last executing test programs: 20.55240691s ago: executing program 4 (id=6601): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r3 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0x15, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000740)='|', 0x1}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000852d42e0850000002d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x25, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfef4d300c785758f}, 0x50) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x4}, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r5, &(0x7f0000001040)=ANY=[@ANYBLOB="2b6e6574206ca4a52df4d87ab273622a104634b679f1bc5bba9957d9b30d3497487434a857a6f77e397bf055b32f8f04421b9a13a491917654d9c73f25ea914c2b321de99aad9e9a35b94c2ddb6cfa99"], 0x5) write$cgroup_devices(r5, &(0x7f0000000a80)={'c', ' *:* ', 'rw\x00'}, 0x9) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x22a82, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'geneve0\x00', 0x8000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8090) recvmsg$unix(r7, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r10 = socket$kcm(0xa, 0x2, 0x88) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x3e, &(0x7f00000002c0)=r11, 0x4) setsockopt$sock_attach_bpf(r10, 0x1, 0x41, &(0x7f0000000040)=r9, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100) 19.712367179s ago: executing program 3 (id=6605): r0 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0x81}, 0x100c, 0x4, 0xfffffffc, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x10005}, 0x38) r1 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="a0005bf8", 0x4}, {&(0x7f0000000580)="c5bfd7eb", 0x4}], 0x2, 0x0, 0x0, 0x900}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x66e, 0x7}, 0x0, 0x0, 0xc2ba, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xda, 0x8000000000000001}, 0x10c002, 0xac5d, 0x4000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.swap.current\x00', 0x26e1, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x40000) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r14) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) 19.584997772s ago: executing program 4 (id=6607): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$kcm(0xa, 0x5, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000540), 0xc) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x80e1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x2f86, 0x7}, 0x0, 0x0, 0x51, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) r3 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r4}, 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r4, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], 0x0, 0x58, &(0x7f0000000440)=[{}], 0x8, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xf1, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000980)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYRES32, @ANYBLOB="067080cd74e76d6ba07500000000000000000000000000000000000000197e47d1bd5253ce7c3f7cd2f35fe75cdc97086e26b0b0c7c53061f8ee7f1921ac4a5e4fac631734d223f374c6036ead5ce273f28eab1c0896bd96cb7664872c29d368bf65756ee2923f932d6ac414e3e202ba9734eae7fd58bc2778ffe57a4be9488d9802c666d6b31a12dfffd9eeecbfedfc7aaf43cbdd216d2b2b08c87a5151e8929b86e847a2b064", @ANYRES32=r5, @ANYRES32=r6, @ANYRES16], 0x50) r7 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r7, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0) (async) write$cgroup_devices(r4, 0x0, 0xfffffeff) (async) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000100)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r10 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x6, 0xf60, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x40082406, &(0x7f00000001c0)='cpu<20\t&&') (async) syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r0}, 0x8) 19.371902776s ago: executing program 2 (id=6610): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x9a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000f80)={&(0x7f0000000540)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000700)="d56fff67d07f14999cd1f16d309ca6a25bc12b2af8bc71924420fbd921623757712d0a81db3f232b61f60ccaf9d1f5e4581e9ed43bb222da4e007e677544adbe8bdc6272274518f5b3504229a015b8dcb3e0a151e44c4c48803598cdafe5377bb284609143a715a09490b1a461e03ae871a0c67a7cef5a9b6fe9ea0be59d01fdd012e58fe490204847ae96e3109cc1b50d2c8ccfc85bfe45af701a73ddffb9712de72c531f006ac24108fe37e80258ed6924a73a047bd45bd64f6cf0216e", 0xbe}], 0x1, &(0x7f0000000c40)=[{0xd8, 0x107, 0x6, "8c904c8295bfb981cea91d6ecfc4f1481bf05b4af6f58d727340e0eb0f08a5a5bc251d04133b08a77b620a4fd6c83d40058c5ebda5039e1744434528cbed1cebf1ea80b58ae1a2afceb866735196386d579e2f28d5fee140c126afc5adcaa63054d14cce6e28c3ec16e5dc6e6c0b932fe0e56c3d6c11ed3a52fd6c3307b1134834445c8d756f8f7dcffae7bab02697beba15241e0d62e4aaf735b77b3368cdbd5fa3ed0a37c12c6a0b16fee7ec03d6189ca827050d8a809081b174351b4fea5de3"}, {0x30, 0x10b, 0x7f, "0ced5397d6f9a8f4c4fe2ee17179a5a3c2d340c53545ee52e5306ae160"}, {0x50, 0x114, 0x7, "cc7b03106f8b2482d81e53daddce99e869b2b643e26056c146e7c741bf58699f397ad5f3ccc16ac1401d38b0ff30b97be1791b9dfb6cc4773811c660"}, {0x48, 0x117, 0x3, "902dc0252237d4768a0095d11fcb9da22873d3ff480574825d875883690ca96cbba7e3b6f7db04ca680a42f9d62a90d6eb5560f2e8e9"}, {0x10, 0x119, 0x2}, {0x90, 0x343, 0x10000, "cf8e0fa2b3a649c05463a7dfc1db447b65cbae464b3a2a49e210a0126e9e0b5d2b2855cc33d44f831bcd51d327daab05811b4a81c62173926e4f17f3ac8ed65cd56650132dbdc126d95ba0efaa6cc0a0d646c2ae89754c21ac6e4fcdfb4e09ad6c417e8c5fe6bff2c2095fc07bcf97b97b98452773809e09f57d"}, {0xd0, 0x1, 0x8001, "b070b137ab8effea2ba8c8a56ebcfbd787b9400ffd49e7389839ace9e0a9a30bec040f91135942ed72c3eecead74484232897fc1d495c105f346110437b6c7da8a6bd5ff13cb5f155e00d06b496a71c2fa5d0698a50e99393b11d2aa486b9f3b9f83d99ba98edbfb7a4be3234f393c5d79eed35cf01799a810fb05943dafb4c2601790ef70a21e7f90c45b104f36527954146785b7782b8f4a6c3f51e19322baa635dc11f1857eac0a1d4b667b533866db00976402952fb44f1b95ffea4468"}], 0x310}, 0x20040000) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r4}, 0x0, 0x0}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed009875f37538e486dd0000000003"], 0xfe1b) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x10}, 0x18) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x86, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x50) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x6, 0x8}, 0xc) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xf}, [@generic={0x1, 0x7, 0x1, 0x5, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x39b4, 0x0, 0x0, 0x0, 0xf0}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffb}, @alu={0x4, 0x1, 0x3, 0x1, 0x9, 0x8}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x7, 0x7a, &(0x7f0000000140)=""/122, 0x41100, 0x69cdf0332f03a29f, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000200)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x9, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[r2, r6, r7, r8, 0xffffffffffffffff], &(0x7f0000000400)=[{0x1, 0x2, 0xd}, {0x5, 0x1, 0xb, 0x5}, {0x0, 0x4, 0x1, 0x3}], 0x10, 0x6, @value=r9}, 0x94) 19.278454208s ago: executing program 4 (id=6611): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x400020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x33a2d912}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000500)={r0, 0x0}, 0x20) perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0xb3, 0x3, 0x6, 0x49, 0x0, 0x2, 0x2001, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x8, 0x1}, 0x1410, 0x401, 0x0, 0x5, 0x1b, 0xffff0001, 0x2, 0x0, 0x4, 0x0, 0x727}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xa) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000880), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x14, 0x1d, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000070000000000000009000000f5110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018620000040000000000000009000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000a80000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000", @ANYRES32=r0, @ANYBLOB="0000000001000000bf91000000000000b702000001000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x8e, &(0x7f00000007c0)=""/142, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x36, r5, 0x8, &(0x7f00000008c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000900)={0x4, 0x1ff, 0x6, 0x524}, 0x10, 0x0, r1, 0x6, 0x0, &(0x7f0000000c80)=[{0x5, 0x4, 0xd, 0x8}, {0x5, 0x1, 0x6, 0xc}, {0x5, 0x1, 0x6, 0x4}, {0x3, 0x2, 0xf, 0x2}, {0x5, 0x3, 0x9, 0x8}, {0x2, 0x1, 0x0, 0xb}], 0x10, 0xea17}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x826, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r6, 0x1, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xffffffff, 0x0, r7, 0x7, '\x00', 0x0, r6, 0x0, 0x3}, 0x50) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001100)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xe}, 0x10000) r8 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b100b4ab50a", @ANYRES32, @ANYRES8=r8], 0xfe33) ioctl$SIOCSIFHWADDR(r4, 0x890c, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) sendmsg$sock(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="e13dc3388988c25f25b7b8975c91091b92b1744d0cee02a81e7617f0570b5b78ac41770ca3ff0f1e3fc32dbffb959b83c2208fbd52594933b0b3ca4b9c240d2b6b06590c8aa360e58e624a3b049640b0988fcd746cb1", 0x56}, {&(0x7f0000000280)="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", 0xff}], 0x2, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0xb8}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x60}, 0x800) 19.20442816s ago: executing program 0 (id=6612): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="18020000fb4d94320708000000000000175d839c6c2742b4bc20e6850000fa708a76a15315ec6a00000000e51c7eff5f52b826200e3f668442d054f96ba199a1ddc3a84bde7edc1bc513fd649980bc34fa1bdb38e7588d07c67c6852c4187dca3dbccf9d78bde75b30d52dfc97102a6e290e0616e240aa1ac500e6f1b44a58d92eab58fa61918b438e0de457877c6f4b83a3f03cf010f1f7fc83a2f1f262e434269cf3950593845e68e2a7d1a2d9598f0207b865d030372f810212db20e51ffcfc91f0a5913b64a987b84953a57375aff35a9414304aa9ea36948ae8d6d5baf8a1a184df65c3e73101"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @perf_config_ext={0x8, 0x830d}, 0x1b040, 0x3, 0xfffffffe, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000005000000040000000000000000000066496f39f34a366010155891fb920163955aad4cd4ad57e7bbbe1103afb8305aa4f908a3ae503d672be22fdd2471ff29b63a1ae906a96d1f658119313808bf5ca83011b975bc440928135074039daaa11631"], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000010200040085000000530000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x6}, 0x100000, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000001280)=r2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\t'], 0xa) r4 = openat$cgroup_devices(r3, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x50) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x800000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0813", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 19.181733751s ago: executing program 1 (id=6613): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0x10, 0x3, 0x10) openat$cgroup_subtree(r0, &(0x7f0000000440), 0x2, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)={'c', ' *:* ', 'rw\x00'}, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macvlan0\x00', 0x1}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x2, 0x200000000000001, 0x106) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYRESDEC=r2, @ANYRES32=r2, @ANYRESHEX=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c}, 0x38) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={0x0, 0x0, 0xa11b429afcc82982}, 0x18) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)={0xffffffffffffffff, r5}) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(r0, &(0x7f0000000400)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) close(r6) r7 = socket$kcm(0xa, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x189703, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r8 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x19, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0c00000004000000040000000000047500000000", @ANYRES32=r9, @ANYRES32=r8, @ANYRES8=r7, @ANYRES32, @ANYBLOB="000000000000000000002100000000000000000000000000044f04000000d2889dc3e1bc7a00000000"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0xe, &(0x7f00000029c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x2e0, 0x19, 0x0, &(0x7f00000000c0)="b9ff0303000d698cb89e40f008004000000e00001100630277", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440), 0x0}, 0x50) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r11 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r11, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a990053", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000300"}) 19.081183773s ago: executing program 2 (id=6614): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000802000001"], 0x48) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc29a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) getpid() (async) socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0xd, &(0x7f00000000c0), 0x4f) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x2, 0x90}]}, &(0x7f0000000180)='GPL\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210}, 0x94) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000c00)=""/4023, 0xfb7}, {&(0x7f0000000440)=""/197, 0xc5}], 0x2}, 0x0) 19.008577524s ago: executing program 3 (id=6615): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x30001, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000040)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc3}], 0x1, &(0x7f00000001c0)}, 0x0) 18.869884058s ago: executing program 4 (id=6616): r0 = socket$kcm(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x9b, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000100)=ANY=[@ANYRES8=r0], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRESDEC], 0x0, 0x64}, 0x28) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000780)=ANY=[@ANYRES64=r2], &(0x7f0000000480)='GPL\x00', 0x2000, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000700)=ANY=[@ANYBLOB="2d6465766980000000000000006f7279202b637075202d6e65745f7072696f20c5872f34c1c3815adc08b81f95e78f76c94ff59fe947465a5d8ccefaa8fd705d200022634a44a49fa3b0a0d430b5cf324804fcdff900000000000000051b7dd860a8fd715e91be9a950cb84601d01a8300"], 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xf, 0x0, 0x5d31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0xfffffffc, 0x7, 0x0, 0x100, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x4) write$cgroup_subtree(r3, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r3], 0xfe33) recvmsg$kcm(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001a40)=""/4095, 0xfff}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) recvmsg$kcm(r5, &(0x7f0000000240)={&(0x7f00000002c0)=@ax25={{}, [@bcast, @remote, @default, @rose, @default, @remote, @rose, @bcast]}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/40, 0x28}, {&(0x7f00000008c0)=""/197, 0xc5}], 0x2, &(0x7f0000000380)=""/58, 0x3a}, 0x2000) recvmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r6 = socket$kcm(0x10, 0x1, 0x10) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000000c0)="1400000027000bff001b05290000000000000000", 0x14}], 0x1}, 0x4080) r7 = socket$kcm(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)}, 0x0) 18.72042483s ago: executing program 2 (id=6617): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair(0xf, 0x6, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) (async) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xf, 0x4}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x10, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) (async) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x10}}], 0x10}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100036c00fc08000000000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) (async) syz_clone(0x298c200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r5, &(0x7f0000000300), 0x0}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRESDEC=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) (async) r8 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1b0000001a00895436dff9ce32a4e79480029ec4eea6dd56e22e57", 0x1b}], 0x1}, 0x0) (async) socketpair(0xffffffffffffffff, 0xc9d907067d1ae548, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f1, &(0x7f0000000080)) 18.668962242s ago: executing program 3 (id=6618): sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000080)="07d4445daf21007c4b8e7a7a4d4511bd0e2eca61fd238502ed8de7bf602f17fb5e", 0x21}], 0x1}, 0x800) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251ef60a84c9f4d4930f0000004509c5bb0000000000001da2b2ae3ae74cc4e8c3c811", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48040) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x0, 0x10000}, {0x10000002, 0x0, 0x0, 0x8}]}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x6e, &(0x7f0000000000)=r7, 0x10) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x23, &(0x7f0000000000)=r8, 0x8) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001340)=""/4067, 0xfe3}, {&(0x7f0000000100)=""/37, 0x25}, {&(0x7f00000000c0)=""/57, 0x39}, {&(0x7f0000000280)=""/161, 0xa1}, {&(0x7f0000000140)=""/141, 0x8d}], 0x5}, 0x22) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd99}, 0x0) recvmsg$kcm(r0, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x40002020) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc6007020f", 0x17}], 0x1, 0x0, 0x0, 0x400300}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%-5lx \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r9, &(0x7f00000002c0)="1e3bb540e2111f92e375e40393d95ca9a9fd8a773233b91842c7ee052fa875364b4e2ff4c730b1da9cc953be8260a2e1b911b7c8442daefeec4d6f54fd3ae07b3bba3e6a4391690714f7b035e6bf4341fc6b832759afbbfbe5770320f991cb6acfb92de2c7a8c5e10594c116d87821b1d6a743b203e824e39e1d15be170112c9003be14cd9785b2ddd498cd9e7367e680d52687d3fea24c4c7b8f2", &(0x7f0000000380)=""/234}, 0x20) r10 = socket$kcm(0x10, 0x2, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f00000004c0)=r11, 0x4) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 18.645838052s ago: executing program 1 (id=6619): r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, 0x0, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000001540)=""/4091, 0x2a, 0xffb, 0x1}, 0x28) (async) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0xc, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={0x0, r2}, 0x18) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x4, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x6, 0x61, 0x11, 0x68}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) 18.27617073s ago: executing program 0 (id=6620): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ceaa00000000000071101b000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000040000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x38, &(0x7f0000000dc0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff9}, @map_fd={0x18, 0x8}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) unlink(&(0x7f00000000c0)='./file0\x00') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg(r3, &(0x7f0000000c00)={&(0x7f0000000000)=@phonet={0x23, 0x5, 0x2, 0x8}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)}], 0x1, &(0x7f0000000900)=[{0x10, 0x10e, 0x1ff}, {0x10, 0x84}], 0x20}, 0x4040080) r4 = socket$kcm(0x10, 0x2, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={0x0, 0x0, 0x18}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={0x0, 0x0}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033a"], 0xfdef) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f00000003c0), &(0x7f0000000440)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000001000)={&(0x7f00000001c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10, 0x0}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000100), &(0x7f0000000140)=r5}, 0x20) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x12001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x4}, 0x100c04, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x4) 17.943558408s ago: executing program 1 (id=6621): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x0) socket$kcm(0x2a, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB], 0x48) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x10000000, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 17.655115314s ago: executing program 2 (id=6622): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000d80), &(0x7f0000000dc0)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001040)={0xffffffffffffffff, 0x58, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001240)={0xffffffffffffffff, 0x20, &(0x7f0000001200)={&(0x7f0000001640)=""/167, 0xa7, 0x0, &(0x7f00000015c0)=""/91, 0x5b}}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001280)={0x1b, 0x0, 0x0, 0x200, 0x0, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001300), &(0x7f0000001340)='%pi6 \x00'}, 0x20) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000013c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x1, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001440)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001500)=@bpf_lsm={0x1d, 