last executing test programs: 1m36.136367734s ago: executing program 0 (id=2832): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000095000000000000004be98911ed523cf4451d51e400cbd30efbb0a73ceb2b050a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868162ff933958cb6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e281ef0b7a1a97b2c8c5617bff8c9441a45fd951df19a9c6e933500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000e0000", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x8, 0xfffffffffffffffe, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000940)=ANY=[@ANYBLOB="18050000000000000000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b7030000000000008500000019000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xdd, &(0x7f0000000340)=""/221}, 0x94) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x100, 0x2000000, 0xd384ed8852b2f03d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f3, &(0x7f0000000080)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x8004745a, &(0x7f0000000180)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x9, 0x5, 0x4, 0xc1, 0xffffffffffffffff, 0x1000000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380), 0x3d, r6}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000840)={r6, &(0x7f0000000580), &(0x7f0000000940)=""/208}, 0x20) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 1m30.685730992s ago: executing program 2 (id=2842): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014009080c00000000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4) r0 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8148, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000240)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000280)='0', 0x1}], 0x1}, 0x45) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x18, &(0x7f0000000000)=r4, 0x8) mkdir(&(0x7f00000000c0)='./file/file0\x00', 0x0) 1m30.493582776s ago: executing program 0 (id=2845): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x9, 0x10}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r2, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000680), &(0x7f00000006c0)=[0x0], 0x0, 0x3c, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xac, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000080), &(0x7f0000000200)=r3}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000cc0)={@cgroup, 0x11, 0x1, 0x9, 0x0, 0x0, 0x0, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c80)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001040)=ANY=[@ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="7bb7027998b5fbbb8d1c84db286b97fda5cb2392e225a06be26b5bd9330ba6aa6ac980e33d7477337b5ad478c5375398e91d547ed89295d3c85b7781f27a3285c17f", @ANYRES32=r4, @ANYRES64=r6], 0x20) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x804) write$cgroup_int(r7, &(0x7f0000000600)=0xd, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x9, '\x00', r5, r7, 0x2, 0x2, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184"], 0xfdef) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x9, 0x10}, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r2, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000680), &(0x7f00000006c0)=[0x0], 0x0, 0x3c, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xac, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000080), &(0x7f0000000200)=r3}, 0x20) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000cc0)={@cgroup, 0x11, 0x1, 0x9, 0x0, 0x0, 0x0, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c80)=[0x0]}, 0x40) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001040)=ANY=[@ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="7bb7027998b5fbbb8d1c84db286b97fda5cb2392e225a06be26b5bd9330ba6aa6ac980e33d7477337b5ad478c5375398e91d547ed89295d3c85b7781f27a3285c17f", @ANYRES32=r4, @ANYRES64=r6], 0x20) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x804) (async) write$cgroup_int(r7, &(0x7f0000000600)=0xd, 0x18) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x9, '\x00', r5, r7, 0x2, 0x2, 0x2}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) 1m30.31523734s ago: executing program 1 (id=2847): perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3fc2bda6, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000000)=r0, 0x4) r2 = socket$kcm(0x2, 0x6, 0x0) socket$kcm(0x2, 0x1000000000000005, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000011c0)=ANY=[], 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013600000000009500000000000000e25d05293a923c8a2d969ef4cb98fd13db0f37d6a0b2bc2c5a480a6a4f41ee29b8bc16a8eaa8363313a06a694684aa507d06f980b9e0febb0ba716bf7dd6ae67cfa4f15ad227d2a014cad11c093844c9bb182f9ca8ced356066b5440e7d69ccf2d68d792689f74b02d739e9d89fa2423af026527056f16171c57631c222a0d04cb5d26c86548"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x3e8) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x0, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="850000002200000007000000000000089500000000000000e26c9bd1a6361b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a0091000b00b80000fc005f02"], 0xfe33) 1m30.058073505s ago: executing program 0 (id=2848): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="5c254ad78b876adcdbece7585b3f238f881ff7ccf303c55b12b04f0bf1e3d86e17aa0a046b876c1d008fc148007ea60864160bf3650000001d50de295e7ae2f5f5356cdaf1df004b6e28d3397537315ab200000000a0e69ee517d34460bc", 0x5e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10002) recvmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b40)=""/177, 0xb1}, {&(0x7f0000000140)=""/74, 0x4a}, {&(0x7f0000000c00)=""/4115, 0x1013}], 0x3}, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, [@jmp={0x5, 0x0, 0x2, 0x7, 0x7, 0xfffffffffffffffc, 0x8}, @call={0x85, 0x0, 0x0, 0xa2}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000001c0)='GPL\x00', 0x7fff, 0xdc, &(0x7f00000002c0)=""/220, 0x41100, 0x1, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000400)=[{0x4, 0x2, 0x6, 0x8}, {0x4, 0x1, 0x6, 0x4}, {0x1, 0x5, 0xf, 0x6}, {0x4, 0x5, 0x5, 0xa}, {0x3, 0x1, 0xa, 0x8}, {0x0, 0x3, 0xf, 0x8}, {0x5, 0x4, 0xf, 0x8}, {0x0, 0x5, 0xe, 0x9}, {0x1, 0x3, 0xc, 0xc}], 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x62}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@ifindex, 0x13, 0x1, 0x46cb, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300), 0x0}, 0x40) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000400)=[{}], 0x1}, 0x48014) sendmsg(r4, 0x0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x6}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001e80)=ANY=[@ANYRESDEC=r1, @ANYRES32=r2, @ANYBLOB="220000002b0000023239d66d380e37381ecb3ad6e4d7fcb984507eef6531b751fab997da6944821dd7a92d8e5e1c613e39c6cc78ca33adee1f2954adc5534ea6b79eb3f4ba0797a63156a5f0c54ad576fab164c773b82a54f5151ddba36bb266796169583f883477860877650446ae0ef2a762264442ebffd7b0c52051b518ed9734709ce0aacce25bcf4f77c4b927ec984ee85e137826d09008b85ff9c10bf12d38bfe61d01b99695fc298c3fe1e356f4bc37728e5b86b8f48b7eb383625f4b054634f9f9480d2fc2867309d0db30a90b1524202cd11fa76458b3bd110000000000000000007f49d0f6f135c672e207154733d1fbbf60be7290f2d7d14d6bc42404627b78ed03830d60370bcf6fbb1003eef558f6ce612e9f8351b12878101616e00432cbf93d1fd84d323dd7034beca1dc4ffbf4db9d052fa0a6337428ab47726a6f9f2b2370196d3546353bb10ae24dde299a4aee30847a0a054b1aed4048f2aeeb6c74e8c032e04212b1c323184998bcaab652775a014a2f5e9d219abc049c36b9b4fbbbdcfee57da588df34ca1c5e2df63900181d1e1beb373379ab618887450c4ad43b457bba89b29fa7d13da94800820da63b55b6e313e582709fd69066c721b00f55c527ce19c5344d880b66746cf022817f7c542998f18824a31a6fd9ca76f314fb603c35a5d4be4f7e2f4f97500f8731bc8e07a25d5da92f3b43da2c64dbe8464c3286c66d7449d9e965275926d712d1dc3023b5628a7dbf54afbc3ebf6661240c3abacd4c1b27e74559f21a6a990c10e4c96e7202ff741e19539f749015f6209c5c6d371897cff00282a5f9a0817aa4417d914b6ecd68dafcf5db4ea76e84dc8771877b2bcf792837dc90d75af50fa9771fdb26d0a1cb23f65720eab9736cf26f6d877f65f54eaf58d857dbe4e11750a63f6cd37a0db99d7d3d5e2e36af7aecaec2fb6715f3d5", @ANYRES32, @ANYBLOB, @ANYRES32=r3, @ANYRES64=r3], 0x20) r5 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00-\x00Y'], 0xfe33) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x9, &(0x7f0000002240)=ANY=[@ANYBLOB="180000000900008b4f0000000200000b47169748d1bbd2758deb058a509feb0155b539ba7203fb6bab19d471e4c05f63dff5b5a0d10a09f035462adca847e49bea84a843afa31bd320bf0001a7bd22e147246986db8721e13bfc939cd26ad8cfc4a349af3aed31f0000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000005d850200170000009500000000000000"], &(0x7f0000000680)='GPL\x00', 0x7, 0xe4, &(0x7f00000006c0)=""/228, 0x41100, 0x32, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0x10, 0x4, 0x105}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000880)=[0xffffffffffffffff], &(0x7f00000008c0)=[{0x5, 0x2, 0x7, 0xf}, {0x3, 0x4, 0x2, 0x4}, {0x3, 0x1, 0xe, 0x6}], 0x10, 0x3}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@ifindex, r1, 0xa, 0x0, r2, @void, @value=r6, @void, @void, r3}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={0x1, 0x58, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$sock(r4, &(0x7f0000002200)={&(0x7f0000000a80)=@can={0x1d, r7}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000000b00)="352edf80da137c11de44bdd81b5c6627085eb4dd919785b6406fd1f5db7b7d21c740d8b3bc4a", 0x26}, {&(0x7f0000001c40)="46517c0c0a607a4bf8014f1236b38c080a7fed94b3c1add26039923d6d875d9426919d409c85d2320a487b0b5aee3028882a3c4d59d5ce5b2195bb8e0e9ed6547059ce62283817c5e9224cb121865718e537028e39a309618029422f9c659e47c80bd68db73d9e5afa08d915fc47c599db435567ea1a23e70b29407a5a76e7c17f055fec3c26d73f263ab0372129ae6361695f082d4808895c14d5c1103edf3b9b53f56d3357080e7d1985a80c1d9ab99a5b2e78456bc99a6df6", 0xba}, {&(0x7f0000001d00)="5aa087227e51fa06ebf6ec85481952a413a285ee5285cc6203841a1e7bbe3921ddcb0ac57144ed9c71441352e4c1bacb544e5464ecff66e0500c41335569336cf0963289a7b215561b09bfaa5a1899e60e2fa4e2431014c11be6f6cab604d060c8bfbb9cf6ee53ab803cf858d8e2d1f697577cae26fb621f0896c6895c80a3acfec524026c6f8f4cb06780f2dd", 0x8d}, {&(0x7f0000001dc0)="6cfb8084ab9da88f8d13ff0c3654d3778efba1f1cf9d2ae7607b1c325c5a65e4ffef1b061dbb92cc76a3007e064293e249", 0x31}], 0x4, &(0x7f0000002180)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0xfff}}, @timestamping={{0x14, 0x1, 0x25, 0xffff}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x515c}}], 0x78}, 0x0) 1m30.055301366s ago: executing program 2 (id=2849): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1a82, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x109242, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) 1m30.003100017s ago: executing program 3 (id=2850): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xfffffffffffffeb8, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d080207000000810000a1180002478800000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40000) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5c00000010006b6d373be35c6e17aa31046a876c1d0000007ea60864160af26508001dc0c3000200340031009ee517d34460bc24eab556a745251e618294ff0051f60a84c9f472736f67c5e73bb9e5c446fa30be62cbd4938037e786", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0xc0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000065096db8000000000000009400000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) 1m29.944359768s ago: executing program 1 (id=2851): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'bond_slave_1\x00', 0x8000}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x7}, {0x6}]}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[], 0x0, 0x26}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x746}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0902, 0x0) close(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff5) ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180)) (async) ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180)) getpid() (async) getpid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ff7f00000000000078400000086c02000008df00bf200200080000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x4, '\x00', r4, 0x17, r1, 0x8, &(0x7f0000000580)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x0, 0x10000, 0x2}, 0x10, 0x906a, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000640)=[{0x3, 0x2, 0x8, 0x7}, {0x4, 0x4, 0x6, 0x8}, {0x4, 0x3, 0xd}, {0x2, 0x5, 0x3, 0x9}, {0x5, 0x1, 0x4}], 0x10, 0x1ff}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ff7f00000000000078400000086c02000008df00bf200200080000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x4, '\x00', r4, 0x17, r1, 0x8, &(0x7f0000000580)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x0, 0x10000, 0x2}, 0x10, 0x906a, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000640)=[{0x3, 0x2, 0x8, 0x7}, {0x4, 0x4, 0x6, 0x8}, {0x4, 0x3, 0xd}, {0x2, 0x5, 0x3, 0x9}, {0x5, 0x1, 0x4}], 0x10, 0x1ff}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r3, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0), 0x0, 0x47, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x28, 0xfffffffffffffddd, 0x0, &(0x7f00000005c0), 0x8, 0x50, 0x8, 0x0, 0x0}}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000a80), 0x8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32], &(0x7f0000000000)='GPL\x00', 0x5, 0xde, &(0x7f0000000340)=""/222}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32], &(0x7f0000000000)='GPL\x00', 0x5, 0xde, &(0x7f0000000340)=""/222}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xa, 0x75, 0x0, 0x0, 0x9, 0x400b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xa, 0x75, 0x0, 0x0, 0x9, 0x400b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_clone(0xe69d6eb614d5b6bc, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000140)="d7d8edcb", 0x4}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000003a00)=ANY=[], 0x1010}, 0x40) (async) sendmsg$kcm(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000140)="d7d8edcb", 0x4}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000003a00)=ANY=[], 0x1010}, 0x40) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[], 0x6a) (async) write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[], 0x6a) 1m29.84423382s ago: executing program 3 (id=2852): perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x3, 0x4, 0x0, 0x4043, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x7}, 0x0, 0x0, 0x80000001, 0x5, 0xd, 0xfffffffc, 0x0, 0x0, 0x3, 0x0, 0x1000000000007}, 0x0, 0x9, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a000000800000000642"], 0xfdef) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async, rerun: 32) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 32) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x1, 0x2}, 0x50) bpf$MAP_LOOKUP_ELEM(0x4, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06000000040000000400000009"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000fc007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001a00)={r4, 0x1}, 0xc) (async) ioctl$SIOCSIFHWADDR(r1, 0x8916, &(0x7f0000000040)={'bond_slave_1\x00', @random="0200"}) (async, rerun: 32) r5 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) (rerun: 32) write$cgroup_pressure(r5, &(0x7f0000000080)={'some', 0x20, 0x2004000008, 0x20, 0x10000000fffff}, 0x2f) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x40, 0x3}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0xfffc, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x3, 0x0, 0x0, 0x11, 0x3}, @typedef={0x0, 0x0, 0x0, 0x4}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x51}, 0x20) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022000b48f1f403c5c0de7af90124fc60", 0x14}], 0x1}, 0x0) r8 = bpf$TOKEN_CREATE(0x24, &(0x7f0000001880), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001840)={&(0x7f00000018c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x153, 0x153, 0x7, [@float={0x2, 0x0, 0x0, 0x10, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5}}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x40, [{0x2, 0x4, 0x7ff}]}, @ptr={0x10}, @ptr={0x3, 0x0, 0x0, 0x2, 0x4}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x9, 0x3}, {0xe}, {0x9}]}, @datasec={0xd, 0xa, 0x0, 0xf, 0x3, [{0x3, 0x8000, 0x8}, {0x3, 0x8, 0x9}, {0x1, 0x75, 0xc611}, {0x4, 0x8001, 0x9}, {0x2, 0xceb, 0x1}, {0x5, 0x8000, 0xfffffff8}, {0x2, 0xb6c, 0xfffffffb}, {0x5, 0x2, 0x9}, {0x4, 0x3, 0x2}, {0x4, 0xd06, 0x10001}], "061f72"}, @fwd={0x5}, @fwd={0xc}, @struct={0x10, 0x4, 0x0, 0x4, 0x0, 0x6, [{0x8, 0x4, 0x5}, {0x6, 0x4, 0xc}, {0xa, 0x2, 0x5f}, {0x4, 0x4, 0x4}]}]}, {0x0, [0x30, 0x30, 0x30, 0x7f, 0x61]}}, &(0x7f0000000840)=""/4096, 0x173, 0x1000, 0x0, 0x9, 0x10000, @value=r8}, 0x28) (async) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 1m29.725311833s ago: executing program 2 (id=2853): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='syzkaller\x00'}, 0x51) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8004}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000000) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x338bd4001d9e672f) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f086dd47e08906200060000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) sendmsg(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000000)=@hci={0x1f, 0x3}, 0x80, &(0x7f0000000800)=[{&(0x7f00000002c0)="847ff80051a9e3e849bf612c7aedcb90958f60b47e5234011323399f25880acf235e5e6d982b345b342802450595aaa5660485fdb53b4044dd6321f71b0ae9569ce2bfe32a87bc28502c2d1bc74d02068108c0ecf763bb75b349af94e4db283f932037efe27b1b902461c8d634a072fc287deb8e4f28e99bf38c50d654b390c6cedfa757e472a05e0093962315c9d7478cb2c6a02733711f876d48bdc15a7b0fbca4c5d77c9f0990303beb695ba1bef6dc1150e28ba530dc1b3c7c741449deab97e20c3124472166bcd63a3dd9dae6f2c17bb8fd2e3701606b4653a41dc2b527801824011fd535854df705c4", 0xec}, {&(0x7f0000000400)="f72e721f9988d632131fb26ddd6ea78154d705ee89a1cd75048e09fa7ce88c26e9435bc232be697b01e1d2bcd97d71a8b1bd7aab3289573eea4a271b0254ed8621f47cdd42276fa67672eafd8aae12a089941043404ca9e849499b0ed75605fbf23201347de6101e1a85242713a7c93690b91ccbaa3f1fd451de63", 0x7b}, {&(0x7f0000000580)="b1f91d9030e1fbc5f42c949575d01e9d323038b85ff3b04ab66d681b60c83ae0508fad8e5c7e0afea746d8f2e5f25bba0f536b4a79911e43ee85ac8f9424899d0538b9e4b17ad2ba68e67ee654764377b3a559021b2b0f43949623e489a5b78fc7b5331e16a03eff4ca148f01478fbbdb2a5", 0x72}, {&(0x7f0000000680)="f7137cab5b3b12593ff66e3aea5fa17464b9f900adba0d0fad99b18fa0b263212e02711b28492999d50bff403c9c586e4b7ece687b24e59e5658a2b2f39ceabb734acb3508c745ec3c044326702a702a25a0d75ee871ad7a8378c683abff898fb7daed438d9d01f695261d25d13db0071df2e405265565", 0x77}, {&(0x7f0000000700)="cc70f27f712a028626c9f868dae750a100725acb2019d149fc7421e8741803395d7c811c7bef9e7927fa4f61bd98bbd6b348d7963c3d5ca9ec8afb4acb3c58e445caa72b904e3fa891bacf96041f01baa8bd16d4740a668881ff6439f63f2809", 0x60}, {&(0x7f0000000780)="cbd91ca15c4ed6f80bdfaf2baae3e9b0cdd7edaa7b372d2f89b0355ffa6b208d8413c66e84b0a0aaa2db87378ec594f9319c1f181e46eecbe2a85b160150ea49a704664be1", 0x45}], 0x6, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x220}, 0x40050) 1m29.659099674s ago: executing program 3 (id=2854): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.events\x00', 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000580)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/9, 0x9}, {&(0x7f0000000100)=""/9, 0x9}, {&(0x7f0000000140)=""/115, 0x73}, {&(0x7f00000001c0)=""/34, 0x22}, {&(0x7f0000000200)=""/99, 0x63}, {&(0x7f0000000280)=""/153, 0x99}, {&(0x7f0000000340)=""/218, 0xda}], 0x7, &(0x7f00000004c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}, 0x40000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r0, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0], 0x0, 0x57, &(0x7f00000007c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0xc7, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@ifindex=r2, 0x13, 0x0, 0x3, &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x15, 0x100, 0x1ff, 0x7, 0x10000, 0x1, 0x1, '\x00', 0x0, r1, 0x5, 0x0, 0x0, 0x0, @void, @value, @value=r1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000bc0)={r1, &(0x7f0000000a80)="bde58cc24bd3c84e69d1353e8152b7a23c6030bcd49b60918eeadd5426a59cb33fbec1e4d93edbec684b9a43949095fae9d88e1ce1a3346e8cea9ba4e2190b48df69c1a08cc8c2c933319c842cae7c6f09ec5bec8a8bf0e1ad0ae9e29c928e08bb460ae02e2d4ae6e74584cbf8e071e14d5620a621a6983825fb0ba8c231595b05f46bd1c89dc9c9145e25c5f528dde67db9a823f8995fe803e51de22c53207e979181bb743fae7c9e4648c93ba3f7461897623a662d6c0d6aabe9ed5fa54e795b92818c9444ba688e1404649bf0aa0541366303506b3921a9ed7648e7a4ab374b78c1", &(0x7f0000000b80)=""/13}, 