last executing test programs: 8.832598675s ago: executing program 3 (id=3969): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@ifindex=0x0, 0x1f, 0x0, 0x101, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x33, &(0x7f0000000280)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x2b, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@ifindex=r3, r0, 0x13, 0x1, 0xffffffffffffffff, @void, @value=r0, @void, @void, r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000740)={0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000008c0)="a9fb47b876a2baab0145dacfd78086240f92a68d7834bd5f28b925aa8ad40451082be8153d7131a9557d281e0552f46721bbe2d17ca5891c981b5174393ec632fb6d20628be21dfc3eb3dc515a9cbb92620b9490ca08064f11301a09f864ea8b34cdbaff6feede3d1bd8bb7b12b83371ff985d1ad64db7fe4fbbd6793fbb94827481c4e0ae4f91df8635eadd67b7973298c87a320340e8a706720f5de6a8ac5f650ddddcd79a32d4", 0xa8}, {&(0x7f0000000980)="5a92e48974447ff646e77e91cea2caa8732836e1b336753292e8213f372585bf47f69830ae00181de03e7907d989044cc728f59c0f4911be89af23115fbee65b9ffd04cce60a9f57deaf8f0a2a5d0b8e7c4375e4ef28299c17d491659058f1b79b5c547b5cddde6957", 0x69}, {&(0x7f0000000a00)="a9c5de3fcd0fa8dc", 0x8}, {&(0x7f0000000a40)="367ff1a4fc9177e1383e1c7e53c73b1d564a043a0d936a8778426345d1f269e832a5f9d3e1c388354216e4391aff7b0909dbfd588b14e84321c8e4439676da71f5432c379c9a905727c61a92154f743891ebe66d48762918c460e1cb679baab5128628b76c86a6d87200db74c969337928fefe62d3754b60d89059c4c016ed40ffee4c5594a33de4345378bcbb918f3218d8867267e90152e692fd28c785e1389654cac126c24c6d95ac3b28b2c98c9b613794fbe1", 0xb5}, {&(0x7f0000000b00)="eccb79cc8cfc2e8ff8c49152cd0f04f205d6b224133e571c901db38e6b2257455a45150f2ee369b160be6c3bc9dfc187fd9cf476c74d1d41b3f0cc48d8a1df41914924d8abdedf8c556df7d25c269c9b94decdbfbe4fb87aa84ab0e75f72b9431be2b9f3e5f58e96201ba589434c4a08d6619b3f2354999802c6c7c959b62f122263584ee2c3fac3c1", 0x89}, {&(0x7f0000000bc0)="048d59c313f8486a68a50980ff6d78e996c454b602b19a1fe41e7a5c4dcf5c17179df45136c9b3d53388568d878f2cb2d305a2f84cab3ea1a7c5d654dcb3e11b5f112928b1322d1557232281d1c9f653a5a6d358ee2db76247f05f493287c664af83c2bccef94a309ac61d3e536ca281bf767e22e7d467d0ab264a517c0f8725db677c3366548211fe24c5a8c2fb0479f9d481144fec7f5e83794c34f868b8e563d506c19fed2a9f8472625ff7483dfd0a6ca96afa25d2", 0xb7}, {&(0x7f0000000c80)="c350d39c110c7ffe279f8888e25487abf7fd6c94e6fface62ae863bcd36acf08617703586ec1471e5815e218e685daf095e675d0abb0b3a058d9841ad7802f4c7d36afd7572c5ab2a8e6ad7eb8d3abbfa2631bf5458660c96b999023a125ddc85b40fff012747a0ea68cf41e30eee61f3cd1a752096aab81256d949a0f84c89c71883280630d755c3be40e31e558a022cedf30d90c6c3047554af09676c38b319417c5fd0192ed36fdfb1e08c0cdb2bc28f13418f50fdad99b861dafc4b2cb457c30c57c240e08654ef022c2493139dea0724f7b725a9b27c754c4bf184327eb65c4960f51991d37b8b567c8a93af013ac640d7eda20cf6427ed539c16f1", 0xfe}], 0x7, &(0x7f0000000e00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x18}, 0x800) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=r4, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x5, 0x0, r7, 0x8c9c, '\x00', r1, r8, 0x1, 0x2}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f0000000040), 0x10) r9 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r9, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x10, &(0x7f0000001080)=[{&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd20", 0x27}], 0x1, &(0x7f00000010c0)}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r10 = socket$kcm(0xa, 0x922000000003, 0x11) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74002000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00122800014007282800026004009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmsg$kcm(r10, &(0x7f0000000280)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0xfffffffb, @local, 0x4, 0x3}, 0x80, 0x0, 0x0, &(0x7f00000006c0)=[{0x18, 0x29, 0x3, "ecda"}], 0x18}, 0x4004080) r12 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a802e8c6394f90324fc601000050008000900053582c104003e37000c0180fc0b1d00f80b", 0x33fe0}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), 0x0}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000004100)={&(0x7f0000000280)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, 0x80, &(0x7f0000003f40)=[{0x0}, {&(0x7f0000000980)}], 0x2, &(0x7f0000003f80)=[{0x10, 0x13e, 0x6}, {0x30, 0x107, 0x2e, "f30a597f7d9464f0be9108085c375d6f057898898a450bd04e"}, {0x68, 0x101, 0x7, "4636cb890392fcfed6c8de9195d89c839919ea3d2572d272d27db1ccab044032b95ba4ce3fafd4a775db57ec13c02de821c5fe57266dae6ec8abcf1314ae01e307f21e6164d10c1a56e574a26e58a2aa6efe5e"}], 0xa8}, 0x40) r13 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r14) 8.523604253s ago: executing program 2 (id=3970): r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x18404, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x3) r1 = perf_event_open$cgroup(&(0x7f0000000100)={0x5, 0x80, 0x2, 0x0, 0xfb, 0x6, 0x0, 0xfb62, 0x8c, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x10, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x100, 0x8a39, 0x9, 0x1, 0x9, 0x8001, 0x93, 0x0, 0xffffffff, 0x0, 0x8001}, 0xffffffffffffffff, 0x1, r0, 0x1) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) 8.22842561s ago: executing program 3 (id=3973): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) syz_clone(0x42804000, &(0x7f00000006c0)="73e5dce51d5041218729e7c434", 0xd, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000b40)="030e77c5da1f0f14fb5dc066501468042475262740a034881b9b7da57253a06a2170d0d9cb80516fc6c6769e4759b4e7942cc66201a42a82a62876bce5aaa09a3abd1bb10d40e1ae4feec0489ee13b91f5707351d4b0f4201865f78dda05fc6d96ed20d8a8f572b1e8620241c9d5e8537b34fbadf0978fee845fbab2fd295b92c2") syz_clone(0x100880, &(0x7f0000000900)="29a759e3f91f994d8e8e384c66ddbeeaaf9a3da39be394445c984b042ee1469d99bb075729d69bd3e01abdc4452d6c3dff1903fd3b9aca784f391f8980cea0f1ab0bc80659aa87a99f3be69b5a8cb5365511ca8d48954a0a26cca786b892866b2e7426ea7b62cbb02d4c9fa705051a4ec15e3c010acb5f06c7d051b01e751838170ce95bcb3b74098f21011578bea54c8d175765594bdea69ed75a0b0cb39d38c25038646c94fd1f4f1c313d7efddf0eb89195fb2b5646879f3563f0b95b9ea24d72b7e7ce2b8fed1af2b9635fdf", 0xce, &(0x7f0000000a00), &(0x7f0000000a40), &(0x7f0000000a80)="e4677640518fd4426d479a7495a0e2e6abb3ceb67cc9c211494644dbfea3d1464bf4173cc417c73a702d5aed246432c0e756d27b9a33ad7a5f17cd") r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x12, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000ac0)='hugetlb.1GB.failcnt\x00', 0x2, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000b00)={0xffffffffffffffff}, 0x4) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_clone(0x2020200, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffd}, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) sendmsg$unix(r7, &(0x7f0000000700)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000540)="5d0a8e594cf7f9ed1d9446626e68c540c6385651f7f03f0eff08f8e4dbcbcf4ac9f37a5932367802a879dd6137df8b58c9df26b871370e77df216582200577a4d3524e737f7ec55c5185214c977d5947", 0x50}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1c000000000000000000000000000005", @ANYRES32=r8, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r6, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00'], 0x50, 0x4051}, 0x40010) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)="390000001400070000113c000500018311001f9f660300000000000000f691f3bd3508abca1be6eeb89c44ebb37358582bdb954c53b4e92155", 0x39}], 0x1}, 0x0) r11 = getpid() socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x515}, r11, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 7.349763772s ago: executing program 2 (id=3977): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000004c0)='ns/pid_for_children\x00') ioctl$TUNSETFILTEREBPF(r0, 0xb702, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r1, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x50) openat$cgroup_procs(0xffffffffffffffff, 0xfffffffffffffffe, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 6.920850702s ago: executing program 2 (id=3980): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000980000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xac) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xc, 0x800, 0x67, 0x0, 0x10, r0, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={r0, 0x58, &(0x7f00000007c0)}, 0x10) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x6, 0xd, &(0x7f00000002c0), 0x1) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x541b, &(0x7f00000000c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x63}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 5.685385982s ago: executing program 4 (id=3985): r0 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x114, 0x7, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24080, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x94d5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000100), &(0x7f0000000240)=r2}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc006, 0xac5d, 0xffffffff, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4f}, 0xfffffffffffffe77) socket$kcm(0x10, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {0x25}, {0x6}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f40)=@bpf_lsm={0x1d, 0x22, 0x0, &(0x7f0000000940)='GPL\x00', 0xfffffff6, 0xde, &(0x7f0000000980)=""/222, 0x41100, 0x28, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000ac0)={0x5, 0x2, 0x80}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000e80), &(0x7f0000000ec0)=[{0x2, 0x3, 0x6, 0x8}, {0x1, 0x1, 0x10, 0x8}, {0x2, 0x4, 0x6, 0xa}, {0x2, 0x2, 0xe}, {0x5, 0x4, 0x3}], 0x10, 0xf2db}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8dedcb7907009875f37500e486dd6317ce6203c23c00b980000800009ff57b80000000000000000000002d00ac"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="8e16cb239da51e7f218eff00", @ANYRES32, @ANYBLOB="2000000000000000950000000000000045"], 0x0}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 5.549227595s ago: executing program 2 (id=3986): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@ifindex=0x0, 0x1f, 0x0, 0x101, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x33, &(0x7f0000000280)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x2b, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@ifindex=r3, r0, 0x13, 0x1, 0xffffffffffffffff, @void, @value=r0, @void, @void, r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000740)={0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000008c0)="a9fb47b876a2baab0145dacfd78086240f92a68d7834bd5f28b925aa8ad40451082be8153d7131a9557d281e0552f46721bbe2d17ca5891c981b5174393ec632fb6d20628be21dfc3eb3dc515a9cbb92620b9490ca08064f11301a09f864ea8b34cdbaff6feede3d1bd8bb7b12b83371ff985d1ad64db7fe4fbbd6793fbb94827481c4e0ae4f91df8635eadd67b7973298c87a320340e8a706720f5de6a8ac5f650ddddcd79a32d4", 0xa8}, {&(0x7f0000000980)="5a92e48974447ff646e77e91cea2caa8732836e1b336753292e8213f372585bf47f69830ae00181de03e7907d989044cc728f59c0f4911be89af23115fbee65b9ffd04cce60a9f57deaf8f0a2a5d0b8e7c4375e4ef28299c17d491659058f1b79b5c547b5cddde6957", 0x69}, {&(0x7f0000000a00)="a9c5de3fcd0fa8dc", 0x8}, {&(0x7f0000000a40)="367ff1a4fc9177e1383e1c7e53c73b1d564a043a0d936a8778426345d1f269e832a5f9d3e1c388354216e4391aff7b0909dbfd588b14e84321c8e4439676da71f5432c379c9a905727c61a92154f743891ebe66d48762918c460e1cb679baab5128628b76c86a6d87200db74c969337928fefe62d3754b60d89059c4c016ed40ffee4c5594a33de4345378bcbb918f3218d8867267e90152e692fd28c785e1389654cac126c24c6d95ac3b28b2c98c9b613794fbe1", 0xb5}, {&(0x7f0000000b00)="eccb79cc8cfc2e8ff8c49152cd0f04f205d6b224133e571c901db38e6b2257455a45150f2ee369b160be6c3bc9dfc187fd9cf476c74d1d41b3f0cc48d8a1df41914924d8abdedf8c556df7d25c269c9b94decdbfbe4fb87aa84ab0e75f72b9431be2b9f3e5f58e96201ba589434c4a08d6619b3f2354999802c6c7c959b62f122263584ee2c3fac3c1", 0x89}, {&(0x7f0000000bc0)="048d59c313f8486a68a50980ff6d78e996c454b602b19a1fe41e7a5c4dcf5c17179df45136c9b3d53388568d878f2cb2d305a2f84cab3ea1a7c5d654dcb3e11b5f112928b1322d1557232281d1c9f653a5a6d358ee2db76247f05f493287c664af83c2bccef94a309ac61d3e536ca281bf767e22e7d467d0ab264a517c0f8725db677c3366548211fe24c5a8c2fb0479f9d481144fec7f5e83794c34f868b8e563d506c19fed2a9f8472625ff7483dfd0a6ca96afa25d2", 0xb7}, {&(0x7f0000000c80)="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", 0xfe}], 0x7, &(0x7f0000000e00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x18}, 0x800) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=r4, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x5, 0x0, r7, 0x8c9c, '\x00', r1, r8, 0x1, 0x2}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f0000000040), 0x10) r9 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r9, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x10, &(0x7f0000001080)=[{&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd20", 0x27}], 0x1, &(0x7f00000010c0)}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r10 = socket$kcm(0xa, 0x922000000003, 0x11) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74002000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00122800014007282800026004009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmsg$kcm(r10, &(0x7f0000000280)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0xfffffffb, @local, 0x4, 0x3}, 0x80, 0x0, 0x0, &(0x7f00000006c0)=[{0x18, 0x29, 0x3, "ecda"}], 0x18}, 0x4004080) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), 0x0}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000004100)={&(0x7f0000000280)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, 0x80, &(0x7f0000003f40)=[{0x0}, {&(0x7f0000000980)}], 0x2, &(0x7f0000003f80)=[{0x10, 0x13e, 0x6}, {0x30, 0x107, 0x2e, "f30a597f7d9464f0be9108085c375d6f057898898a450bd04e"}, {0x68, 0x101, 0x7, "4636cb890392fcfed6c8de9195d89c839919ea3d2572d272d27db1ccab044032b95ba4ce3fafd4a775db57ec13c02de821c5fe57266dae6ec8abcf1314ae01e307f21e6164d10c1a56e574a26e58a2aa6efe5e"}], 0xa8}, 0x40) r12 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r13) 5.525904276s ago: executing program 1 (id=3987): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000680)={&(0x7f0000000040)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/236, 0xec}, {&(0x7f00000001c0)=""/78, 0x4e}, {&(0x7f0000000240)=""/232, 0xe8}, {&(0x7f0000000340)=""/248, 0xf8}, {&(0x7f0000000440)=""/253, 0xfd}], 0x5, &(0x7f00000005c0)=""/192, 0xc0}, 0x2100) r1 = perf_event_open$cgroup(&(0x7f0000000700)={0x6, 0x80, 0x4, 0x9, 0x2, 0xe7, 0x0, 0xb75, 0xa000, 0xb, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000006c0)}, 0x2000, 0x7, 0x2, 0x3, 0x5, 0x401, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000007c0)={0x1, 0x80, 0x30, 0x7, 0x6, 0xf7, 0x0, 0x8, 0xa0012, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000780), 0x1}, 0x800, 0x7, 0x4, 0x8, 0xaf2, 0x9, 0x0, 0x0, 0x9, 0x0, 0x6}) sendmsg(r0, &(0x7f0000002180)={&(0x7f0000000840)=@ieee802154={0x24, @long={0x3, 0x1}}, 0x80, &(0x7f0000001e80)=[{&(0x7f00000008c0)="87fb9e5b90e215952b40b6e6e3d2da2fbfe786ad3066523f92600dd778483bc0a57a96c9736b072f5692c58be1aadd863347788fe80a407e133ad39176b27213b210629c085fcfe67bd2b40fdc86fd2c3fa2c8ee59080d3ddf684c3d7a673f98356b092ad24ea6e2c1bf92d8729ef7637665b840b7fc3e5c02e763cbe2bee8ac382e4685b3365964500c12294c7ea50e000edd949f70812463b297d01ac408a312e607663cd68c6cee1d6be85ce0dcac5d736893109fa43b4792dd194a806cba013694396a87", 0xc6}, {&(0x7f00000009c0)="c40913fffcc48108a56aa2d21ac0638dfd72ae54634ea3db5f3dea2d16dbc41a621ba4fa998f4d76fee08ed21ec0954860b51f47a9ef420298aaa6ea88e1779abae12bdb6392fb1dd300de31ac1001c497e5682b830309f4ce6a9fa9c00ad4f1273270abcd98d9cbf845db587f1fac918073797bd1d3c8a3e3bee705e82b38d0dbc0bcdd23c557", 0x87}, {&(0x7f0000000a80)="b8ebbd7ab714e659fc0db2002076be76002056895bd4201ff1ed2f9bc871f7336d3d1a7cea99cd464e02bb4f438f0f5414cd25262cf8d1fbf53a6cb174185f5de8218302e383d8b4e34af3435a69d0b0569f1973d0daab1e04ff5dff2e5c7045731f465c3d", 0x65}, {&(0x7f0000000b00)="fcc02e16e4aa5c2b3db792f09aba5c1355367ff407cb844e07a0e34c2e428081c587844e50e9f014489e692118326e2d863c7bb127a42c4c004e517e15d9c28d62988411aa53dbeb6e7a02de1d48294975a6c344d96d696aa8cd86f3d3e164839241dd31e48033f511ba34519f18557991bfb103f8e4b40853b8e1b70dac11adf247ad69072a68f6ac5724450cc2e9e4227533ec3d5e3d258dbce9589cbccb0906d2b4e94c52efb3f69a0152a6f8cbcc3dcee7e1c008fd6ba66772961cbce2f8973a28f0414307c0a6", 0xc9}, {&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000001c00)="72ee13d5bf84c2a0bfccba1b65fa593f350f8f37d6d82e02aa467e51c759644098152476053936dd840de06367b69ecd28834514f63a337ba38fd3fefe536719ed98b438fd8b75472b6d26b70d2e8bc70b55d734cc241951313b17f98c44fac7a87724067159b4fab4727108cf411b43b04e2e0d04b919ce06e45963c6c7b76d6e345815ca56a4ab4334b0d5a6f634f431099b18e9832740d8a66e16fabea51e8b44b3b768634836176f073121f7", 0xae}, {&(0x7f0000001cc0)="264a686a5bc6691cfcf6609bc397d6f3c05eecaff3d5d776a4a5093eb89a4543232428c4dfd7e9fc420c75259da2e731c4af556bde2f7bdf284ce7a6658aca820eb6ca603831f2322cc4d77d67d91bb7ea13b24765605f75d6a26d21d00923877569e91f11fc78e54d0aebe40b7dbe1258fbec18aa7e0d0441a1598a5a10afd8defd730216a0e107f1b9f4d08bbaa66066262777180d82b2be45ad339e6ea157466fd165e0", 0xa5}, {&(0x7f0000001d80)="f594f00a854b1cf12407a88aa6761e", 0xf}, {&(0x7f0000001dc0)="320dd8c7262b9a745ac5fe9190a20f77e2e25d21048b90ca48ac057e314acfcd20ea2f99cd36910a56653666e7fab936b5018fa774f84fe66b16f46bfcdf5abe4a9d08d50bf358748afe3b22f2ef92e5c4cfc13f5d51c7762c84b3bbf354e4d21ef1b55928a76365435b3b6744d8f17ae81da8a7c137dec2c3e736b0d5f4f558ee6fba4dbbeb425b7690f99ce2e154396b", 0x91}], 0x9, &(0x7f0000001f40)=[{0xf8, 0x115, 0x9, "6ac43346b0ae902b5e48f954f7dba536322738e233844c1e291c827f2ea287a76cf4d231d95b755d3e361422dd6a49479668609dce40ba64165af441837eb180fdbb08f269e87840990a09b26364e0709af81fa5144de1906b1c2f552780aba4ca11faeb64c4802c815cde81b9a820657945598b72195f3c4f107a93fbdc169d8373de98812a4a87d0a4c182df8122c01ececb7352498765ebc907e1da7e9154217044e38d57b3c9d083b2902f459d37f7544a8f98d07e82185ee5e3b236d664609ab405ea04efab80d57ae69e82c2d8ae4798e5a823c75cff792f9900e6ab7989"}, {0x88, 0x117, 0xc73, "887c630b52ac15d8d9ff9ff9c4d9d930b351e9865b639731799095e58ecc168151e9d8ca5ff7dd87a1508a4af7ec29ce5149db3c66f07d78c76f4352e16256189ec9b4e21970d4c08c3a0d93a2f252584972937d0ec52899c2c91be0ba2c7375b1de44d43870cc859f63544b526e13c3dab6130819f0ae"}, {0xc0, 0x10a, 0x6, "b5f5056922d7d9276d758900c7ac6206d2d0b49c21f13e39c2129133dde3075777436a53288bb1adf81cd9906133e105cb026ae2f4a0ced5bd2ee8cdb28d87e8117bc92fa949d7d1780e58064d4091c929612356bffb18f77224e47542d8e6dc437d1227ee907f76c8818064d0cc92a5ce32c87f7559586655de66ffe7e064af3ec8af85c69528b13f0da0b20c56e33aada95b8120cc327429f800fccb204636ae561da2f5834106c26a428809d5"}], 0x240}, 0x24004000) sendmsg$tipc(r0, &(0x7f0000003640)={&(0x7f00000021c0)=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x4, 0x1}}, 