last executing test programs: 5.015212668s ago: executing program 4 (id=2238): socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5, 0x4}, {0x10000002, 0x5}], 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x7, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1010115000600142603600e120800040000001101a80016000a00034006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e43bf66f282ac027812cfbd3f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000040079102800000000001e5000000000000095000000000000"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001080)="d8000000180001004e81f782db4cb904021d0800fe007c05e8fe55a10a0012000200142603600e12080005000000000001000000e00002400500fa7c035c0461c1d67f6f94007134cf6efb80009a38b540a6ea553e437a0ef0a007a290457f0189b3050000006bbace8017cbec4c2ee5015030485bca8aa7cef4090000001fb7d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf51951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd64fa1dba9bfe4edef3d93452a92", 0xd5}], 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x34004000) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000780)={r6, r1, 0x0, 0x1, &(0x7f0000000740)='\x00'}, 0x30) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000200)={r2}) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r5, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0x44, &(0x7f0000000380), 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x12, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@ifindex=r9, 0xffffffffffffffff, 0x1, 0xee075bd53e4c8bf6, 0x0, @void, @void, @void, @value=r8}, 0x20) socket$kcm(0x2, 0x1000000000000002, 0x0) close(r2) 4.657186823s ago: executing program 4 (id=2241): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x40107446, &(0x7f0000000180)) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x7, @perf_config_ext={0x407fff, 0xaea}, 0x14b3d, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) recvmsg(r3, &(0x7f0000000200)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000380)=""/227, 0xe3}, {&(0x7f0000000580)=""/148, 0x94}], 0x2, &(0x7f0000000480)=""/121, 0x79}, 0x103) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000070000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000000095000000000700004d98000008000000000000850000005bb188ee76def6840000000095000000001000000000000000"], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000640), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r5, &(0x7f0000000680)={'veth1', 0x32, 0x30}, 0x8) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='device_pm_callback_start\x00', r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@alu={0x7, 0x0, 0x5, 0xa, 0x2, 0xffffffffffffffc0, 0xfffffffffffffff0}], {0x95, 0x0, 0x0, 0x1a03d3}}, &(0x7f0000000780)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}, {0x95, 0x0, 0x6000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x11, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000fcffffff850000002300000095"], &(0x7f0000001900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a1, &(0x7f0000000080)) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000940)="5c00000012006bab9a3fe3d86e17aa0a046b870af34f04001a001931a0e69ee517d2301f2febcf0eca707888d34460bc8c000000a705251e6182949a3651f60a84c9e4d4938037e70e4509c5bb00000000000000000000ee1745944780eea3cc6e623e611706097766", 0x69}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.257588638s ago: executing program 4 (id=2252): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000008c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xae6}, 0x14125, 0x2e, 0xfffffbff, 0x3, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) close(0xffffffffffffffff) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r3, 0x84, 0x6e, &(0x7f0000000000), 0x10) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x10, &(0x7f00000002c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xce, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) write$cgroup_freezer_state(r5, &(0x7f0000000840)='FROZEN\x00', 0x7) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000004000000020000000000001103000000ffffffff000000000100000d010000000000000001000000020000000000000802000000000061"], 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xf, &(0x7f0000000040)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0x34}, @call={0x85, 0x0, 0x0, 0x8f}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5d86, 0x0, 0x0, 0x0, 0x9}, @ldst={0x3, 0x0, 0x3, 0x0, 0x3, 0x100, 0x1e}, @ldst={0x3, 0x0, 0x2, 0xa, 0x6, 0xfffffffffffffffc, 0xfffffffffffffffc}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc}}], &(0x7f0000000180)='GPL\x00', 0xa5, 0xa2, &(0x7f00000001c0)=""/162, 0x41000, 0x59, '\x00', r6, 0x0, r7, 0x8, &(0x7f0000000600)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0x1, 0x2, 0xca}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000680)=[r1, r5], &(0x7f00000006c0)=[{0x1, 0x5, 0xd, 0x8}, {0x2, 0x1, 0x6, 0x5}, {0x1, 0x1, 0x1, 0x3}, {0x3, 0x2, 0xe, 0xb}, {0x5, 0x3, 0xd, 0x6}, {0x0, 0x4, 0x0, 0x9}, {0x1, 0x4, 0xc, 0x7}, {0x5, 0x1, 0x2, 0x5}, {0x2, 0x3, 0xb, 0x3}, {0x4, 0x2, 0x3, 0xa}], 0x10, 0x8, @void, @value}, 0x94) close(r5) close(r4) 2.178374376s ago: executing program 2 (id=2253): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0xfffffffffffffffe, 0xb}, 0x14185, 0x20032, 0xfffffbff, 0x3, 0x4, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xb, 0xffffffffffffffff, 0x9) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x19a7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7a, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0x6, 0x3, 0x2, 0x100, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000001001000001000000dc00000000000000363385d119e0d9809ef6ff7f9b31b732bfd9362f59478615110ce36474863281b619bc4a8b98d435ceaed91cbae9151369ee201ecabab92f0bca7abc77cf99adce6e8552f57ffb622b90ed5d7381be1fa7fd9b10fba4e49c2690c6e31cd29afe1fcd2e365bc29c80ea5a407e75d908866f7bad501dceffded9fa667c25e7cc290f44d3b9911920dd1abef5dca4a344f335549a97792ade4440b46b85a21a8716d4"], 0x18}, 0xfc00) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x29, 0x35, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fe9cb7907021175f37538e486dd6317ce22667f2f00db5b686158bbcfe8875a65969ff57b00000000"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r4, @ANYRESHEX=r0, @ANYRES64=r1], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={0x0, 0x0, 0x8}, 0x18) r5 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x8f, 0x0, 0x0, 0x0, 0x7fef, 0x20825, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0x400aea}, 0x14145, 0x277, 0x7f, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00000001"], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x1018, 0x36c2f657, 0x0, 0x8, 0x9, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x7b, &(0x7f0000000000)=r10, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xcfa4) socket$kcm(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x48) 2.177399387s ago: executing program 1 (id=2263): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0xf0, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0xfffffffffffffffc) 2.160155717s ago: executing program 3 (id=2254): sendmsg$unix(0xffffffffffffffff, 0x0, 0x41) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x54, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair(0x15, 0x6, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000000200)=""/64, 0x40}, {&(0x7f00000002c0)=""/71, 0x47}, {&(0x7f0000000580)=""/173, 0xad}], 0x4, &(0x7f0000000340)=""/42, 0x2a}, 0x41) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x20000000}, 0x404c0a0) sendmsg$kcm(r1, 0x0, 0x20044091) r2 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) socket$kcm(0xa, 0x3, 0x3a) socket$kcm(0xa, 0x3, 0x3a) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000380)="48000000140081fb7059ae08060c04000aff0f03000004000011000000006fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f", 0x48}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001b40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\a\x00\x00\x00\b \x00\x00\x00'], 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x30a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'dummy0\x00', @multicast}) 1.901532615s ago: executing program 4 (id=2256): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008000000000000009982ba10bda0fea82fe872cf7d11f31973e449eaa6a7a13775582e4039c896", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, 0x0, &(0x7f0000000200)=r1}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), 0x0}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r0, 0x20, 0x1, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 1.79990171s ago: executing program 1 (id=2257): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000080)="27050200160014000600002f86dd", 0x5ea}], 0x1}, 0x0) r3 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r2, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x9a, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}], 0x30, 0x0, 0x0, &(0x7f0000000440), 0x8, 0xc9, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000001900)="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", 0xf80}], 0x1, &(0x7f0000000980)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_retopts={{0x68, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x24, 0x7d, 0x3, 0xe, [{@broadcast, 0x1}, {@multicast2, 0x7ff}, {@empty}, {@remote, 0x800}]}, @lsrr={0x83, 0xb, 0x80, [@empty, @empty]}, @timestamp={0x44, 0x28, 0xdd, 0x0, 0x4, [0x2, 0x3, 0x2cdc9a90, 0x7, 0x479f, 0x5, 0x0, 0x0, 0xc7dc]}, @noop]}}}, @ip_retopts={{0x80, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0x12, 0x0, 0x8, [0x7]}, @cipso={0x86, 0x1f, 0x1, [{0x0, 0x10, "ba44c4be73f3dd93d5b5d0e51ecd"}, {0x2, 0x9, "aca731aa0e5490"}]}, @lsrr={0x83, 0x13, 0x52, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @rand_addr=0x64010102, @loopback]}, @noop, @ra={0x94, 0x4}, @lsrr={0x83, 0x23, 0xba, [@private=0xa010102, @rand_addr=0x64010102, @local, @private=0xa010102, @remote, @remote, @rand_addr=0x64010102, @local]}, @noop, @timestamp_prespec={0x44, 0xc, 0x93, 0x3, 0x8, [{@multicast1, 0x7ff}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x118}, 0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1e00000008000000060000000100000028410000", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="0003000000000000000000000d00008000"/28], 0x50) write$cgroup_freezer_state(r3, &(0x7f0000000400)='FROZEN\x00', 0x7) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340), 0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x8, 0x4d, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x5411, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x5761, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) 1.705908015s ago: executing program 0 (id=2258): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2, 0x4e20, @multicast2=0xe0000018}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x0) 1.590495169s ago: executing program 0 (id=2259): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xc, &(0x7f00000002c0)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x12, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1a, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000580)="b57e46e52d0b5a973432d9c501dfed712347018aab6cbce9f4d73bdc7f9553648ef14a75d0b79b60354c6431d78f8748ac8a0dcda5ffffff7f0d1096a4ce2c1e4f82c17c0117f3079e17d26bdb85731905d94465d47bfb04abe0b6a9dbd91b318e1ec520a0338fa00ba3b4aa049d2d2b941154f9b36f9cb88488ab02b96d8a99d6f53a11c97672ad8e01b7e291e20f670668d81a6f3952d057d5505eb61ae03da311e85c4a347ea251e70fe46794f2af5271c7bf9ca0a91e4cf8cd422c1ebc45ac30bcf8c39e097e966848dbe7ce02fbe506510fde737483fd808d69b2560c7bb690a399329b014fc95a71401a78fc05", 0xf0}], 0x2}, 0x800) r6 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x9, r6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r7, 0x2a, 0xfffffffffffffffc}, 0xf) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f0000000080)=0xe6) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef42b000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) close(r2) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0xffffffffffffffff, 0x1, 0x18}, 0xc) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="060000000400aec9450000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYBLOB='&\x00'/12, @ANYBLOB], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r11}, &(0x7f0000000000), &(0x7f0000000080)=r9}, 0x20) 1.518930057s ago: executing program 1 (id=2260): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000200)}, 0x20) 1.459341122s ago: executing program 3 (id=2261): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = getpid() r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000c1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@hci={0x1f, 0x3, 0x31}, 0x80, &(0x7f0000000500)=[{&(0x7f00000000c0)="b8b28225ea772f0daee8c7c98100", 0xe}], 0x1}, 0x4008014) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x4, 0x2, 0x1, 0x2, {0xa, 0x4e24, 0x2, @private0, 0x4c32}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000300)="3d24fb673072a2a8f513020b4f375a330ccd43750990a80ad5cf4364e66c5861dc6a228f0938ddc645952f7b2ec42e00896788f4a23c4d182448304499f88927e236cd0f2df04779909b415128f1d89305a57d573cc0b266933bd5c88f1350d3b6d1a77596eecfe82b9c22f9b3b43510c60238d74c29fd2aa867aeda75da2cdca050ee446fbd4e5be389dbafc0dd0185c9f6048cf6b69d534ab47b859dd1845cd2af78bb53644d5ed5fe142891e0eaaae849f1be6624a0f87f5633548cbca561ccbe16911942e2c660ca47f816af07d858a1d3192a85b43c8c23b5a4dae39dd7099121a812fd81c4df9d6db0ca46db94cd33af854ad78b8881", 0xf9}, {&(0x7f0000000580)="d7660f56f412453351e57bac95fc533ed358561b518b70fd55c616e9ff4fc652a4ad4c64c22907c325f4ee4409f8506a263d8f22a4311d5bf29452c959fd4ad771bed9c206108e1b78b804a6017dc820475199b6dac90a931a84cc7da5c6a4c9d3f227c23a2391a8887acad6577432de3462927a34176be277b0597be84f9a76bc5eb7bfabf63a76ba28bf57d912b0bf339b835cf738c78fa1d1a207a998", 0x9e}], 0x2, &(0x7f0000000640)=[{0xf8, 0x3a, 0x7f, "b8cc5ca12fd46748d180f837bb2418db3f1c2116d0d042f8378ae9a4be32146a369cabead908c889666d60f21239d147be1047301a0c63eb7b82ff9d7403153b5535e9ca745ba246e803c255cc65835e23d0e540c6f8c5a3b07e9f4693c8389665105b2e65e50e9ad1e351beb07e256f8af28e89575b33d1e861d292ae7d7d3d34cd14112a0d159f2e55a6f85c54c314f129ef9eae945983e69fee737f6b15447f42550e106eaea8877bfad21f76383482cd88847a4ad6dbd6313a06bc2dc290a7d2f4002d2633907e999b3930849fa59bd8184a8dc46fe557a6741b54769e1018cbc83b"}], 0xf8}, 0x2808) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xe48a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x80, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000035000b63717a3c4a01d8985b0808aa78", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x0, 0xff, 0x0, 0xff, 0x0, 0x0, 0x443, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x2, 0xfffffffffffffffe, 0x0, 0x3, 0x1ff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x800}, 0x0, 0x3, 0xffffffffffffffff, 0xa) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) 1.300176538s ago: executing program 1 (id=2262): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) 1.188942567s ago: executing program 2 (id=2264): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89fb, &(0x7f0000000900)={'bond0\x00', @random="0600042000"}) 1.064472799s ago: executing program 0 (id=2265): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) unlink(&(0x7f0000000140)='./cgroup\x00') 1.000142902s ago: executing program 1 (id=2266): socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x2, 0x8, 0x0, 0x8, 0x0, 0x7, 0x810, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffff9, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x4000, 0x2, 0x5, 0x4, 0x6, 0x8000, 0xfffb, 0x0, 0x5, 0x0, 0x4}, 0x0, 0x7, r0, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x3b70, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xb51}, 0x4507, 0x32, 0xfffffbff, 0x5, 0x0, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, r1, 0x9) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0xfffffffffffffe72, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008105e00212ba0d8105040a020200020f100b067c55a1bc000900b80006990200000015000500fc038178a80015000338004002000c0901ac040000d67f6f947a7100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000900)}, 0x811) recvmsg$unix(r3, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r4, 0x1, 0x41, &(0x7f0000000040), 0x4) sendmsg$kcm(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x4000080) recvmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2100) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0xa, 0x2, 0x3a) close(r6) socket$kcm(0x29, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="200000002000ff07090f9becdb4cb96b0a000000ff000001000000007bffd290", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4000002) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) getpid() bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 967.099745ms ago: executing program 3 (id=2267): socket$kcm(0x10, 0x0, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfa15, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x2112, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x11411d, 0x32, 0xfffffbff, 0x3, 0x2, 0x4, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90424fc60", 0x14}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) r4 = socket$kcm(0x1e, 0x4, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000140081044e81f782db44b9040a1d08023f000000040000a118000200ff020000000000000000000000000001a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb12d", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c04) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffc00, 0x2, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_config_ext={0x6, 0xffffffff}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r6, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 961.913616ms ago: executing program 2 (id=2268): r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x226b, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}) 960.868043ms ago: executing program 4 (id=2269): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x1, 0x2, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0x114187, 0x2e, 0xfffffbfe, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2641, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9d, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="f0f605748aed0000000000000c00000045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) 913.770513ms ago: executing program 2 (id=2270): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, 0x0, &(0x7f0000000200)=r1}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r8, r7, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r0, 0x20, 0x1, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 876.888788ms ago: executing program 0 (id=2271): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r0, 0x2000000, 0x38, 0x0, &(0x7f0000000900)="0000000000000000009358695a9ba265e01e980d0389fe1cb79883d266e6a67dc81085efed74b73e412514b206004527a9bb84d09fcf0449", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 632.7729ms ago: executing program 0 (id=2272): sendmsg$unix(0xffffffffffffffff, 0x0, 0x41) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x54, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair(0x15, 0x6, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000000200)=""/64, 0x40}, {&(0x7f00000002c0)=""/71, 0x47}, {&(0x7f0000000580)=""/173, 0xad}], 0x4, &(0x7f0000000340)=""/42, 0x2a}, 0x41) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x20000000}, 0x404c0a0) sendmsg$kcm(r1, 0x0, 0x20044091) r2 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) socket$kcm(0xa, 0x3, 0x3a) socket$kcm(0xa, 0x3, 0x3a) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000380)="48000000140081fb7059ae08060c04000aff0f03000004000011000000006fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f", 0x48}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001b40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\a\x00\x00\x00\b \x00\x00\x00'], 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x30a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'dummy0\x00', @multicast}) 579.096671ms ago: executing program 4 (id=2273): r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0x2b, 0x1, 0x0) close(r2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x5, 0x0, 0x0, 0x2}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x29, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='G', 0x1}], 0x1}, 0x480c0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r5}, 0x10) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={0x0, 0x3}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x2f9, 0x6488, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe10000baff632f77fb080660017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0xa9, 0x0, 0x0, 0x0, 0x20000000000, 0x10665, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9cc, 0x2, @perf_config_ext={0x10002, 0x7fffffff}, 0x201c, 0x800007d, 0x7ff, 0x6, 0x6, 0xf3a, 0x6, 0x0, 0x100, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0xfe33) 542.931381ms ago: executing program 3 (id=2274): socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5, 0x4}, {0x10000002, 0x5}], 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x7, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1010115000600142603600e120800040000001101a80016000a00034006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e43bf66f282ac027812cfbd3f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000040079102800000000001e5000000000000095000000000000"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001080)="d8000000180001004e81f782db4cb904021d0800fe007c05e8fe55a10a0012000200142603600e12080005000000000001000000e00002400500fa7c035c0461c1d67f6f94007134cf6efb80009a38b540a6ea553e437a0ef0a007a290457f0189b3050000006bbace8017cbec4c2ee5015030485bca8aa7cef4090000001fb7d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf51951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd64fa1dba9bfe4edef3d93452a92", 0xd5}], 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = getpid() sendmsg$inet(0xffffffffffffffff, 0x0, 0x34004000) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000780)={r6, r1, 0x0, 0x1, &(0x7f0000000740)='\x00'}, 0x30) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000200)={r2}) socket$kcm(0x10, 0x2, 0x4) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r5, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0x44, &(0x7f0000000380), 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x12, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r7, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@ifindex=r9, 0xffffffffffffffff, 0x1, 0xee075bd53e4c8bf6, 0x0, @void, @void, @void, @value=r8}, 0x20) socket$kcm(0x2, 0x1000000000000002, 0x0) close(r2) 290.867959ms ago: executing program 0 (id=2275): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80002, 0xffff, 0x0, 0x3, 0x0, 0x9}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socket$kcm(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="660a00000000006110780000000000180000000000000000000000000000009500000000000000be988411d92bd815f30ad0d42a74df9f331210d0a7155c533e231ec3ee6f4ef9f6451f21f4354c00f76b8d8e6a5875cc47373d60ca01c307132f11a2a2f5b5596b1aa6a8ae8ad42d2df97feff78d7026b2b760e5bfa07dfb8ddd38ab8deb6af873080797703a25cc8dc323ecd359747c92cfb152e7c581f9e55b50168e7cf3f351b901d6ca99b938da1a9db8e1cbe4d4ce3a2bba00734e3313b9e518ebe21728acf19b34a8a3a5cc6642072341ef2d2a349ccea8d1c334dc60bef820a0"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x80088, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x7fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/3112], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff0b076859268cb89e14f088a847", 0x0, 0xf00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000300)=0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$kcm(0x2, 0x2, 0x0) 284.293049ms ago: executing program 3 (id=2276): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000011000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 228.623272ms ago: executing program 2 (id=2277): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000180)=[{&(0x7f0000000300)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a8001600200004400400e000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x12b}], 0x1}, 0x0) 216.033347ms ago: executing program 3 (id=2278): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = getpid() r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000c1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@hci={0x1f, 0x3, 0x31}, 0x80, &(0x7f0000000500)=[{&(0x7f00000000c0)="b8b28225ea772f0daee8c7c98100", 0xe}], 0x1}, 0x4008014) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x4, 0x2, 0x1, 0x2, {0xa, 0x4e24, 0x2, @private0, 0x4c32}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000300)="3d24fb673072a2a8f513020b4f375a330ccd43750990a80ad5cf4364e66c5861dc6a228f0938ddc645952f7b2ec42e00896788f4a23c4d182448304499f88927e236cd0f2df04779909b415128f1d89305a57d573cc0b266933bd5c88f1350d3b6d1a77596eecfe82b9c22f9b3b43510c60238d74c29fd2aa867aeda75da2cdca050ee446fbd4e5be389dbafc0dd0185c9f6048cf6b69d534ab47b859dd1845cd2af78bb53644d5ed5fe142891e0eaaae849f1be6624a0f87f5633548cbca561ccbe16911942e2c660ca47f816af07d858a1d3192a85b43c8c23b5a4dae39dd7099121a812fd81c4df9d6db0ca46db94cd33af854ad78b8881", 0xf9}, {&(0x7f0000000580)="d7660f56f412453351e57bac95fc533ed358561b518b70fd55c616e9ff4fc652a4ad4c64c22907c325f4ee4409f8506a263d8f22a4311d5bf29452c959fd4ad771bed9c206108e1b78b804a6017dc820475199b6dac90a931a84cc7da5c6a4c9d3f227c23a2391a8887acad6577432de3462927a34176be277b0597be84f9a76bc5eb7bfabf63a76ba28bf57d912b0bf339b835cf738c78fa1d1a207a998", 0x9e}], 0x2, &(0x7f0000000640)=[{0xf8, 0x3a, 0x7f, "b8cc5ca12fd46748d180f837bb2418db3f1c2116d0d042f8378ae9a4be32146a369cabead908c889666d60f21239d147be1047301a0c63eb7b82ff9d7403153b5535e9ca745ba246e803c255cc65835e23d0e540c6f8c5a3b07e9f4693c8389665105b2e65e50e9ad1e351beb07e256f8af28e89575b33d1e861d292ae7d7d3d34cd14112a0d159f2e55a6f85c54c314f129ef9eae945983e69fee737f6b15447f42550e106eaea8877bfad21f76383482cd88847a4ad6dbd6313a06bc2dc290a7d2f4002d2633907e999b3930849fa59bd8184a8dc46fe557a6741b54769e1018cbc83b"}], 0xf8}, 0x2808) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xe48a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x80, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000035000b63717a3c4a01d8985b0808aa78", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x0, 0xff, 0x0, 0xff, 0x0, 0x0, 0x443, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x2, 0xfffffffffffffffe, 0x0, 0x3, 0x1ff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x800}, 0x0, 0x3, 0xffffffffffffffff, 0xa) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) 100.920788ms ago: executing program 1 (id=2279): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x102802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@cgroup, 0xffffffffffffffff, 0x37, 0x2, 0xffffffffffffffff, @void, @value}, 0x53) 0s ago: executing program 2 (id=2280): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008000000000000009982ba10bda0fea82fe872cf7d11f31973e449eaa6a7a13775582e4039c896", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, 0x0, &(0x7f0000000200)=r1}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, 0x0, 0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r8, r7, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r0, 0x20, 0x1, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) kernel console output (not intermixed with test programs): dv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.677035][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.684258][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.693607][ T5152] Bluetooth: hci3: command tx timeout [ 81.710514][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.728987][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.736411][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.762505][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.773321][ T5152] Bluetooth: hci4: command tx timeout [ 81.789462][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.796937][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.822898][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.864235][ T5851] team0: Port device team_slave_0 added [ 81.883212][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.890246][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.917306][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.966086][ T5851] team0: Port device team_slave_1 added [ 81.977852][ T5834] hsr_slave_0: entered promiscuous mode [ 81.984961][ T5834] hsr_slave_1: entered promiscuous mode [ 81.991959][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.998980][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.024933][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.096891][ T5843] hsr_slave_0: entered promiscuous mode [ 82.103054][ T5843] hsr_slave_1: entered promiscuous mode [ 82.109950][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.117894][ T5843] Cannot create hsr debugfs directory [ 82.139996][ T5848] hsr_slave_0: entered promiscuous mode [ 82.146535][ T5848] hsr_slave_1: entered promiscuous mode [ 82.152614][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.160205][ T5848] Cannot create hsr debugfs directory [ 82.179405][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.186717][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.213616][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.226156][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.233114][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.259103][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.350172][ T5835] hsr_slave_0: entered promiscuous mode [ 82.356594][ T5835] hsr_slave_1: entered promiscuous mode [ 82.362718][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.370442][ T5835] Cannot create hsr debugfs directory [ 82.495575][ T5851] hsr_slave_0: entered promiscuous mode [ 82.501831][ T5851] hsr_slave_1: entered promiscuous mode [ 82.513821][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.521413][ T5851] Cannot create hsr debugfs directory [ 82.929730][ T5834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.944143][ T5834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.960527][ T5834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.971374][ T5834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.030505][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.050418][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.070074][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.097102][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.136057][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.167749][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.178111][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.197703][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.278568][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.309473][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.336084][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.378274][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.409138][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.439940][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.448222][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.473809][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.488550][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.509065][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.519130][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.534743][ T3004] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.542040][ T3004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.573704][ T3004] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.580805][ T3004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.622673][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.679490][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.686640][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.704563][ T5152] Bluetooth: hci1: command tx timeout [ 83.710024][ T5152] Bluetooth: hci2: command tx timeout [ 83.716396][ T5847] Bluetooth: hci0: command tx timeout [ 83.725653][ T3004] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.732852][ T3004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.764880][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.774004][ T5152] Bluetooth: hci3: command tx timeout [ 83.858472][ T5152] Bluetooth: hci4: command tx timeout [ 83.887740][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.912267][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.919491][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.948892][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.001063][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.008221][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.061352][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.082367][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.129784][ T2987] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.136993][ T2987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.191633][ T2987] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.198816][ T2987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.241656][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.316641][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.367644][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.408715][ T2987] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.415963][ T2987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.480283][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.487507][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.694250][ T5843] veth0_vlan: entered promiscuous mode [ 84.717060][ T5843] veth1_vlan: entered promiscuous mode [ 84.739809][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.778535][ T5834] veth0_vlan: entered promiscuous mode [ 84.792392][ T5834] veth1_vlan: entered promiscuous mode [ 84.817600][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.898588][ T5843] veth0_macvtap: entered promiscuous mode [ 84.926979][ T5843] veth1_macvtap: entered promiscuous mode [ 84.961589][ T5834] veth0_macvtap: entered promiscuous mode [ 84.979939][ T5835] veth0_vlan: entered promiscuous mode [ 84.999876][ T5834] veth1_macvtap: entered promiscuous mode [ 85.047181][ T5835] veth1_vlan: entered promiscuous mode [ 85.058397][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.084850][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.096712][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.109283][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.120480][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.139042][ T5848] veth0_vlan: entered promiscuous mode [ 85.148561][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.160509][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.172016][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.182993][ T5834] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.192723][ T5834] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.201595][ T5834] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.210414][ T5834] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.238638][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.280547][ T5848] veth1_vlan: entered promiscuous mode [ 85.298656][ T5843] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.308920][ T5843] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.318201][ T5843] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.327575][ T5843] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.360655][ T5835] veth0_macvtap: entered promiscuous mode [ 85.392295][ T5835] veth1_macvtap: entered promiscuous mode [ 85.442353][ T5851] veth0_vlan: entered promiscuous mode [ 85.453074][ T5848] veth0_macvtap: entered promiscuous mode [ 