0x20) sendmsg(r1, &(0x7f0000000f40)={&(0x7f0000000c00)=@can={0x1d, r3}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000c80)="f2287702e64c58b45b48e0180046b9124a5b6e1b2c599feb667cd1719a54cfdf8152c1153ce5b44282626523738f5563db440cf7c22a7392951d244799233d8cf7bdbfcb0600954a616fb3028f89d132ef1f960b3e452834e93981cd91a8283a78e8889a91cc2f757eadd873a02afa4881ce1b5d", 0x74}, {&(0x7f0000000d00)="8534881a217410391aee5518f25ef3e115f11e0f34bcdb988a3d07c0818bc659049080894f8260cfada2445b0c0216f8cd26f3d75b42780786836f596d0bc295f0a5a6a615d2d87b387e6d02d183a7c1b2e2efc69733ccea5b4962e795bb54fd92622b3f9909fdb8e7f55dda866326a169140c86c045b749c51d6283", 0x7c}, {&(0x7f0000000d80)="5f83820d49f2396ec5268a50ccee7ef3c1d68c6f3fb462930ff7ca406cf3a9335fafda9f5d71439e8bc6cdffbd6c7637f8a92fcc77bcc2c0ca22d9f0f7e17ce2273940926d4cd83d7a6c7998e005959240c5c4d445e2de0c1348673972b702d456780746fc754e6351209bc054d58d91fccb714a6a3ea22d08bac962c6dcc03669e2b53c6fbd4ddf05e6b1cd695ff27dfc766f0c1637031745a8a6d9f0bdd478ff29f45ae0afc0859e61bd6fa345ad3a43c80d7ddb75d90e50b15aad2d3da994a500896dfdb88a6fc2ee6ec9f32566ec33763dfcc64c", 0xd6}, {&(0x7f0000000e80)="b35d7a79aa93b4011db8d65a985fd195b46fa888ad8ae332e30f1bd36391a35da1eada7bbdb2b6461f01a68d41348565c56363aa4cded4cea69c1a70835866dad2913639ba4d23423b321ff1cc49a64e7786df44d18e9add65f0110361c1afd7ad6fbb7506531be32ff5a88d1f3ed0d336", 0x71}], 0x4}, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000f80), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000001000)={0x5, 0x80, 0x1, 0x8, 0xba, 0xd2, 0x0, 0x100, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x800, 0x0, @perf_bp={&(0x7f0000000fc0), 0xe}, 0x1, 0x5, 0x9, 0x0, 0x8000000000000000, 0x4, 0x5, 0x0, 0x7, 0x0, 0x3}, 0xffffffffffffffff, 0x1, r1, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000012c0)={r0, 0x58, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@bloom_filter={0x1e, 0x8001, 0x2, 0x7fffffff, 0x0, 0x1, 0x6, '\x00', r2, r1, 0x0, 0x4, 0x3, 0x9}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x6, 0x13, &(0x7f0000001080)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @alu={0x7, 0x1, 0x7, 0x1, 0x3, 0x10, 0x8}], &(0x7f0000001140)='GPL\x00', 0x2, 0x9c, &(0x7f0000001180)=""/156, 0x41000, 0x40, '\x00', r5, 0x25, r1, 0x8, &(0x7f0000001300)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000001340)={0x0, 0xd, 0x80000000, 0xfffff793}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001400)=[r4, r1, r6, r0], 0x0, 0x10, 0x2a4}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001500)=r1, 0x4) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000016c0)={0x1b, 0x0, 0x0, 0x80000001, 0x0, r6, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x3, 0x1}, 0x50) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001780)=@generic={&(0x7f0000001740)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000017c0)={r6, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0xf, 0x4, &(0x7f0000001540)=@raw=[@map_fd={0x18, 0xa, 0x1, 0x0, r1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x24d}], &(0x7f0000001580)='syzkaller\x00', 0x3ff, 0x60, &(0x7f00000015c0)=""/96, 0x41000, 0x42, '\x00', 0x0, @fallback=0x23, r0, 0x8, &(0x7f0000001640)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000001680)={0x2}, 0x10, 0xffffffffffffffff, r1, 0x8, &(0x7f0000001800)=[r0, r4, r7, r4, r4, r1, r8, r6, r9], &(0x7f0000001840)=[{0x4, 0x5, 0xd, 0x8}, {0x3, 0x5, 0x2, 0xb}, {0x0, 0x1, 0x2, 0x5}, {0x3, 0x3, 0x6, 0xa}, {0x1, 0x5, 0x10, 0x7}, {0x2, 0x5, 0x7, 0x9}, {0x2, 0x2, 0x4, 0x2}, {0x5, 0x3, 0x5, 0xb}], 0x10, 0x14a6}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000001980), 0x40, 0x0) write$cgroup_subtree(r1, &(0x7f00000019c0)={[{0x2b, 'cpuacct'}, {0x2d, 'devices'}]}, 0x12) openat$tun(0xffffffffffffff9c, &(0x7f0000001a00), 0x2800, 0x0) syz_clone(0x0, &(0x7f0000001a40)="51044663e91de8f573813b4a2ebfcf7916f91358b23277896ad590c0f9dbd4f57c324b169895066ddecd5c6f5303d56e670843cdfc68c3b5293c32337d2253f95a5fdfdb610151d05e0bc6d3a9334acf1dbce3e41744cdbf125be1426a1eae673d27e35b8032977a8f234d57752ec396565956daecf32b4a27d1e997a3ee", 0x7e, &(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)="4784bfaca1466796c6e5ee9b52947f873725a4d897167004448be0e241c673d07e2e9d6444b53aa85d42d4f2b99e2f9b6b67b470da749f1a1c942559e6452bfe9dc3c5e7cc369eb8d21cbbe59f71b94033a3ef74c5fe9b3c1d8a5f9b630862588e4f69895fadddab0bf2201f5f15c1b92e89fbd2a51f05ebab71fbcabca22e3960aa7e8128df22cae3f929b358b7676ab3a7ee3229b9bb12fda740a3dc9a81abbfc4c77d959fbf21b27b31cc01cc71362aee4431650c85e0e1ed05b649f77d6baa336733cb612b78c2b25e6f49ecbca45b5ae0e4ef3f8c66b0da68f2a5e1b96c4ecd9dd3023bf22d5c76c62307") recvmsg(r1, &(0x7f0000001ec0)={&(0x7f0000001c40)=@isdn, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/160, 0xa0}], 0x1, &(0x7f0000001dc0)=""/248, 0xf8}, 0x22) socket$kcm(0x29, 0x2, 0x0) socketpair(0x1a, 0x4, 0x94, &(0x7f0000001f00)) write$cgroup_pressure(r0, &(0x7f0000001f40)={'some', 0x20, 0x0, 0x20, 0x57}, 0x2f) bpf$ENABLE_STATS(0x20, &(0x7f0000001f80), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r1, 0x0, 0xfb, 0x40, &(0x7f0000001fc0)="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", &(0x7f00000020c0)=""/64, 0x9, 0x0, 0xe9, 0xec, &(0x7f0000002100)="9954c05bb4c30f7793c54f3f8c94834082a2b16b394ab46f4d81240dd1d43213ae71724004caced9606c71bd2fb80da8b6722ae4aceac878c099036c33e3545773b3e0f4091589f71a7183855a35c9dba5e862502ef3f8c8b11ee1461942c96c49d78bb7a884cd2f6bdd050344feaf2d7d465c8f9428b9e6c77bab6c901384787fd514867c8a4ab4d6e6fddac6fdf97e2e59044b881171c5341988a76c0fe9924d32e73f7b33625d9209cec07fd10f70bccde2a6862b26c02ea50e3bd8323d311cc9c4e20404eb7fea4a5d93f450ffc37b781deb19d5a7e62d38bef85ce520109a281eaed1116fb692", &(0x7f0000002200)="728b155a635f829fb2ddfc074543ed042701e68cfea302bf66ed587417396e86d8cf1c9f1efcbd039c4b89ef9d202b73d5ae30253b4ecc2299bf67f8d7f80c772d94f1b1712afaec3308c0b4652dba39137523f30a7d926e8bc80547b07c8f682bd8f0c7358da13033027ab1e21549dd603d75979a57837d6a31d9c47de37c165d105c1486a3962a87e52175b95cd61f571a986572c1808d17d94563756fb1f383cafcd8bd10d6c7b6e55453aefc9355f797b0c2c12072368a233994d4d514c5852ce7c55348383dd24af4c2e26d6eaaa4c9552c19f4aba2f4b94cb439707b67ac530ad2a2c6abcd81f9160a", 0x7, 0x0, 0x2}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002640)={r1, 0xe0, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002380)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, &(0x7f00000023c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4c, &(0x7f0000002440)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000002480), &(0x7f00000024c0), 0x8, 0x7d, 0x8, 0x8, &(0x7f0000002500)}}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000026c0)=@generic={&(0x7f0000002680)='./file0\x00', r4}, 0x18) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000027c0), 0x4) 1m29.572307636s ago: executing program 1 (id=2855): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000b40)="b5640aae1e", 0x5}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080) (async) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) (async) socketpair(0x1, 0x801, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x8000000000, 0xda}, 0x101000, 0x7, 0x0, 0x0, 0x0, 0x7, 0x200, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000001000)={r2}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x8a0a5, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10002, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x891c, 0x0) (async) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000040)="02042700ea0e0300000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee8", 0x2e}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6", 0x12}], 0x2}, 0x40000) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100028, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x40000) 1m29.430111579s ago: executing program 2 (id=2856): perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x10014, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x2d15}, 0x0, 0x8000000, 0x0, 0x0, 0x3, 0x3, 0x1}, 0x0, 0x1000, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x8840) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x4, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff6eb, 0x0, 0x0, 0x0, 0xa}, [@generic={0x91, 0x1, 0x1, 0x97}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200"/31], 0x0, 0x26}, 0x28) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c319b2afffba969b38cf4de343a00d1d011b97d0cb91b70fcb0f374ca29506a7ba68bbd0fc635434ec92e2e725028fc0e886fd8b49765629039740b70ff58edde9d0bd920be2648b33a3a53724d7a4fd1cc896f8a7bbfe55dd39e358d4401e4a86d2661bdc5cb5ff3881ced037b6cc0f0d9b5bc650b6b03f86dfc3e3e87b94abf06de190ee6800b18be11eaa2caa8d693f4850697195a482277f4702ed368f320c72c8d29385b526efc0763aae61c145cd3428"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r6, 0xf0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000021c0), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8b36, &(0x7f0000000000)={'wlan1\x00', @random}) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x82, '\x00', r7, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, r8, r6, 0x0, &(0x7f0000000440)=[r9, r9], 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b70500000800000085000000c200000095", @ANYRES64=r4, @ANYRES8=r4], &(0x7f0000000300)='GPL\x00', 0x6, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', r7}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000) r11 = socket$kcm(0x2, 0x6, 0x0) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe0e41b0000900ac00060411000000040012000a0005000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db7259826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d00"/216, 0xd8}], 0x1}, 0x8000) setsockopt$sock_attach_bpf(r11, 0x1, 0x21, &(0x7f0000000240), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x9, 0x4, &(0x7f0000000780)=ANY=[@ANYRESOCT=r1], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$inet(r11, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4004, @dev={0xac, 0x14, 0x14, 0x4}}, 0x10, 0x0}, 0x28008840) r13 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000000)="0bf988aa4ce84305e84006121eb746462a417357814d5a35b216e8de29dce323fef392485c1dabacccb057228327c635375cd0b3f4b0a9479a68b912cbe6b767c9abe53c59b2d6362ef9b2a3a78b61a5950275f2a8fdf3", &(0x7f0000000100)=""/40, &(0x7f0000000140)="471c435a952ac5e3d7f9ff4e2aee856cc428684dcb0a401c9ce70935de0b2f882ea1da17e5502e3804f8e2ee4daf175092d816c39a26d8a983f89124d371e7202b87706b0b814b832fa3fa9572601d93b9", &(0x7f00000001c0)="36a3527c42a5e7e20222a94059048c4dbd4546adf542980686", 0x7dba}, 0x38) write$cgroup_subtree(r13, &(0x7f0000000080)=ANY=[@ANYBLOB="c00e00007200911fdabcf8b30771a54a07"], 0xfe33) 1m29.308860942s ago: executing program 3 (id=2857): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}}]}, &(0x7f0000000140)='syzkaller\x00', 0xfffff489, 0x9, &(0x7f00000001c0)=""/9, 0x41000, 0x72, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0xb, 0xc17d, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@cgroup, 0x8, 0x1, 0x2, &(0x7f00000003c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@o_path={&(0x7f0000000640)='./file0\x00', 0x0, 0x4000}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@map=r3, r1, 0x2c, 0x8, 0x0, @void, @value=r0, @void, @void, r2}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7ff, 0x43f}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) 1m29.224485834s ago: executing program 1 (id=2858): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4) r0 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8148, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000240)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000280)='0', 0x1}], 0x1}, 0x45) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x18, &(0x7f0000000000)=r4, 0x8) mkdir(&(0x7f00000000c0)='./file/file0\x00', 0x0) 1m29.219880634s ago: executing program 2 (id=2859): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x100000, 0xcc, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000005000000050000000020000000900d48fd6ee000e07000000010000000a0000000000000203000000000000000500000d00000000060000000300000000000000000000000000000000000000090000000000000001000000030010"], 0x0, 0x6a, 0x0, 0x0, 0x38}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000200000000000000000000020200000000000000010000050000000000"], 0x0, 0x3e, 0x0, 0xa}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) perf_event_open(0x0, 0x0, 0x8, r2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff000000007110c166001a055e16dc36a841a80000"], &(0x7f0000000480)='GPL\x00'}, 0x80) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0x6}}, @var={0x6, 0x0, 0x0, 0xe, 0x4, 0x2}]}, {0x0, [0x2e]}}, &(0x7f00000001c0)=""/200, 0x43, 0xc8, 0x1, 0x1c0}, 0x28) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x5411, &(0x7f0000000140)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018edff00000000000c0000000c00000002000000030000000000008c000000000000"], 0x0, 0x26, 0x0, 0x4}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080)) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x45, 0x0, 0xb, 0x200004}, {0x0, 0x3, 0x9}]}) sendmsg$kcm(r0, &(0x7f0000003700)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x6}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)='n', 0x1}], 0x1}, 0x447418adf9260f13) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000003640)="e03f030033d3b7e4af8b000b23d25a806e8c6f94f90424fc6010ac2e000a000200053500000000c429882b068005423b795309ce3eb3659ff274a358a5cdee2d94a92ac013eff38b6f8f95b821a7a435292604e7a090d65e03106ff67b429d63db65ffc48ee4c3153e05bf8933de888a6a5e0ae9b4a822a7dcc8ba5932182ef6b6e2e814afd1f4d2a3ceb43aa47878901f632f8d55fd1de1c322a176a3aa1b44af54afcd5181aa5077870d25301078", 0x27}]}, 0x0) r7 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r7, &(0x7f0000003600)={&(0x7f0000000180)=@x25={0x9, @remote}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/42, 0x2a}, {&(0x7f0000000200)=""/133, 0x85}, {&(0x7f00000002c0)=""/200, 0xc8}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/77, 0x4d}, {&(0x7f00000003c0)=""/9, 0x9}], 0x8, &(0x7f0000003540)=""/154, 0x9a}, 0x40000000) 1m28.693317745s ago: executing program 0 (id=2864): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="fb285bbdd27caa79dd38e74beba6f675c7fb8232bc3c6674ffe4619575043c6b51e90f2ac1658793395bc23d9627d9ebf8eea8204587a0949d49b7747b2222e344db", 0x42}, {&(0x7f00000000c0)="ebcba12a177c9a0a61f0c40cd5092358a7ee1a9c704f7e6a6a5ebb13f92eb28519fce90604c5f02c29b0d957b006f2c3eb9cb26705370d08bdc699e95f97582c74db4e206155e10900ef25c8a026be5478c716513cdf6c3ad6d6e222552a864682935d9645eeff384192833b741040d01c8bd93ba397bae48d1f5c4da052c5e5e8696092c2f471882bd2d0b43f9866cbd332f1873f69da0cfe5e9fdd1097e331ddf08bf3b1830a5c589d70f683d533fc9c57290031e4f7f6d04fa45428daf6eb3342ca74", 0xc4}, {&(0x7f00000001c0)}, {&(0x7f0000000200)="3be0898a0706f0262574d4d0f5daff816db0ba6489f2fbda46dcf2108cf5b983c1e3c6635cebbef75a9bf2f49a8873f981b2d436733ad9f025eb4ef09d531a612cb7b213a0140e0492149d4947e1a7f860add4e06666c5a2862d4d42001bd042eba85c3514691f635fc7883ceda538288cdd1e1b8c0a15da5da257b24bd3", 0x7e}, {&(0x7f0000000280)="8416828d18f421b650e936e0f6beb6449db7ac351d3e9d486b58694310c096df9cf389c15faddb92d4", 0x29}, {&(0x7f00000002c0)="23524dc7b97e8d841817fbd3182125dd10fded006390ddf24e420241b012ae3300000000000000", 0x27}], 0x6}, 0x0) 1m28.691040615s ago: executing program 1 (id=2865): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x6a1a1, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a0bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0xc0045878, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r4, 0x400454cd, 0x339) close(r4) socket$kcm(0xa, 0x2, 0x73) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000008000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000f98500000071000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000007100000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$kcm(0x2, 0x0, 0x0) 1m28.150433867s ago: executing program 0 (id=2866): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x11000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x7, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x10d00c, 0x2, 0xffffff82, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000700000000000000190a000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000028500000083000000bf090000000000085509010000000000950000000000000085100000f5ffffffbf91000000000000b70200000000000085b2732927000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x1, 0xe1, &(0x7f0000000140)=""/225, 0x41000}, 0x94) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.empty_time\x00', 0x0, 0x0) r4 = socket$kcm(0x23, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x541b, &(0x7f0000000640)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 1m22.175198006s ago: executing program 3 (id=2867): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000070000000000000000000000850000004100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8932, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018edff00000000000c0000000c00000002000000030000000000008c000000000000"], 0x0, 0x26, 0x0, 0x4}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080)) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x45, 0x0, 0xb, 0x200004}, {0x0, 0x3, 0x9}]}) sendmsg$kcm(r0, &(0x7f0000003700)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x6}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)='n', 0x1}], 0x1}, 0x447418adf9260f13) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000003640)="e03f030033d3b7e4af8b000b23d25a806e8c6f94f90424fc6010ac2e000a000200053500000000c429882b068005423b795309ce3eb3659ff274a358a5cdee2d94a92ac013eff38b6f8f95b821a7a435292604e7a090d65e03106ff67b429d63db65ffc48ee4c3153e05bf8933de888a6a5e0ae9b4a822a7dcc8ba5932182ef6b6e2e814afd1f4d2a3ceb43aa47878901f632f8d55fd1de1c322a176a3aa1b44af54afcd5181aa5077870d25301078", 0x27}]}, 0x0) r7 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r7, &(0x7f0000003600)={&(0x7f0000000180)=@x25={0x9, @remote}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/42, 0x2a}, {&(0x7f0000000200)=""/133, 0x85}, {&(0x7f00000002c0)=""/200, 0xc8}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/77, 0x4d}, {&(0x7f00000003c0)=""/9, 0x9}], 0x8, &(0x7f0000003540)=""/154, 0x9a}, 0x40000000) 0s ago: executing program 35 (id=2867): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000070000000000000000000000850000004100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xf00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8932, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5 [ 313.132576][ T9502] dump_stack_lvl+0x18c/0x250 [ 313.137263][ T9502] ? show_regs_print_info+0x20/0x20 [ 313.142486][ T9502] ? load_image+0x420/0x420 [ 313.146988][ T9502] ? __might_fault+0xaa/0x120 [ 313.151676][ T9502] ? __lock_acquire+0x7d80/0x7d80 [ 313.156693][ T9502] should_fail_ex+0x394/0x4c0 [ 313.161377][ T9502] _copy_to_user+0x2f/0xa0 [ 313.165827][ T9502] bpf_test_finish+0x25a/0x650 [ 313.170599][ T9502] ? bpf_test_run+0x174/0x870 [ 313.175269][ T9502] ? convert_skb_to___skb+0x420/0x420 [ 313.180641][ T9502] bpf_prog_test_run_skb+0x1135/0x18f0 [ 313.186116][ T9502] ? cpu_online+0x60/0x60 [ 313.190434][ T9502] bpf_prog_test_run+0x31f/0x390 [ 313.195364][ T9502] __sys_bpf+0x49d/0x890 [ 313.199621][ T9502] ? bpf_link_show_fdinfo+0x390/0x390 [ 313.204991][ T9502] ? lock_chain_count+0x20/0x20 [ 313.209845][ T9502] __x64_sys_bpf+0x7c/0x90 [ 313.214254][ T9502] do_syscall_64+0x55/0xb0 [ 313.218664][ T9502] ? clear_bhb_loop+0x40/0x90 [ 313.223330][ T9502] ? clear_bhb_loop+0x40/0x90 [ 313.227995][ T9502] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 313.233887][ T9502] RIP: 0033:0x7febb4d9de59 [ 313.238300][ T9502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.257899][ T9502] RSP: 002b:00007febb5d20028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 313.266302][ T9502] RAX: ffffffffffffffda RBX: 00007febb5025fa0 RCX: 00007febb4d9de59 [ 313.274269][ T9502] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 313.282232][ T9502] RBP: 00007febb5d20090 R08: 0000000000000000 R09: 0000000000000000 [ 313.290197][ T9502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.298181][ T9502] R13: 00007febb5026038 R14: 00007febb5025fa0 R15: 00007fff8a910638 [ 313.306160][ T9502] [ 313.463490][ T9508] netlink: 'syz.3.1058': attribute type 11 has an invalid length. [ 313.821245][ T9526] netlink: 'syz.1.1063': attribute type 21 has an invalid length. [ 313.839890][ T9526] netlink: 'syz.1.1063': attribute type 1 has an invalid length. [ 313.893857][ T9528] netlink: 'syz.1.1063': attribute type 21 has an invalid length. [ 