0x19, &(0x7f0000000e40)=@raw=[@cb_func={0x18, 0x7}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x6, 0x0, 0x4, 0x18, 0x1}, @generic={0x4c, 0x0, 0x1, 0x36, 0x4}], &(0x7f0000000f40)='syzkaller\x00', 0x81, 0xa, &(0x7f0000000f80)=""/10, 0x40f00, 0x0, '\x00', r2, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001080)={0x3, 0xa, 0x8}, 0x10, r3, 0x0, 0x1, &(0x7f0000001480)=[r4, r5, 0x1, r6, r7, r8], &(0x7f00000014c0)=[{0x4, 0x1, 0x5, 0x8}], 0x10, 0x80000001}, 0x94) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000300081044e81f782db44b904021d080005000000e8fe54a1180015000600142603600e1208000f0000000401a80016000400014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffc48, &(0x7f0000000000)='cgroup\x00'}, 0x30) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000100085000000530000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000009500"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001140)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0xfffffe53) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_int(r10, &(0x7f0000000580)='cpu.idle\x00', 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100), 0x4) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0xfffffff7, 0x1, 0x84}, 0x48) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000005004000ff0f000007"], 0x48) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1e, 0xc, &(0x7f0000000200)=ANY=[@ANYRES8=r14], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r9, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f0000000780)=[0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc2, &(0x7f0000000800)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000840), &(0x7f0000000980), 0x8, 0xbf, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) r17 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000b40)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x6, 0xa, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x81}, [@call={0x85, 0x0, 0x0, 0x91}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r13}}]}, &(0x7f0000000680)='GPL\x00', 0x6, 0x6d, &(0x7f00000006c0)=""/109, 0x40f00, 0x2, '\x00', r16, @fallback=0x35, r17, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b80)={0x4, 0x3, 0x1, 0x2}, 0x10, 0xffffffffffffffff, r9, 0x5, &(0x7f0000000bc0)=[r12, r13, r12, r12], &(0x7f0000000c00)=[{0x4, 0x5, 0xa, 0x4}, {0x2, 0x1, 0x5, 0xb}, {0x2, 0x5, 0xa, 0x4}, {0x5, 0x2, 0xf, 0x8}, {0x3, 0x4, 0x5, 0x2}], 0x10, 0x3}, 0x94) r18 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x5, 0x3, 0x5, 0x8f, 0x0, 0x9, 0x2, 0xd, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x17a, 0x0, @perf_config_ext={0x3, 0x7}, 0x8268, 0xfffffffffffffff9, 0x8, 0x1, 0x0, 0xe32, 0x34ac, 0x0, 0xad, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r18, 0x2400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r15, 0x2000002, 0xe, 0x0, &(0x7f00000004c0)="df034affffffffffff0000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x5, [@decl_tag={0x10, 0x0, 0x0, 0x11, 0x2, 0x7}, @enum64={0xf, 0x4, 0x0, 0x13, 0x0, 0x0, [{0x3, 0x18000, 0x2}, {0xb, 0x0, 0xffffff01}, {0x2, 0x1, 0x2}, {0xd, 0x4, 0xfffffff9}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0x1}}]}, {0x0, [0x0, 0x61, 0x5f]}}, &(0x7f00000005c0)=""/122, 0x81, 0x7a, 0x1, 0x10000}, 0x28) 17.633481045s ago: executing program 0 (id=6623): r0 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x10c002, 0xac59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r1, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x408900, 0x0) close(0x3) 17.542100266s ago: executing program 3 (id=6624): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x90}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 17.515546627s ago: executing program 4 (id=6625): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000020000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c56f0979bd10b97163c1d6d0e196bf02f46e8953ab1abda45cbe8d0d26b5069f8a98f7dc8f76b74635fc9f9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d35c32aac1c7d5b5be399f6609876b5887437a172fbc02a74067529194e533583412dff048f0000000000000000b2728a04816cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad30000000000000003626165866c154e2514890000b515a1000000000000000eb2e9c15b6c8f6198282d0086fa0000c2ccf3f6d69cfcf1e15ea7a9e57aee78e12ace55736fa42811654e19a7e9b531636794a718b4766d744263b6681da2b2204d848619a3eb62e77460c048df8e72bfe31438163ec4270439b350274e5aa941bfc32ce08e3790dfb0c59bbe45cd27264669c187eed6d67b3be191137814bcb226b2078a1bc45502705d538d8723113445b08b0ac8dc2dfa17fd79ed5fd33b14b0adabf72df024dcde1ef330b927ce1a80474ce4f99a292c71456ec1abbfbb61dc9f0f71395a1751d35fa1"], &(0x7f0000000340)='GPL\x00'}, 0x48) (async) r1 = socket$kcm(0x29, 0x4, 0x0) recvmsg$kcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000680)=""/141, 0x8d}, {&(0x7f0000000740)=""/97, 0x61}, {&(0x7f0000000ac0)=""/233, 0xe9}, {&(0x7f0000000940)=""/117, 0x75}, {&(0x7f0000000040)=""/8, 0x8}], 0x5}, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffffffffffd8e, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x80) setsockopt$sock_attach_bpf(r2, 0x1, 0x42, &(0x7f0000000900), 0x4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xb00, 0x2000, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', r5, 0x0}, 0x50) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x800, 0xffffffffffffffff, 0x7, '\x00', r5}, 0x50) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit, @alu={0x5, 0x1, 0x2, 0xa, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xec, &(0x7f00000004c0)=""/236}, 0x90) 17.39361855s ago: executing program 1 (id=6626): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x400020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x33a2d912}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000500)={r0, 0x0}, 0x20) perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0xb3, 0x3, 0x6, 0x49, 0x0, 0x2, 0x2001, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x8, 0x1}, 0x1410, 0x401, 0x0, 0x5, 0x1b, 0xffff0001, 0x2, 0x0, 0x4, 0x0, 0x727}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xa) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000880), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x14, 0x1d, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000070000000000000009000000f5110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018620000040000000000000009000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000a80000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000", @ANYRES32=r0, @ANYBLOB="0000000001000000bf91000000000000b702000001000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x8e, &(0x7f00000007c0)=""/142, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x36, r5, 0x8, &(0x7f00000008c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000900)={0x4, 0x1ff, 0x6, 0x524}, 0x10, 0x0, r1, 0x6, 0x0, &(0x7f0000000c80)=[{0x5, 0x4, 0xd, 0x8}, {0x5, 0x1, 0x6, 0xc}, {0x5, 0x1, 0x6, 0x4}, {0x3, 0x2, 0xf, 0x2}, {0x5, 0x3, 0x9, 0x8}, {0x2, 0x1, 0x0, 0xb}], 0x10, 0xea17}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x826, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r6, 0x1, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xffffffff, 0x0, r7, 0x7, '\x00', 0x0, r6, 0x0, 0x3}, 0x50) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001100)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xe}, 0x10000) r8 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b100b4ab50a", @ANYRES32, @ANYRES8=r8], 0xfe33) ioctl$SIOCSIFHWADDR(r4, 0x890c, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) sendmsg$sock(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="e13dc3388988c25f25b7b8975c91091b92b1744d0cee02a81e7617f0570b5b78ac41770ca3ff0f1e3fc32dbffb959b83c2208fbd52594933b0b3ca4b9c240d2b6b06590c8aa360e58e624a3b049640b0988fcd746cb1", 0x56}, {&(0x7f0000000280)="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", 0xff}], 0x2, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0xb8}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x60}, 0x800) 17.322233191s ago: executing program 3 (id=6627): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x2280, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$TUNGETVNETLE(r0, 0x8004745a, &(0x7f0000000180)) (async) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffd34) (async) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x40, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x8, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0xfffffffe}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3}, &(0x7f0000000840), &(0x7f0000000340)=r2}, 0x20) (async) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x891d, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="0200c100d8f1"}) 17.268174532s ago: executing program 2 (id=6628): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='T'], 0x88}, 0x40880) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1}, &(0x7f0000000040), &(0x7f00000001c0)}, 0x20) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r2, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b000000000000000000000000ffffff000000e8", @ANYRES32=r2, @ANYBLOB="1000"/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="05000000010000000800"/28], 0x50) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000500)='./file0\x00', 0x0, 0x0, r0}, 0x18) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="3d2500000049c8ca29c92a99461a9c867400"/32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000000000000300"/28], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x105880, 0x0, 0x0, 0x7, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x71823, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r7 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffff, 0x8a410, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext, 0x801c, 0x0, 0x3, 0x9, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000900), 0x4) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x1, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x68020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x204, 0x2000000000, 0x3, 0x3, 0x9, 0x100002, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x7, r7, 0x0) r8 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$inet(r8, &(0x7f00000004c0)={&(0x7f00000001c0)={0x2, 0x4e23, @remote}, 0x10, 0x0}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b70300000008000085000000a0000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa10000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b6000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="4c000000140097f87059ae08060c040002ff0f020000000000001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e7d06a60300000072f750375ed08a5604000000", 0x4c}], 0x1}, 0x0) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0x0, 0x1, 0x18}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x23, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x9d}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @map_fd={0x18, 0x2, 0x1, 0x0, r5}, @generic={0x7, 0x3, 0x6, 0x80, 0x6}, @map_fd={0x18, 0xb, 0x1, 0x0, r5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0xfffffbff, 0xc8, &(0x7f0000000380)=""/200, 0x41100, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x6, 0x3, 0x1}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000640)=[r5, 0x1, r6, 0xffffffffffffffff, r10], &(0x7f0000000680)=[{0x4, 0x2, 0x10, 0x7}, {0x2, 0x1, 0x7, 0xc}, {0x1, 0x3, 0x7, 0x6}, {0x2, 0x3, 0x2, 0x8}, {0x4, 0x1, 0xe, 0xc}, {0x4, 0x5, 0x4, 0x1}, {0x2, 0x3, 0xe}, {0x4, 0x5, 0xf, 0x4}, {0x3, 0x4, 0xfffffffe, 0xa}, {0x5, 0x3, 0x4, 0x5}], 0x10, 0x1}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081054e81f783db4cb9040a1d080006007c02e8fc55a10a0015000600142603600e1208001e0000000401a8001200fec0ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 17.168846795s ago: executing program 0 (id=6629): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6faa00000000000079106f000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x2, 0x20}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa3, &(0x7f00000002c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x4a, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x15, 0x3, 0xbeb, 0x6, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@bloom_filter={0x1e, 0x0, 0x4, 0x4, 0x2002, 0xffffffffffffffff, 0x1c, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0xfffffffc, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018030000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x14, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6afd, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x4}, @cb_func={0x18, 0x4}, @exit, @alu={0x7, 0x1, 0x6, 0x0, 0xb, 0x30, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0x35, &(0x7f0000000180)=""/53, 0x41000, 0x25, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, r2, r0, 0x4, &(0x7f0000000800)=[r3, r4, r5], &(0x7f0000000840)=[{0x3, 0x2, 0x0, 0x4}, {0x3, 0x2, 0xd, 0xf}, {0x0, 0x4, 0x10, 0x8}, {0x2, 0x3, 0xa, 0x9}], 0x10, 0x6}, 0x94) 17.101075337s ago: executing program 4 (id=6630): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000780)=@l2tp6={0xa, 0x0, 0x18000000, @mcast2, 0x6, 0x1}, 0x80, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000240)="a3", 0x1}], 0x2}, 0x8880) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) close(0x3) r2 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x114, 0xa, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c0000000400000004000000076e000000000000", @ANYRES32=r3], 0x48) 17.048400757s ago: executing program 3 (id=6631): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000900000006"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ff80850000002d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0xfffffffffffffffe, 0xfffffffffefffffe}, 0x0, 0x20, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000030000000000000000000000850000004c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000080850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r3, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) recvmsg$kcm(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{0x0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x7, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r5}, 0xc) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1212000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x8) recvmsg$kcm(r3, &(0x7f00000006c0)={&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000200)=""/208, 0xd0}, {&(0x7f0000000300)=""/185, 0xb9}, {&(0x7f00000003c0)=""/29, 0x1d}, {&(0x7f0000000400)=""/232, 0xe8}, {&(0x7f0000000500)=""/248, 0xf8}], 0x5, &(0x7f0000000680)=""/44, 0x2c}, 0x2000) 17.036747718s ago: executing program 1 (id=6632): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x15b, 0x15b, 0xb, [@const={0x3, 0x0, 0x0, 0xa, 0x3}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x4}, @fwd={0xa}, @func={0xc, 0x0, 0x0, 0xc, 0x3}, @struct={0x4, 0x8, 0x0, 0x4, 0x0, 0x2, [{0x2, 0x1, 0x200}, {0xc, 0x5, 0x7fffffff}, {0x6, 0x3, 0x4}, {0x10, 0x3, 0x1}, {0x0, 0x3, 0xfce}, {0xf, 0x5, 0x3}, {0x1, 0x1, 0x5}, {0xf, 0x2, 0x71}]}, @func={0x6, 0x0, 0x0, 0xc, 0x4}, @enum={0x8, 0x4, 0x0, 0x6, 0x4, [{0x3, 0x1}, {0x8, 0x1}, {0x8, 0x3}, {0x1, 0x8}]}, @restrict={0x2, 0x0, 0x0, 0xb, 0x4}, @datasec={0xe, 0x2, 0x0, 0xf, 0x3, [{0x3, 0x7c, 0x841}, {0x1, 0x3, 0x5}], 'y_I'}, @struct={0x0, 0x6, 0x0, 0x4, 0x1, 0x3, [{0xd, 0x3, 0x9}, {0xd, 0x2, 0xb302}, {0x6, 0x4, 0x2}, {0xc, 0x3, 0x3}, {0x0, 0x2, 0x7}, {0xd, 0x3, 0x9}]}]}, {0x0, [0x0, 0x2e, 0x61, 0x17, 0x2e, 0x61, 0x30, 0x71, 0x5f]}}, &(0x7f0000000180)=""/58, 0x17f, 0x3a, 0x1, 0x9, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000300)={&(0x7f0000000200)=""/152, 0x98, 0x0, &(0x7f00000002c0)=""/3, 0x3}}, 0x10) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)=[@ip_retopts={{0xac, 0x0, 0x7, {[@cipso={0x86, 0x64, 0x1, [{0x7, 0xb, "de101cbd9762c62e36"}, {0x6, 0x8, "ecdbf47f1d17"}, {0x6, 0xd, "8feca904096add2cb8c4b0"}, {0x1, 0x12, "5c565dd59d6676e8a21e562cf6510bed"}, {0x6, 0x3, "ee"}, {0x6, 0xf, "be49e2af7b74100eb813220e93"}, {0x6, 0xb, "8a32fae3e6461225fd"}, {0x6, 0xf, "34a993e8c41bd5060943a49b81"}]}, @noop, @timestamp_addr={0x44, 0x34, 0x6c, 0x1, 0x2, [{@loopback, 0x424}, {@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x13c}, {@private=0xa010102}, {@local, 0x7}, {@private=0xa010101, 0xed}]}]}}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@rr={0x7, 0xf, 0x59, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102]}, @lsrr={0x83, 0x3, 0x28}, @timestamp={0x44, 0x24, 0x72, 0x0, 0x8, [0x4, 0xfffffffb, 0x4, 0xa, 0x0, 0x7fff, 0x4, 0x3]}, @timestamp_addr={0x44, 0x44, 0x43, 0x1, 0x8, [{@loopback, 0x7}, {@multicast2, 0x1}, {@multicast2, 0xf4b}, {@broadcast, 0x2}, {@broadcast, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@remote, 0x9}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fffffff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x800}}, @ip_ttl={{0x14, 0x0, 0x2, 0x101}}], 0x1d0}, 0x40000) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x260900, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000680)={'bridge_slave_1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}) (async) close(r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0x30, 0x4, 0xe0, 0x6, 0x0, 0xee, 0xc8000, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xbd8, 0x0, @perf_config_ext={0x8, 0x1}, 0x100080, 0xe, 0x200, 0x3, 0x4, 0xfffffff8, 0x7, 0x0, 0x81, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0x2, 0x9, 0x40, 0x5, 0x0, 0x8000000000000000, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xfffffffffffffffb, 0x10}, 0x100800, 0x4ae7, 0x9f, 0x7, 0x9e0f, 0x400, 0x80, 0x0, 0x33d, 0x0, 0x101}, r0, 0x10, r4, 0x2) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0xfffffffa, 0x1fa72b1d, 0x4, 0x50081, 0x1, 0x6b1, '\x00', 0x0, r0, 0x2, 0x5}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000900)=[0x0], &(0x7f0000000940)=[0x0, 0x0], 0x0, 0xde, &(0x7f0000000980)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0xc7, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@bloom_filter={0x1e, 0x1, 0x40, 0x4, 0x1c00, r5, 0x20, '\x00', r7, r0, 0x2, 0x3, 0x1, 0x9}, 0x50) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000c80)={r6}, 0x4) (async) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000fc0)={0x6, 0x1b, &(0x7f0000000cc0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff9}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}], &(0x7f0000000dc0)='syzkaller\x00', 0x4f, 0xf5, &(0x7f0000000e00)=""/245, 0x40f00, 0x3, '\x00', r7, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000f00)={0x3, 0x10, 0x2, 0x3ff}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000f40)=[r5, r8, r8, r5], &(0x7f0000000f80)=[{0x0, 0x1, 0xf, 0x2}], 0x10, 0x401}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001180)={@cgroup, 0x10, 0x1, 0x7b7a, &(0x7f0000001080)=[0x0], 0x1, 0x0, &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001140)=[0x0, 0x0], 0x0}, 0x40) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001500)=@bpf_ext={0x1c, 0x1a, &(0x7f0000001200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xbb43}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x8}, @alu={0x7, 0x0, 0x9, 0x3, 0xf, 0x0, 0xfffffffffffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001300)='GPL\x00', 0x101, 0x11, &(0x7f0000001340)=""/17, 0x41100, 0x5c, '\x00', r7, 0x0, r0, 0x8, &(0x7f0000001380)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000013c0)={0x3, 0x9, 0x0, 0x1000}, 0x10, 0x1ad1f, 0xffffffffffffffff, 0xa, &(0x7f0000001400)=[r5, r8, r5, r8, r8, r8, r5, r5, r8, r5], &(0x7f0000001440)=[{0x2, 0x4, 0xe, 0x4}, {0x5, 0x1, 0xd, 0x4}, {0x0, 0x4, 0x6, 0x3}, {0x2, 0x5, 0x1, 0xc}, {0x5, 0x4, 0x7, 0xc}, {0x2, 0x3, 0x0, 0xc}, {0x3, 0x2, 0x3}, {0x4, 0x2, 0xc, 0xb}, {0x4, 0x4, 0xb, 0xd23059344bdfd4d5}, {0x0, 0x4, 0x4, 0x1}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000011c0)={@cgroup, r9, 0xab5ed4e8810940d0, 0x10, r10, @void, @value=r12, @void, @void, r11}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001680)={r8, &(0x7f00000015c0), &(0x7f0000001600)=""/65}, 0x20) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000016c0)={r3}) ioctl$sock_kcm_SIOCKCMUNATTACH(r13, 0x89e1, &(0x7f0000001700)={r3}) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', r7, r0, 0x2, 0x3, 0x2}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001840)={{r5, 0xffffffffffffffff}, &(0x7f00000017c0), &(0x7f0000001800)=r9}, 0x20) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001ac0)={r5, 0x58, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r17 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001b80)={0x1b, 0x0, 0x0, 0x40, 0x0, r5, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0x23, &(0x7f0000001880)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x5, 0x1, 0x0, r8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @jmp={0x5, 0x0, 0x0, 0x6, 0x7, 0x2, 0xfffffffffffffffb}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x8, 0x1, 0x0, r14}, @jmp={0x5, 0x0, 0x5, 0x7, 0xb, 0x6, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r15}}, @exit], &(0x7f00000019c0)='GPL\x00', 0x2, 0x0, &(0x7f0000001a00), 0x41100, 0x3, '\x00', r16, 0x0, r0, 0x8, &(0x7f0000001b00)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000001b40)={0x3, 0xb, 0x3, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001c00)=[r8, r8, r5, r8, r5, r5, r17], &(0x7f0000001c40)=[{0x0, 