last executing test programs: 16.83592119s ago: executing program 3 (id=2454): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003"], 0x0, 0x53}, 0x28) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x4, 0x7, 0x0, 0x0, 0x0, 0x4, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x1828a6, 0xca, 0x2, 0x0, 0x3, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000300"}) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3e0002"], 0x9a) 16.340120073s ago: executing program 3 (id=2456): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) (async, rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x402, 0x3, 0x0, 0x0, 0x400, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x8, 0x0, &(0x7f0000000180)="0005000000000001", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x3, 0x0, 0x0, 0x0, 0x5, 0x4c250, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x5}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x7ffffff, 0xf, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 32) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x5, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x43}}, {{0x6, 0x0, 0xc, 0x9, 0x0, 0x1, 0xe7030000}, {0x6, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20488, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0x4}, 0x114905, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) (async, rerun: 64) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 64) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000001c0)={'veth1_to_bridge\x00', @random="94764de4bf60"}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfd, 0x7, 0x0, 0x0, 0x0, 0xd72, 0x82552, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0, 0x1}, 0xa0460, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYRES8=r4, @ANYBLOB="3eca", @ANYRES8=r6], 0x9a) 15.888912233s ago: executing program 3 (id=2458): r0 = socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x5, 0x83501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x940, 0x4, 0x0, 0x0, 0x6d1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=0x1, @ANYRESOCT=r1, @ANYRES64=r2, @ANYRESOCT=r0], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r4}) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r5}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8936, &(0x7f0000000000)={r4}) 14.96343196s ago: executing program 3 (id=2462): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x90) (async, rerun: 64) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) (rerun: 64) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x154b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0x7a6, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="190000000400000008d261bce53ecceb9f300000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x2}) (async, rerun: 64) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0x7}, 0x0, 0x0, 0x3f, 0x7, 0x80000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f917a3c92b", 0x14}], 0x1}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r3) (async) sendmsg$tipc(r3, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)="174a8a1c08079feec019b8c7abf2e5046bd083", 0x13, 0x24000840}, 0x20040089) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) (async) recvmsg$unix(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000018c0)=""/241, 0xf1}, {&(0x7f0000001a00)=""/191, 0xbf}, {&(0x7f0000001ac0)=""/233, 0xe9}, {&(0x7f0000001bc0)=""/26, 0x1a}, {&(0x7f0000001c00)=""/46, 0x2e}, {&(0x7f0000001c40)=""/93, 0x5d}, {&(0x7f0000001cc0)=""/155, 0x9b}, {&(0x7f0000001d80)=""/4, 0x4}], 0x8, &(0x7f0000001e80)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}, 0x2100) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) (async) recvmsg$kcm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r5 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x1}], 0x10, 0x3}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) (async) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x76, &(0x7f0000000000)=r8, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000002"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) 14.379922806s ago: executing program 3 (id=2467): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70100000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c068c0a7d2eaebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x34}}, @ip_tos_u8={{0x14, 0x29, 0x3e}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0xff00) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xa1, &(0x7f0000001540)=[{&(0x7f00000011c0)="f11339fcf7c842e81a1a7a0d2d79ebc1dfbe72e8dba3a8ce0c81c15195c7c8f50636bf269a6a51929de467070272dd5508a006e5528a1edc7e77fd845499c686c2346ab29440437164f2f8c84db7e74600351392605e61724d534f37ad4cae1f2a1113eb00cea8c2cbb4da81d0db5f1aa667719fd49b255b89637228d74a92a45a8c1aaeea1f0e6a7498a3530c223fd11983b38a3faf5dc58670261fd32928caca68bbb133556fd91a010eb25296b1af6612511c027d9ee6e7e498aa17a8ca6a3018b7d51ed134261904a97cb525804277fd738858dc2d9f55e437f5e3fabad3c00edf91a7454eafb6c698"}, {&(0x7f00000012c0)="87fa82ab13141bceadef44ac0aa5975624be5b22996c374753b7db58d8bc5f393788b0eced06fcb57b5016e07a909ce17a58c8b6ebd8602b8719bff747d30bd2673cd99811a1e3603ab1406d15ed22641d71a014597777b3b0c5cc208e6f7eccc929c2b45c3dfb5848d38b8fa546280f0a6a28041bf0a4e8473dbd3b99c3640da3e074f99812e8b1fb7a7986cdae6e75fe479521eb0f12bcb78470bcead952c1841c9759bf8409d2bd4e8aa74adec571f0554f18717c1323a1cbff172cfe5bbbc72b943d3d1b"}, {&(0x7f00000013c0)="ea7c236917a12b5451858c7e0f84264103726d5ca0a390886fcd2055b40a7d775424fa0267629e094e9822aeac8ba3c322a7097ce1ae57beedbb6c0d797c556b2d51"}, {&(0x7f0000001140)="6852b125023357b758f422ae1772e04c712d30efb0b50194d295ecf27368f0332650be3c0911829cfb093a7f551679c22e"}, {&(0x7f0000001440)="85dc7b2fdaf55b28574859a39a50aaf0ab06611a0a5382a24c288d36ee44c8fe55cbd0244a277262e1815e787ca7b8ba3dfcb153063d4162ee059cd2c013d1e9299aecf7934db654bf7f8d2e8b2d03aa16331f327d3a44985ee18dcf204ccb07e79b063d9a309836fc6d"}, {&(0x7f00000014c0)="19484751020c54c44d43224182709895acb8f18a62abd1da7495ef1e4f4eda4b0adaf13da8293de9eba30e9f57a53af20145fbb9f72c52aba982cb67e59634ea3535e2fbe7ce40d319e8ebedc74d0f8aa17022d24caded5ce9684993cd29500bd6228856761e40cfeb2f862e5f5620c71a0217"}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0xd1c0fcca461f2e5b) 14.053207879s ago: executing program 3 (id=2469): r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000006, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x10f, 0x82, 0x0, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000740)='\x00q', 0x2}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000500)={0x2, 0x80, 0x7, 0xd, 0x86, 0x1, 0x0, 0x9, 0x200, 0x751782fe79671145, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext={0x2, 0x1}, 0x10, 0x9, 0x5, 0x9, 0x3, 0xfb26, 0x0, 0x0, 0x8000}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="c200"}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003fffe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x53, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0x36, 0x0, &(0x7f0000001080)="f6f6e9a1d78ad62ceef1894386dd78bb3fb7dbfcc7199cc190885422e4d22c8c4c8622ed05991376a096ee089adbde87b8a86001e649", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) close(r8) recvmsg$unix(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x15}, 0x0) 6.816787772s ago: executing program 0 (id=2510): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0xf, 0x3, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r1}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0x11, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100008000000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000200)="4db9222e27226d1ac5184422543e", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$kcm(0xf, 0x3, 0x2) (async) socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) 5.423681226s ago: executing program 0 (id=2512): openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000700)='cpu.pressure\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f91c24", 0x12}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1a3803, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2e00000011008188040f80ec59acbc0413a181003e00000001010000000200000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x541b, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x67289, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x2, 