313.928827][ T9528] netlink: 'syz.1.1063': attribute type 1 has an invalid length. [ 314.248472][ T9537] netlink: 'syz.1.1067': attribute type 1 has an invalid length. [ 314.560015][ T9546] FAULT_INJECTION: forcing a failure. [ 314.560015][ T9546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.573582][ T9546] CPU: 0 PID: 9546 Comm: syz.2.1069 Not tainted syzkaller #0 [ 314.580980][ T9546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 314.591558][ T9546] Call Trace: [ 314.594842][ T9546] [ 314.597775][ T9546] dump_stack_lvl+0x18c/0x250 [ 314.602468][ T9546] ? show_regs_print_info+0x20/0x20 [ 314.607694][ T9546] ? load_image+0x420/0x420 [ 314.612190][ T9546] ? __might_fault+0xaa/0x120 [ 314.616862][ T9546] ? __lock_acquire+0x7d80/0x7d80 [ 314.621907][ T9546] ? __virt_addr_valid+0x10c/0x380 [ 314.627044][ T9546] should_fail_ex+0x394/0x4c0 [ 314.631720][ T9546] _copy_to_user+0x2f/0xa0 [ 314.636131][ T9546] bpf_test_finish+0x4e7/0x650 [ 314.640892][ T9546] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 314.647059][ T9546] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 314.653226][ T9546] ? convert_skb_to___skb+0x420/0x420 [ 314.658595][ T9546] ? bpf_test_finish+0x10/0x650 [ 314.663527][ T9546] bpf_prog_test_run_skb+0x1135/0x18f0 [ 314.669023][ T9546] ? cpu_online+0x60/0x60 [ 314.673364][ T9546] bpf_prog_test_run+0x31f/0x390 [ 314.678305][ T9546] __sys_bpf+0x49d/0x890 [ 314.682543][ T9546] ? bpf_link_show_fdinfo+0x390/0x390 [ 314.687936][ T9546] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 314.694097][ T9546] __x64_sys_bpf+0x7c/0x90 [ 314.698512][ T9546] do_syscall_64+0x55/0xb0 [ 314.702967][ T9546] ? clear_bhb_loop+0x40/0x90 [ 314.707638][ T9546] ? clear_bhb_loop+0x40/0x90 [ 314.712308][ T9546] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 314.718212][ T9546] RIP: 0033:0x7febb4d9de59 [ 314.722634][ T9546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.742237][ T9546] RSP: 002b:00007febb5d20028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 314.750651][ T9546] RAX: ffffffffffffffda RBX: 00007febb5025fa0 RCX: 00007febb4d9de59 [ 314.758619][ T9546] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 314.766577][ T9546] RBP: 00007febb5d20090 R08: 0000000000000000 R09: 0000000000000000 [ 314.774544][ T9546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 314.782504][ T9546] R13: 00007febb5026038 R14: 00007febb5025fa0 R15: 00007fff8a910638 [ 314.790510][ T9546] [ 315.031168][ T9559] netlink: 'syz.1.1074': attribute type 5 has an invalid length. [ 315.718861][ T9582] netlink: 'syz.2.1080': attribute type 1 has an invalid length. [ 316.281359][ T9589] FAULT_INJECTION: forcing a failure. [ 316.281359][ T9589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 316.351902][ T9589] CPU: 1 PID: 9589 Comm: syz.3.1082 Not tainted syzkaller #0 [ 316.359350][ T9589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 316.369434][ T9589] Call Trace: [ 316.372743][ T9589] [ 316.375704][ T9589] dump_stack_lvl+0x18c/0x250 [ 316.380432][ T9589] ? show_regs_print_info+0x20/0x20 [ 316.385673][ T9589] ? load_image+0x420/0x420 [ 316.390224][ T9589] ? __lock_acquire+0x7d80/0x7d80 [ 316.395296][ T9589] should_fail_ex+0x394/0x4c0 [ 316.400020][ T9589] _copy_to_user+0x2f/0xa0 [ 316.404470][ T9589] simple_read_from_buffer+0xe7/0x150 [ 316.409886][ T9589] proc_fail_nth_read+0x1e8/0x260 [ 316.414952][ T9589] ? proc_fault_inject_write+0x360/0x360 [ 316.420630][ T9589] ? fsnotify_perm+0x271/0x5e0 [ 316.425431][ T9589] ? proc_fault_inject_write+0x360/0x360 [ 316.431104][ T9589] vfs_read+0x298/0x990 [ 316.435308][ T9589] ? kernel_read+0x1e0/0x1e0 [ 316.439942][ T9589] ? __fget_files+0x28/0x460 [ 316.444568][ T9589] ? __fget_files+0x3fc/0x460 [ 316.449294][ T9589] ? __fdget_pos+0x2a3/0x330 [ 316.453920][ T9589] ? ksys_read+0x74/0x260 [ 316.458288][ T9589] ksys_read+0x151/0x260 [ 316.462572][ T9589] ? vfs_write+0x9a0/0x9a0 [ 316.467031][ T9589] ? syscall_enter_from_user_mode+0x2e/0x80 [ 316.472965][ T9589] do_syscall_64+0x55/0xb0 [ 316.477423][ T9589] ? clear_bhb_loop+0x40/0x90 [ 316.482132][ T9589] ? clear_bhb_loop+0x40/0x90 [ 316.486844][ T9589] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 316.492782][ T9589] RIP: 0033:0x7ff61495e68e [ 316.497224][ T9589] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 316.516870][ T9589] RSP: 002b:00007ff61588ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 316.525316][ T9589] RAX: ffffffffffffffda RBX: 00007ff6158906c0 RCX: 00007ff61495e68e [ 316.533406][ T9589] RDX: 000000000000000f RSI: 00007ff6158900a0 RDI: 000000000000000a [ 316.541412][ T9589] RBP: 00007ff615890090 R08: 0000000000000000 R09: 0000000000000000 [ 316.549412][ T9589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 316.557417][ T9589] R13: 00007ff614c26038 R14: 00007ff614c25fa0 R15: 00007ffea3866df8 [ 316.565440][ T9589] [ 317.390934][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.400560][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.001650][ T9600] netlink: 'syz.1.1086': attribute type 3 has an invalid length. [ 319.006819][ T9604] __nla_validate_parse: 17 callbacks suppressed [ 319.006836][ T9604] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1085'. [ 319.009790][ T9600] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1086'. [ 319.438713][ T9621] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.446585][ T9621] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.497682][ T9621] bridge0: entered allmulticast mode [ 319.591953][ T9621] bridge_slave_1: left allmulticast mode [ 319.620958][ T9621] bridge_slave_1: left promiscuous mode [ 319.648046][ T9621] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.711649][ T9621] bridge_slave_0: left promiscuous mode [ 319.728125][ T9621] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.131193][ T9627] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.1095'. [ 320.283769][ T9637] netlink: 'syz.2.1097': attribute type 1 has an invalid length. [ 320.304471][ T9637] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1097'. [ 321.913165][ T9661] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1103'. [ 324.973317][ T9730] netlink: 'syz.1.1124': attribute type 7 has an invalid length. [ 324.997209][ T9730] netlink: 'syz.1.1124': attribute type 6 has an invalid length. [ 325.119949][ T9734] netlink: 'syz.0.1126': attribute type 3 has an invalid length. [ 325.145734][ T9734] netlink: 16795 bytes leftover after parsing attributes in process `syz.0.1126'. [ 325.330906][ T9744] netlink: 'syz.2.1128': attribute type 21 has an invalid length. [ 325.363013][ T9744] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1128'. [ 325.386475][ T9744] netlink: 'syz.2.1128': attribute type 4 has an invalid length. [ 325.406883][ T9744] netlink: 'syz.2.1128': attribute type 3 has an invalid length. [ 325.421499][ T9744] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1128'. [ 326.446019][ T9765] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1135'. [ 326.539271][ T9767] netlink: 'syz.0.1136': attribute type 21 has an invalid length. [ 326.557415][ T9767] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1136'. [ 326.650774][ T9772] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1138'. [ 326.688884][ T9772] netlink: get zone limit has 4 unknown bytes [ 327.511758][ T9791] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1142'. [ 327.607858][ T9791] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1142'. [ 327.649607][ T9785] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1142'. [ 327.738441][ T9793] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1142'. [ 327.861000][ T9785] netlink: 'syz.3.1142': attribute type 10 has an invalid length. [ 327.958541][ T9785] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 327.999941][ T9785] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.169090][ T9785] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 328.276415][ T9809] netlink: 'syz.2.1146': attribute type 10 has an invalid length. [ 328.335838][ T9809] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.366013][ T9809] bond0: (slave team0): Enslaving as an active interface with an up link [ 328.410921][ T9812] sit0: entered allmulticast mode [ 328.577388][ T9812] sit0: entered promiscuous mode [ 329.703715][ T9842] bridge_slave_1: default FDB implementation only supports local addresses [ 330.435136][ T9861] netlink: 'syz.0.1166': attribute type 153 has an invalid length. [ 330.457243][ T9861] __nla_validate_parse: 4 callbacks suppressed [ 330.457288][ T9861] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1166'. [ 331.375676][ T9899] veth0_vlan: mtu less than device minimum [ 331.427881][ T9899] netlink: 'syz.0.1175': attribute type 21 has an invalid length. [ 331.435822][ T9899] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1175'. [ 331.488462][ T9899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1175'. [ 331.943951][ T9920] netlink: 'syz.1.1182': attribute type 10 has an invalid length. [ 332.002564][ T9920] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1182'. [ 332.063668][ T9916] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.1181'. [ 332.181064][ T9927] netlink: 'syz.3.1181': attribute type 9 has an invalid length. [ 332.200317][ T9927] netlink: 179768 bytes leftover after parsing attributes in process `syz.3.1181'. [ 332.901447][ T9916] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 332.908794][ T9916] IPv6: NLM_F_CREATE should be set when creating new route [ 332.916145][ T9916] IPv6: NLM_F_CREATE should be set when creating new route [ 332.923456][ T9916] IPv6: NLM_F_CREATE should be set when creating new route [ 333.119523][ T9935] netlink: 'syz.0.1186': attribute type 22 has an invalid length. [ 333.322145][ T9947] netlink: 'syz.2.1190': attribute type 2 has an invalid length. [ 333.770059][ T9958] netlink: 'syz.3.1194': attribute type 21 has an invalid length. [ 333.811983][ T9958] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1194'. [ 334.058876][ T9968] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1195'. [ 334.082354][ T9968] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1195'. [ 334.146800][ T9957] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1195'. [ 334.184514][ T9968] netlink: 'syz.2.1195': attribute type 10 has an invalid length. [ 334.195993][ T9968] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 334.213712][ T9968] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.321254][ T9968] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 334.370067][ T9978] netlink: 'syz.0.1201': attribute type 28 has an invalid length. [ 334.577334][ T9983] netlink: 'syz.1.1202': attribute type 3 has an invalid length. [ 335.628923][T10008] netlink: 'syz.2.1213': attribute type 3 has an invalid length. [ 335.636730][T10008] __nla_validate_parse: 4 callbacks suppressed [ 335.636744][T10008] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1213'. [ 335.943481][T10017] bridge0: port 3(batadv0) entered disabled state [ 335.951855][T10017] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.967420][T10017] bridge0: entered allmulticast mode [ 336.034548][T10022] batadv0: left allmulticast mode [ 336.042095][T10021] netlink: 'syz.2.1218': attribute type 29 has an invalid length. [ 336.044860][T10022] batadv0: left promiscuous mode [ 336.068062][T10022] bridge0: port 3(batadv0) entered disabled state [ 336.194772][T10022] bridge_slave_1: left allmulticast mode [ 336.205293][T10022] bridge_slave_1: left promiscuous mode [ 336.212598][T10022] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.223807][T10022] bridge_slave_0: left allmulticast mode [ 336.230738][T10022] bridge_slave_0: left promiscuous mode [ 336.238597][T10022] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.589415][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 336.618284][T10021] netlink: 'syz.2.1218': attribute type 29 has an invalid length. [ 336.628433][T10025] IPv6: NLM_F_CREATE should be specified when creating new route [ 336.636636][T10025] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1219'. [ 336.671956][T10028] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1219'. [ 336.996494][T10037] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1221'. [ 336.999399][T10041] delete_channel: no stack [ 337.027728][T10041] delete_channel: no stack [ 337.231599][T10043] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 337.239901][T10043] syzkaller0: entered promiscuous mode [ 337.245454][T10043] syzkaller0: entered allmulticast mode [ 337.929062][T10080] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1233'. [ 338.354262][T10091] netlink: 'syz.2.1238': attribute type 10 has an invalid length. [ 338.405354][T10091] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1238'. [ 338.450939][T10091] dummy0: entered promiscuous mode [ 338.604417][T10091] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 339.091516][T10115] netlink: 'syz.3.1244': attribute type 4 has an invalid length. [ 339.108405][T10115] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1244'. [ 339.135281][T10115] netlink: 'syz.3.1244': attribute type 10 has an invalid length. [ 339.150339][T10115] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1244'. [ 339.165561][T10115] ipvlan1: entered promiscuous mode [ 339.173492][T10115] ipvlan1: entered allmulticast mode [ 339.183830][T10115] veth0_vlan: entered allmulticast mode [ 339.196493][T10115] bridge0: port 4(ipvlan1) entered blocking state [ 339.211206][T10115] bridge0: port 4(ipvlan1) entered disabled state [ 339.255029][T10115] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 339.330455][T10115] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 339.391548][T10120] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1245'. [ 339.612894][T10122] netlink: 199816 bytes leftover after parsing attributes in process `syz.1.1246'. [ 339.644689][T10130] netlink: 'syz.0.1250': attribute type 4 has an invalid length. [ 340.112690][T10141] netlink: 'syz.1.1251': attribute type 39 has an invalid length. [ 340.144027][ T5780] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 341.015062][T10169] __nla_validate_parse: 5 callbacks suppressed [ 341.015087][T10169] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.1259'. [ 341.039806][T10168] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.1259'. [ 341.115656][T10176] netlink: 'syz.0.1261': attribute type 21 has an invalid length. [ 342.000993][T10189] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1265'. [ 342.015638][T10189] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1265'. [ 342.055065][T10189] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1265'. [ 342.087375][T10190] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1265'. [ 342.127354][T10189] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1265'. [ 342.796233][T10201] netlink: 'syz.1.1268': attribute type 41 has an invalid length. [ 342.891343][T10198] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1269'. [ 342.966427][T10198] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 343.399699][T10213] netlink: 'syz.2.1272': attribute type 3 has an invalid length. [ 343.456297][T10213] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1272'. [ 343.476307][T10220] netlink: 'syz.3.1275': attribute type 29 has an invalid length. [ 343.568750][T10217] netlink: 'syz.3.1275': attribute type 5 has an invalid length. [ 343.602125][T10220] netlink: 'syz.3.1275': attribute type 29 has an invalid length. [ 343.647601][T10221] netlink: 'syz.3.1275': attribute type 29 has an invalid length. [ 343.677418][T10219] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.1274'. [ 344.351451][T10229] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 344.404717][T10229] netlink: 'syz.3.1278': attribute type 9 has an invalid length. [ 344.788596][T10231] netlink: 'syz.3.1278': attribute type 9 has an invalid length. [ 345.223630][T10250] netlink: 'syz.3.1284': attribute type 1 has an invalid length. [ 346.191077][T10264] netlink: 'syz.0.1285': attribute type 10 has an invalid length. [ 346.240443][T10264] netlink: 'syz.0.1285': attribute type 3 has an invalid length. [ 346.267260][T10264] netlink: 'syz.0.1285': attribute type 6 has an invalid length. [ 346.275072][T10264] __nla_validate_parse: 5 callbacks suppressed [ 346.275087][T10264] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.1285'. [ 346.360809][T10273] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.1287'. [ 346.411622][T10273] netlink: 'syz.3.1287': attribute type 1 has an invalid length. [ 346.933012][T10281] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1291'. [ 346.954036][T10281] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 347.896346][T10311] netlink: 'syz.3.1298': attribute type 3 has an invalid length. [ 347.904499][T10311] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1298'. [ 348.107487][T10313] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.1300'. [ 348.119379][T10316] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1301'. [ 348.183298][T10322] netlink: 'syz.1.1302': attribute type 10 has an invalid length. [ 348.492992][T10332] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 348.521785][T10332] syzkaller1: linktype set to 805 [ 348.947856][T10339] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1309'. [ 350.298518][T10339] team0: Port device team_slave_0 removed [ 350.405125][T10346] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1311'. [ 350.422350][T10344] netlink: 'syz.2.1310': attribute type 9 has an invalid length. [ 350.430397][T10346] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 350.457174][T10344] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1310'. [ 350.607485][T10346] tap0: tun_chr_ioctl cmd 2148553947 [ 350.648277][T10347] netlink: 'syz.2.1310': attribute type 9 has an invalid length. [ 350.663456][T10347] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1310'. [ 352.165650][T10390] __nla_validate_parse: 3 callbacks suppressed [ 352.165670][T10390] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1323'. [ 352.196440][T10390] openvswitch: netlink: Flow actions attr not present in new flow. [ 352.537677][T10393] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1324'. [ 352.686001][T10402] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1327'. [ 353.551641][T10435] IPv6: : Disabled Multicast RS [ 353.918315][T10448] netlink: 'syz.1.1339': attribute type 21 has an invalid length. [ 353.932205][T10452] netlink: 'syz.3.1341': attribute type 4 has an invalid length. [ 353.942267][T10452] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1341'. [ 353.952477][T10448] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1339'. [ 355.331250][T10481] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1348'. [ 355.354105][T10481] openvswitch: netlink: Flow actions attr not present in new flow. [ 355.849266][T10485] netlink: 'syz.1.1350': attribute type 10 has an invalid length. [ 356.011153][T10485] netlink: 'syz.1.1350': attribute type 3 has an invalid length. [ 356.086875][T10485] netlink: 'syz.1.1350': attribute type 1 has an invalid length. [ 356.141483][T10485] netlink: 193404 bytes leftover after parsing attributes in process `syz.1.1350'. [ 356.871799][T10504] netlink: set zone limit has 8 unknown bytes [ 356.915767][T10503] netlink: 'syz.2.1355': attribute type 29 has an invalid length. [ 356.983838][T10503] netlink: 'syz.2.1355': attribute type 29 has an invalid length. [ 357.617768][T10511] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1358'. [ 357.883550][T10518] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1360'. [ 357.895911][T10518] netlink: 6328 bytes leftover after parsing attributes in process `syz.2.1360'. [ 361.008725][T10536] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1366'. [ 361.073040][T10536] netlink: 'syz.1.1366': attribute type 10 has an invalid length. [ 361.117134][T10540] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1368'. [ 361.442847][T10553] netlink: 'syz.2.1370': attribute type 10 has an invalid length. [ 361.552866][T10553] team0: Device wg1 is of different type [ 361.568302][T10557] netlink: 'syz.0.1373': attribute type 33 has an invalid length. [ 361.577265][T10557] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1373'. [ 362.666643][T10589] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1382'. [ 363.142106][T10604] netlink: 'syz.3.1388': attribute type 2 has an invalid length. [ 363.172717][T10604] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1388'. [ 363.472811][T10614] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1391'. [ 363.526176][T10614] netlink: 'syz.3.1391': attribute type 9 has an invalid length. [ 363.552597][T10614] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1391'. [ 364.505547][T10643] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1398'. [ 364.522835][T10643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.535108][T10643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.550395][T10643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.563437][T10643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.576245][T10643] batadv_slave_1: entered promiscuous mode [ 364.600925][T10645] netlink: 'syz.2.1400': attribute type 10 has an invalid length. [ 364.694970][T10645] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 365.096511][T10666] netlink: 'syz.1.1404': attribute type 21 has an invalid length. [ 365.143320][T10666] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.1404'. [ 366.030373][T10698] netlink: 'syz.0.1411': attribute type 10 has an invalid length. [ 366.060819][T10698] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1411'. [ 366.078274][T10698] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.148638][T10698] .