 424.273501][T12806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.395021][T12806] team0: Port device team_slave_0 added [ 424.407033][T12806] team0: Port device team_slave_1 added [ 424.453049][T12806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.463555][T12806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.490842][T12806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.504272][T12806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.515690][T12806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.544440][T12806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.703546][T12838] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.1820'. [ 424.749348][T12806] hsr_slave_0: entered promiscuous mode [ 424.771237][T12806] hsr_slave_1: entered promiscuous mode [ 424.804387][T12838] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.1820'. [ 425.014970][ T5777] Bluetooth: hci0: command tx timeout [ 425.503285][T12853] netlink: 'syz.0.1824': attribute type 1 has an invalid length. [ 425.511745][T12853] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1824'. [ 425.555463][ T5770] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 425.556812][ T6527] syz_tun (unregistering): left promiscuous mode [ 425.575275][ T5770] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 425.585977][ T5770] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 425.595055][ T5770] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 425.601913][ T6527] team0: Port device syz_tun removed [ 425.611843][ T5770] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 425.626592][ T5770] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 425.725512][T12806] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.828063][T12806] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.954896][T12806] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.060405][T12806] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 426.070674][T12806] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 426.092847][T12806] team0: Port device netdevsim0 removed [ 426.108639][T12806] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.423373][T12806] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 426.455532][T12854] chnl_net:caif_netlink_parms(): no params data found [ 426.480903][T12806] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 426.492615][T12806] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 426.551154][T12806] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 426.745379][T12854] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.753330][T12854] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.761776][T12854] bridge_slave_0: entered allmulticast mode [ 426.770138][T12854] bridge_slave_0: entered promiscuous mode [ 426.780666][T12854] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.788476][T12854] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.795814][T12854] bridge_slave_1: entered allmulticast mode [ 426.803767][T12854] bridge_slave_1: entered promiscuous mode [ 426.972837][T12854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.021228][T12854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.086055][ T5770] Bluetooth: hci0: command tx timeout [ 427.122765][T12854] team0: Port device team_slave_0 added [ 427.164642][T12854] team0: Port device team_slave_1 added [ 427.209244][ T2901] hsr_slave_0: left promiscuous mode [ 427.215719][ T2901] hsr_slave_1: left promiscuous mode [ 427.222820][ T2901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.230815][ T2901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.262025][ T2901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.296038][ T2901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.356688][ T2901] veth1_vlan: left promiscuous mode [ 427.721495][ T5770] Bluetooth: hci1: command tx timeout [ 428.169049][ T5777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 428.188417][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 428.207608][ T5777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 428.223659][ T5777] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 428.231750][ T5777] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 428.239515][ T5777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 428.481669][ T2901] team0 (unregistering): Port device team_slave_1 removed [ 428.569978][ T2901] team0 (unregistering): Port device team_slave_0 removed [ 428.634221][ T2901] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.039359][ T2901] team0 (unregistering): Port device batadv0 removed [ 429.091053][ T2901] .` (unregistering): (slave dummy0): Releasing backup interface [ 429.160006][ T5777] Bluetooth: hci0: command tx timeout [ 429.292405][ T2901] .` (unregistering): (slave team0): Releasing backup interface [ 429.513909][ T2901] .` (unregistering): Released all slaves [ 429.667482][T12854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.674500][T12854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.702980][T12854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.749494][T12854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.757022][T12854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.785814][T12854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.826317][ T5777] Bluetooth: hci1: command tx timeout [ 429.880050][T12806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.944014][T12806] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.983760][T12854] hsr_slave_0: entered promiscuous mode [ 430.001552][T12854] hsr_slave_1: entered promiscuous mode [ 430.014346][T12854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 430.023788][T12854] Cannot create hsr debugfs directory [ 430.079291][ T2884] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.086551][ T2884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.183604][ T2884] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.190858][ T2884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.276223][ T5770] Bluetooth: hci2: command tx timeout [ 430.462259][T12898] chnl_net:caif_netlink_parms(): no params data found [ 431.236758][ T5770] Bluetooth: hci0: command tx timeout [ 431.581017][T12898] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.588936][T12898] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.597144][T12898] bridge_slave_0: entered allmulticast mode [ 431.604944][T12898] bridge_slave_0: entered promiscuous mode [ 431.645302][T12898] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.653473][T12898] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.662864][T12898] bridge_slave_1: entered allmulticast mode [ 431.671482][T12898] bridge_slave_1: entered promiscuous mode [ 431.770168][T12898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.809462][T12898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.878702][ T5770] Bluetooth: hci1: command tx timeout [ 431.988386][T12898] team0: Port device team_slave_0 added [ 432.030536][T12898] team0: Port device team_slave_1 added [ 432.169905][T12898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.186699][T12898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.215214][T12898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.229354][T12898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.236965][T12898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.263652][T12898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.275622][T12854] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 432.286393][ T5770] Bluetooth: hci3: command 0x0406 tx timeout [ 432.316151][T12854] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 432.327637][T12854] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 432.356434][ T5777] Bluetooth: hci2: command tx timeout [ 432.383328][ T2901] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.447150][T12854] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 432.481545][ T2901] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.505645][T12898] hsr_slave_0: entered promiscuous mode [ 432.513634][T12898] hsr_slave_1: entered promiscuous mode [ 432.522475][T12898] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 432.530499][T12898] Cannot create hsr debugfs directory [ 432.537279][T12936] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1841'. [ 432.572756][ T2901] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.638178][T12806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.662085][ T2901] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.965034][T12806] veth0_vlan: entered promiscuous mode [ 433.030248][T12806] veth1_vlan: entered promiscuous mode [ 433.071748][T12854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.195765][T12854] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.252416][T12806] veth0_macvtap: entered promiscuous mode [ 433.267483][T12806] veth1_macvtap: entered promiscuous mode [ 433.360871][ T2884] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.368389][ T2884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.425023][ T2884] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.432391][ T2884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.460305][T12944] netlink: 'syz.0.1842': attribute type 21 has an invalid length. [ 433.539445][T12806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.552229][T12806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.564619][T12806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.589866][T12806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.605164][T12806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.618835][T12806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.764895][T12806] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.774193][T12806] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.785063][T12806] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.794090][T12806] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.969225][ T5777] Bluetooth: hci1: command tx timeout [ 434.150115][T12898] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 434.166405][ T5999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.176995][ T5999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.262634][T12957] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 768 [ 434.357804][T12898] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 434.407506][T12898] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 434.436056][ T5777] Bluetooth: hci2: command tx timeout [ 434.446291][T12898] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 434.530980][ T5999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.550841][ T5999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.566671][T12854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.937563][T12854] veth0_vlan: entered promiscuous mode [ 435.007438][T12854] veth1_vlan: entered promiscuous mode [ 435.064538][T12898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.154989][ T2901] veth0_to_bridge: left allmulticast mode [ 435.309217][ T2901] veth0_to_bridge: left promiscuous mode [ 435.338136][ T2901] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 435.382372][ T2901] hsr_slave_0: left promiscuous mode [ 435.393028][ T2901] hsr_slave_1: left promiscuous mode [ 435.494362][ T2901] veth0_macvtap: left promiscuous mode [ 435.510833][ T2901] veth1_vlan: left promiscuous mode [ 436.517163][ T5777] Bluetooth: hci2: command tx timeout [ 436.712191][ T2901] team_slave_1 (unregistering): left promiscuous mode [ 436.730246][ T2901] team0 (unregistering): Port device team_slave_1 removed [ 436.792957][ T2901] team_slave_0 (unregistering): left promiscuous mode [ 436.804345][ T2901] team0 (unregistering): Port device team_slave_0 removed [ 436.873787][ T2901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.883378][ T2901] bond_slave_1 (unregistering): left promiscuous mode [ 436.945220][ T2901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.954478][ T2901] bond_slave_0 (unregistering): left promiscuous mode [ 437.459578][ T2901] bond0 (unregistering): (slave team0): Releasing backup interface [ 437.470889][ T2901] team0 (unregistering): left promiscuous mode [ 437.661649][ T2901] bond0 (unregistering): Released all slaves [ 437.739413][T12898] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.825745][T12854] veth0_macvtap: entered promiscuous mode [ 437.904976][T12854] veth1_macvtap: entered promiscuous mode [ 437.939415][ T5997] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.946726][ T5997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.023930][ T5997] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.031226][ T5997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.145969][T12854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.157346][T12854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.169416][T12854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.180334][T12854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.206483][T12854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.225049][T12854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.239137][T12854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.250227][T12854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.260862][T12854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.274664][T12854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.305668][T12854] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.315213][T12854] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.324283][T12854] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.333305][T12854] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.552573][ T5997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.578963][ T5997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.670548][ T5999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.700614][ T5999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.910775][T13003] netlink: 'syz.0.1854': attribute type 1 has an invalid length. [ 438.955610][T13007] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1818'. [ 438.994247][T13007] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1818'. [ 439.126053][T12898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.242639][T12898] veth0_vlan: entered promiscuous mode [ 439.289313][T12898] veth1_vlan: entered promiscuous mode [ 439.415622][T12898] veth0_macvtap: entered promiscuous mode [ 439.439393][T12898] veth1_macvtap: entered promiscuous mode [ 439.494768][T12898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.512198][T12898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.522882][T12898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.540582][T12898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.554777][T12898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.583527][T12898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.607960][T12898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.636117][T12898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.664449][T12898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.682532][T12898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.960309][T12898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.972466][T12898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.983124][T12898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.015807][T12898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.030424][T12898] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.056514][T12898] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.065412][T12898] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.075223][T12898] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.272808][T13019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.456355][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.462697][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.639358][T13030] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 