0x3fff7ffa}, 0x10a10, 0x34, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000}, 0x0, 0x6, 0x100000, 0x5, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 5.050673841s ago: executing program 1 (id=2514): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x64b2074d57f2d605, 0x400000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x80090000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) sendmsg$kcm(r2, &(0x7f0000000580)={&(0x7f0000000500)=@generic={0x5, "9cd7027e410d79ab2570a9868315f61cb2945e00dcda013610b6d9c19fe3788d1cb9069d382efb3f21dfd7aea495360043252796e7e52bc24a611142e31a8d6584a7bea3f089b01f1c7f4c849c4c345a1ff71eb56db57bea2bd89b7fb7489922434f0935dff5a066c6bfdc26caebfb02ead83f11732597306492d1cc5ef8"}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000200)}, {&(0x7f0000000940)="eefc5623f9c816e0a785572ee641cec1f557d8a4d369066bcb9ee822972840e5bafcbeb7c47901bbbfcefd0dad83070db414ec75746d0fd11b99233c1b7b0d6e459091e2220e7caffaa8950236929802e05acaf6014a8bf87581d17965e9fc7fa5ed6fab8dcd91360965f129e08adcd03850db1043ed9efe9bd754c193935e2b38017e8cd36a65509b44", 0x8a}, {&(0x7f0000000a00)="ba35fa0fa0884ed9cd797b7f86d8a562ed6f21317b91915d5a1445d809900d250df8606ffab1f1bb6f48a6199da52bed906ea1af757e401fb235f109cf23021c860d3725dc", 0x45}, {&(0x7f0000000380)="057b74a078bb0a26", 0x8}, {&(0x7f0000000b80)="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", 0xfb}, {&(0x7f0000001340)="3dc314aefb49275a4c4f1c5041272fcc9ec4e38ae38abacadda64cc9fbcbe7833089c74127d5529e6bb80924f7833c7f453c9be29a087ab73c46d4f55e6f5487f9a902023f5e1ea3491265512331cca6966823f6f3724bab61e2de3ffc05d9b9444d9d9eccd3d5588767fcd891e582f6ec600308188f07d2a49712320a68b9e0f2c88feb1015f78d91af3c562a1fbf41d2d73256eef2eaaa9d7b6b087977a6750219f75d500638e2c610781df12b50dc4b12fcfe0b99f431e1a0fb212741eae30a7eca9ac056c5aaf061f57d05e0c9c1a68b7f5b24912fc27c86eb8afddccf5646265bfd36ca5e8bdcbb7727b86034e2203efd7fac08652f90a461b44f7f357a047d3d24c3a6a75d301a44b4c1b1a4b267c612ee7b75c5a6e024f47f3db1486147305540e4f8cf93d46eb472d6f32b577de17a83b16f7c6b3b11e3f6b46525ecf4c37cba94cff984875f49f17b6ba67a6379aa0d08bad3bf1b041c8b3ecaa7faa13b20ea665b3faf15115043a3d877c090fcc353d4ebf309c55f2a24f5190c0924197f2156f730cef0515c5f4341582d03ff668643f483e428f8d76b38f77716f1a333753c07820029e456b24901a069384f2ff776c4851e0686560a3d3582fff7319bb78f4035f3b7a200025018375c4efbc6c9b1a6631eb8604a467c515ac84f29106bda028fc20bedd6224bb8e22a96dffd617a58c371f64c289a6ae0975a69abdc87a2c251e3ee96509531ecf922627c30173b72ee7351788d8b7aa2fd643bc1a01825c87079180638d4ceef0aff11b7998f68666f98e11b9b37d680c38e45baa0e5ea4528cc0b5ccd0500f669259d451cbe1157bbc44ff766c59b1e31e43e7828a6572f141f0f38555eb26e9645bf85c5037520261d5662da4b0e8b5ba74a573eea29268a5fc2ce8321a832985246bffc1a2ad1af6c15c546bacf98c851d70601a5e56197cdf68d4afa9c059e0d7f149926e788b3e3e2082452b723bae5b6d5eefbcb4c1c0d85025fe7f0c02c6e60fa39b3469713d98acad40a6a0af82924dde6d6dfa934f5cef5b674663c922c9f8280ff5ec5ac2d3e76f54f9af12ee5448e3c4d67b33b89816e691ac6bbbce26c65a9e82197f43283e9b778d71ccf03a02d16f06d011cded446f6926b4363a3efbb1cc4a9558aed00039036b19d4550256db5d059c7f24b53584253980a63e4cd43394dee5075b8706d111c8535706da3da6adf65b9b5ecdf93ab27763fd098aa5066a31c1cd6f54303b7930ffacfdd7514c5aafb44b4fa8b0ad4b13f3ae2d989c5dbf05aa592c570a5c53887ce1f8c15c37a91e9245536cb5eb6c22576122ccb82140a5fb821b3d1131988c543003f499fffff822738c9f4324bc72a2fe34be27928c2e7be55e16cb0275501fdc95088df1c90ab7766032ae629184bc338fc298b642acb638d5ceda560ef6cdd5384cfd3f7bd07e0c5d61194283f503b5b66357385b312ecd1410fd879a75048bbb413071d3928568aabd583ec08910e791dff66f7c797d11fd53e1f8d72e3c60bb2cc0027f6c7391896dad626dbef93c8dc3023ce30291c38e8977cf3ad332f65cc8fa9cadc103f33644ec10342087e57d3ead3f2a652532c06646c1f26ca73a40c594b698b6c8c96eefc7cd885821af9e1950fa32e106add95152742aa3203c927932aaac53682719e223dabc62ef1f3bdd231828ce8a5e8a42d312352e0575a51a4f3286b3974d730eb2771cbf65b89bfc50fa2741fa9448e2bcf7e5a5286d62da2206452e9711d17b0efd2cf87994f101084f946625ae37bc871a1f9b014140f032b304a8c623083ea37a0fcf50aebd29968f9df45bbc4a7de36e7e0630b20113c236f50ff2ef957436fc069677cb61baf4dbb64d03b2f1575aa8e57128a389dfbe63cd671cbc6edcaf494f4ae76f2ab354dff85bb7466560cd026c0cd1e790d6a6d7136e464a6ba570197b968f012d1323992ec740472b74e063ada5fd882f70000c460a76f32014d5bfe8a6a2d1693c7750f12e0f67a97f18cb28923c86b1f4e4adffdf603b531ee587bdbb595e8966acd779815ab3be20b335930fb9f5e97973c11e7459e91c838d9599a91b1ef05a10b964488106a1b34a3ba81c5c638ffd48bb99db9d4a3cf99ff81be95345f60f27d10bef77b378ebd75275a9ea72664d48a16e36ab890aeda7f34c76fc340df9117359002ad16029603bf6540f64a357198677c067d84b9da2afd120f4656028b65e6570f551066086ac4c16630cd3ffaccde66db363f5afc9fc2d91a4a8761286010073afe28b3932ae400d201fbc17e2c0a0665814b78eb351077fc2984ae80f0208323b5a5b692d0a8e70224a526d94f72ba42ffb0473a3a0fcbe9d8f6825df7c85c31c7447020dacde25176e0e393ef6cd74cf98c556d1768a21deba49b431d7b081a2fec4dade205ae0b1a62784035aa88d749108aa40f7662af5373486b8ae2633b71a4f63457ff230d35bd49500b9702d11efe66970c283c9bbfa7ce0e77b9ca089669b9f6dcaab4c25e5cf28b9d434641691959cc683c564b9264f8965616ff88535dbee0fed2141eca14e5d3ba836f04dadd022908ceb6c0cab50f44140d87254a0caf8959854f98e674f923efb7cfc82c6cc156db3a4c5ab541ddc4f41241c0beb107cb9d9873ee2f5a8a8d59aa9d6a6a8112eb3327d90bbed4942a780b4fc12a2929aed31673821c3ac1d1f04020b21c0de925523a0f64b83f557394b442f6711426f2c89221552276f1689ace3927f7b40e65b5cf7c59432216309374284bb24f992593d836c097f80f08b4535f6cc0e9434f459c6e9f1dec94b1d2211e8d4a005e90deead53a324b73492fea8ad26e73f15233e26a5124c985be601d78f94cb6eff34a964c0406dff618ee75b0cebdc7581171b86049abf5c7bf033559f27c4c258d269937f6aa29fc35a73e5c9d1a1b9597399863c60ecfb6f169ff0b7f6ff611a5e489947cf9c98a9bfeb2c75bc919a6af0a181a84f747677734aeaf4a00bb29377e36d8f3811a1668dad77df9516d8c87006508362f0feca2c2e9ad4a816d1815ab9968cf56f3462d92f511cd45e30454ace526bad91fc626b8474f75c3821653e913a14031f7392152fb8f7835cc11c5b5a2ac6cdc839f5279a2083750ab47394ab5a17e5405a0423a99daa9962b3bcf360bd45f454679ff2938771512777b14f72c9e924543c6e4248d641d3d913b999fa9d3ad31b4a96b118c1b5117de94cc1f1533e032075d742b386a7186a123075becb438a9a2221393f690dfba0b753a1620c37bac2335fd698b0da20306f1340389498b69f39486180b7ace421150ec975da599835720c1886cd12a7dd58e1ecd20255424c7d80254c9ba5dc582108259bfdb79e1ead205bb7aef19645a889273d4816a577ab06d7ed960d1560f4d8a591583d24a15e2a62631ee8827839620e36159328566385a3a191a5bd9f56c5edafb7e0d2fd342b6de87107ce184d9f18e366e57820fbb2d3493bc4e2a3d98ae5e2891dcc76710f8fc160d73b962967b6123c15f52e82f194e8a5b04d3c0da0ee5a98df19a0617694049ea9322fb9cce4f079056d19ab75b986683d6326384032bc1fff523221d44394bb413062644499b9c6f76024838f0e853831dc01fc6b7df92ad4c30b9aad767f26350c9fd5abad685c0e06740d5081e881857a26296cf1ed8c37bd7dc3cc471a2dee841336383ce02aec963081681df00661de06dc8d8b51a252c331ae0c677059778251e93823aba08866ea8aad63a146d6b6589e7ae2cabca2c9453af58acdb777aedeca78722bddb91a20006", 0xa90}, {0x0}, {&(0x7f0000000400)="f3cbe51c575d2fa108fd2c23169e91674737c1ad522f902013440431c96740fd9cdefbe459ec1127acd557ad9c21ac725bd8b6311cbadceb6fb216", 0x3b}], 0x8}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x390, 0x0, 0x0, 0x0, 0xff}}, &(0x7f0000000140)='GPL\x00', 0x3, 0x6, &(0x7f0000000180)=""/6, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x2, 0x1000005, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x4, 0x0, 0x2, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xf, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0x0, 0x0, 0xf60, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r5, 0x3) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socket$kcm(0xa, 0x6, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x5, 0x7, 0x3ff, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x94) 4.980740698s ago: executing program 0 (id=2515): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008ca94ff480152ad3200000085000000720000001801"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000180091c8b14a0778a8123d181d"], 0xfe33) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f00000000c0)=0x1) 4.47783973s ago: executing program 2 (id=2517): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0xffffffcf, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x7ffffd, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x541b, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)=r4}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000800)={&(0x7f0000000340)="a6c3a5b1186263de926ad5177b3994788f1f911be07b9ebdf8afbceb7ea3d920a83ab54c5934f528299c0185483ce01841416fdfd37c507ddfa9faac9903b8e8ebb52cb1b1e1c8f5a36a5c1cdf1280f54512a813fa75b62a9ff5e99c5138513714667d6c1905478afe58480c2c52e5be884c409707b6b324095b3bbd50527ccbffc8098b89445332c52570790c5d4ee93c7cf356d413f2a5bb44bfcfd3df7979e3ac93e2510a2aa00df1742faad512e2022524b149139c0eac28b43ac6935145e0e8a9ddadd36b51840e708e469f60d4c30efa9c40d504e1f2be8f580a6a81c153778fe61ec2bea2c32f384852", &(0x7f0000000580)=""/236, &(0x7f0000000680)="e33240dde7f06bd20c58b3185379f36f843150a0872fef6becb4716107584906c7028decaab864896f41c9c3f7bbf82f9ed0aae0c0afb5ce8f112d54f0cdf6fda7ef61a3fe6b01b547b17e9b5de2272e811844bf4b1dccf5fcc3b47a40fe0d71a575519ff6e42e76e6ef9da58db32bac3dd3604453bb8bcb9d7852101db6ce8cd1", &(0x7f0000000040)="b85399ceb087e9c18d33ef62c94af5820f1469d973954636f06aa93861949ab36bc0510c9a33de7a36e8908142b88674c80fee493f", 0x1, r7, 0x4}, 0x38) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000080)) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r9, &(0x7f0000000140), 0x2, 0x0) getpid() mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 1.850968116s ago: executing program 2 (id=2518): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) (async) r1 = socket$kcm(0x29, 0x2, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="5c00000010006bcd9e3fe3dc6e48aa31086b87003000000000000000160af365040014000d0002008bc3a0e640e51753cd60bc24eab556a705251e6182940800000000001282bb2352d1f006baa45e3bbd225a8941b1436e000a84c9", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r1, r0}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0, 0xdb, &(0x7f0000000200)=[{}, {}], 0x10, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x26, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) 1.81350357s ago: executing program 1 (id=2519): r0 = socket$kcm(0xa, 0x7, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xff00000000000000, 0xac14140c}, 0x300}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYRES16=r1], 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) socket$kcm(0xa, 0x7, 0x3a) (async) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xff00000000000000, 0xac14140c}, 0x300}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYRES16=r1], 0x10) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) (async) 1.745507848s ago: executing program 0 (id=2520): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f00000017c0)}], 0x2}, 0xe900) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) ioctl$SIOCSIFHWADDR(r0, 0xc0189436, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9ea4318123341cf9d90a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a22a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a19eed87b277be335c75e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436e101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521bc9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d2502000000d9051f22614d1f62734d678039a97d2b74f9e8e97f4e8e7025123e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f23128d743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069f6f24e1e1bc976d965ddabb01085f16bff63a06578d6d184f5de7bfb6aaa75f16996d8d60bd0111a8a237a1536256c02284cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798bbe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e2005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9cde5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde330289d6348d183ed9d3dae3cccf109f7c78e8479a345e805e47dfa82cafc6b64b1f4659834aecbeded44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1b7d5f80c580dc31b0963ff953ce09148e8dfea9d03a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e96c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20c290a1f6c09272dbc3b2c0ab2b5baa1b07b16e81f278e54a479f1a06bc06e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4d57b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce788c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f709294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b132876159972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0598700130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80014ff11d9dbceba41d8dfce410333a054e82b1d050331ce0aeacb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6bb956fac1ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a8263e9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dd18f6148354df7e60a489dc543ccdee1fff9d8f8d78844de27a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d64100cc000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2ceae70922989f66827fe9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168e32d7bd6800000000a21008b8d26dabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2935d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95badaf8ed85cd5b03a7352a0fb83398566d1bc133582ce2d9f601cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353c959fd965702f1cd5bcb3c16d4b8bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef07b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c3355fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538b011cb3928b430630b8ccc800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b314bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c921b090000000000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da22ee9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45b4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d5027e81ceec1a6d7441d0b538d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656d9a28f81f6a9465aec94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be184d4ebb942f99581a6fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bbb4ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855cb18b23517ca935a0fa1b630d70c4ca9acbaf0f08910f327fba506d834029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17ecd996d7dea947ee8ce55fa2dea5a000000000000000000000000006f0143d8d4038ef9f57d9e9336f3559558710d1febe7394cf8b02f59dab24d07db3d3c1ebff58f973ba3fc0c3e2fb2c2a674a188614520ecb1d22b49e3550263bf9d669fba198b65ee3512db0e710d2070b5847face7ada12c83f0aea3a8c9e84e6c7406732c952c5695d43bca33d481ef9d442697875e114f4c759af306b3fc8224fdec89bf199234bff488b81438cbe89e4cabdc007139352b5cb69d7987cdf37ab549b7639eeadafd5315d9c9f0e8c9223102e6deaca4ae9cb943a3ad188bcad95e8f97d7fee7c47ea50d222fe67085b4fb3fecfb67dec23b6ab5ee19a5ca5367bff058149acf90a6c4014dea2b763389f77301ea8574d112625300906f480c36f41f82f84991800c37863de349f7"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r1, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xc0, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110"}, 0x48) 1.696901739s ago: executing program 2 (id=2521): perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xffffffffffffffff, 0x2b4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x69, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffe7d9f527}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x74000000, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x82) 1.517193158s ago: executing program 1 (id=2522): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="038447041800000003ffffde0a40000000fa0201", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xc463f262, 0x10, &(0x7f0000000040)}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r5) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) write$cgroup_type(r5, &(0x7f0000000080), 0x11ffffce1) 1.420987711s ago: executing program 0 (id=2523): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x7, 0x0, 0x8000}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x8000}, [@ldst={0x1, 0x3, 0x1, 0x9, 0x7, 0xfffffffffffffff0, 0xfffffffffffffff0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000900)=r0, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x2000300, 0xd, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401c5820, &(0x7f0000000000)=0x8000) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x1, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000200)={r4, r0}) r5 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000008c0)={r6}, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd190000c400150005010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r6, 