`: (slave team0): Releasing backup interface [ 366.208993][T10698] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 366.666064][T10708] netlink: 'syz.0.1414': attribute type 9 has an invalid length. [ 366.841123][T10708] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1414'. [ 367.341542][T10720] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.1418'. [ 367.914534][T10737] netlink: 1772 bytes leftover after parsing attributes in process `syz.1.1422'. [ 368.481661][T10741] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 368.489154][T10741] IPv6: NLM_F_CREATE should be set when creating new route [ 368.496602][T10741] IPv6: NLM_F_CREATE should be set when creating new route [ 368.504057][T10741] IPv6: NLM_F_CREATE should be set when creating new route [ 368.591872][ T2906] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 368.928659][T10753] netlink: 'syz.1.1425': attribute type 1 has an invalid length. [ 369.160275][T10760] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1426'. [ 369.187563][T10760] netlink: 'syz.2.1426': attribute type 9 has an invalid length. [ 369.249382][T10760] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1426'. [ 369.301185][T10762] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1427'. [ 369.360212][T10762] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 369.379929][T10764] netlink: 'syz.0.1428': attribute type 10 has an invalid length. [ 369.464843][T10756] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1427'. [ 369.496290][T10764] wg1: entered promiscuous mode [ 369.501628][T10764] wg1: entered allmulticast mode [ 369.506715][T10764] team0: Device wg1 is of different type [ 370.165007][T10792] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1438'. [ 370.289501][T10792] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1438'. [ 370.535288][T10795] netlink: 'syz.3.1439': attribute type 3 has an invalid length. [ 370.543744][T10795] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1439'. [ 370.567771][T10798] 0: renamed from batadv_slave_1 (while UP) [ 371.131082][T10803] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1442'. [ 371.393936][T10808] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1443'. [ 371.664694][T10808] team0: Port device team_slave_0 removed [ 372.019450][T10823] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 372.025918][T10823] dvmrp1: linktype set to 823 [ 372.282609][T10830] netlink: 'syz.2.1447': attribute type 21 has an invalid length. [ 372.441034][T10830] can: request_module (can-proto-0) failed. [ 372.735540][T10854] netlink: 'syz.3.1455': attribute type 19 has an invalid length. [ 372.755049][T10850] netlink: 'syz.2.1453': attribute type 3 has an invalid length. [ 373.151657][T10875] __nla_validate_parse: 6 callbacks suppressed [ 373.151677][T10875] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1459'. [ 373.180979][T10875] netlink: 'syz.2.1459': attribute type 28 has an invalid length. [ 373.189230][T10875] netlink: 'syz.2.1459': attribute type 29 has an invalid length. [ 373.192139][T10877] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1460'. [ 373.197207][T10875] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1459'. [ 373.314915][T10875] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1459'. [ 374.654957][T10890] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 374.683527][T10890] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1464'. [ 374.717985][T10890] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.725297][T10890] IPv6: NLM_F_CREATE should be set when creating new route [ 374.732616][T10890] IPv6: NLM_F_CREATE should be set when creating new route [ 374.739875][T10890] IPv6: NLM_F_CREATE should be set when creating new route [ 374.775198][T10890] netlink: 'syz.0.1464': attribute type 11 has an invalid length. [ 374.791222][T10890] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1464'. [ 375.005872][T10892] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1465'. [ 375.197883][T10881] netlink: 3752 bytes leftover after parsing attributes in process `syz.1.1461'. [ 375.227415][T10893] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 375.362901][T10893] dvmrp1: linktype set to 804 [ 375.465288][T10904] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1467'. [ 375.949074][ T5777] Bluetooth: hci2: command 0x0406 tx timeout [ 376.443190][T10922] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1471'. [ 376.881867][T10938] netlink: 'syz.2.1477': attribute type 3 has an invalid length. [ 376.937160][T10938] netlink: 'syz.2.1477': attribute type 6 has an invalid length. [ 376.995843][T10936] netlink: 'syz.0.1476': attribute type 10 has an invalid length. [ 377.089361][ T6941] wlan1: Trigger new scan to find an IBSS to join [ 377.165243][T10936] netlink: 'syz.0.1476': attribute type 39 has an invalid length. [ 377.174522][T10946] 0: renamed from batadv_slave_1 (while UP) [ 378.687185][T10971] __nla_validate_parse: 6 callbacks suppressed [ 378.687308][T10971] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1488'. [ 378.703770][T10971] bridge_slave_1: default FDB implementation only supports local addresses [ 378.836646][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.847099][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.988792][T10977] netlink: 'syz.1.1490': attribute type 10 has an invalid length. [ 379.311255][T10992] 0: renamed from batadv_slave_1 (while UP) [ 379.585715][T10999] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1496'. [ 380.107670][ T6939] wlan1: Trigger new scan to find an IBSS to join [ 380.313113][T11008] netlink: 'syz.1.1499': attribute type 3 has an invalid length. [ 380.321312][T11008] netlink: 'syz.1.1499': attribute type 5 has an invalid length. [ 380.809149][T11031] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1506'. [ 382.774181][T11092] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 383.087136][ T6936] wlan1: Trigger new scan to find an IBSS to join [ 383.462523][T11100] netlink: 'syz.1.1526': attribute type 9 has an invalid length. [ 383.480676][T11100] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1526'. [ 383.775484][T11107] netlink: 'syz.2.1528': attribute type 10 has an invalid length. [ 383.861169][T11107] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 383.872881][T11113] netlink: 'syz.0.1530': attribute type 27 has an invalid length. [ 383.893803][T11113] netlink: 'syz.0.1530': attribute type 4 has an invalid length. [ 383.907122][T11113] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1530'. [ 384.054573][ T6933] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 384.291064][T11121] netlink: 'syz.2.1533': attribute type 29 has an invalid length. [ 384.299518][T11121] netlink: 'syz.2.1533': attribute type 29 has an invalid length. [ 384.374211][T11125] netlink: 'syz.2.1533': attribute type 29 has an invalid length. [ 384.764477][T11138] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1538'. [ 384.813029][T11138] openvswitch: netlink: Tunnel attr 11913 out of range max 16 [ 386.321589][T11174] netlink: 'syz.1.1549': attribute type 10 has an invalid length. [ 386.367311][T11174] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1549'. [ 386.606108][T11194] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1555'. [ 386.615617][T11194] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1555'. [ 386.631188][T11194] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1555'. [ 386.706600][T11197] netlink: 'syz.1.1553': attribute type 21 has an invalid length. [ 386.717538][T11197] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1553'. [ 388.059131][T11223] netlink: 'syz.3.1563': attribute type 2 has an invalid length. [ 388.077013][T11223] netlink: 1045 bytes leftover after parsing attributes in process `syz.3.1563'. [ 388.161779][T11225] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1564'. [ 388.584210][T11234] netlink: 'syz.2.1567': attribute type 9 has an invalid length. [ 388.608008][T11234] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1567'. [ 389.121090][T11251] netlink: 'syz.2.1573': attribute type 2 has an invalid length. [ 389.171380][T11251] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1573'. [ 389.269062][T11260] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.1575'. [ 389.287636][T11260] netlink: 6320 bytes leftover after parsing attributes in process `syz.0.1575'. [ 389.422297][T11264] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1577'. [ 389.518567][T11266] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1578'. [ 389.603271][T11269] sctp: [Deprecated]: syz.2.1579 (pid 11269) Use of int in max_burst socket option deprecated. [ 389.603271][T11269] Use struct sctp_assoc_value instead [ 391.168681][T11318] netlink: 'syz.1.1592': attribute type 10 has an invalid length. [ 391.180287][T11314] can: request_module (can-proto-0) failed. [ 391.188206][T11318] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.202022][T11318] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.218769][T11318] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.247092][T11318] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.678896][T11330] netlink: 'syz.2.1594': attribute type 21 has an invalid length. [ 391.708306][T11330] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1594'. [ 391.721565][T11330] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1594'. [ 392.798707][T11352] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1603'. [ 392.808427][T11352] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1603'. [ 392.835535][T11352] netlink: 'syz.2.1603': attribute type 46 has an invalid length. [ 392.854800][T11352] netlink: 'syz.2.1603': attribute type 46 has an invalid length. [ 392.981712][T11365] netlink: 668 bytes leftover after parsing attributes in process `syz.3.1606'. [ 393.013560][T11365] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 393.022839][T11365] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 393.660060][T11387] delete_channel: no stack [ 393.814944][T11404] netlink: 'syz.1.1616': attribute type 3 has an invalid length. [ 393.841800][T11404] netlink: 'syz.1.1616': attribute type 4 has an invalid length. [ 393.863035][T11404] netlink: 'syz.1.1616': attribute type 7 has an invalid length. [ 393.906432][T11404] netlink: 'syz.1.1616': attribute type 8 has an invalid length. [ 393.928187][T11404] netlink: 'syz.1.1616': attribute type 7 has an invalid length. [ 394.626001][T11431] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 394.634649][T11431] pim6reg0: persist enabled [ 394.909368][T11442] netlink: 'syz.3.1626': attribute type 21 has an invalid length. [ 396.264619][T11471] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 396.720352][T11487] __nla_validate_parse: 5 callbacks suppressed [ 396.720371][T11487] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1641'. [ 397.201925][T11503] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.1645'. [ 397.419976][T11513] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.1642'. [ 397.485197][T11513] netlink: del zone limit has 8 unknown bytes [ 397.531940][T11521] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1648'. [ 397.907181][T11533] validate_nla: 1 callbacks suppressed [ 397.907226][T11533] netlink: 'syz.3.1650': attribute type 39 has an invalid length. [ 398.361166][T11541] netlink: 'syz.2.1653': attribute type 10 has an invalid length. [ 398.411766][T11541] bond0: (slave bond_slave_0): Releasing backup interface [ 398.769156][T11548] syzkaller0: left allmulticast mode [ 398.831755][T11551] mac80211_hwsim hwsim7 ..c: renamed from wlan1 (while UP) [ 399.241052][T11565] netlink: 'syz.1.1660': attribute type 29 has an invalid length. [ 399.257349][T11565] netlink: 'syz.1.1660': attribute type 29 has an invalid length. [ 399.272271][T11566] netlink: 'syz.1.1660': attribute type 29 has an invalid length. [ 400.142518][T11591] sctp: [Deprecated]: syz.3.1668 (pid 11591) Use of struct sctp_assoc_value in delayed_ack socket option. [ 400.142518][T11591] Use struct sctp_sack_info instead [ 400.422454][T11591] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1668'. [ 402.191298][T11612] netlink: 'syz.0.1673': attribute type 6 has an invalid length. [ 402.221672][T11612] netlink: 'syz.0.1673': attribute type 3 has an invalid length. [ 402.268513][T11612] netlink: 153952 bytes leftover after parsing attributes in process `syz.0.1673'. [ 402.627196][T11611] netlink: 'syz.0.1673': attribute type 26 has an invalid length. [ 402.640773][T11611] netlink: 62827 bytes leftover after parsing attributes in process `syz.0.1673'. [ 402.917165][T11617] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1674'. [ 403.043684][T11621] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1675'. [ 403.222704][T11626] sit0: left promiscuous mode [ 403.351852][T11627] sit0: entered promiscuous mode [ 403.412254][T11623] netlink: 'syz.2.1676': attribute type 10 has an invalid length. [ 403.567548][T11623] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link [ 403.674252][T11637] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.1680'. [ 403.951912][T11644] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1682'. [ 404.196368][T11657] netlink: 'syz.1.1686': attribute type 5 has an invalid length. [ 406.132756][T11682] lo: entered allmulticast mode [ 406.237390][T11683] lo: entered promiscuous mode [ 406.242242][T11683] lo: left allmulticast mode [ 406.647425][T11696] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1695'. [ 406.801549][T11699] sock: sock_timestamping_bind_phc: sock not bind to device [ 407.187294][T11714] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1697'. [ 407.240477][T11714] netlink: 'syz.2.1697': attribute type 10 has an invalid length. [ 407.295695][T11714] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 407.356660][T11717] netlink: 'syz.3.1699': attribute type 26 has an invalid length. [ 407.378097][T11717] netlink: 62827 bytes leftover after parsing attributes in process `syz.3.1699'. [ 407.416350][T11717] netlink: 'syz.3.1699': attribute type 6 has an invalid length. [ 407.429133][T11717] netlink: 'syz.3.1699': attribute type 3 has an invalid length. [ 407.438326][T11717] netlink: 153952 bytes leftover after parsing attributes in process `syz.3.1699'. [ 407.636820][T11727] syzkaller0: entered allmulticast mode [ 407.914144][T11740] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1707'. [ 408.511592][T11760] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1709'. [ 409.551315][T11776] can: request_module (can-proto-0) failed. [ 409.798922][T11783] netlink: 'syz.1.1715': attribute type 9 has an invalid length. [ 410.283381][T11789] syzkaller0: entered promiscuous mode [ 410.291948][T11789] syzkaller0: entered allmulticast mode [ 413.365533][T11808] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1722'. [ 413.549200][T11816] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1724'. [ 414.655660][T11842] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1731'. [ 415.086223][T11855] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1734'. [ 415.106673][T11854] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1734'. [ 415.373095][T11858] syzkaller0: entered promiscuous mode [ 415.403135][T11858] syzkaller0: entered allmulticast mode [ 416.587494][ T6907] ..c: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 418.659556][T11894] netlink: 'syz.3.1740': attribute type 10 has an invalid length. [ 418.689757][T11894] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.711022][T11894] bridge_slave_1: left allmulticast mode [ 418.716729][T11894] bridge_slave_1: left promiscuous mode [ 418.723021][T11894] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.977642][T11900] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1743'. [ 419.051719][T11900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: 0 [ 419.091282][T11900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.114469][T11900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: 0 [ 419.130869][T11900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.195519][T11900] batadv_slave_1: entered promiscuous mode [ 419.299849][T11903] netlink: 'syz.0.1745': attribute type 1 has an invalid length. [ 419.353860][T11903] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1745'. [ 419.402017][T11907] netlink: 'syz.3.1744': attribute type 21 has an invalid length. [ 419.429956][T11903] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1745'. [ 419.468064][T11903] netlink: 'syz.0.1745': attribute type 12 has an invalid length. [ 419.476128][T11903] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1745'. [ 419.804497][T11923] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1749'. [ 419.823847][T11925] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1749'. [ 419.841326][T11921] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1756'. [ 420.918961][T11940] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1754'. [ 421.168051][T11940] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 421.458702][T11938] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1754'. [ 421.734242][T11938] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 422.939126][T11962] netlink: 'syz.2.1759': attribute type 10 has an invalid length. [ 423.210088][T11971] netlink: 'syz.3.1762': attribute type 10 has an invalid length. [ 423.218239][T11971] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1762'. [ 423.227825][T11971] netlink: 'syz.3.1762': attribute type 10 has an invalid length. [ 423.633150][T11978] syzkaller0: entered promiscuous mode [ 423.641989][T11978] syzkaller0: entered allmulticast mode [ 423.829169][T11988] : port 1(gretap0) entered blocking state [ 423.835442][T11988] : port 1(gretap0) entered disabled state [ 423.878180][T11988] gretap0: entered allmulticast mode [ 423.905618][T11988] gretap0: entered promiscuous mode [ 424.406775][T12006] __nla_validate_parse: 1 callbacks suppressed [ 424.406796][T12006] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1774'. [ 427.010254][T12033] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1779'. [ 427.419017][T12050] netlink: 'syz.0.1783': attribute type 29 has an invalid length. [ 427.480796][T12050] netlink: 'syz.0.1783': attribute type 29 has an invalid length. [ 427.498465][T12051] netlink: 'syz.0.1783': attribute type 29 has an invalid length. [ 427.574605][T12050] netlink: 'syz.0.1783': attribute type 29 has an invalid length. [ 427.613762][T12048] netlink: 'syz.2.1782': attribute type 2 has an invalid length. [ 427.636590][T12048] netlink: 'syz.2.1782': attribute type 8 has an invalid length. [ 427.662603][T12048] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1782'. [ 427.765496][T12053] syzkaller0: entered promiscuous mode [ 427.771324][T12053] syzkaller0: entered allmulticast mode [ 427.782330][T12050] netlink: 'syz.0.1783': attribute type 29 has an invalid length. [ 427.808683][T12058] netlink: 'syz.3.1785': attribute type 46 has an invalid length. [ 427.831123][T12058] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1785'. [ 427.840764][T12055] netlink: 