440.724360][ T2884] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.754764][ T2884] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.842756][ T5999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.888254][ T5999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.114534][T13037] netlink: 'syz.1.1863': attribute type 33 has an invalid length. [ 441.124865][T13042] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1831'. [ 441.147141][T13037] netlink: 'syz.1.1863': attribute type 36 has an invalid length. [ 441.148507][T13033] bridge0: port 3(bond0) entered blocking state [ 441.155033][T13037] netlink: 'syz.1.1863': attribute type 37 has an invalid length. [ 441.226096][T13033] bridge0: port 3(bond0) entered disabled state [ 441.245233][T13033] bond0: entered allmulticast mode [ 441.276153][T13033] bond_slave_0: entered allmulticast mode [ 441.294224][T13033] bond_slave_1: entered allmulticast mode [ 441.324542][T13033] bond0: entered promiscuous mode [ 441.337865][T13033] bond_slave_0: entered promiscuous mode [ 441.351755][T13033] bond_slave_1: entered promiscuous mode [ 441.367377][T13033] bridge0: port 3(bond0) entered blocking state [ 441.373890][T13033] bridge0: port 3(bond0) entered forwarding state [ 441.456254][T13046] bond0: left allmulticast mode [ 441.461287][T13046] bond_slave_0: left allmulticast mode [ 441.484574][T13046] bond_slave_1: left allmulticast mode [ 441.512514][T13046] bond0: left promiscuous mode [ 441.519028][T13046] bond_slave_0: left promiscuous mode [ 441.534942][T13046] bond_slave_1: left promiscuous mode [ 441.551154][T13046] bridge0: port 3(bond0) entered disabled state [ 442.253995][T13060] netlink: 'syz.3.1866': attribute type 1 has an invalid length. [ 442.287057][T13060] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1866'. [ 443.121474][T13072] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1867'. [ 443.258762][ T5997] wlan1: Trigger new scan to find an IBSS to join [ 443.691419][T13090] Ÿë: port 1(syz_tun) entered blocking state [ 443.712902][T13090] Ÿë: port 1(syz_tun) entered disabled state [ 443.739499][T13090] syz_tun: entered allmulticast mode [ 443.803105][T13090] syz_tun: entered promiscuous mode [ 443.890846][T13094] netlink: 'syz.0.1876': attribute type 21 has an invalid length. [ 443.917490][T13094] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1876'. [ 444.988295][T13112] netlink: 'syz.3.1882': attribute type 9 has an invalid length. [ 445.017500][T13112] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1882'. [ 445.367125][T13117] netlink: 'syz.0.1883': attribute type 10 has an invalid length. [ 445.392738][T13118] netlink: 'syz.1.1884': attribute type 29 has an invalid length. [ 445.426104][T13117] netlink: 56823 bytes leftover after parsing attributes in process `syz.0.1883'. [ 445.507173][T13118] netlink: 'syz.1.1884': attribute type 29 has an invalid length. [ 446.279281][ T5997] wlan1: Trigger new scan to find an IBSS to join [ 446.779799][T13144] netlink: 'syz.1.1891': attribute type 9 has an invalid length. [ 446.811572][T13144] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1891'. [ 447.579747][T13163] netlink: 'syz.1.1896': attribute type 10 has an invalid length. [ 447.608479][T13163] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1896'. [ 447.657147][T13163] batadv0: entered promiscuous mode [ 447.662494][T13163] batadv0: entered allmulticast mode [ 447.707016][T13163] bridge0: port 3(batadv0) entered blocking state [ 447.728694][T13160] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1895'. [ 447.739635][T13163] bridge0: port 3(batadv0) entered disabled state [ 447.758734][T13163] bridge0: port 3(batadv0) entered blocking state [ 447.765419][T13163] bridge0: port 3(batadv0) entered forwarding state [ 447.848514][ T11] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 447.858842][ T11] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 449.237320][ T5997] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 452.339770][T13237] C: renamed from team_slave_0 (while UP) [ 452.378616][T13237] netlink: 'syz.2.1914': attribute type 4 has an invalid length. [ 452.406017][T13237] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1914'. [ 452.426099][T13237] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 453.680193][T13259] netlink: 'syz.1.1919': attribute type 1 has an invalid length. [ 453.688724][T13259] netlink: 'syz.1.1919': attribute type 2 has an invalid length. [ 453.703474][T13259] netlink: 'syz.1.1919': attribute type 2 has an invalid length. [ 453.714092][T13259] netlink: 'syz.1.1919': attribute type 3 has an invalid length. [ 453.729729][T13259] netlink: 'syz.1.1919': attribute type 4 has an invalid length. [ 453.763111][T13259] netlink: 'syz.1.1919': attribute type 5 has an invalid length. [ 453.774268][T13259] netlink: 'syz.1.1919': attribute type 6 has an invalid length. [ 453.834830][T13259] netlink: 'syz.1.1919': attribute type 7 has an invalid length. [ 453.883185][T13259] netlink: 'syz.1.1919': attribute type 9 has an invalid length. [ 453.932382][T13259] netlink: 126304 bytes leftover after parsing attributes in process `syz.1.1919'. [ 454.087478][T13268] bridge0: port 3(bond0) entered blocking state [ 454.116634][T13268] bridge0: port 3(bond0) entered disabled state [ 454.124033][T13268] bond0: entered allmulticast mode [ 454.148809][T13268] bond_slave_0: entered allmulticast mode [ 454.154945][T13268] bond_slave_1: entered allmulticast mode [ 454.192213][T13268] bond0: entered promiscuous mode [ 454.214938][T13268] bond_slave_0: entered promiscuous mode [ 454.234118][T13268] bond_slave_1: entered promiscuous mode [ 454.276741][T13268] bridge0: port 3(bond0) entered blocking state [ 454.283807][T13268] bridge0: port 3(bond0) entered forwarding state [ 454.948928][T13275] netlink: 142168 bytes leftover after parsing attributes in process `syz.0.1924'. [ 455.091011][T13269] bond0: left allmulticast mode [ 455.100998][T13269] bond_slave_0: left allmulticast mode [ 455.106794][T13269] bond_slave_1: left allmulticast mode [ 455.112522][T13269] bond0: left promiscuous mode [ 455.122590][T13269] bond_slave_0: left promiscuous mode [ 455.132832][T13269] bond_slave_1: left promiscuous mode [ 455.143298][T13269] bridge0: port 3(bond0) entered disabled state [ 455.161443][T13271] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1923'. [ 456.151150][T13300] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1932'. [ 458.037930][T13322] validate_nla: 7 callbacks suppressed [ 458.037951][T13322] netlink: 'syz.2.1938': attribute type 10 has an invalid length. [ 458.318873][T13322] team0: Port device netdevsim0 added [ 458.334598][T13323] netlink: 'syz.2.1938': attribute type 10 has an invalid length. [ 458.353233][T13323] team0: Port device netdevsim0 removed [ 458.402550][T13333] netlink: 'syz.3.1942': attribute type 9 has an invalid length. [ 458.412357][T13323] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 458.436123][T13333] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1942'. [ 458.531077][T13336] netlink: 'syz.3.1942': attribute type 9 has an invalid length. [ 458.540685][T13336] netlink: 399 bytes leftover after parsing attributes in process `syz.3.1942'. [ 458.648965][T13334] netlink: 'syz.3.1942': attribute type 9 has an invalid length. [ 458.664348][T13334] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1942'. [ 459.137739][T13346] netlink: 'syz.1.1945': attribute