0xe0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000540), &(0x7f0000000580)=[0x0, 0x0, 0x0], 0x0, 0x7d, &(0x7f0000000740)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000700), &(0x7f0000000900), 0x8, 0x76, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x9, 0x9, &(0x7f0000000380)=@raw=[@alu={0x4, 0x0, 0x0, 0x6, 0x3, 0xfffffffffffffff0}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}], &(0x7f00000001c0)='syzkaller\x00', 0x33e298, 0xf1, &(0x7f0000000400)=""/241, 0x651a32963698bd3d, 0x0, '\x00', r8, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000009c0)={0x3, 0x2, 0x3, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)=[r7, r7], &(0x7f0000000a40)=[{0x1, 0x3, 0x8, 0x9}, {0x1, 0x1, 0x10}, {0x1, 0x1, 0x89, 0x8}, {0x0, 0x2, 0xf, 0xa}, {0x5, 0x2, 0x4, 0x7}, {0x3, 0x2, 0xd, 0x6}, {0x4, 0x3, 0x3, 0x3}, {0x0, 0x4, 0x6, 0xc}], 0x10, 0x5}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x1e, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000005896129208000000001895"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', r8, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r9) r10 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f0000000180)=[{0x0, 0xea}], 0x1}, 0x0) r11 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r11, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r11, &(0x7f00000001c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)="f4000900062b8825fe80000000000000dc8f850f23846632189c54ebcc00007a000000ad6e911b51", 0x28}], 0x1}, 0x0) 1.356897229s ago: executing program 2 (id=2524): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0xd8, &(0x7f0000000800)=""/216}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33a2d912}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000000f01f00810000007f00000001"], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r2, 0x400454cd, 0x336) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) close(r2) 1.312652571s ago: executing program 1 (id=2525): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r1}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000080)={0xffffffffffffffff, r1}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0x0, 0xfb, 0xeb, &(0x7f0000000140)="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", &(0x7f0000000240)=""/235, 0x39e5b303, 0x0, 0xd7, 0x23, &(0x7f0000000340)="586f4e144be1108c2ebda9cce08f42bdb4420dff2982d310ca06065a65aa42882f9071ef0f4ce2d9a030b13c73d12ce1c2014c034e86938732543783ef5a033ee893a1cf86e43f41b72bd5839c5c6767f323840501c49ae76a5140f57dc91089ee81434d78df73fb4c9f537c9938401c5424d512934af396724172548e31a878942b4ce9d25bd5226f46f27f2875d40acf2cbf97b687766a3d7346e1eb5b042285e933c8096243e7c6b97b472d749f02f6eb831d1914d526663ed3a3ff7b584e160393af3847d3fddd9c94ca94b95f382d4eac6797cea7", &(0x7f0000000440)="0ec93df79ff8b5a47f373f9babf236150c1cdafea12064f652f14c16567c0d9c9ed7be", 0x4, 0x0, 0x9}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) write$cgroup_devices(r1, &(0x7f0000000540)={'c', ' *:* ', 'w\x00'}, 0x8) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000580)={r2}) close(r2) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000600)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@cgroup=r1, r1, 0x25, 0x8, 0x0, @void, @value=r3}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000680)) write$cgroup_pressure(r1, &(0x7f00000006c0)={'full', 0x20, 0x9, 0x20, 0x7fff}, 0x2f) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00', r1}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x210486, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r1, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0], 0x0, 0xa2, &(0x7f00000008c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0x7f, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x1, '\x00', r6, r1, 0x4, 0x1, 0x4}, 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000b80)={0x3}, 0x8) socketpair(0x65d28d2a1aca177d, 0x6, 0x100, &(0x7f0000000bc0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000c40)=r1, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c80)=r7, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001080)={r3, 0xe0, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000dc0)=[0x0], &(0x7f0000000e00)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x2f, &(0x7f0000000e40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000ec0), &(0x7f0000000f00), 0x8, 0x2f, 0x8, 0x8, &(0x7f0000000f40)}}, 0x10) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001100)={0x1b, 0x0, 0x0, 0x8506, 0x0, r8, 0x2, '\x00', r6, r1, 0x2, 0x4, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001180)={r8, 0xffffffffffffffff}, 0x4) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000011c0)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0x7fff, '\x00', 0x0, r1, 0x1, 0x4, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0xf, &(0x7f0000000cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, [@jmp={0x5, 0x0, 0x8, 0x4, 0x1, 0x40, 0x8}, @jmp={0x5, 0x0, 0xd, 0xb, 0x8, 0x10, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x1f}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x849}}]}, 0xfffffffffffffffd, 0x0, 0x3, &(0x7f0000000d40)=""/3, 0x41100, 0x15, '\x00', r10, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000010c0)={0x0, 0x6}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001240)=[r8, r1, r11, r8, r1, r1, r12, r13, r8, r5], &(0x7f0000001280)=[{0x1, 0x3, 0xf, 0x1}, {0x5, 0x1, 0x7, 0xa}, {0x1, 0x2, 0x3, 0x5}, {0x0, 0x4, 0xe, 0x3}], 0x10, 0x80000000}, 0x94) 1.117997287s ago: executing program 1 (id=2526): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc8910610700fa6fa26fa7088c60897d4a6148a1c1e43f00001bde605cbeac671e8e8fdecb035865e362ead91b1979a5ae30705b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd21142525815b91076ccb7b37b41215c184e731fb13d100323b77f613af02b6f3259d6f3ac85da4fe304ecfca2be5f4a8b3910a8f0a88d082ac161c4a3c1132831a88f199f67aca8f4698996d076250b2b75cdc7776b8cab72716149f70efb190007832c6077da0df4c63a226284cd6a2e5ec5bb28f18dd44821065b9758fd159c490421901361244c01bfa0cddbc726f2b4ceace9f9309f507e6a7135b33f418af0a63bfb480c2feced947dae1d7dc19c4f1807b17c559c27be4d18b2e0a3cf26832d7fc97cea307de1852f90317b501bf66473eb6dac986d7b5682abc3a5ea1dabde56b9e3a56ba20a65dc0df39edd5f34ed22a8f0c6594a894901e455d0369e407dae0f4fb4e181415153000000b6b384cb4bbfd4edfd70cd7324de228e1047a61292abe63fc71063a9040bd927779d56ef0f4725dfb3822ce1e24632f7d51a0e65bd5664fcd3e4a0b0388b842115b5689769438f9763a55956288e78b6cad0ff3f310722b4a5cc4f25a69753fcc8ece189808e6f2f71ca2337d0de3a9feaa3f4cd2a2c69d21daec3751aca69f0a6f5b0af65aace6d04dad91c67e57a0f7b8accb3f8d9b787e002e56a7149c2d10a268884e695256ddb9c17853e29689f41667522e6932294"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r1, 0x26, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x4, 0x4, 0x4}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETVNETBE(r6, 0x400454de, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r7}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r7}, 0xc) perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000000f01f00810000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r8}, 0x0, 0x0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r8}, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x8, 0xf3, &(0x7f0000000580)=""/243, 0x40f00}, 0x94) 725.516668ms ago: executing program 2 (id=2527): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xca}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91107c000000000095"], &(0x7f0000000280)='GPL\x00'}, 0x94) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x541b, 0x0) 464.695422ms ago: executing program 2 (id=2528): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xa, 0x5}, @struct={0x7, 0x1, 0x0, 0x4, 0x0, 0xfffffff5, [{0x4, 0x1, 0x8001}]}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x4, 0x7}]}}, 0x0, 0x4e, 0x0, 0x9, 0x6}, 0x28) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000080)={r0}) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@ifindex, 0x12, 0x1, 0x10000, &(0x7f0000001580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001700), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2e0000efab650019000000", @ANYRES32, @ANYBLOB, @ANYRES32=r4, @ANYBLOB, @ANYRES64=r3], 