0x10, &(0x7f0000003540)=[{&(0x7f0000002200)="d26160561ba3781be91f5cb0feab4e9f4949b9f90cde4beb4d74fb57fe747cd46ae2d947d3ed80e7cf60df80150f3b9052f3490e42ca67709ff4578608982d03950fe55de0c2606aac52cc6824bbb7ab803e71d2ced9257016b7c4840cea0413566979565798e2fcdf8eb0d6cb33b0fac80027b2bad723b5d33cb6fb4a28720620c08be05c59badcff3c72766124374b60018790ea617142841106db45226e37b8e4913b01d4f3225607399065ac64cf3de64f434e37853c422bffa3e590590caa36d22f80e0ebb3402291a1031680a808c44ae1837d55db643818632e7ee566a719ffe7300ae4a2acab710a839ddd4d498f9ba8709f744f67ac978f4bc8595cfdcc428623240762a44e132179257b584654b24a2fe6026ff970c1ad3a49a33ac9189b03d548453c68c53c6a9a5156de2a8281a2fbb507f0bb90ed198da9b22ee3ab3dbba2bfd92d9838b620a1e8525a770bc1c3a2b5fbd03631f22fbd700e25be431828e5d7f3151f4e8c1c7d60254465f5d073040d8ee865026589fe39a83afa8fad89b98da7d751f52ef4350d3b0339fda49338d49d253027c82323594011dcc2356896b563db2579b2d5b0025157056a7119241350bd51ff511062debabcd68a27e10d7899a8930226189a57b53e81ed0fb90bc45dfedb2fb21117cc98010dd990dd8652b01d5bda9271ca845c4c668ef964976ed3942873419abcc2ab7e0056e67ee21e49cfd18879c90374c15958c8ec88bdd17a25049ad254273b8fbee04f29e80725a218c0ff9ec66307efd68f37bfdec699a253d5a775e29ca18b6ef1568f14c49e07dbae4b3cbcae11cd4ebd18e5db67a2ccf5c72a1cf60d2e1825bcd762dd661bd0e4ef93e2f0da0b0f586f783d250731c2408a1aa58a90f93490273e3ca36185f45e4944827b993acafb2e449eef5420fd46cba87c368d6311d1131f5b8555983e4a77fc90eddfda04c04f4d940441bb257992eafdbec0b415a7c07ec1c9b106102f4c02d61c4413d983bdfd3de2b8302d6de54afd71400c5ed5fe0dcd6b13c6a15c3a4da613354f18f802946a7a3ef895342e62b5d89439bb1530f8cafb388b90299b6104a7462092e864509934b5675a8cfad02b5e5a5d816b902bf86d69a985bb47963bd66aa8e398822b31ad655c010751d963cc44496e97ef8f1eefe8ab3c4fff46b2f88079efd5fe8cfe00b438ed6f8746da8785086dcb1bff9e09006f047144da4b951b89865f796e2291c3698bc955b0401d3a7e45d8700a7b126e4c6d2b05c68540dce6d85f12a8e138596876afee375e10244c68ada76b0041af2d4e967f82c91d1edfbd88dcd4e2fe3a5169747c6a2c4d5ded00c303687679db35d144c81f067b1ee5f97b9c90f2c5d740ef7632b18cd455ec4ed4126a87f66f60087f62133f327f7c1097d2a3a0053fb1ebd2840370c96c7560f4bb37fd0030a2d3baaee03765dae590c080a211ee0e8848e229ec72668601dc68738c31a7ac4f10ee8e20e9c6b60f9b03589fe40432c7a761ebf9a753a303a9f1711208b800157a5de1e44b2d51a195d525e8f3b55dbc3f65c240e06ebb2bf8ef2be40ae11efe07bef7010fdefc4662c69308885cda7b94090b162e73d0aa4767afa35629b766814bc9f477a3252954d51030e941ac11a042d37ba821e16755c9b6a2bda5d6604424fa2af30d21f29a25c58d4768e37c2315c09c78d74b370579603eb249190b3658075f5b07586d45703b418e7dab9e755b5f6daa9675537620bad934534acb9e38bbb42d260e1fe87c19b059db176da6d328de49cc95904e23b62e28f69e7efb63cf14f04fa47136b0424f3c3ebc561b66a5ab9ff71af08c513f416bc3f51eb894e4ff09b67a5f849966b06eead8dabcf5398c922ad214e59a10260bf8cad424e2af910cdda3bbfcab86db8d47b0954aa8bf97bcdf670cb6c5cdf0e32c40eee5dac7c6e7278e4d145d3fc519c049798a018f235f693c7db2f2f28b76f2056036db9f47ed991bb442ca92e051bc86b96ed3252cc1bbec94c043652f1fd2ece9609f898574289bd03d5355b5a272dec4d0cb6bd5b279158fbdb625649647d8e7ed67ef0c329460d2967fe882d076b3a4d48b09477c95859e45b67bb653fdca18c97b21e4ae867d4db388c99b128dbcc07b8c6f19c5517276cd8fe81af1090966032655f1fc68ac53192af8992c624807f378cefb614d3da5343a18b8c917738e9ae485ab26bedd136b29e231074303e495ea4671d45ea3c8339604eda7de4ae0591e0878bf11a6e3acb83db12c4ba9b6a6a8e51f5b795303afb7e383dbbde98350f889f7fc96c5f7cd3767dfdff2b589d00fc7392d6d286ab687e9716cc60f5967182278e91679d7800b92d68fa9b9acc122d5479b909cc4a5b4dc9b9951d1001650b7715a125d8169e62c58e57d8e2c4e23e06af32f5493bf68386096c070e583c7cc7ab4aec0785551beadc071c36df1f97e1d7f033ea83946223fac87dc34f09e7f81eba2bfd97356e664f8000e6a5b9cf6ca058fedd217692b8641e9ee01e576b76327e6440d9c931d2f82d4852c7bc3c3cec848a0b1cd7a69aae3456e7e60fad82a03b9ba8216707ba63674b6e9e9f9512f429c11533425031685520ea21d509f7397e37e8b444c475dc9be4bf1b381fd524455a2f40663e665a8cac9a51a75bcd66f00ea89b3f2061fc2981305e9f5a428ef178752480d79d3a2d5116e1eb50fd0efa7cdac041c37585b45a0cb4ea0a4b5a2bc2a5e7291319ecf5a7ddd8e71b4e1243e4b98702c8f6ae349e61ca9d5e77351c21f144737d71084256b740615e9c892817d69f0ff2d5120df39fae713eb2ce4f02c726a47dd359fc6d2f94890416bb79ab78172cc2673fb32404b0815cb403cd736801dd8850536e5ea6f0ae5226af3a05f2a266c1fcdf81fadbecc504c69dd3c7502c3c1f7b3775bbc72946ad0f562291b3730b5fc392096ea420a6a4254bf885700389126cfa4018d7f640bde00b5bfe9c5dcfdc115a442138a2e8d6a65c50a5a4b1b2d663866d2244e170972fabaf0a8bc1ffffd12c8f0d2bd1de8711d23aca61ec3ccabd0373626aee96ea1cbe6cd2af27b2a3e8016a5baa6596427e32f937001430809de36a625f9ea571964c7499fd716af435ee97811248674900f5a7741fb4f53af6b28cccd371533cde40a16b9ec4baf16b6023aaf3c83ce4f1736baec33f0da719a173039a1130a8bd5425ec8ac7dfd1e6dde5972941c1dd8dcfb535e5d364f68bfc5cd33579bbf8726539a59a06749316a83c5113892ea4f159a47341f935ecdb58e6904308699cb00189db5cb53826fb8243ac8ad6c13884ff8a0d1547d53f5a9c1fdcbdae189eb2ef67f62ca571ff61fd0b26be81c5ad5e38fa292012f078302fe9243f801e6f0914b0917f6df385de90debfea012dad73b435ba2763688aae058366f32b8f51274d6de2fbc8f3f73e144ed1f0fa83b9ee367f8215e187f41c4d22548d7f6f8d8bec7ae1fb44d8a66d39d8197d97be8a95db96a3ea63bfd15eb29b31d2b99424a00104400f5ed567371043cd2b72db95cbcfb916802f9c483b98c14a8cdf2939f3fbf0367f1502832cde0b7fc8842b8c02e916dbc3a3eaf9bedc75b370105d0fffc1a47ebcf89c5b94b09ace9dd2d8232d8e872aea1d73e59b690ef39184e7cb3e19717b0241fc1afed95c864ec4372c6b0f1440f1f1330b70f7ef734113ead7f3fe9b0224421a3c6f0dc0249d3f0acca28052dff7fa3dc252d04ba2176cd3ec5c884eecdb86d4ed57c21ac5110494d4fcdcec10bdbb7d6ecd544ca5e930ae2d039645e92d22c33c2cb774279799cfa4ad2fd2edf684eb50e17e2d16d831b863b53a251befd5bd994e507e5b07764605e9dc921fa3be2b4c2cda5c2cfaee2eee3644e61265da5380fdedcfb713b140b606eadb663c4c29826aba72aebbb26ce8443892684e42c3845995f46ba01321977ced22f04aafa5a07687305b1e7df5b1c87783145d3ea810e8566d97fbd7595e059735c423b233831e217d7e3fe10fa663deea15efa50eef55cf0402bbde79d93e99c844ba1fe905cc61ecf6977f7cf47090eb9f18d1c329e9668f18b512f168a7a92480d589489638cbe0f59e49277d31dc25fcd66c9d547a8f216f2b4611d545f10b80e61173a0363e526ddd8aa154e686b838d5f5e268f11100d78cba69331c8da36b30f2621dc84c9421c5a02882941515ff9368744d5deca4eba89def06acaf63552ed05dfdc93784bdeb15d55f1aaa7e017d9733f9ed0b9a462e289b92926bff0d75ce6501968144b2e29312780374cdd73f204357a6b99c63a93f7c4b1eb3bab859d636dfd17bfa71db1fa0bd83e7cf1e45234612da5ea0ade2cd089b9d5f1b6d780d0006d3739830419ffc096f09e7452309196aa351eea8e10b86cb762cf57a358bed3a78170980e1e5086dd53ed03759cc9315e3c7e1b57ac30b7fed877caf4303cb82066f19ff290212e13a5c27e17971e4ed46d38a8ed8667c54fbb8f7000a5a5238bd7972c2f413014ffeb77c1dd2d22c628992c4912214a70c53fad7aa3a19016360d08451eb67925d31b78fd7ad4b3ed12b98612160c07cdb02f6e51df9c13ad72d998ebc488c8a3b8eeb9c4eec03bdb5cfd40ca5b28ffad23c06bb3bccfb06014e39a18376dc459f38d8552c3048fa91b90aa8ec4cb247bf97d652c45c1a8124d5d3d064a551a3217543cf9a9e077f85304fd6f1e821258a8a15f762cc607f72fd267bab9c11bb3ee073717137db9e0de4a33aabf19255f2e44a6023914c8b742515f09a5b5de3caf4188543bd090036d06c72b994038c854af82f2ae70f6d199d141300237074d3e7609bc9edfb24a3d863f715c68260288860204b93ad05030ec441ba7fd80ce033e5dee6a51939b7f7b17c3e916dfc4fe9c6fc362dbbe7e8d476895c10af19279d3f99e07c0d32eac9eff93964dcd03a0666386560f5e1779d0c9dff6a984daeb728e3bb8a8715a5564f08ba026a61c02c8a7c82505fb3f3e41241da2063e4d158e43f9121bf63f7124f012e4de01f621cdc33861e9256c2de5d3c7e9c7534dbd4bdd5e62cd067df117abf790284585fd0d8a8ee7aec0538ccb50dc217bd8040250827750a006a5c8e877ca9c427a44daaef70f74facdd248f29662d3f040a5977b2119f53d4a4222db189a9d9d799027ebec0df19e3e8e1b2dade5dc944b1106d1a06744e2d1247684db205cd2c1c022302ce13d6edf1f82770a438a5c29bcf227fb54344bd17a854ed6d32c5f6a3730d295014729243b1df01425e13a9cbc18eb9fe55f2c0d1cbb0c62bf42f2c1ef6af19eeecf4478f3949e3df223b87ce0a962e47b1e745d3384b178b6655e6ed3967be38fe05dcbfd31ed901fcdd13aa5077a8984f547cc23d86a8b373eed76038dc209e69aa3312c4d7a6a0ec95d03d4119aca3e0d15d63725b3f7e9d4f095047c2b9cbcfb757a78578a03708058cbfe74b7d1784f22891c50cc95ab042028fcc46e033f4700001a896201ae37619c6dd25f00ba1304a3e963f3805a2df76c3a22fca767db9d4f97a05fe262efb7cf91e564e595ee68979192199dcb68eeecf4b26648cd2d4cda00f6dd3e95e17886afc75a47405ef64ebd6ab621c95dafbc570199293469fd0213cce5577c880a9b1a78b826d1d1d72d9241e51bae661a02f16c9ade4d5555fda7edfd3c65f74a3fff6674ad3ccd818fb67ad30f9a5a49ba0567ab679eb5eec48d1fc9cc1fb3e62c7212f3694ee074f94b7849b07a35ad963941773dec60b3c659", 0x1000}, {&(0x7f0000003200)}, {&(0x7f0000003240)="7ff0d7876111a66ed1decb4c0d005c9761a43a7521204d6c2c4f07ee92ee9258cb80770a6755646dd0d0dd4816a39626", 0x30}, {&(0x7f0000003280)="1b7ff77d4a61c85e75e938b1436e3e8b0767165a3d3f723f7975e58c3958be3b969862a33870d0ce36ba692281442986005b0a35e11b41af4b57738b353ccd9f6ff3cc44afbc235ce3f5be4740f2ee4435dd986d33f2a2e96ea8dbd75cbc605ebf69bc3a2cc996b00018f5b99d5553d322b31e72b34025efe57ff519029bc30565c61870106549bfefcbf742b22b09c30c0123302779732bc91d9938b80a622f9355ebabaca0122d84179af68406ad2c62ff9ce987694adcf69df87e1d1e5c44a8f4b07805af16", 0xc7}, {&(0x7f0000003380)="92b5d169ae25e15d9c186ed08165cd01433f021feae1767530561e62667d083e31b8d9780a071ff03f95ab9fb10080a4f84c012c62fb5a9948b32f6a02bd6e67e375d1cc7c4951a0753f4a6d3a33eaac28252846fc0195ed02b98c6a8deca9883f42900d6a5805d4a6777a709684c5", 0x6f}, {&(0x7f0000003400)="b786c05522bc5680b05a73cbb2bcd7cb5734b08571e742eecdcb0ceff28efadf703db65c487424996e4e7b05ea1cdf3d73ca8ec05f797dc0dd152c8a315b46ec25d8784f7b8a8ebcc14be085d2476face9938027ebfab48007a1", 0x5a}, {&(0x7f0000003480)="bb33e52ea7de6f0bda2f6f0b287051695eff11be67d2bc77d3b4e1f96a0bc84f4d744ab2db074656976999ec9b362f347325031a3896156b79c688a697f1fc563ad6acb8c3d549032fb3f21515bd7ea233f88d7e02865f8fb343b1e5", 0x5c}, {&(0x7f0000003500)="8ca3997b73dee0b56ebea62e5a38bf7acd9f58de78733e5565a97abdac7ae34b6ee99d900b0a0ef4863d012805a3d97c3437ed58a5191e8362a6", 0x3a}], 0x8, &(0x7f00000035c0)="35d9faaae4d7a43548e07a262212a4c9788416b4b1e72637fdcbbd7820c4508037bbe15652fe4026fbcc0468658c50962a82d92a403d4daec8bdc45ecf62d9e18ef47bcfa9199531052459c11db631aee462449b7dc8314f5e78aa85bf70d803fa2cdd45d3a5e9b732ef", 0x6a, 0x2004400a}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000038c0)={0x11, 0x10, &(0x7f0000003680)=@raw=[@ldst={0x1, 0x2, 0x1, 0x5, 0xb, 0x40, 0xfffffffffffffffc}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x5}, @ldst={0x2, 0x1, 0x6, 0x5, 0x8, 0x80, 0x10}, @btf_id={0x18, 0xe, 0x3, 0x0, 0x5}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], &(0x7f0000003700)='syzkaller\x00', 0xd2fa, 0x95, &(0x7f0000003740)=""/149, 0x40f00, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000003800)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000003840)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f0000003880)=[{0x3, 0x3, 0x7, 0x6}], 0x10, 0x4}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000003980)={0x0, r2}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003a40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000039c0), &(0x7f0000003a00)=r2}, 0x20) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000004bc0), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000004cc0)={{0x1, 0xffffffffffffffff}, &(0x7f0000004c40), &(0x7f0000004c80)='%+9llu \x00'}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000004d80)={0xb, 0x19, &(0x7f0000003a80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ldst={0x1, 0x1, 0x2, 0x3, 0xa, 0xfffffffffffffff8, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @alu={0x2, 0x0, 0x5, 0xa, 0xb, 0x30, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xafa3}, @func={0x85, 0x0, 0x1, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003b80)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000003bc0)=""/4096, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x6, r4, 0x8, &(0x7f0000004c00)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r2, 0x4, &(0x7f0000004d00)=[0x1, r5], &(0x7f0000004d40)=[{0x1, 0x4, 0x5, 0xdb7d3001dde6f82}, {0x3, 0x5, 0x4, 0x8}, {0x2, 0x2, 0x10, 0xb}, {0x1, 0x5, 0x5, 0xa}]}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000005140)={0x6, 0x1d, &(0x7f0000004e40)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @exit, @map_fd={0x18, 0x3}, @map_fd={0x18, 0x9, 0x1, 0x0, r3}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x2}], &(0x7f0000004f40)='syzkaller\x00', 0x9, 0xf5, &(0x7f0000004f80)=""/245, 0x41100, 0xcf, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000005080)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000050c0)={0x2, 0x6, 0x0, 0x431}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000005100)=[r5, r5, r3, r5, 0x1, r3], 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000005300)={@cgroup=0xffffffffffffffff, 0x14, 0x0, 0xe, &(0x7f0000005200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000005240)=[0x0, 0x0], &(0x7f0000005280)=[0x0, 0x0, 0x0], &(0x7f00000052c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000005380)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000005340)={@cgroup=r10, r7, 0x2d, 0x0, 0x0, @void, @value=r6, @void, @void, r9}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000053c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = openat$cgroup_subtree(r8, &(0x7f0000005400), 0x2, 0x0) perf_event_open(&(0x7f0000005480)={0x5, 0x80, 0x90, 0x10, 0x4, 0x40, 0x0, 0x0, 0x18806, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000005440), 0x2}, 0xa29b, 0x1, 0x2, 0x6, 0x4e, 0x2, 0x2, 0x0, 0x9, 0x0, 0x5}, 0xffffffffffffffff, 0x5, r1, 0x0) mkdir(&(0x7f0000005500)='./file0\x00', 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000055c0)={{r3, 0xffffffffffffffff}, &(0x7f0000005540), &(0x7f0000005580)=r7}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005680)={{r13, 0xffffffffffffffff}, &(0x7f0000005600), &(0x7f0000005640)=r7}, 0x20) r15 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r15, 0x89e1, &(0x7f00000056c0)={r11}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000005b40)={r7, 0xe0, &(0x7f0000005a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000005880)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa, &(0x7f00000058c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000005900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe6, &(0x7f0000005940)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000005980), &(0x7f00000059c0), 0x8, 0xb8, 0x8, 0x8, &(0x7f0000005a00)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000005c80)={0x14, 0x1b, &(0x7f0000005700)=@raw=[@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, @ldst={0x1, 0x3, 0x0, 0xd550c8a5d5238140, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x67}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x2ff44a3f}], &(0x7f0000005800)='syzkaller\x00', 0x7, 0x1f, &(0x7f0000005840)=""/31, 0x40f00, 0x4, '\x00', r16, @lirc_mode2, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000005b80)={0x1, 0xb, 0xe, 0x5}, 0x10, 0xffffffffffffffff, r2, 0x7, &(0x7f0000005bc0)=[r5, r3, r5, r3, r5, r12, r14, r14, r13, r5], &(0x7f0000005c00)=[{0x0, 0x5, 0x9, 0x6}, {0x1, 0x4, 0xb, 0x52ebc2d28d7b8cc0}, {0x5, 0x1, 0x1, 0x1}, {0x0, 0x5, 0xb, 0x9}, {0x0, 0x1, 0x6, 0x6}, {0x4, 0x3, 0x3, 0x5}, {0x2, 0x2, 0x5, 0x3}], 0x10, 0x7}, 0x94) openat$cgroup_netprio_ifpriomap(r10, &(0x7f0000005d40), 0x2, 0x0) r17 = getpid() perf_event_open(&(0x7f0000005dc0)={0x5, 0x80, 0x8, 0x5, 0xd, 0x5, 0x0, 0x40, 0x140, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000005d80), 0x4}, 0x8000, 0x9, 0x0, 0x8, 0x0, 0x5, 0x3, 0x0, 0x6, 0x0, 0x1}, r17, 0xb, r1, 0x0) socketpair(0x3, 0x80000, 0x401, &(0x7f0000005e40)) 5.063617117s ago: executing program 2 (id=3989): r0 = getpid() r1 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x1c842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x2) r2 = syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) socketpair(0x1d, 0xa, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x6f}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x10, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, r1, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, r2, 0xffffffffffffffff, r3, 0x3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, 0x0, &(0x7f0000000500)}, 0x20) close(0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005940)={0xffffffffffffffff}) sendmsg$sock(r4, &(0x7f0000006e40)={&(0x7f0000005980)=@generic={0x1, "7f2a5c186b32b4c3e37e9db0cc4d174988d2a7485e8abf2e0d364ef46996432a3c1f52de9d37bbd65c4381f1e88065069a4c67aeb01cefdda4f74f30b0d0cc3280305951c1a9f9bd942b1080f8fe1f9709a4e70d778a658977ef70f8aa3d710a5f78e96bb6f5530f87548ac4914e4cb5a19987d62bb82525306ab2479ead"}, 0x80, 0x0}, 0x4004010) getpid() (async) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x1c842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x2) (async) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) (async) socketpair(0x1d, 0xa, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x6f}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x10, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, r1, 0xa) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) perf_event_open(0x0, r2, 0xffffffffffffffff, r3, 0x3) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, 0x0, &(0x7f0000000500)}, 0x20) (async) close(0x3) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005940)) (async) sendmsg$sock(r4, &(0x7f0000006e40)={&(0x7f0000005980)=@generic={0x1, "7f2a5c186b32b4c3e37e9db0cc4d174988d2a7485e8abf2e0d364ef46996432a3c1f52de9d37bbd65c4381f1e88065069a4c67aeb01cefdda4f74f30b0d0cc3280305951c1a9f9bd942b1080f8fe1f9709a4e70d778a658977ef70f8aa3d710a5f78e96bb6f5530f87548ac4914e4cb5a19987d62bb82525306ab2479ead"}, 0x80, 0x0}, 0x4004010) (async) 4.989753439s ago: executing program 0 (id=3990): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1, 0x200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x10001, 0x100000001}, 0x11619d, 0x80006, 0xfffffc01, 0x5, 0x9, 0x200, 0x5, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8983, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r6, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000300)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r7}, 0x1e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000005000000b7080000000000007b8af8ff00000000b70800000e0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$sock(r9, &(0x7f0000001940)={0x0, 0x0, 0x0}, 0x20000000) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r12, 0x400454d0, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r11, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe551a250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x4180) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) 4.97323864s ago: executing program 4 (id=3991): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x5, 0x9, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7) (async) r1 = socket$kcm(0x2, 0x3, 0x2) (async) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100), 0x0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) (async) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000840), 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, r4, 0x1, 0x0, 0x5}, 0x50) (async) r5 = syz_clone(0x40000, &(0x7f0000000580)="6adf23bf9cb6fe59bcecd87b7591f0a22b807eb5106cb74c428e6ccd53e671b5a41a6aa2e6dc8310c01d62ae8ad32fc10785471381e682d781316380c1310e199312ee7695f37494d433cd6a93fbad05285a42f930ca35612ade01102ac40462ff900da461ffce3b4a61c96b97e9e1ebb2d837963e2e34f2cdbbcd24212600f5880e0b54413173066fda7d2430b3c9ef64c747fb7f583b2ba0ac12be669fb9300fbce9f6d9ed0d918889b1b4266f6753ac246cdb734618baabd57d61d5e153cbc20f7d48", 0xc4, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000880)="fbdc286a9eabdde20d8fc4c93b52fd0f5b0043c4336e2de578d390491040fb73182180a1182fb4f50352ec16cc57b80c465835e5f010d251f94f6659f60450eb3cc2a5a9028ec5b2edea53ca5b9d4c76ff282cc5de268a5c9c49e587fc11c3d42576b00cea51f5e590c5aea0d2b5c8225be0be800172ad81b8f8d86e2e4b60295acdd1f0cce5aed6e5c74d6aa8686d81915c56ec1b86cf08f5cc1844d03a76cb60e252ea4062c130b64e57487414fb6c60a536605161de8f34139ae77839b3ef69b02f09764e1abeba971434b9397986b68eafdd3598cca05455ef4c612a17e31a29e2e80b8498") (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8916, &(0x7f0000000040)={'veth0_to_bond\x00', @random="0200ac7f7f00"}) (async) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) socketpair(0x1d, 0x800, 0x2, &(0x7f0000000080)) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0xb2f}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000540)={r6, &(0x7f00000001c0)="69aec595feedb74d45b87349def492c9fda54a48", &(0x7f00000003c0)=""/186}, 0x20) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r8 = perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x1d, 0x6, 0x7, 0x0, 0x0, 0x7, 0x908, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x4, @perf_config_ext={0x2635}, 0x10001, 0x51b, 0xfff, 0x3, 0x2e3a8f76, 0xffff0000, 0x1, 0x0, 0x6f5, 0x0, 0xd}, r5, 0xa, r1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40042409, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1e, 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000000ff000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000300000000b702000014000000b70300fcff0000008500000005000000bc09000000000000b609010000000000650000000000020085000000040000000000008500000076000000b7000000000000009500000000000000b52b202e1a1eaa3c0400"/113], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r9, &(0x7f0000000040)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}, 0x7}, 0x80, 0x0}, 0x8e8c5) 4.448596802s ago: executing program 1 (id=3992): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) (async) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0xe, &(0x7f0000000500)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x63}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)=r2}, 0x20) (async) r4 = openat$cgroup_ro(r0, &(0x7f0000000480)='net_prio.prioidx\x00', 0x0, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0\x00', 0x0, 0x10, r2}, 0x18) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)='%pI4 \x00'}, 0x20) (async) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r9) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x3, 0x1, 0x0, 0xfff}]}) (async) ioctl$TUNGETVNETLE(r9, 0x40107447, &(0x7f0000000180)) (async) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r1, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)='%-5lx \x00'}, 0x20) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x9, 0x4, 0xf1f, 0x51020, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1, 0xf, @void, @value, @value=r1}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000b40)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000e40)={r8, 0x58, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x18, 0x11, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7fff}, [@jmp={0x5, 0x1, 0xc, 0x0, 0x8, 0xffffffffffffffff, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10}, @jmp={0x5, 0x1, 0x2, 0x7, 0x3, 0xfffffffffffffff4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r14}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @generic={0x9, 0x6, 0x8, 0x9, 0x80000000}]}, &(0x7f0000000c80)='GPL\x00', 0x6, 0xfd, &(0x7f0000000cc0)=""/253, 0x41000, 0x20, '\x00', r15, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000e80)={0x1, 0x3, 0x7, 0x7f}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000ec0)=[r12, r11], &(0x7f0000000f00)=[{0x2, 0x5, 0x6, 0xe}], 0x10, 0xfffffffc}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{0x1, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)='%pi6 \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x401}, [@generic={0x3, 0x3, 0xf, 0x4, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x7, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc}, @exit]}, &(0x7f0000000300)='syzkaller\x00', 0x3, 0xe2, &(0x7f0000000380)=""/226, 0x40f00, 0x42, '\x00', 0x0, 0x19, r4, 