85.469801][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.480490][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.490617][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.501124][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.512117][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.523674][ T5848] veth1_macvtap: entered promiscuous mode [ 85.531459][ T2987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.535046][ T5851] veth1_vlan: entered promiscuous mode [ 85.543256][ T2987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.580608][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.591193][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.601599][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.612231][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.624771][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.637534][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.646480][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.655556][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.664338][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.738911][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.749729][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.761432][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.771942][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.773609][ T5152] Bluetooth: hci1: command tx timeout [ 85.782232][ T5847] Bluetooth: hci2: command tx timeout [ 85.787272][ T5840] Bluetooth: hci0: command tx timeout [ 85.798130][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.809146][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.820449][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.830816][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.841614][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.852339][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.863946][ T5847] Bluetooth: hci3: command tx timeout [ 85.867026][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.880444][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.891020][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.902368][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.922290][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.935916][ T5847] Bluetooth: hci4: command tx timeout [ 85.939742][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.946597][ T5848] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.948835][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.966639][ T5848] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.975958][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.976052][ T5848] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.991983][ T5848] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.072498][ T5851] veth0_macvtap: entered promiscuous mode [ 86.101511][ T2987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.110635][ T2987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.129734][ T5851] veth1_macvtap: entered promiscuous mode [ 86.144529][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.161389][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.172331][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.183548][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.195516][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.205407][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.216220][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.226124][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.236687][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.247921][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.285588][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.297628][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.308977][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.319699][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.329683][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.340654][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.350757][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.361711][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.378560][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.424494][ T5851] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.444460][ T5851] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.457520][ T5851] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.468338][ T5851] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.499423][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.511993][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.622823][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.649385][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.662008][ C1] hrtimer: interrupt took 25795 ns [ 86.762846][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.799006][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.806793][ T5922] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.4'. [ 87.012209][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.036559][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.044961][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.070226][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.257511][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.297217][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.434596][ T5932] netlink: 'syz.4.8': attribute type 3 has an invalid length. [ 87.474738][ T5932] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.8'. [ 87.854523][ T5847] Bluetooth: hci2: command tx timeout [ 87.860292][ T5847] Bluetooth: hci1: command tx timeout [ 87.866571][ T5847] Bluetooth: hci0: command tx timeout [ 87.932269][ T5950] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 87.953029][ T5152] Bluetooth: hci3: command tx timeout [ 88.011936][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.023455][ T5152] Bluetooth: hci4: command tx timeout [ 88.036008][ T5950] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 88.167683][ T5956] bond0: entered promiscuous mode [ 88.172855][ T5956] bond_slave_0: entered promiscuous mode [ 88.212870][ T5956] bond_slave_1: entered promiscuous mode [ 88.222865][ T5152] Bluetooth: hci3: unexpected event 0x17 length: 15 > 6 [ 88.250150][ T5956] batadv0: entered promiscuous mode [ 88.330589][ T5961] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.581001][ T5967] Zero length message leads to an empty skb [ 88.754139][ T5971] warning: `syz.3.17' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 89.024984][ T5971] netlink: 'syz.3.17': attribute type 10 has an invalid length. [ 89.167441][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.193568][ T5971] bridge_slave_1: left allmulticast mode [ 89.222985][ T5971] bridge_slave_1: left promiscuous mode [ 89.293506][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.344277][ T5971] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 89.395234][ C1] Illegal XDP return value 16128 on prog (id 14) dev bridge_slave_1, expect packet loss! [ 89.404633][ T5981] syz.4.20 uses obsolete (PF_INET,SOCK_PACKET) [ 90.189399][ T5992] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.24'. [ 90.224037][ T5991] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.24'. [ 90.457201][ T5994] netlink: 'syz.0.25': attribute type 3 has an invalid length. [ 90.553417][ T5994] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.25'. [ 90.789259][ T6008] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 90.811822][ T6008] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 91.468575][ T6020] netlink: 825 bytes leftover after parsing attributes in process `syz.3.33'. [ 91.553173][ T6020] netlink: 130144 bytes leftover after parsing attributes in process `syz.3.33'. [ 91.767078][ T1208] cfg80211: failed to load regulatory.db [ 91.859033][ T6028] netlink: 188 bytes leftover after parsing attributes in process `syz.2.35'. [ 93.083327][ T5152] Bluetooth: hci4: unexpected event 0x32 length: 15 > 9 [ 93.254314][ T6051] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.43'. [ 93.277222][ T6056] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.329541][ T6036] syz.4.37 (6036) used greatest stack depth: 19296 bytes left [ 93.435455][ T6049] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.43'. [ 97.338717][ T6109] netlink: 'syz.4.60': attribute type 39 has an invalid length. [ 97.825376][ T6109] veth0_macvtap: left promiscuous mode [ 98.839865][ T6128] netlink: 'syz.4.66': attribute type 29 has an invalid length. [ 98.916526][ T6128] netlink: 'syz.4.66': attribute type 13 has an invalid length. [ 98.950948][ T6128] netlink: 'syz.4.66': attribute type 58 has an invalid length. [ 99.014936][ T6128] netlink: 152 bytes leftover after parsing attributes in process `syz.4.66'. [ 104.156412][ T6165] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.75'. [ 105.015072][ T6179] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.247877][ T6179] netlink: 10 bytes leftover after parsing attributes in process `syz.0.79'. [ 105.468293][ T6185] netlink: 'syz.2.81': attribute type 13 has an invalid length. [ 105.527454][ T6179] syz.0.79 (6179) used greatest stack depth: 19200 bytes left [ 105.579479][ T6185] macvtap0: entered promiscuous mode [ 105.778601][ T6185] macvtap0: refused to change device tx_queue_len [ 105.924738][ T6195] netlink: 'syz.4.85': attribute type 10 has an invalid length. [ 106.022054][ T6195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.065468][ T6204] netlink: 'syz.1.86': attribute type 10 has an invalid length. [ 106.087334][ T6195] team0: Port device batadv0 added [ 106.108338][ T6204] batman_adv: batadv0: Adding interface: wlan0 [ 106.122266][ T6204] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.163077][ T6204] batman_adv: batadv0: Interface activated: wlan0 [ 106.309874][ T6195] syz.4.85 (6195) used greatest stack depth: 19048 bytes left [ 106.611628][ T6216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 106.619445][ T6216] IPv6: NLM_F_CREATE should be set when creating new route [ 106.627508][ T6216] IPv6: NLM_F_CREATE should be set when creating new route [ 106.635469][ T6216] IPv6: NLM_F_CREATE should be set when creating new route [ 107.851033][ T6284] netlink: 'syz.4.98': attribute type 10 has an invalid length. [ 107.919679][ T6284] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 108.654119][ T6305] netlink: 'syz.1.108': attribute type 10 has an invalid length. [ 108.717658][ T6308] netlink: 'syz.1.108': attribute type 10 has an invalid length. [ 108.849099][ T6305] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.884122][ T6305] team0: entered promiscuous mode [ 108.889610][ T6305] team_slave_0: entered promiscuous mode [ 108.902990][ T6305] team_slave_1: entered promiscuous mode [ 108.940448][ T6305] bond0: (slave team0): Enslaving as an active interface with an up link [ 108.946693][ T6307] sctp: [Deprecated]: syz.0.109 (pid 6307) Use of int in max_burst socket option deprecated. [ 108.946693][ T6307] Use struct sctp_assoc_value instead [ 109.059830][ T6308] bond0: (slave team0): Releasing backup interface [ 109.172925][ T6308] team0: left promiscuous mode [ 109.243520][ T6308] team_slave_0: left promiscuous mode [ 109.255017][ T6308] team_slave_1: left promiscuous mode [ 109.292395][ T6318] netlink: 156 bytes leftover after parsing attributes in process `syz.2.113'. [ 109.311363][ T6308] bridge0: port 3(team0) entered blocking state [ 109.338788][ T6308] bridge0: port 3(team0) entered disabled state [ 109.385006][ T6308] team0: entered allmulticast mode [ 109.462132][ T6308] team_slave_0: entered allmulticast mode [ 109.510933][ T6308] team_slave_1: entered allmulticast mode [ 109.549322][ T6308] team0: entered promiscuous mode [ 109.563403][ T6308] team_slave_0: entered promiscuous mode [ 109.583575][ T6308] team_slave_1: entered promiscuous mode [ 109.592572][ T6319] : renamed from bond0 (while UP) [ 109.664443][ T6305] syz.1.108 (6305) used greatest stack depth: 18624 bytes left [ 109.747867][ T6325] delete_channel: no stack [ 109.763204][ T6325] delete_channel: no stack [ 110.008549][ T6333] netlink: 144 bytes leftover after parsing attributes in process `syz.3.118'. [ 110.727936][ T6351] netlink: 830 bytes leftover after parsing attributes in process `syz.2.124'. [ 111.020613][ T6354] netlink: 'syz.1.126': attribute type 39 has an invalid length. [ 111.108920][ T6358] netlink: 'syz.3.127': attribute type 10 has an invalid length. [ 111.165542][ T6363] netlink: 'syz.3.127': attribute type 10 has an invalid length. [ 111.304945][ T6360] netlink: 40 bytes leftover after parsing attributes in process `syz.2.128'. [ 111.315687][ T6363] bridge0: port 2(team0) entered blocking state [ 111.331764][ T6363] bridge0: port 2(team0) entered disabled state [ 111.339748][ T6363] team0: entered allmulticast mode [ 111.352953][ T6363] team_slave_0: entered allmulticast mode [ 111.362056][ T6363] team_slave_1: entered allmulticast mode [ 111.399351][ T6363] team0: entered promiscuous mode [ 111.421908][ T6363] team_slave_0: entered promiscuous mode [ 111.471377][ T6370] netlink: 'syz.0.131': attribute type 21 has an invalid length. [ 111.578936][ T6363] team_slave_1: entered promiscuous mode [ 111.674579][ T6358] team0: left allmulticast mode [ 111.695686][ T6358] team_slave_0: left allmulticast mode [ 111.733698][ T6358] team_slave_1: left allmulticast mode [ 111.746849][ T6358] team0: left promiscuous mode [ 111.761287][ T6358] team_slave_0: left promiscuous mode [ 111.769972][ T6358] team_slave_1: left promiscuous mode [ 111.779812][ T6358] bridge0: port 2(team0) entered disabled state [ 112.034378][ T6358] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.239561][ T6358] bond0: (slave team0): Enslaving as an active interface with an up link [ 112.258603][ T6360] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.312133][ T6360] bridge_slave_0 (unregistering): left allmulticast mode [ 112.323327][ T6360] bridge_slave_0 (unregistering): left promiscuous mode [ 112.330631][ T6360] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.525741][ T6396] netlink: 830 bytes leftover after parsing attributes in process `syz.0.140'. [ 113.763709][ T6394] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 113.807605][ T6394] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 113.860189][ T6403] netlink: 188 bytes leftover after parsing attributes in process `syz.0.143'. [ 114.722038][ T6413] netlink: 'syz.2.146': attribute type 29 has an invalid length. [ 114.745676][ T6413] netlink: 'syz.2.146': attribute type 3 has an invalid length. [ 114.784044][ T6413] netlink: 132 bytes leftover after parsing attributes in process `syz.2.146'. [ 115.395252][ T6431] netlink: 144 bytes leftover after parsing attributes in process `syz.0.151'. [ 115.981826][ T6440] sctp: [Deprecated]: syz.0.155 (pid 6440) Use of int in max_burst socket option deprecated. [ 115.981826][ T6440] Use struct sctp_assoc_value instead [ 117.333399][ T6458] netlink: 188 bytes leftover after parsing attributes in process `syz.1.159'. [ 117.490703][ T6460] netlink: 'syz.3.160': attribute type 29 has an invalid length. [ 117.501324][ T6460] netlink: 'syz.3.160': attribute type 3 has an invalid length. [ 117.510984][ T6460] netlink: 132 bytes leftover after parsing attributes in process `syz.3.160'. [ 118.027447][ T6478] Dead loop on virtual device ip6_vti0, fix it urgently! [ 118.344081][ T6485] netlink: 'syz.4.169': attribute type 10 has an invalid length. [ 121.777920][ T6485] hsr_slave_0 (unregistering): left promiscuous mode [ 122.933069][ T6525] netlink: 'syz.1.178': attribute type 29 has an invalid length. [ 122.969156][ T6525] netlink: 'syz.1.178': attribute type 3 has an invalid length. [ 122.982790][ T6525] netlink: 132 bytes leftover after parsing attributes in process `syz.1.178'. [ 123.077010][ T6527] netlink: 'syz.3.177': attribute type 10 has an invalid length. [ 123.252477][ T6527] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 123.677180][ T6546] netlink: 'syz.2.184': attribute type 64 has an invalid length. [ 124.461006][ T6561] netlink: 'syz.1.189': attribute type 10 has an invalid length. [ 125.516074][ T6581] netlink: 'syz.0.196': attribute type 29 has an invalid length. [ 125.543842][ T6581] netlink: 'syz.0.196': attribute type 3 has an invalid length. [ 125.597761][ T6581] netlink: 132 bytes leftover after parsing attributes in process `syz.0.196'. [ 126.091579][ T6591] sctp: [Deprecated]: syz.2.201 (pid 6591) Use of int in max_burst socket option deprecated. [ 126.091579][ T6591] Use struct sctp_assoc_value instead [ 126.243412][ T6594] netlink: 'syz.0.202': attribute type 64 has an invalid length. [ 126.570995][ T6601] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.205'. [ 127.875608][ T6630] netlink: 'syz.1.215': attribute type 10 has an invalid length. [ 128.423398][ T6630] hsr_slave_0 (unregistering): left promiscuous mode [ 128.882693][ T6644] netlink: 'syz.0.231': attribute type 16 has an invalid length. [ 128.904005][ T6644] netlink: 'syz.0.231': attribute type 3 has an invalid length. [ 128.911750][ T6644] netlink: 132 bytes leftover after parsing attributes in process `syz.0.231'. [ 128.949183][ T6647] veth1_to_bond: entered promiscuous mode [ 128.957903][ T6647] veth1_to_bond: entered allmulticast mode [ 130.147710][ T6681] netlink: 'syz.1.227': attribute type 11 has an invalid length. [ 130.156011][ T6681] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.227'. [ 130.332979][ T6673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.196743][ T6692] netlink: 'syz.2.234': attribute type 10 has an invalid length. [ 131.287089][ T6692] hsr_slave_0 (unregistering): left promiscuous mode [ 131.382436][ T6694] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.244'. [ 131.712633][ T6704] mac80211_hwsim hwsim5 O3c: renamed from wlan1 (while UP) [ 131.743139][ T6699] netlink: 'syz.0.247': attribute type 10 has an invalid length. [ 131.918307][ T6707] netlink: 'syz.4.239': attribute type 29 has an invalid