0x20) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(r5) setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000), 0x10) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200)=0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xa1, 0xe, 0x0, 0x0, 0x0, 0x5, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xe, 0x10}, 0x226, 0xb, 0x1, 0x3, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f01) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map, r2, 0x6, 0x2000, 0x0, @value=r6, @void, @void, @void, r3}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000000012850000008600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r10, 0xfca804a0, 0xe, 0x0, &(0x7f00000008c0)="b807205a802705b68713e580cf36", 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r11) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r11, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 263.976446ms ago: executing program 1 (id=2529): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0], 0x0, 0xcb, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x72, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x3, [@struct={0x2, 0x6, 0x0, 0x4, 0x1, 0x0, [{0x3, 0x5, 0x4}, {0x9, 0x1, 0x6}, {0x5, 0x2, 0x7a78}, {0x1, 0x2, 0x1}, {0x6, 0x1, 0xf}, {0xc, 0x1}]}, @union={0xd, 0x4, 0x0, 0x5, 0x0, 0xc, [{0xa, 0x4, 0x5c78}, {0xe, 0x4, 0x7}, {0x7, 0x3, 0x8}, {0x2, 0x5, 0xb}]}]}, {0x0, [0x2e]}}, &(0x7f0000000ac0)=""/39, 0xab, 0x27, 0x1, 0xfffffc01}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@bloom_filter={0x1e, 0x6c18349, 0x5, 0xc, 0x2, r0, 0x5, '\x00', r1, r2, 0x4, 0x0, 0x1, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001b40)={{r3}, &(0x7f00000006c0), &(0x7f0000001b00)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4, r3}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x280000, 0x4, 0x10009, 0x6}], 0x10, 0xfffffff6}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4000}]}) r6 = gettid() r7 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0xfb, 0x7, 0x94, 0x0, 0x0, 0x7, 0x14050, 0xa, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000240), 0x4}, 0x5000, 0x3, 0x2, 0x4, 0x7fffffff, 0x0, 0x1, 0x0, 0xf, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000300)={0x1, 0x4, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @random="62af4dcd19e8", @multicast, @broadcast]}) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r9, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x8, 0xed, 0x0, 0xc, 0x0, 0x3, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7b7f6154, 0x2, @perf_config_ext={0xae0f, 0x80000001}, 0x0, 0x1, 0x0, 0x4, 0x7ffffffffffffffc, 0x9, 0x4, 0x0, 0x66, 0x0, 0x2}, r6, 0xc, r7, 0x1) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0xe00}) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60100c12400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 0s ago: executing program 0 (id=2530): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x600, 0x1a, 0x0, 0x1c) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x7, [@const={0x1, 0x0, 0x0, 0xa, 0x5}, @enum64={0x2, 0x8, 0x0, 0x13, 0x1, 0x0, [{0xc, 0x0, 0x2}, {0x2, 0x8, 0x3}, {0x4, 0x5}, {0xb, 0x7, 0x4e80}, {0x2, 0x1, 0x80}, {0x4, 0x3, 0x1ff}, {0x10, 0xfffffff3, 0x4}, {0xc, 0x800}]}]}, {0x0, [0x2e, 0x5f, 0x30, 0x30, 0x0]}}, &(0x7f00000009c0)=""/226, 0x97, 0xe2, 0x1, 0x6, 0x10000}, 0x28) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x40000, 0x0, r1, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0xc, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000680)='%-010d \x00'}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r4, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], 0x0, 0x98, &(0x7f0000000780)=[{}, {}], 0x10, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0xdf, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000bc0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x80000001, '\x00', r7, r2, 0x0, 0x3, 0x4}, 0x50) r8 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r8, 0x84, 0x8, &(0x7f0000000000)=r8, 0x4) sendmsg$inet(r8, &(0x7f0000000380)={&(0x7f0000000340)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000180)="85", 0x1}], 0x1}, 0x24004860) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) sendmsg$kcm(r9, &(0x7f0000001700)={&(0x7f0000000cc0)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12-generic\x00'}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000ec0)="b294562b98ddffc9afd0df182c428f913b95317143c41cb53dad4284d808b76c78320cb4f3fcb78af080a3311457fa2ad6be15646e64f57e2138ff9a0d7a4d1f09167fab61bb0d02f250def11b095db349b13e89cb22a89f6890e0b54036c091cb29a82342a0065e120458d30b39ff0f09e599c45ace9da49d622794768d49099cecca90870ca63f3007045c189df60bc72886aad1550c9876ff86c63d17a9605cb42cf785be8bd78dd74eac9bbcbf584f1636bf6ce060a7fe28d2", 0xbb}, {&(0x7f0000000f80)="556d4d8a955161e2b378ce2c65e34912ecab5c37d96e118a247ca6281860c89b4012448499ac640c0e5d00e1fd0b9dc6a87c372c1934e5943cc11782a2340aa4a305a5652e6a0a228d7a86b2cf3787c7f4645491", 0x54}, {&(0x7f0000000d40)="4ddc98ed4dd28cc58b5933ed1479590df0a95ac92d07f1830484b39d93642219dfb6985714989679cb2379ec8d911cdf52fff39c", 0x34}, {&(0x7f0000001000)="3623c1d2ce1f164ac38911ba51af3f2cd0f188bf06ac32a7af70ea7fb36a0bf5359449ed0615f382df873a6aecb0e939a2df5629690a6d7d643e152c865ad47f8e34af3376f9d43cad9c4efa91f30816deb9028647d752465d54da615266c549189f0957be212c0066b212e0271eb730d5ece999dc7f2aa2c4f1199d0e1f616885f86e2d36518a73056b1ff0e520816eb5a9cd2c2e38ef4978f78f6bd3f82ae399f73157dff899b6de6549732eb1b3853c23cc518069f9cedd724fc3cd2d903e394e753333e895f3f89da6d918efb7eb2135739954537dd62724947583cd3ee2719e15369b578fae80d2f11cb4fe006ec8347a", 0xf3}, {&(0x7f0000001100)="aa26bc1345f1c8b6fc5b599da4533226e70489f0655e90b6cde5bb9adf7366254baf28c252c18b31c76c6e6083c455381e756ccc26272df6eee3fdec00c22012c9e67f96112aea8fe1fe909c092ce87e6edbe2", 0x53}, {&(0x7f0000001180)="6585f5e1fadb53b94af5a436f7ba9f414a6fe5231f3c6d4b3886611e6806f442f2331b0680d930d58166456fa16d1125e580f2c369d4", 0x36}], 0x6, &(0x7f0000001240)=[{0xc8, 0x10a, 0x2, "d8f5cf010a1a01e11180acab50f8ea7c990bacb49454b5e3c09e8590066a5abf67fb42578d0c0cf01f74693dd74a7c5e4f41fb7c1b67b62865ae3e194eec9f1019928fbbc3bdc83af6d6ab1575067ed201fe0ee1d0d02dc28f614ca13b9d9c2d067db1b05abb3503f3bb8f2ff2fdb20a9e3470b1b13741888fbbf9d55d746aeb0600fca249b86091f127166bec1060ed54acaffe3405a0857ffd045b400f5ebd8df7c89371d8ce922c661526f05534e772e8829f"}, {0x50, 0x1, 0x4, "82265bc9b416f6ba799b4e2ee14d59e9f8782b04bbad22d8604067bf0975f1f18a9bb615a7fb74f86a2e108f5385a7acfd28519acac736ea75e924f7dbd7fd"}, {0x100, 0x0, 0x10, "f2a8c3858e1c11d3b5420ca5037803ef3e8faecfa73c4401005b530e32fc6ca6fb401578e7e26c30a4d707049a15af380d56d2874964f502ad333b2a95589b9259ec57c8db286e4d08961100bdf214483c4062f59cfb9587ec88aacb3a0f08bf763a87f0b87533c87fc6fdaf08905255ebe25804025da3b13746c201c2311b300f65010bbda28a04a924547630d6324d54898fcdf084dbc84b0f8a1f4952888277ada4917ade0d4d402e2b0cfe2fc8677d13fe5732dbef56a3afa7628cc7f100acf1f60b27f71f3bde7ff86e07481da17d243f943fde10b6de34c6e42e13472410682a12ca0122b8f6091698"}, {0xb0, 0x88, 0x100000, "e1263d9a8ce848b45b68bb0805c28db7cc4a30acece7e56cc8d40280bcf3a106b5af1e605e4d6da825364a4d10f2ac29251f97c05a6a82cdc4644609bad916883625b137da1c7cf5a8aec4e3ac2fe5e7c51708381d14cdde18c94eee7fda5e2326fe66120bd7f3f659bcec0d4694e51221f8345f608ec4eb8015c017f623d0f2307a09553c149d4275604c95db4dda010078413e1c2ae84396be"}, {0x20, 0x107, 0x3, "39ed9f6c442a35a542f602aeca491e6b"}, {0xd8, 0x313, 0xa3, "09798f67ebcb689b610a42de7c9bb8c0a9ae93a43aaa80503efe0a8be3c51833b4cda40d6d8552d95fdf46eed1a90a44203f4246b004a6d0e7860dc9a9dd38e16d7e97219eea724444b31296ff46a3a76080baf6b650daa6ec1a32ba6acb8237aeae10e53fbf3e027c47df3ac7933552d5b1de53b7ccb167d63fd9d0ef786ec491661a9f899be082fd9f7b68d7079e1a01c086dc4fdd0b91ae136633a3698a0fc63286078b934a8a96e66d7406665bcc34c02c968da7fa635374ca377fa46beb4daa9947"}, {0xe8, 0x1, 0x9, "96b7bc422fee867e43c8f74b322f3d71024e35dbada620d1a1d77dee367515587af8d9f78498c9b2bbffe0fa02516de96cb91050aeb33da58ceee1c53fb7d8e38a2ff418de9172a86ef39f0b2f9654ac71ea0efd3722722a2e5c198a0d94ab2c17a0b62b7a489ee76460269f0e71fad0d9d2ac9d52419ee2df95268a36b42c36a529e21a708e2cc5e2927f23320b04068fc048dea4fa8bf62eea5dcb4ff99e99dec95bbe173af809c060ba7351f6d333e4e169b54bbc09327f4f01b765176b7b61b779edced5a88f5d6d39c9eaac15c3ee8486c99589"}, {0x18, 