0x1, 0xb, 0xc}, {0x4, 0x2, 0x0, 0xe}, {0x5, 0x4, 0xd, 0x5}, {0x1, 0x3, 0x4, 0x6}, {0x4, 0x4, 0x3, 0x7}], 0x10, 0x7d93}, 0x94) (async) r18 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x58, 0xe3, 0x1, 0x45, 0x0, 0x3, 0x110d0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x13a40, 0xf0}, 0x17011, 0x80000000, 0xff, 0x5, 0x6, 0x828, 0x2, 0x0, 0xe7, 0x0, 0x1}, 0xffffffffffffffff, 0x2, r4, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r18, 0x40082404, &(0x7f0000001e00)=0x5) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002180)={0x11, 0x12, &(0x7f0000001e40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xac74}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x551, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001f00)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x20, '\x00', r16, 0x0, r0, 0x8, &(0x7f0000001f40)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000001f80)={0x5, 0x6, 0x0, 0xffffa0e9}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000002100)=[r5, r5, r8, 0xffffffffffffffff, 0xffffffffffffffff, r17, r17], &(0x7f0000002140)=[{0x4, 0x5, 0x7, 0xa}], 0x10, 0x6}, 0x94) 16.967387909s ago: executing program 0 (id=6633): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ceaa00000000000071101b000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000040000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x38, &(0x7f0000000dc0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff9}, @map_fd={0x18, 0x8}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) unlink(&(0x7f00000000c0)='./file0\x00') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg(r3, &(0x7f0000000c00)={&(0x7f0000000000)=@phonet={0x23, 0x5, 0x2, 0x8}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)}], 0x1, &(0x7f0000000900)=[{0x10, 0x10e, 0x1ff}, {0x10, 0x84}], 0x20}, 0x4040080) r4 = socket$kcm(0x10, 0x2, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={0x0, 0x0, 0x18}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={0x0, 0x0}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033a"], 0xfdef) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f00000003c0), &(0x7f0000000440)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000001000)={&(0x7f00000001c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10, 0x0}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000100), &(0x7f0000000140)=r5}, 0x20) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x12001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x4}, 0x100c04, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x4) 16.808341243s ago: executing program 1 (id=6634): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x200000000}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000540), 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x80e1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x2f86, 0x7}, 0x0, 0x0, 0x51, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r3}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r3, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0x58, &(0x7f0000000440)=[{}], 0x8, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xf1, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000980)=0xffffffffffffffff, 0x4) r4 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) write$cgroup_devices(r3, 0x0, 0xfffffeff) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc2020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, &(0x7f0000000680), &(0x7f0000000700)=r6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.969708301s ago: executing program 0 (id=6635): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)={r0}) (async) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x2b, 'memory'}, {0x2d, 'net_cls'}, {0x2d, 'cpuacct'}, {0x2b, 'freezer'}, {0x6, 'net'}, {0x2b, 'cpuacct'}, {0x0, 'net_cls'}, {0x2d, 'memory'}]}, 0x42) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) 15.969206231s ago: executing program 2 (id=6636): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x0) socket$kcm(0x2a, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB], 0x48) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x18000000, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.746678053s ago: executing program 32 (id=6634): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x200000000}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000540), 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x80e1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x2f86, 0x7}, 0x0, 0x0, 0x51, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r3}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r3, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0x58, &(0x7f0000000440)=[{}], 0x8, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xf1, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000980)=0xffffffffffffffff, 0x4) r4 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) write$cgroup_devices(r3, 0x0, 0xfffffeff) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc2020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, &(0x7f0000000680), &(0x7f0000000700)=r6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.569992897s ago: executing program 33 (id=6631): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000900000006"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ff80850000002d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0xfffffffffffffffe, 0xfffffffffefffffe}, 0x0, 0x20, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000030000000000000000000000850000004c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000080850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r3, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) recvmsg$kcm(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{0x0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x7, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r5}, 0xc) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1212000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x8) recvmsg$kcm(r3, &(0x7f00000006c0)={&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000200)=""/208, 0xd0}, {&(0x7f0000000300)=""/185, 0xb9}, {&(0x7f00000003c0)=""/29, 0x1d}, {&(0x7f0000000400)=""/232, 0xe8}, {&(0x7f0000000500)=""/248, 0xf8}], 0x5, &(0x7f0000000680)=""/44, 0x2c}, 0x2000) 1.450080199s ago: executing program 34 (id=6630): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000780)=@l2tp6={0xa, 0x0, 0x18000000, @mcast2, 0x6, 0x1}, 0x80, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000240)="a3", 0x1}], 0x2}, 0x8880) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) close(0x3) r2 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x114, 0xa, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c0000000400000004000000076e000000000000", @ANYRES32=r3], 0x48) 179.992747ms ago: executing program 35 (id=6635): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)={r0}) (async) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x2b, 'memory'}, {0x2d, 'net_cls'}, {0x2d, 'cpuacct'}, {0x2b, 'freezer'}, {0x6, 'net'}, {0x2b, 'cpuacct'}, {0x0, 'net_cls'}, {0x2d, 'memory'}]}, 0x42) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) 0s ago: executing program 36 (id=6636): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x0) socket$kcm(0x2a, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB], 0x48) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x18000000, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) kernel console output (not intermixed with test programs): es leftover after parsing attributes in process `syz.2.5487'. [ 1317.568546][T23740] netlink: 'syz.2.5487': attribute type 29 has an invalid length. [ 1317.666836][T23732] can: request_module (can-proto-0) failed. [ 1318.590911][T23758] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.5496'. [ 1319.087574][T23772] tap0: tun_chr_ioctl cmd 1074025681 [ 1319.637927][T23782] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.5502'. [ 1320.683733][T23801] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.5507'. [ 1320.711232][T23797] can: request_module (can-proto-0) failed. [ 1320.733843][T23797] validate_nla: 3 callbacks suppressed [ 1320.733862][T23797] netlink: 'syz.4.5507': attribute type 29 has an invalid length. [ 1320.805723][T23797] netlink: 'syz.4.5507': attribute type 29 has an invalid length. [ 1320.865289][T23809] netlink: 'syz.2.5510': attribute type 21 has an invalid length. [ 1320.888772][T23801] netlink: 'syz.4.5507': attribute type 29 has an invalid length. [ 1321.644672][T23824] netlink: 'syz.0.5514': attribute type 29 has an invalid length. [ 1321.704637][T23824] netlink: 'syz.0.5514': attribute type 29 has an invalid length. [ 1321.725210][T23825] netlink: 'syz.0.5514': attribute type 29 has an invalid length. [ 1321.777099][T23824] netlink: 'syz.0.5514': attribute type 29 has an invalid length. [ 1321.865180][T23829] netlink: 'syz.4.5516': attribute type 41 has an invalid length. [ 1321.926494][T23829] netlink: 'syz.4.5516': attribute type 4 has an invalid length. [ 1322.499878][T23841] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5519'. [ 1323.018408][T23843] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5521'. [ 1323.574604][T23854] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.5522'. [ 1323.637544][T23851] can: request_module (can-proto-0) failed. [ 1324.139012][T23874] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5529'. [ 1324.175109][T23876] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.5530'. [ 1324.526096][T23882] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5532'. [ 1324.918404][T23903] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5535'. [ 1325.181364][T23911] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5541'. [ 1326.046659][T23934] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5545'. [ 1326.099979][T23930] validate_nla: 9 callbacks suppressed [ 1326.099997][T23930] netlink: 'syz.0.5544': attribute type 10 has an invalid length. [ 1326.437841][T23930] team0 (unregistering): Port device team_slave_0 removed [ 1326.469260][T23930] team0 (unregistering): Port device team_slave_1 removed [ 1326.496587][T23946] netlink: 65043 bytes leftover after parsing attributes in process `syz.3.5549'. [ 1326.743601][T23952] netlink: 'syz.3.5550': attribute type 41 has an invalid length. [ 1326.836532][T23954] netlink: 'syz.3.5550': attribute type 4 has an invalid length. [ 1327.356913][T23973] netlink: 'syz.2.5553': attribute type 10 has an invalid length. [ 1327.735310][T23973] team0: Port device netdevsim0 added [ 1327.752767][T23979] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.5559'. [ 1327.877698][T23980] netlink: 'syz.2.5553': attribute type 10 has an invalid length. [ 1328.207321][T23990] netlink: 'syz.0.5561': attribute type 29 has an invalid length. [ 1328.233061][T23980] team0: Port device netdevsim0 removed [ 1328.270525][T23980] device netdevsim0 entered promiscuous mode [ 1328.325204][T23980] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1328.439141][T23990] netlink: 'syz.0.5561': attribute type 29 has an invalid length. [ 1328.736646][T23994] device syzkaller0 entered promiscuous mode [ 1328.891067][T24004] netlink: 'syz.0.5566': attribute type 2 has an invalid length. [ 1328.929251][T24004] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5566'. [ 1329.150506][T24005] can: request_module (can-proto-0) failed. [ 1329.203203][T24012] netlink: 'syz.2.5569': attribute type 2 has an invalid length. [ 1332.533712][T24018] netlink: 'syz.2.5569': attribute type 10 has an invalid length. [ 1332.733654][T24035] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.5572'. [ 1332.927805][T24041] netlink: 'syz.1.5574': attribute type 27 has an invalid length. [ 1334.712832][T24075] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.5585'. [ 1335.093245][T24086] device sit0 entered promiscuous mode [ 1335.145998][T24088] netlink: 'syz.3.5582': attribute type 29 has an invalid length. [ 1335.286298][T24079] can: request_module (can-proto-0) failed. [ 1335.312601][T24082] netlink: 'syz.4.5581': attribute type 21 has an invalid length. [ 1335.348358][T24082] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5581'. [ 1335.390956][T24084] device sit0 left promiscuous mode [ 1335.546092][T24083] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.5582'. [ 1335.563381][T24088] netlink: 'syz.3.5582': attribute type 29 has an invalid length. [ 1335.663373][T24096] netlink: 'syz.0.5586': attribute type 29 has an invalid length. [ 1335.684470][T24092] can: request_module (can-proto-0) failed. [ 1335.749200][T24098] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.5586'. [ 1335.786549][T24096] netlink: 'syz.0.5586': attribute type 29 has an invalid length. [ 1335.829505][T24092] netlink: 'syz.0.5586': attribute type 29 has an invalid length. [ 1335.878989][T24101] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.5588'. [ 1336.520532][T24115] mac80211_hwsim hwsim34 »»»»»»: renamed from wlan0 [ 1336.585346][T24115] netlink: 'syz.1.5593': attribute type 29 has an invalid length. [ 1336.620840][T24114] netlink: 'syz.1.5593': attribute type 29 has an invalid length. [ 1336.990454][T24122] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.5596'. [ 1337.142042][T24127] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.5597'. [ 1337.283402][T24131] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.5598'. [ 1337.475012][T24131] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1337.518774][T24131] CPU: 1 PID: 24131 Comm: syz.3.5598 Not tainted syzkaller #0 [ 1337.526354][T24131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1337.536466][T24131] Call Trace: [ 1337.539802][T24131] [ 1337.542791][T24131] dump_stack_lvl+0x188/0x24e [ 1337.547556][T24131] ? show_regs_print_info+0x12/0x12 [ 1337.552830][T24131] ? load_image+0x410/0x410 [ 1337.557417][T24131] sysfs_warn_dup+0x8a/0xa0 [ 1337.562063][T24131] sysfs_do_create_link_sd+0xc0/0x110 [ 1337.567671][T24131] device_add+0x83b/0x1050 [ 1337.572543][T24131] wiphy_register+0x1d8b/0x2aa0 [ 1337.577535][T24131] ? cfg80211_event_work+0x40/0x40 [ 1337.582727][T24131] ? minstrel_ht_alloc+0x894/0xa20 [ 1337.587947][T24131] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1337.594118][T24131] ieee80211_register_hw+0x2d48/0x39f0 [ 1337.599683][T24131] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1337.605949][T24131] ? ieee80211_register_hw+0xf61/0x39f0 [ 1337.611570][T24131] ? ieee80211_register_hw+0xf61/0x39f0 [ 1337.617201][T24131] ? ieee80211_tasklet_handler+0x20/0x20 [ 1337.622904][T24131] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1337.628922][T24131] ? __debug_object_init+0xed/0x440 [ 1337.634211][T24131] ? memset+0x1e/0x40 [ 1337.638272][T24131] ? __hrtimer_init+0x189/0x270 [ 1337.643221][T24131] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1337.649043][T24131] ? memcpy+0x3c/0x60 [ 1337.653094][T24131] hwsim_new_radio_nl+0xab7/0xc90 [ 1337.658262][T24131] genl_family_rcv_msg_doit+0x22f/0x350 [ 1337.663976][T24131] ? end_current_label_crit_section+0x170/0x170 [ 1337.670361][T24131] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1337.676407][T24131] ? bpf_lsm_capable+0x5/0x10 [ 1337.681177][T24131] ? security_capable+0x85/0xb0 [ 1337.686136][T24131] genl_rcv_msg+0x601/0x790 [ 1337.690716][T24131] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1337.696960][T24131] ? genl_bind+0x360/0x360 [ 1337.701455][T24131] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1337.707876][T24131] ? lock_acquire+0x225/0x4a0 [ 1337.712649][T24131] netlink_rcv_skb+0x1ef/0x440 [ 1337.717492][T24131] ? genl_bind+0x360/0x360 [ 1337.721991][T24131] ? netlink_ack+0x1160/0x1160 [ 1337.726860][T24131] ? down_read+0x1a8/0x2d0 [ 1337.731349][T24131] genl_rcv+0x24/0x40 [ 1337.735406][T24131] netlink_unicast+0x7ad/0x920 [ 1337.740262][T24131] netlink_sendmsg+0x8ad/0xbd0 [ 1337.745113][T24131] ? aa_sock_msg_perm+0x94/0x150 [ 1337.750127][T24131] ? netlink_getsockopt+0x550/0x550 [ 1337.755409][T24131] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1337.761041][T24131] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1337.766395][T24131] ? security_socket_sendmsg+0x7c/0xa0 [ 1337.771938][T24131] ? netlink_getsockopt+0x550/0x550 [ 1337.777263][T24131] ____sys_sendmsg+0x5ed/0x9a0 [ 1337.782114][T24131] ? __sys_sendmsg_sock+0x30/0x30 [ 1337.787211][T24131] ? __import_iovec+0x306/0x510 [ 1337.792150][T24131] ? import_iovec+0x6f/0xa0 [ 1337.796732][T24131] ___sys_sendmsg+0x2a2/0x360 [ 1337.801485][T24131] ? migrate_enable+0x148/0x220 [ 1337.806414][T24131] ? __sys_sendmsg+0x2a0/0x2a0 [ 1337.811320][T24131] __se_sys_sendmsg+0x1c3/0x2b0 [ 1337.816265][T24131] ? __x64_sys_sendmsg+0x80/0x80 [ 1337.821340][T24131] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1337.827340][T24131] do_syscall_64+0x4c/0xa0 [ 1337.831838][T24131] ? clear_bhb_loop+0x60/0xb0 [ 1337.836598][T24131] ? clear_bhb_loop+0x60/0xb0 [ 1337.841440][T24131] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1337.847407][T24131] RIP: 0033:0x7fca95f9de59 [ 1337.851880][T24131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1337.871639][T24131] RSP: 002b:00007fca96f18028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1337.880122][T24131] RAX: ffffffffffffffda RBX: 00007fca96225fa0 RCX: 00007fca95f9de59 [ 1337.888155][T24131] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1337.896190][T24131] RBP: 00007fca96033e6f R08: 0000000000000000 R09: 0000000000000000 [ 1337.904225][T24131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1337.912260][T24131] R13: 00007fca96226038 R14: 00007fca96225fa0 R15: 00007fffde74c688 [ 1337.920316][T24131] [ 1337.966756][T24137] device sit0 left promiscuous mode [ 1337.986701][T13233] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1338.088378][T24145] device sit0 entered promiscuous mode [ 1338.173013][T24144] validate_nla: 2 callbacks suppressed [ 1338.173036][T24144] netlink: 'syz.4.5601': attribute type 21 has an invalid length. [ 1338.895585][T24166] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.5605'. [ 1339.031765][T24168] netlink: 'syz.3.5605': attribute type 29 has an invalid length. [ 1339.094632][T24168] netlink: 'syz.3.5605': attribute type 29 has an invalid length. [ 1339.110146][T24163] can: request_module (can-proto-0) failed. [ 1339.262484][T24171] netlink: 'syz.3.5605': attribute type 29 has an invalid length. [ 1339.408006][T24180] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.5609'. [ 1339.629287][T24187] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.5610'. [ 1339.693367][T24188] netlink: 'syz.4.5610': attribute type 29 has an invalid length. [ 1339.735589][T24184] can: request_module (can-proto-0) failed. [ 1339.772213][T24190] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5611'. [ 1340.122673][T24188] netlink: 'syz.4.5610': attribute type 29 has an invalid length. [ 1340.370905][T24193] netlink: 'syz.4.5610': attribute type 29 has an invalid length. [ 1340.980784][T24220] device sit0 entered promiscuous mode [ 1341.518872][T24231] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.5621'. [ 1341.818604][T24243] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.5623'. [ 1341.829366][T24244] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5628'. [ 1341.847465][T24249] netlink: 'syz.2.5623': attribute type 29 has an invalid length. [ 1341.887854][T24241] netlink: 'syz.3.5627': attribute type 13 has an invalid length. [ 1341.908719][T24241] netlink: 172 bytes leftover after parsing attributes in process `syz.3.5627'. [ 1341.924592][T24236] can: request_module (can-proto-0) failed. [ 1342.025809][T24241] erspan0: refused to change device tx_queue_len [ 1342.046647][T24244] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5628'. [ 1342.061525][T24244] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1342.081422][T24249] netlink: 'syz.2.5623': attribute type 29 has an invalid length. [ 1342.242599][T24258] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.123680][T24275] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5635'. [ 1344.199142][T24305] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.952815][T24337] __nla_validate_parse: 2 callbacks suppressed [ 1344.952939][T24337] netlink: 184 bytes leftover after parsing attributes in process `syz.3.5653'. [ 1345.007834][T24339] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.5654'. [ 1345.034100][T24337] validate_nla: 3 callbacks suppressed [ 1345.034191][T24337] netlink: 'syz.3.5653': attribute type 21 has an invalid length. [ 1345.099189][T24337] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5653'. [ 1345.132678][T24337] netlink: 'syz.3.5653': attribute type 1 has an invalid length. [ 1345.425692][T24356] netlink: 'syz.0.5662': attribute type 27 has an invalid length. [ 1345.470285][T24356] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5662'. [ 1345.490642][T24359] netlink: 'syz.1.5659': attribute type 29 has an invalid length. [ 1345.556528][T24354] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.5659'. [ 1345.598591][T24350] can: request_module (can-proto-0) failed. [ 1345.642280][T24359] netlink: 'syz.1.5659': attribute type 29 has an invalid length. [ 1345.660673][T24369] netlink: 