type 1 has an invalid length. [ 459.145572][T13346] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1945'. [ 459.231233][T13334] delete_channel: no stack [ 459.434767][T13352] netlink: 'syz.1.1946': attribute type 9 has an invalid length. [ 459.456909][T13352] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1946'. [ 459.657972][T13360] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.1950'. [ 460.582712][T13376] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1954'. [ 460.810410][T13384] netlink: 'syz.1.1956': attribute type 9 has an invalid length. [ 460.859797][T13384] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1956'. [ 461.521165][T13383] delete_channel: no stack [ 461.592324][T13381] mac80211_hwsim hwsim33 wlan0: entered promiscuous mode [ 461.600124][T13381] mac80211_hwsim hwsim33 wlan0: entered allmulticast mode [ 462.130652][T13409] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1964'. [ 462.323888][T13414] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1965'. [ 462.792333][T13419] sit0: left promiscuous mode [ 462.855118][T13419] netlink: 'syz.0.1967': attribute type 1 has an invalid length. [ 462.876078][T13419] netlink: 'syz.0.1967': attribute type 3 has an invalid length. [ 464.243856][T13443] netlink: 'syz.3.1975': attribute type 39 has an invalid length. [ 464.315251][ T5777] Bluetooth: hci3: ISO packet for unknown connection handle 49 [ 464.474940][T13446] netlink: 'syz.2.1976': attribute type 10 has an invalid length. [ 464.513228][T13446] __nla_validate_parse: 2 callbacks suppressed [ 464.513249][T13446] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1976'. [ 464.562447][T13443] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1975'. [ 464.573723][T13443] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 464.605667][T13446] team0: entered promiscuous mode [ 464.626321][T13446] C: entered promiscuous mode [ 464.647331][T13446] team_slave_1: entered promiscuous mode [ 464.662574][T13446] team0: entered allmulticast mode [ 464.670646][T13446] C: entered allmulticast mode [ 464.675823][T13446] team_slave_1: entered allmulticast mode [ 464.697661][T13446] bridge0: port 3(team0) entered blocking state [ 464.705078][T13446] bridge0: port 3(team0) entered disabled state [ 464.730746][T13446] bridge0: port 3(team0) entered blocking state [ 464.737628][T13446] bridge0: port 3(team0) entered forwarding state [ 464.979459][T13464] netlink: 'syz.1.1980': attribute type 21 has an invalid length. [ 465.016381][T13464] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1980'. [ 465.359382][T13480] netlink: 'syz.2.1986': attribute type 41 has an invalid length. [ 466.165737][T13506] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1994'. [ 466.414357][T13512] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 466.447419][T13514] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1996'. [ 466.697709][ T5777] Bluetooth: hci3: ISO packet for unknown connection handle 62 [ 467.664341][T13552] netlink: 'syz.2.2004': attribute type 10 has an invalid length. [ 467.739597][T13552] team0: Device ipvlan1 failed to register rx_handler [ 469.268579][T13616] netlink: 'syz.2.2021': attribute type 12 has an invalid length. [ 469.297361][T13616] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2021'. [ 469.347212][T13617] netlink: 'syz.2.2021': attribute type 10 has an invalid length. [ 469.597759][T13617] team0: Device veth1_macvtap failed to register rx_handler [ 471.835761][T13666] netlink: 'syz.1.2035': attribute type 10 has an invalid length. [ 471.928271][T13666] team0: Device hsr_slave_0 failed to register rx_handler [ 472.297115][T13660] macsec0: entered promiscuous mode [ 472.302732][T13660] macsec0: entered allmulticast mode [ 472.403551][T13660] veth1_macvtap: entered allmulticast mode [ 473.448813][T13704] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.2047'. [ 474.043176][T13719] netlink: 'syz.2.2052': attribute type 1 has an invalid length. [ 474.063113][T13719] netlink: 154788 bytes leftover after parsing attributes in process `syz.2.2052'. [ 475.027280][T13737] netlink: 'syz.1.2054': attribute type 4 has an invalid length. [ 475.046065][T13737] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2054'. [ 475.858420][T13753] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.2059'. [ 475.886445][T13754] netlink: 'syz.2.2059': attribute type 4 has an invalid length. [ 475.919103][T13754] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2059'. [ 477.460815][ T2901] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 477.650205][T13773] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2062'. [ 477.809167][T13775] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.2064'. [ 480.280830][T13805] netlink: 'syz.2.2071': attribute type 1 has an invalid length. [ 480.308404][T13805] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2071'. [ 480.946983][T13811] netlink: 'syz.2.2072': attribute type 10 has an invalid length. [ 480.954940][T13811] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2072'. [ 481.027874][T13811] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 482.304307][T13836] netlink: 'syz.2.2079': attribute type 5 has an invalid length. [ 482.331942][T13836] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2079'. [ 482.378246][T13836] netlink: 'syz.2.2079': attribute type 5 has an invalid length. [ 482.412669][T13836] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2079'. [ 482.505785][T13836] netlink: 'syz.2.2079': attribute type 5 has an invalid length. [ 482.542133][T13836] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2079'. [ 482.615424][T13836] netlink: 'syz.2.2079': attribute type 5 has an invalid length. [ 482.666031][T13836] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2079'. [ 482.688620][T13836] netlink: 'syz.2.2079': attribute type 5 has an invalid length. [ 482.726027][T13836] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2079'. [ 482.785924][T13836] netlink: 'syz.2.2079': attribute type 5 has an invalid length. [ 482.803715][T13836] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2079'. [ 482.816379][T13836] netlink: 'syz.2.2079': attribute type 5 has an invalid length. [ 482.824199][T13836] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2079'. [ 482.876220][T13836] netlink: 'syz.2.2079': attribute type 5 has an invalid length. [ 482.904491][T13836] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2079'. [ 483.731745][T13856] bridge0: entered promiscuous mode [ 483.789374][T13856] bridge0: entered allmulticast mode [ 486.081781][T13913] __nla_validate_parse: 31 callbacks suppressed [ 486.081803][T13913] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.2103'. [ 486.357476][T13909] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2096'. [ 488.910039][T13955] validate_nla: 27 callbacks suppressed [ 488.910063][T13955] netlink: 'syz.3.2118': attribute type 2 has an invalid length. [ 488.973210][T13957] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.2118'. [ 489.003959][T13955] netlink: 171000 bytes leftover after parsing attributes in process `syz.3.2118'. [ 489.048877][T13957] openvswitch: netlink: Message has 20476 unknown bytes. [ 489.660106][T13970] veth0_vlan: entered allmulticast mode [ 490.005439][T13964] veth0_vlan: left promiscuous mode [ 490.022407][T13964] veth0_vlan: entered promiscuous mode [ 490.084374][T13973] netlink: 'syz.2.2122': attribute type 1 has an invalid length. [ 490.104647][T13973] netlink: 'syz.2.2122': attribute type 4 has an invalid length. [ 490.170322][T13973] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2122'. [ 490.915167][T14001] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2130'. [ 491.198531][T14005] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2131'. [ 