'syz.2.1782': attribute type 11 has an invalid length. [ 428.287227][T12081] Dead loop on virtual device ip6_vti0, fix it urgently! [ 430.541621][T12079] netlink: 'syz.0.1790': attribute type 22 has an invalid length. [ 430.549936][T12079] netlink: 14380 bytes leftover after parsing attributes in process `syz.0.1790'. [ 430.865562][T12095] IPv6: NLM_F_CREATE should be specified when creating new route [ 430.892215][T12099] pim6reg1: entered promiscuous mode [ 430.901727][T12099] pim6reg1: entered allmulticast mode [ 431.280262][T12117] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1803'. [ 431.331527][T12121] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1804'. [ 431.705577][T12136] netlink: 197324 bytes leftover after parsing attributes in process `syz.0.1808'. [ 433.388969][T12176] : port 1(vlan0) entered blocking state [ 433.395069][T12176] : port 1(vlan0) entered disabled state [ 433.437595][T12176] vlan0: entered allmulticast mode [ 433.450056][T12176] veth0_vlan: entered allmulticast mode [ 433.487381][T12176] vlan0: entered promiscuous mode [ 433.615868][T12179] validate_nla: 2 callbacks suppressed [ 433.615884][T12179] netlink: 'syz.2.1817': attribute type 10 has an invalid length. [ 433.666203][T12179] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 433.692809][T12185] netlink: 'syz.0.1818': attribute type 1 has an invalid length. [ 433.732106][T12185] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1818'. [ 437.551878][T12192] netlink: 'syz.0.1821': attribute type 10 has an invalid length. [ 437.560899][T12192] veth1_macvtap: entered allmulticast mode [ 437.587076][T12203] netlink: 'syz.3.1823': attribute type 7 has an invalid length. [ 437.596063][T12205] netlink: 'syz.1.1824': attribute type 14 has an invalid length. [ 437.644505][T12205] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.1824'. [ 438.711822][T12255] syzkaller0: entered promiscuous mode [ 438.719478][T12255] syzkaller0: entered allmulticast mode [ 438.732234][T12253] netlink: 'syz.1.1838': attribute type 10 has an invalid length. [ 438.812409][T12253] team0: Device wg1 is of different type [ 440.273098][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.279634][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.682489][T12299] netlink: 'syz.1.1853': attribute type 10 has an invalid length. [ 441.712407][T12299] veth0_macvtap: left promiscuous mode [ 441.753428][T12303] netlink: 194488 bytes leftover after parsing attributes in process `syz.1.1853'. [ 442.447954][T12328] netlink: 'syz.1.1861': attribute type 3 has an invalid length. [ 442.466137][T12328] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1861'. [ 442.520063][T12330] netlink: 'syz.3.1863': attribute type 10 has an invalid length. [ 442.557957][T12330] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1863'. [ 442.700086][T12330] veth1_vlan (unregistering): left allmulticast mode [ 443.402105][T12370] netlink: 'syz.2.1871': attribute type 9 has an invalid length. [ 443.434831][T12370] netlink: 399 bytes leftover after parsing attributes in process `syz.2.1871'. [ 443.458885][T12372] netlink: 'syz.2.1871': attribute type 2 has an invalid length. [ 443.466695][T12372] netlink: 1045 bytes leftover after parsing attributes in process `syz.2.1871'. [ 443.665950][T12366] netlink: 'syz.3.1872': attribute type 22 has an invalid length. [ 443.682559][T12366] netlink: 14372 bytes leftover after parsing attributes in process `syz.3.1872'. [ 444.523534][T12405] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1882'. [ 444.726645][T12418] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1886'. [ 444.774334][T12421] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1887'. [ 444.796388][T12418] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1886'. [ 445.004688][T12426] netlink: 'syz.2.1889': attribute type 1 has an invalid length. [ 445.298916][T12449] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1894'. [ 445.503399][T12454] syzkaller0: entered promiscuous mode [ 445.525435][T12454] syzkaller0: entered allmulticast mode [ 447.823763][T12479] netlink: 'syz.2.1902': attribute type 19 has an invalid length. [ 447.850570][T12479] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 447.940737][T12483] netlink: 'syz.0.1903': attribute type 29 has an invalid length. [ 447.963104][T12483] netlink: 'syz.0.1903': attribute type 29 has an invalid length. [ 447.977402][T12485] netlink: 'syz.0.1903': attribute type 29 has an invalid length. [ 447.996016][T12486] netlink: 'syz.0.1903': attribute type 29 has an invalid length. [ 448.009463][T12483] netlink: 'syz.0.1903': attribute type 29 has an invalid length. [ 448.138722][T12495] netlink: 'syz.0.1907': attribute type 39 has an invalid length. [ 448.165866][T12495] netlink: 'syz.0.1907': attribute type 39 has an invalid length. [ 448.587536][ T6942] ..c: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 448.819076][T12528] sit0: entered promiscuous mode [ 449.009407][ T5780] Bluetooth: hci3: ISO packet for unknown connection handle 1854 [ 449.021819][T12535] netlink: 'syz.1.1918': attribute type 21 has an invalid length. [ 449.037486][T12535] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1918'. [ 449.053096][T12536] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1917'. [ 449.195858][T12544] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.1922'. [ 449.215391][T12544] tc_dump_action: action bad kind [ 449.229353][T12543] delete_channel: no stack [ 449.560735][T12558] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1926'. [ 449.703965][T12560] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.1927'. [ 449.756220][T12562] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1928'. [ 449.765940][T12562] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 449.774696][T12562] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 449.835928][T12562] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1928'. [ 450.466227][T12578] syzkaller0: entered promiscuous mode [ 450.473146][T12578] syzkaller0: entered allmulticast mode [ 450.938301][T12606] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1938'. [ 451.504542][T12612] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1940'. [ 451.534544][T12612] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 451.556799][T12612] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 451.613922][T12612] validate_nla: 4 callbacks suppressed [ 451.613942][T12612] netlink: 'syz.1.1940': attribute type 3 has an invalid length. [ 451.647164][T12612] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1940'. [ 453.995723][T12628] netlink: 'syz.0.1943': attribute type 28 has an invalid length. [ 454.016544][T12628] netlink: 'syz.0.1943': attribute type 29 has an invalid length. [ 454.523596][T12644] __nla_validate_parse: 2 callbacks suppressed [ 454.523678][T12644] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.1947'. [ 456.580778][T12698] netlink: 'syz.3.1962': attribute type 9 has an invalid length. [ 456.598974][T12698] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1962'. [ 457.419035][T12720] netlink: 7771 bytes leftover after parsing attributes in process `syz.1.1968'. [ 457.802997][T12729] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.1971'. [ 458.571530][T12745] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1975'. [ 458.671038][T12746] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1975'. [ 458.698137][T12745] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1975'. [ 458.773681][T12745] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.1975'. [ 459.007676][T12755] delete_channel: no stack [ 459.187841][T12765] netlink: 'syz.1.1981': attribute type 1 has an invalid length. [ 459.195626][T12765] netlink: 'syz.1.1981': attribute type 2 has an invalid length. [ 459.217205][T12765] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1981'. [ 459.567457][T12780] netlink: 'syz.0.1986': attribute type 1 has an invalid length. [ 459.577628][T12780] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1986'. [ 459.745906][ T5780] Bluetooth: hci1: unexpected subevent 0x19 length: 150 > 28 [ 459.753564][ T5780] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 459.918543][T12802] sock: sock_timestamping_bind_phc: sock not bind to device [ 460.474431][T12817] netlink: 'syz.0.1997': attribute type 9 has an invalid length. [ 460.482894][T12817] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1997'. [ 462.550555][T12884] netlink: 'syz.1.2014': attribute type 29 has an invalid length. [ 462.568042][T12884] netlink: 'syz.1.2014': attribute type 29 has an invalid length. [ 462.585145][T12884] netlink: 'syz.1.2014': attribute type 29 has an invalid length. [ 462.749198][T12893] netlink: 'syz.0.2016': attribute type 20 has an invalid length. [ 463.564696][T12921] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2023'. [ 463.842874][T12932] netlink: 'syz.0.2027': attribute type 12 has an invalid length. [ 463.854576][T12932] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2027'. [ 463.953255][T12936] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2028'. [ 465.269546][T12943] netlink: 'syz.1.2032': attribute type 3 has an invalid length. [ 465.460881][T12941] netlink: 'syz.0.2031': attribute type 6 has an invalid length. [ 465.470101][T12941] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2031'. [ 467.804524][T12992] netlink: 'syz.3.2045': attribute type 1 has an invalid length. [ 467.812975][T12992] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2045'. [ 467.894386][T12997] netlink: 'syz.0.2046': attribute type 27 has an invalid length. [ 467.924978][T12997] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2046'. [ 468.014436][T13002] netlink: 'syz.1.2047': attribute type 10 has an invalid length. [ 468.049220][T13002] syz_tun: entered promiscuous mode [ 468.150465][T13002] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 468.265509][T13007] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2047'. [ 468.730528][T13019] netlink: 'syz.0.2053': attribute type 4 has an invalid length. [ 468.777714][T13019] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2053'. [ 468.890831][T13019] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 468.966082][T13018] netlink: 'syz.0.2053': attribute type 4 has an invalid length. [ 468.989092][T13018] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2053'. [ 469.005597][T13018] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 469.030562][T13032] ref_ctr_offset mismatch. inode: 0x42 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 469.667678][T13046] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2061'. [ 471.918314][T13087] netlink: 'syz.3.2074': attribute type 21 has an invalid length. [ 471.951521][T13087] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2074'. [ 472.233395][T13096] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.2077'. [ 472.251798][T13096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2077'. [ 476.213606][T13160] tap0: tun_chr_ioctl cmd 1074025677 [ 476.224058][T13160] tap0: linktype set to 0 [ 476.236030][T13158] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2093'. [ 476.258969][T13158] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.2093'. [ 476.483830][T13168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2098'. [ 477.541746][T13204] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2106'. [ 477.573438][T13204] netlink: 'syz.0.2106': attribute type 4 has an invalid length. [ 477.602742][T13204] netlink: 206236 bytes leftover after parsing attributes in process `syz.0.2106'. [ 478.035317][T13219] netlink: 'syz.0.2110': attribute type 29 has an invalid length. [ 478.050583][T13219] netlink: 'syz.0.2110': attribute type 29 has an invalid length. [ 478.063552][T13219] netlink: 'syz.0.2110': attribute type 29 has an invalid length. [ 478.090491][T13219] netlink: 'syz.0.2110': attribute type 29 has an invalid length. [ 478.103192][T13219] netlink: 'syz.0.2110': attribute type 29 has an invalid length. [ 478.155345][T13224] netlink: 'syz.3.2113': attribute type 2 has an invalid length. [ 478.165454][T13224] netlink: 'syz.3.2113': attribute type 8 has an invalid length. [ 478.176224][T13224] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2113'. [ 478.193701][T13225] netlink: 209588 bytes leftover after parsing attributes in process `syz.2.2112'. [ 478.223000][T13225] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.2112'. [ 478.567498][T13233] netlink: 'syz.0.2116': attribute type 10 has an invalid length. [ 478.587750][T13233] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2116'. [ 479.156462][T13274] sit0: entered allmulticast mode [ 479.212378][T13274] netlink: 118300 bytes leftover after parsing attributes in process `syz.3.2126'. [ 479.242339][T13274] sit0: entered promiscuous mode [ 479.648991][T13286] netlink: 'syz.2.2128': attribute type 23 has an invalid length. [ 479.759639][T13288] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2130'. [ 479.904367][T13297] bridge0: port 3(team0) entered disabled state [ 479.932390][T13297] bridge0: port 3(team0) entered disabled state [ 479.942195][T13297] team_slave_0: left promiscuous mode [ 479.948193][T13297] team_slave_0: left allmulticast mode [ 479.968732][T13297] team0 (unregistering): Port device team_slave_0 removed [ 479.976126][T13297] team_slave_1: left promiscuous mode [ 479.981766][T13297] team_slave_1: left allmulticast mode [ 480.000496][T13297] team0 (unregistering): Port device team_slave_1 removed [ 480.008267][T13297] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 480.015129][T13297] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 480.023318][T13297] team0 (unregistering): Port device wlan1 removed [ 480.030137][T13297] hsr_slave_0: left promiscuous mode [ 480.035595][T13297] hsr_slave_0: left allmulticast mode [ 480.052102][T13297] team0 (unregistering): Port device hsr_slave_0 removed [ 480.059761][T13297] geneve1: left promiscuous mode [ 480.064915][T13297] geneve1: left allmulticast mode [ 480.074671][T13297] team0 (unregistering): Port device geneve1 removed [ 480.144150][T13300] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2133'. [ 480.587207][ T6914] ..c: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 480.876388][T13321] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.2137'. [ 481.180335][T13328] hsr0: entered promiscuous mode [ 481.191078][ T5780] Bluetooth: hci0: ISO packet for unknown connection handle 19 [ 481.795691][T13346] netlink: del zone limit has 8 unknown bytes [ 481.847423][ T5780] Bluetooth: hci1: ISO packet for unknown connection handle 48 [ 482.254438][T13371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 482.320512][T13375] Q6`Ҙ: renamed from lo (while UP) [ 483.060776][T13415] validate_nla: 4 callbacks suppressed [ 483.060929][T13415] netlink: 'syz.3.2167': attribute type 21 has an invalid length. [ 483.146635][T13415] netlink: 'syz.3.2167': attribute type 1 has an invalid length. [ 483.619138][T13429] delete_channel: no stack [ 483.624357][T13429] delete_channel: no stack [ 483.635742][T13434] __nla_validate_parse: 2 callbacks suppressed [ 483.635775][T13434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2176'. [ 483.734959][T13432] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2175'. [ 483.746556][T13432] openvswitch: netlink: Key type 29 is not supported [ 484.219710][T13444] netlink: 'syz.2.2178': attribute type 17 has an invalid length. [ 484.344569][T13444] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2178'. [ 484.487834][T13449] netlink: 'syz.0.2179': attribute type 27 has an invalid length. [ 484.624349][T13449] netlink: 'syz.0.2179': attribute type 4 has an invalid length. [ 484.695784][T13449] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2179'. [ 487.475235][T13466] netlink: 'syz.0.2184': attribute type 21 has an invalid length. [ 487.486698][T13466] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.2184'. [ 487.846278][T13482] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2188'. [ 487.882225][T13474] netlink: 'syz.0.2185': attribute type 9 has an invalid length. [ 487.892422][T13474] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.2185'. [ 488.158575][T13474] netlink: 'syz.0.2185': attribute type 10 has an invalid length. [ 488.449911][T13499] netlink: 'syz.2.2195': attribute type 3 has an invalid length. [ 489.027317][T13528] netlink: 'syz.2.2201': attribute type 9 has an invalid length. [ 489.035281][T13528] netlink: 89900 bytes leftover after parsing attributes in process `syz.2.2201'. [ 489.051817][T13528] netlink: 'syz.2.2201': attribute type 10 has an invalid length. [ 489.061448][T13528] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2201'. [ 489.187311][T13534] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 489.194767][T13534] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 489.225304][T13534] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.2205'. [ 489.248917][T13534] netlink: zone id is out of range [ 489.254423][T13534] netlink: zone id is out of range [ 489.260084][T13534] netlink: zone id is out of range [ 489.265562][T13534] netlink: zone id is out of range [ 489.271362][T13534] netlink: zone id is out of range [ 489.280500][T13534] netlink: zone id is out of range [ 489.286029][T13534] netlink: zone id is out of range [ 489.291713][T13534] netlink: zone id is out of range [ 489.297502][T13534] netlink: zone id is out of range [ 489.440550][T13548] netlink: 'syz.1.2209': attribute type 3 has an invalid length. [ 489.461901][T13548] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2209'. [ 489.580264][T13548] netlink: 'syz.1.2209': attribute type 4 has an invalid length. [ 489.595169][T13548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2209'. [ 489.614878][T13548] netlink: 187832 bytes leftover after parsing attributes in process `syz.1.2209'. [ 489.690739][T13556] netlink: 'syz.3.2213': attribute type 9 has an invalid length. [ 489.709234][T13554] syzkaller0: entered promiscuous mode [ 489.714822][T13556] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2213'. [ 489.725182][T13554] syzkaller0: entered allmulticast mode [ 492.429036][T13579] netlink: 'syz.0.2219': attribute type 29 has an invalid length. [ 492.450164][T13579] netlink: 'syz.0.2219': attribute type 29 has an invalid length. [ 492.463076][T13580] netlink: 'syz.0.2219': attribute type 29 has an invalid length. [ 492.623802][T13586] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2221'. [ 492.975989][T13600] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2225'. [ 492.990459][T13600] bridge_slave_1: entered promiscuous mode [ 493.240062][T13614] validate_nla: 1 callbacks suppressed [ 493.240079][T13614] netlink: 'syz.1.2230': attribute type 3 has an invalid length. [ 493.277056][T13614] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2230'. [ 493.385756][T13614] netlink: 'syz.1.2230': attribute type 11 has an invalid length. [ 493.422197][T13626] netlink: 'syz.3.2232': attribute type 21 has an invalid length. [ 493.545680][T13633] openvswitch: netlink: Flow key attribute not present in set flow. [ 494.086890][T13663] __nla_validate_parse: 3 callbacks suppressed [ 494.096975][T13663] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2244'. [ 494.106516][T13663] netlink: 3064 bytes leftover after parsing attributes in process `syz.3.2244'. [ 494.213970][T13666] netlink: 'syz.1.2245': attribute type 11 has an invalid length. [ 494.959916][T13695] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2255'. [ 494.997163][T13696] netlink: 22 bytes leftover after parsing attributes in process `syz.1.2253'. [ 495.090963][T13700] netlink: 'syz.3.2256': attribute type 10 has an invalid length. [ 495.099094][T13700] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2256'. [ 495.366576][T13718] sctp: [Deprecated]: syz.1.2262 (pid 13718) Use of int in maxseg socket option. [ 495.366576][T13718] Use struct sctp_assoc_value instead [ 498.477574][T13733] tap0: tun_chr_ioctl cmd 35108 [ 498.640087][T13744] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2269'. [ 498.659536][T13744] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 498.674153][T13745] netlink: 'syz.3.2270': attribute type 21 has an invalid length. [ 498.684738][T13745] IPv6: NLM_F_CREATE should be specified when creating new route [ 498.705979][T13745] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 498.713517][T13745] IPv6: NLM_F_CREATE