0x118, 0x5, "b7f8"}], 0x4c0}, 0x20000001) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x101}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa8}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r11 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000c40)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xc0}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c03400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r6, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xa, 0x4, 0xfff, 0x9, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000007b00000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000028c0)={0x18, 0x10, &(0x7f0000001740)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x308a}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @cb_func={0x18, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f00000017c0)='GPL\x00', 0x8, 0x1000, &(0x7f0000001800)=""/4096, 0x41000, 0x1, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002800)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000002840)={0x4, 0xb, 0x3f4c, 0xcaf}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002880)=[r3, r1, r9, r1, r13, r1, 0xffffffffffffffff, r6], 0x0, 0x10, 0xfffffff7}, 0x94) kernel console output (not intermixed with test programs): ress (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.007228][ T7971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.036986][ T7971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.052287][ T7971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.077723][ T7971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.150000][ T7971] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.185822][ T7971] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.194614][ T7971] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.243690][ T7971] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.264283][ T51] Bluetooth: hci2: command tx timeout [ 164.477673][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.489349][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.550567][ T1000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.567142][ T1000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.806077][ T8122] netlink: 188 bytes leftover after parsing attributes in process `syz.3.643'. [ 164.845338][ T8122] netlink: 'syz.3.643': attribute type 6 has an invalid length. [ 164.853304][ T8122] netlink: 'syz.3.643': attribute type 3 has an invalid length. [ 164.883274][ T8122] netlink: 153952 bytes leftover after parsing attributes in process `syz.3.643'. [ 164.917282][ T8121] netlink: 'syz.0.642': attribute type 23 has an invalid length. [ 164.933650][ T8121] netlink: 168 bytes leftover after parsing attributes in process `syz.0.642'. [ 165.051194][ T8129] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.645'. [ 165.090833][ T8129] netlink: zone id is out of range [ 165.110260][ T8129] netlink: zone id is out of range [ 165.122651][ T8129] netlink: zone id is out of range [ 165.132852][ T8129] netlink: zone id is out of range [ 165.141786][ T8129] netlink: zone id is out of range [ 165.149866][ T8129] netlink: zone id is out of range [ 165.155193][ T8129] netlink: zone id is out of range [ 165.166434][ T8129] netlink: zone id is out of range [ 165.172619][ T8129] netlink: zone id is out of range [ 165.188996][ T8129] netlink: zone id is out of range [ 166.335818][ T51] Bluetooth: hci2: command tx timeout [ 168.036153][ T8196] netlink: 'syz.2.660': attribute type 10 has an invalid length. [ 168.043955][ T8196] netlink: 'syz.2.660': attribute type 10 has an invalid length. [ 168.097248][ T8196] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.660'. [ 168.975291][ T8221] netlink: 'syz.2.667': attribute type 39 has an invalid length. [ 169.067127][ T8224] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.665'. [ 170.243465][ T8243] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.673'. [ 170.269155][ T8243] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.673'. [ 170.287480][ T8243] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.673'. [ 170.303345][ T8242] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.675'. [ 170.314355][ T8243] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.673'. [ 170.326131][ T8243] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.673'. [ 170.338936][ T8242] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.675'. [ 170.372575][ T8244] netlink: 60 bytes leftover after parsing attributes in process `syz.1.672'. [ 170.712485][ T8260] netlink: 'syz.0.679': attribute type 1 has an invalid length. [ 171.039470][ T8270] pim6reg1: entered promiscuous mode [ 171.044834][ T8270] pim6reg1: entered allmulticast mode [ 171.866926][ T8296] sock: sock_timestamping_bind_phc: sock not bind to device [ 172.507363][ T8333] netlink: 'syz.3.701': attribute type 2 has an invalid length. [ 172.794705][ T5774] Bluetooth: hci2: unexpected event 0x10 length: 151 > 1 [ 172.796178][ T51] Bluetooth: hci2: hardware error 0x00 [ 176.786971][ T8380] __nla_validate_parse: 5 callbacks suppressed [ 176.786985][ T8380] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.713'. [ 176.823014][ T8380] netlink: 180 bytes leftover after parsing attributes in process `syz.2.713'. [ 177.625999][ T8393] vlan1: entered promiscuous mode [ 177.632394][ T8393] vlan1: entered allmulticast mode [ 177.642887][ T8393] veth0_vlan: entered allmulticast mode [ 177.669643][ T8402] netlink: 4068 bytes leftover after parsing attributes in process `syz.0.719'. [ 177.859177][ T51] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 177.865542][ T8407] netlink: 'syz.2.720': attribute type 3 has an invalid length. [ 177.865641][ T8407] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.720'. [ 178.004356][ T8415] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.723'. [ 179.268928][ T8445] netlink: 'syz.0.731': attribute type 9 has an invalid length. [ 179.289344][ T8445] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.731'. [ 179.977401][ T8462] netlink: 'syz.1.735': attribute type 21 has an invalid length. [ 180.093085][ T8465] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.736'. [ 180.141201][ T8465] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 180.391451][ T8475] netlink: 'syz.1.739': attribute type 21 has an invalid length. [ 180.482001][ T8481] netlink: 'syz.2.742': attribute type 1 has an invalid length. [ 180.535508][ T8481] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.742'. [ 180.893801][ T8493] syzkaller0: entered promiscuous mode [ 180.921911][ T8493] syzkaller0: entered allmulticast mode [ 184.009802][ T8505] netlink: 'syz.1.749': attribute type 29 has an invalid length. [ 184.035853][ T8505] netlink: 'syz.1.749': attribute type 29 has an invalid length. [ 184.151215][ T8506] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.751'. [ 184.182086][ T8506] net_ratelimit: 332 callbacks suppressed [ 184.182101][ T8506] openvswitch: netlink: Key type 4112 is out of range max 32 [ 185.049992][ T8530] TCP: TCP_TX_DELAY enabled [ 185.078978][ T8520] netlink: 'syz.1.754': attribute type 4 has an invalid length. [ 185.088935][ T8520] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.754'. [ 185.666352][ T8546] netlink: 'syz.2.762': attribute type 39 has an invalid length. [ 186.488542][ T8554] netlink: 193668 bytes leftover after parsing attributes in process `syz.3.763'. [ 186.579382][ T5767] Bluetooth: hci3: command 0x0406 tx timeout [ 186.585623][ T5775] Bluetooth: hci0: command 0x0406 tx timeout [ 186.591759][ T5773] Bluetooth: hci1: command 0x0406 tx timeout [ 186.609260][ T8557] netlink: 60 bytes leftover after parsing attributes in process `syz.2.764'. [ 189.588830][ T8573] IPv6: Can't replace route, no match found [ 189.611996][ T8573] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 189.652916][ T8570] netlink: 'syz.3.767': attribute type 10 has an invalid length. [ 189.706002][ T8570] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 189.738431][ T8570] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 189.741980][ T8568] netlink: 60 bytes leftover after parsing