491.236600][T14005] openvswitch: netlink: Tunnel attr 13157 out of range max 16 [ 491.421018][T14014] delete_channel: no stack [ 492.301970][T14022] netlink: 'syz.2.2135': attribute type 10 has an invalid length. [ 492.331385][T14022] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2135'. [ 492.374417][T14021] netlink: 'syz.2.2135': attribute type 10 has an invalid length. [ 492.415973][T14021] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2135'. [ 492.468873][T14029] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2138'. [ 492.500167][T14021] batman_adv: batadv0: Adding interface: virt_wifi0 [ 492.512258][T14021] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.557742][T14021] batman_adv: batadv0: Interface activated: virt_wifi0 [ 493.157176][T14043] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2141'. [ 495.794671][T14078] netlink: 'syz.3.2151': attribute type 3 has an invalid length. [ 495.817028][T14078] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.2151'. [ 496.324249][T14091] netlink: set zone limit has 8 unknown bytes [ 496.623277][T14090] netlink: 'syz.3.2154': attribute type 49 has an invalid length. [ 497.707373][ T5777] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11 [ 497.846368][T14117] netlink: 'syz.3.2162': attribute type 21 has an invalid length. [ 497.931358][T14117] netlink: 'syz.3.2162': attribute type 1 has an invalid length. [ 497.966043][T14117] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2162'. [ 498.855740][T14130] netlink: 'syz.3.2165': attribute type 10 has an invalid length. [ 499.007599][T14130] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 500.380490][T14183] netlink: 127924 bytes leftover after parsing attributes in process `syz.3.2174'. [ 500.456810][T14183] netlink: 16384 bytes leftover after parsing attributes in process `syz.3.2174'. [ 501.209225][T14199] netlink: 'syz.1.2175': attribute type 10 has an invalid length. [ 501.450983][T14199] bond0: (slave bond_slave_0): Releasing backup interface [ 501.887979][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.894428][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.919262][T14190] delete_channel: no stack [ 502.684339][T14216] netlink: 'syz.1.2181': attribute type 21 has an invalid length. [ 503.341953][T13593] syz.0.2015 (13593) used greatest stack depth: 17832 bytes left [ 503.801992][T13602] syz.0.2015 (13602) used greatest stack depth: 17704 bytes left [ 504.846974][T14250] mac80211_hwsim hwsim44 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 505.261121][T13607] syz.0.2015 (13607) used greatest stack depth: 17640 bytes left [ 507.236669][ T5987] wlan1: Trigger new scan to find an IBSS to join [ 507.741168][T14364] netlink: 'syz.0.2197': attribute type 1 has an invalid length. [ 507.771318][T14364] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.2197'. [ 508.554436][ T5770] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 508.585564][T14181] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 508.596253][ T5770] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 508.615580][ T5770] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 508.642317][ T5770] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 508.667131][ T5770] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 508.674646][ T5770] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 510.277313][ T5987] wlan1: Trigger new scan to find an IBSS to join [ 510.689116][T14384] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.2203'. [ 510.716063][T14384] netlink: 3636 bytes leftover after parsing attributes in process `syz.0.2203'. [ 510.756075][ T5777] Bluetooth: hci1: command tx timeout [ 511.101780][T14373] chnl_net:caif_netlink_parms(): no params data found [ 511.359117][T14373] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.383829][T14373] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.396797][T14373] bridge_slave_0: entered allmulticast mode [ 511.404307][T14373] bridge_slave_0: entered promiscuous mode [ 511.416358][T14373] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.424105][T14373] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.433580][T14373] bridge_slave_1: entered allmulticast mode [ 511.441241][T14373] bridge_slave_1: entered promiscuous mode [ 511.561752][T14417] netlink: 'syz.0.2211': attribute type 46 has an invalid length. [ 511.572356][T14416] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.2210'. [ 511.600065][T14373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.621346][T14373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.698533][T14417] netlink: 'syz.0.2211': attribute type 46 has an invalid length. [ 511.749298][T14373] team0: Port device team_slave_0 added [ 511.772135][T14373] team0: Port device team_slave_1 added [ 511.867358][T14373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.896150][T14373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.970834][T14373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.001353][T14373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.016105][T14373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.127302][T14373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.566794][T14373] hsr_slave_0: entered promiscuous mode [ 512.606689][T14373] hsr_slave_1: entered promiscuous mode [ 512.646458][T14373] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 512.664567][T14373] Cannot create hsr debugfs directory [ 512.838719][ T5777] Bluetooth: hci1: command tx timeout [ 513.377645][ T5777] Bluetooth: hci3: ISO packet for unknown connection handle 3084 [ 513.383249][T14175] wlan1: Trigger new scan to find an IBSS to join [ 513.513526][T14373] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.539084][T14463] netlink: 'syz.3.2223': attribute type 4 has an invalid length. [ 513.561324][T14463] netlink: 206236 bytes leftover after parsing attributes in process `syz.3.2223'. [ 513.575504][T14462] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2223'. [ 513.721277][T14373] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.773463][T14465] netlink: 'syz.3.2224': attribute type 10 has an invalid length. [ 513.825767][T14465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.847846][T14465] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 513.858608][T14470] netlink: 'syz.3.2224': attribute type 10 has an invalid length. [ 513.866634][T14470] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2224'. [ 513.875759][T14470] batadv0: entered promiscuous mode [ 513.881114][T14470] batadv0: entered allmulticast mode [ 513.887802][T14470] bond0: (slave batadv0): Releasing backup interface [ 513.898573][T14470] bridge0: port 3(batadv0) entered blocking state [ 513.905628][T14470] bridge0: port 3(batadv0) entered disabled state [ 513.956810][T14373] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.968269][ T5982] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 513.977719][ T5982] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 514.042165][T14476] netlink: 'syz.0.2226': attribute type 3 has an invalid length. [ 514.074434][T14373] bond0: (slave netdevsim0): Releasing backup interface [ 514.088228][T14373] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.340140][ T5982] wlan1: Creating new IBSS network, BSSID 2e:9c:9b:42:77:d2 [ 514.421152][T14373] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 514.452946][T14373] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 514.518198][T14373] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 514.550157][T14373] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 514.672722][T14487] wg2: entered promiscuous mode [ 514.684920][T14487] wg2: entered allmulticast mode [ 514.895371][T14373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.915935][ T5777] Bluetooth: hci1: command tx timeout [ 514.980928][T14373] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.006525][ T5982] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.013788][ T5982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.054631][T14175] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.061954][T14175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.254694][T14520] netlink: 'syz.1.2237': attribute type 4 has an invalid length. [ 515.270117][T14520] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2237'. [ 515.305356][T14520] .