'syz.2.5660': attribute type 29 has an invalid length. [ 1345.682469][T24368] netlink: 'syz.1.5659': attribute type 29 has an invalid length. [ 1345.759724][T24363] can: request_module (can-proto-0) failed. [ 1345.767437][T24367] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.5660'. [ 1345.816824][T24369] netlink: 'syz.2.5660': attribute type 29 has an invalid length. [ 1345.860034][T24374] netlink: 'syz.2.5660': attribute type 29 has an invalid length. [ 1346.241217][T24387] netlink: 'syz.0.5666': attribute type 29 has an invalid length. [ 1346.245709][T24382] can: request_module (can-proto-0) failed. [ 1346.309720][T24386] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.5666'. [ 1346.885438][T24396] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.5670'. [ 1346.886350][T24401] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5672'. [ 1347.098695][T24411] netlink: 134728 bytes leftover after parsing attributes in process `syz.3.5674'. [ 1347.884235][T24423] can: request_module (can-proto-0) failed. [ 1348.688979][T24455] device wlan1 entered promiscuous mode [ 1349.027137][T24460] device syzkaller0 entered promiscuous mode [ 1349.820238][T24477] can: request_module (can-proto-0) failed. [ 1350.014481][T24486] 0: renamed from syzkaller0 [ 1351.055656][T24517] validate_nla: 15 callbacks suppressed [ 1351.055703][T24517] netlink: 'syz.0.5709': attribute type 2 has an invalid length. [ 1351.083695][T24521] __nla_validate_parse: 8 callbacks suppressed [ 1351.083762][T24521] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.5710'. [ 1351.139647][T24517] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5709'. [ 1351.372923][T24525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5708'. [ 1354.375882][T24550] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.5716'. [ 1354.387251][T24553] netlink: 'syz.4.5716': attribute type 29 has an invalid length. [ 1354.500805][T24548] can: request_module (can-proto-0) failed. [ 1354.550591][T24553] netlink: 'syz.4.5716': attribute type 29 has an invalid length. [ 1354.562635][T24554] netlink: 'syz.2.5718': attribute type 10 has an invalid length. [ 1354.583238][T24554] device geneve0 entered promiscuous mode [ 1354.642391][T24554] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1354.686316][T24558] netlink: 'syz.4.5716': attribute type 29 has an invalid length. [ 1354.775718][T24572] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.5723'. [ 1355.270689][T24579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5726'. [ 1355.410680][T24590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5727'. [ 1355.486741][T24588] netlink: 'syz.4.5729': attribute type 29 has an invalid length. [ 1355.532777][T24588] netlink: 'syz.4.5729': attribute type 3 has an invalid length. [ 1355.557849][T24588] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5729'. [ 1355.663825][T24599] netlink: 'syz.3.5732': attribute type 7 has an invalid length. [ 1356.127451][T24611] netlink: 4068 bytes leftover after parsing attributes in process `syz.0.5735'. [ 1356.272541][T24614] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.5736'. [ 1356.606143][T24627] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.5739'. [ 1356.708020][T24625] can: request_module (can-proto-0) failed. [ 1356.771866][T24634] netlink: 'syz.2.5739': attribute type 29 has an invalid length. [ 1356.812506][T24634] netlink: 'syz.2.5739': attribute type 29 has an invalid length. [ 1356.884346][T24638] netlink: 'syz.2.5739': attribute type 29 has an invalid length. [ 1356.938772][T24644] netlink: 'syz.3.5746': attribute type 21 has an invalid length. [ 1356.981541][T24644] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5746'. [ 1357.019083][T24643] delete_channel: no stack [ 1357.160767][T24648] netlink: 'syz.0.5747': attribute type 3 has an invalid length. [ 1357.179877][T24648] netlink: 'syz.0.5747': attribute type 4 has an invalid length. [ 1357.229364][T24648] netlink: 9067 bytes leftover after parsing attributes in process `syz.0.5747'. [ 1357.325165][T24654] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.5750'. [ 1357.864302][T24672] netlink: 'syz.3.5755': attribute type 21 has an invalid length. [ 1358.057859][T24681] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.5758'. [ 1358.355704][ T4326] Bluetooth: hci4: unexpected event 0x06 length: 15 > 3 [ 1358.580632][T24692] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.5760'. [ 1358.619842][T24694] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.5762'. [ 1358.645870][T24690] can: request_module (can-proto-0) failed. [ 1358.694897][T24703] netlink: 'syz.3.5760': attribute type 29 has an invalid length. [ 1358.711706][T24703] netlink: 'syz.3.5760': attribute type 29 has an invalid length. [ 1358.722231][T24690] netlink: 'syz.3.5760': attribute type 29 has an invalid length. [ 1358.879507][T24707] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.5775'. [ 1359.224249][T24714] can: request_module (can-proto-0) failed. [ 1360.896845][T24762] can: request_module (can-proto-0) failed. [ 1361.402788][T24785] __nla_validate_parse: 7 callbacks suppressed [ 1361.402808][T24785] netlink: 104088 bytes leftover after parsing attributes in process `syz.0.5788'. [ 1361.426034][T24782] netlink: 104088 bytes leftover after parsing attributes in process `syz.0.5788'. [ 1361.554464][T24793] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5792'. [ 1361.654958][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.662681][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.070567][ T4326] Bluetooth: hci5: unexpected event 0x06 length: 15 > 3 [ 1362.200764][T24812] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.5798'. [ 1362.453406][ T4326] Bluetooth: hci4: command 0x0406 tx timeout [ 1362.719530][T24827] validate_nla: 14 callbacks suppressed [ 1362.719550][T24827] netlink: 'syz.2.5802': attribute type 10 has an invalid length. [ 1362.746442][T24827] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5802'. [ 1363.788693][T24873] netlink: 'syz.4.5816': attribute type 1 has an invalid length. [ 1363.845737][T24873] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5816'. [ 1363.876513][T24877] netlink: 'syz.0.5817': attribute type 10 has an invalid length. [ 1363.916376][T24877] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5817'. [ 1364.008479][T24877] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1364.396844][T24892] netlink: 'syz.4.5823': attribute type 10 has an invalid length. [ 1364.441621][T24892] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5823'. [ 1364.492355][T24892] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1365.427428][T24943] netlink: 'syz.3.5835': attribute type 12 has an invalid length. [ 1365.446590][T24943] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5835'. [ 1365.559984][T24943] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5835'. [ 1365.765365][T24941] can: request_module (can-proto-0) failed. [ 1365.880279][T24944] netlink: 'syz.4.5831': attribute type 29 has an invalid length. [ 1365.950957][T24944] netlink: 'syz.4.5831': attribute type 29 has an invalid length. [ 1366.006573][T24941] netlink: 'syz.4.5831': attribute type 29 has an invalid length. [ 1366.263107][T24951] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1366.274020][T24951] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1366.282849][T24951] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1366.294823][T24951] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1366.302605][T24951] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1366.309961][T24951] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1366.488850][T24959] __nla_validate_parse: 1 callbacks suppressed [ 1366.488872][T24959] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5839'. [ 1366.565477][T24964] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.5838'. [ 1367.001688][T24973] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1367.010807][T24973] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1367.148254][T24978] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5842'. [ 1367.257651][T24978] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5842'. [ 1367.291530][T24978] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1367.461878][T24949] chnl_net:caif_netlink_parms(): no params data found [ 1367.844851][T24949] bridge0: port 1(bridge_slave_0) entered blocking state [ 1367.897707][T24949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1367.966821][T24949] device bridge_slave_0 entered promiscuous mode [ 1368.026259][T24949] bridge0: port 2(bridge_slave_1) entered blocking state [ 1368.055405][T24949] bridge0: port 2(bridge_slave_1) entered disabled state [ 1368.080941][T24949] device bridge_slave_1 entered promiscuous mode [ 1368.182535][T24949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1368.223607][T24949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1368.371358][ T4326] Bluetooth: hci2: command 0x0409 tx timeout [ 1368.408835][T24949] team0: Port device team_slave_0 added [ 1368.421012][T24949] team0: Port device team_slave_1 added [ 1368.458244][T24949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1368.475857][T24949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1368.572306][T24949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1368.622256][T24949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1368.629328][T24949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1368.711199][T24949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1368.752024][T25008] netlink: 'syz.2.5852': attribute type 21 has an invalid length. [ 1368.760028][T25008] netlink: 'syz.2.5852': attribute type 1 has an invalid length. [ 1368.786273][T25008] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5852'. [ 1368.795587][T25013] netlink: 'syz.3.5849': attribute type 29 has an invalid length. [ 1368.823941][T25005] can: request_module (can-proto-0) failed. [ 1368.880366][T25009] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.5849'. [ 1368.902454][T25011] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5852'. [ 1368.931262][T25015] netlink: 'syz.2.5852': attribute type 21 has an invalid length. [ 1368.947326][T25015] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5852'. [ 1368.968450][T25013] netlink: 'syz.3.5849': attribute type 29 has an invalid length. [ 1369.034063][T25016] netlink: 'syz.3.5849': attribute type 29 has an invalid length. [ 1369.106114][T24949] device hsr_slave_0 entered promiscuous mode [ 1369.138137][T24949] device hsr_slave_1 entered promiscuous mode [ 1369.148916][T25023] netlink: 'syz.2.5856': attribute type 29 has an invalid length. [ 1369.235281][T25023] netlink: 'syz.2.5856': attribute type 29 has an invalid length. [ 1369.272066][T25026] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.5854'. [ 1369.331641][T13210] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1369.345024][T25029] netlink: 'syz.2.5856': attribute type 29 has an invalid length. [ 1369.363132][T25028] netlink: 'syz.2.5856': attribute type 29 has an invalid length. [ 1369.414605][T25023] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5856'. [ 1369.434247][T25023] device team0 entered promiscuous mode [ 1369.440127][T25023] device team_slave_0 entered promiscuous mode [ 1369.474050][T25023] device team_slave_1 entered promiscuous mode [ 1369.480573][T25023] device hsr_slave_0 entered promiscuous mode [ 1369.500868][T25023] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1369.766025][T13221] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.036628][T13221] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.160117][T13221] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.451329][ T4326] Bluetooth: hci2: command 0x041b tx timeout [ 1370.608774][T25058] team0: Port device bridge_slave_1 added [ 1370.635210][T13215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1370.923938][T13221] device 0 left promiscuous mode [ 1371.277322][T25069] can: request_module (can-proto-0) failed. [ 1372.040141][T25103] __nla_validate_parse: 4 callbacks suppressed [ 1372.040163][T25103] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5873'. [ 1372.411425][T25109] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5874'. [ 1372.436663][T25109] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5874'. [ 1372.531396][ T4326] Bluetooth: hci2: command 0x040f tx timeout [ 1372.877724][T24949] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1373.015420][T24949] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1373.142936][T24949] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1373.250441][T24949] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1373.533720][T25138] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.5881'. [ 1373.630536][T24949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1373.944882][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1373.974648][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1374.059579][T24949] 8021q: adding VLAN 0 to HW filter on device team0 [ 1374.273777][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1374.297440][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1374.351908][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 1374.359163][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1374.408333][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1374.442111][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1374.471756][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 1374.478993][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1374.511673][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1374.575339][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1374.604336][T13221] device veth0_to_team left promiscuous mode [ 1374.610570][T13221] Ÿë: port 1(veth0_to_team) entered disabled state [ 1374.617560][T24951] Bluetooth: hci2: command 0x0419 tx timeout [ 1374.785839][T13221] device veth1_vlan left promiscuous mode [ 1375.236438][T25186] validate_nla: 13 callbacks suppressed [ 1375.236459][T25186] netlink: 'syz.2.5891': attribute type 3 has an invalid length. [ 1375.270085][T25186] netlink: 'syz.2.5891': attribute type 1 has an invalid length. [ 1375.296344][T25186] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5891'. [ 1376.707138][T25206] can: request_module (can-proto-0) failed. [ 1376.717497][T25209] netlink: 'syz.4.5896': attribute type 29 has an invalid length. [ 1376.843572][T25211] netlink: 'syz.3.5897': attribute type 3 has an invalid length. [ 1376.851742][T25211] netlink: 'syz.3.5897': attribute type 16 has an invalid length. [ 1376.859621][T25211] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5897'. [ 1377.579664][T13221] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1377.644871][T13221] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1378.005440][T13221] bond0 (unregistering): Released all slaves [ 1378.061707][T25201] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.5894'. [ 1378.103788][T25208] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.5896'. [ 1378.122186][T25209] netlink: 'syz.4.5896': attribute type 29 has an invalid length. [ 1378.149736][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1378.162967][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1378.213405][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1378.256750][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1378.269479][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1378.297550][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1378.317503][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1378.343816][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1378.359253][T25219] sock: sock_set_timeout: `syz.2.5899' (pid 25219) tries to set negative timeout [ 1378.381015][T24949] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1378.405836][T24949] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1378.436674][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1378.469919][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1379.523473][T13214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1379.535473][T13214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1379.557932][T24949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1379.674988][T13215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1379.717962][T13215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1379.805737][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1379.828494][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1379.863364][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1379.892423][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1379.910449][T24949] device veth0_vlan entered promiscuous mode [ 1379.950398][T24949] device veth1_vlan entered promiscuous mode [ 1380.075194][T13214] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1380.093366][T13214] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1380.118343][T13214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1380.149526][T13214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1380.195406][T24949] device veth0_macvtap entered promiscuous mode [ 1380.241431][T24949] device veth1_macvtap entered promiscuous mode [ 1380.356090][T24949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1380.379025][T24949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1380.433937][T24949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1380.464121][T13215] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1380.482977][T13215] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1380.512055][T13215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1380.613848][T24949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1380.634440][T24949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1380.667907][T24949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1380.693776][T13215] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1380.727725][T13215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1380.750431][T25274] netlink: 'syz.1.5913': attribute type 21 has an invalid length. [ 1380.783995][T24949] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1380.809953][T24949] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1380.844349][T24949] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1380.869745][T24949] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.134254][T25283] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.5916'. [ 1381.158447][T13214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1381.201742][T13214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1381.274383][T13233] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1381.392431][T13214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1381.430391][T13214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1381.449302][T13215] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1381.790293][T25298] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.5918'. [ 1381.873675][T25305] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5836'. [ 1381.885700][T25299] netlink: 'syz.2.5918': attribute type 29 has an invalid length. [ 1382.011966][T25296] can: request_module (can-proto-0) failed. [ 1383.027816][T24951] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1383.037940][T24951] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1383.049502][T24951] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1383.059388][T24951] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1383.067764][T24951] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1383.075480][T24951] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1384.763740][T25299] netlink: 'syz.2.5918': attribute type 29 has an invalid length. [ 1384.811680][T25321] syz.0.5924[25321] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1384.811798][T25321] syz.0.5924[25321] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1384.826739][T25311] device veth0_vlan left promiscuous mode [ 1384.883320][T25311] device veth0_vlan entered promiscuous mode [ 1384.895568][T25313] netlink: 'syz.4.5921': attribute type 10 has an invalid length. [ 1384.926254][T25319] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5924'. [ 1385.016620][T25319] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5924'. [ 1385.058829][T25321] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5924'. [ 1385.136056][T25319] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5924'. [ 1385.171753][ T4326] Bluetooth: hci1: command 0x0409 tx timeout [ 1385.476390][T25331] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5927'. [ 1385.721630][T25331] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5927'. [ 1385.909281][T25315] chnl_net:caif_netlink_parms(): no params data found [ 1386.002634][T25332] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5927'. [ 1386.194122][T13215] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1386.293921][T25344] netlink: 'syz.1.5929': attribute type 5 has an invalid length. [ 1386.397371][T13215] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1386.478181][T25315] bridge0: port 1(bridge_slave_0) entered blocking state [ 1386.491370][T25315] bridge0: port 1(bridge_slave_0) entered disabled state [ 1386.499747][T25315] device bridge_slave_0 entered promiscuous mode [ 1386.583833][T13215] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1386.625332][T25315] bridge0: port 2(bridge_slave_1) entered blocking state [ 1386.635994][T25315] bridge0: port 2(bridge_slave_1) entered disabled state [ 1386.650621][T25315] device bridge_slave_1 entered promiscuous mode [ 1386.666247][T25353] netlink: 'syz.0.5931': attribute type 12 has an invalid length. [ 1386.675845][T25353] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5931'. [ 1386.814310][T25315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1386.878487][T25315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1387.016416][T25315] team0: Port device team_slave_0 added [ 1387.049842][T25315] team0: Port device team_slave_1 added [ 1387.253028][T24951] Bluetooth: hci1: command 0x041b tx timeout [ 1387.272218][T25369] syz.1.5937[25369] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1387.272339][T25369] syz.1.5937[25369] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1387.324512][T25315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1387.330420][T25366] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1387.361787][T25315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1387.412692][T25369] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5937'. [ 1387.443273][T25315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1387.500230][T13215] device 0 left promiscuous mode [ 1387.515638][T25369] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5937'. [ 1387.554251][T25315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1387.582057][T25366] netlink: 'syz.0.5935': attribute type 3 has an invalid length. [ 1387.594652][T25315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1387.627623][T25375] netlink: 'syz.4.5938': attribute type 8 has an invalid length. [ 1387.654216][T25366] netlink: 'syz.0.5935': attribute type 1 has an invalid length. [ 1387.663569][T25375] netlink: 'syz.4.5938': attribute type 4 has an invalid length. [ 1387.684251][T25315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1387.705068][T25375] netlink: 'syz.4.5938': attribute type 7 has an invalid length. [ 1387.722011][T13215] device 1 left promiscuous mode [ 1387.755767][T25375] netlink: 'syz.4.5938': attribute type 8 has an invalid length. [ 1387.811484][T25375] netlink: 'syz.4.5938': attribute type 7 has an invalid length. [ 1387.878643][T25315] device hsr_slave_0 entered promiscuous mode [ 1387.906259][T25315] device hsr_slave_1 entered promiscuous mode [ 1387.945139][T25315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1387.958052][T25315] Cannot create hsr debugfs directory [ 1388.488178][T25383] can: request_module (can-proto-3) failed. [ 1389.335068][ T4326] Bluetooth: hci1: command 0x040f tx timeout [ 1389.387202][T25425] netlink: 'syz.4.5949': attribute type 29 has an invalid length. [ 1390.650767][T25447] __nla_validate_parse: 5 callbacks suppressed [ 1390.650832][T25447] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.5952'. [ 1390.749819][T25449] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5953'. [ 1390.848592][T25452] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5953'. [ 1390.866897][T25445] can: request_module (can-proto-0) failed. [ 1391.094370][T25315] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1391.325027][T25315] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1391.357629][T25458] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5954'. [ 1391.398337][T13215] device veth0_to_team left promiscuous mode [ 1391.415560][ T4326] Bluetooth: hci1: command 0x0419 tx timeout [ 1391.422067][T13215] Ÿë: port 1(veth0_to_team) entered disabled state [ 1391.475830][T13215] device hsr_slave_0 left promiscuous mode [ 1391.482693][T13215] device hsr_slave_1 left promiscuous mode [ 1391.489394][T13215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1391.500849][T13215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1391.509773][T13215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1391.529087][T13215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1391.597105][T13215] device veth1_vlan left promiscuous mode [ 1392.758458][T13215] team0 (unregistering): Port device team_slave_1 removed [ 1392.815183][T13215] team0 (unregistering): Port device team_slave_0 removed [ 1392.877171][T13215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1392.934551][T13215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1392.994919][T13215] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1393.280825][T13215] team0 (unregistering): Port device bond0 removed [ 1393.318253][T13215] bond0 (unregistering): Released all slaves [ 1393.360662][T25315] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1393.370268][T25315] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1393.380040][T25463] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.5957'. [ 1393.394253][T25468] validate_nla: 4 callbacks suppressed [ 1393.394271][T25468] netlink: 'syz.4.5959': attribute type 21 has an invalid length. [ 1393.410901][T25468] netlink: 'syz.4.5959': attribute type 1 has an invalid length. [ 1393.423427][T25470] netlink: 'syz.4.5959': attribute type 10 has an invalid length. [ 1393.432893][T25470] device netdevsim0 entered promiscuous mode [ 1393.635728][T25315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1393.689301][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1393.743172][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1393.769359][T25315] 8021q: adding VLAN 0 to HW filter on device team0 [ 1393.788667][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1393.832707][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1393.853438][T13210] bridge0: port 1(bridge_slave_0) entered blocking state [ 1393.860699][T13210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1393.943762][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1393.969881][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1393.993447][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1394.015502][T13210] bridge0: port 2(bridge_slave_1) entered blocking state [ 1394.022797][T13210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1394.038417][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1394.118027][T25483] netlink: 'syz.0.5963': attribute type 10 has an invalid length. [ 1394.528001][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1394.546698][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1394.569049][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1394.590724][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1394.607276][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1394.620381][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1394.634066][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1394.647964][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1394.685096][T25315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1394.737482][T25315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1394.761395][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1394.770124][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1395.867772][T25531] netlink: 'syz.1.5972': attribute type 28 has an invalid length. [ 1395.887796][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1395.895675][T25531] netlink: 'syz.1.5972': attribute type 29 has an invalid length. [ 1395.895741][T25531] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5972'. [ 1395.954287][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1395.992884][T25519] netlink: 'syz.0.5970': attribute type 2 has an invalid length. [ 1396.001541][T25534] netlink: 'syz.4.5973': attribute type 21 has an invalid length. [ 1396.043453][T25315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1396.093288][T25519] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.5970'. [ 1396.138132][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1396.164039][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1396.260843][T13197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1396.280626][T13197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1396.302374][T13197] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1396.320493][T13197] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1396.347261][T25315] device veth0_vlan entered promiscuous mode [ 1396.385507][T25315] device veth1_vlan entered promiscuous mode [ 1396.444369][T13197] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1396.456817][T13197] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1396.468180][T13197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1396.487068][T13197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1396.523754][T25315] device veth0_macvtap entered promiscuous mode [ 1396.638380][T25315] device veth1_macvtap entered promiscuous mode [ 1396.647348][T13197] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1396.666874][T13197] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1396.729543][T25315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1396.740969][T25315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.756895][T25315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1396.795323][T13197] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1396.809790][T13197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1396.831949][T25559] netlink: 'syz.0.5978': attribute type 29 has an invalid length. [ 1396.844876][T25558] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.5978'. [ 1396.867261][T25315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1396.880839][T25555] can: request_module (can-proto-0) failed. [ 1396.888470][T25315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.902129][T25315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1397.010658][T25559] netlink: 'syz.0.5978': attribute type 29 has an invalid length. [ 1397.029017][T13197] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1397.042346][T13197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1397.099790][T25315] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1397.125699][T25315] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1397.148122][T25315] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1397.165011][T25315] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1397.348543][T25566] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.5981'. [ 1397.398793][T13215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1397.424623][T13215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1397.507879][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1397.613070][T13210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1397.637963][T25570] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.5983'. [ 1397.653701][T13210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1397.668276][T13215] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1398.873241][T25598] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.5988'. [ 1398.906351][T25603] validate_nla: 1 callbacks suppressed [ 1398.906398][T25603] netlink: 'syz.4.5988': attribute type 39 has an invalid length. [ 1399.106102][T25614] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5993'. [ 1399.685795][T25622] netlink: 'syz.2.5995': attribute type 28 has an invalid length. [ 1399.704765][T25622] netlink: 'syz.2.5995': attribute type 29 has an invalid length. [ 1399.739405][T25627] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.5996'. [ 1399.757080][T25622] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5995'. [ 1399.960048][T25644] sctp: [Deprecated]: syz.3.6000 (pid 25644) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1399.960048][T25644] Use struct sctp_sack_info instead [ 1400.040997][T25634] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1400.050905][T25634] syzkaller1: linktype set to 786 [ 1400.070606][T25635] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1400.088257][T25635] syzkaller1: linktype set to 786 [ 1401.332740][T13233] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1401.484922][T25671] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.6012'. [ 1401.921276][T25685] netlink: 'syz.1.6017': attribute type 21 has an invalid length. [ 1401.987106][T25685] netlink: 'syz.1.6017': attribute type 11 has an invalid length. [ 1402.130116][T25696] delete_channel: no stack [ 1402.290341][T25701] netlink: 'syz.1.6021': attribute type 10 has an invalid length. [ 1402.321307][T25701] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6021'. [ 1402.339712][T25701] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6021'. [ 1402.719002][T25710] can: request_module (can-proto-0) failed. [ 1402.735584][T25716] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.6022'. [ 1402.874332][T25713] netlink: 'syz.2.6022': attribute type 29 has an invalid length. [ 1402.911758][T25713] netlink: 'syz.2.6022': attribute type 29 has an invalid length. [ 1402.985829][T25717] netlink: 'syz.2.6022': attribute type 29 has an invalid length. [ 1403.068721][T25720] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6026'. [ 1403.090974][T25722] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.6027'. [ 1403.195131][T25726] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.6028'. [ 1403.349444][T25728] netlink: 'syz.1.6028': attribute type 39 has an invalid length. [ 1403.796814][T25730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1403.813998][ T4326] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1403.826114][ T4326] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1403.835108][ T4326] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1403.847767][ T4326] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1403.856611][ T4326] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1403.864291][ T4326] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1403.884478][T25730] team0: Port device bond0 added [ 1404.473199][T25733] chnl_net:caif_netlink_parms(): no params data found [ 1404.895902][T25733] bridge0: port 1(bridge_slave_0) entered blocking state [ 1404.920041][T25733] bridge0: port 1(bridge_slave_0) entered disabled state [ 1404.952270][T25733] device bridge_slave_0 entered promiscuous mode [ 1404.975690][T25776] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.6038'. [ 1404.987744][T25733] bridge0: port 2(bridge_slave_1) entered blocking state [ 1405.008638][T25733] bridge0: port 2(bridge_slave_1) entered disabled state [ 1405.022692][T25733] device bridge_slave_1 entered promiscuous mode [ 1405.043013][T25780] validate_nla: 1 callbacks suppressed [ 1405.043032][T25780] netlink: 'syz.1.6039': attribute type 29 has an invalid length. [ 1405.087154][T25777] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.6039'. [ 1405.104034][T25773] can: request_module (can-proto-0) failed. [ 1405.299959][T25780] netlink: 'syz.1.6039': attribute type 29 has an invalid length. [ 1405.315133][T25782] netlink: 4079 bytes leftover after parsing attributes in process `syz.3.6040'. [ 1405.342324][T25733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1405.373838][T25784] netlink: 'syz.1.6039': attribute type 29 has an invalid length. [ 1405.429661][T25733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1405.547307][T25733] team0: Port device team_slave_0 added [ 1405.603817][T25733] team0: Port device team_slave_1 added [ 1405.759526][T13233] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.839713][T25733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1405.855096][T25733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1405.911464][T25733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1405.971608][ T4326] Bluetooth: hci3: command 0x0409 tx timeout [ 1406.013896][T13233] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1406.055253][T25733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1406.091274][T25733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1406.161163][T25733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1406.215915][T25810] netlink: 'syz.0.6047': attribute type 13 has an invalid length. [ 1406.413051][T25821] netlink: 'syz.3.6049': attribute type 28 has an invalid length. [ 1406.415954][T13233] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1406.420953][T25821] netlink: 'syz.3.6049': attribute type 29 has an invalid length. [ 1406.534123][T25733] device hsr_slave_0 entered promiscuous mode [ 1406.554972][T25733] device hsr_slave_1 entered promiscuous mode [ 1406.588922][T25733] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1406.609649][T25733] Cannot create hsr debugfs directory [ 1408.051357][ T4326] Bluetooth: hci3: command 0x041b tx timeout [ 1408.219654][T25853] can: request_module (can-proto-0) failed. [ 1408.325458][T25865] netlink: 'syz.3.6056': attribute type 29 has an invalid length. [ 1408.360684][T25857] __nla_validate_parse: 2 callbacks suppressed [ 1408.360721][T25857] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.6056'. [ 1408.429950][T25859] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6058'. [ 1408.467940][T25865] netlink: 'syz.3.6056': attribute type 29 has an invalid length. [ 1408.657717][T25853] netlink: 'syz.3.6056': attribute type 29 has an invalid length. [ 1409.403904][T25733] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1409.445829][ T4326] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 1409.480117][T25733] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1409.706279][T25733] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1409.931653][T25733] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1410.131316][T24951] Bluetooth: hci3: command 0x040f tx timeout [ 1411.055944][T25733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1411.106991][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1411.154154][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1411.184213][T25733] 8021q: adding VLAN 0 to HW filter on device team0 [ 1411.431646][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1411.450499][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1411.500230][T13221] bridge0: port 1(bridge_slave_0) entered blocking state [ 1411.507586][T13221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1411.556982][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1411.620565][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1411.664189][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1411.713503][T13221] bridge0: port 2(bridge_slave_1) entered blocking state [ 1411.720761][T13221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1411.809709][T13233] device hsr_slave_0 left promiscuous mode [ 1411.903913][T13233] device hsr_slave_1 left promiscuous mode [ 1411.992164][T13233] device veth1_vlan left promiscuous mode [ 1411.998179][T13233] device veth0_vlan left promiscuous mode [ 1412.231153][T24951] Bluetooth: hci3: command 0x0419 tx timeout [ 1412.814038][T25949] netlink: 'syz.2.6079': attribute type 3 has an invalid length. [ 1412.854791][T25949] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6079'. [ 1412.949184][T13233] team0 (unregistering): Port device geneve1 removed [ 1413.458075][T13233] team0 (unregistering): Port device team_slave_1 removed [ 1413.511754][T13233] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1413.609333][T13233] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1413.879086][T13233] bond0 (unregistering): (slave team0): Releasing backup interface [ 1413.919444][T13233] bond0 (unregistering): Released all slaves [ 1413.962269][T13215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1414.005409][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1414.031931][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1414.053848][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1414.129371][T25733] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1414.166311][T25733] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1414.257024][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1414.287986][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1414.344265][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1414.411808][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1414.472731][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1414.515378][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1414.554182][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1414.595883][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1414.608187][T25969] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6085'. [ 1414.718207][T25969] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6085'. [ 1414.793649][T25971] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6085'. [ 1414.869886][T25972] netlink: 'syz.3.6085': attribute type 3 has an invalid length. [ 1414.891415][T25972] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6085'. [ 1415.817667][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1415.845769][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1415.870443][T25997] tap0: tun_chr_ioctl cmd 1074025688 [ 1415.929004][T25733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1416.293039][T26014] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.6095'. [ 