0x8, &(0x7f00000004c0)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x3a85, 0xffffffffffffffff, 0x2, &(0x7f00000009c0)=[r5, r6, r7, r8, r11, r12, r13, r16, r17], &(0x7f0000000a00)=[{0x5, 0x1, 0x4, 0x2}, {0x4, 0x5, 0x1, 0x7}]}, 0x94) 3.26648177s ago: executing program 4 (id=3993): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xac028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair(0xb, 0x1, 0x6, &(0x7f00000007c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27030202590400000000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2c23620", 0x40}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000540)="6fe4dd9eeb85271de1b87ef9440284", 0xf}], 0x4}, 0x200400c4) socketpair(0x1, 0x1, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0x64b}, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="85009500000000000008180000000000000000fb1f00000000009500000000ff0f0085100000fcffff27d0"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r4, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110ca00"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0xec00, 0x0) ioctl$TUNGETVNETLE(r8, 0x800454dd, &(0x7f00000009c0)) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6, 0xc, 0x0, 0x0, 0x0, 0x2000, 0x848, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x4, @perf_config_ext={0x4, 0x3}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89a2, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a3, &(0x7f0000000080)) 3.199110152s ago: executing program 1 (id=3995): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) gettid() perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x0, 0x20, &(0x7f0000000500)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x90, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@volatile={0x5, 0x0, 0x0, 0x9, 0x5}]}, {0x0, [0x30, 0x2e, 0x0, 0x2e, 0x2bac9bf893d19ac0, 0x30, 0x0, 0x2e, 0x0, 0x5f]}}, &(0x7f0000000780)=""/110, 0x30, 0x6e, 0x0, 0x2}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xe, 0x3, &(0x7f0000000100)=@raw=[@alu={0x7, 0x1, 0x4, 0xc, 0x0, 0xfffffffffffffff4, 0x4}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}], &(0x7f0000000280)='syzkaller\x00', 0x6, 0xc9, &(0x7f00000002c0)=""/201, 0x40f00, 0x11, '\x00', r1, @sk_skb=0x5, r2, 0x8, &(0x7f0000000840)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x3, 0x1, 0xfffffff8}, 0x10, 0x0, r3, 0x3, &(0x7f0000000980)=[r4], &(0x7f00000009c0)=[{0x5, 0x3, 0x10, 0x9}, {0x4, 0x3, 0x7, 0xa}, {0x4, 0x4, 0xa, 0x5}], 0x10, 0x1ceb}, 0x94) r5 = socket$kcm(0xa, 0x2, 0x73) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x4) setsockopt$sock_attach_bpf(r5, 0x29, 0x11, &(0x7f0000000140)=r6, 0x4) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b07d25a806f8c6394f90624fc602f0000000a740100051382c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x84}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 3.107467374s ago: executing program 0 (id=3996): r0 = socket$kcm(0x2, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0xa9fe0000}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='r', 0x1}], 0x1, &(0x7f0000007880)=[@ip_retopts={{0x10, 0x84}}], 0x10}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x40, 0xc2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r4}, 0x38) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x7b, &(0x7f0000000000)=r5, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r5, 0x58, &(0x7f00000001c0)}, 0x5f) socket$kcm(0xa, 0x3, 0x3a) 2.570730598s ago: executing program 3 (id=3997): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000980000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xac) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xc, 0x800, 0x67, 0x0, 0x10, r0, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={r0, 0x58, &(0x7f00000007c0)}, 0x10) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x6, 0xd, &(0x7f00000002c0), 0x1) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x541b, &(0x7f00000000c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x63}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.383570202s ago: executing program 1 (id=3998): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x0, 0x8, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000040000000200000000000091030000000000000000000000000000020100000002000000000000080200000000"], 0x0, 0x44}, 0x28) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x4, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "f8"}]}, {0x0, [0xbd, 0x61]}}, &(0x7f0000000000)=""/163, 0x2c, 0xa3, 0x1}, 0x28) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000120000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb080600017f020001be3e7d2a182f", 0x0, 0x104, 0x6000000000000000, 0x31, 0x0, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2", 0x0}, 0x50) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a400014020000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x4, 0x0, 0x1000, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000b00ffffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYRES8], &(0x7f0000000040)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}, 0x10}, 0x94) 2.147335378s ago: executing program 4 (id=3999): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x6b}, @exit], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), 0x0}, 0x20) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00910069cdfb5cc682e02e0a"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa, 0x0, 0x5}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x37}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r2}, 0x94) sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x12000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x7}, 0x94) r7 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x9, 0x1}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r9 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) recvmsg$kcm(r3, &(0x7f0000000a80)={&(0x7f0000000680)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}, 0x40000002) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) 1.906714014s ago: executing program 3 (id=4000): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000004c0)='ns/pid_for_children\x00') ioctl$TUNSETFILTEREBPF(r0, 0xb702, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r1, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x50) openat$cgroup_procs(0xffffffffffffffff, 0xfffffffffffffffe, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1.692346599s ago: executing program 0 (id=4001): socket$kcm(0x10, 0x2, 0x4) r0 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x11b, 0x5, 0x0, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x6, 0x804, 0x0, 0x7}, {0x10400002, 0x2, 0x0, 0x5}], 0x10, 0xfffffffd}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000001d00)={'wlan1\x00', @random='\x00\x00\b\x00'}) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) 1.569261502s ago: executing program 1 (id=4002): r0 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x114, 0x7, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24080, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x94d5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000100), &(0x7f0000000240)=r2}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc006, 0xac5d, 0xffffffff, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4f}, 0xfffffffffffffe77) socket$kcm(0x10, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {0x25}, {0x6}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f40)=@bpf_lsm={0x1d, 0x22, 0x0, &(0x7f0000000940)='GPL\x00', 0xfffffff6, 0xde, &(0x7f0000000980)=""/222, 0x41100, 0x28, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000ac0)={0x5, 0x2, 0x80}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000e80), &(0x7f0000000ec0)=[{0x2, 0x3, 0x6, 0x8}, {0x1, 0x1, 0x10, 0x8}, {0x2, 0x4, 0x6, 0xa}, {0x2, 0x2, 0xe}, {0x5, 0x4, 0x3}], 0x10, 0xf2db}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8dedcb7907009875f37500e486dd6317ce6203c23c00b980000800009ff57b80000000000000000000002d00ac"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="8e16cb239da51e7f218eff00", @ANYRES32, @ANYBLOB="2000000000000000950000000000000045"], 0x0}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 1.417748735s ago: executing program 3 (id=4003): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14869, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) close(0xffffffffffffffff) socket$kcm(0x1e, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x10000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000480)={r3, r0}, 0xc) socket$kcm(0x2b, 0x1, 0x0) 1.188684511s ago: executing program 4 (id=4004): socket$kcm(0x2, 0x3, 0x106) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc9, 0x1}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2}}, &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee688892f", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.186505031s ago: executing program 0 (id=4005): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/pid\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 934.319627ms ago: executing program 3 (id=4006): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)="3e0000003a000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a000180dc861d3e000000000000006ccdfb0a8259104247f3d8", 0x3e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) r1 = syz_clone(0x0, &(0x7f0000000080)="5ce69423fee8649934fbf14be1e1fcc94628010d45b154d32f0e274978db1ddfe46504c71683913c336162fde9f0d59bee3f66f02fa39971dc2309390c7c0b40c395a273010c9b9456415754130b4ca9e399e653a99aa12f40e3d2562609ef19ebce512df5b4c29d178e85c2020ebaa4673f465dc70ef5b19ea96ea5f56474e102b8cfbd415bed921d1ecc4a92c97b48c12081a09e0a52155e9d86aabe748f06f2befe789a0244659dcc5b7d", 0xac, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="ce913325f7581f930f28cc3cd215a9c5e93c8f580ab565d5050ca55c7e4452b3e87540de60116e3a7de5c43b2c9893e29d6539317dee481702744347cd1a5d30d5495061b12e537717439bb830f4b37ff25b95b871be8fcfaf5ae032f9f7daaf83f49318bef2bde4fd17fd27ca") syz_open_procfs$namespace(r1, &(0x7f0000000240)='ns/mnt\x00') 933.414127ms ago: executing program 1 (id=4007): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) syz_clone(0x42804000, &(0x7f00000006c0)="73e5dce51d5041218729e7c434", 0xd, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000b40)="030e77c5da1f0f14fb5dc066501468042475262740a034881b9b7da57253a06a2170d0d9cb80516fc6c6769e4759b4e7942cc66201a42a82a62876bce5aaa09a3abd1bb10d40e1ae4feec0489ee13b91f5707351d4b0f4201865f78dda05fc6d96ed20d8a8f572b1e8620241c9d5e8537b34fbadf0978fee845fbab2fd295b92c2") syz_clone(0x100880, &(0x7f0000000900)="29a759e3f91f994d8e8e384c66ddbeeaaf9a3da39be394445c984b042ee1469d99bb075729d69bd3e01abdc4452d6c3dff1903fd3b9aca784f391f8980cea0f1ab0bc80659aa87a99f3be69b5a8cb5365511ca8d48954a0a26cca786b892866b2e7426ea7b62cbb02d4c9fa705051a4ec15e3c010acb5f06c7d051b01e751838170ce95bcb3b74098f21011578bea54c8d175765594bdea69ed75a0b0cb39d38c25038646c94fd1f4f1c313d7efddf0eb89195fb2b5646879f3563f0b95b9ea24d72b7e7ce2b8fed1af2b9635fdf", 0xce, &(0x7f0000000a00), &(0x7f0000000a40), &(0x7f0000000a80)="e4677640518fd4426d479a7495a0e2e6abb3ceb67cc9c211494644dbfea3d1464bf4173cc417c73a702d5aed246432c0e756d27b9a33ad7a5f17cd") r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x12, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000ac0)='hugetlb.1GB.failcnt\x00', 0x2, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000b00)={0xffffffffffffffff}, 0x4) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_clone(0x2020200, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffd}, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) sendmsg$unix(r7, &(0x7f0000000700)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000540)="5d0a8e594cf7f9ed1d9446626e68c540c6385651f7f03f0eff08f8e4dbcbcf4ac9f37a5932367802a879dd6137df8b58c9df26b871370e77df216582200577a4d3524e737f7ec55c5185214c977d5947", 0x50}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1c000000000000000000000000000005", @ANYRES32=r8, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r6, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00'], 0x50, 0x4051}, 0x40010) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)="390000001400070000113c000500018311001f9f660300000000000000f691f3bd3508abca1be6eeb89c44ebb37358582bdb954c53b4e92155", 0x39}], 0x1}, 0x0) r11 = getpid() socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x515}, r11, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 876.676859ms ago: executing program 0 (id=4008): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) gettid() perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x0, 0x20, &(0x7f0000000500)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x90, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@volatile={0x5, 0x0, 0x0, 0x9, 0x5}]}, {0x0, [0x30, 0x2e, 0x0, 0x2e, 0x2bac9bf893d19ac0, 0x30, 0x0, 0x2e, 0x0, 0x5f]}}, &(0x7f0000000780)=""/110, 0x30, 0x6e, 0x0, 0x2}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xe, 0x3, &(0x7f0000000100)=@raw=[@alu={0x7, 0x1, 0x4, 0xc, 0x0, 0xfffffffffffffff4, 0x4}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}], &(0x7f0000000280)='syzkaller\x00', 0x6, 0xc9, &(0x7f00000002c0)=""/201, 0x40f00, 0x11, '\x00', r1, @sk_skb=0x5, r2, 0x8, &(0x7f0000000840)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x3, 0x1, 0xfffffff8}, 0x10, 0x0, r3, 0x3, &(0x7f0000000980)=[r4], &(0x7f00000009c0)=[{0x5, 0x3, 0x10, 0x9}, {0x4, 0x3, 0x7, 0xa}, {0x4, 0x4, 0xa, 0x5}], 0x10, 0x1ceb}, 0x94) r5 = socket$kcm(0xa, 0x2, 0x73) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x4) setsockopt$sock_attach_bpf(r5, 0x29, 0x11, &(0x7f0000000140)=r6, 0x4) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b07d25a806f8c6394f90624fc602f0000000a740100051382c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x84}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 679.366733ms ago: executing program 4 (id=4009): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x106080, 0x0, 0x4000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000feffff3f000000000001000085100000060000008710000004000000c608feffff3f00001800000000000000000000000000000095"], 0x0, 0x7, 0x0, 0x0, 0x100, 0x40}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$kcm(0x11, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f0000001280)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)={r0}) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf0}, 0x10020) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x1f6, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x2a}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) 659.123764ms ago: executing program 2 (id=4010): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000980000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xac) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xc, 0x800, 0x67, 0x0, 0x10, r0, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={r0, 0x58, &(0x7f00000007c0)}, 0x10) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x6, 0xd, &(0x7f00000002c0), 0x1) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x541b, &(0x7f00000000c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x63}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 0s ago: executing program 0 (id=4011): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x0, 0x8, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000040000000200000000000091030000000000000000000000000000020100000002000000000000080200000000"], 0x0, 0x44}, 0x28) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1b, 0x1b, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x3, [{0x3, 0x1, 0x3}], "da6b47"}]}, {0x0, [0xbd, 0x61]}}, &(0x7f0000000000)=""/163, 0x38, 0xa3, 0x1}, 0x28) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000120000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb080600017f020001be3e7d2a182f", 0x0, 0x104, 0x6000000000000000, 0x31, 0x0, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2", 0x0}, 0x50) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a400014020000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x4, 0x0, 0x1000, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000b00ffffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYRES8], &(0x7f0000000040)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8}, 0x10}, 0x94) kernel console output (not intermixed with test programs): T7126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 621.897951][T15487] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3068'. [ 621.915929][T15487] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 621.953973][ T7107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 621.993296][ T7107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 622.023604][ T7107] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.030871][ T7107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.044955][T15495] netlink: 'syz.3.3069': attribute type 1 has an invalid length. [ 622.085690][T15489] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3069'. [ 622.109451][T15495] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.3069'. [ 622.133576][T15494] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3069'. [ 622.192950][T15494] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 622.220997][T15493] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.3070'. [ 622.264803][ T7107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 622.286133][ T7107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 622.313538][ T7107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 622.350844][ T7107] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.358028][ T7107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.412800][ T7107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 622.442934][T15507] netlink: 'syz.2.3074': attribute type 10 has an invalid length. [ 622.479647][T15507] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3074'. [ 622.501513][T15507] device dummy0 entered promiscuous mode [ 622.508292][T15507] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 622.548057][ T7107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 622.596940][ T7107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 622.687118][ T7107] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 622.726633][ T7107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 622.763760][ T7107] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 622.829380][T15515] netlink: 'syz.3.3075': attribute type 10 has an invalid length. [ 623.357068][T15515] team0: Device gre0 is of different type [ 623.673647][ T7107] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 623.701856][ T7107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 623.760606][ T7107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 624.058038][ T7126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 624.093361][ T7126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 624.237844][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.244337][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.323633][T15286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 624.808420][T15538] netlink: 'syz.2.3080': attribute type 3 has an invalid length. [ 625.324227][T15545] __nla_validate_parse: 3 callbacks suppressed [ 625.324249][T15545] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3081'. [ 625.572497][T15556] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3084'. [ 625.717411][T15562] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3084'. [ 625.762800][T15562] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 625.886943][ T7120] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 625.922724][ T7120] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 625.965294][T15286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 627.321614][ T7126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 627.338234][ T7126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 627.399047][ T7100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 627.417629][ T7100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 627.439479][T15286] device veth0_vlan entered promiscuous mode [ 627.458026][ T7100] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 627.467338][ T7100] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 627.494328][T15286] device veth1_vlan entered promiscuous mode [ 629.113956][ T7112] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 629.129173][ T7112] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 629.159173][ T7112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 629.174726][ T7112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 629.215186][T15286] device veth0_macvtap entered promiscuous mode [ 629.262571][T15286] device veth1_macvtap entered promiscuous mode [ 629.299437][T15286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.325907][T15286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.337244][T15286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.348383][T15286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.359728][T15286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.372083][T15286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.385470][T15286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 