`: renamed from bond0 (while UP) [ 515.777421][T14373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.885528][T14373] veth0_vlan: entered promiscuous mode [ 515.915090][T14373] veth1_vlan: entered promiscuous mode [ 516.075748][T14373] veth0_macvtap: entered promiscuous mode [ 516.103075][T14373] veth1_macvtap: entered promiscuous mode [ 516.141966][T14373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.153318][T14373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.164751][T14373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.187184][T14373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.198280][T14373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.208946][T14373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.219105][T14373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.229830][T14373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.260980][T14373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.294633][T14373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.326022][T14373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.356149][T14373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.403667][T14373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.426130][T14373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.447226][T14373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.476135][T14373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.497012][T14373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.528516][T14373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.573273][T14541] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2243'. [ 516.996088][ T5777] Bluetooth: hci1: command tx timeout [ 519.116673][T14373] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.125447][T14373] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.142313][T14373] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.151536][T14373] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.359200][T14181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.383853][T14181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.443297][T14552] syzkaller0: entered promiscuous mode [ 519.453386][T14552] syzkaller0: entered allmulticast mode [ 519.486009][ T5982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.497225][ T5982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.091696][T14578] can: request_module (can-proto-0) failed. [ 522.161130][T14613] syzkaller0: entered promiscuous mode [ 522.167074][T14613] syzkaller0: entered allmulticast mode [ 522.184216][T14613] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 522.401827][ T5777] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 522.634000][T14630] netlink: 'syz.2.2263': attribute type 11 has an invalid length. [ 522.819881][T14638] netlink: 'syz.3.2266': attribute type 10 has an invalid length. [ 522.851222][T14638] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.2266'. [ 524.162524][T14649] netlink: 'syz.3.2268': attribute type 4 has an invalid length. [ 524.193472][T14654] netlink: 'syz.1.2271': attribute type 1 has an invalid length. [ 524.215170][T14649] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2268'. [ 524.238284][T14652] netlink: 'syz.2.2269': attribute type 1 has an invalid length. [ 524.280555][T14659] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.2270'. [ 525.335196][T14673] syz.2.2277[14673] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 525.335371][T14673] syz.2.2277[14673] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 525.863600][T14681] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2280'. [ 525.896377][T14683] syz.2.2282[14683] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 525.896523][T14683] syz.2.2282[14683] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 525.985727][T14691] netlink: 'syz.2.2282': attribute type 21 has an invalid length. [ 526.391053][T14701] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2285'. [ 526.401975][T14701] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 526.430994][T14700] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2285'. [ 526.453838][T14700] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 526.724662][T14711] syzkaller0: entered allmulticast mode [ 526.804853][T14716] syzkaller0: tun_chr_ioctl cmd 1074025692 [ 526.960916][T14721] netlink: 192440 bytes leftover after parsing attributes in process `syz.0.2290'. [ 527.016079][T14721] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 527.536618][T14738] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2295'. [ 527.732940][T14748] syzkaller0: entered promiscuous mode [ 527.738706][T14748] syzkaller0: entered allmulticast mode [ 528.013960][T14742] bridge0: port 3(ip6gretap0) entered blocking state [ 528.034332][T14742] bridge0: port 3(ip6gretap0) entered disabled state [ 528.067607][T14742] ip6gretap0: entered allmulticast mode [ 528.079712][T14742] ip6gretap0: entered promiscuous mode [ 528.093419][T14742] bridge0: port 3(ip6gretap0) entered blocking state [ 528.100401][T14742] bridge0: port 3(ip6gretap0) entered forwarding state [ 528.424332][T14766] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.2300'. [ 528.480709][T14764] netlink: 'syz.3.2302': attribute type 10 has an invalid length. [ 528.583254][T14764] batman_adv: batadv0: Adding interface: team0 [ 528.596024][T14764] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.632747][T14764] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 528.884130][T14779] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2306'. [ 528.921689][T14784] netlink: 'syz.3.2307': attribute type 3 has an invalid length. [ 528.930500][T14779] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.931711][T14784] netlink: 'syz.3.2307': attribute type 1 has an invalid length. [ 528.945743][T14784] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.2307'. [ 529.106129][T14779] bridge_slave_0 (unregistering): left allmulticast mode [ 529.124456][T14779] bridge_slave_0 (unregistering): left promiscuous mode [ 529.131910][T14779] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.146436][T14788] netlink: 'syz.2.2308': attribute type 153 has an invalid length. [ 529.166680][T14788] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.2308'. [ 529.496332][T14798] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.2311'. [ 529.505928][T14798] netlink: 6296 bytes leftover after parsing attributes in process `syz.3.2311'. [ 529.541376][T14798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2311'. [ 529.994939][T14813] netlink: 21 bytes leftover after parsing attributes in process `syz.0.2316'. [ 530.017377][T14813] ksmbd: Unknown IPC event: 0, ignore. [ 530.040600][T14814] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2316'. [ 530.404407][T14818] netlink: 'syz.0.2317': attribute type 3 has an invalid length. [ 530.424971][T14818] netlink: 'syz.0.2317': attribute type 4 has an invalid length. [ 530.453365][T14818] netlink: 9067 bytes leftover after parsing attributes in process `syz.0.2317'. [ 530.671819][T14819] netlink: 'syz.0.2317': attribute type 3 has an invalid length. [ 530.741855][T14819] netlink: 'syz.0.2317': attribute type 4 has an invalid length. [ 531.288572][T14834] netlink: 