1416.415964][T26020] netlink: 'syz.0.6095': attribute type 29 has an invalid length. [ 1416.505519][T26020] netlink: 'syz.0.6095': attribute type 29 has an invalid length. [ 1416.542825][T26012] can: request_module (can-proto-0) failed. [ 1416.684908][T26014] netlink: 'syz.0.6095': attribute type 29 has an invalid length. [ 1418.074420][T13202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1418.095980][T13202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1418.231916][T13232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1418.258477][T13232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1418.313013][T25733] device veth0_vlan entered promiscuous mode [ 1418.345266][T13232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1418.394028][T13232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1418.459453][T25733] device veth1_vlan entered promiscuous mode [ 1418.699558][T13202] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1418.772386][T13202] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1418.842597][T13202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1418.877940][T13202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1418.922467][T25733] device veth0_macvtap entered promiscuous mode [ 1418.965913][T25733] device veth1_macvtap entered promiscuous mode [ 1419.078998][T25733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1419.149905][T25733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.177937][T25733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1419.188860][T25733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.222299][T25733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1419.239217][T13204] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1419.262318][T13204] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1419.270616][T13204] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1419.319397][T13204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1419.365138][T25733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1419.389776][T25733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.429851][T25733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1419.450886][T25733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.488734][T25733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1419.567486][T13204] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1419.589183][T13204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1419.642995][T25733] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1419.702041][T25733] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1419.710856][T25733] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1419.731534][T25733] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1419.847272][T26078] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.6110'. [ 1419.953608][T26083] netlink: 'syz.0.6110': attribute type 29 has an invalid length. [ 1420.038405][T26081] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 1420.055101][T26074] can: request_module (can-proto-0) failed. [ 1420.244414][T26083] netlink: 'syz.0.6110': attribute type 29 has an invalid length. [ 1420.374275][T26078] netlink: 'syz.0.6110': attribute type 29 has an invalid length. [ 1420.548455][T13202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1420.576963][T13202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1420.651498][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1420.776145][T13210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1420.793633][T13210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1420.831675][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1422.424747][T26132] tap0: tun_chr_ioctl cmd 1074025677 [ 1422.430386][T26132] tap0: linktype set to 804 [ 1422.476960][T26132] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.6126'. [ 1422.877391][T26141] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6130'. [ 1423.004583][T26148] netlink: 'syz.3.6134': attribute type 2 has an invalid length. [ 1423.096324][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.102798][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.140936][T26148] device 0 entered promiscuous mode [ 1423.205468][T26158] device syzkaller0 entered promiscuous mode [ 1423.298271][T26162] netlink: 'syz.0.6137': attribute type 7 has an invalid length. [ 1423.380480][T26162] netlink: 126644 bytes leftover after parsing attributes in process `syz.0.6137'. [ 1426.711010][T26183] netlink: 'syz.0.6144': attribute type 10 has an invalid length. [ 1426.748637][T26183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1426.784386][T26183] team0: Port device bond0 added [ 1426.791583][T26190] netlink: 15119 bytes leftover after parsing attributes in process `syz.3.6146'. [ 1427.009763][T26195] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6148'. [ 1427.038080][T26195] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6148'. [ 1427.084368][T26202] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6148'. [ 1427.341336][T26202] netlink: 'syz.4.6148': attribute type 10 has an invalid length. [ 1427.453249][T26202] bridge0: port 2(bridge_slave_1) entered disabled state [ 1427.511866][T26212] netlink: 'syz.0.6152': attribute type 3 has an invalid length. [ 1427.534375][T26212] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6152'. [ 1427.547730][T26202] device bridge_slave_1 left promiscuous mode [ 1427.562076][T26202] bridge0: port 2(bridge_slave_1) entered disabled state [ 1427.828524][T26202] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1428.106425][T26215] IPv6: NLM_F_CREATE should be specified when creating new route [ 1428.161421][T26215] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1428.168778][T26215] IPv6: NLM_F_CREATE should be set when creating new route [ 1428.176155][T26215] IPv6: NLM_F_CREATE should be set when creating new route [ 1428.183510][T26215] IPv6: NLM_F_CREATE should be set when creating new route [ 1428.375993][T26216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1428.413413][T26226] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.6155'. [ 1428.495359][T26229] netlink: 'syz.4.6155': attribute type 29 has an invalid length. [ 1428.676030][T26229] netlink: 'syz.4.6155': attribute type 29 has an invalid length. [ 1428.699903][T26223] can: request_module (can-proto-0) failed. [ 1428.836086][T26226] netlink: 'syz.4.6155': attribute type 29 has an invalid length. [ 1429.870928][T26260] netlink: 'syz.0.6162': attribute type 29 has an invalid length. [ 1429.938740][T26256] can: request_module (can-proto-0) failed. [ 1429.956519][T26267] netlink: 'syz.3.6163': attribute type 10 has an invalid length. [ 1429.995173][T26267] bridge0: port 2(bridge_slave_1) entered disabled state [ 1430.026402][T26267] device bridge_slave_1 left promiscuous mode [ 1430.047180][T26267] bridge0: port 2(bridge_slave_1) entered disabled state [ 1430.118545][T26267] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1430.137321][T26258] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.6162'. [ 1430.243477][T26260] netlink: 'syz.0.6162': attribute type 29 has an invalid length. [ 1430.314689][T26264] netlink: 'syz.0.6162': attribute type 29 has an invalid length. [ 1431.315918][T26281] delete_channel: no stack [ 1433.455190][T26297] netlink: 'syz.3.6173': attribute type 39 has an invalid length. [ 1433.493191][T26300] netlink: 'syz.4.6172': attribute type 28 has an invalid length. [ 1433.569089][T26300] netlink: 'syz.4.6172': attribute type 29 has an invalid length. [ 1433.646544][T26300] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6172'. [ 1433.947386][T26310] netlink: 'syz.3.6177': attribute type 21 has an invalid length. [ 1433.965156][T26310] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6177'. [ 1433.985513][T26310] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6177'. [ 1434.222257][T26323] tap0: tun_chr_ioctl cmd 1074025681 [ 1434.377555][T26326] netlink: 'syz.3.6181': attribute type 28 has an invalid length. [ 1435.760017][T26357] netlink: 'syz.0.6189': attribute type 28 has an invalid length. [ 1435.769627][T26357] netlink: 'syz.0.6189': attribute type 29 has an invalid length. [ 1435.782658][T26357] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6189'. [ 1436.766606][T26339] device syzkaller0 entered promiscuous mode [ 1437.143442][T26376] netlink: 16054 bytes leftover after parsing attributes in process `syz.1.6195'. [ 1437.722271][T26393] netlink: 'syz.1.6200': attribute type 28 has an invalid length. [ 1437.741511][T26393] netlink: 'syz.1.6200': attribute type 29 has an invalid length. [ 1437.749786][T26393] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6200'. [ 1440.701307][T26389] netlink: 'syz.0.6198': attribute type 10 has an invalid length. [ 1440.800151][T26389] team0: Port device bond0 removed [ 1440.963899][T26408] netlink: 'syz.3.6205': attribute type 29 has an invalid length. [ 1440.976935][T26408] netlink: 'syz.3.6205': attribute type 29 has an invalid length. [ 1441.006365][T26408] netlink: 'syz.3.6205': attribute type 29 has an invalid length. [ 1441.049753][T26408] netlink: 'syz.3.6205': attribute type 29 has an invalid length. [ 1441.176373][T26416] netlink: 'syz.3.6205': attribute type 29 has an invalid length. [ 1441.253520][T26410] netlink: 'syz.2.6206': attribute type 10 has an invalid length. [ 1441.266456][T26417] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.6208'. [ 1441.341120][T26408] netlink: 'syz.3.6205': attribute type 3 has an invalid length. [ 1441.373200][T26408] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6205'. [ 1442.730302][T26410] device wg1 entered promiscuous mode [ 1442.752282][T26410] team0: Device wg1 is of different type [ 1442.882278][T26417] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1442.889575][T26417] IPv6: NLM_F_CREATE should be set when creating new route [ 1442.896998][T26417] IPv6: NLM_F_CREATE should be set when creating new route [ 1442.904355][T26417] IPv6: NLM_F_CREATE should be set when creating new route [ 1443.052262][T26424] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6209'. [ 1443.075058][T26427] netlink: 'syz.3.6211': attribute type 28 has an invalid length. [ 1443.101943][T26427] netlink: 'syz.3.6211': attribute type 29 has an invalid length. [ 1443.147596][T26423] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6209'. [ 1443.155353][T26427] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6211'. [ 1443.563736][T26448] device syzkaller0 entered promiscuous mode [ 1443.712760][T26450] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6217'. [ 1443.961453][T26462] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6219'. [ 1444.017955][T26462] bond0: (slave bond_slave_0): Releasing backup interface [ 1444.096242][T26462] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1444.220352][T26474] netlink: 'syz.4.6222': attribute type 11 has an invalid length. [ 1444.252318][T26474] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6222'. [ 1444.905490][T26469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1444.989281][T26466] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1444.999179][T26466] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1445.009422][T26466] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1445.282695][T26485] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6225'. [ 1445.819237][T26501] -1: renamed from syzkaller0 [ 1447.138771][T26529] validate_nla: 4 callbacks suppressed [ 1447.138811][T26529] netlink: 'syz.1.6238': attribute type 28 has an invalid length. [ 1447.194569][T26529] netlink: 'syz.1.6238': attribute type 29 has an invalid length. [ 1447.205852][T26527] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6237'. [ 1447.217646][T26529] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6238'. [ 1447.261055][T26527] bond0: (slave bond_slave_0): Releasing backup interface [ 1447.330465][T26527] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1447.529946][T26536] netlink: 'syz.1.6242': attribute type 4 has an invalid length. [ 1447.546278][T26536] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6242'. [ 1447.815946][T26544] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6245'. [ 1448.154354][T26560] netlink: 'syz.1.6250': attribute type 29 has an invalid length. [ 1448.187488][T26560] netlink: 'syz.1.6250': attribute type 3 has an invalid length. [ 1448.222095][T26560] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6250'. [ 1448.739162][T26570] netlink: 'syz.2.6252': attribute type 21 has an invalid length. [ 1449.265311][T26589] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6257'. [ 1449.294481][T26589] bond0: (slave bond_slave_0): Releasing backup interface [ 1449.318394][T26591] netlink: 'syz.1.6258': attribute type 3 has an invalid length. [ 1449.327072][T26589] device bond_slave_0 left promiscuous mode [ 1449.340207][T26591] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6258'. [ 1449.429303][T26589] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1449.568005][T26600] netlink: 'syz.0.6260': attribute type 10 has an invalid length. [ 1449.658702][T26600] team0: Port device netdevsim0 added [ 1449.843226][T26604] netlink: 763 bytes leftover after parsing attributes in process `syz.4.6262'. [ 1450.618458][T24951] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1450.629239][T24951] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1450.641911][T24951] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1450.652291][T24951] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1450.660035][T24951] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1450.667580][T24951] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1450.716725][T26627] netlink: 'syz.0.6266': attribute type 29 has an invalid length. [ 1450.840386][T26614] netlink: 'syz.2.6264': attribute type 22 has an invalid length. [ 1450.848800][T26614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6264'. [ 1451.050613][T13210] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1451.547020][T13210] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1451.799483][T13210] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.003457][T13210] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.691309][ T4326] Bluetooth: hci4: command 0x0409 tx timeout [ 1452.788885][T26680] validate_nla: 2 callbacks suppressed [ 1452.788903][T26680] netlink: 'syz.2.6279': attribute type 10 has an invalid length. [ 1452.817646][T26680] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6279'. [ 1452.832119][T26673] bridge0: port 2(bridge_slave_1) entered disabled state [ 1452.839751][T26673] bridge0: port 1(bridge_slave_0) entered disabled state [ 1452.888518][T26678] netlink: 'syz.2.6279': attribute type 21 has an invalid length. [ 1452.925675][T26616] chnl_net:caif_netlink_parms(): no params data found [ 1453.052633][T26680] netlink: 'syz.2.6279': attribute type 10 has an invalid length. [ 1453.092571][T26680] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6279'. [ 1453.542226][T26616] bridge0: port 1(bridge_slave_0) entered blocking state [ 1453.549520][T26616] bridge0: port 1(bridge_slave_0) entered disabled state [ 1453.563808][T26616] device bridge_slave_0 entered promiscuous mode [ 1453.655470][T26616] bridge0: port 2(bridge_slave_1) entered blocking state [ 1453.664775][T26616] bridge0: port 2(bridge_slave_1) entered disabled state [ 1453.681726][T26616] device bridge_slave_1 entered promiscuous mode [ 1453.689614][T26701] netlink: 'syz.3.6282': attribute type 3 has an invalid length. [ 1453.765388][T26701] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.6282'. [ 1453.788908][T13210] device gretap0 left promiscuous mode [ 1453.806923][T13210] Ÿë: port 1(gretap0) entered disabled state [ 1453.890473][T26702] netlink: 'syz.2.6283': attribute type 21 has an invalid length. [ 1453.918514][T26702] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6283'. [ 1453.948392][T26616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1454.064390][T26616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1454.323137][T26616] team0: Port device team_slave_0 added [ 1454.340573][T26711] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.6285'. [ 1454.373288][T26616] team0: Port device team_slave_1 added [ 1454.442062][T26722] netlink: 'syz.4.6286': attribute type 29 has an invalid length. [ 1454.469610][T26711] netlink: zone id is out of range [ 1454.576956][T26711] netlink: zone id is out of range [ 1454.630455][T26722] netlink: 'syz.4.6286': attribute type 29 has an invalid length. [ 1454.642732][T26711] netlink: zone id is out of range [ 1454.649869][T26711] netlink: zone id is out of range [ 1454.688671][T26616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1454.723630][T26616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1454.772365][ T4326] Bluetooth: hci4: command 0x041b tx timeout [ 1454.781907][T26711] netlink: zone id is out of range [ 1454.787343][T26711] netlink: zone id is out of range [ 1454.812232][T26711] netlink: zone id is out of range [ 1454.831902][T26711] netlink: zone id is out of range [ 1454.846731][T26711] netlink: zone id is out of range [ 1454.852897][T26720] netlink: 105 bytes leftover after parsing attributes in process `syz.4.6286'. [ 1454.853157][T26711] netlink: zone id is out of range [ 1454.921180][T26616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1455.013689][T26722] netlink: 'syz.4.6286': attribute type 29 has an invalid length. [ 1455.037922][T26720] netlink: 105 bytes leftover after parsing attributes in process `syz.4.6286'. [ 1455.094490][T26616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1455.117040][T26616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1455.190723][T26616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1455.382610][T26616] device hsr_slave_0 entered promiscuous mode [ 1455.436228][T26616] device hsr_slave_1 entered promiscuous mode [ 1455.816768][T26616] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1455.834896][T26616] Cannot create hsr debugfs directory [ 1456.581355][T26756] netlink: 'syz.4.6295': attribute type 16 has an invalid length. [ 1456.596602][T26756] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6295'. [ 1456.851581][ T4334] Bluetooth: hci4: command 0x040f tx timeout [ 1457.010414][T26772] netlink: 'syz.2.6299': attribute type 10 has an invalid length. [ 1457.119077][T13210] device veth0_to_team left promiscuous mode [ 1457.127131][T13210] Ÿë: port 2(veth0_to_team) entered disabled state [ 1457.163212][T13210] device vlan0 left promiscuous mode [ 1457.194186][T13210] @: port 1(vlan0) entered disabled state [ 1457.319523][T13210] device veth1_vlan left promiscuous mode [ 1457.917837][T13210] team0 (unregistering): Port device geneve1 removed [ 1458.523263][T13210] team0 (unregistering): Port device team_slave_1 removed [ 1458.580564][T13210] team0 (unregistering): Port device team_slave_0 removed [ 1458.640535][T13210] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1458.708643][T13210] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1458.769646][T13210] team0 (unregistering): Port device bridge_slave_1 removed [ 1458.939699][ T4334] Bluetooth: hci4: command 0x0419 tx timeout [ 1459.059759][T13210] bond0 (unregistering): (slave team0): Releasing backup interface [ 1459.154942][T13210] bond0 (unregistering): Released all slaves [ 1459.895684][T26820] tipc: Started in network mode [ 1459.912309][T26820] tipc: Node identity 9215a268, cluster identity 4711 [ 1459.982027][T26820] tipc: Node number set to 2450891368 [ 1460.598425][T26616] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1460.638795][T26616] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1460.678373][T26616] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1460.733795][T26616] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1461.025812][T26844] netlink: 'syz.2.6310': attribute type 10 has an invalid length. [ 1461.095937][T26848] netlink: 'syz.4.6312': attribute type 3 has an invalid length. [ 1461.173351][T26844] device dummy0 entered promiscuous mode [ 1461.180180][T26844] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1461.181942][T26848] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6312'. [ 1461.852882][T26616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1461.937786][T13233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1461.952277][T13233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1462.013404][T26871] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6316'. [ 1462.059015][T26616] 8021q: adding VLAN 0 to HW filter on device team0 [ 1462.110698][T13232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1462.145971][T13232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1462.180594][T13232] bridge0: port 1(bridge_slave_0) entered blocking state [ 1462.187881][T13232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1462.215992][T13232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1462.286327][T13232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1462.304909][T13232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1462.316156][T13232] bridge0: port 2(bridge_slave_1) entered blocking state [ 