attributes in process `syz.0.766'. [ 189.807504][ T8570] team0: Port device wlan1 added [ 189.828924][ T8568] macvlan1: entered promiscuous mode [ 189.847273][ T8568] macvlan1: entered allmulticast mode [ 189.863636][ T8568] veth1_vlan: entered allmulticast mode [ 189.951908][ T8577] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.766'. [ 191.203301][ T8609] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.778'. [ 192.351558][ T8632] sit0: entered allmulticast mode [ 192.486004][ T8636] netlink: 'syz.1.786': attribute type 33 has an invalid length. [ 192.494028][ T8636] netlink: 136 bytes leftover after parsing attributes in process `syz.1.786'. [ 192.586291][ T8630] sit0: entered promiscuous mode [ 192.825973][ T8649] netlink: 'syz.1.789': attribute type 10 has an invalid length. [ 192.856516][ T8649] netlink: 'syz.1.789': attribute type 2 has an invalid length. [ 192.864387][ T8649] netlink: 'syz.1.789': attribute type 8 has an invalid length. [ 192.906186][ T8649] netlink: 132 bytes leftover after parsing attributes in process `syz.1.789'. [ 194.137993][ T8673] netlink: 'syz.0.796': attribute type 33 has an invalid length. [ 194.178751][ T8673] netlink: 152 bytes leftover after parsing attributes in process `syz.0.796'. [ 194.264086][ T8673] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 194.277333][ T8680] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.796'. [ 194.542921][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.549748][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.929823][ T8701] netlink: 152 bytes leftover after parsing attributes in process `syz.0.803'. [ 195.024942][ T8701] netlink: 6 bytes leftover after parsing attributes in process `syz.0.803'. [ 195.218096][ T8711] netlink: 'syz.1.805': attribute type 10 has an invalid length. [ 195.442883][ T8711] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 195.463954][ T8723] netlink: 'syz.2.809': attribute type 10 has an invalid length. [ 195.690578][ T8723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.717957][ T8729] netlink: 'syz.0.811': attribute type 27 has an invalid length. [ 195.745549][ T8731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.773107][ T8729] netlink: 164 bytes leftover after parsing attributes in process `syz.0.811'. [ 196.018829][ T8729] netlink: 188 bytes leftover after parsing attributes in process `syz.0.811'. [ 197.747856][ T8770] netlink: 'syz.3.822': attribute type 21 has an invalid length. [ 198.887488][ T8802] netlink: 'syz.2.831': attribute type 29 has an invalid length. [ 198.959706][ T8802] netlink: 'syz.2.831': attribute type 29 has an invalid length. [ 198.989503][ T8806] netlink: 'syz.2.831': attribute type 29 has an invalid length. [ 199.052543][ T8802] netlink: 'syz.2.831': attribute type 29 has an invalid length. [ 199.490543][ T8823] netlink: 'syz.3.838': attribute type 4 has an invalid length. [ 199.516051][ T8823] netlink: 152 bytes leftover after parsing attributes in process `syz.3.838'. [ 199.624173][ T8823] .`: renamed from bond0 (while UP) [ 199.936263][ T8828] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.840'. [ 200.166524][ T8832] netlink: 'syz.0.839': attribute type 10 has an invalid length. [ 201.913492][ T8865] netlink: 132 bytes leftover after parsing attributes in process `syz.0.848'. [ 202.181380][ T8867] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.849'. [ 206.961245][ T8929] netlink: 144 bytes leftover after parsing attributes in process `syz.0.864'. [ 207.263193][ T8929] netlink: 144 bytes leftover after parsing attributes in process `syz.0.864'. [ 207.289221][ T8929] netlink: 144 bytes leftover after parsing attributes in process `syz.0.864'. [ 207.366662][ T8929] netlink: 144 bytes leftover after parsing attributes in process `syz.0.864'. [ 207.387701][ T8933] delete_channel: no stack [ 207.392781][ T8933] delete_channel: no stack [ 207.479205][ T8929] netlink: 144 bytes leftover after parsing attributes in process `syz.0.864'. [ 207.525751][ T8929] netlink: 144 bytes leftover after parsing attributes in process `syz.0.864'. [ 207.566782][ T8929] netlink: 144 bytes leftover after parsing attributes in process `syz.0.864'. [ 207.585199][ T8940] netlink: 'syz.1.872': attribute type 4 has an invalid length. [ 207.643582][ T8940] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 207.650905][ T8940] IPv6: NLM_F_CREATE should be set when creating new route [ 207.658242][ T8940] IPv6: NLM_F_CREATE should be set when creating new route [ 207.665539][ T8940] IPv6: NLM_F_CREATE should be set when creating new route [ 207.778248][ T8946] netlink: 'syz.2.874': attribute type 8 has an invalid length. [ 207.786171][ T8946] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.874'. [ 207.811255][ T8946] netlink: 'syz.2.874': attribute type 28 has an invalid length. [ 207.825483][ T8946] netlink: 'syz.2.874': attribute type 29 has an invalid length. [ 207.843572][ T8946] netlink: 132 bytes leftover after parsing attributes in process `syz.2.874'. [ 209.320135][ T8974] vlan0: entered promiscuous mode [ 209.356350][ T8974] vlan0: entered allmulticast mode [ 209.361669][ T8974] veth0_vlan: entered allmulticast mode [ 210.510420][ T9000] netlink: 'syz.1.885': attribute type 29 has an invalid length. [ 212.846553][ T8999] netlink: 14 bytes leftover after parsing attributes in process `syz.1.885'. [ 213.318417][ T8999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.525624][ T8999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.610257][ T8999] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 213.685097][ T8999] bond0 (unregistering): Released all slaves [ 213.785505][ T9000] netlink: 'syz.1.885': attribute type 29 has an invalid length. [ 214.055895][ T9019] syz.2.891[9019] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 214.056340][ T9019] syz.2.891[9019] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.195317][ T9044] netlink: 'syz.0.898': attribute type 39 has an invalid length. [ 216.020152][ T9048] netlink: 'syz.2.900': attribute type 10 has an invalid length. [ 216.035657][ T9048] netlink: 2 bytes leftover after parsing attributes in process `syz.2.900'. [ 216.044529][ T9048] bond0: entered promiscuous mode [ 216.054870][ T9048] bond_slave_0: entered promiscuous mode [ 216.061243][ T9048] bond_slave_1: entered promiscuous mode [ 216.068792][ T9048] bridge0: port 4(bond0) entered blocking state [ 216.075266][ T9048] bridge0: port 4(bond0) entered disabled state [ 216.082510][ T9048] bond0: entered allmulticast mode [ 216.087957][ T9048] bond_slave_0: entered allmulticast mode [ 216.094352][ T9048] bond_slave_1: entered allmulticast mode [ 216.105861][ T9048] bridge0: port 4(bond0) entered blocking state [ 216.112259][ T9048] bridge0: port 4(bond0) entered forwarding state [ 216.836999][ T9075] netlink: 'syz.0.907': attribute type 8 has an invalid length. [ 216.897595][ T9075] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.907'. [ 216.932922][ T9078] netlink: 56537 bytes leftover after parsing attributes in process `syz.3.909'. [ 216.952713][ T9075] netlink: 'syz.0.907': attribute type 28 has an invalid length. [ 216.961030][ T9075] netlink: 'syz.0.907': attribute type 29 has an invalid length. [ 216.973801][ T9075] netlink: 132 bytes leftover after parsing attributes in process `syz.0.907'. [ 217.936142][ T9110] netlink: 'syz.2.918': attribute type 2 has an invalid length. [ 217.944125][ T9110] netlink: 'syz.2.918': attribute type 8 has an invalid length. [ 217.970841][ T9110] netlink: 132 bytes leftover after parsing attributes in process `syz.2.918'. [ 218.414486][ T9128] delete_channel: no stack [ 218.652865][ T9132] pim6reg1: entered promiscuous mode [ 218.679847][ T9132] pim6reg1: entered allmulticast mode [ 221.596302][ T9142] netlink: 60 bytes leftover after parsing attributes in process `syz.3.925'. [ 221.605284][ T9142] netlink: 60 bytes leftover after parsing attributes in process `syz.3.925'. [ 221.716316][ T9142] netlink: 60 bytes leftover after parsing attributes in process `syz.3.925'. [ 221.781516][ T9142] netlink: 60 bytes leftover after parsing attributes in process `syz.3.925'. [ 222.032717][ T9158] netlink: 'syz.3.930': attribute type 10 has an invalid length. [ 