length. [ 131.926777][ T6707] netlink: 'syz.4.239': attribute type 3 has an invalid length. [ 131.941894][ T6707] netlink: 132 bytes leftover after parsing attributes in process `syz.4.239'. [ 131.978932][ T6699] hsr_slave_0 (unregistering): left promiscuous mode [ 132.701028][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.708185][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.344128][ T6749] netlink: 'syz.1.251': attribute type 10 has an invalid length. [ 134.608228][ T6749] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.635295][ T6749] bridge_slave_1: left allmulticast mode [ 134.641159][ T6749] bridge_slave_1: left promiscuous mode [ 134.651339][ T6749] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.671605][ T6749] bridge_slave_1: entered promiscuous mode [ 134.689994][ T6749] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 134.969432][ T6759] netlink: 'syz.4.257': attribute type 29 has an invalid length. [ 135.013749][ T6759] netlink: 'syz.4.257': attribute type 3 has an invalid length. [ 135.075083][ T6759] netlink: 132 bytes leftover after parsing attributes in process `syz.4.257'. [ 135.308170][ T6763] netlink: 'syz.2.258': attribute type 10 has an invalid length. [ 135.347164][ T6763] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 135.429053][ T6774] netlink: 'syz.4.262': attribute type 10 has an invalid length. [ 135.460116][ T6772] netlink: 825 bytes leftover after parsing attributes in process `syz.1.261'. [ 135.483451][ T6772] netlink: 130144 bytes leftover after parsing attributes in process `syz.1.261'. [ 135.496113][ T6774] team0: Port device batadv0 removed [ 135.519867][ T6774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.553900][ T6774] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 135.572465][ T6775] bond0: entered promiscuous mode [ 135.578727][ T6775] bond_slave_0: entered promiscuous mode [ 135.659167][ T6775] bond_slave_1: entered promiscuous mode [ 135.693657][ T6775] dummy0: entered promiscuous mode [ 135.708231][ T6775] batadv0: entered promiscuous mode [ 135.816810][ T6783] netlink: 'syz.3.264': attribute type 64 has an invalid length. [ 136.096998][ T6788] sctp: [Deprecated]: syz.1.266 (pid 6788) Use of int in max_burst socket option deprecated. [ 136.096998][ T6788] Use struct sctp_assoc_value instead [ 136.910186][ T6817] netlink: 'syz.0.269': attribute type 10 has an invalid length. [ 137.043443][ T6821] netlink: 'syz.0.269': attribute type 10 has an invalid length. [ 137.120570][ T6817] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.152963][ T6817] bond0: (slave team0): Enslaving as an active interface with an up link [ 137.488556][ T6821] bond0: (slave team0): Releasing backup interface [ 137.521980][ T6821] bridge0: port 3(team0) entered blocking state [ 137.528579][ T6821] bridge0: port 3(team0) entered disabled state [ 137.543452][ T6821] team0: entered allmulticast mode [ 137.549459][ T6821] team_slave_0: entered allmulticast mode [ 137.557743][ T6821] team_slave_1: entered allmulticast mode [ 137.836420][ T6821] team0: entered promiscuous mode [ 138.071410][ T6821] team_slave_0: entered promiscuous mode [ 138.081218][ T6821] team_slave_1: entered promiscuous mode [ 139.390813][ T6862] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 139.465769][ T6862] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 141.516408][ T6920] netlink: 144 bytes leftover after parsing attributes in process `syz.1.296'. [ 143.354508][ T6932] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 143.368219][ T6932] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 143.795145][ T6961] netlink: 188 bytes leftover after parsing attributes in process `syz.1.310'. [ 144.471772][ T6976] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.316'. [ 144.519669][ T6975] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.316'. [ 144.937131][ T6989] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 144.947666][ T6989] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 145.443452][ T7001] netlink: 188 bytes leftover after parsing attributes in process `syz.3.326'. [ 146.832769][ T7030] netlink: 'syz.3.338': attribute type 39 has an invalid length. [ 146.872781][ T7030] veth0_macvtap: left promiscuous mode [ 147.972445][ T7041] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 147.982370][ T7041] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 148.436847][ T7059] netlink: 'syz.4.344': attribute type 13 has an invalid length. [ 148.531697][ T7058] netlink: 'syz.0.346': attribute type 10 has an invalid length. [ 148.607501][ T7058] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.638586][ T7058] bridge_slave_1: left allmulticast mode [ 148.671266][ T7058] bridge_slave_1: left promiscuous mode [ 148.698194][ T7058] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.813859][ T7058] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 149.221139][ T7065] netlink: 10 bytes leftover after parsing attributes in process `syz.1.347'. [ 149.800430][ T7083] netlink: 'syz.1.355': attribute type 39 has an invalid length. [ 149.881526][ T7083] veth0_macvtap: left promiscuous mode [ 150.398327][ T7092] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.356'. [ 150.502057][ T7094] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 150.620466][ T7094] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 152.736992][ T7142] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.368'. [ 152.750396][ T7139] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.368'. [ 153.023117][ T7146] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.370'. [ 153.072176][ T7149] netlink: 44 bytes leftover after parsing attributes in process `syz.1.372'. [ 153.108334][ T7149] netlink: 'syz.1.372': attribute type 3 has an invalid length. [ 153.527744][ T7166] netlink: 68 bytes leftover after parsing attributes in process `syz.2.377'. [ 153.599946][ T7158] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 153.601710][ T7162] mac80211_hwsim hwsim3 O3c: renamed from wlan1 (while UP) [ 153.609591][ T7158] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 154.380606][ T7169] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 154.388434][ T7169] IPv6: NLM_F_CREATE should be set when creating new route [ 154.396614][ T7169] IPv6: NLM_F_CREATE should be set when creating new route [ 154.404420][ T7169] IPv6: NLM_F_CREATE should be set when creating new route [ 154.796011][ T7181] netlink: 'syz.0.382': attribute type 11 has an invalid length. [ 154.810941][ T7181] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.382'. [ 154.849559][ T7180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.892520][ T7198] netlink: 'syz.1.388': attribute type 10 has an invalid length. [ 155.944449][ T7198] bond0: (slave batadv0): Releasing backup interface [ 155.980366][ T7198] batadv0: left promiscuous mode [ 156.029033][ T7198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.042883][ T7198] batadv0: entered promiscuous mode [ 156.051328][ T7198] batadv0: entered allmulticast mode [ 156.067266][ T7198] team0: Port device batadv0 added [ 156.103220][ T7204] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 156.134958][ T7198] syz.1.388 (7198) used greatest stack depth: 17448 bytes left [ 156.187177][ T7204] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 156.557732][ T7209] netlink: 'syz.1.392': attribute type 29 has an invalid length. [ 156.655711][ T7209] netlink: 'syz.1.392': attribute type 13 has an invalid length. [ 156.743373][ T7209] netlink: 'syz.1.392': attribute type 58 has an invalid length. [ 156.783369][ T36] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 156.792772][ T36] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 156.827184][ T7209] netlink: 152 bytes leftover after parsing attributes in process `syz.1.392'. [ 157.190086][ T7222] mac80211_hwsim hwsim9 O3c: renamed from wlan1 [ 158.696554][ T7247] netlink: 'syz.2.402': attribute type 10 has an invalid length. [ 158.741488][ T7247] team0: Port device geneve1 added [ 160.811516][ T7294] netlink: 'syz.2.416': attribute type 1 has an invalid length. [ 160.894290][ T7294] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.416'. [ 161.091941][ T7299] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 161.100125][ T7299] IPv6: NLM_F_CREATE should be set when creating new route [ 161.108295][ T7299] IPv6: NLM_F_CREATE should be set when creating new route [ 161.466858][ T7310] netlink: 'syz.1.420': attribute type 10 has an invalid length. [ 161.495707][ T7310] veth0_vlan: left promiscuous mode [ 161.506503][ T7310] veth0_vlan: entered promiscuous mode [ 161.519302][ T7310] team0: Device veth0_vlan failed to register rx_handler [ 162.715637][ T7338] pim6reg1: entered promiscuous mode [ 162.721106][ T7338] pim6reg1: entered allmulticast mode [ 163.794078][ T6262] failed to send hello msg [ 163.810665][ T6262] failed while handling packet from 1:16384 [ 164.382992][ T7371] netlink: 132 bytes leftover after parsing attributes in process `syz.4.444'. [ 164.777673][ T7379] netlink: 'syz.1.448': attribute type 10 has an invalid length. [ 164.818502][ T7379] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.170632][ T7379] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.181583][ T7379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.198407][ T7394] netlink: 'syz.0.453': attribute type 10 has an invalid length. [ 165.370891][ T7379] bridge0: entered promiscuous mode [ 165.398478][ T7379] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 165.493577][ T7378] delete_channel: no stack [ 165.710412][ T7394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.762061][ T7394] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 165.872123][ T7398] bond0: entered promiscuous mode [ 165.902332][ T7398] bond_slave_0: entered promiscuous mode [ 165.945016][ T7398] bond_slave_1: entered promiscuous mode [ 166.039289][ T7398] bridge_slave_1: entered promiscuous mode [ 166.076533][ T7398] batadv0: entered promiscuous mode [ 166.282959][ T7407] netlink: 'syz.2.455': attribute type 29 has an invalid length. [ 166.366899][ T7407] netlink: 'syz.2.455': attribute type 29 has an invalid length. [ 167.397280][ T5152] Bluetooth: hci4: unexpected event 0x14 length: 15 > 6 [ 168.151627][ T7428] netlink: 'syz.4.465': attribute type 28 has an invalid length. [ 168.253385][ T7428] netlink: 'syz.4.465': attribute type 29 has an invalid length. [ 168.262324][ T7428] netlink: 132 bytes leftover after parsing attributes in process `syz.4.465'. [ 168.764214][ T7445] netlink: 'syz.4.470': attribute type 10 has an invalid length. [ 168.848619][ T7445] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.875989][ T7445] bridge_slave_1: left allmulticast mode [ 168.902111][ T7445] bridge_slave_1: left promiscuous mode [ 168.919839][ T7445] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.987047][ T7445] bridge_slave_1: entered promiscuous mode [ 169.003735][ T7445] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 170.108626][ T7456] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 170.115980][ T7456] IPv6: NLM_F_CREATE should be set when creating new route [ 170.123332][ T7456] IPv6: NLM_F_CREATE should be set when creating new route [ 170.130575][ T7456] IPv6: NLM_F_CREATE should be set when creating new route [ 170.605062][ T7481] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.483'. [ 171.012408][ T7492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.486'. [ 171.031550][ T7492] netlink: 'syz.3.486': attribute type 21 has an invalid length. [ 171.063792][ T7492] netlink: 'syz.3.486': attribute type 1 has an invalid length. [ 173.517662][ T7537] netlink: 96168 bytes leftover after parsing attributes in process `syz.1.501'. [ 174.311373][ T7524] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 174.321433][ T7524] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 174.898584][ T7552] veth1_macvtap: left promiscuous mode [ 174.923214][ T7552] macsec0: entered allmulticast mode [ 175.878073][ T7565] netlink: 'syz.3.510': attribute type 2 has an invalid length. [ 175.886778][ T7565] netlink: 'syz.3.510': attribute type 1 has an invalid length. [ 175.895098][ T7565] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.510'. [ 175.927721][ T7565] block nbd5: not configured, cannot reconfigure [ 176.170160][ T7573] netlink: 'syz.0.513': attribute type 6 has an invalid length. [ 176.204786][ T7573] netlink: 168 bytes leftover after parsing attributes in process `syz.0.513'. [ 176.216635][ T7575] netlink: 'syz.4.514': attribute type 10 has an invalid length. [ 176.242473][ T7575] netlink: 40 bytes leftover after parsing attributes in process `syz.4.514'. [ 176.410568][ T7575] batadv0: entered allmulticast mode [ 176.430493][ T7575] bond0: (slave batadv0): Releasing backup interface [ 176.446363][ T7575] bridge0: port 2(batadv0) entered blocking state [ 176.465956][ T7575] bridge0: port 2(batadv0) entered disabled state [ 176.649716][ T7585] netlink: 180 bytes leftover after parsing attributes in process `syz.0.516'. [ 176.751019][ T6264] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 176.760411][ T6264] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 176.972272][ T7592] netlink: 'syz.4.520': attribute type 6 has an invalid length. [ 177.007395][ T36] failed to send hello msg [ 177.011947][ T36] failed while handling packet from 1:16384 [ 177.204725][ T7590] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.519'. [ 177.527773][ T7610] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.526'. [ 177.683699][ T7614] netlink: 96168 bytes leftover after parsing attributes in process `syz.4.527'. [ 177.897005][ T7617] netlink: 'syz.3.528': attribute type 29 has an invalid length. [ 177.934299][ T7617] netlink: 'syz.3.528': attribute type 29 has an invalid length. [ 178.012936][ T7617] netlink: 'syz.3.528': attribute type 29 has an invalid length. [ 178.543313][ T7626] netlink: 'syz.3.532': attribute type 10 has an invalid length. [ 178.721712][ T7626] bond0: (slave O3c): Enslaving as an active interface with an up link [ 178.870192][ T7641] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.914575][ T7637] netlink: 'syz.4.537': attribute type 11 has an invalid length. [ 178.930899][ T7641] bridge0: entered allmulticast mode [ 178.943841][ T7637] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.537'. [ 178.975158][ T7636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.829204][ T7648] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.540'. [ 180.413639][ T6262] failed to send hello msg [ 180.418117][ T6262] failed while handling packet from 1:16384 [ 181.090181][ T7683] IPv6: Can't replace route, no match found [ 181.121904][ T7678] netlink: 156 bytes leftover after parsing attributes in process `syz.1.554'. [ 181.147938][ T7680] netlink: 'syz.4.555': attribute type 20 has an invalid length. [ 181.372039][ T7685] netlink: 'syz.0.553': attribute type 10 has an invalid length. [ 183.035181][ T7715] netlink: 'syz.1.562': attribute type 10 has an invalid length. [ 184.248945][ T7731] netlink: 'syz.3.567': attribute type 11 has an invalid length. [ 184.265397][ T7731] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.567'. [ 184.282780][ T7730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.917257][ T7708] netlink: 132 bytes leftover after parsing attributes in process `syz.2.560'. [ 184.926541][ T7710] netlink: 'syz.2.560': attribute type 49 has an invalid length. [ 184.952751][ T7729] netdevsim netdevsim0: Direct firmware load for /syz1 failed with error -2 [ 184.983405][ T7729] netdevsim netdevsim0: Falling back to sysfs fallback for: /syz1 [ 186.490672][ T7765] netlink: 'syz.4.578': attribute type 12 has an invalid length. [ 186.499825][ T7765] netlink: 132 bytes leftover after parsing attributes in process `syz.4.578'. [ 187.398770][ T7788] netlink: 'syz.2.584': attribute type 13 has an invalid length. [ 187.469290][ T7788] netlink: 152 bytes leftover after parsing attributes in process `syz.2.584'. [ 187.546703][ T7788] erspan0: refused to change device tx_queue_len [ 187.635837][ T7788] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 187.796089][ T7796] netlink: 'syz.3.590': attribute type 11 has an invalid length. [ 187.828730][ T7796] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.590'. [ 187.872671][ T7795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.179173][ T7804] wg2: entered promiscuous mode [ 188.191375][ T7804] wg2: entered allmulticast mode [ 188.227829][ T7805] netlink: 'syz.1.592': attribute type 11 has an invalid length. [ 188.237392][ T7805] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.592'. [ 188.289649][ T7800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.610847][ T7814] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 190.636008][ T7814] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 191.161038][ T7840] netlink: 'syz.0.603': attribute type 10 has an invalid length. [ 191.172871][ T7827] netlink: 'syz.2.600': attribute type 39 has an invalid length. [ 191.173492][ T7840] netlink: 'syz.0.603': attribute type 16 has an invalid length. [ 191.194426][ T7840] netlink: 156 bytes leftover after parsing attributes in process `syz.0.603'. [ 191.244459][ T7827] veth0_macvtap: left promiscuous mode [ 191.564031][ T7846] netlink: 22 bytes leftover after parsing attributes in process `syz.3.605'. [ 192.912847][ T7880] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 192.931722][ T7880] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 193.323600][ T7892] netlink: 'syz.1.622': attribute type 2 has an invalid length. [ 193.338093][ T7894] netlink: 'syz.0.621': attribute type 39 has an invalid length. [ 193.346765][ T7892] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.622'. [ 193.405596][ T7894] veth0_macvtap: left promiscuous mode [ 194.018732][ T7901] netlink: 'syz.2.627': attribute type 11 has an invalid length. [ 194.049702][ T7901] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.627'. [ 