629.469488][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 629.488200][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 629.539120][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 629.591017][T15286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.648807][T15620] netlink: 'syz.2.3094': attribute type 3 has an invalid length. [ 629.654130][T15286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.717128][T15620] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3094'. [ 629.728516][T15286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.759300][T15286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.772367][T15286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.784669][T15286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.801665][T15286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 629.819028][ T7112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 629.848038][ T7112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 629.894693][T15286] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.923424][T15286] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.948714][T15286] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.958170][T15286] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.359539][ T7120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.378268][ T7120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.399298][T15641] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3099'. [ 630.419406][ T7093] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 630.458860][T15648] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3099'. [ 630.477272][T15648] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 630.532940][T15641] netlink: 'syz.3.3099': attribute type 1 has an invalid length. [ 630.559647][T15641] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.3099'. [ 630.608785][T15649] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3099'. [ 630.630041][T15649] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 630.669467][T15649] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 630.701791][T15645] device veth1_macvtap left promiscuous mode [ 630.815035][ T7093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.865369][ T7093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.900709][ T7100] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 631.547529][T15671] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.3108'. [ 631.600103][T15666] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.3106'. [ 631.612159][T15672] netlink: 'syz.4.3109': attribute type 3 has an invalid length. [ 631.653329][T15666] netlink: 6320 bytes leftover after parsing attributes in process `syz.3.3106'. [ 631.664139][T15672] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3109'. [ 632.785776][ T7103] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.865401][T15685] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3112'. [ 632.995616][ T7103] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.029996][T15688] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3112'. [ 633.044900][T15685] netlink: 'syz.3.3112': attribute type 1 has an invalid length. [ 633.088548][T15688] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 633.232646][ T4286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 633.243588][ T4286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 633.251802][ T4286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 633.276432][ T4286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 633.286031][ T4286] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 633.293768][ T4286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 633.309077][ T7103] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.360605][T15700] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 633.378148][T15700] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 635.357815][ T4286] Bluetooth: hci1: command 0x0409 tx timeout [ 636.098324][ T7103] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.120099][T15709] netlink: 'syz.1.3116': attribute type 10 has an invalid length. [ 636.537312][T15709] team0: Device gre0 is of different type [ 636.849743][T15721] netlink: 'syz.1.3119': attribute type 3 has an invalid length. [ 636.902625][T15721] __nla_validate_parse: 2 callbacks suppressed [ 636.902663][T15721] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3119'. [ 637.344628][T15727] netlink: 'syz.4.3121': attribute type 29 has an invalid length. [ 637.436381][ T4286] Bluetooth: hci1: command 0x041b tx timeout [ 637.587925][T15727] netlink: 'syz.4.3121': attribute type 29 has an invalid length. [ 637.632978][T15741] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 637.657204][T15702] chnl_net:caif_netlink_parms(): no params data found [ 637.665170][T15741] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 637.689443][T15738] netlink: 'syz.4.3121': attribute type 29 has an invalid length. [ 637.700859][T15741] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 637.860247][T15743] netlink: 'syz.4.3121': attribute type 29 has an invalid length. [ 637.903989][T15746] netlink: 'syz.4.3121': attribute type 29 has an invalid length. [ 638.068716][T15768] netlink: 'syz.2.3127': attribute type 1 has an invalid length. [ 638.110346][T15758] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3127'. [ 638.145356][T15768] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.3127'. [ 638.240474][T15764] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3127'. [ 638.252993][T15764] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 638.370977][T15773] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3127'. [ 638.389294][T15773] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 638.413120][T15773] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 638.577700][T15770] tap0: tun_chr_ioctl cmd 1074812118 [ 638.622926][T15702] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.647607][ T7093] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 638.650673][T15702] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.691482][T15702] device bridge_slave_0 entered promiscuous mode [ 638.722879][T15790] netlink: 'syz.2.3132': attribute type 3 has an invalid length. [ 638.739419][T15790] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3132'. [ 638.796649][T15789] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3131'. [ 638.816507][T15702] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.826009][T15702] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.839360][T15702] device bridge_slave_1 entered promiscuous mode [ 638.985903][T15789] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 638.994314][T15789] dvmrp1: ignored: set checksum disabled [ 639.019722][T15702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 639.129030][T15702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 639.408287][T15702] team0: Port device team_slave_0 added [ 639.466523][T15802] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3134'. [ 639.510277][ T4286] Bluetooth: hci1: command 0x040f tx timeout [ 639.822680][T15802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 639.937553][T15802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.029615][T15802] bond0 (unregistering): Released all slaves [ 640.117797][T15702] team0: Port device team_slave_1 added [ 640.187267][T15804] netlink: 'syz.3.3134': attribute type 21 has an invalid length. [ 640.455539][T15702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 640.480939][T15702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.534515][T15702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 640.587321][T15702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 640.597404][T15702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.633043][T15702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 640.842345][T15828] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3142'. [ 640.913671][T15702] device hsr_slave_0 entered promiscuous mode [ 640.971149][T15702] device hsr_slave_1 entered promiscuous mode [ 640.991200][T15702] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 641.014914][T15702] Cannot create hsr debugfs directory [ 641.064815][T15838] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.3143'. [ 641.204539][T15834] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 641.271314][T15838] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 641.329168][T15838] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 641.590390][ T4286] Bluetooth: hci1: command 0x0419 tx timeout [ 641.687728][T15861] delete_channel: no stack [ 641.896875][T15853] validate_nla: 2 callbacks suppressed [ 641.896917][T15853] netlink: 'syz.4.3149': attribute type 9 has an invalid length. [ 641.932397][T15853] __nla_validate_parse: 3 callbacks suppressed [ 641.932436][T15853] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.3149'. [ 642.216611][T15867] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3151'. [ 642.375025][T15867] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 642.431051][T15867] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 642.479051][T15867] bond0 (unregistering): Released all slaves [ 642.511673][T15872] netlink: 'syz.1.3151': attribute type 21 has an invalid length. [ 642.530940][T15873] tap0: tun_chr_ioctl cmd 1074812118 [ 642.587150][T15882] netlink: 'syz.4.3152': attribute type 10 has an invalid length. [ 642.626925][T15882] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.660846][T15882] device bridge_slave_1 left promiscuous mode [ 642.677412][T15882] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.714523][T15882] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 642.782925][ T7103] device hsr_slave_0 left promiscuous mode [ 642.802155][ T7103] device hsr_slave_1 left promiscuous mode [ 642.884883][ T7103] device veth1_vlan left promiscuous mode [ 642.918627][ T7103] device veth0_vlan left promiscuous mode [ 642.938931][T15890] netlink: 'syz.1.3154': attribute type 1 has an invalid length. [ 642.947457][T15890] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.3154'. [ 643.493579][ T7103] team0 (unregistering): Port device virt_wifi0 removed [ 643.800598][ T7103] team0 (unregistering): Port device team_slave_1 removed [ 643.849510][ T7103] team0 (unregistering): Port device team_slave_0 removed [ 643.899125][ T7103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 644.161315][ T7103] bond0 (unregistering): Released all slaves [ 644.222240][T15892] netlink: 'syz.3.3155': attribute type 39 has an invalid length. [ 644.346126][T15897] netlink: 'syz.1.3157': attribute type 21 has an invalid length. [ 644.359288][T15901] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3158'. [ 644.463335][T15901] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3158'. [ 644.557143][T15905] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3159'. [ 644.598370][T15909] netlink: 'syz.1.3161': attribute type 3 has an invalid length. [ 644.618451][T15915] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3159'. [ 644.650333][T15909] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3161'. [ 644.672232][T15915] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 644.760848][T15902] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3158'. [ 644.795619][T15905] netlink: 'syz.2.3159': attribute type 1 has an invalid length. [ 644.835935][T15905] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.3159'. [ 644.873603][T15915] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 644.928108][T15915] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 645.249118][T15928] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 645.317678][T15928] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 645.344053][T15943] netlink: 'syz.3.3165': attribute type 29 has an invalid length. [ 645.425152][T15928] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 645.489239][T15928] bond0 (unregistering): Released all slaves [ 645.640667][T15935] netlink: 'syz.4.3164': attribute type 21 has an invalid length. [ 647.023948][T15991] __nla_validate_parse: 3 callbacks suppressed [ 647.023993][T15991] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3176'. [ 647.116998][T15991] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3176'. [ 647.147098][T15995] validate_nla: 4 callbacks suppressed [ 647.147117][T15995] netlink: 'syz.3.3176': attribute type 1 has an invalid length. [ 647.169515][T15991] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 647.201693][T15995] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.3176'. [ 647.263376][T15999] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3176'. [ 647.286714][T15999] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 647.300984][T16001] netlink: 'syz.2.3180': attribute type 2 has an invalid length. [ 647.326016][T15999] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 647.363549][T15702] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 647.507220][T16001] device 2 entered promiscuous mode [ 647.559476][T15702] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 647.590415][T15702] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 647.616452][T15702] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 647.822386][T16016] netlink: 'syz.2.3183': attribute type 3 has an invalid length. [ 647.840371][T16016] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.3183'. [ 648.016140][T16016] netlink: 'syz.2.3183': attribute type 21 has an invalid length. [ 648.034529][T16016] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3183'. [ 648.382499][T15702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 648.422944][T16029] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.3185'. [ 648.427302][T16030] netlink: 'syz.4.3186': attribute type 3 has an invalid length. [ 648.460013][T16030] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3186'. [ 648.485338][ T7112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 648.505695][ T7112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 648.553098][T15702] 8021q: adding VLAN 0 to HW filter on device team0 [ 648.620612][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 648.634349][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 648.707778][ T7103] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.715034][ T7103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.801423][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 648.842464][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 648.853591][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 648.880797][ T7103] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.888076][ T7103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.928798][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 648.980772][T16042] netlink: 'syz.2.3188': attribute type 39 has an invalid length. [ 649.456339][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 649.469968][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 649.515795][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 649.555520][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 649.586925][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 649.598945][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 649.635330][T16057] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3191'. [ 649.653643][T16061] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3191'. [ 649.672216][T16061] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 649.711178][ T7112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 649.743972][ T7112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 649.782733][T15702] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 649.825027][T15702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 649.825863][T16057] netlink: 'syz.1.3191': attribute type 1 has an invalid length. [ 649.882219][ T7112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 649.907142][ T7112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 649.931247][T16061] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 649.987555][T16061] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 650.339539][T16087] netlink: 'syz.4.3199': attribute type 3 has an invalid length. [ 650.501088][T16093] netlink: 'syz.2.3200': attribute type 10 has an invalid length. [ 650.528949][T16093] device ipvlan1 entered promiscuous mode [ 650.562905][T16093] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 651.092457][ T7093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 651.110001][ T7093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 651.180577][T15702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 651.287471][ T7126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 651.302220][ T7126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 651.350480][T16118] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 651.424317][T15702] device veth0_vlan entered promiscuous mode [ 651.456535][T16118] netlink: 'syz.3.3207': attribute type 1 has an invalid length. [ 651.471406][ T7093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 651.496531][ T7093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 651.541001][ T7093] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 651.569565][ T7093] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 651.595213][T16124] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 651.630393][T16124] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 651.697052][T15702] device veth1_vlan entered promiscuous mode [ 652.068390][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 652.091549][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 652.131224][T15702] device veth0_macvtap entered promiscuous mode [ 652.159744][T16133] __nla_validate_parse: 9 callbacks suppressed [ 652.159781][T16133] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3211'. [ 652.211574][T15702] device veth1_macvtap entered promiscuous mode [ 652.262698][T15702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.318949][T15702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.379787][T15702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.439552][T15702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.500194][T15702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.532062][T15702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.547971][T15702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.569314][T15702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.604503][T15702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 652.622910][T16154] validate_nla: 1 callbacks suppressed [ 652.622927][T16154] netlink: 'syz.3.3214': attribute type 10 has an invalid length. [ 652.647046][T16154] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3214'. [ 652.675636][T16154] device ipvlan1 entered promiscuous mode [ 652.701585][T16154] bridge0: port 3(ipvlan1) entered blocking state [ 652.728673][T16154] bridge0: port 3(ipvlan1) entered disabled state [ 652.747495][T16154] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 652.779099][ T7126] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 652.801161][ T7126] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 652.809960][ T7126] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 652.828592][ T7126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 653.828088][T16188] netlink: 'syz.3.3222': attribute type 1 has an invalid length. [ 653.846784][T16188] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.3222'. [ 655.362303][T15702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.374179][T15702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.384839][T15702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.395568][T15702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.406437][T15702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.417151][T15702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.427067][T15702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.437826][T15702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.454359][T15702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 655.462935][ T7126] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 655.481263][ T7126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 655.516063][T16183] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3222'. [ 655.527020][T16186] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3222'. [ 655.543127][T16186] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 655.561124][T16188] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3222'. [ 655.571252][T16188] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 655.588440][T16188] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 655.614500][T15702] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.640338][T15702] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.678445][T15702] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.697662][T15702] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.864658][T16200] netlink: 