'syz.3.2323': attribute type 2 has an invalid length. [ 531.298958][T14834] netlink: 'syz.3.2323': attribute type 8 has an invalid length. [ 532.574937][T14878] mac80211_hwsim hwsim51 wlan0: entered promiscuous mode [ 532.622900][T14878] mac80211_hwsim hwsim51 wlan0: entered allmulticast mode [ 533.829618][T14911] netlink: set zone limit has 8 unknown bytes [ 534.249405][T14924] netlink: 'syz.1.2346': attribute type 9 has an invalid length. [ 534.286753][T14924] __nla_validate_parse: 5 callbacks suppressed [ 534.286771][T14924] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2346'. [ 544.420609][ T5995] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 550.298677][ T5777] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 550.316359][ T5777] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 550.324943][ T5777] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 550.333708][ T5777] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 550.341651][ T5777] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 550.350408][ T5777] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 550.986285][T14968] chnl_net:caif_netlink_parms(): no params data found [ 551.746654][ T5770] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 551.757665][ T5770] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 551.766371][ T5770] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 551.774717][ T5770] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 551.783833][ T5770] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 551.791460][ T5770] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 552.436886][ T5770] Bluetooth: hci4: command tx timeout [ 552.707091][ T5777] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 552.717746][ T5777] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 552.726336][ T5777] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 552.734657][ T5777] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 552.743743][ T5777] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 552.751623][ T5777] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 553.876332][ T5777] Bluetooth: hci5: command tx timeout [ 553.897168][ T5777] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 553.907617][ T5777] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 553.916259][ T5777] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 553.926189][ T5777] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 553.934338][ T5777] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 553.942007][ T5777] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 554.516072][ T5777] Bluetooth: hci4: command tx timeout [ 554.838879][ T5777] Bluetooth: hci6: command tx timeout [ 555.956335][ T5770] Bluetooth: hci5: command tx timeout [ 555.963240][ T5777] Bluetooth: hci7: command tx timeout [ 556.596009][ T5777] Bluetooth: hci4: command tx timeout [ 556.916167][ T5777] Bluetooth: hci6: command tx timeout [ 558.036147][ T5770] Bluetooth: hci5: command tx timeout [ 558.042893][ T5777] Bluetooth: hci7: command tx timeout [ 558.679981][ T5777] Bluetooth: hci4: command tx timeout [ 558.996156][ T5777] Bluetooth: hci6: command tx timeout [ 560.116217][ T5777] Bluetooth: hci7: command tx timeout [ 560.121708][ T5777] Bluetooth: hci5: command tx timeout [ 561.076097][ T5777] Bluetooth: hci6: command tx timeout [ 562.196077][ T5777] Bluetooth: hci7: command tx timeout [ 563.346421][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.352824][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 611.575439][ T5770] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 611.596160][ T5770] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 611.604830][ T5770] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 611.615255][ T5770] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 611.623460][ T5770] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 611.631083][ T5770] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 612.537136][ T5777] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 612.547563][ T5777] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 612.556843][ T5777] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 612.565198][ T5777] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 612.574543][ T5777] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 612.582112][ T5777] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 613.599579][ T5770] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 613.616357][ T5770] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 613.625129][ T5770] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 613.646359][ T5770] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 613.654504][ T5770] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 613.670125][ T5770] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 613.716060][ T5770] Bluetooth: hci8: command tx timeout [ 614.587843][ T5777] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 614.606081][ T5777] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 614.614773][ T5777] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 614.623759][ T5777] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 614.631978][ T5777] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 614.639768][ T5777] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 614.679538][ T5777] Bluetooth: hci9: command tx timeout [ 615.716086][ T5777] Bluetooth: hci10: command tx timeout [ 615.796111][ T5777] Bluetooth: hci8: command tx timeout [ 616.676261][ T5777] Bluetooth: hci11: command tx timeout [ 616.756028][ T5777] Bluetooth: hci9: command tx timeout [ 617.796025][ T5777] Bluetooth: hci10: command tx timeout [ 617.876099][ T5777] Bluetooth: hci8: command tx timeout [ 618.756111][ T5777] Bluetooth: hci11: command tx timeout [ 618.836039][ T5777] Bluetooth: hci9: command tx timeout [ 619.876052][ T5777] Bluetooth: hci10: command tx timeout [ 619.955952][ T5777] Bluetooth: hci8: command tx timeout [ 620.838974][ T5777] Bluetooth: hci11: command tx timeout [ 620.916236][ T5777] Bluetooth: hci9: command tx timeout [ 621.956070][ T5777] Bluetooth: hci10: command tx timeout [ 622.916084][ T5777] Bluetooth: hci11: command tx timeout [ 624.761184][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.767792][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.964592][ T5777] Bluetooth: hci1: command 0x0406 tx timeout [ 640.345807][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 640.352699][ C0] rcu: 0-....: (1 GPs behind) idle=af94/1/0x4000000000000000 softirq=57116/57118 fqs=5239 [ 640.364319][ C0] rcu: hardirqs softirqs csw/system [ 640.370800][ C0] rcu: number: 1228163 0 0 [ 640.377344][ C0] rcu: cputime: 18933 33546 71 ==> 52500(ms) [ 640.385308][ C0] rcu: (t=10502 jiffies g=70017 q=2205 ncpus=2) [ 640.391713][ C0] CPU: 0 PID: 14945 Comm: syz.2.2352 Not tainted syzkaller #0 [ 640.399255][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 640.409357][ C0] RIP: 0010:unwind_next_frame+0x490/0x2970 [ 640.415210][ C0] Code: 89 e5 4c 89 64 24 28 48 ba 00 00 00 00 00 fc ff df 4c 8b 74 24 48 48 89 d8 4c 29 e0 48 89 c1 48 c1 f9 02 48 c1 e8 3f 48 01 c8 <48> 83 e0 fe 4d 8d 3c 44 4c 89 f8 48 c1 e8 03 0f b6 04 10 84 c0 75 [ 640.434848][ C0] RSP: 0018:ffffc90000006b38 EFLAGS: 00000246 [ 640.440938][ C0] RAX: 0000000000000000 RBX: ffffffff8ec550e0 RCX: 0000000000000000 [ 640.448934][ C0] RDX: dffffc0000000000 RSI: ffffffff8a801449 RDI: ffffffff8a801442 [ 640.456930][ C0] RBP: ffffffff8ec550dc R08: ffffc90000006cd0 R09: 0000000000000014 [ 640.464928][ C0] R10: 0000000000000004 R11: 0000000000000100 R12: ffffffff8ec550e0 [ 640.472922][ C0] R13: ffffffff8a801442 R14: ffffffff8a801449 R15: ffffffff8ec550dc [ 640.480920][ C0] FS: 00007f26b73bb6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 