194.069607][ T7900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.152259][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.159024][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.412371][ T7922] netlink: 'syz.4.632': attribute type 11 has an invalid length. [ 194.427428][ T7922] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.632'. [ 194.489397][ T7920] IPv6: NLM_F_REPLACE set, but no existing node found! [ 194.558719][ T7921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.683362][ T7927] netlink: 'syz.2.636': attribute type 39 has an invalid length. [ 194.762330][ T7929] netlink: 'syz.4.637': attribute type 1 has an invalid length. [ 194.770997][ T7929] netlink: 17 bytes leftover after parsing attributes in process `syz.4.637'. [ 195.140372][ T7941] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 195.170684][ T7941] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 195.543706][ T7950] netlink: 'syz.4.644': attribute type 11 has an invalid length. [ 195.572395][ T7950] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.644'. [ 195.617485][ T7949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.822655][ T7992] netlink: 'syz.4.652': attribute type 10 has an invalid length. [ 197.632550][ T8007] delete_channel: no stack [ 197.687359][ T8007] delete_channel: no stack [ 197.960615][ T8000] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 197.973581][ T8000] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 198.222056][ T8015] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 198.237705][ T8015] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 198.357963][ T8021] sit0: entered allmulticast mode [ 199.022619][ T8032] netlink: 'syz.0.674': attribute type 11 has an invalid length. [ 199.067380][ T8031] netlink: 'syz.4.665': attribute type 39 has an invalid length. [ 199.089706][ T8032] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.674'. [ 199.202651][ T8029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.448908][ T8038] netlink: 'syz.1.667': attribute type 10 has an invalid length. [ 199.489329][ T8037] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 199.497289][ T8037] IPv6: NLM_F_CREATE should be set when creating new route [ 199.505195][ T8037] IPv6: NLM_F_CREATE should be set when creating new route [ 199.513099][ T8037] IPv6: NLM_F_CREATE should be set when creating new route [ 199.679407][ T8038] geneve1: entered promiscuous mode [ 199.685200][ T8038] geneve1: entered allmulticast mode [ 199.691863][ T8038] team0: Port device geneve1 added [ 200.073047][ T8044] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 200.174624][ T8044] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 200.202377][ T8050] netlink: 'syz.3.669': attribute type 29 has an invalid length. [ 200.225520][ T8050] netlink: 'syz.3.669': attribute type 13 has an invalid length. [ 200.235316][ T8050] netlink: 'syz.3.669': attribute type 58 has an invalid length. [ 200.244799][ T8050] netlink: 152 bytes leftover after parsing attributes in process `syz.3.669'. [ 200.981354][ T8067] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.680'. [ 201.727234][ T8077] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 201.833552][ T8077] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 201.849179][ T8070] delete_channel: no stack [ 202.762836][ T8098] netlink: 'syz.2.691': attribute type 10 has an invalid length. [ 202.783251][ T8098] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.015569][ T8098] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.024767][ T8098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.417043][ T8098] : (slave bridge0): Enslaving as an active interface with an up link [ 203.489575][ T8119] netlink: 'syz.3.699': attribute type 25 has an invalid length. [ 204.094498][ T8139] netlink: 'syz.1.707': attribute type 10 has an invalid length. [ 204.178191][ T8139] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 204.221557][ T8139] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 204.247031][ T8148] netlink: 'syz.2.710': attribute type 11 has an invalid length. [ 204.281277][ T8139] team0: Port device wlan1 added [ 204.290011][ T8148] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.710'. [ 204.404800][ T8147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.602898][ T8154] IPv6: Can't replace route, no match found [ 205.162051][ T8180] netlink: 180 bytes leftover after parsing attributes in process `syz.3.720'. [ 205.421274][ T8185] team_slave_0: left promiscuous mode [ 205.449104][ T8185] team_slave_0: left allmulticast mode [ 205.519705][ T8185] team0: Port device team_slave_0 removed [ 205.557957][ T8185] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 206.238042][ T8203] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 206.415995][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 206.423087][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 206.429633][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 206.435736][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 206.442107][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 206.792949][ T8221] netlink: 'syz.3.734': attribute type 10 has an invalid length. [ 206.862966][ T8221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.872706][ T5845] Bluetooth: hci3: unexpected event 0x35 length: 15 > 6 [ 206.881881][ T8221] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 206.899202][ T8226] netlink: 'syz.4.732': attribute type 10 has an invalid length. [ 206.948797][ T8227] bond0: entered promiscuous mode [ 206.962754][ T8227] bond_slave_0: entered promiscuous mode [ 206.969622][ T8227] bond_slave_1: entered promiscuous mode [ 206.976141][ T8227] bridge_slave_1: entered promiscuous mode [ 206.982315][ T8227] team0: entered promiscuous mode [ 206.990168][ T8227] team_slave_0: entered promiscuous mode [ 206.997430][ T8227] team_slave_1: entered promiscuous mode [ 207.009368][ T8227] mac80211_hwsim hwsim5 O3c: entered promiscuous mode [ 207.018219][ T8227] batadv0: entered promiscuous mode [ 207.052104][ T8226] mac80211_hwsim hwsim3 O3c: entered promiscuous mode [ 207.069482][ T8226] bond0: (slave O3c): Enslaving as an active interface with an up link [ 207.889226][ T8255] netlink: 'syz.2.745': attribute type 11 has an invalid length. [ 207.897212][ T8255] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.745'. [ 207.932835][ T8254] netlink: 14 bytes leftover after parsing attributes in process `syz.4.756'. [ 207.989534][ T8248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.234900][ T8284] netlink: 'syz.3.754': attribute type 10 has an invalid length. [ 209.315817][ T8284] geneve1: entered promiscuous mode [ 209.324058][ T8284] team0: Port device geneve1 added [ 209.411407][ T8288] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 209.429802][ T8288] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 209.624391][ T8291] netlink: 'syz.4.761': attribute type 4 has an invalid length. [ 210.265754][ T8300] netlink: 10 bytes leftover after parsing attributes in process `syz.2.762'. [ 210.557705][ T8299] netlink: 180 bytes leftover after parsing attributes in process `syz.2.762'. [ 211.563298][ T5845] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 211.650465][ T8328] netlink: 'syz.4.772': attribute type 9 has an invalid length. [ 211.658744][ T8328] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.772'. [ 212.055454][ T8335] netlink: 'syz.0.774': attribute type 28 has an invalid length. [ 212.073820][ T8335] netlink: 'syz.0.774': attribute type 29 has an invalid length. [ 212.085203][ T8335] netlink: 132 bytes leftover after parsing attributes in process `syz.0.774'. [ 212.354970][ T8339] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.775'. [ 212.409348][ T8342] netlink: 'syz.4.776': attribute type 29 has an invalid length. [ 212.470370][ T8342] netlink: 'syz.4.776': attribute type 29 has an invalid length. [ 212.492571][ T8342] netlink: 'syz.4.776': attribute type 29 has an invalid length. [ 213.546756][ T8357] netlink: 'syz.0.782': attribute type 29 has an invalid length. [ 213.564093][ T8359] netlink: 'syz.0.782': attribute type 29 has an invalid length. [ 213.613504][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 213.979049][ T8378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.789'. [ 214.322368][ T8385] validate_nla: 2 callbacks suppressed [ 214.322392][ T8385] netlink: 'syz.0.792': attribute type 1 has an invalid length. [ 214.342735][ T8385] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.792'. [ 214.750212][ T8392] netlink: 'syz.2.793': attribute type 10 has an invalid length. [ 214.798260][ T8392] batman_adv: batadv0: Adding interface: wlan0 [ 214.814703][ T8392] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.956178][ T8393] netlink: 'syz.0.795': attribute type 11 has an invalid length. [ 214.965533][ T8393] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.795'. [ 214.997547][ T8392] batman_adv: batadv0: Interface activated: wlan0 [ 215.015559][ T8390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.867557][ T8453] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 216.945042][ T8453] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 217.245477][ T8457] netlink: 'syz.0.816': attribute type 10 has an invalid length. [ 217.320554][ T8457] team0: left allmulticast mode [ 217.385559][ T8457] team_slave_1: left allmulticast mode [ 217.391595][ T8457] team0: left promiscuous mode [ 217.396914][ T8457] team_slave_1: left promiscuous mode [ 217.406835][ T8457] bridge0: port 3(team0) entered disabled state [ 217.519806][ T8463] netlink: 'syz.0.816': attribute type 13 has an invalid length. [ 218.092654][ T8457] batman_adv: batadv0: Adding interface: team0 [ 218.102212][ T8457] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.128172][ T8457] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 224.688518][ T8578] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.857'. [ 224.974471][ T8584] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 225.363545][ T8592] netlink: 180 bytes leftover after parsing attributes in process `syz.2.862'. [ 225.520097][ T8592] netlink: 132 bytes leftover after parsing attributes in process `syz.2.862'. [ 227.444529][ T8642] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.880'. [ 227.961135][ T8652] raw_sendmsg: syz.3.881 forgot to set AF_INET. Fix it! [ 228.635789][ T8661] netlink: 'syz.4.883': attribute type 10 has an invalid length. [ 228.661941][ T8661] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.988052][ T8661] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.002871][ T8661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.358218][ T8661] bridge0: entered promiscuous mode [ 229.392238][ T8661] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 229.532963][ T8686] netlink: 'syz.1.891': attribute type 33 has an invalid length. [ 229.578344][ T8688] netlink: 'syz.0.892': attribute type 11 has an invalid length. [ 229.604160][ T8686] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.891'. [ 229.623520][ T8688] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.892'. [ 229.690158][ T8687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.884623][ T8700] netlink: 'syz.2.895': attribute type 11 has an invalid length. [ 229.897400][ T8700] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.895'. [ 229.927543][ T8699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.865187][ T8751] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.912'. [ 232.916521][ T8746] netlink: 10 bytes leftover after parsing attributes in process `syz.4.911'. [ 232.966932][ T8749] netlink: 44 bytes leftover after parsing attributes in process `syz.3.913'. [ 233.007235][ T8749] netlink: 'syz.3.913': attribute type 3 has an invalid length. [ 233.102361][ T8757] netlink: 'syz.1.924': attribute type 11 has an invalid length. [ 233.127739][ T8757] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.924'. [ 233.175409][ T8753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.507249][ T8771] netlink: 14 bytes leftover after parsing attributes in process `syz.4.920'. [ 234.240566][ T8788] netlink: 'syz.2.923': attribute type 11 has an invalid length. [ 234.260207][ T8788] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.923'. [ 234.453544][ T8784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.193642][ T8803] netlink: 'syz.4.932': attribute type 11 has an invalid length. [ 235.221804][ T8803] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.932'. [ 235.263499][ T8802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.726250][ T8808] wg2: entered promiscuous mode [ 235.760958][ T8808] wg2: entered allmulticast mode [ 236.003788][ T8824] netlink: 'syz.0.939': attribute type 27 has an invalid length. [ 236.053934][ T8824] bond0: (slave bond_slave_0): Releasing backup interface [ 236.120378][ T8826] netlink: 'syz.1.940': attribute type 11 has an invalid length. [ 236.131348][ T8826] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.940'. [ 236.713779][ T8825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.801200][ T8824] bond_slave_0 (unregistering): left promiscuous mode [ 237.508539][ T8849] netlink: 'syz.1.948': attribute type 21 has an invalid length. [ 237.528728][ T8849] netlink: 'syz.1.948': attribute type 15 has an invalid length. [ 237.560500][ T8849] netlink: 156 bytes leftover after parsing attributes in process `syz.1.948'. [ 237.579168][ T8849] IPv6: NLM_F_CREATE should be specified when creating new route [ 237.592638][ T8849] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 237.600831][ T8849] IPv6: NLM_F_CREATE should be set when creating new route [ 237.610429][ T8849] IPv6: NLM_F_CREATE should be set when creating new route [ 237.618850][ T8849] IPv6: NLM_F_CREATE should be set when creating new route [ 238.359517][ T8869] netlink: 'syz.3.955': attribute type 11 has an invalid length. [ 238.370238][ T8869] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.955'. [ 238.465834][ T8868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.782809][ T8892] netlink: 152 bytes leftover after parsing attributes in process `syz.4.963'. [ 238.914133][ T8892] netlink: 6 bytes leftover after parsing attributes in process `syz.4.963'. [ 238.929787][ T8894] netlink: 'syz.0.962': attribute type 25 has an invalid length. [ 239.245346][ T8899] netlink: 'syz.2.965': attribute type 2 has an invalid length. [ 239.263571][ T8899] netlink: 132 bytes leftover after parsing attributes in process `syz.2.965'. [ 240.030717][ T8915] netlink: 'syz.0.971': attribute type 11 has an invalid length. [ 240.060135][ T8915] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.971'. [ 240.136350][ T8914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.399472][ T8926] netlink: 'syz.4.973': attribute type 11 has an invalid length. [ 240.426035][ T8926] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.973'. [ 240.529238][ T8921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.721183][ T8957] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 241.993594][ T8957] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 242.479734][ T8961] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 243.119137][ T8964] netlink: 'syz.1.997': attribute type 21 has an invalid length. [ 243.174293][ T8964] netlink: 132 bytes leftover after parsing attributes in process `syz.1.997'. [ 243.872636][ T8973] netlink: 'syz.4.988': attribute type 10 has an invalid length. [ 243.932436][ T8973] bond0: (slave O3c): Releasing backup interface [ 243.978128][ T8973] mac80211_hwsim hwsim3 O3c: left promiscuous mode [ 244.020390][ T8973] team0: Port device O3c added [ 244.040880][ T8977] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.990'. [ 244.159707][ T8979] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 244.167370][ T8979] IPv6: NLM_F_CREATE should be set when creating new route [ 244.175322][ T8979] IPv6: NLM_F_CREATE should be set when creating new route [ 244.183046][ T8979] IPv6: NLM_F_CREATE should be set when creating new route [ 244.768296][ T8990] netlink: 'syz.4.993': attribute type 39 has an invalid length. [ 245.583827][ T9007] netlink: 'syz.1.996': attribute type 10 has an invalid length. [ 245.614169][ T9003] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 245.638718][ T9007] batadv0: left promiscuous mode [ 245.648178][ T9003] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 245.680023][ T9007] batadv0: left allmulticast mode [ 245.727053][ T9007] team0: Port device batadv0 removed [ 245.780590][ T9007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.870530][ T9007] batadv0: entered promiscuous mode [ 245.888455][ T9007] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 247.622774][ T9034] netlink: 'syz.4.1010': attribute type 10 has an invalid length. [ 247.646510][ T9034] netlink: 'syz.4.1010': attribute type 16 has an invalid length. [ 247.716521][ T9034] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1010'. [ 248.450192][ T9047] netlink: 'syz.3.1013': attribute type 39 has an invalid length. [ 248.902979][ T9061] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 248.910361][ T9061] IPv6: NLM_F_CREATE should be set when creating new route [ 249.083816][ T9063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1021'. [ 249.169416][ T9064] netlink: 'syz.0.1021': attribute type 21 has an invalid length. [ 249.241944][ T9064] netlink: 'syz.0.1021': attribute type 1 has an invalid length. [ 249.389214][ T9067] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1023'. [ 249.722060][ T9078] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1026'. [ 250.133938][ T9089] netlink: 'syz.3.1031': attribute type 10 has an invalid length. [ 250.784530][ T9089] bond0: (slave O3c): Releasing backup interface [ 250.816887][ T9089] mac80211_hwsim hwsim5 O3c: left promiscuous mode [ 250.882335][ T9089] mac80211_hwsim hwsim5 O3c: entered promiscuous mode [ 250.898779][ T9103] netlink: 