1462.323413][T13232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1462.348514][T13232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1462.567337][T26876] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1462.584082][T26876] net_ratelimit: 3 callbacks suppressed [ 1462.584101][T26876] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1462.645834][T13232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1462.659037][T13232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1462.694480][T13232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1462.722071][T13232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1462.747869][T13232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1462.833824][T13232] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1462.852918][T13232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1462.873959][T13232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1462.941674][T13232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1462.969759][T13232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1463.044684][T26616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1463.644989][T26904] netlink: 'syz.4.6326': attribute type 1 has an invalid length. [ 1463.701266][T26909] netlink: 'syz.4.6326': attribute type 1 has an invalid length. [ 1463.739876][T26909] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.6326'. [ 1463.782938][T26904] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.6326'. [ 1464.091964][T26907] netlink: 'syz.3.6325': attribute type 3 has an invalid length. [ 1464.101750][T26907] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6325'. [ 1464.449275][T13232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1464.472114][T13232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1464.562741][T26616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1464.637056][T26925] device syzkaller1 entered promiscuous mode [ 1464.675908][T26926] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1464.719941][T26926] syzkaller1: Linktype set failed because interface is up [ 1464.804034][T13204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1464.833658][T13204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1465.043865][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1465.072168][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1465.099511][T26616] device veth0_vlan entered promiscuous mode [ 1465.134185][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1465.181006][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1466.058303][T26957] netlink: 'syz.4.6333': attribute type 11 has an invalid length. [ 1466.071017][T26616] device veth1_vlan entered promiscuous mode [ 1466.101719][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1466.242169][T26957] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.6333'. [ 1466.252393][T26960] netlink: 'syz.0.6336': attribute type 1 has an invalid length. [ 1466.260481][T26960] netlink: 'syz.0.6336': attribute type 3 has an invalid length. [ 1466.278676][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1466.292609][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1466.353373][T26960] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6336'. [ 1466.360119][T26616] device veth0_macvtap entered promiscuous mode [ 1466.396260][T26616] device veth1_macvtap entered promiscuous mode [ 1466.490871][T26616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1466.571931][T26616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.604190][T26616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1466.651268][T26616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.681198][T26616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1466.730568][T26616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1466.771519][T26616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1466.801415][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1466.832382][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1466.881817][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1466.923137][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1466.965335][T26616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1466.986239][T26616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1467.025627][T26616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1467.071135][T26616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1467.111161][T26616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1467.133607][T26616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1467.205143][T26616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1467.269860][T13232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1467.292153][T13232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1467.340957][T26973] delete_channel: no stack [ 1467.356004][T26616] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1467.391620][T26981] netlink: 'syz.2.6340': attribute type 3 has an invalid length. [ 1467.403080][T26616] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1467.433871][T26981] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6340'. [ 1467.467396][T26616] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1467.490640][T26616] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1467.772421][T13210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1467.780339][T13210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1467.860267][T13202] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1467.908484][T13210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1467.933359][T13210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1467.963999][T13233] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1467.995407][T26999] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6345'. [ 1468.114224][T27000] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6342'. [ 1468.765276][T27020] netlink: 'syz.2.6347': attribute type 39 has an invalid length. [ 1469.368849][T27046] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6351'. [ 1470.068491][T27046] netlink: 'syz.0.6351': attribute type 10 has an invalid length. [ 1470.084077][T27046] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1471.119433][T27062] netlink: 'syz.0.6356': attribute type 28 has an invalid length. [ 1471.147225][T27062] netlink: 'syz.0.6356': attribute type 29 has an invalid length. [ 1471.188818][T27062] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6356'. [ 1471.527672][T27083] netlink: 'syz.0.6361': attribute type 2 has an invalid length. [ 1472.355875][T27083] device 0 entered promiscuous mode [ 1473.688742][ T4326] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1473.699148][ T4326] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1473.717630][ T4326] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1473.727071][ T4326] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1473.736616][ T4326] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1473.748657][ T4326] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1473.986420][T27137] netlink: 'syz.3.6371': attribute type 28 has an invalid length. [ 1474.087335][T27137] netlink: 'syz.3.6371': attribute type 29 has an invalid length. [ 1474.160643][T27137] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6371'. [ 1474.363494][T27149] ref_ctr_offset mismatch. inode: 0x27 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 1474.495468][T27134] chnl_net:caif_netlink_parms(): no params data found [ 1474.753974][T27134] bridge0: port 1(bridge_slave_0) entered blocking state [ 1474.808398][T27134] bridge0: port 1(bridge_slave_0) entered disabled state [ 1474.832714][T27134] device bridge_slave_0 entered promiscuous mode [ 1474.852884][T27134] bridge0: port 2(bridge_slave_1) entered blocking state [ 1474.862665][T27134] bridge0: port 2(bridge_slave_1) entered disabled state [ 1474.876207][T27134] device bridge_slave_1 entered promiscuous mode [ 1474.994023][T27134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1475.039305][T27134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1475.214668][T27134] team0: Port device team_slave_0 added [ 1475.454216][T27185] netlink: 'syz.3.6381': attribute type 3 has an invalid length. [ 1475.515001][T27188] netlink: 'syz.1.6379': attribute type 29 has an invalid length. [ 1475.525372][T27185] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6381'. [ 1475.571296][T27183] can: request_module (can-proto-0) failed. [ 1475.811360][ T4326] Bluetooth: hci5: command 0x0409 tx timeout [ 1476.070941][T27134] team0: Port device team_slave_1 added [ 1476.090118][T27187] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.6379'. [ 1476.123045][T27188] netlink: 'syz.1.6379': attribute type 29 has an invalid length. [ 1477.175043][T13204] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1477.241954][T27212] netlink: 'syz.0.6384': attribute type 28 has an invalid length. [ 1477.256898][T27134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1477.256943][T27212] netlink: 'syz.0.6384': attribute type 29 has an invalid length. [ 1477.276777][T27212] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6384'. [ 1477.281540][T27134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1477.321558][T27134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1477.402033][T13204] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1477.464416][T27134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1477.476191][T27134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1477.525901][T27134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1477.605680][T13204] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1477.770481][T27216] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6386'. [ 1477.825963][T13204] bond0: (slave netdevsim0): Releasing backup interface [ 1477.864759][T13204] device netdevsim0 left promiscuous mode [ 1477.894418][T13204] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1477.905235][ T4326] Bluetooth: hci5: command 0x041b tx timeout [ 1477.982378][T27134] device hsr_slave_0 entered promiscuous mode [ 1477.996375][T27134] device hsr_slave_1 entered promiscuous mode [ 1478.105355][T27134] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1478.117358][T27134] Cannot create hsr debugfs directory [ 1478.706010][T27230] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6390'. [ 1478.716979][T27230] device caif0 entered promiscuous mode [ 1478.723538][T27230] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1478.804032][T13204] device 0 left promiscuous mode [ 1479.107425][T27239] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6392'. [ 1479.394057][T27247] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.6393'. [ 1479.814261][T27257] netlink: 'syz.4.6395': attribute type 28 has an invalid length. [ 1479.842141][T27257] netlink: 'syz.4.6395': attribute type 29 has an invalid length. [ 1479.850059][T27257] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6395'. [ 1479.981337][ T4326] Bluetooth: hci5: command 0x040f tx timeout [ 1480.721529][T27243] mac80211_hwsim hwsim49 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1481.236879][T27282] netlink: 'syz.3.6397': attribute type 29 has an invalid length. [ 1481.490417][T27272] netlink: 'syz.1.6399': attribute type 21 has an invalid length. [ 1481.585248][T27278] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.6397'. [ 1481.615440][T27273] can: request_module (can-proto-0) failed. [ 1481.676803][T27282] netlink: 'syz.3.6397': attribute type 29 has an invalid length. [ 1481.847522][T27288] netlink: 'syz.3.6397': attribute type 29 has an invalid length. [ 1482.051308][ T4326] Bluetooth: hci5: command 0x0419 tx timeout [ 1482.650435][T27134] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1482.767716][T27134] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1482.825536][T27134] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1482.854374][T13221] wlan1: Trigger new scan to find an IBSS to join [ 1482.877584][T27134] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1482.945220][T27308] netlink: 'syz.0.6405': attribute type 21 has an invalid length. [ 1482.961607][T27308] IPv6: NLM_F_CREATE should be specified when creating new route [ 1483.026554][T27308] IPv6: Can't replace route, no match found [ 1483.806061][T27324] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.6407'. [ 1484.128545][T27320] mac80211_hwsim hwsim57 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1484.494942][T27134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1484.533604][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.540256][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.576114][T27339] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6411'. [ 1484.844255][T27339] team0: Port device team_slave_0 removed [ 1484.902989][T27349] netlink: 'syz.1.6414': attribute type 28 has an invalid length. [ 1484.911659][T27349] netlink: 'syz.1.6414': attribute type 29 has an invalid length. [ 1484.920034][T27349] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6414'. [ 1485.505582][T27357] netlink: 'syz.3.6418': attribute type 3 has an invalid length. [ 1485.548084][T27357] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6418'. [ 1486.938788][T23506] wlan1: Trigger new scan to find an IBSS to join [ 1487.892466][T13214] wlan1: Trigger new scan to find an IBSS to join [ 1488.038410][T13204] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 1488.116974][T13204] device hsr_slave_0 left promiscuous mode [ 1488.127399][T13204] team0 (unregistering): Port device hsr_slave_0 removed [ 1488.265287][T13204] device team_slave_1 left promiscuous mode [ 1488.272766][T13204] team0 (unregistering): Port device team_slave_1 removed [ 1488.326612][T13204] device team_slave_0 left promiscuous mode [ 1488.334538][T13204] team0 (unregistering): Port device team_slave_0 removed [ 1488.385932][T13204] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1488.394941][T13204] device bond_slave_1 left promiscuous mode [ 1488.728006][T13204] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1488.737087][T13204] device dummy0 left promiscuous mode [ 1488.792889][T13204] bond0 (unregistering): Released all slaves [ 1488.831697][T13202] wlan1: Creating new IBSS network, BSSID 1a:ae:c1:d2:60:b2 [ 1488.857109][T27134] 8021q: adding VLAN 0 to HW filter on device team0 [ 1488.865165][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1488.880111][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1488.941398][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1488.991953][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1489.022061][T13221] bridge0: port 1(bridge_slave_0) entered blocking state [ 1489.029258][T13221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1489.087302][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1489.130670][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1489.187912][T13221] bridge0: port 2(bridge_slave_1) entered blocking state [ 1489.195140][T13221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1489.248944][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1489.296820][T27369] netlink: 'syz.1.6422': attribute type 2 has an invalid length. [ 1489.382303][T13233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1489.536474][T13233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1489.588130][T27378] netlink: 'syz.3.6421': attribute type 29 has an invalid length. [ 1489.596219][T13233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1489.626816][T13233] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1489.668111][T27372] can: request_module (can-proto-0) failed. [ 1489.676114][T13233] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1489.741334][T27377] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.6421'. [ 1489.759911][T23506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1489.789783][T23506] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1489.829933][T27378] netlink: 'syz.3.6421': attribute type 29 has an invalid length. [ 1489.892634][T23506] wlan1: Trigger new scan to find an IBSS to join [ 1489.903128][T27379] netlink: 'syz.3.6421': attribute type 29 has an invalid length. [ 1489.948315][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1489.978129][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1490.011397][T27134] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1490.040880][T27134] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1490.064982][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1490.075580][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1490.095256][T27383] mac80211_hwsim hwsim54 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1490.147194][T27383] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.6425'. [ 1490.279431][T27393] netlink: 'syz.0.6426': attribute type 28 has an invalid length. [ 1490.331188][T27393] netlink: 'syz.0.6426': attribute type 29 has an invalid length. [ 1490.359551][T27393] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6426'. [ 1490.792724][T27400] netlink: 'syz.0.6428': attribute type 21 has an invalid length. [ 1490.851993][T27134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1490.862974][T13233] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1490.875661][T13233] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1490.978873][T13202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1491.041909][T13202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1491.197507][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1491.227960][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1491.298829][T27134] device veth0_vlan entered promiscuous mode [ 1491.332806][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1491.348631][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1491.430847][T27134] device veth1_vlan entered promiscuous mode [ 1491.459699][T27410] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6432'. [ 1491.506257][T27412] netlink: 'syz.1.6432': attribute type 9 has an invalid length. [ 1491.530879][T27412] netlink: 219 bytes leftover after parsing attributes in process `syz.1.6432'. [ 1491.617249][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1491.642038][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1491.678580][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1491.692161][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1491.716498][T27134] device veth0_macvtap entered promiscuous mode [ 1491.741316][ T4334] Bluetooth: hci2: command 0x0406 tx timeout [ 1491.753126][T27416] netlink: 'syz.4.6434': attribute type 2 has an invalid length. [ 1491.781189][T27416] netlink: 'syz.4.6434': attribute type 8 has an invalid length. [ 1491.792363][T27416] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6434'. [ 1491.814142][T27134] device veth1_macvtap entered promiscuous mode [ 1491.838842][T27134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1491.851664][T27134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1491.865179][T27134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1491.886091][T27134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1491.930152][T27134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1491.960641][T27134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1491.987609][T27134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1492.006336][T27134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1492.021296][T27134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1492.037452][T13233] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1492.046900][T13233] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1492.064111][T13233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1492.078883][T13233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1492.096541][T27134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1492.118685][T27134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1492.135020][T27134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1492.157822][T27134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1492.167932][T27134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1492.178945][T27134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1492.189120][T27134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1492.201338][T27134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1492.214064][T27134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1492.235606][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1492.253726][T27420] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.6435'. [ 1492.267128][T13221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1492.296991][T27134] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1492.308771][T27134] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1492.350647][T27134] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1492.371617][T27134] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1492.784072][T13210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1492.811299][T13210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1492.820582][T27429] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6438'. [ 