should be set when creating new route [ 498.721246][T13745] IPv6: NLM_F_CREATE should be set when creating new route [ 498.728807][T13745] IPv6: NLM_F_CREATE should be set when creating new route [ 499.867962][T13760] netlink: 'syz.2.2274': attribute type 1 has an invalid length. [ 499.875761][T13760] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.2274'. [ 501.594967][T13802] netlink: 'syz.0.2293': attribute type 153 has an invalid length. [ 501.687933][T13802] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.2293'. [ 501.741144][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.753573][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.181303][T13818] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2291'. [ 502.224621][T13818] sit0: entered allmulticast mode [ 502.288437][T13832] sit0: entered promiscuous mode [ 502.421695][T13834] netlink: 'syz.0.2295': attribute type 10 has an invalid length. [ 502.440173][T13834] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2295'. [ 502.827818][T13848] netlink: 'syz.1.2300': attribute type 10 has an invalid length. [ 503.593175][T13872] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2309'. [ 503.933390][T13880] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2312'. [ 503.958826][T13880] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2312'. [ 504.341495][ T5777] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 504.353041][ T5777] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 504.363238][ T5777] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 504.373891][ T5777] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 504.382821][ T5777] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 504.392536][ T5777] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 504.650494][T13889] chnl_net:caif_netlink_parms(): no params data found [ 504.753199][T13889] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.760718][T13889] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.768926][T13889] bridge_slave_0: entered allmulticast mode [ 504.776730][T13889] bridge_slave_0: entered promiscuous mode [ 504.786573][T13889] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.794220][T13889] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.802129][T13889] bridge_slave_1: entered allmulticast mode [ 504.809979][T13889] bridge_slave_1: entered promiscuous mode [ 504.847447][T13889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.860387][T13889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.902174][T13889] team0: Port device team_slave_0 added [ 504.913673][T13889] team0: Port device team_slave_1 added [ 504.946622][T13889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.953925][T13889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.981631][T13889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.995779][T13889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.003321][T13889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.030806][T13889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.161025][T13889] hsr_slave_0: entered promiscuous mode [ 505.241417][T13889] hsr_slave_1: entered promiscuous mode [ 505.292858][T13889] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 505.317186][T13889] Cannot create hsr debugfs directory [ 505.716724][ T6942] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.839533][ T6942] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.904356][ T6942] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.970949][ T6942] .`: (slave netdevsim0): Releasing backup interface [ 505.978287][ T6942] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 505.986721][ T6942] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 505.999079][ T6942] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.419102][T13919] netlink: 'syz.3.2321': attribute type 10 has an invalid length. [ 506.440970][ T5780] Bluetooth: hci4: command tx timeout [ 506.505776][T13927] netlink: 'syz.2.2322': attribute type 10 has an invalid length. [ 506.548600][T13927] netlink: 'syz.2.2322': attribute type 11 has an invalid length. [ 506.583201][T13927] netlink: 'syz.2.2322': attribute type 11 has an invalid length. [ 506.609605][T13927] netlink: 'syz.2.2322': attribute type 11 has an invalid length. [ 506.629709][T13927] netlink: 'syz.2.2322': attribute type 11 has an invalid length. [ 506.654452][T13927] netlink: 'syz.2.2322': attribute type 11 has an invalid length. [ 506.681474][T13927] netlink: 'syz.2.2322': attribute type 11 has an invalid length. [ 506.690008][T13927] netlink: 'syz.2.2322': attribute type 11 has an invalid length. [ 506.712751][T13927] netlink: 'syz.2.2322': attribute type 11 has an invalid length. [ 506.726721][T13923] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2321'. [ 506.737014][T13927] netlink: 'syz.2.2322': attribute type 11 has an invalid length. [ 506.737038][T13927] netlink: 'syz.2.2322': attribute type 11 has an invalid length. [ 506.737094][T13927] netlink: 'syz.2.2322': attribute type 4 has an invalid length. [ 506.737108][T13927] netlink: 'syz.2.2322': attribute type 5 has an invalid length. [ 506.737144][T13927] netlink: 208556 bytes leftover after parsing attributes in process `syz.2.2322'. [ 506.737266][T13930] netlink: 'syz.2.2322': attribute type 4 has an invalid length. [ 506.737282][T13930] netlink: 171064 bytes leftover after parsing attributes in process `syz.2.2322'. [ 507.250770][T13947] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2325'. [ 507.433571][T13948] delete_channel: no stack [ 508.097861][T13889] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 508.124857][T13889] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 508.211411][T13889] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 508.260515][T13889] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 508.509142][ T5780] Bluetooth: hci4: command tx timeout [ 508.591502][T13889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.650184][T13889] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.740625][ T6913] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.747823][ T6913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.812793][ T6943] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.819980][ T6943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 508.835775][T13988] delete_channel: no stack [ 508.836366][T13989] delete_channel: no stack [ 508.844979][T13989] delete_channel: no stack [ 508.873054][T13988] delete_channel: no stack [ 509.035456][ T6942] hsr_slave_0: left promiscuous mode [ 509.046300][ T6942] hsr_slave_1: left promiscuous mode [ 509.065682][ T6942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.078253][ T6942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.108259][ T6942] batman_adv: batadv0: Interface deactivated: 0 [ 509.115783][ T6942] batman_adv: batadv0: Removing interface: 0 [ 509.136365][ T6942] veth0_macvtap: left promiscuous mode [ 509.145797][ T6942] veth0_vlan: left promiscuous mode [ 510.280565][ T6942] team_slave_1 (unregistering): left promiscuous mode [ 510.289082][ T6942] team_slave_1 (unregistering): left allmulticast mode [ 510.311524][ T6942] team0 (unregistering): Port device team_slave_1 removed [ 510.389823][ T6942] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.404134][ T6942] bond_slave_1 (unregistering): left promiscuous mode [ 510.413840][ T6942] bond_slave_1 (unregistering): left allmulticast mode [ 510.597148][ T5780] Bluetooth: hci4: command tx timeout [ 510.945110][ T6942] .` (unregistering): Released all slaves [ 511.024608][T13889] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 511.037044][T13889] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 511.569223][T13889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 511.720679][T13889] veth0_vlan: entered promiscuous mode [ 511.743947][T13889] veth1_vlan: entered promiscuous mode [ 511.780156][T13889] veth0_macvtap: entered promiscuous mode [ 511.794585][T13889] veth1_macvtap: entered promiscuous mode [ 511.826038][T13889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.837252][T13889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.850619][T13889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.877017][T13889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.899266][T13889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 511.943926][T13889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: 0 [ 512.000537][T13889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.029205][T13889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.045737][T13889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.058393][T13889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 512.070062][T13889] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.116235][T13889] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.128924][T13889] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.139280][T13889] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.410258][ T6909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.437004][ T6909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.500209][ T6909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.526008][ T6909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.670907][ T5780] Bluetooth: hci4: command tx timeout [ 515.065903][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 515.074212][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 515.088102][ T5777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 515.096398][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 515.104728][ T5777] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 515.112877][ T5777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 515.594193][T14113] bridge0: entered promiscuous mode [ 515.603251][T14113] bridge0: entered allmulticast mode [ 515.816404][T14105] chnl_net:caif_netlink_parms(): no params data found [ 515.977938][T14105] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.985195][T14105] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.998064][T14105] bridge_slave_0: entered allmulticast mode [ 516.005647][T14105] bridge_slave_0: entered promiscuous mode [ 516.019756][T14105] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.037108][T14105] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.044471][T14105] bridge_slave_1: entered allmulticast mode [ 516.073615][T14105] bridge_slave_1: entered promiscuous mode [ 516.193384][ T6942] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.319952][ T6942] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.385990][T14105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.431317][T14105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.501143][ T6942] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.577301][T14105] team0: Port device team_slave_0 added [ 516.615509][T14105] team0: Port device team_slave_1 added [ 516.659613][ T6942] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.734617][T14105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.746407][T14105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.790418][T14105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.173896][ T5780] Bluetooth: hci0: command tx timeout [ 517.585222][T14142] vlan0 (unregistering): left allmulticast mode [ 517.592652][T14142] veth0_vlan (unregistering): left allmulticast mode [ 517.604028][T14142] vlan0 (unregistering): left promiscuous mode [ 517.612628][T14142] : port 1(vlan0) entered disabled state [ 518.386696][T14105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.394091][T14105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.423681][T14105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.448328][T14145] mac80211_hwsim hwsim33 wlan1: entered allmulticast mode [ 518.541374][T14105] hsr_slave_0: entered promiscuous mode [ 518.553090][T14105] hsr_slave_1: entered promiscuous mode [ 518.562635][T14105] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 518.570478][T14105] Cannot create hsr debugfs directory [ 518.842645][T14159] netlink: 'syz.0.2377': attribute type 10 has an invalid length. [ 518.850631][T14159] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2377'. [ 518.863203][T14159] ipvlan1: entered promiscuous mode [ 518.868975][T14159] ipvlan1: entered allmulticast mode [ 518.874529][T14159] veth0_vlan: entered allmulticast mode [ 518.883324][T14159] bridge0: port 3(ipvlan1) entered blocking state [ 518.890171][T14159] bridge0: port 3(ipvlan1) entered disabled state [ 518.898870][T14159] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 519.237412][ T5780] Bluetooth: hci0: command tx timeout [ 519.800309][T14186] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2382'. [ 520.010087][T14189] netlink: 'syz.1.2381': attribute type 10 has an invalid length. [ 520.034184][T14189] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2381'. [ 520.330265][ T6942] gretap0 (unregistering): left allmulticast mode [ 520.370820][ T6942] gretap0 (unregistering): left promiscuous mode [ 520.390133][ T6942] : port 1(gretap0) entered disabled state [ 520.411105][T14198] netlink: 'syz.2.2384': attribute type 2 has an invalid length. [ 520.422918][T14198] netlink: 'syz.2.2384': attribute type 1 has an invalid length. [ 521.073588][T14105] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 521.200296][T14105] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 521.307907][ T5780] Bluetooth: hci0: command tx timeout [ 521.316824][T14218] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 521.392048][T14218] syzkaller0: entered promiscuous mode [ 521.412939][T14218] syzkaller0: entered allmulticast mode [ 521.431036][T14105] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 521.454924][T14105] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 521.481281][T14224] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2389'. [ 521.879833][T14237] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 521.914740][ T5780] Bluetooth: hci4: ISO packet for unknown connection handle 44 [ 523.389662][ T5780] Bluetooth: hci0: command tx timeout [ 523.749858][T14242] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.2392'. [ 523.932649][T14244] netlink: 'syz.2.2393': attribute type 10 has an invalid length. [ 523.946648][T14244] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2393'. [ 524.042087][T14244] batman_adv: batadv0: Adding interface: veth0_vlan [ 524.063623][T14244] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.111173][T14244] batman_adv: batadv0: Interface activated: veth0_vlan [ 524.145658][T14105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.284582][T14105] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.471447][T14264] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2397'. [ 524.495483][ T6909] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.502759][ T6909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.555919][ T6911] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.563278][ T6911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.648568][T14264] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2397'. [ 524.668528][T14265] netlink: 'syz.2.2397': attribute type 17 has an invalid length. [ 525.103608][ T6942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 525.125377][ T6942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 525.134989][ T6942] batman_adv: batadv0: Interface deactivated: 0 [ 525.157983][ T6942] batman_adv: batadv0: Removing interface: 0 [ 525.168344][ T6942] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 525.176048][ T6942] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 525.201029][ T6942] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 525.217009][ T6942] batman_adv: batadv0: Removing interface: virt_wifi0 [ 525.225232][ T6942] bridge_slave_0: left promiscuous mode [ 525.237315][ T6942] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.279395][ T6942] veth1_macvtap: left promiscuous mode [ 525.288924][ T6942] veth0_macvtap: left promiscuous mode [ 527.246814][T14291] netlink: 'syz.0.2405': attribute type 10 has an invalid length. [ 527.269452][T14291] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2405'. [ 527.301858][T14291] batman_adv: batadv0: Adding interface: veth0_vlan [ 527.327803][T14291] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.365291][T14291] batman_adv: batadv0: Interface activated: veth0_vlan [ 527.473048][T14105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.611089][T14105] veth0_vlan: entered promiscuous mode [ 527.671608][T14105] veth1_vlan: entered promiscuous mode [ 527.812839][T14105] veth0_macvtap: entered promiscuous mode [ 527.861438][T14105] veth1_macvtap: entered promiscuous mode [ 527.975874][T14105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.017576][T14105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.029295][T14105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.040037][T14105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.055471][T14105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.076717][T14105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.092279][T14105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.103411][T14105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.118634][T14105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.132076][T14105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.160477][T14105] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.171451][T14105] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.185168][T14105] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.196101][T14105] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.846064][ T6899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.872061][ T6899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.036227][ T6911] tipc: Subscription rejected, illegal request [ 531.053321][ T6913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.063202][ T6913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.813637][T14350] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.2419'. [ 533.846390][T14350] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.2419'. [ 533.862425][T14350] netlink: 'syz.2.2419': attribute type 21 has an invalid length. [ 533.882700][T14350] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2419'. [ 534.834657][T14368] netlink: 'syz.0.2426': attribute type 39 has an invalid length. [ 534.863921][T14368] veth0_macvtap: left promiscuous mode [ 535.030842][T14370] netlink: 'syz.3.2427': attribute type 7 has an invalid length. [ 535.307259][T14374] netlink: 'syz.0.2428': attribute type 2 has an invalid length. [ 535.315079][T14374] netlink: 'syz.0.2428': attribute type 8 has an invalid length. [ 535.319279][T14377] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.2429'. [ 535.347087][T14374] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2428'. [ 535.462939][ T5773] bond0: (slave syz_tun): Releasing backup interface [ 535.481076][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 535.493983][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 535.511406][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 535.551141][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 535.564118][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 535.572520][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 536.239849][T14399] sctp: [Deprecated]: syz.3.2435 (pid 14399) Use of int in max_burst socket option deprecated. [ 536.239849][T14399] Use struct sctp_assoc_value instead [ 536.391495][T14382] chnl_net:caif_netlink_parms(): no params data found [ 536.493431][T14403] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2436'. [ 536.527072][T14403] tc_dump_action: action bad kind [ 537.432272][T14382] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.465171][T14382] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.483796][T14382] bridge_slave_0: entered allmulticast mode [ 537.495467][T14382] bridge_slave_0: entered promiscuous mode [ 537.586504][T14420] netlink: 'syz.2.2440': attribute type 8 has an invalid length. [ 537.634898][ T5780] Bluetooth: hci1: command tx timeout [ 537.657294][T14420] netlink: 'syz.2.2440': attribute type 9 has an invalid length. [ 537.693752][T14420] netlink: 'syz.2.2440': attribute type 10 has an invalid length. [ 537.744816][T14420] netlink: 'syz.2.2440': attribute type 11 has an invalid length. [ 537.842450][T14420] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2440'. [ 