'syz.0.1035': attribute type 2 has an invalid length. [ 250.913722][ T9089] team0: Port device O3c added [ 250.942679][ T9103] netlink: 'syz.0.1035': attribute type 1 has an invalid length. [ 250.996985][ T9103] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.1035'. [ 251.054173][ T9103] block nbd5: not configured, cannot reconfigure [ 252.607317][ T9117] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 252.618459][ T9117] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 253.090961][ T9144] netlink: 'syz.1.1050': attribute type 10 has an invalid length. [ 253.120929][ T9142] netlink: 'syz.4.1051': attribute type 2 has an invalid length. [ 253.133462][ T9144] netlink: 'syz.1.1050': attribute type 16 has an invalid length. [ 253.141869][ T9142] netlink: 'syz.4.1051': attribute type 1 has an invalid length. [ 253.153629][ T9144] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1050'. [ 253.171108][ T9142] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.1051'. [ 253.191241][ T9142] block nbd5: not configured, cannot reconfigure [ 255.086111][ T9191] netlink: 'syz.2.1066': attribute type 10 has an invalid length. [ 255.105894][ T9191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.117259][ T9191] : (slave batadv0): Enslaving as an active interface with an up link [ 255.198684][ T9191] : entered promiscuous mode [ 255.204038][ T9191] bond_slave_0: entered promiscuous mode [ 255.211039][ T9191] bond_slave_1: entered promiscuous mode [ 255.249295][ T9191] bridge0: entered promiscuous mode [ 255.257954][ T9191] batadv0: entered promiscuous mode [ 255.449831][ T9198] netlink: 'syz.3.1068': attribute type 10 has an invalid length. [ 255.490738][ T9198] netlink: 'syz.3.1068': attribute type 16 has an invalid length. [ 255.555746][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.555868][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.200143][ T9198] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1068'. [ 256.437881][ T9215] netlink: 'syz.1.1074': attribute type 39 has an invalid length. [ 256.664165][ T9213] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 256.863843][ T9220] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1078'. [ 256.980051][ T9228] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1082'. [ 257.237734][ T9230] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1083'. [ 257.247453][ T9233] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1083'. [ 258.473075][ T9254] netlink: 'syz.0.1091': attribute type 3 has an invalid length. [ 258.543853][ T9254] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1091'. [ 258.812435][ T9253] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1091'. [ 259.999644][ T9271] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 260.548608][ T9293] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1099'. [ 261.292047][ T9304] netlink: 'syz.1.1108': attribute type 39 has an invalid length. [ 261.501831][ T9313] netlink: 'syz.1.1112': attribute type 6 has an invalid length. [ 261.546818][ T9313] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1112'. [ 262.279710][ T9322] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 262.561915][ T9335] netlink: 'syz.2.1130': attribute type 6 has an invalid length. [ 262.592918][ T9337] netlink: 'syz.4.1119': attribute type 10 has an invalid length. [ 262.600160][ T9337] batadv0: left allmulticast mode [ 262.600182][ T9337] batadv0: left promiscuous mode [ 262.600419][ T9337] bridge0: port 2(batadv0) entered disabled state [ 262.740203][ T9335] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1130'. [ 262.807245][ T9337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.845638][ T9337] batadv0: entered promiscuous mode [ 262.861949][ T9337] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 264.656326][ T9387] netlink: 'syz.1.1128': attribute type 13 has an invalid length. [ 264.688146][ T9387] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1128'. [ 264.796735][ T9387] erspan0: refused to change device tx_queue_len [ 264.864745][ T9387] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 265.348535][ T9400] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1134'. [ 266.467442][ T9408] netlink: 'syz.4.1137': attribute type 6 has an invalid length. [ 266.475762][ T9408] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1137'. [ 267.274091][ T9446] netlink: 'syz.1.1150': attribute type 10 has an invalid length. [ 267.537431][ T9446] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 267.558941][ T9446] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 267.591196][ T9446] team0: Port device wlan1 removed [ 267.625207][ T9446] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 267.645231][ T9446] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 267.657065][ T9450] netlink: 'syz.3.1155': attribute type 10 has an invalid length. [ 267.798966][ T9450] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.808999][ T9450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.866278][ T9450] bridge0: entered promiscuous mode [ 267.907826][ T9450] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 270.503070][ T9507] netlink: 'syz.2.1173': attribute type 10 has an invalid length. [ 270.784713][ T9513] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1176'. [ 270.796047][ T9507] : (slave wlan1): Opening slave failed [ 270.802983][ T9517] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1176'. [ 270.957524][ T9523] netlink: 'syz.2.1179': attribute type 29 has an invalid length. [ 270.971018][ T9523] netlink: 'syz.2.1179': attribute type 29 has an invalid length. [ 271.017823][ T9523] netlink: 'syz.2.1179': attribute type 29 has an invalid length. [ 272.768002][ T9569] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1194'. [ 272.828157][ T9569] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1194'. [ 273.890031][ T9599] netlink: 'syz.3.1206': attribute type 10 has an invalid length. [ 275.067953][ T9619] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 275.082640][ T9619] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 275.386736][ T9628] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1226'. [ 275.406852][ T9630] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1226'. [ 275.707417][ T9636] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 275.712696][ T36] failed to send hello msg [ 275.715272][ T9636] IPv6: NLM_F_CREATE should be set when creating new route [ 275.719393][ T36] failed while handling packet from 1:16384 [ 275.727027][ T9636] IPv6: NLM_F_CREATE should be set when creating new route [ 276.739987][ T9660] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 276.758543][ T9660] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 277.080505][ T9667] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1232'. [ 277.688470][ T9678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1236'. [ 277.754185][ T9677] netlink: 'syz.1.1236': attribute type 21 has an invalid length. [ 277.772874][ T9677] netlink: 'syz.1.1236': attribute type 1 has an invalid length. [ 278.132017][ T9693] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1253'. [ 278.195553][ T9693] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1253'. [ 278.338484][ T9696] team_slave_0: left promiscuous mode [ 278.372949][ T9696] team0: Port device team_slave_0 removed [ 278.385693][ T9698] netlink: 'syz.2.1244': attribute type 28 has an invalid length. [ 278.397255][ T9696] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 278.425217][ T9698] netlink: 'syz.2.1244': attribute type 29 has an invalid length. [ 278.439672][ T9698] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1244'. [ 278.740461][ T9712] team_slave_0: left promiscuous mode [ 278.747325][ T9712] team_slave_0: left allmulticast mode [ 278.770474][ T9712] team0: Port device team_slave_0 removed [ 278.778815][ T9712] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 279.282017][ T9724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1263'. [ 280.561107][ T9745] netlink: 'syz.4.1252': attribute type 10 has an invalid length. [ 280.772266][ T9745] batman_adv: batadv0: Adding interface: wlan0 [ 280.797644][ T9745] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.017084][ T9754] netlink: 'syz.3.1262': attribute type 33 has an invalid length. [ 281.017201][ T9754] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1262'. [ 281.923739][ T9745] batman_adv: batadv0: Interface activated: wlan0 [ 282.058936][ T9761] netlink: 'syz.1.1264': attribute type 28 has an invalid length. [ 282.069007][ T9761] netlink: 'syz.1.1264': attribute type 29 has an invalid length. [ 282.120171][ T9761] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1264'. [ 282.810077][ T9780] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1272'. [ 282.917202][ T9780] netlink: 'syz.4.1272': attribute type 3 has an invalid length. [ 284.143899][ T9800] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1286'. [ 285.896717][ T9835] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 285.909169][ T9835] IPv6: NLM_F_CREATE should be set when creating new route [ 286.256081][ T9859] netlink: 'syz.4.1293': attribute type 11 has an invalid length. [ 286.313296][ T9859] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1293'. [ 286.354524][ T9847] netlink: 'syz.0.1292': attribute type 10 has an invalid length. [ 286.367508][ T9847] batman_adv: batadv0: Adding interface: wlan0 [ 286.373964][ T9847] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.406144][ T9847] batman_adv: batadv0: Interface activated: wlan0 [ 286.469713][ T9844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.308601][ T9884] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 287.315987][ T9884] IPv6: NLM_F_CREATE should be set when creating new route [ 287.323289][ T9884] IPv6: NLM_F_CREATE should be set when creating new route [ 287.364718][ T9887] netlink: 'syz.0.1303': attribute type 39 has an invalid length. [ 287.488051][ T9892] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1304'. [ 287.869511][ T9903] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.1312'. [ 287.893570][ T9907] netlink: 'syz.2.1311': attribute type 11 has an invalid length. [ 287.916648][ T9907] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1311'. [ 288.004711][ T9906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.199330][ T9933] wg2: left promiscuous mode [ 289.211264][ T9933] wg2: left allmulticast mode [ 289.644311][ T9948] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.1326'. [ 292.029160][ T9990] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1339'. [ 292.047411][ T9988] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1349'. [ 292.390480][T10000] netlink: 'syz.4.1344': attribute type 11 has an invalid length. [ 292.462021][T10000] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1344'. [ 292.610404][ T9998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.324137][T10012] netlink: 'syz.3.1345': attribute type 28 has an invalid length. [ 293.347101][T10012] netlink: 'syz.3.1345': attribute type 29 has an invalid length. [ 293.360367][T10012] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1345'. [ 294.381909][T10040] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.1357'. [ 294.427736][T10042] netlink: 'syz.1.1358': attribute type 21 has an invalid length. [ 294.572985][T10046] netlink: 'syz.2.1359': attribute type 11 has an invalid length. [ 294.593460][T10046] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1359'. [ 294.855902][T10045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.674843][ T1156] failed to send hello msg [ 295.679305][ T1156] failed while handling packet from 1:16384 [ 295.739051][T10077] netlink: 'syz.0.1369': attribute type 28 has an invalid length. [ 295.760114][T10077] netlink: 'syz.0.1369': attribute type 29 has an invalid length. [ 295.770571][T10077] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1369'. [ 296.160943][T10093] netlink: 'syz.0.1375': attribute type 25 has an invalid length. [ 296.826411][T10117] netlink: 'syz.0.1385': attribute type 21 has an invalid length. [ 296.845373][T10117] IPv6: NLM_F_CREATE should be specified when creating new route [ 296.881942][T10117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 296.889356][T10117] IPv6: NLM_F_CREATE should be set when creating new route [ 296.897085][T10117] IPv6: NLM_F_CREATE should be set when creating new route [ 296.904552][T10117] IPv6: NLM_F_CREATE should be set when creating new route [ 296.996789][T10122] netlink: 'syz.3.1387': attribute type 28 has an invalid length. [ 297.021665][T10122] netlink: 'syz.3.1387': attribute type 29 has an invalid length. [ 297.074701][T10122] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1387'. [ 297.413318][T10135] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 298.017189][T10137] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1392'. [ 298.421264][ T1156] failed to send hello msg [ 298.433395][ T1156] failed while handling packet from 1:16384 [ 299.374701][T10163] veth0_vlan: left promiscuous mode [ 299.396922][T10163] veth0_vlan: entered allmulticast mode [ 299.435595][T10163] veth0_vlan: entered promiscuous mode [ 299.711407][T10175] netlink: 'syz.1.1404': attribute type 28 has an invalid length. [ 299.722373][T10175] netlink: 'syz.1.1404': attribute type 29 has an invalid length. [ 299.747799][T10175] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1404'. [ 301.357699][T10202] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 301.378138][T10202] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 302.163575][T10217] netlink: 'syz.3.1418': attribute type 10 has an invalid length. [ 302.171827][T10217] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.720429][T10224] veth0_vlan: entered allmulticast mode [ 302.736991][T10233] netlink: 'syz.4.1424': attribute type 11 has an invalid length. [ 302.755022][T10233] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1424'. [ 302.883629][T10239] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 302.901218][T10232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.954121][T10239] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 303.066277][T10241] netlink: 'syz.2.1426': attribute type 10 has an invalid length. [ 303.085185][T10241] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1426'. [ 303.340128][T10253] netlink: 'syz.0.1432': attribute type 28 has an invalid length. [ 303.351985][T10255] netlink: 'syz.4.1428': attribute type 2 has an invalid length. [ 303.397260][T10255] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.1428'. [ 303.417430][T10253] netlink: 'syz.0.1432': attribute type 29 has an invalid length. [ 303.428293][T10253] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1432'. [ 304.026938][T10275] netlink: 'syz.4.1439': attribute type 11 has an invalid length. [ 304.042599][T10275] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1439'. [ 304.193511][T10273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.482211][T10292] netlink: 'syz.3.1446': attribute type 28 has an invalid length. [ 304.490981][T10292] netlink: 'syz.3.1446': attribute type 29 has an invalid length. [ 304.546733][T10292] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1446'. [ 305.362288][T10313] netlink: 'syz.1.1454': attribute type 11 has an invalid length. [ 305.379184][T10313] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1454'. [ 305.441080][T10312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.142229][T10336] netlink: 'syz.1.1460': attribute type 10 has an invalid length. [ 306.177218][T10336] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1460'. [ 306.243360][T10336] batadv0: entered allmulticast mode [ 306.890291][T10336] bond0: (slave batadv0): Releasing backup interface [ 306.906303][T10336] bridge0: port 2(batadv0) entered blocking state [ 306.913769][T10336] bridge0: port 2(batadv0) entered disabled state [ 307.178213][ T6262] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 307.188041][ T6262] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 307.339353][T10362] netlink: 'syz.1.1468': attribute type 11 has an invalid length. [ 307.384516][T10362] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1468'. [ 307.458429][T10360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.723127][T10369] veth0_vlan: entered allmulticast mode [ 307.999893][T10379] netlink: 149044 bytes leftover after parsing attributes in process `syz.2.1474'. [ 308.152133][T10381] IPv6: Can't replace route, no match found [ 309.337765][T10410] netlink: 'syz.0.1483': attribute type 11 has an invalid length. [ 309.352068][T10410] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1483'. [ 309.465175][T10416] netlink: 'syz.3.1485': attribute type 2 has an invalid length. [ 309.518002][T10409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.533430][T10416] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.1485'. [ 309.718849][T10423] veth0_vlan: entered allmulticast mode [ 310.472939][T10451] netlink: 'syz.1.1496': attribute type 25 has an invalid length. [ 310.532921][T10454] IPv6: Can't replace route, no match found [ 310.874419][T10464] netlink: 'syz.0.1503': attribute type 2 has an invalid length. [ 310.882208][T10464] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.1503'. [ 311.327445][T10477] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.1509'. [ 311.430632][T10484] netlink: 'syz.1.1511': attribute type 28 has an invalid length. [ 312.131680][T10502] netlink: 'syz.0.1526': attribute type 10 has an invalid length. [ 312.181048][T10502] bridge0: left allmulticast mode [ 312.214032][T10502] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.221301][T10502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.245334][T10502] bridge0: entered promiscuous mode [ 312.268030][T10502] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 312.363914][T10508] netlink: 'syz.2.1517': attribute type 2 has an invalid length. [ 