1492.864897][T13210] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1492.908548][T13204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1492.941231][T13202] wlan1: Creating new IBSS network, BSSID 7e:86:15:25:39:6f [ 1492.959141][T13204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1492.994414][T13233] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1493.192238][T27435] __sock_release: fasync list not empty! [ 1493.466936][T27441] team0: Port device geneve1 added [ 1493.895137][T13202] wlan1: Trigger new scan to find an IBSS to join [ 1494.260661][T27459] netlink: 175 bytes leftover after parsing attributes in process `syz.1.6445'. [ 1494.386807][T27463] validate_nla: 4 callbacks suppressed [ 1494.386829][T27463] netlink: 'syz.4.6447': attribute type 3 has an invalid length. [ 1494.463191][T27463] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6447'. [ 1495.674780][T27489] netlink: 'syz.3.6455': attribute type 10 has an invalid length. [ 1495.695695][T27489] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6455'. [ 1495.713479][T27489] device ipvlan1 entered promiscuous mode [ 1495.733193][T27489] bridge0: port 2(ipvlan1) entered blocking state [ 1495.740414][T27489] bridge0: port 2(ipvlan1) entered disabled state [ 1495.765571][T27489] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1496.204467][T27510] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6462'. [ 1497.235302][T27539] netlink: 'syz.1.6469': attribute type 10 has an invalid length. [ 1497.263812][T27539] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6469'. [ 1497.317787][T27539] device ipvlan1 entered promiscuous mode [ 1497.355455][T27539] bridge0: port 3(ipvlan1) entered blocking state [ 1497.364157][T27539] bridge0: port 3(ipvlan1) entered disabled state [ 1497.379809][T27539] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1497.915124][T27567] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.6478'. [ 1497.990647][T27569] netlink: 'syz.0.6479': attribute type 28 has an invalid length. [ 1498.037372][T27569] netlink: 'syz.0.6479': attribute type 29 has an invalid length. [ 1498.129427][T27569] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6479'. [ 1498.851283][T13214] wlan1: Trigger new scan to find an IBSS to join [ 1498.900069][T27592] netlink: 'syz.4.6487': attribute type 10 has an invalid length. [ 1498.929286][T27592] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6487'. [ 1498.939963][T27592] device ipvlan1 entered promiscuous mode [ 1499.004101][T27592] bridge0: port 2(ipvlan1) entered blocking state [ 1499.034050][T27592] bridge0: port 2(ipvlan1) entered disabled state [ 1499.068543][T27592] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1499.153679][T27603] syzkaller1: tun_chr_ioctl cmd 35108 [ 1499.287427][T27602] netlink: 'syz.0.6489': attribute type 10 has an invalid length. [ 1499.578703][T27623] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.6493'. [ 1500.570896][T27636] netlink: 'syz.3.6497': attribute type 28 has an invalid length. [ 1500.590901][T27636] netlink: 'syz.3.6497': attribute type 29 has an invalid length. [ 1500.620756][T27636] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6497'. [ 1501.054989][T13210] wlan1: Creating new IBSS network, BSSID ee:90:06:f5:cc:ea [ 1501.188855][T27603] netlink: 'syz.0.6489': attribute type 10 has an invalid length. [ 1502.196702][T27603] team0: Port device netdevsim0 removed [ 1502.218770][T27603] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1502.532309][T27649] netlink: 'syz.3.6501': attribute type 41 has an invalid length. [ 1502.599561][T27649] netlink: 'syz.3.6501': attribute type 41 has an invalid length. [ 1502.660823][T27652] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6501'. [ 1503.254146][T27671] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.6506'. [ 1503.843551][T27689] netlink: 'syz.4.6508': attribute type 29 has an invalid length. [ 1503.899101][T27682] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.6511'. [ 1503.919830][T27689] netlink: 'syz.4.6508': attribute type 29 has an invalid length. [ 1504.047992][T27680] can: request_module (can-proto-0) failed. [ 1504.111776][T27686] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.6508'. [ 1504.132957][T27693] netlink: 'syz.4.6508': attribute type 29 has an invalid length. [ 1504.148474][T27694] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.6512'. [ 1504.273645][T27697] netlink: 'syz.3.6513': attribute type 3 has an invalid length. [ 1504.294898][T27699] netlink: 'syz.3.6513': attribute type 3 has an invalid length. [ 1504.319001][T27697] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6513'. [ 1504.344575][T27699] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6513'. [ 1505.344439][T27730] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.6521'. [ 1505.470171][T27707] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6516'. [ 1505.619756][T27710] team0: Port device wlan1 added [ 1505.924639][T27743] validate_nla: 4 callbacks suppressed [ 1505.924660][T27743] netlink: 'syz.0.6525': attribute type 5 has an invalid length. [ 1505.987917][T27736] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.6523'. [ 1506.825651][T27767] netlink: 'syz.1.6530': attribute type 29 has an invalid length. [ 1506.906427][T27763] can: request_module (can-proto-0) failed. [ 1506.989014][T27767] netlink: 'syz.1.6530': attribute type 29 has an invalid length. [ 1507.044157][T27772] netlink: 'syz.1.6530': attribute type 29 has an invalid length. [ 1507.060390][T27774] netlink: 'syz.0.6533': attribute type 27 has an invalid length. [ 1507.091346][ T4326] Bluetooth: hci1: command 0x0406 tx timeout [ 1507.101223][T27774] netlink: 'syz.0.6533': attribute type 3 has an invalid length. [ 1507.223740][T27778] netlink: 'syz.4.6535': attribute type 10 has an invalid length. [ 1507.289736][T27778] netlink: 'syz.4.6535': attribute type 10 has an invalid length. [ 1507.527822][T27778] team0: Port device wlan1 added [ 1508.245751][T27793] __nla_validate_parse: 3 callbacks suppressed [ 1508.245816][T27793] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.6539'. [ 1508.740634][T27817] netlink: 'syz.2.6544': attribute type 10 has an invalid length. [ 1509.155390][T27817] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1509.466112][T27835] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.6549'. [ 1509.857700][T27843] can: request_module (can-proto-0) failed. [ 1509.880580][T27843] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.6551'. [ 1509.893274][T13233] wlan1: Trigger new scan to find an IBSS to join [ 1509.904860][T27843] netlink: 'syz.2.6551': attribute type 29 has an invalid length. [ 1510.598425][T27854] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6552'. [ 1510.728442][T27857] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.6556'. [ 1511.043104][T27854] team0: Port device wlan1 added [ 1511.417065][T27868] device syzkaller0 entered promiscuous mode [ 1511.691917][T27888] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.6562'. [ 1512.144583][T27906] validate_nla: 4 callbacks suppressed [ 1512.144605][T27906] netlink: 'syz.0.6566': attribute type 3 has an invalid length. [ 1512.222900][T27906] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6566'. [ 1512.853256][T13210] wlan1: Trigger new scan to find an IBSS to join [ 1514.842744][T27886] tipc: Started in network mode [ 1514.848125][T27886] tipc: Node identity 9215a268, cluster identity 4711 [ 1514.856150][T13207] wlan1: Trigger new scan to find an IBSS to join [ 1514.861743][T27886] tipc: Node number set to 2450891368 [ 1514.874014][T27908] netlink: 'syz.3.6568': attribute type 10 has an invalid length. [ 1514.886569][T27892] netlink: 26 bytes leftover after parsing attributes in process `syz.1.6563'. [ 1515.159072][T27917] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.6571'. [ 1515.770770][T27927] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6575'. [ 1515.814085][T27933] netlink: 'syz.0.6576': attribute type 39 has an invalid length. [ 1515.892186][T13202] wlan1: Trigger new scan to find an IBSS to join [ 1516.260829][T27941] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6579'. [ 1516.455290][T27939] netlink: 'syz.1.6578': attribute type 10 has an invalid length. [ 1516.572564][T27939] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1516.845158][T27958] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.6583'. [ 1517.346475][T13233] wlan1: Creating new IBSS network, BSSID da:f8:b0:b3:43:3f [ 1517.374263][T13233] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1517.480931][T27966] netlink: 'syz.2.6595': attribute type 1 has an invalid length. [ 1517.873222][T27977] netlink: 'syz.4.6585': attribute type 10 has an invalid length. [ 1517.942965][T13207] wlan1: Trigger new scan to find an IBSS to join [ 1518.858799][T28016] netlink: 14719 bytes leftover after parsing attributes in process `syz.4.6597'. [ 1518.890246][T13233] wlan1: Creating new IBSS network, BSSID 92:7a:c6:d3:5a:ab [ 1518.929521][T13214] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1519.680943][T28023] netlink: 'syz.4.6601': attribute type 29 has an invalid length. [ 1519.740163][T28023] netlink: 'syz.4.6601': attribute type 29 has an invalid length. [ 1519.771328][T28029] netlink: 'syz.4.6601': attribute type 29 has an invalid length. [ 1520.227321][T28042] netlink: 'syz.3.6605': attribute type 39 has an invalid length. [ 1520.617218][T28064] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.6611'. [ 1521.243856][T28088] netlink: 'syz.3.6618': attribute type 29 has an invalid length. [ 1521.308712][T28088] netlink: 'syz.3.6618': attribute type 29 has an invalid length. [ 1521.340551][T28095] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.6616'. [ 1521.403752][T28088] netlink: 'syz.3.6618': attribute type 29 has an invalid length. [ 1521.466495][T28098] netlink: 'syz.3.6618': attribute type 29 has an invalid length. [ 1521.537622][T28088] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.6618'. [ 1522.147025][T28107] netlink: 160 bytes leftover after parsing attributes in process `syz.2.6622'. [ 1522.258247][T28110] netlink: 'syz.0.6623': attribute type 11 has an invalid length. [ 1522.281489][T28110] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6623'. [ 1522.339587][T28110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1522.504328][T28124] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.6626'. [ 1522.722768][T28130] validate_nla: 1 callbacks suppressed [ 1522.722787][T28130] netlink: 'syz.2.6628': attribute type 21 has an invalid length. [ 1522.812739][T28134] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.6631'. [ 1522.878126][T28134] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6631'. [ 1527.571228][ T4334] Bluetooth: hci3: command 0x0406 tx timeout [ 1539.676576][T24951] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1539.873715][T28166] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1539.887268][T28166] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1539.896555][T28166] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1539.905981][T28166] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1539.916320][T28166] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1539.925578][T28166] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1539.933062][T28166] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1539.942242][T28166] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1539.951730][T28166] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1539.960386][T28166] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1539.968858][T28166] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1539.977310][T28166] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1539.984776][T28166] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1539.993470][T28166] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1540.000783][T28166] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1540.008292][T28166] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1540.017189][T28166] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1540.715566][T28166] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1540.730595][T28166] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1540.739878][T28166] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1540.750043][T28166] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1540.758926][T28166] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1540.766515][T28166] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1541.089189][T28166] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1541.108758][T28166] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1541.117621][T28166] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1541.127649][T28166] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1541.136855][T28166] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1541.144820][T28166] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1542.051282][T28171] Bluetooth: hci6: command 0x0409 tx timeout [ 1542.131402][T28171] Bluetooth: hci0: command 0x0409 tx timeout [ 1542.138080][T28171] Bluetooth: hci7: command 0x0409 tx timeout [ 1542.851316][T28171] Bluetooth: hci8: command 0x0409 tx timeout [ 1543.171466][T28171] Bluetooth: hci9: command 0x0409 tx timeout [ 1544.131346][T28171] Bluetooth: hci6: command 0x041b tx timeout [ 1544.212393][T28171] Bluetooth: hci7: command 0x041b tx timeout [ 1544.218512][T28171] Bluetooth: hci0: command 0x041b tx timeout [ 1544.931241][T28171] Bluetooth: hci8: command 0x041b tx timeout [ 1545.251648][T28171] Bluetooth: hci9: command 0x041b tx timeout [ 1545.976430][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.982894][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.211258][T28171] Bluetooth: hci6: command 0x040f tx timeout [ 1546.291300][T28171] Bluetooth: hci0: command 0x040f tx timeout [ 1546.297411][T28171] Bluetooth: hci7: command 0x040f tx timeout [ 1547.011281][T28171] Bluetooth: hci8: command 0x040f tx timeout [ 1547.331573][T28171] Bluetooth: hci9: command 0x040f tx timeout [ 1548.291201][T28171] Bluetooth: hci6: command 0x0419 tx timeout [ 1548.371301][T28171] Bluetooth: hci7: command 0x0419 tx timeout [ 1548.377410][T28171] Bluetooth: hci0: command 0x0419 tx timeout [ 1549.091228][T28171] Bluetooth: hci8: command 0x0419 tx timeout [ 1549.411437][T28171] Bluetooth: hci9: command 0x0419 tx timeout [ 1549.811779][ T125] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2667 jiffies s: 163933 root: 0x1/. [ 1549.835605][ T125] rcu: blocking rcu_node structures (internal RCU debug): [ 1549.846581][ T125] Sending NMI from CPU 1 to CPUs 0: [ 1549.852071][ C0] NMI backtrace for cpu 0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1549.852084][ C0] CPU: 0 PID: 28142 Comm: syz.4.6630 Not tainted syzkaller #0 [ 1549.852101][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1549.852111][ C0] RIP: 0010:asm_sysvec_irq_work+0x0/0x20 [ 1549.852144][ C0] Code: e9 b5 03 00 00 90 90 90 90 90 0f 01 ca fc 6a ff e8 b5 02 00 00 48 89 c4 48 89 e7 e8 7a 15 f0 ff e9 95 03 00 00 90 90 90 90 90 <0f> 01 ca fc 6a ff e8 95 02 00 00 48 89 c4 48 89 e7 e8 4a 1a f0 ff [ 1549.852160][ C0] RSP: 0018:ffffc90000007ab8 EFLAGS: 00000006 [ 1549.852175][ C0] RAX: f9b35089a4a5c600 RBX: 1ffff92000000f64 RCX: f9b35089a4a5c600 [ 1549.852190][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf42e0 [ 1549.852204][ C0] RBP: ffffc90000007bd0 R08: ffff8880b8e3580b R09: 1ffff110171c6b01 [ 1549.852217][ C0] R10: dffffc0000000000 R11: ffffed10171c6b02 R12: 0000000000000246 [ 1549.852230][ C0] R13: dffffc0000000000 R14: ffff8880b8e3bb00 R15: 0000000000000001 [ 1549.852244][ C0] FS: 00007f763ee516c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1549.852260][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1549.852273][ C0] CR2: 000000110c32683e CR3: 000000007c32b000 CR4: 00000000003506f0 [ 1549.852289][ C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 1549.852300][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1549.852311][ C0] Call Trace: [ 1549.852317][ C0] [ 1549.852322][ C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 1549.852343][ C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 52 82 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 1549.852356][ C0] RSP: 0018:ffffc90000007ae0 EFLAGS: 00000206 [ 1549.852374][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 1549.852390][ C0] ? lock_is_held_type+0x13a/0x190 [ 1549.852415][ C0] __rcu_read_unlock+0x78/0xd0 [ 1549.852430][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 1549.852559][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1549.852588][ C0] ieee80211_iterate_active_interfaces_atomic+0x156/0x170 [ 1549.852614][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 1549.852641][ C0] __hrtimer_run_queues+0x522/0xc90 [ 1549.852665][ C0] ? hw_scan_work+0xf00/0xf00 [ 1549.852693][ C0] ? hrtimer_interrupt+0x980/0x980 [ 1549.852717][ C0] hrtimer_run_softirq+0x173/0x290 [ 1549.852739][ C0] handle_softirqs+0x291/0x910 [ 1549.852759][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 1549.852777][ C0] ? do_softirq+0x210/0x210 [ 1549.852791][ C0] ? hrtimer_interrupt+0x775/0x980 [ 1549.852812][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 1549.852830][ C0] __irq_exit_rcu+0x13b/0x230 [ 1549.852846][ C0] ? irq_exit_rcu+0x20/0x20 [ 1549.852868][ C0] irq_exit_rcu+0x5/0x20 [ 1549.852882][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1549.852899][ C0] [ 1549.852904][ C0] [ 1549.852910][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1549.852938][ C0] RIP: 0010:unwind_next_frame+0x3bf/0x1fd0 [ 1549.852969][ C0] Code: 28 84 c0 0f 85 0d 16 00 00 41 c6 06 01 49 c7 c4 40 8d 89 8a 4d 8d 6c 24 04 4d 8d 74 24 05 4d 89 ef 49 c1 ef 03 41 0f b6 04 2f <84> c0 0f 85 3f 15 00 00 4c 89 f0 48 c1 e8 03 0f b6 04 28 84 c0 0f [ 1549.852983][ C0] RSP: 0018:ffffc900052a7460 EFLAGS: 00000a02 [ 1549.852997][ C0] RAX: 0000000000000000 RBX: ffffc900052a7508 RCX: ffffffff8e3575ac [ 1549.853009][ C0] RDX: ffffffff8ea78fbc RSI: ffffffff8e3575a8 RDI: ffffffff8138fb37 [ 1549.853022][ C0] RBP: dffffc0000000000 R08: 000000000000000f R09: 0000000000000006 [ 1549.853033][ C0] R10: dffffc0000000000 R11: fffff52000a54ead R12: ffffffff8ea78fbc [ 1549.853046][ C0] R13: ffffffff8ea78fc0 R14: ffffffff8ea78fc1 R15: 1ffffffff1d4f1f8 [ 1549.853064][ C0] ? unwind_next_frame+0x97/0x1fd0 [ 1549.853089][ C0] ? array_of_map_alloc+0x51/0xc0 [ 1549.853163][ C0] ? stack_trace_save+0xf0/0xf0 [ 1549.853186][ C0] arch_stack_walk+0x10c/0x140 [ 1549.853215][ C0] ? array_of_map_alloc+0x51/0xc0 [ 1549.853239][ C0] stack_trace_save+0xa6/0xf0 [ 1549.853260][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 1549.853283][ C0] ? ct_nmi_exit+0x145/0x1c0 [ 1549.853303][ C0] save_stack+0x121/0x230 [ 1549.853347][ C0] ? preempt_schedule_notrace+0x120/0x120 [ 1549.853394][ C0] ? __reset_page_owner+0x190/0x190 [ 1549.853412][ C0] ? post_alloc_hook+0x173/0x1a0 [ 1549.853434][ C0] ? get_page_from_freelist+0x206b/0x2180 [ 1549.853460][ C0] ? __alloc_pages+0x1ec/0x4f0 [ 1549.853483][ C0] ? __vmalloc_node_range+0x94a/0x1380 [ 1549.853504][ C0] ? bpf_map_area_alloc+0xd4/0xe0 [ 1549.853523][ C0] ? array_map_alloc+0x286/0x6f0 [ 1549.853543][ C0] ? array_of_map_alloc+0x51/0xc0 [ 1549.853568][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1549.853597][ C0] __set_page_owner+0x19/0x60 [ 1549.853616][ C0] post_alloc_hook+0x173/0x1a0 [ 1549.853641][ C0] get_page_from_freelist+0x206b/0x2180 [ 1549.853669][ C0] ? __alloc_pages+0x130/0x4f0 [ 1549.853709][ C0] __alloc_pages+0x1ec/0x4f0 [ 1549.853735][ C0] ? zone_statistics+0x170/0x170 [ 1549.853761][ C0] ? alloc_pages+0x245/0x740 [ 1549.853790][ C0] __vmalloc_node_range+0x94a/0x1380 [ 1549.853825][ C0] ? free_vm_area+0x50/0x50 [ 1549.853854][ C0] ? bpf_lsm_capable+0x5/0x10 [ 1549.853875][ C0] ? security_capable+0x85/0xb0 [ 1549.853903][ C0] bpf_map_area_alloc+0xd4/0xe0 [ 1549.853922][ C0] ? array_map_alloc+0x286/0x6f0 [ 1549.853949][ C0] array_map_alloc+0x286/0x6f0 [ 1549.853973][ C0] array_of_map_alloc+0x51/0xc0 [ 1549.853996][ C0] map_create+0x524/0xff0 [ 1549.854019][ C0] ? security_bpf+0x7a/0xa0 [ 1549.854044][ C0] __sys_bpf+0x38b/0x780 [ 1549.854068][ C0] ? bpf_link_show_fdinfo+0x380/0x380 [ 1549.854107][ C0] __x64_sys_bpf+0x78/0x90 [ 1549.854129][ C0] do_syscall_64+0x4c/0xa0 [ 1549.854152][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1549.854174][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1549.854197][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1549.854219][ C0] RIP: 0033:0x7f763df9de59 [ 1549.854234][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1549.854249][ C0] RSP: 002b:00007f763ee51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1549.854264][ C0] RAX: ffffffffffffffda RBX: 00007f763e226090 RCX: 00007f763df9de59 [ 1549.854277][ C0] RDX: 0000000000000048 RSI: 0000200000000240 RDI: 0000000000000000 [ 1549.854288][ C0] RBP: 00007f763e033e6f R08: 0000000000000000 R09: 0000000000000000 [ 1549.854299][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1549.854309][ C0] R13: 00007f763e226128 R14: 00007f763e226090 R15: 00007ffe88250508 [ 1549.854329][ C0] [ 1553.030208][T13207] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)