'syz.3.3225': attribute type 3 has an invalid length. [ 655.884236][T16200] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3225'. [ 656.006944][ T7126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.025819][ T7126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.089383][ T7107] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 656.124552][ T7112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.141029][ T7112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.164433][ T7107] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 656.770918][T16221] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.3229'. [ 657.724079][T16236] netlink: 'syz.3.3234': attribute type 21 has an invalid length. [ 657.750534][T16236] netlink: 'syz.3.3234': attribute type 1 has an invalid length. [ 657.902120][T16241] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3235'. [ 658.001190][T16245] netlink: 'syz.4.3235': attribute type 1 has an invalid length. [ 658.039279][T16246] netlink: 'syz.0.3237': attribute type 3 has an invalid length. [ 658.054255][T16245] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.3235'. [ 658.087165][T16246] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3237'. [ 658.115843][T16241] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3235'. [ 658.151260][T16241] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 658.216416][ T4277] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 658.226760][ T4277] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 658.235163][T14199] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 658.253329][T14199] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 658.261878][T14199] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 658.269299][T14199] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 658.382111][T16248] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3235'. [ 658.399267][T16248] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 658.422556][T16248] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 658.909787][T16251] chnl_net:caif_netlink_parms(): no params data found [ 659.654396][T16251] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.681039][T16251] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.700382][T16251] device bridge_slave_0 entered promiscuous mode [ 659.742839][T16251] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.790350][T16251] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.798628][T16251] device bridge_slave_1 entered promiscuous mode [ 659.974935][ T7112] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.004522][T16302] netlink: 'syz.3.3249': attribute type 3 has an invalid length. [ 660.042342][T16302] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3249'. [ 660.077348][T16251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 660.210751][ T7112] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.275669][T16251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 660.300377][T16306] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3250'. [ 660.310855][ T4286] Bluetooth: hci2: command 0x0409 tx timeout [ 660.348036][T16310] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3250'. [ 660.358598][T16310] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 660.444946][T16306] netlink: 'syz.4.3250': attribute type 1 has an invalid length. [ 660.456952][ T7112] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.490824][T16314] netlink: 'syz.0.3252': attribute type 21 has an invalid length. [ 660.504264][T16306] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.3250'. [ 660.533552][T16314] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3252'. [ 660.573543][T16310] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 660.619749][T16310] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 660.669914][T16320] netlink: 'syz.3.3253': attribute type 29 has an invalid length. [ 660.753777][ T7112] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.820853][T16251] team0: Port device team_slave_0 added [ 660.850224][T16320] netlink: 'syz.3.3253': attribute type 29 has an invalid length. [ 660.887588][T16251] team0: Port device team_slave_1 added [ 660.904467][T16319] netlink: 'syz.3.3253': attribute type 29 has an invalid length. [ 661.008901][T16251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 661.018534][T16251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 661.075686][T16251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 661.150808][T16251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 661.157911][T16251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 661.354752][T16251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 661.476824][ T7112] device 0 left promiscuous mode [ 661.528830][T16341] TCP: TCP_TX_DELAY enabled [ 661.580034][ T7112] device 1 left promiscuous mode [ 661.619110][T16251] device hsr_slave_0 entered promiscuous mode [ 661.649548][T16251] device hsr_slave_1 entered promiscuous mode [ 661.696842][T16251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 661.715131][T16251] Cannot create hsr debugfs directory [ 661.760697][ T7112] device 2 left promiscuous mode [ 662.185084][T16360] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 662.372768][T16366] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 662.391911][ T4286] Bluetooth: hci2: command 0x041b tx timeout [ 662.431755][T16366] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 662.956106][T16380] validate_nla: 2 callbacks suppressed [ 662.956126][T16380] netlink: 'syz.4.3267': attribute type 153 has an invalid length. [ 662.981046][T16380] __nla_validate_parse: 6 callbacks suppressed [ 662.981066][T16380] netlink: 69544 bytes leftover after parsing attributes in process `syz.4.3267'. [ 663.682959][T16399] device wlan1 entered promiscuous mode [ 664.037736][T16410] netlink: 'syz.4.3275': attribute type 3 has an invalid length. [ 664.073453][T16410] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3275'. [ 664.470349][T14199] Bluetooth: hci2: command 0x040f tx timeout [ 664.636534][T16426] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3278'. [ 664.679837][T16429] netlink: 'syz.4.3278': attribute type 1 has an invalid length. [ 664.709283][T16425] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3278'. [ 664.720590][T16429] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.3278'. [ 664.749886][T16425] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 664.939453][T16426] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3278'. [ 664.971529][T16426] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 665.051755][T16426] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 665.590265][T16251] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 665.642616][T16251] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 665.762601][ T7112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 665.770097][ T7112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 665.797978][T16464] netlink: 'syz.1.3287': attribute type 3 has an invalid length. [ 665.822943][T16464] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3287'. [ 665.893439][ T7112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 665.912737][ T7112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 666.017725][ T7112] device veth1_vlan left promiscuous mode [ 666.031030][ T7112] device veth0_vlan left promiscuous mode [ 666.550325][T14199] Bluetooth: hci2: command 0x0419 tx timeout [ 666.585952][ T7112] team0 (unregistering): Port device geneve1 removed [ 667.136432][ T7112] team0 (unregistering): Port device hsr_slave_0 removed [ 667.385504][ T7112] team0 (unregistering): Port device team_slave_1 removed [ 667.471336][ T7112] team0 (unregistering): Port device team_slave_0 removed [ 668.095574][T16251] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 668.197196][T16484] netlink: 'syz.3.3293': attribute type 2 has an invalid length. [ 668.207142][T16484] netlink: 'syz.3.3293': attribute type 8 has an invalid length. [ 668.230296][T16484] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3293'. [ 668.294454][T16485] netlink: 'syz.3.3293': attribute type 2 has an invalid length. [ 668.310254][T16485] netlink: 'syz.3.3293': attribute type 8 has an invalid length. [ 668.328395][T16485] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3293'. [ 668.348947][T16251] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 668.426332][T16489] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3294'. [ 668.485058][T16493] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3294'. [ 668.530824][T16493] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 668.609851][T16498] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3297'. [ 668.628854][T16489] netlink: 'syz.1.3294': attribute type 1 has an invalid length. [ 668.667124][T16489] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.3294'. [ 668.769516][T16493] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3294'. [ 668.780371][T16493] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 668.832353][T16493] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 668.951544][T16503] netlink: 3403 bytes leftover after parsing attributes in process `syz.4.3298'. [ 669.102736][T16251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.117635][ T7120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 669.126297][ T7120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 669.173255][T16251] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.227769][ T7126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 669.242998][ T7126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 669.261315][ T7126] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.268593][ T7126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.320970][ T7126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 669.398925][T16518] netlink: 'syz.0.3300': attribute type 10 has an invalid length. [ 669.430010][T16518] device geneve0 entered promiscuous mode [ 669.552289][T16518] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 669.574128][ T7120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 669.586761][ T7120] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 669.626064][ T7120] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.633284][ T7120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.660729][ T7120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 669.691432][T16510] netlink: 'syz.1.3303': attribute type 10 has an invalid length. [ 669.851631][T16510] team0: Port device geneve1 added [ 669.867141][T16526] netlink: 'syz.3.3304': attribute type 21 has an invalid length. [ 669.955853][ T7120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 669.988402][ T7120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 670.014709][ T7120] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 670.034024][ T7120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 670.067059][ T7120] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 670.094867][ T7120] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 670.186437][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 670.205892][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 670.983114][T16540] netlink: 'syz.1.3307': attribute type 22 has an invalid length. [ 670.992063][T16540] netlink: 14526 bytes leftover after parsing attributes in process `syz.1.3307'. [ 671.018466][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 671.029163][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 671.052612][T16251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 671.386142][T16555] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3312'. [ 671.455614][T16555] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 671.500348][T16560] netlink: 'syz.3.3312': attribute type 1 has an invalid length. [ 671.564077][T16555] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 671.632525][T16555] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 671.916583][ T7093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 671.950469][ T7093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 671.979470][T16251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 672.055140][ T7120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 672.074316][ T7120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 672.185860][ T7120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 672.201152][ T7120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 672.232868][T16251] device veth0_vlan entered promiscuous mode [ 672.261152][ T7120] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 672.274493][ T7120] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 672.309257][T16251] device veth1_vlan entered promiscuous mode [ 672.409974][T16584] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 672.447613][T16584] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 672.628329][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 672.639856][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 672.681582][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 672.701340][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 672.721290][T16587] device syzkaller0 entered promiscuous mode [ 672.733388][T16251] device veth0_macvtap entered promiscuous mode [ 672.789759][T16251] device veth1_macvtap entered promiscuous mode [ 672.884795][T16251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.895712][T16251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.906122][T16251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.917001][T16251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.929905][T16251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.940961][T16251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.952028][T16251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.963093][T16251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.982291][T16251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 673.045671][ T7120] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 673.097125][ T7120] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 673.106282][ T7120] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 673.116255][ T7120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 673.127107][T16251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.144481][T16251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.157108][T16251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.168143][T16251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.178540][T16251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.189767][T16251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.200623][T16251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.212384][T16251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.268975][T16251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 673.297245][ T7120] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 673.307080][ T7120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 673.323502][T16251] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.335631][T16251] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.346066][T16251] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.355788][T16251] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.485245][T16593] netlink: 'syz.0.3330': attribute type 10 has an invalid length. [ 673.625128][T16593] team0: Port device geneve1 added [ 673.863529][ T7095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.897546][ T7095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.922866][ T7120] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 674.010373][ T7095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.041212][ T7095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.067619][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 674.336684][T16619] __nla_validate_parse: 3 callbacks suppressed [ 674.336741][T16619] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.3326'. [ 674.731098][T16632] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3230'. [ 675.112713][T16635] netlink: 'syz.1.3331': attribute type 2 has an invalid length. [ 675.200234][T16635] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3331'. [ 675.723574][T16651] netlink: 'syz.0.3334': attribute type 3 has an invalid length. [ 675.753069][T16651] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3334'. [ 675.777133][T16653] netlink: 'syz.1.3337': attribute type 21 has an invalid length. [ 675.797060][T16653] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3337'. [ 676.340530][T16665] netlink: 'syz.4.3341': attribute type 21 has an invalid length. [ 676.994529][T16687] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3347'. [ 677.516867][ T4286] Bluetooth: hci0: command 0x0406 tx timeout [ 677.622220][T16710] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3356'. [ 677.633636][T16710] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3356'. [ 677.656723][T16710] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3356'. [ 677.752659][T16711] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3356'. [ 678.452488][T16731] netlink: 'syz.0.3362': attribute type 23 has an invalid length. [ 678.515446][T16739] netlink: 'syz.3.3365': attribute type 29 has an invalid length. [ 679.426834][T16765] netlink: 'syz.2.3372': attribute type 3 has an invalid length. [ 679.461716][T16765] __nla_validate_parse: 1 callbacks suppressed [ 679.461755][T16765] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3372'. [ 679.991996][T16784] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3377'. [ 680.313860][T16795] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3380'. [ 680.353027][T16795] netlink: zone id is out of range [ 680.406066][T16795] netlink: del zone limit has 4 unknown bytes [ 681.017910][T16806] netlink: 'syz.4.3384': attribute type 39 has an invalid length. [ 681.407397][T16817] netlink: 'syz.2.3386': attribute type 3 has an invalid length. [ 681.522095][T16817] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3386'. [ 681.806125][T16820] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3387'. [ 682.102375][T16826] ÿÿÿÿÿÿ: renamed from vlan1 [ 682.324095][T16834] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3392'. [ 682.437894][T16834] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3392'. [ 682.477832][T16834] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 682.558079][T16844] netlink: 'syz.4.3392': attribute type 1 has an invalid length. [ 682.614116][T16834] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3392'. [ 682.647472][T16844] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.3392'. [ 682.651249][T16834] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 682.795574][T16834] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 682.911860][T16851] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.3397'. [ 683.097988][T16858] netlink: 'syz.4.3400': attribute type 3 has an invalid length. [ 683.138179][T16855] netlink: 'syz.3.3397': attribute type 3 has an invalid length. [ 683.343043][T16861] IPv6: NLM_F_CREATE should be specified when creating new route [ 684.577880][T16896] __nla_validate_parse: 4 callbacks suppressed [ 684.577915][T16896] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3410'. [ 684.636816][T16899] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3410'. [ 684.673931][T16899] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 684.794235][T16899] netlink: 'syz.3.3410': attribute type 1 has an invalid length. [ 684.822698][T16899] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.3410'. [ 685.027686][T16913] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3411'. [ 685.395037][T16899] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3410'. [ 685.412909][T16899] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 685.440613][T16899] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 685.630934][T16918] netlink: 'syz.4.3413': attribute type 3 has an invalid length. [ 685.664828][T16918] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3413'. [ 685.700534][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.706915][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.036576][T16930] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3416'. [ 687.149888][T16957] netlink: 'syz.4.3423': attribute type 15 has an invalid length. [ 687.161641][T16952] delete_channel: no stack [ 687.178448][T16957] netlink: 'syz.4.3423': attribute type 7 has an invalid length. [ 687.279043][T16952] netlink: 'syz.3.3422': attribute type 21 has an invalid length. [ 687.311330][T16952] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3422'. [ 687.360387][T16952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3422'. [ 687.463711][T16961] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3424'. [ 687.558693][T16966] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 687.689141][T16961] netlink: 'syz.2.3424': attribute