537.880370][T14382] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.913011][T14382] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.983220][T14382] bridge_slave_1: entered allmulticast mode [ 538.089380][T14382] bridge_slave_1: entered promiscuous mode [ 538.241082][T14422] netlink: 'syz.2.2440': attribute type 10 has an invalid length. [ 538.296330][T14422] dummy0: left promiscuous mode [ 538.376110][T14422] team0: Port device dummy0 added [ 538.461865][T14421] syzkaller0: entered promiscuous mode [ 538.478232][T14421] syzkaller0: entered allmulticast mode [ 539.707028][ T5780] Bluetooth: hci1: command tx timeout [ 540.839290][T14382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.864321][T14382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.146892][T14382] team0: Port device team_slave_0 added [ 541.362328][T14382] team0: Port device team_slave_1 added [ 541.571415][T14382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.592483][T14382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.664052][T14382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.790389][ T5780] Bluetooth: hci1: command tx timeout [ 541.791650][T14477] netlink: 'syz.3.2453': attribute type 3 has an invalid length. [ 541.818806][T14477] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2453'. [ 542.143879][T14382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.155515][T14382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.184833][T14382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.493675][T14382] hsr_slave_0: entered promiscuous mode [ 542.501951][T14382] hsr_slave_1: entered promiscuous mode [ 542.509509][T14382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 542.517701][T14382] Cannot create hsr debugfs directory [ 543.867814][ T5780] Bluetooth: hci1: command tx timeout [ 544.454744][ T6899] hsr_slave_0: left promiscuous mode [ 544.472737][ T6899] hsr_slave_1: left promiscuous mode [ 545.093479][ T6899] team0 (unregistering): Port device geneve1 removed [ 546.302919][ T6899] team0 (unregistering): Port device team_slave_1 removed [ 546.423500][ T6899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 546.617439][ T6899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 547.249336][ T6899] bond0 (unregistering): Released all slaves [ 547.326711][T14562] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2470'. [ 547.650906][T14382] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 547.698241][T14382] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 547.772958][T14382] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 547.844736][T14382] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 547.980478][T14589] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2475'. [ 548.032248][T14589] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2475'. [ 548.092756][T14591] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2475'. [ 548.316055][T14382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 548.358318][T14589] netlink: 'syz.3.2475': attribute type 2 has an invalid length. [ 548.372833][T14589] netlink: 'syz.3.2475': attribute type 8 has an invalid length. [ 548.402968][T14589] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2475'. [ 548.490443][T14382] 8021q: adding VLAN 0 to HW filter on device team0 [ 548.534599][ T6907] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.541835][ T6907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.566262][ T6899] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.573506][ T6899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.256780][T14612] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2478'. [ 549.358314][T14618] netlink: 'syz.3.2479': attribute type 29 has an invalid length. [ 549.377117][T14618] netlink: 'syz.3.2479': attribute type 29 has an invalid length. [ 549.397192][T14618] netlink: 'syz.3.2479': attribute type 29 has an invalid length. [ 549.405539][T14619] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2478'. [ 549.428785][T14618] netlink: 'syz.3.2479': attribute type 29 has an invalid length. [ 549.447727][T14612] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2478'. [ 549.521264][T14382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 549.606318][T14382] veth0_vlan: entered promiscuous mode [ 549.663705][T14382] veth1_vlan: entered promiscuous mode [ 549.701634][T14382] veth0_macvtap: entered promiscuous mode [ 549.738510][T14382] veth1_macvtap: entered promiscuous mode [ 549.785662][T14382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.809030][T14382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.820741][T14382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.832458][T14382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.842700][T14382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.853462][T14382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.869101][T14382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.905828][T14382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.916850][T14382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.927285][T14382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.939506][T14382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.949890][T14382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.962163][T14382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.974979][T14382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.991200][T14382] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.017076][T14382] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.025824][T14382] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.046230][T14382] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.180731][ T6899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.203402][ T6899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.263561][ T6907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.289813][ T6907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.613813][T14645] mac80211_hwsim hwsim37 wlan1: entered promiscuous mode [ 550.621622][T14645] mac80211_hwsim hwsim37 wlan1: entered allmulticast mode [ 550.758022][T14645] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.2424'. [ 550.846294][T14645] netlink: zone id is out of range [ 550.887539][T14645] netlink: zone id is out of range [ 550.892977][T14645] netlink: zone id is out of range [ 550.946295][T14645] netlink: zone id is out of range [ 550.972612][T14645] netlink: zone id is out of range [ 550.989648][T14656] sctp: [Deprecated]: syz.0.2481 (pid 14656) Use of int in max_burst socket option deprecated. [ 550.989648][T14656] Use struct sctp_assoc_value instead [ 551.014255][T14645] netlink: zone id is out of range [ 551.036568][T14645] netlink: zone id is out of range [ 551.052543][T14645] netlink: zone id is out of range [ 551.085712][T14645] netlink: zone id is out of range [ 553.801698][T14714] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 553.897674][T14714] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.2496'. [ 553.911384][T14714] netlink: zone id is out of range [ 554.148981][T14730] netlink: 'syz.0.2500': attribute type 1 has an invalid length. [ 554.174956][T14730] netlink: 'syz.0.2500': attribute type 3 has an invalid length. [ 554.207469][T14730] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2500'. [ 555.045561][T14758] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2509'. [ 555.210758][T14759] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 555.327699][T14761] syzkaller0: entered promiscuous mode [ 555.346883][T14761] syzkaller0: entered allmulticast mode [ 555.384031][T14765] mac80211_hwsim hwsim35 wlan1: entered promiscuous mode [ 555.397135][T14765] mac80211_hwsim hwsim35 wlan1: entered allmulticast mode [ 555.467546][T14765] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.2510'. [ 555.688770][T14780] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2513'. [ 555.707367][T14780] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2513'. [ 555.718913][T14780] netlink: 13 bytes leftover after parsing attributes in process `syz.3.2513'. [ 556.034080][T14790] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2520'. [ 556.116035][T14789] syzkaller0: entered promiscuous mode [ 556.129497][T14789] syzkaller0: entered allmulticast mode [ 557.203427][T14813] netlink: 186384 bytes leftover after parsing attributes in process `syz.3.2527'. [ 557.342472][T14833] mac80211_hwsim hwsim12 wlan1: left promiscuous mode [ 557.566063][T14838] netlink: 'syz.3.2532': attribute type 1 has an invalid length. [ 557.642786][T14838] netlink: 'syz.3.2532': attribute type 3 has an invalid length. [ 557.708124][T14838] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2532'. [ 558.447607][T14850] netlink: 'syz.0.2536': attribute type 10 has an invalid length. [ 558.507563][T14850] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.549923][T14850] bond0: (slave team0): Enslaving as an active interface with an up link [ 558.943595][T14856] syzkaller0: entered promiscuous mode [ 558.952502][T14856] syzkaller0: entered allmulticast mode [ 559.017433][T14866] netlink: 'syz.2.2542': attribute type 1 has an invalid length. [ 559.038613][T14866] netlink: 'syz.2.2542': attribute type 3 has an invalid length. [ 559.052137][T14866] __nla_validate_parse: 4 callbacks suppressed [ 559.052153][T14866] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2542'. [ 559.068191][ T6943] wlan1: Trigger new scan to find an IBSS to join [ 561.495473][T14868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2543'. [ 561.505212][T14869] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2543'. [ 561.526372][T14882] netlink: 'syz.1.2546': attribute type 21 has an invalid length. [ 561.534952][T14883] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2546'. [ 561.999158][T14893] netlink: 'syz.0.2547': attribute type 1 has an invalid length. [ 562.017178][T14893] netlink: 'syz.0.2547': attribute type 4 has an invalid length. [ 562.035535][T14893] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2547'. [ 562.107650][ T6907] wlan1: Trigger new scan to find an IBSS to join [ 562.175262][T14890] delete_channel: no stack [ 563.156084][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.166488][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.777130][ T6899] wlan1: Creating new IBSS network, BSSID 02:9d:5f:0a:7f:09 [ 565.655327][T14912] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2553'. [ 565.736674][T14912] net_ratelimit: 17 callbacks suppressed [ 565.736693][T14912] openvswitch: netlink: Key type 4112 is out of range max 32 [ 567.121873][T14946] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2562'. [ 567.154151][T14954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2563'. [ 567.173692][T14947] sctp: [Deprecated]: syz.1.2561 (pid 14947) Use of int in maxseg socket option. [ 567.173692][T14947] Use struct sctp_assoc_value instead [ 568.268574][T14963] netlink: 'syz.3.2566': attribute type 2 has an invalid length. [ 568.297166][T14963] netlink: 'syz.3.2566': attribute type 8 has an invalid length. [ 568.305209][T14963] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2566'. [ 568.353284][T14966] netlink: 'syz.3.2566': attribute type 11 has an invalid length. [ 569.008848][T14988] mac80211_hwsim hwsim12 ..c: renamed from wlan1 [ 569.313329][T14992] sctp: [Deprecated]: syz.3.2575 (pid 14992) Use of int in maxseg socket option. [ 569.313329][T14992] Use struct sctp_assoc_value instead [ 569.894143][T15009] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.2580'. [ 570.064433][T15013] netlink: 'syz.0.2582': attribute type 9 has an invalid length. [ 570.087346][T15013] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2582'. [ 570.503657][T15027] syzkaller0: entered promiscuous mode [ 570.516716][T15027] syzkaller0: entered allmulticast mode [ 570.527804][T15031] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2586'. [ 570.541359][T15031] tc_dump_action: action bad kind [ 570.887410][T15039] netlink: 'syz.0.2587': attribute type 28 has an invalid length. [ 571.074398][T15052] netlink: 'syz.1.2593': attribute type 29 has an invalid length. [ 571.098245][T15052] netlink: 'syz.1.2593': attribute type 29 has an invalid length. [ 571.122129][T15052] netlink: 'syz.1.2593': attribute type 29 has an invalid length. [ 571.153734][T15052] netlink: 'syz.1.2593': attribute type 29 has an invalid length. [ 571.173850][T15052] netlink: 'syz.1.2593': attribute type 29 has an invalid length. [ 571.750599][T15058] sctp: [Deprecated]: syz.0.2594 (pid 15058) Use of int in maxseg socket option. [ 571.750599][T15058] Use struct sctp_assoc_value instead [ 571.832456][T15065] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2598'. [ 573.817248][T15111] lo: entered promiscuous mode [ 574.238644][T15122] netlink: set zone limit has 8 unknown bytes [ 575.260869][T15145] validate_nla: 3 callbacks suppressed [ 575.260967][T15145] netlink: 'syz.2.2619': attribute type 1 has an invalid length. [ 575.287336][T15145] netlink: 'syz.2.2619': attribute type 4 has an invalid length. [ 575.311356][T15145] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2619'. [ 575.569347][T15160] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2623'. [ 575.589147][T15160] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.2623'. [ 575.611691][T15160] tc_dump_action: action bad kind [ 576.984853][T15181] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 576.992490][T15181] IPv6: NLM_F_CREATE should be set when creating new route [ 577.000316][T15181] IPv6: NLM_F_CREATE should be set when creating new route [ 577.007949][T15181] IPv6: NLM_F_CREATE should be set when creating new route [ 577.097885][T15181] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2627'. [ 578.055034][T15188] syzkaller0: entered promiscuous mode [ 578.107958][T15188] syzkaller0: entered allmulticast mode [ 579.384098][T15200] netlink: 'syz.2.2633': attribute type 10 has an invalid length. [ 579.411240][T15200] netlink: 'syz.2.2633': attribute type 10 has an invalid length. [ 579.441604][T15200] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.2633'. [ 579.479649][T15200] openvswitch: netlink: Message has 4 unknown bytes. [ 582.086150][T15201] netlink: 'syz.0.2632': attribute type 10 has an invalid length. [ 582.094458][T15201] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2632'. [ 582.103929][T15201] hsr0: entered promiscuous mode [ 582.111616][T15201] bridge0: port 3(hsr0) entered blocking state [ 582.125909][T15201] bridge0: port 3(hsr0) entered disabled state [ 582.133230][T15201] hsr0: entered allmulticast mode [ 582.140962][T15201] hsr_slave_0: entered allmulticast mode [ 582.146688][T15201] hsr_slave_1: entered allmulticast mode [ 582.177849][T15201] bridge0: port 3(hsr0) entered blocking state [ 582.184253][T15201] bridge0: port 3(hsr0) entered forwarding state [ 582.505521][T15229] netlink: 'syz.3.2642': attribute type 1 has an invalid length. [ 582.558343][T15229] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.2642'. [ 582.749152][T15236] netdevsim netdevsim2: Direct firmware load for .net/syz1 failed with error -2 [ 582.773217][T15236] netdevsim netdevsim2: Falling back to sysfs fallback for: .net/syz1 [ 584.387775][T15244] netlink: 'syz.1.2648': attribute type 10 has an invalid length. [ 584.415424][T15244] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2648'. [ 584.448248][T15244] hsr0: entered promiscuous mode [ 584.465004][T15244] bridge0: port 3(hsr0) entered blocking state [ 584.488492][T15244] bridge0: port 3(hsr0) entered disabled state [ 584.506438][T15244] hsr0: entered allmulticast mode [ 584.522702][T15244] hsr_slave_0: entered allmulticast mode [ 584.548988][T15244] hsr_slave_1: entered allmulticast mode [ 584.578136][T15244] bridge0: port 3(hsr0) entered blocking state [ 584.584898][T15244] bridge0: port 3(hsr0) entered forwarding state [ 585.058889][T15274] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.2654'. [ 587.599744][T15272] veth0_vlan: entered allmulticast mode [ 587.849485][T15279] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2655'. [ 587.886577][T15279] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 588.086067][T15289] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 588.157150][T15291] netlink: 'syz.0.2661': attribute type 21 has an invalid length. [ 589.105722][T15309] netlink: 'syz.3.2667': attribute type 3 has an invalid length. [ 589.181372][T15309] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2667'. [ 590.113465][T15342] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2675'. [ 590.151393][T15342] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 590.924679][T15360] netlink: 'syz.0.2682': attribute type 10 has an invalid length. [ 591.000560][T15360] team0: Device nlmon0 is of different type [ 591.484239][T15382] syzkaller0: entered promiscuous mode [ 591.492335][T15382] syzkaller0: entered allmulticast mode [ 592.340962][T15389] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.2688'. [ 593.849317][T15397] veth0_vlan: entered allmulticast mode [ 593.925072][T15396] netlink: 'syz.3.2690': attribute type 21 has an invalid length. [ 594.780489][ T6899] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 596.919726][T15407] batadv0: entered promiscuous mode [ 597.252952][ T5780] Bluetooth: hci2: Dropping invalid advertising data [ 597.262482][ T5780] Bluetooth: hci2: unknown advertising packet type: 0xdc [ 597.262518][ T5780] Bluetooth: hci2: Malformed LE Event: 0x02 [ 597.472222][T15430] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2700'. [ 597.932629][T15433] hsr0: left allmulticast mode [ 597.940806][T15433] hsr_slave_0: left allmulticast mode [ 597.946404][T15433] hsr_slave_1: left allmulticast mode [ 597.955271][T15433] bridge0: port 3(hsr0) entered disabled state [ 597.965348][T15433] bridge_slave_1: left allmulticast mode [ 597.972856][T15433] bridge_slave_1: left promiscuous mode [ 597.978853][T15433] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.988924][T15433] bridge_slave_0: left allmulticast mode [ 597.994606][T15433] bridge_slave_0: left promiscuous mode [ 598.001081][T15433] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.369865][T15447] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.2706'. [ 598.878235][T15457] netlink: 'syz.0.2710': attribute type 10 has an invalid length. [ 598.923365][T15457] team0: Device vxcan0 is of different type [ 598.945818][T15455] Q6`Ҙ: renamed from lo (while UP) [ 599.010684][T15460] netlink: 'syz.1.2711': attribute type 1 has an invalid length. [ 599.140174][T15455] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 600.545239][T15512] netlink: 'syz.1.2723': attribute type 3 has an invalid length. [ 600.575936][T15512] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2723'. [ 600.589241][T15508] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2721'. [ 600.766115][T15508] team0: Port device team_slave_0 removed [ 601.161688][T15521] syzkaller0: entered promiscuous mode [ 601.178555][T15521] syzkaller0: entered allmulticast mode [ 601.521636][T15542] TCP: TCP_TX_DELAY enabled [ 603.651372][T15540] netlink: 'syz.3.2733': attribute type 10 has an invalid length. [ 603.667664][T15539] netlink: 'syz.3.2733': attribute type 10 has an invalid length. [ 603.682816][T15552] bond0: entered promiscuous mode [ 603.688795][T15552] bond_slave_0: entered promiscuous mode [ 603.694652][T15552] bond_slave_1: entered promiscuous mode [ 603.709473][T15552] team0: entered promiscuous mode [ 603.714566][T15552] team_slave_1: entered promiscuous mode [ 603.737346][T15552] bond0: entered allmulticast mode [ 603.742549][T15552] bond_slave_0: entered allmulticast mode [ 603.751782][T15552] bond_slave_1: entered allmulticast mode [ 603.757655][T15552] team0: entered allmulticast mode [ 603.763259][T15552] team_slave_1: entered allmulticast mode [ 604.011347][T15569] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2740'. [ 604.359369][T15578] syzkaller0: entered promiscuous mode [ 604.365634][T15578] syzkaller0: entered allmulticast mode [ 605.636619][T15616] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.2754'. [ 606.916647][T15620] netlink: 'syz.1.2755': attribute type 3 has an invalid length. [ 606.937180][T15620] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2755'. [ 607.041944][T15623] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 607.076871][T15628] netlink: 