312.404476][T10508] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.1517'. [ 313.785889][T10532] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 313.817536][T10532] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 313.951742][T10530] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 313.973382][T10530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.508623][T10543] netlink: 'syz.4.1530': attribute type 11 has an invalid length. [ 314.531928][T10543] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1530'. [ 314.597371][T10542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.635953][T10550] GPL: port 1(erspan0) entered blocking state [ 314.650431][T10550] GPL: port 1(erspan0) entered disabled state [ 314.658440][T10550] erspan0: entered allmulticast mode [ 314.675389][T10550] erspan0: entered promiscuous mode [ 315.235703][T10566] IPv6: Can't replace route, no match found [ 315.660648][T10577] netlink: 'syz.0.1541': attribute type 10 has an invalid length. [ 315.714226][T10577] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1541'. [ 315.988673][T10588] netlink: 'syz.1.1545': attribute type 11 has an invalid length. [ 316.019619][T10588] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1545'. [ 316.264812][T10584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.518641][T10599] netlink: 'syz.4.1547': attribute type 64 has an invalid length. [ 316.621477][T10603] netlink: 'syz.1.1550': attribute type 10 has an invalid length. [ 316.713655][T10603] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.980411][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.987010][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.525289][T10625] netlink: 'syz.3.1555': attribute type 10 has an invalid length. [ 317.622278][T10625] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1555'. [ 317.866674][T10640] netlink: 'syz.3.1558': attribute type 11 has an invalid length. [ 317.903543][T10640] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1558'. [ 318.089175][T10634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.116790][T10642] IPv6: Can't replace route, no match found [ 319.022119][T10664] netlink: 'syz.3.1569': attribute type 27 has an invalid length. [ 319.092884][T10664] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1569'. [ 319.826859][T10694] netlink: 'syz.4.1582': attribute type 2 has an invalid length. [ 319.851675][T10694] netlink: 'syz.4.1582': attribute type 8 has an invalid length. [ 319.875809][T10694] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1582'. [ 320.338521][T10707] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1585'. [ 320.605772][T10711] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 320.648939][T10711] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 321.459910][T10739] ref_ctr_offset mismatch. inode: 0x6b9 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 322.228587][T10750] netlink: 'syz.1.1602': attribute type 10 has an invalid length. [ 322.252041][T10750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.415603][T10750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.641831][T10750] batadv_slave_0: entered promiscuous mode [ 322.683431][T10757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1601'. [ 322.888798][T10750] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 322.930401][T10755] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1603'. [ 323.139948][T10763] netlink: 'syz.2.1605': attribute type 10 has an invalid length. [ 323.172671][T10763] : (slave wlan1): Opening slave failed [ 323.194744][T10769] netlink: 'syz.1.1608': attribute type 3 has an invalid length. [ 323.212941][T10769] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.1608'. [ 323.686243][T10784] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1615'. [ 323.696737][T10784] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 323.713909][T10784] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 323.763303][T10786] netlink: 'syz.0.1616': attribute type 10 has an invalid length. [ 323.772211][T10786] lo: entered promiscuous mode [ 323.778751][T10786] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 324.032255][T10799] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1619'. [ 324.043021][T10801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1620'. [ 324.062383][T10796] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1619'. [ 324.080471][T10799] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1619'. [ 324.159355][T10804] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1622'. [ 324.190161][T10803] delete_channel: no stack [ 324.448672][ T55] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 324.483938][T10812] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1626'. [ 324.974674][T10825] mac80211_hwsim hwsim8 O3c: renamed from wlan1 [ 327.096140][T10878] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 327.702076][T10892] netlink: 'syz.4.1653': attribute type 3 has an invalid length. [ 327.728008][T10892] __nla_validate_parse: 5 callbacks suppressed [ 327.728047][T10892] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1653'. [ 327.760114][T10894] netlink: 'syz.3.1654': attribute type 11 has an invalid length. [ 327.814315][T10894] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1654'. [ 327.874814][T10893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.128611][T10908] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.1658'. [ 328.417690][T10914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1660'. [ 328.455519][T10915] tap0: tun_chr_ioctl cmd 1074025681 [ 328.480909][T10915] tap0: tun_chr_ioctl cmd 1074025677 [ 328.491599][T10915] tap0: linktype set to 786 [ 328.521709][T10915] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1661'. [ 328.547274][T10915] netlink: 'syz.3.1661': attribute type 10 has an invalid length. [ 328.598434][T10915] bond0: (slave team0): Releasing backup interface [ 328.622308][T10915] team0: left promiscuous mode [ 328.632767][T10915] team_slave_1: left promiscuous mode [ 328.650893][T10915] geneve1: left promiscuous mode [ 328.657378][T10915] mac80211_hwsim hwsim5 O3c: left promiscuous mode [ 328.673897][T10915] team0: Cannot enslave team device to itself [ 329.262000][T10942] IPv6: Can't replace route, no match found [ 331.295578][T10982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1683'. [ 333.051705][T11009] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.581792][T11032] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 333.709016][T11032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.020804][T11038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1700'. [ 335.148088][T11056] pim6reg1: entered promiscuous mode [ 335.155153][T11056] pim6reg1: entered allmulticast mode [ 335.176922][T11056] sctp: [Deprecated]: syz.0.1709 (pid 11056) Use of struct sctp_assoc_value in delayed_ack socket option. [ 335.176922][T11056] Use struct sctp_sack_info instead [ 335.354647][T11061] Y4`Ҙ: renamed from lo (while UP) [ 336.744897][T11083] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 336.796058][T11083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.885996][T11083] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 336.957721][T11083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.000130][T11093] blkio.reset_stats is deprecated [ 337.935098][T11115] sit0: entered promiscuous mode [ 339.759092][T11153] sit0: entered allmulticast mode [ 339.827322][T11150] sit0: entered promiscuous mode [ 340.447860][T11166] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1743'. [ 340.968152][T11181] netlink: 'syz.4.1748': attribute type 10 has an invalid length. [ 341.051458][T11181] bond0: (slave batadv0): Releasing backup interface [ 341.075861][T11181] batadv0: left promiscuous mode [ 341.087352][T11181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.096037][T11181] team0: Port device batadv0 added [ 341.119993][T11184] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.1750'. [ 342.170204][T11215] netlink: 'syz.4.1756': attribute type 10 has an invalid length. [ 342.192137][T11215] team0: Port device O3c removed [ 342.207874][T11215] mac80211_hwsim hwsim3 O3c: entered promiscuous mode [ 342.215742][T11215] bond0: (slave O3c): Enslaving as an active interface with an up link [ 342.332255][T11218] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1759'. [ 343.359196][T11245] netlink: 'syz.1.1769': attribute type 10 has an invalid length. [ 343.403889][T11247] netlink: 'syz.3.1771': attribute type 28 has an invalid length. [ 343.427232][T11251] netlink: 'syz.2.1770': attribute type 39 has an invalid length. [ 344.001256][T11263] netlink: 'syz.2.1774': attribute type 10 has an invalid length. [ 344.397136][T11278] netlink: 'syz.4.1778': attribute type 10 has an invalid length. [ 344.439685][T11278] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1778'. [ 344.638758][T11282] netlink: 22 bytes leftover after parsing attributes in process `syz.1.1780'. [ 344.698580][T11282] netlink: 'syz.1.1780': attribute type 10 has an invalid length. [ 344.709001][T11282] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1780'. [ 345.029408][T11294] netlink: 'syz.3.1786': attribute type 10 has an invalid length. [ 345.503840][T11294] team0: Port device O3c removed [ 345.515493][T11294] mac80211_hwsim hwsim5 O3c: entered promiscuous mode [ 345.526804][T11294] bond0: (slave O3c): Enslaving as an active interface with an up link [ 345.744825][T11307] netlink: 'syz.0.1791': attribute type 11 has an invalid length. [ 345.778935][T11307] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1791'. [ 345.793884][T11310] netlink: 'syz.4.1792': attribute type 25 has an invalid length. [ 345.925150][T11303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.179417][T11322] netlink: 'syz.1.1797': attribute type 21 has an invalid length. [ 346.188339][T11322] netlink: 'syz.1.1797': attribute type 6 has an invalid length. [ 346.200027][T11322] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1797'. [ 346.428248][T11328] netlink: 'syz.0.1800': attribute type 49 has an invalid length. [ 347.097656][T11337] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 347.280963][T11346] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1807'. [ 348.293150][T11366] delete_channel: no stack [ 348.521973][T11375] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1816'. [ 349.057477][T11366] delete_channel: no stack [ 349.199474][T11381] lo: left promiscuous mode [ 349.239992][T11381] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 349.611633][T11395] netlink: 'syz.4.1825': attribute type 39 has an invalid length. [ 350.512548][T11412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1831'. [ 351.151021][T11420] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 351.856687][T11432] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1837'. [ 352.122851][T11442] netlink: 'syz.3.1841': attribute type 49 has an invalid length. [ 352.401277][T11454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1845'. [ 352.447533][T11455] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1843'. [ 352.564770][T11457] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1843'. [ 352.989419][T11466] netlink: 'syz.1.1849': attribute type 33 has an invalid length. [ 353.000934][T11466] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1849'. [ 353.920435][T11504] netlink: 71 bytes leftover after parsing attributes in process `syz.1.1864'. [ 354.612975][T11501] IPv6: Can't replace route, no match found [ 354.750014][T11512] netlink: 'syz.3.1866': attribute type 3 has an invalid length. [ 354.771336][T11512] netlink: 199752 bytes leftover after parsing attributes in process `syz.3.1866'. [ 355.885556][T11538] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.1874'. [ 356.797080][T11558] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1882'. [ 357.081719][T11566] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1885'. [ 357.165018][T11573] netlink: 'syz.0.1885': attribute type 10 has an invalid length. [ 357.165048][T11573] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1885'. [ 357.165293][T11573] bridge0: port 2(vlan1) entered blocking state [ 357.172645][T11573] bridge0: port 2(vlan1) entered disabled state [ 357.172861][T11573] vlan1: entered allmulticast mode [ 357.193604][T11569] netlink: 'syz.3.1886': attribute type 10 has an invalid length. [ 357.199391][T11573] vlan1: entered promiscuous mode [ 357.211742][T11573] bridge0: port 2(vlan1) entered blocking state [ 357.211884][T11573] bridge0: port 2(vlan1) entered forwarding state [ 357.228745][T11577] netlink: 'syz.0.1885': attribute type 6 has an invalid length. [ 357.228770][T11577] netlink: 'syz.0.1885': attribute type 1 has an invalid length. [ 357.228790][T11577] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.1885'. [ 357.509535][T11582] netlink: 'syz.2.1888': attribute type 10 has an invalid length. [ 357.910884][T11569] bond0: (slave O3c): Releasing backup interface [ 357.919330][T11569] mac80211_hwsim hwsim5 O3c: left promiscuous mode [ 358.117521][T11592] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1891'. [ 358.156149][T11593] tap0: tun_chr_ioctl cmd 1074025677 [ 358.161952][T11593] tap0: linktype set to 1 [ 358.329735][T11596] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1893'. [ 358.427191][T11603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1895'. [ 358.649566][T11610] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1899'. [ 358.692351][T11610] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1899'. [ 358.976491][T11621] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1902'. [ 359.578751][T11640] IPv6: NLM_F_REPLACE set, but no existing node found! [ 359.991157][T11647] netlink: 'syz.1.1914': attribute type 10 has an invalid length. [ 360.044711][T11647] bridge0: port 2(batadv0) entered disabled state [ 360.121343][T11647] team0: left allmulticast mode [ 360.138102][T11647] team_slave_1: left allmulticast mode [ 360.162208][T11647] geneve1: left allmulticast mode [ 360.178132][T11647] team0: left promiscuous mode [ 360.212663][T11647] team_slave_1: left promiscuous mode [ 360.231649][T11647] geneve1: left promiscuous mode [ 360.248405][T11647] bridge0: port 3(team0) entered disabled state [ 360.295236][T11647] bridge_slave_0: left promiscuous mode [ 360.307779][T11647] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.410613][T11647] bond0: (slave bridge0): Releasing backup interface [ 360.424249][T11647] bridge0 (unregistering): left promiscuous mode [ 360.455054][T11660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1917'. [ 360.688474][T11652] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 360.704230][T11652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.718148][T11652] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 360.731286][T11652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.090559][T11672] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 361.101533][T11672] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 361.678594][T11686] IPv6: NLM_F_REPLACE set, but no existing node found! [ 362.419318][T11699] netlink: 'syz.2.1932': attribute type 10 has an invalid length. [ 362.498566][T11705] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1933'. [ 362.522105][T11699] team0: Port device macvlan0 added [ 362.530005][T11701] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1933'. [ 362.772256][T11710] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 362.858542][T11714] netlink: 'syz.3.1938': attribute type 10 has an invalid length. [ 362.888022][T11710] batadv0: left allmulticast mode [ 362.940083][T11710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.046316][T11720] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 363.104184][T11720] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 364.289601][T11710] syz.1.1936 (11710) used greatest stack depth: 17272 bytes left [ 364.475175][T11734] netlink: 'syz.1.1945': attribute type 2 has an invalid length. [ 364.508486][T11734] netlink: 119 bytes leftover after parsing attributes in process `syz.1.1945'. [ 365.326051][T11768] sit0: left promiscuous mode [ 365.440385][T11770] sit0: entered promiscuous mode [ 365.964452][T11788] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 365.975148][T11788] syzkaller0: entered promiscuous mode [ 365.992368][T11788] syzkaller0: entered allmulticast mode [ 366.031177][T11790] netlink: 'syz.3.1963': attribute type 11 has an invalid length. [ 366.050437][T11790] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1963'. [ 366.377798][T11789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.531997][T11796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1965'. [ 367.923334][T11833] netlink: 'syz.0.1976': attribute type 39 has an invalid length. [ 368.159441][T11838] netlink: 'syz.1.1979': attribute type 11 has an invalid length. [ 368.169524][T11838] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1979'. [ 368.242459][T11837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.968376][T11856] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 370.294253][T11894] netlink: 'syz.4.1996': attribute type 10 has an invalid length. [ 370.871301][T11912] sit0: entered allmulticast mode [ 370.928679][T11912] sit0: entered promiscuous mode [ 371.588166][T11932] netlink: 'syz.0.2007': attribute type 28 has an invalid length. [ 372.535312][T11951] netlink: 'syz.3.2013': attribute type 4 has an invalid length. [ 372.653763][T11951] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2013'. [ 372.708581][T11951] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 372.773808][T11957] sit0: left promiscuous mode [ 372.936206][T11960] sit0: entered promiscuous mode [ 372.955674][T11961] netlink: 'syz.1.2016': attribute type 10 has an invalid length. [ 373.008934][T11961] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2016'. [ 373.771336][T11967] sit0: entered allmulticast mode [ 