type 1 has an invalid length. [ 687.760922][T16966] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 687.817406][T16966] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 687.863978][T16971] netlink: 'syz.1.3426': attribute type 10 has an invalid length. [ 687.896489][T16971] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.906640][T16971] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.933165][T16978] netlink: 'syz.3.3428': attribute type 3 has an invalid length. [ 688.117386][T16971] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.126735][T16971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.138525][T16971] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.147467][T16971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.382312][T16971] team0: Port device bridge0 added [ 690.111789][T17017] netlink: 'syz.0.3440': attribute type 21 has an invalid length. [ 690.124593][T17017] IPv6: NLM_F_CREATE should be specified when creating new route [ 690.187184][T17017] IPv6: Can't replace route, no match found [ 691.096771][T17048] netlink: 'syz.0.3447': attribute type 9 has an invalid length. [ 691.129838][T17048] __nla_validate_parse: 4 callbacks suppressed [ 691.129875][T17048] netlink: 149020 bytes leftover after parsing attributes in process `syz.0.3447'. [ 691.230020][T17054] netlink: 'syz.2.3449': attribute type 3 has an invalid length. [ 691.257028][T17054] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3449'. [ 692.268373][T17106] netlink: 'syz.0.3462': attribute type 10 has an invalid length. [ 692.333292][T17106] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.381279][T17106] device bridge_slave_1 left promiscuous mode [ 692.387684][T17106] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.440466][T17106] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 693.569050][T17142] netlink: 'syz.4.3469': attribute type 4 has an invalid length. [ 693.661964][T17142] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3469'. [ 694.819249][T17160] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3476'. [ 694.847313][T17164] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3478'. [ 694.876473][T17160] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3476'. [ 694.907167][T17160] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 694.972145][T17166] netlink: 'syz.2.3476': attribute type 1 has an invalid length. [ 694.979953][T17166] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.3476'. [ 694.991069][T17164] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3478'. [ 695.104910][T17160] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3476'. [ 695.188852][T17160] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 695.452672][T17160] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 695.553404][T17165] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3478'. [ 696.170939][T17193] netlink: 'syz.3.3484': attribute type 41 has an invalid length. [ 696.229807][T17192] netlink: 'syz.1.3485': attribute type 9 has an invalid length. [ 696.259164][T17192] netlink: 149020 bytes leftover after parsing attributes in process `syz.1.3485'. [ 698.559521][T17226] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3493'. [ 698.616584][T17226] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3493'. [ 698.679258][T17226] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 698.766749][T17233] netlink: 'syz.3.3493': attribute type 1 has an invalid length. [ 698.827311][T17233] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.3493'. [ 698.880910][T17231] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3493'. [ 698.914882][T17231] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 699.007687][T17231] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 702.394514][T17259] netlink: 'syz.3.3502': attribute type 9 has an invalid length. [ 702.450901][T17259] netlink: 149020 bytes leftover after parsing attributes in process `syz.3.3502'. [ 703.013584][T17275] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3505'. [ 705.009738][T17275] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 705.328658][T17299] netlink: 'syz.4.3511': attribute type 29 has an invalid length. [ 705.348272][T17299] netlink: 'syz.4.3511': attribute type 29 has an invalid length. [ 705.372229][T17299] netlink: 'syz.4.3511': attribute type 29 has an invalid length. [ 705.535105][T17307] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.3513'. [ 705.626198][T17307] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 705.999561][T17318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3518'. [ 706.062194][T17318] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3518'. [ 706.409146][T17325] netlink: 'syz.1.3521': attribute type 21 has an invalid length. [ 706.437960][T17325] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3521'. [ 706.484087][T17325] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3521'. [ 706.658037][T17335] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3525'. [ 706.769282][T17341] netlink: 'syz.3.3525': attribute type 1 has an invalid length. [ 706.852355][T17335] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3525'. [ 706.863398][T17341] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.3525'. [ 706.895960][T17335] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 706.942265][T17341] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 706.957309][T17341] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 707.031198][T17348] netlink: 'syz.4.3527': attribute type 1 has an invalid length. [ 707.373356][T17367] netlink: 'syz.1.3529': attribute type 29 has an invalid length. [ 707.411339][T17367] netlink: 'syz.1.3529': attribute type 29 has an invalid length. [ 707.451623][T17355] netlink: 'syz.1.3529': attribute type 29 has an invalid length. [ 707.476118][T17369] netlink: 'syz.1.3529': attribute type 29 has an invalid length. [ 707.651405][T17378] netlink: 'syz.2.3535': attribute type 39 has an invalid length. [ 707.685407][T17378] __nla_validate_parse: 1 callbacks suppressed [ 707.685426][T17378] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3535'. [ 707.862792][T17378] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 708.080310][T17378] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 708.101913][T17378] bond0 (unregistering): Released all slaves [ 708.183728][T17391] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3540'. [ 708.252199][T17395] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3540'. [ 708.427429][T17395] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 708.700768][T17397] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3540'. [ 708.747356][T17397] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 708.779650][T17397] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 709.141810][T17416] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 709.185592][T17415] netlink: 'syz.2.3548': attribute type 4 has an invalid length. [ 709.204695][T17415] netlink: 'syz.2.3548': attribute type 8 has an invalid length. [ 709.234956][T17415] netlink: 109560 bytes leftover after parsing attributes in process `syz.2.3548'. [ 709.264730][T17418] netlink: 'syz.2.3548': attribute type 21 has an invalid length. [ 709.283881][T17416] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 709.293097][T17416] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 709.302254][T17416] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 709.311412][T17416] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 709.320576][T17416] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 710.432309][T17464] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3559'. [ 710.508071][T17464] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3559'. [ 710.613935][T17464] netlink: 'syz.1.3559': attribute type 1 has an invalid length. [ 710.626344][T17464] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.3559'. [ 710.671795][T17464] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3559'. [ 710.698872][T17464] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 710.941688][T17484] netlink: 'syz.0.3566': attribute type 12 has an invalid length. [ 711.031844][T17484] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3566'. [ 712.054629][T17514] device sit0 entered promiscuous mode [ 712.464987][T17536] net_ratelimit: 61 callbacks suppressed [ 712.465025][T17536] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 712.605522][T17536] netlink: 'syz.2.3577': attribute type 1 has an invalid length. [ 712.629888][T17541] netlink: 'syz.3.3579': attribute type 10 has an invalid length. [ 712.727560][T17536] __nla_validate_parse: 3 callbacks suppressed [ 712.727597][T17536] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3577'. [ 712.767208][T17536] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 712.805033][T17536] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 714.293891][T17591] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3591'. [ 714.718411][T17599] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3595'. [ 714.779102][T17599] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3595'. [ 714.810672][T17599] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 714.892051][T17606] netlink: 'syz.1.3598': attribute type 10 has an invalid length. [ 714.940986][T17606] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3598'. [ 714.957593][T17604] netlink: 'syz.4.3595': attribute type 1 has an invalid length. [ 715.031415][T17606] device dummy0 entered promiscuous mode [ 715.031421][T17604] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.3595'. [ 715.075626][T17606] bridge0: port 3(dummy0) entered blocking state [ 715.103412][T17606] bridge0: port 3(dummy0) entered disabled state [ 715.164685][T17606] bridge0: port 3(dummy0) entered blocking state [ 715.171432][T17606] bridge0: port 3(dummy0) entered forwarding state [ 715.221132][T17599] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3595'. [ 715.234440][T17599] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 715.318400][T17599] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 715.401744][T17610] netlink: 'syz.1.3598': attribute type 3 has an invalid length. [ 715.414143][T17606] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3598'. [ 715.415099][T17610] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3598'. [ 715.775599][T17627] netlink: 'syz.2.3603': attribute type 9 has an invalid length. [ 715.820814][T17627] netlink: 149020 bytes leftover after parsing attributes in process `syz.2.3603'. [ 717.282342][T17672] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 717.355951][T17680] netlink: 'syz.0.3612': attribute type 1 has an invalid length. [ 717.429023][T17672] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 717.524048][T17672] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 717.650795][T17685] netlink: 'syz.1.3617': attribute type 9 has an invalid length. [ 718.472174][T14199] Bluetooth: hci4: command 0x0406 tx timeout [ 718.987162][T17720] netlink: 'syz.2.3627': attribute type 1 has an invalid length. [ 719.080777][T17720] netlink: 'syz.2.3627': attribute type 4 has an invalid length. [ 719.175873][T17720] __nla_validate_parse: 6 callbacks suppressed [ 719.175891][T17720] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3627'. [ 719.296149][T17724] netlink: 'syz.2.3627': attribute type 1 has an invalid length. [ 719.378973][T17724] netlink: 'syz.2.3627': attribute type 4 has an invalid length. [ 719.463054][T17724] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3627'. [ 720.207559][T17720] cgroup: fork rejected by pids controller in /syz2 [ 720.564231][T17734] netlink: 'syz.1.3628': attribute type 39 has an invalid length. [ 720.820784][T17736] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3630'. [ 720.966223][T17736] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3630'. [ 721.044399][T17736] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 721.097524][T17737] netlink: 'syz.3.3630': attribute type 1 has an invalid length. [ 721.148052][T17737] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.3630'. [ 721.193430][T17736] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3630'. [ 721.228593][T17736] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 721.281304][T17736] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 721.350862][T17744] netlink: 'syz.0.3633': attribute type 9 has an invalid length. [ 721.366635][T17744] netlink: 149020 bytes leftover after parsing attributes in process `syz.0.3633'. [ 721.797858][T17759] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 721.913276][T17757] netlink: 'syz.0.3638': attribute type 21 has an invalid length. [ 722.304032][ T7086] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.549619][ T7086] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.713958][ T7086] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.879917][ T7086] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.579686][T17790] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3647'. [ 723.596101][T17793] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3647'. [ 723.620634][T17793] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 723.682707][T17792] netlink: 'syz.3.3648': attribute type 9 has an invalid length. [ 723.714283][T17792] netlink: 149020 bytes leftover after parsing attributes in process `syz.3.3648'. [ 723.756102][T17790] netlink: 'syz.0.3647': attribute type 1 has an invalid length. [ 723.865885][T17796] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 723.908858][T17796] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 723.981927][ T4286] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 723.992955][ T4286] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 724.014255][ T4286] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 724.030075][ T4286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 724.038837][ T4286] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 724.046625][ T4286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 724.402634][T17805] netlink: 'syz.4.3649': attribute type 1 has an invalid length. [ 724.594696][T17805] netlink: 'syz.4.3649': attribute type 4 has an invalid length. [ 724.884963][T17805] __nla_validate_parse: 2 callbacks suppressed [ 724.884982][T17805] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3649'. [ 725.322550][T17809] netlink: 'syz.4.3649': attribute type 1 has an invalid length. [ 725.411523][T17809] netlink: 'syz.4.3649': attribute type 4 has an invalid length. [ 725.562638][T17809] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3649'. [ 726.074407][ T4286] Bluetooth: hci2: command 0x0409 tx timeout [ 727.470224][T17846] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.3658'. [ 727.737033][T17852] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3659'. [ 727.831490][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 727.850879][T17852] device hsr_slave_0 left promiscuous mode [ 727.886318][T17852] device hsr_slave_1 left promiscuous mode [ 727.987487][T17862] netlink: 'syz.1.3660': attribute type 9 has an invalid length. [ 728.010314][T17862] netlink: 149020 bytes leftover after parsing attributes in process `syz.1.3660'. [ 728.110735][T17864] netlink: 'syz.4.3662': attribute type 1 has an invalid length. [ 728.148676][T17864] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.3662'. [ 728.159584][ T4286] Bluetooth: hci2: command 0x041b tx timeout [ 728.179455][T17856] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3662'. [ 728.195291][T17863] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3662'. [ 728.205867][T17863] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 728.291918][T17856] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3662'. [ 728.355885][T17856] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 728.486194][T17856] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 728.728515][T17803] chnl_net:caif_netlink_parms(): no params data found [ 729.789028][T17803] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.815786][T17803] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.857727][T17803] device bridge_slave_0 entered promiscuous mode [ 729.910298][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 729.932115][T17803] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.939566][T17803] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.000383][T17803] device bridge_slave_1 entered promiscuous mode [ 730.179686][T17803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 730.230343][ T4286] Bluetooth: hci2: command 0x040f tx timeout [ 730.238504][T17803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.116762][T17931] netlink: 'syz.1.3675': attribute type 9 has an invalid length. [ 731.150665][T17803] team0: Port device team_slave_0 added [ 731.162451][T17931] netlink: 149020 bytes leftover after parsing attributes in process `syz.1.3675'. [ 731.255191][T17803] team0: Port device team_slave_1 added [ 731.326443][ T7086] device hsr_slave_0 left promiscuous mode [ 731.342202][ T7086] device hsr_slave_1 left promiscuous mode [ 731.358613][ T7086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 731.388963][ T7086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 731.419146][ T7086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 731.470484][ T7086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 731.547182][ T7086] device bridge_slave_1 left promiscuous mode [ 731.560547][ T7086] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.573253][ T7086] device bridge_slave_0 left promiscuous mode [ 731.579559][ T7086] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.610018][T17948] netlink: 'syz.4.3678': attribute type 1 has an invalid length. [ 731.672460][T17951] netlink: 'syz.1.3680': attribute type 29 has an invalid length. [ 731.730415][T17948] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.3678'. [ 731.920878][ T7086] device veth1_macvtap left promiscuous mode [ 731.933195][ T7086] device veth0_macvtap left promiscuous mode [ 731.970847][ T7086] device veth1_vlan left promiscuous mode [ 731.980031][ T7086] device veth0_vlan left promiscuous mode [ 731.990412][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 732.310581][ T4286] Bluetooth: hci2: command 0x0419 tx timeout [ 733.526716][ T7086] team0 (unregistering): Port device team_slave_1 removed [ 733.571892][ T7086] team0 (unregistering): Port device team_slave_0 removed [ 734.018658][T17942] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3678'. [ 734.028322][T17944] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3678'. [ 734.038119][T17944] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 734.054118][T17951] netlink: 'syz.1.3680': attribute type 29 has an invalid length. [ 734.070284][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 734.070696][T17948] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3678'. [ 734.089948][T17948] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 734.110487][T17948] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 734.136841][T17962] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 734.150256][T17803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 734.157258][T17803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 734.196898][T17962] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 734.244096][T17962] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 734.287884][T17803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 734.348954][T17803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 734.391471][T17803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 734.488953][T17803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 734.523185][T17976] FAULT_INJECTION: forcing a failure. [ 734.523185][T17976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 734.566295][T17976] CPU: 0 PID: 17976 Comm: syz.0.3685 Not tainted syzkaller #0 [ 734.573855][T17976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 734.584103][T17976] Call Trace: [ 734.587422][T17976] [ 734.590399][T17976] dump_stack_lvl+0x188/0x24e [ 734.595134][T17976] ? lockdep_hardirqs_on+0x94/0x140 [ 734.600387][T17976] ? show_regs_print_info+0x12/0x12 [ 734.605661][T17976] ? audit_tree_destroy_watch+0x20/0x20 [ 734.611295][T17976] should_fail_ex+0x390/0x4c0 [ 734.616137][T17976] _copy_to_user+0x2c/0x130 [ 734.620686][T17976] simple_read_from_buffer+0xe3/0x150 [ 734.626252][T17976] proc_fail_nth_read+0x1a6/0x220 [ 734.631345][T17976] ? proc_fault_inject_write+0x310/0x310 [ 734.632350][T17973] netlink: 'syz.4.3684': attribute type 11 has an invalid length. [ 734.637007][T17976] ? fsnotify_perm+0x248/0x550 [ 734.637056][T17976] ? proc_fault_inject_write+0x310/0x310 [ 734.637082][T17976] vfs_read+0x2db/0x960 [ 734.659604][T17976] ? kernel_read+0x1e0/0x1e0 [ 734.664258][T17976] ? __fget_files+0x28/0x460 [ 734.668944][T17976] ? __fget_files+0x3fc/0x460 [ 734.673684][T17976] ? __fdget_pos+0x2ae/0x360 [ 734.678416][T17976] ? ksys_read+0x70/0x260 [ 734.682295][T17973] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3684'. [ 