640.489892][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 640.496511][ C0] CR2: 00007f1f6748cd58 CR3: 0000000062071000 CR4: 00000000003506f0 [ 640.504507][ C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 640.512501][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 640.520645][ C0] Call Trace: [ 640.523952][ C0] [ 640.526922][ C0] ? asm_sysvec_apic_timer_interrupt+0x19/0x20 [ 640.533167][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 640.539379][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 640.545571][ C0] ? stack_trace_save+0xe0/0xe0 [ 640.550462][ C0] arch_stack_walk+0x144/0x190 [ 640.555253][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 640.561434][ C0] stack_trace_save+0x9c/0xe0 [ 640.566145][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 640.571307][ C0] ? __virt_addr_valid+0x18c/0x540 [ 640.576451][ C0] kasan_save_stack+0x3e/0x60 [ 640.581182][ C0] ? kasan_save_stack+0x3e/0x60 [ 640.586054][ C0] ? __kasan_record_aux_stack+0xaf/0xc0 [ 640.591626][ C0] ? call_rcu+0x158/0x930 [ 640.595987][ C0] ? skb_release_head_state+0x71/0x240 [ 640.601466][ C0] ? kfree_skb_reason+0xd7/0x170 [ 640.606423][ C0] ? ip_tunnel_xmit+0xe5d/0x2360 [ 640.611425][ C0] ? gre_tap_xmit+0x4fe/0x6f0 [ 640.616134][ C0] ? dev_hard_start_xmit+0x246/0x740 [ 640.621499][ C0] ? sch_direct_xmit+0x252/0x4a0 [ 640.626630][ C0] ? __dev_queue_xmit+0x173e/0x35a0 [ 640.631855][ C0] ? ip6_finish_output2+0xe2e/0x1650 [ 640.637168][ C0] ? ndisc_send_skb+0xbed/0x14b0 [ 640.642127][ C0] ? addrconf_rs_timer+0x2bc/0x600 [ 640.647259][ C0] ? call_timer_fn+0x16e/0x530 [ 640.652039][ C0] ? __run_timers+0x52d/0x7d0 [ 640.656729][ C0] ? run_timer_softirq+0x67/0xf0 [ 640.661687][ C0] ? handle_softirqs+0x280/0x820 [ 640.666643][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 640.671431][ C0] ? irq_exit_rcu+0x9/0x20 [ 640.675869][ C0] ? sysvec_apic_timer_interrupt+0xa4/0xc0 [ 640.681723][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 640.687936][ C0] ? __phys_addr+0xba/0x170 [ 640.692475][ C0] __kasan_record_aux_stack+0xaf/0xc0 [ 640.697879][ C0] ? rcuref_put+0x210/0x210 [ 640.702456][ C0] call_rcu+0x158/0x930 [ 640.706647][ C0] ? percpu_counter_set+0x1a0/0x1a0 [ 640.711870][ C0] ? rcuref_put+0x1b8/0x210 [ 640.716503][ C0] ? dst_release+0x1a0/0x1a0 [ 640.721217][ C0] ? rcu_force_quiescent_state+0x230/0x230 [ 640.727066][ C0] ? dst_release+0x121/0x1a0 [ 640.731785][ C0] skb_release_head_state+0x71/0x240 [ 640.737132][ C0] kfree_skb_reason+0xd7/0x170 [ 640.741929][ C0] ip_tunnel_xmit+0xe5d/0x2360 [ 640.746718][ C0] ? __lock_acquire+0x1260/0x7c80 [ 640.751882][ C0] ? ip_tunnel_xmit+0x110/0x2360 [ 640.756882][ C0] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 640.761970][ C0] ? gre_build_header+0x25b/0x990 [ 640.767037][ C0] gre_tap_xmit+0x4fe/0x6f0 [ 640.771671][ C0] dev_hard_start_xmit+0x246/0x740 [ 640.776829][ C0] sch_direct_xmit+0x252/0x4a0 [ 640.781654][ C0] ? mrp_pdu_parse_vecattr_event+0x2a0/0x2a0 [ 640.787671][ C0] __dev_queue_xmit+0x173e/0x35a0 [ 640.792740][ C0] ? neigh_resolve_output+0x435/0x730 [ 640.798273][ C0] ? __dev_queue_xmit+0x245/0x35a0 [ 640.803420][ C0] ? read_seqbegin+0x1b5/0x260 [ 640.808216][ C0] ? neigh_event_send+0x110/0x110 [ 640.813284][ C0] ? netdev_core_pick_tx+0x340/0x340 [ 640.818598][ C0] ? __asan_memcpy+0x40/0x70 [ 640.823215][ C0] ? eth_header+0x11b/0x200 [ 640.827742][ C0] ? llc_sysctl_exit+0x70/0x70 [ 640.832643][ C0] ? neigh_resolve_output+0x618/0x730 [ 640.838084][ C0] ip6_finish_output2+0xe2e/0x1650 [ 640.843233][ C0] ? ip6_finish_output2+0x661/0x1650 [ 640.848579][ C0] ? ip6_mtu+0x7d/0x3f0 [ 640.852756][ C0] ? nf_hook+0x370/0x370 [ 640.857023][ C0] ? ip6_finish_output+0x57b/0x820 [ 640.862164][ C0] ndisc_send_skb+0xbed/0x14b0 [ 640.866971][ C0] ? ndisc_alloc_skb+0x18c/0x450 [ 640.872036][ C0] ? ndisc_send_skb+0x1f2/0x14b0 [ 640.877005][ C0] ? ndisc_mc_map+0x680/0x680 [ 640.881705][ C0] ? skb_dst+0xd0/0xd0 [ 640.885812][ C0] addrconf_rs_timer+0x2bc/0x600 [ 640.890784][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 640.896882][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 640.902903][ C0] call_timer_fn+0x16e/0x530 [ 640.907515][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 640.913736][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 640.919840][ C0] ? call_timer_fn+0xbf/0x530 [ 640.924591][ C0] ? __run_timers+0x7d0/0x7d0 [ 640.929349][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 640.935446][ C0] __run_timers+0x52d/0x7d0 [ 640.940180][ C0] ? detach_timer+0x2b0/0x2b0 [ 640.944891][ C0] run_timer_softirq+0x67/0xf0 [ 640.949689][ C0] handle_softirqs+0x280/0x820 [ 640.954488][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 640.959282][ C0] ? do_softirq+0x180/0x180 [ 640.963898][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 640.969131][ C0] __irq_exit_rcu+0xc7/0x190 [ 640.973779][ C0] ? irq_exit_rcu+0x20/0x20 [ 640.978310][ C0] irq_exit_rcu+0x9/0x20 [ 640.982571][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 640.988273][ C0] [ 640.991221][ C0] [ 640.994210][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 641.000232][ C0] RIP: 0010:generic_exec_single+0x476/0x4f0 [ 641.006249][ C0] Code: 75 11 e8 cd e6 0a 00 48 85 db 75 16 e8 c3 e6 0a 00 eb 15 e8 bc e6 0a 00 e8 47 cd ec 08 48 85 db 74 ea e8 ad e6 0a 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 66 43 c7 44 2c [ 641.026237][ C0] RSP: 0018:ffffc90003727a00 EFLAGS: 00000246 [ 641.032325][ C0] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000080000 [ 641.040331][ C0] RDX: ffffc9000db2c000 RSI: 0000000000002f61 RDI: 0000000000002f62 [ 641.048323][ C0] RBP: ffffc90003727ad0 R08: ffffffff90d945ff R09: 1ffffffff21b28bf [ 641.056319][ C0] R10: dffffc0000000000 R11: fffffbfff21b28c0 R12: 1ffff920006e4f44 [ 641.064414][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff920006e4f65 [ 641.072427][ C0] ? event_function+0x300/0x300 [ 641.077404][ C0] ? smp_call_function_single+0x580/0x580 [ 641.083156][ C0] ? percpu_counter_add_batch+0x1d9/0x280 [ 641.088929][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 641.094181][ C0] ? smp_call_function_single+0xa1/0x580 [ 641.099874][ C0] smp_call_function_single+0x352/0x580 [ 641.105447][ C0] ? event_function+0x300/0x300 [ 641.110327][ C0] ? flush_smp_call_function_queue+0x240/0x240 [ 641.116506][ C0] ? event_function+0x300/0x300 [ 641.121412][ C0] perf_install_in_context+0x591/0x8e0 [ 641.126909][ C0] ? exclusive_event_installable+0x2c0/0x2c0 [ 641.132919][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 641.138148][ C0] ? add_event_to_ctx+0x1180/0x1180 [ 641.143386][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 641.149579][ C0] __se_sys_perf_event_open+0x17fa/0x1c20 [ 641.155329][ C0] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 641.161003][ C0] ? lock_chain_count+0x20/0x20 [ 641.165883][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 641.171132][ C0] ? __x64_sys_perf_event_open+0x20/0xc0 [ 641.176803][ C0] do_syscall_64+0x55/0xb0 [ 641.181244][ C0] ? clear_bhb_loop+0x40/0x90 [ 641.185948][ C0] ? clear_bhb_loop+0x40/0x90 [ 641.190658][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 641.196577][ C0] RIP: 0033:0x7f26b658f749 [ 641.201015][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.220654][ C0] RSP: 002b:00007f26b73bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 641.229136][ C0] RAX: ffffffffffffffda RBX: 00007f26b67e5fa0 RCX: 00007f26b658f749 [ 641.237194][ C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140 [ 641.245186][ C0] RBP: 00007f26b6613f91 R08: 0000000000000002 R09: 0000000000000000 [ 641.253210][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 641.261202][ C0] R13: 00007f26b67e6038 R14: 00007f26b67e5fa0 R15: 00007ffc3b43f838 [ 641.269216][ C0] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)