374.109816][T11986] netlink: 22 bytes leftover after parsing attributes in process `syz.3.2021'. [ 374.177445][T11986] netlink: 'syz.3.2021': attribute type 10 has an invalid length. [ 374.198470][T11986] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2021'. [ 374.271566][T11974] sit0: entered promiscuous mode [ 374.720160][T12000] netlink: 'syz.4.2025': attribute type 11 has an invalid length. [ 374.729001][T12000] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2025'. [ 374.850834][T11998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.013022][T12003] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2038'. [ 375.302023][T12012] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.2031'. [ 375.342014][ T55] Bluetooth: hci2: unexpected subevent 0x05 length: 14 > 12 [ 375.481894][T12024] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 375.921669][T12036] netlink: 'syz.4.2039': attribute type 11 has an invalid length. [ 375.957857][T12036] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2039'. [ 376.117577][T12035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 376.156927][T12041] IPv6: Can't replace route, no match found [ 376.189968][T12044] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2042'. [ 376.270938][T12044] bridge_slave_0 (unregistering): left promiscuous mode [ 376.281953][T12044] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.382998][T12047] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.2043'. [ 376.396746][T12049] netlink: 'syz.0.2044': attribute type 10 has an invalid length. [ 376.498894][T12049] team0: Port device macvlan0 added [ 376.875562][T12056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.911357][T12067] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2049'. [ 377.383715][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 377.689366][T12082] netlink: 'syz.4.2054': attribute type 11 has an invalid length. [ 377.747276][T12082] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2054'. [ 378.045978][T12080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.421036][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.428381][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.593624][T12084] netlink: 'syz.2.2053': attribute type 29 has an invalid length. [ 378.824171][T12101] netlink: 'syz.4.2060': attribute type 29 has an invalid length. [ 378.864954][T12106] netlink: 'syz.0.2062': attribute type 10 has an invalid length. [ 378.921101][T12106] bridge0: port 3(netdevsim0) entered blocking state [ 378.947795][T12106] bridge0: port 3(netdevsim0) entered disabled state [ 378.977636][T12106] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 379.008049][T12106] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 379.054502][T12116] netlink: 'syz.3.2065': attribute type 49 has an invalid length. [ 379.268190][T12122] wg2: entered promiscuous mode [ 379.275686][T12122] wg2: entered allmulticast mode [ 379.288811][T12124] netlink: 'syz.3.2068': attribute type 10 has an invalid length. [ 380.006271][T12140] netlink: 'syz.2.2075': attribute type 10 has an invalid length. [ 380.038006][T12141] netlink: 'syz.3.2074': attribute type 39 has an invalid length. [ 380.637011][T12147] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.2077'. [ 381.286417][T12161] netlink: 'syz.3.2080': attribute type 39 has an invalid length. [ 381.521003][T12168] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.2083'. [ 381.678352][T12172] A link change request failed with some changes committed already. Interface Y4`Ҙ may have been left with an inconsistent configuration, please check. [ 383.129710][T12209] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 383.420573][T12209] syzkaller0: entered allmulticast mode [ 383.462564][T12214] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2101'. [ 383.545729][T12220] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 385.768843][T12247] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 385.780375][T12247] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 386.329989][T12267] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 386.497209][T12271] netlink: 'syz.2.2121': attribute type 11 has an invalid length. [ 386.510378][T12271] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2121'. [ 386.602518][T12270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.095295][T12321] netlink: 'syz.1.2136': attribute type 10 has an invalid length. [ 388.115551][T12320] netlink: 'syz.3.2137': attribute type 11 has an invalid length. [ 388.116074][T12321] netlink: 'syz.1.2136': attribute type 29 has an invalid length. [ 388.123495][T12320] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2137'. [ 388.397585][T12334] netlink: 'syz.0.2139': attribute type 39 has an invalid length. [ 388.852637][T12318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.905574][T12317] netlink: 'syz.1.2136': attribute type 29 has an invalid length. [ 388.913799][T12322] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2138'. [ 388.922904][T12331] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2138'. [ 388.960877][T12328] netlink: 'syz.1.2136': attribute type 29 has an invalid length. [ 390.146507][T12373] netlink: 'syz.3.2152': attribute type 11 has an invalid length. [ 390.193596][T12373] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2152'. [ 390.437075][T12378] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 390.448704][T12378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.465366][T12378] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 390.481660][T12378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.514842][T12372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.440199][T12405] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2164'. [ 391.530842][T12410] netlink: 'syz.0.2166': attribute type 10 has an invalid length. [ 391.545351][T12410] bridge0: port 2(vlan1) entered disabled state [ 391.562682][T12410] bridge0: port 2(vlan1) entered blocking state [ 391.569213][T12410] bridge0: port 2(vlan1) entered forwarding state [ 391.580415][T12410] team0: Device veth0_vlan failed to register rx_handler [ 391.597424][T12410] bridge0: port 2(vlan1) entered disabled state [ 391.630731][T12410] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2166'. [ 391.640542][T12410] netlink: 'syz.0.2166': attribute type 3 has an invalid length. [ 391.968067][T12416] netlink: 'syz.0.2168': attribute type 11 has an invalid length. [ 391.986412][T12416] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2168'. [ 392.015188][T12418] sock: sock_set_timeout: `syz.4.2169' (pid 12418) tries to set negative timeout [ 392.028420][T12418] netlink: 'syz.4.2169': attribute type 29 has an invalid length. [ 392.057614][T12415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 392.270473][T12427] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2171'. [ 392.790379][T12438] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.2176'. [ 392.927282][T12444] C: renamed from team_slave_0 [ 392.948817][T12444] netlink: 'syz.0.2189': attribute type 1 has an invalid length. [ 392.974287][T12444] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2189'. [ 393.416791][T12460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2183'. [ 393.436313][T12457] netlink: 'syz.4.2184': attribute type 10 has an invalid length. [ 393.717252][T12457] bond0: (slave O3c): Releasing backup interface [ 393.750977][T12457] mac80211_hwsim hwsim3 O3c: left promiscuous mode [ 394.182470][T12457] team0: Port device O3c added [ 395.039630][T12485] A link change request failed with some changes committed already. Interface Y4`Ҙ may have been left with an inconsistent configuration, please check. [ 396.017469][T12504] netlink: 'syz.1.2201': attribute type 11 has an invalid length. [ 396.037230][T12504] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2201'. [ 396.055118][T12506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2200'. [ 396.225650][T12502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.540865][T12517] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2205'. [ 396.669982][T12521] A link change request failed with some changes committed already. Interface Y4`Ҙ may have been left with an inconsistent configuration, please check. [ 396.679143][T12519] netlink: 'syz.1.2204': attribute type 39 has an invalid length. [ 396.983882][T12526] netlink: 'syz.3.2208': attribute type 39 has an invalid length. [ 398.515237][T12564] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2218'. [ 398.715999][T12570] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 398.717827][T12573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2219'. [ 399.504929][T12584] sit0: left promiscuous mode [ 399.570675][T12590] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.2228'. [ 400.187950][T12592] sit0: entered promiscuous mode [ 400.926141][T12619] A link change request failed with some changes committed already. Interface Y4`Ҙ may have been left with an inconsistent configuration, please check. [ 401.179001][T12625] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2239'. [ 401.409748][T12633] netlink: 'syz.2.2242': attribute type 9 has an invalid length. [ 401.419328][T12633] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2242'. [ 402.413664][T12653] netlink: 'syz.0.2250': attribute type 2 has an invalid length. [ 402.421454][T12653] netlink: 'syz.0.2250': attribute type 8 has an invalid length. [ 402.513412][T12656] netlink: 'syz.3.2249': attribute type 10 has an invalid length. [ 402.541488][T12653] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2250'. [ 403.058684][T12640] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2241'. [ 403.409603][T12656] bridge0: port 1(netdevsim0) entered blocking state [ 403.417033][T12656] bridge0: port 1(netdevsim0) entered disabled state [ 403.425047][T12656] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 403.441319][T12656] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 403.506922][T12665] GPL: port 1(erspan0) entered blocking state [ 403.524539][T12665] GPL: port 1(erspan0) entered disabled state [ 403.530868][T12665] erspan0: entered allmulticast mode [ 403.547252][T12665] erspan0: entered promiscuous mode [ 403.800753][T12679] sit0: left promiscuous mode [ 404.221098][T12673] sit0: entered promiscuous mode [ 404.263931][T12692] netlink: 'syz.0.2259': attribute type 10 has an invalid length. [ 404.281129][T12692] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2259'. [ 404.527877][T12699] netlink: 'syz.1.2262': attribute type 10 has an invalid length. [ 404.557683][T12692] batadv_slave_1: entered promiscuous mode [ 404.568871][T12692] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.579773][T12692] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.589651][T12692] bridge0: port 4(batadv_slave_1) entered blocking state [ 404.613648][T12692] bridge0: port 4(batadv_slave_1) entered disabled state [ 404.620817][T12692] batadv_slave_1: entered allmulticast mode [ 404.640473][T12692] bridge0: port 4(batadv_slave_1) entered blocking state [ 404.647728][T12692] bridge0: port 4(batadv_slave_1) entered forwarding state [ 404.677939][T12699] team0: Port device netdevsim0 added [ 404.922055][T12715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2266'. [ 405.013559][T12712] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2267'. [ 405.341209][T12727] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 405.617051][T12735] netlink: 'syz.2.2277': attribute type 28 has an invalid length. [ 405.629939][T12735] netlink: 'syz.2.2277': attribute type 4 has an invalid length. [ 405.650431][T12735] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2277'. [ 405.737083][ T12] [ 405.739451][ T12] ====================================================== [ 405.746494][ T12] WARNING: possible circular locking dependency detected [ 405.753615][ T12] 6.15.0-rc3-syzkaller-gf2858f308131 #0 Not tainted [ 405.760206][ T12] ------------------------------------------------------ [ 405.767236][ T12] kworker/u8:0/12 is trying to acquire lock: [ 405.773234][ T12] ffff88805fd08e00 (team->team_lock_key#5){+.+.}-{4:4}, at: team_port_change_check+0x51/0x1e0 [ 405.783580][ T12] [ 405.783580][ T12] but task is already holding lock: [ 405.790948][ T12] ffff888056ea0d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __linkwatch_run_queue+0x616/0x940 [ 405.801592][ T12] [ 405.801592][ T12] which lock already depends on the new lock. [ 405.801592][ T12] [ 405.811991][ T12] [ 405.811991][ T12] the existing dependency chain (in reverse order) is: [ 405.821079][ T12] [ 405.821079][ T12] -> #1 (&dev_instance_lock_key#20){+.+.}-{4:4}: [ 405.829680][ T12] lock_acquire+0x116/0x2f0 [ 405.834702][ T12] __mutex_lock+0x1a5/0x10c0 [ 405.839805][ T12] dev_set_mtu+0x11c/0x270 [ 405.844744][ T12] team_add_slave+0x83b/0x28b0 [ 405.850022][ T12] do_set_master+0x579/0x730 [ 405.855128][ T12] do_setlink+0xf76/0x4390 [ 405.860057][ T12] rtnl_newlink+0x17e2/0x1fe0 [ 405.865244][ T12] rtnetlink_rcv_msg+0x80f/0xd70 [ 405.870692][ T12] netlink_rcv_skb+0x208/0x480 [ 405.875967][ T12] netlink_unicast+0x7f8/0x9a0 [ 405.881242][ T12] netlink_sendmsg+0x8c3/0xcd0 [ 405.886527][ T12] __sock_sendmsg+0x221/0x270 [ 405.891726][ T12] ____sys_sendmsg+0x523/0x860 [ 405.897008][ T12] __sys_sendmsg+0x271/0x360 [ 405.902128][ T12] do_syscall_64+0xf3/0x210 [ 405.907166][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.913577][ T12] [ 405.913577][ T12] -> #0 (team->team_lock_key#5){+.+.}-{4:4}: [ 405.921750][ T12] validate_chain+0xa69/0x24e0 [ 405.927029][ T12] __lock_acquire+0xad5/0xd80 [ 405.932230][ T12] lock_acquire+0x116/0x2f0 [ 405.937254][ T12] __mutex_lock+0x1a5/0x10c0 [ 405.942380][ T12] team_port_change_check+0x51/0x1e0 [ 405.948180][ T12] team_device_event+0x437/0x5b0 [ 405.953628][ T12] notifier_call_chain+0x1a5/0x3f0 [ 405.959256][ T12] netif_state_change+0x12b/0x1b0 [ 405.964804][ T12] linkwatch_do_dev+0x112/0x170 [ 405.970172][ T12] __linkwatch_run_queue+0x63b/0x940 [ 405.976065][ T12] linkwatch_event+0x4c/0x60 [ 405.981172][ T12] process_scheduled_works+0xac3/0x18e0 [ 405.987254][ T12] worker_thread+0x870/0xd50 [ 405.992355][ T12] kthread+0x7b7/0x940 [ 405.996944][ T12] ret_from_fork+0x4b/0x80 [ 406.001899][ T12] ret_from_fork_asm+0x1a/0x30 [ 406.007179][ T12] [ 406.007179][ T12] other info that might help us debug this: [ 406.007179][ T12] [ 406.017414][ T12] Possible unsafe locking scenario: [ 406.017414][ T12] [ 406.024852][ T12] CPU0 CPU1 [ 406.030201][ T12] ---- ---- [ 406.035550][ T12] lock(&dev_instance_lock_key#20); [ 406.040834][ T12] lock(team->team_lock_key#5); [ 406.048373][ T12] lock(&dev_instance_lock_key#20); [ 406.056181][ T12] lock(team->team_lock_key#5); [ 406.061142][ T12] [ 406.061142][ T12] *** DEADLOCK *** [ 406.061142][ T12] [ 406.069277][ T12] 4 locks held by kworker/u8:0/12: [ 406.074379][ T12] #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 406.086066][ T12] #1: ffffc90000117c60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 406.097136][ T12] #2: ffffffff900fd848 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 406.106110][ T12] #3: ffff888056ea0d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __linkwatch_run_queue+0x616/0x940 [ 406.117173][ T12] [ 406.117173][ T12] stack backtrace: [ 406.123090][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.15.0-rc3-syzkaller-gf2858f308131 #0 PREEMPT(full) [ 406.123113][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 406.123126][ T12] Workqueue: events_unbound linkwatch_event [ 406.123146][ T12] Call Trace: [ 406.123152][ T12] [ 406.123159][ T12] dump_stack_lvl+0x241/0x360 [ 406.123185][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 406.123207][ T12] ? __pfx__printk+0x10/0x10 [ 406.123230][ T12] ? print_lock+0x171/0x1a0 [ 406.123255][ T12] print_circular_bug+0x2e1/0x300 [ 406.123274][ T12] check_noncircular+0x142/0x160 [ 406.123299][ T12] validate_chain+0xa69/0x24e0 [ 406.123325][ T12] __lock_acquire+0xad5/0xd80 [ 406.123360][ T12] lock_acquire+0x116/0x2f0 [ 406.123380][ T12] ? team_port_change_check+0x51/0x1e0 [ 406.123401][ T12] __mutex_lock+0x1a5/0x10c0 [ 406.123416][ T12] ? team_port_change_check+0x51/0x1e0 [ 406.123437][ T12] ? team_port_change_check+0x51/0x1e0 [ 406.123452][ T12] ? bond_netdev_event+0xe0/0xfb0 [ 406.123466][ T12] ? __pfx___mutex_lock+0x10/0x10 [ 406.123485][ T12] ? __asan_memset+0x23/0x50 [ 406.123506][ T12] team_port_change_check+0x51/0x1e0 [ 406.123525][ T12] team_device_event+0x437/0x5b0 [ 406.123540][ T12] ? notifier_call_chain+0x15a/0x3f0 [ 406.123555][ T12] notifier_call_chain+0x1a5/0x3f0 [ 406.123571][ T12] netif_state_change+0x12b/0x1b0 [ 406.123590][ T12] ? __pfx_netif_state_change+0x10/0x10 [ 406.123611][ T12] ? rfc2863_policy+0x1ce/0x3f0 [ 406.123634][ T12] linkwatch_do_dev+0x112/0x170 [ 406.123657][ T12] __linkwatch_run_queue+0x63b/0x940 [ 406.123671][ T12] ? __pfx___mutex_lock+0x10/0x10 [ 406.123688][ T12] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 406.123705][ T12] ? process_scheduled_works+0x9cb/0x18e0 [ 406.123727][ T12] linkwatch_event+0x4c/0x60 [ 406.123740][ T12] process_scheduled_works+0xac3/0x18e0 [ 406.123773][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 406.123799][ T12] ? assign_work+0x367/0x3d0 [ 406.123822][ T12] worker_thread+0x870/0xd50 [ 406.123841][ T12] ? __kthread_parkme+0x1a8/0x200 [ 406.123857][ T12] ? __pfx_worker_thread+0x10/0x10 [ 406.123870][ T12] kthread+0x7b7/0x940 [ 406.123888][ T12] ? __pfx_worker_thread+0x10/0x10 [ 406.123902][ T12] ? __pfx_kthread+0x10/0x10 [ 406.123917][ T12] ? __pfx_kthread+0x10/0x10 [ 406.123933][ T12] ? __pfx_kthread+0x10/0x10 [ 406.123949][ T12] ? __pfx_kthread+0x10/0x10 [ 406.123964][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 406.123985][ T12] ? lockdep_hardirqs_on+0x9d/0x150 [ 406.123999][ T12] ? __pfx_kthread+0x10/0x10 [ 406.124016][ T12] ret_from_fork+0x4b/0x80 [ 406.124030][ T12] ? __pfx_kthread+0x10/0x10 [ 406.124047][ T12] ret_from_fork_asm+0x1a/0x30 [ 406.124067][ T12]