734.682790][T17976] ksys_read+0x14d/0x260 [ 734.682830][T17976] ? vfs_write+0x9a0/0x9a0 [ 734.682866][T17976] ? lockdep_hardirqs_on+0x94/0x140 [ 734.682892][T17976] do_syscall_64+0x4c/0xa0 [ 734.682921][T17976] ? clear_bhb_loop+0x60/0xb0 [ 734.715363][T17976] ? clear_bhb_loop+0x60/0xb0 [ 734.720105][T17976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 734.726050][T17976] RIP: 0033:0x7f4f8435e90e [ 734.730534][T17976] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 734.750202][T17976] RSP: 002b:00007f4f851b7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 734.758690][T17976] RAX: ffffffffffffffda RBX: 00007f4f851b86c0 RCX: 00007f4f8435e90e [ 734.766809][T17976] RDX: 000000000000000f RSI: 00007f4f851b80a0 RDI: 0000000000000009 [ 734.774822][T17976] RBP: 00007f4f851b8090 R08: 0000000000000000 R09: 0000000000000000 [ 734.782844][T17976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 734.790871][T17976] R13: 00007f4f84626038 R14: 00007f4f84625fa0 R15: 00007ffd27e5ff18 [ 734.798908][T17976] [ 734.815327][T17978] netlink: 'syz.4.3684': attribute type 10 has an invalid length. [ 734.909237][T17803] device hsr_slave_0 entered promiscuous mode [ 734.919808][T17972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 734.941898][T17803] device hsr_slave_1 entered promiscuous mode [ 734.959811][T17803] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 734.977976][T17803] Cannot create hsr debugfs directory [ 735.997235][T17999] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3689'. [ 736.150283][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 736.687902][T17803] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 736.775246][T17803] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 736.815396][T17803] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 736.865326][T17803] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 736.991465][T18024] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3694'. [ 737.025775][T18029] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3694'. [ 737.100397][T18029] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 737.194208][T18024] netlink: 'syz.3.3694': attribute type 1 has an invalid length. [ 737.282358][T18024] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.3694'. [ 737.317154][T18034] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3694'. [ 737.354407][T18034] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 737.430671][T18034] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 737.676611][T17803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 737.714971][T18043] netlink: 'syz.1.3697': attribute type 10 has an invalid length. [ 737.734458][T18043] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3697'. [ 737.775255][T18043] device ipvlan1 entered promiscuous mode [ 737.799371][T18043] bridge0: port 4(ipvlan1) entered blocking state [ 737.822287][T18043] bridge0: port 4(ipvlan1) entered disabled state [ 737.841293][T18043] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 737.897804][ T7086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 737.927619][ T7086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 737.976435][T17803] 8021q: adding VLAN 0 to HW filter on device team0 [ 738.028100][ T7093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 738.034375][T18053] netlink: 'syz.4.3700': attribute type 9 has an invalid length. [ 738.089113][ T7093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 738.126149][ T7093] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.133397][ T7093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 738.141016][T18053] netlink: 149020 bytes leftover after parsing attributes in process `syz.4.3700'. [ 738.230215][T14199] Bluetooth: hci4: command 0x206e tx timeout [ 738.257803][ T7093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 738.386771][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 738.427202][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 738.480847][ T7103] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.488201][ T7103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 738.558271][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 738.618432][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 738.649601][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 738.678331][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 738.709779][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 738.764521][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 738.791715][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 738.839572][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 738.881801][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 738.917714][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 738.950629][T14199] Bluetooth: hci3: command 0x0406 tx timeout [ 738.986618][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 739.053822][T17803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 740.143811][T18117] netlink: 'syz.4.3712': attribute type 10 has an invalid length. [ 740.189106][T18117] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3712'. [ 740.221223][T18117] device ipvlan1 entered promiscuous mode [ 740.240580][T18117] bridge0: port 2(ipvlan1) entered blocking state [ 740.263384][T18117] bridge0: port 2(ipvlan1) entered disabled state [ 740.300648][T18117] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 740.316626][T14199] Bluetooth: hci4: command 0x206e tx timeout [ 740.433887][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 740.444413][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 740.469322][T17803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 740.591531][ T7093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 740.611297][ T7093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 740.663495][T18124] netlink: 'syz.3.3716': attribute type 29 has an invalid length. [ 740.698831][T17803] device veth0_vlan entered promiscuous mode [ 740.728543][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 740.754139][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 740.792315][T17803] device veth1_vlan entered promiscuous mode [ 740.831319][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 740.841070][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 740.873598][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 740.981147][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 741.001713][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 741.033148][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 741.097044][T17803] device veth0_macvtap entered promiscuous mode [ 741.142951][T17803] device veth1_macvtap entered promiscuous mode [ 741.229208][T17803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 741.259525][T17803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.276505][T17803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 741.328337][T17803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.377498][T17803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 741.427474][T17803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.456014][T17803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 741.499940][T17803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.539005][T17803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 741.552718][ T7112] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 741.582646][ T7112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 741.598697][ T7112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 741.638687][ T7112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 741.727525][T17803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 741.780347][T17803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.823905][T17803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 741.850227][T17803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.874995][T17803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 741.950292][T17803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.024419][T18158] netlink: 'syz.3.3721': attribute type 29 has an invalid length. [ 742.032498][T17803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 742.084228][T17803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.110926][T17803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 742.130183][T18158] netlink: 'syz.3.3721': attribute type 29 has an invalid length. [ 742.138275][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 742.157369][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 742.201392][T17803] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.221599][T17803] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.273239][T17803] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.318832][T17803] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.354835][T18159] netlink: 'syz.3.3721': attribute type 29 has an invalid length. [ 742.390714][T14199] Bluetooth: hci4: command 0x206e tx timeout [ 742.535321][ T4299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.546786][ T4299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.579003][ T7086] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 742.659170][ T4299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.700576][ T4299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.739592][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 743.427616][T18186] netlink: 'syz.3.3728': attribute type 9 has an invalid length. [ 743.436061][T18190] netlink: 'syz.0.3727': attribute type 10 has an invalid length. [ 743.436089][T18190] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3727'. [ 743.436344][T18190] device ipvlan1 entered promiscuous mode [ 743.471967][T18190] bridge0: port 2(ipvlan1) entered blocking state [ 743.499218][T18186] netlink: 149020 bytes leftover after parsing attributes in process `syz.3.3728'. [ 743.514623][T18190] bridge0: port 2(ipvlan1) entered disabled state [ 743.562262][T18190] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 744.470388][T14199] Bluetooth: hci4: command 0x206e tx timeout [ 744.848732][T18225] netlink: 'syz.0.3737': attribute type 1 has an invalid length. [ 744.879020][T18225] netlink: 'syz.0.3737': attribute type 1 has an invalid length. [ 744.920367][T18225] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.3737'. [ 744.964091][T18229] netlink: 'syz.0.3737': attribute type 6 has an invalid length. [ 744.994226][T18229] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3737'. [ 745.352546][T18232] delete_channel: no stack [ 745.565708][T18243] netlink: 'syz.1.3741': attribute type 9 has an invalid length. [ 745.592835][T18243] netlink: 149020 bytes leftover after parsing attributes in process `syz.1.3741'. [ 745.852247][T18258] netlink: 'syz.4.3743': attribute type 10 has an invalid length. [ 745.950270][T18258] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3743'. [ 746.036028][T18258] bridge0: port 2(ipvlan1) entered blocking state [ 746.076829][T18258] bridge0: port 2(ipvlan1) entered disabled state [ 746.105975][T18258] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 746.487853][T18272] netlink: 'syz.2.3748': attribute type 3 has an invalid length. [ 746.530319][T18272] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3748'. [ 746.550168][T14199] Bluetooth: hci4: command 0x206e tx timeout [ 747.192167][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.198570][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.630445][T14199] Bluetooth: hci4: command 0x206e tx timeout [ 748.644094][T18337] netlink: 'syz.2.3760': attribute type 9 has an invalid length. [ 748.692021][T18337] netlink: 149020 bytes leftover after parsing attributes in process `syz.2.3760'. [ 748.739004][T18349] netlink: 'syz.1.3759': attribute type 10 has an invalid length. [ 748.795642][T18349] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3759'. [ 748.807557][T18349] bridge0: port 4(ipvlan1) entered blocking state [ 748.921016][T18349] bridge0: port 4(ipvlan1) entered disabled state [ 748.946454][T18349] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 749.569502][T18365] -1: renamed from syzkaller0 [ 750.597847][T18381] netlink: 'syz.4.3772': attribute type 10 has an invalid length. [ 750.607245][T18381] device macvlan0 entered promiscuous mode [ 750.710418][T14199] Bluetooth: hci4: command 0x206e tx timeout [ 751.071187][T18402] netlink: 'syz.2.3777': attribute type 10 has an invalid length. [ 751.079116][T18402] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3777'. [ 751.093183][T18402] device ipvlan1 entered promiscuous mode [ 751.102925][T18402] bridge0: port 3(ipvlan1) entered blocking state [ 751.109675][T18402] bridge0: port 3(ipvlan1) entered disabled state [ 751.145184][T18402] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 751.228131][T18405] netlink: 'syz.1.3779': attribute type 9 has an invalid length. [ 751.261593][T18405] netlink: 149020 bytes leftover after parsing attributes in process `syz.1.3779'. [ 751.757468][T18424] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.3786'. [ 752.317684][T18449] netlink: 'syz.3.3792': attribute type 10 has an invalid length. [ 752.360418][T18449] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3792'. [ 752.431273][T18449] bridge0: port 3(ipvlan1) entered blocking state [ 752.483797][T18449] bridge0: port 3(ipvlan1) entered disabled state [ 752.522934][T18449] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 752.637481][T18454] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3794'. [ 752.663003][T18454] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.787518][T18454] device bridge_slave_0 left promiscuous mode [ 752.790940][T14199] Bluetooth: hci4: command 0x206e tx timeout [ 752.864405][T18454] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.233325][T18469] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3800'. [ 753.272188][T18469] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3800'. [ 753.303117][T18469] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 753.333300][T18475] netlink: 'syz.3.3800': attribute type 1 has an invalid length. [ 753.392547][T18475] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.3800'. [ 753.523656][T18469] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 753.543556][T18469] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 753.728430][T18488] __nla_validate_parse: 1 callbacks suppressed [ 753.728449][T18488] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3804'. [ 753.870377][T18488] bridge_slave_1: default FDB implementation only supports local addresses [ 754.187115][T18502] netlink: 'syz.2.3807': attribute type 10 has an invalid length. [ 754.229057][T18502] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3807'. [ 754.250749][T18502] bridge0: port 3(ipvlan1) entered blocking state [ 754.267957][T18502] bridge0: port 3(ipvlan1) entered disabled state [ 754.287051][T18502] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 754.634262][T18511] netlink: 'syz.3.3810': attribute type 3 has an invalid length. [ 754.650478][T18511] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3810'. [ 754.692640][T18506] netlink: 'syz.0.3809': attribute type 21 has an invalid length. [ 754.702812][T18506] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3809'. [ 754.713903][T18506] netlink: 'syz.0.3809': attribute type 4 has an invalid length. [ 754.727643][T18506] netlink: 'syz.0.3809': attribute type 3 has an invalid length. [ 754.736635][T18506] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3809'. [ 754.890290][T14199] Bluetooth: hci4: command 0x206e tx timeout [ 755.326579][T18528] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3817'. [ 755.462981][T18528] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3817'. [ 755.532567][T18530] netlink: 'syz.4.3817': attribute type 1 has an invalid length. [ 755.560332][T18528] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 755.677608][T18528] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3817'. [ 755.700405][T18530] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.3817'. [ 755.760527][T18528] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 755.853066][T18528] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 756.497406][T18552] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 756.530446][T18552] syzkaller1: linktype set to 0 [ 756.603526][T18562] netlink: 'syz.0.3823': attribute type 10 has an invalid length. [ 756.642941][T18562] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3823'. [ 756.652633][T18564] netlink: 'syz.1.3825': attribute type 2 has an invalid length. [ 756.681417][T18562] bridge0: port 2(ipvlan1) entered blocking state [ 756.688124][T18562] bridge0: port 2(ipvlan1) entered disabled state [ 756.723849][T18562] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 756.744352][T18569] netlink: 'syz.4.3826': attribute type 2 has an invalid length. [ 756.950232][T14199] Bluetooth: hci4: command 0x206e tx timeout [ 758.288392][T18594] delete_channel: no stack [ 758.397085][T18622] netlink: 'syz.3.3839': attribute type 10 has an invalid length. [ 758.416681][T18622] bridge0: port 3(ipvlan1) entered blocking state [ 758.493835][T18622] bridge0: port 3(ipvlan1) entered disabled state [ 758.560742][T18622] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 758.818726][T18631] __nla_validate_parse: 5 callbacks suppressed [ 758.818746][T18631] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3843'. [ 758.881243][T18631] openvswitch: netlink: Message has 6 unknown bytes. [ 759.030391][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 759.430288][ T4286] Bluetooth: hci1: command 0x0406 tx timeout [ 759.937527][T18638] netlink: 'syz.0.3849': attribute type 9 has an invalid length. [ 759.965942][T18638] netlink: 149020 bytes leftover after parsing attributes in process `syz.0.3849'. [ 760.047197][T18642] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.3847'. [ 760.154399][T18647] netlink: 'syz.2.3851': attribute type 4 has an invalid length. [ 760.760025][T18664] ÿÿÿÿÿÿ: renamed from vlan1 [ 761.087217][T18678] netlink: 'syz.3.3856': attribute type 10 has an invalid length. [ 761.110374][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 761.141736][T18678] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3856'. [ 761.186388][T18678] bridge0: port 3(ipvlan1) entered blocking state [ 761.241549][T18678] bridge0: port 3(ipvlan1) entered disabled state [ 761.292420][T18678] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 761.586209][T18691] netlink: 'syz.2.3861': attribute type 2 has an invalid length. [ 761.627902][T18691] netlink: 'syz.2.3861': attribute type 8 has an invalid length. [ 761.652318][T18691] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3861'. [ 762.051513][T18705] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.3866'. [ 762.380821][T18714] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3870'. [ 762.424945][T18714] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 762.733999][T18731] netlink: 'syz.2.3872': attribute type 10 has an invalid length. [ 762.784548][T18731] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3872'. [ 762.842684][T18731] bridge0: port 3(ipvlan1) entered blocking state [ 762.890528][T18731] bridge0: port 3(ipvlan1) entered disabled state [ 762.899139][T18731] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 762.920578][T18729] netlink: 'syz.4.3874': attribute type 21 has an invalid length. [ 762.936753][T18729] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3874'. [ 762.977844][T18729] netlink: 'syz.4.3874': attribute type 4 has an invalid length. [ 763.025902][T18729] netlink: 'syz.4.3874': attribute type 3 has an invalid length. [ 763.090629][T18729] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3874'. [ 763.190369][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 763.409716][T18742] netlink: 'syz.2.3876': attribute type 9 has an invalid length. [ 763.433156][T18746] bridge0: port 2(ipvlan1) entered blocking state [ 763.463640][T18746] bridge0: port 2(ipvlan1) entered disabled state [ 763.482701][T18746] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 764.372970][T18779] __nla_validate_parse: 2 callbacks suppressed [ 764.373001][T18779] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.3888'. [ 764.511882][T18781] netlink: 149020 bytes leftover after parsing attributes in process `syz.1.3887'. [ 764.735835][T18792] netlink: 13226 bytes leftover after parsing attributes in process `syz.3.3892'. [ 764.792761][T18795] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3889'. [ 764.823339][T18795] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3889'. [ 765.064764][T18805] validate_nla: 18 callbacks suppressed [ 765.064782][T18805] netlink: 'syz.1.3893': attribute type 10 has an invalid length. [ 765.113165][T18805] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3893'. [ 765.172138][T18805] bridge0: port 1(ipvlan1) entered blocking state [ 765.205796][T18805] bridge0: port 1(ipvlan1) entered disabled state [ 765.243750][T18805] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 765.270488][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 766.018629][T18830] netlink: 'syz.0.3902': attribute type 10 has an invalid length. [ 766.048018][T18836] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3905'. [ 766.081300][T18830] team0: Device nlmon0 is of different type [ 766.111309][T18840] netlink: 'syz.4.3903': attribute type 9 has an invalid length. [ 766.119359][T18840] netlink: 149020 bytes leftover after parsing attributes in process `syz.4.3903'. [ 766.131454][T18835] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3905'. [ 766.201105][T18836] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3905'. [ 766.553277][T18860] netlink: 'syz.3.3908': attribute type 10 has an invalid length. [ 766.630508][T18860] bridge0: port 3(ipvlan1) entered blocking state [ 766.648841][T18860] bridge0: port 3(ipvlan1) entered disabled state [ 766.657642][T18860] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 766.903750][T18870] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 767.013179][T18870] netlink: 'syz.3.3914': attribute type 1 has an invalid length. [ 767.053458][T18870] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 767.076815][T18878] netlink: 'syz.0.3916': attribute type 3 has an invalid length. [ 767.118032][T18870] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 767.274491][T18880] netlink: 'syz.1.3917': attribute type 9 has an invalid length. [ 767.360653][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 769.430507][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 769.736063][T18905] netlink: 'syz.4.3924': attribute type 10 has an invalid length. [ 769.770354][T18905] __nla_validate_parse: 8 callbacks suppressed [ 769.770370][T18905] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3924'. [ 769.823351][T18905] bridge0: port 2(ipvlan1) entered blocking state [ 769.850616][T18905] bridge0: port 2(ipvlan1) entered disabled state [ 769.868253][T18905] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 770.038081][T18920] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3929'. [ 770.063336][T18920] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3929'. [ 770.073219][T18920] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 770.239156][T18923] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3929'. [ 770.304640][T18920] netlink: 'syz.2.3929': attribute type 1 has an invalid length. [ 770.366262][T18923] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 770.440599][T18920] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.3929'. [ 770.481743][T18923] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 770.684554][T18932] netlink: 15007 bytes leftover after parsing attributes in process `syz.1.3932'. [ 770.778153][T18933] netlink: 'syz.1.3932': attribute type 10 has an invalid length. [ 770.852757][T18933] team0: Port device wlan1 added [ 770.950651][T18935] netlink: 'syz.3.3933': attribute type 9 has an invalid length. [ 770.985677][T18935] netlink: 149020 bytes leftover after parsing attributes in process `syz.3.3933'. [ 771.015088][T18937] netlink: 'syz.2.3934': attribute type 21 has an invalid length. [ 771.028632][T18937] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3934'. [ 771.046231][T18937] netlink: 'syz.2.3934': attribute type 4 has an invalid length. [ 771.058553][T18937] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3934'. [ 771.457690][T18951] netlink: 'syz.1.3936': attribute type 3 has an invalid length. [ 771.512025][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 771.518527][T18951] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3936'. [ 771.607534][T18959] netlink: 'syz.2.3939': attribute type 27 has an invalid length. [ 771.989329][T18970] netlink: 'syz.0.3940': attribute type 10 has an invalid length. [ 772.018428][T18970] bridge0: port 2(ipvlan1) entered blocking state [ 772.033692][T18970] bridge0: port 2(ipvlan1) entered disabled state [ 772.053095][T18970] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 772.120701][T18973] netlink: 'syz.2.3942': attribute type 21 has an invalid length. [ 772.599259][T18990] netlink: 'syz.2.3945': attribute type 1 has an invalid length. [ 773.590253][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 773.694529][T18985] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 773.712125][T18990] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 773.751268][T18990] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 773.807919][T18993] device wlan1 left promiscuous mode [ 773.841861][T18993] team0: Port device wlan1 added [ 774.471838][T19015] bridge0: port 1(ipvlan1) entered blocking state [ 774.478539][T19015] bridge0: port 1(ipvlan1) entered disabled state [ 774.507980][T19015] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 775.186620][T19019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 775.237416][T19019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 775.273741][T19019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 775.300570][T19019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 775.606586][T19028] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.614488][T19028] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.672168][ T4286] Bluetooth: hci4: command 0x206e tx timeout [ 775.690028][T19031] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.702589][T19031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 775.715082][T19031] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.724216][T19031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 775.808060][T19031] device bridge0 entered promiscuous mode [ 775.901404][T19034] __nla_validate_parse: 10 callbacks suppressed [ 775.901426][T19034] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3958'. [ 776.641341][T19050] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3962'. [ 776.680871][T19050] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3962'. [ 776.708839][T19050] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 776.798206][T19056] validate_nla: 3 callbacks suppressed [ 776.798227][T19056] netlink: 'syz.1.3966': attribute type 10 has an invalid length. [ 776.855205][T19050] netlink: 'syz.4.3962': attribute type 1 has an invalid length. [ 776.871129][T19050] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.3962'. [ 777.006743][T19056] team0 (unregistering): Port device team_slave_0 removed [ 777.056012][T19056] team0 (unregistering): Port device team_slave_1 removed [ 777.115118][T19056] team0 (unregistering): Port device geneve1 removed [ 777.141863][T19056] bridge0: port 3(dummy0) entered disabled state [ 777.148550][T19056] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.179905][T19056] team0 (unregistering): Port device bridge0 removed [ 777.219408][T19056] team0 (unregistering): Port device wlan1 removed [ 777.228006][T19067] netlink: 'syz.3.3969': attribute type 9 has an invalid length. [ 777.236783][T19067] netlink: 149020 bytes leftover after parsing attributes in process `syz.3.3969'. [ 777.264306][T19062] netlink: 'syz.2.3965': attribute type 10 has an invalid length. [ 777.272372][T19062] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3965'. [ 777.286298][T19062] bridge0: port 3(ipvlan1) entered blocking state [ 777.293161][T19062] bridge0: port 3(ipvlan1) entered disabled state [ 777.301817][T19062] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 777.317878][T19057] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3962'. [ 777.330720][T19057] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 777.352727][T19057] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 777.386390][T19064] netlink: 'syz.0.3968': attribute type 10 has an invalid length. [ 777.421450][T19064] device macvlan0 entered promiscuous mode [ 777.602256][T19064] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 777.659165][T19072] netlink: 'syz.1.3971': attribute type 12 has an invalid length. [ 777.720851][T19072] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3971'. [ 779.423411][T19108] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3982'. [ 779.551960][T19108] netlink: 'syz.1.3982': attribute type 1 has an invalid length. [ 779.570481][T19108] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.3982'. [ 779.639574][T19110] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 779.667597][T19110] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 779.710387][T19115] netlink: 'syz.2.3980': attribute type 10 has an invalid length. [ 779.790572][T19115] bridge0: port 3(ipvlan1) entered blocking state [ 779.791093][T19117] netlink: 'syz.0.3983': attribute type 3 has an invalid length. [ 779.802481][T19115] bridge0: port 3(ipvlan1) entered disabled state [ 779.896279][T19117] netlink: 'syz.0.3983': attribute type 1 has an invalid length. [ 779.925355][T19115] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 780.135627][T19122] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 780.189146][T19122] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 780.812501][T14199] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 783.254809][T19159] : port 1(ip6gretap0) entered blocking state [ 783.268425][T19159] : port 1(ip6gretap0) entered disabled state [ 783.308191][T19159] device ip6gretap0 entered promiscuous mode [ 783.569995][T19156] device ip6gretap0 left promiscuous mode [ 783.606681][T19156] : port 1(ip6gretap0) entered disabled state [ 783.700025][T19169] validate_nla: 3 callbacks suppressed [ 783.700045][T19169] netlink: 'syz.3.3997': attribute type 10 has an invalid length. [ 783.720432][T19169] __nla_validate_parse: 7 callbacks suppressed [ 783.720451][T19169] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3997'. [ 783.789251][T19169] bridge0: port 3(ipvlan1) entered blocking state [ 783.805970][T19173] netlink: 'syz.1.3998': attribute type 1 has an invalid length. [ 783.828183][T19169] bridge0: port 3(ipvlan1) entered disabled state [ 783.830351][T19173] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.3998'. [ 783.868856][T19169] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 783.930498][T19171] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3998'. [ 784.053732][T19173] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3998'. [ 784.115309][T19173] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 784.169151][T19173] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 784.177422][T19176] netlink: 'syz.4.3999': attribute type 15 has an invalid length. [ 784.193664][T19176] netlink: 'syz.4.3999': attribute type 16 has an invalid length. [ 784.204166][T19176] netlink: 'syz.4.3999': attribute type 4 has an invalid length. [ 784.233032][T19176] netlink: 'syz.4.3999': attribute type 6 has an invalid length. [ 784.273124][T19176] netlink: 'syz.4.3999': attribute type 15 has an invalid length. [ 784.314558][T19176] netlink: 'syz.4.3999': attribute type 16 has an invalid length. [ 784.338840][T19176] netlink: 'syz.4.3999': attribute type 20 has an invalid length. [ 784.428228][T19176] netlink: 'syz.4.3999': attribute type 21 has an invalid length. [ 784.453141][T19176] netlink: 13226 bytes leftover after parsing attributes in process `syz.4.3999'. [ 785.066060][T19197] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4006'. [ 785.098636][T19197] openvswitch: netlink: Message has 6 unknown bytes. [ 786.218037][T19215] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4011'. [ 786.609546][T19215] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4011'. [ 786.685932][T19216] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.4011'. [ 786.783124][T19215] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 801.332396][ T4277] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 801.342900][ T4277] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 801.351250][ T4277] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 801.360286][ T4277] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 801.369011][ T4277] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 801.376599][ T4277] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 801.425077][ T4277] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 801.435220][ T4277] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 801.443872][ T4277] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 801.453254][ T4277] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 801.463419][ T4277] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 801.471446][ T4277] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 802.833697][ T4277] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 802.846286][ T4277] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 802.856142][ T4277] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 802.867414][ T4277] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 802.876501][ T4277] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 802.887208][ T4277] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 802.974842][T19233] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 802.993588][T19233] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 803.003416][T19233] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 803.014437][T19233] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 803.023619][T19233] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 803.033795][T19233] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 803.086047][ T4286] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 803.099377][ T4286] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 803.109755][ T4286] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 803.121326][ T4286] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 803.129462][ T4286] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 803.139248][ T4286] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 803.431324][T19233] Bluetooth: hci5: command 0x0409 tx timeout [ 803.510872][T19233] Bluetooth: hci6: command 0x0409 tx timeout [ 804.950362][T19233] Bluetooth: hci7: command 0x0409 tx timeout [ 805.120347][T19233] Bluetooth: hci8: command 0x0409 tx timeout [ 805.190263][T19233] Bluetooth: hci9: command 0x0409 tx timeout [ 805.510247][T19233] Bluetooth: hci5: command 0x041b tx timeout [ 805.590379][T19233] Bluetooth: hci6: command 0x041b tx timeout [ 807.030301][T19233] Bluetooth: hci7: command 0x041b tx timeout [ 807.191155][T19233] Bluetooth: hci8: command 0x041b tx timeout [ 807.270309][T19233] Bluetooth: hci9: command 0x041b tx timeout [ 807.590251][T19233] Bluetooth: hci5: command 0x040f tx timeout [ 807.670220][T19233] Bluetooth: hci6: command 0x040f tx timeout [ 808.561148][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.567561][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.110249][T19233] Bluetooth: hci7: command 0x040f tx timeout [ 809.270263][T19233] Bluetooth: hci8: command 0x040f tx timeout [ 809.350342][T19233] Bluetooth: hci9: command 0x040f tx timeout [ 809.670254][T19233] Bluetooth: hci5: command 0x0419 tx timeout [ 809.750419][T19233] Bluetooth: hci6: command 0x0419 tx timeout [ 811.190883][T19233] Bluetooth: hci7: command 0x0419 tx timeout [ 811.350295][T19233] Bluetooth: hci8: command 0x0419 tx timeout [ 811.430188][T19233] Bluetooth: hci9: command 0x0419 tx timeout [ 812.390484][T14251] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2662 jiffies s: 80341 root: 0x1/. [ 812.408876][T14251] rcu: blocking rcu_node structures (internal RCU debug): [ 812.416510][T14251] Sending NMI from CPU 1 to CPUs 0: [ 812.422432][ C0] NMI backtrace for cpu 0 [ 812.422443][ C0] CPU: 0 PID: 19204 Comm: syz.2.4010 Not tainted syzkaller #0 [ 812.422459][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 812.422468][ C0] RIP: 0010:__virt_addr_valid+0x3bc/0x540 [ 812.422527][ C0] Code: db 0f 84 35 01 00 00 e8 42 3d 48 00 31 f6 e9 b9 00 00 00 e8 36 3d 48 00 31 ed e8 2f 2d f6 08 89 c3 31 ff 89 c6 e8 84 40 48 00 <85> db 74 10 e8 5b 37 32 00 84 c0 74 0e e8 12 3d 48 00 eb 56 e8 0b [ 812.422546][ C0] RSP: 0018:ffffc9000bdcf2e0 EFLAGS: 00000093 [ 812.422560][ C0] RAX: ffffffff8139f0fc RBX: 0000000000000001 RCX: 0000000000000000 [ 812.422571][ C0] RDX: ffff888073411e00 RSI: 0000000000000001 RDI: 0000000000000000 [ 812.422581][ C0] RBP: 0000000000000001 R08: dffffc0000000000 R09: 1ffffffff2162048 [ 812.422592][ C0] R10: dffffc0000000000 R11: fffffbfff2162049 R12: dffffc0000000000 [ 812.422604][ C0] R13: 0000000000000008 R14: ffffffff8139eec8 R15: ffff88813fff92e0 [ 812.422615][ C0] FS: 000055557f1c8500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 812.422629][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 812.422640][ C0] CR2: 0000001b33616ff8 CR3: 000000005ebbd000 CR4: 00000000003506f0 [ 812.422655][ C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 812.422664][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 812.422674][ C0] Call Trace: [ 812.422679][ C0] [ 812.422687][ C0] kasan_addr_to_slab+0x9/0xc0 [ 812.422717][ C0] __kasan_record_aux_stack+0xf/0xc0 [ 812.422733][ C0] irq_work_queue_on+0x10f/0x260 [ 812.422832][ C0] rcu_read_unlock_special+0x3c9/0x510 [ 812.422893][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 812.422909][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 812.422939][ C0] __rcu_read_unlock+0x78/0xd0 [ 812.422954][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 812.423000][ C0] trace_call_bpf+0x5bb/0x6b0 [ 812.423022][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 812.423049][ C0] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 812.423072][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 812.423095][ C0] ? trace_call_bpf+0x5d6/0x6b0 [ 812.423122][ C0] perf_trace_run_bpf_submit+0x79/0x1c0 [ 812.423151][ C0] perf_trace_preemptirq_template+0x268/0x320 [ 812.423176][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 812.423199][ C0] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 812.423223][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 812.423249][ C0] ? lock_chain_count+0x20/0x20 [ 812.423273][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 812.423295][ C0] trace_irq_enable_rcuidle+0xd3/0x140 [ 812.423320][ C0] trace_hardirqs_on+0x24/0x40 [ 812.423341][ C0] asm_sysvec_irq_work+0x16/0x20 [ 812.423362][ C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 812.423380][ C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 a2 7c 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 812.423393][ C0] RSP: 0018:ffffc9000bdcf7e0 EFLAGS: 00000206 [ 812.423407][ C0] RAX: 7e796f090028d600 RBX: 1ffff920017b9f04 RCX: 7e796f090028d600 [ 812.423419][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf5de0 [ 812.423431][ C0] RBP: ffffc9000bdcf8d0 R08: ffffffff90b10247 R09: 1ffffffff2162048 [ 812.423443][ C0] R10: dffffc0000000000 R11: fffffbfff2162049 R12: 0000000000000246 [ 812.423455][ C0] R13: dffffc0000000000 R14: ffff8880b8e3bb00 R15: 0000000000000001 [ 812.423477][ C0] ? __mod_lruvec_page_state+0xa1/0x410 [ 812.423522][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 812.423545][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 812.423568][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 812.423587][ C0] ? asm_sysvec_call_function_single+0x16/0x20 [ 812.423612][ C0] __rcu_read_unlock+0x78/0xd0 [ 812.423629][ C0] __folio_memcg_unlock+0xea/0x110 [ 812.423651][ C0] page_add_file_rmap+0x8df/0x1550 [ 812.423696][ C0] insert_page_into_pte_locked+0x1c5/0x490 [ 812.423741][ C0] vm_insert_page+0x3b6/0x560 [ 812.423790][ C0] kcov_mmap+0x7d/0xd0 [ 812.423810][ C0] mmap_file+0x5d/0xb0 [ 812.423826][ C0] mmap_region+0xe79/0x1c50 [ 812.423855][ C0] ? file_mmap_ok+0x170/0x170 [ 812.423880][ C0] ? vma_expand+0x850/0x850 [ 812.423899][ C0] ? cap_mmap_addr+0x153/0x2c0 [ 812.423930][ C0] ? file_mmap_ok+0x11c/0x170 [ 812.423951][ C0] do_mmap+0x9ce/0x10d0 [ 812.423977][ C0] ? mlock_future_check+0x100/0x100 [ 812.423997][ C0] ? ima_file_mmap+0xf7/0x140 [ 812.424049][ C0] ? ima_file_free+0x3e0/0x3e0 [ 812.424071][ C0] ? common_file_perm+0x171/0x1c0 [ 812.424099][ C0] vm_mmap_pgoff+0x1c1/0x2d0 [ 812.424150][ C0] ? account_locked_vm+0xe0/0xe0 [ 812.424182][ C0] ksys_mmap_pgoff+0x4bf/0x720 [ 812.424204][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 812.424222][ C0] do_syscall_64+0x4c/0xa0 [ 812.424245][ C0] ? clear_bhb_loop+0x60/0xb0 [ 812.424278][ C0] ? clear_bhb_loop+0x60/0xb0 [ 812.424300][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 812.424320][ C0] RIP: 0033:0x7f11bb79de42 [ 812.424334][ C0] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 812.424347][ C0] RSP: 002b:00007ffda8e893b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 812.424361][ C0] RAX: ffffffffffffffda RBX: 00007f11b95f6000 RCX: 00007f11bb79de42 [ 812.424373][ C0] RDX: 0000000000000003 RSI: 0000000000400000 RDI: 00007f11b95f6000 [ 812.424383][ C0] RBP: 0000000000000011 R08: 00000000000000db R09: 0000000000000000 [ 812.424392][ C0] R10: 0000000000000011 R11: 0000000000000206 R12: 0000000000000003 [ 812.424402][ C0] R13: 0000000000000003 R14: 0000000000000000 R15: 00007f11bba25fa0 [ 812.424420][ C0]