'syz.1.2758': attribute type 12 has an invalid length. [ 607.084917][T15628] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2758'. [ 607.099365][T15627] netlink: 'syz.2.2757': attribute type 58 has an invalid length. [ 607.117079][T15627] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2757'. [ 607.157707][T15630] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2759'. [ 607.188987][T15630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2759'. [ 607.380059][T15637] netlink: 'syz.2.2761': attribute type 13 has an invalid length. [ 607.498261][T15643] netlink: 'syz.3.2763': attribute type 10 has an invalid length. [ 607.518366][T15643] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2763'. [ 607.541600][T15643] team0: entered promiscuous mode [ 607.577513][T15643] team_slave_0: entered promiscuous mode [ 607.614747][T15643] team_slave_1: entered promiscuous mode [ 607.646861][T15643] team0: entered allmulticast mode [ 607.697522][T15643] team_slave_0: entered allmulticast mode [ 607.705581][T15643] team_slave_1: entered allmulticast mode [ 607.775553][T15643] bridge0: port 3(team0) entered blocking state [ 607.812545][T15643] bridge0: port 3(team0) entered disabled state [ 607.927356][T15643] bridge0: port 3(team0) entered blocking state [ 607.936945][T15643] bridge0: port 3(team0) entered forwarding state [ 607.984893][T15651] netlink: 'syz.2.2766': attribute type 21 has an invalid length. [ 608.300203][T15673] netlink: set zone limit has 8 unknown bytes [ 608.404611][T15681] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.2772'. [ 608.414263][T15681] openvswitch: netlink: Duplicate key (type 0). [ 608.625087][T15691] macsec0: entered promiscuous mode [ 608.644980][T15691] macsec0: entered allmulticast mode [ 608.668012][T15691] veth1_macvtap: entered allmulticast mode [ 608.701207][T15687] netlink: 'syz.2.2774': attribute type 10 has an invalid length. [ 608.784747][T15700] netlink: 'syz.2.2774': attribute type 9 has an invalid length. [ 608.819320][T15687] team0: Device hsr_slave_0 failed to register rx_handler [ 608.854347][T15693] netlink: 'syz.3.2775': attribute type 4 has an invalid length. [ 608.857450][T15700] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.2774'. [ 609.217349][T15716] 0: renamed from batadv_slave_1 (while UP) [ 609.247934][T15715] netlink: 'syz.3.2781': attribute type 21 has an invalid length. [ 609.256074][T15715] __nla_validate_parse: 1 callbacks suppressed [ 609.256094][T15715] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2781'. [ 609.864282][T15749] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2791'. [ 611.567963][T15784] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2801'. [ 612.942889][T15822] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2811'. [ 613.178041][T15824] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2810'. [ 613.219153][T15824] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 613.379250][T15831] validate_nla: 2 callbacks suppressed [ 613.379285][T15831] netlink: 'syz.0.2820': attribute type 2 has an invalid length. [ 613.397397][T15831] netlink: 'syz.0.2820': attribute type 8 has an invalid length. [ 613.412340][T15831] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2820'. [ 613.465420][T15829] netlink: 'syz.0.2820': attribute type 3 has an invalid length. [ 614.239893][T15852] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2819'. [ 614.336380][T15859] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.2822'. [ 614.349827][T15859] netlink: 'syz.3.2822': attribute type 1 has an invalid length. [ 614.397480][T15859] netlink: 16520 bytes leftover after parsing attributes in process `syz.3.2822'. [ 614.488905][T15858] delete_channel: no stack [ 614.780297][T15866] netlink: 'syz.0.2824': attribute type 2 has an invalid length. [ 614.797512][T15866] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2824'. [ 618.321158][T15902] netlink: 'syz.1.2833': attribute type 1 has an invalid length. [ 618.347194][T15902] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2833'. [ 618.469417][T15907] netlink: 'syz.2.2834': attribute type 10 has an invalid length. [ 618.470431][T15905] netlink: 'syz.3.2835': attribute type 29 has an invalid length. [ 618.487050][T15907] netlink: 212412 bytes leftover after parsing attributes in process `syz.2.2834'. [ 618.498452][T15905] netlink: 'syz.3.2835': attribute type 29 has an invalid length. [ 618.506506][T15907] openvswitch: netlink: Flow key attr not present in new flow. [ 618.515670][T15905] netlink: 'syz.3.2835': attribute type 29 has an invalid length. [ 618.538069][T15905] netlink: 'syz.3.2835': attribute type 10 has an invalid length. [ 618.551278][T15905] geneve0: entered promiscuous mode [ 618.612778][T15905] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 619.332654][T15916] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.2838'. [ 619.576190][T15921] syzkaller0: entered promiscuous mode [ 619.582701][T15921] syzkaller0: entered allmulticast mode [ 619.754517][T15928] netlink: 'syz.3.2841': attribute type 2 has an invalid length. [ 619.763459][T15928] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2841'. [ 622.151646][T15950] netlink: 'syz.1.2847': attribute type 27 has an invalid length. [ 622.186341][T15950] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.2847'. [ 622.334397][T15958] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2850'. [ 622.360502][T15958] netlink: 'syz.3.2850': attribute type 49 has an invalid length. [ 622.373561][T15959] syzkaller0: entered promiscuous mode [ 622.384041][T15959] syzkaller0: entered allmulticast mode [ 622.396042][T15959] syzkaller0: left promiscuous mode [ 622.955069][T15989] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2856'. [ 622.992104][T15989] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.2856'. [ 623.343413][T15997] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2860'. [ 623.390698][T16000] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.2859'. [ 623.757867][T16009] : port 1(ip6gretap0) entered blocking state [ 623.777633][T16009] : port 1(ip6gretap0) entered disabled state [ 623.784661][T16009] ip6gretap0: entered allmulticast mode [ 623.794469][T16009] ip6gretap0: entered promiscuous mode [ 624.607521][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.616695][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.227204][ T5777] Bluetooth: hci4: command 0x0406 tx timeout [ 662.507074][T16034] Bluetooth: hci1: command 0x0406 tx timeout [ 686.036078][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.042587][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 700.927520][T16046] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 700.937302][T16046] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 700.960901][T16049] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 700.972062][T16049] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 700.980228][T16049] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 700.988135][T16049] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 701.017887][T16051] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 701.030009][T16051] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 701.038514][T16051] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 701.046632][T16051] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 701.058944][T16051] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 701.066387][T16051] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 701.079601][T16051] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 701.087922][T16051] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 701.097268][T16051] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 701.107268][T16051] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 701.118502][T16046] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 701.126767][T16046] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 701.240112][T14109] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 701.249637][T14109] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 701.258087][T14109] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 701.266196][T14109] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 701.275845][T14109] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 701.283514][T14109] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 701.891497][T16060] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 701.901128][T16060] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 701.910185][T16060] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 701.918776][T16060] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 701.933180][T16060] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 701.942052][T16060] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 702.580580][ T6898] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 707.310902][T16051] Bluetooth: hci0: command 0x0406 tx timeout [ 728.876943][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 728.883719][ C1] rcu: 1-....: (10074 ticks this GP) idle=0f4c/1/0x4000000000000000 softirq=58025/58026 fqs=4696 [ 728.895317][ C1] rcu: hardirqs softirqs csw/system [ 728.901723][ C1] rcu: number: 1570062 7 0 [ 728.908118][ C1] rcu: cputime: 16039 36460 40 ==> 52510(ms) [ 728.915932][ C1] rcu: (t=10502 jiffies g=72041 q=2394 ncpus=2) [ 728.922273][ C1] CPU: 1 PID: 16015 Comm: syz.1.2865 Not tainted syzkaller #0 [ 728.929753][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 728.939828][ C1] RIP: 0010:seqcount_lockdep_reader_access+0x1bb/0x1d0 [ 728.946767][ C1] Code: fb 48 c7 04 24 0e 36 e0 45 4b c7 04 3e 00 00 00 00 43 c7 44 3e 08 00 00 00 00 65 48 8b 04 25 28 00 00 00 48 3b 44 24 68 75 0d <48> 8d 65 e0 5b 41 5c 41 5e 41 5f 5d c3 e8 43 a1 14 09 0f 1f 00 f3 [ 728.966394][ C1] RSP: 0018:ffffc900001eeee0 EFLAGS: 00000246 [ 728.972477][ C1] RAX: 2865c10196662e00 RBX: 0000000000000000 RCX: ffff88807e3ebc00 [ 728.980448][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 728.988413][ C1] RBP: ffffc900001eef98 R08: ffffffff911e75ef R09: 1ffffffff223cebd [ 728.996378][ C1] R10: dffffc0000000000 R11: fffffbfff223cebe R12: 0000000000000200 [ 729.004343][ C1] R13: 000001fb715a350b R14: 1ffff9200003dddc R15: dffffc0000000000 [ 729.012315][ C1] FS: 00007ff700b7f6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 729.021239][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 729.027825][ C1] CR2: 0000000100000000 CR3: 000000002e95d000 CR4: 00000000003506e0 [ 729.035793][ C1] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000200000000300 [ 729.043761][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 729.051726][ C1] Call Trace: [ 729.055006][ C1] [ 729.057869][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 729.063181][ C1] ktime_get_with_offset+0x94/0x330 [ 729.068393][ C1] netif_rx_internal+0x33d/0x4e0 [ 729.073457][ C1] ? read_lock_is_recursive+0x20/0x20 [ 729.078828][ C1] ? dev_forward_skb+0x50/0x50 [ 729.083592][ C1] ? rcu_is_watching+0x15/0xb0 [ 729.088362][ C1] __netif_rx+0x78/0xc0 [ 729.092514][ C1] veth_xmit+0x57a/0xa30 [ 729.096790][ C1] ? veth_xmit+0x61/0xa30 [ 729.101125][ C1] dev_hard_start_xmit+0x269/0x790 [ 729.106241][ C1] ? __dev_queue_xmit+0x275/0x3630 [ 729.111353][ C1] __dev_queue_xmit+0x198c/0x3630 [ 729.116375][ C1] ? __dev_queue_xmit+0x275/0x3630 [ 729.121492][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 729.127469][ C1] ? netdev_core_pick_tx+0x370/0x370 [ 729.132754][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 729.139112][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 729.144366][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 729.150536][ C1] hsr_forward_skb+0x12a9/0x20b0 [ 729.155551][ C1] ? hsr_forward_skb+0xb1/0x20b0 [ 729.160486][ C1] ? prp_fill_frame_info+0x760/0x760 [ 729.165778][ C1] ? do_raw_spin_lock+0x11f/0x2b0 [ 729.170799][ C1] ? __rwlock_init+0x150/0x150 [ 729.175562][ C1] ? hsr_dev_xmit+0x1dc/0x350 [ 729.180238][ C1] hsr_dev_xmit+0x1e7/0x350 [ 729.184736][ C1] ? hsr_dev_xmit+0x2d/0x350 [ 729.189347][ C1] dev_hard_start_xmit+0x269/0x790 [ 729.194498][ C1] ? __dev_queue_xmit+0x275/0x3630 [ 729.199617][ C1] __dev_queue_xmit+0x198c/0x3630 [ 729.204643][ C1] ? __dev_queue_xmit+0x275/0x3630 [ 729.209762][ C1] ? mark_lock+0x94/0x320 [ 729.214090][ C1] ? netdev_core_pick_tx+0x370/0x370 [ 729.219372][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 729.225347][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 729.232571][ C1] ? lock_chain_count+0x20/0x20 [ 729.237420][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 729.243576][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 729.248778][ C1] br_dev_queue_push_xmit+0x6b7/0x880 [ 729.254187][ C1] ? br_nf_dev_queue_xmit+0x53e/0x1d60 [ 729.259722][ C1] ? nla_nest_cancel+0x90/0x90 [ 729.264486][ C1] ? NF_HOOK+0xa7/0x700 [ 729.268636][ C1] NF_HOOK+0x66e/0x700 [ 729.272705][ C1] ? br_validate_ipv4+0x820/0x820 [ 729.277731][ C1] ? br_nf_forward_finish+0xe90/0xe90 [ 729.283104][ C1] ? NF_HOOK+0x5/0x700 [ 729.287172][ C1] br_nf_post_routing+0xa3b/0xec0 [ 729.292200][ C1] ? br_nf_forward_finish+0xe90/0xe90 [ 729.297575][ C1] ? br_nf_forward_arp+0xc50/0xc50 [ 729.302696][ C1] nf_hook_slow+0xbd/0x200 [ 729.307201][ C1] ? nla_nest_cancel+0x90/0x90 [ 729.311968][ C1] ? nla_nest_cancel+0x90/0x90 [ 729.316725][ C1] NF_HOOK+0x23e/0x3e0 [ 729.320797][ C1] ? NF_HOOK+0xa3/0x3e0 [ 729.324951][ C1] ? br_forward_finish+0x130/0x130 [ 729.330061][ C1] ? nla_nest_cancel+0x90/0x90 [ 729.334826][ C1] br_forward_finish+0xd3/0x130 [ 729.339671][ C1] ? nla_nest_cancel+0x90/0x90 [ 729.344440][ C1] br_nf_forward_finish+0xa69/0xe90 [ 729.349640][ C1] ? nf_bridge_pull_encap_header+0xc0/0xc0 [ 729.355441][ C1] ? br_dev_queue_push_xmit+0x880/0x880 [ 729.360987][ C1] ? nf_hook_slow+0x1b2/0x200 [ 729.365661][ C1] ? NF_HOOK+0xa7/0x700 [ 729.369811][ C1] NF_HOOK+0x66e/0x700 [ 729.373874][ C1] ? net_generic+0x1e/0x240 [ 729.378374][ C1] ? br_validate_ipv4+0x820/0x820 [ 729.383392][ C1] ? __asan_memset+0x22/0x40 [ 729.388025][ C1] ? nf_bridge_pull_encap_header+0xc0/0xc0 [ 729.393836][ C1] br_nf_forward_ip+0xc78/0x10d0 [ 729.398773][ C1] ? nf_bridge_pull_encap_header+0xc0/0xc0 [ 729.404603][ C1] ? br_nf_local_in+0x460/0x460 [ 729.409447][ C1] nf_hook_slow+0xbd/0x200 [ 729.413859][ C1] ? br_dev_queue_push_xmit+0x880/0x880 [ 729.419402][ C1] ? br_dev_queue_push_xmit+0x880/0x880 [ 729.424942][ C1] NF_HOOK+0x23e/0x3e0 [ 729.429009][ C1] ? NF_HOOK+0xa3/0x3e0 [ 729.433159][ C1] ? br_forward_finish+0x130/0x130 [ 729.438275][ C1] ? br_dev_queue_push_xmit+0x880/0x880 [ 729.443862][ C1] __br_forward+0x433/0x610 [ 729.448382][ C1] ? br_dev_queue_push_xmit+0x880/0x880 [ 729.453933][ C1] ? should_deliver+0x390/0x390 [ 729.458790][ C1] ? maybe_deliver+0xa5/0x150 [ 729.463467][ C1] maybe_deliver+0xb5/0x150 [ 729.467978][ C1] br_flood+0x317/0x670 [ 729.472146][ C1] br_handle_frame_finish+0xf2d/0x15c0 [ 729.477623][ C1] ? brport_get_ownership+0x80/0x80 [ 729.482825][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 729.488981][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 729.494178][ C1] ? asm_sysvec_error_interrupt+0x13/0x20 [ 729.499910][ C1] ? nf_hook_slow+0x16e/0x200 [ 729.504585][ C1] ? brport_get_ownership+0x80/0x80 [ 729.509781][ C1] br_nf_hook_thresh+0x3cd/0x4a0 [ 729.514717][ C1] ? lock_chain_count+0x20/0x20 [ 729.519570][ C1] ? brnf_get_logical_dev+0x270/0x270 [ 729.524933][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 729.530130][ C1] ? brport_get_ownership+0x80/0x80 [ 729.535335][ C1] br_nf_pre_routing_finish_ipv6+0x9e5/0xd20 [ 729.541342][ C1] ? brport_get_ownership+0x80/0x80 [ 729.546545][ C1] br_nf_pre_routing_ipv6+0x34d/0x6a0 [ 729.551923][ C1] ? br_nf_pre_routing_ipv6+0x3ea/0x6a0 [ 729.557468][ C1] ? br_validate_ipv6+0x6f0/0x6f0 [ 729.562493][ C1] ? br_nf_pre_routing_ipv6+0x6a0/0x6a0 [ 729.568041][ C1] ? br_nf_pre_routing+0x6d5/0x1420 [ 729.573237][ C1] ? br_nf_hook_thresh+0x4a0/0x4a0 [ 729.578432][ C1] br_handle_frame+0x1240/0x14d0 [ 729.583378][ C1] ? br_handle_frame_dummy+0x10/0x10 [ 729.588663][ C1] ? brport_get_ownership+0x80/0x80 [ 729.593863][ C1] ? br_handle_frame_dummy+0x10/0x10 [ 729.599189][ C1] __netif_receive_skb_core+0xf94/0x3ab0 [ 729.604825][ C1] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 729.611416][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 729.617583][ C1] ? qdisc_run+0x230/0x230 [ 729.621998][ C1] ? process_backlog+0x2cf/0x710 [ 729.626957][ C1] ? read_lock_is_recursive+0x20/0x20 [ 729.632350][ C1] ? process_backlog+0x2cf/0x710 [ 729.637283][ C1] __netif_receive_skb+0x74/0x290 [ 729.642305][ C1] ? process_backlog+0x2cf/0x710 [ 729.647236][ C1] process_backlog+0x380/0x710 [ 729.652004][ C1] ? trigger_rx_softirq+0x60/0x60 [ 729.657023][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 729.663189][ C1] __napi_poll+0xbb/0x460 [ 729.667525][ C1] net_rx_action+0x65f/0xcc0 [ 729.672118][ C1] ? net_tx_action+0x950/0x950 [ 729.676875][ C1] ? detach_timer+0x2b0/0x2b0 [ 729.681556][ C1] handle_softirqs+0x27d/0x820 [ 729.686360][ C1] ? read_tsc+0x9/0x20 [ 729.690465][ C1] ? ktime_get+0x24b/0x280 [ 729.694880][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 729.699642][ C1] ? do_softirq+0x1a0/0x1a0 [ 729.704144][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 729.709362][ C1] __irq_exit_rcu+0xd3/0x190 [ 729.713944][ C1] ? irq_exit_rcu+0x20/0x20 [ 729.718445][ C1] irq_exit_rcu+0x9/0x20 [ 729.722679][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 729.728310][ C1] [ 729.731234][ C1] [ 729.734156][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 729.740138][ C1] RIP: 0010:__schedule+0x0/0x4660 [ 729.745247][ C1] Code: cc cc cc cc cc cc cc cc cc cc f3 0f 1e fa be 01 00 00 00 48 c7 c7 a0 93 74 8e e8 bb 82 4b f7 c3 cc cc cc cc cc cc cc cc cc cc 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 [ 729.764848][ C1] RSP: 0018:ffffc90004547bd8 EFLAGS: 00000282 [ 729.770913][ C1] RAX: 2865c10196662e00 RBX: 0000000000000000 RCX: 2865c10196662e00 [ 729.778875][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacb60 RDI: 0000000000000001 [ 729.786841][ C1] RBP: ffffc90004547c80 R08: ffffffff911e75ff R09: 1ffffffff223cebf [ 729.794805][ C1] R10: dffffc0000000000 R11: fffffbfff223cec0 R12: 0000000000000000 [ 729.802770][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920008a8f7c [ 729.810751][ C1] preempt_schedule_irq+0xbf/0x150 [ 729.815862][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 729.821581][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 729.827387][ C1] irqentry_exit+0x67/0x70 [ 729.831809][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 729.837786][ C1] RIP: 0010:__se_sys_perf_event_open+0x1844/0x1c60 [ 729.844319][ C1] Code: fc ff df 0f b6 04 08 84 c0 0f 85 03 03 00 00 48 8b 74 24 28 8b 96 fc 02 00 00 48 8b 5c 24 30 48 89 df e8 df 40 00 00 48 89 df 77 3b ff ff 48 8b 7c 24 50 e8 ed 70 e5 08 80 7c 24 1f 00 74 07 [ 729.863945][ C1] RSP: 0018:ffffc90004547d40 EFLAGS: 00000246 [ 729.870014][ C1] RAX: 2865c10196662e00 RBX: ffff888024982000 RCX: 0000000000080000 [ 729.877984][ C1] RDX: ffffc9000cdba000 RSI: 00000000000037ed RDI: ffff888024982000 [ 729.885949][ C1] RBP: ffffc90004547f10 R08: ffffffff911e75ff R09: 1ffffffff223cebf [ 729.893912][ C1] R10: dffffc0000000000 R11: fffffbfff223cec0 R12: 0000000000000000 [ 729.901879][ C1] R13: 1ffff920008a8fb8 R14: 1ffff1100aaa5af0 R15: ffff88807e3ebc00 [ 729.909863][ C1] ? security_bpf+0x7e/0xa0 [ 729.914421][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 729.920058][ C1] ? lock_chain_count+0x20/0x20 [ 729.924910][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 729.930101][ C1] ? __x64_sys_perf_event_open+0x20/0xc0 [ 729.935733][ C1] do_syscall_64+0x55/0xb0 [ 729.940165][ C1] ? clear_bhb_loop+0x40/0x90 [ 729.944836][ C1] ? clear_bhb_loop+0x40/0x90 [ 729.949505][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 729.955401][ C1] RIP: 0033:0x7ff6ffd9de59 [ 729.959840][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 729.979526][ C1] RSP: 002b:00007ff700b7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 729.987933][ C1] RAX: ffffffffffffffda RBX: 00007ff700025fa0 RCX: 00007ff6ffd9de59 [ 729.995896][ C1] RDX: ffffff7fffffffff RSI: 0000000000000000 RDI: 0000200000000480 [ 730.003859][ C1] RBP: 00007ff6ffe33e6f R08: 0000000000000008 R09: 0000000000000000 [ 730.011820][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 730.019803][ C1] R13: 00007ff700026038 R14: 00007ff700025fa0 R15: 00007ffff3ac0718 [ 730.027815][ C1]