222.045725][ T9158] netlink: 55 bytes leftover after parsing attributes in process `syz.3.930'. [ 223.440901][ T9169] netlink: 10 bytes leftover after parsing attributes in process `syz.1.929'. [ 224.434313][ T9205] netlink: 'syz.3.943': attribute type 153 has an invalid length. [ 224.457249][ T9205] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.943'. [ 224.856158][ T9213] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.944'. [ 224.919746][ T9213] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 225.525246][ T9232] netlink: 'syz.2.950': attribute type 6 has an invalid length. [ 225.547296][ T9232] netlink: 168 bytes leftover after parsing attributes in process `syz.2.950'. [ 225.796994][ T9240] netlink: 60 bytes leftover after parsing attributes in process `syz.2.953'. [ 225.910967][ T9240] netlink: 60 bytes leftover after parsing attributes in process `syz.2.953'. [ 225.920847][ T9243] netlink: 60 bytes leftover after parsing attributes in process `syz.2.953'. [ 225.992317][ T9241] netlink: 'syz.1.952': attribute type 10 has an invalid length. [ 226.075553][ T9241] netlink: 2 bytes leftover after parsing attributes in process `syz.1.952'. [ 226.149134][ T9244] netlink: 'syz.1.952': attribute type 13 has an invalid length. [ 227.087914][ T9255] syzkaller0: entered promiscuous mode [ 227.093532][ T9255] syzkaller0: entered allmulticast mode [ 227.237906][ T9260] sit0: entered promiscuous mode [ 227.244469][ T9260] sit0: entered allmulticast mode [ 229.515281][ T9284] netlink: 'syz.1.964': attribute type 4 has an invalid length. [ 229.523139][ T9286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.965'. [ 229.710506][ T9295] netlink: 'syz.2.968': attribute type 1 has an invalid length. [ 230.667717][ T9323] netlink: 'syz.2.974': attribute type 21 has an invalid length. [ 230.732629][ T9323] netlink: 164 bytes leftover after parsing attributes in process `syz.2.974'. [ 230.781825][ T9323] netlink: 'syz.2.974': attribute type 10 has an invalid length. [ 230.789842][ T9323] netlink: 40 bytes leftover after parsing attributes in process `syz.2.974'. [ 230.799639][ T9323] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 231.162164][ T9334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.201835][ T9339] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.979'. [ 231.924690][ T9367] netlink: 'syz.3.986': attribute type 3 has an invalid length. [ 231.942956][ T9367] netlink: 'syz.3.986': attribute type 1 has an invalid length. [ 231.974278][ T9370] netlink: 'syz.2.988': attribute type 1 has an invalid length. [ 231.998425][ T9370] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.988'. [ 232.015992][ T9370] netlink: 'syz.2.988': attribute type 1 has an invalid length. [ 232.963444][ T9397] can: request_module (can-proto-0) failed. [ 233.659185][ T9434] netlink: 'syz.2.1003': attribute type 1 has an invalid length. [ 233.671425][ T9434] netlink: 'syz.2.1003': attribute type 3 has an invalid length. [ 233.680747][ T9434] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1003'. [ 233.692873][ T9434] netlink: 198048 bytes leftover after parsing attributes in process `syz.2.1003'. [ 233.860335][ T9436] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 235.060425][ T9461] validate_nla: 6 callbacks suppressed [ 235.060459][ T9461] netlink: 'syz.1.1014': attribute type 21 has an invalid length. [ 235.201515][ T5083] Bluetooth: hci0: ISO packet for unknown connection handle 3081 [ 235.390910][ T9480] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1019'. [ 235.451901][ T9481] bridge0: port 5(gretap0) entered blocking state [ 235.476211][ T9481] bridge0: port 5(gretap0) entered disabled state [ 235.492770][ T9481] gretap0: entered allmulticast mode [ 235.528418][ T9481] gretap0: entered promiscuous mode [ 235.536971][ T9481] bridge0: port 5(gretap0) entered blocking state [ 235.544227][ T9481] bridge0: port 5(gretap0) entered forwarding state [ 235.610587][ T9486] netlink: 'syz.0.1022': attribute type 9 has an invalid length. [ 235.635789][ T9486] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.1022'. [ 235.735065][ T9494] netlink: 'syz.2.1024': attribute type 16 has an invalid length. [ 235.749547][ T9494] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1024'. [ 235.829567][ T9496] netlink: 'syz.0.1025': attribute type 21 has an invalid length. [ 236.261237][ T9508] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1028'. [ 236.345758][ T9508] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 236.354814][ T9508] CPU: 1 PID: 9508 Comm: syz.2.1028 Not tainted syzkaller #0 [ 236.362225][ T9508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 236.372330][ T9508] Call Trace: [ 236.375639][ T9508] [ 236.378588][ T9508] dump_stack_lvl+0x18c/0x250 [ 236.383299][ T9508] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 236.389480][ T9508] ? show_regs_print_info+0x20/0x20 [ 236.394717][ T9508] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 236.400915][ T9508] sysfs_warn_dup+0x8e/0xa0 [ 236.405437][ T9508] sysfs_do_create_link_sd+0xc0/0x110 [ 236.410830][ T9508] device_add_class_symlinks+0x1cf/0x240 [ 236.416493][ T9508] device_add+0x507/0xc20 [ 236.420853][ T9508] wiphy_register+0x1dad/0x2ae0 [ 236.425841][ T9508] ? cfg80211_event_work+0x40/0x40 [ 236.430971][ T9508] ? minstrel_ht_alloc+0x88a/0x990 [ 236.436116][ T9508] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 236.442210][ T9508] ieee80211_register_hw+0x3464/0x4250 [ 236.447730][ T9508] ? ieee80211_tasklet_handler+0x20/0x20 [ 236.453388][ T9508] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 236.459312][ T9508] ? __debug_object_init+0xec/0x450 [ 236.464553][ T9508] ? __asan_memset+0x22/0x40 [ 236.469168][ T9508] ? __hrtimer_init+0x186/0x270 [ 236.474050][ T9508] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 236.479833][ T9508] ? mac80211_hwsim_free+0x220/0x220 [ 236.485152][ T9508] ? rcu_is_watching+0x15/0xb0 [ 236.489947][ T9508] ? kstrndup+0xbd/0x140 [ 236.494225][ T9508] hwsim_new_radio_nl+0xdc9/0x1a90 [ 236.499388][ T9508] ? mark_lock+0x94/0x320 [ 236.503756][ T9508] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 236.510216][ T9508] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 236.516505][ T9508] ? lockdep_hardirqs_on+0x98/0x150 [ 236.521744][ T9508] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 236.527952][ T9508] genl_family_rcv_msg_doit+0x211/0x310 [ 236.533536][ T9508] ? end_current_label_crit_section+0x170/0x170 [ 236.539822][ T9508] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 236.545832][ T9508] ? lockdep_hardirqs_on+0x98/0x150 [ 236.551074][ T9508] ? bpf_lsm_capable+0x9/0x10 [ 236.555787][ T9508] ? security_capable+0x89/0xb0 [ 236.560678][ T9508] genl_rcv_msg+0x619/0x7a0 [ 236.565222][ T9508] ? genl_bind+0x360/0x360 [ 236.569668][ T9508] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 236.575683][ T9508] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 236.582075][ T9508] ? ref_tracker_free+0x690/0x840 [ 236.587142][ T9508] netlink_rcv_skb+0x241/0x4d0 [ 236.591944][ T9508] ? genl_bind+0x360/0x360 [ 236.596394][ T9508] ? netlink_ack+0x1180/0x1180 [ 236.601211][ T9508] ? __lock_acquire+0x7d40/0x7d40 [ 236.606306][ T9508] ? down_read+0x1ac/0x2e0 [ 236.610758][ T9508] genl_rcv+0x28/0x40 [ 236.614768][ T9508] netlink_unicast+0x751/0x8d0 [ 236.619577][ T9508] netlink_sendmsg+0x8d0/0xbf0 [ 236.624384][ T9508] ? netlink_getsockopt+0x590/0x590 [ 236.629617][ T9508] ? aa_sock_msg_perm+0x94/0x150 [ 236.634587][ T9508] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 236.639904][ T9508] ? security_socket_sendmsg+0x80/0xa0 [ 236.645384][ T9508] ? netlink_getsockopt+0x590/0x590 [ 236.650612][ T9508] ____sys_sendmsg+0x5ba/0x960 [ 236.655403][ T9508] ? __import_iovec+0x5f2/0x850 [ 236.660296][ T9508] ? __asan_memset+0x22/0x40 [ 236.664914][ T9508] ? __sys_sendmsg_sock+0x30/0x30 [ 236.669956][ T9508] ? __import_iovec+0x5f2/0x850 [ 236.674846][ T9508] ? import_iovec+0x73/0xa0 [ 236.679390][ T9508] ___sys_sendmsg+0x2a6/0x360 [ 236.684096][ T9508] ? __sys_sendmsg+0x2a0/0x2a0 [ 236.688942][ T9508] __se_sys_sendmsg+0x1c2/0x2b0 [ 236.693824][ T9508] ? __x64_sys_sendmsg+0x80/0x80 [ 236.698801][ T9508] ? lockdep_hardirqs_on+0x98/0x150 [ 236.704033][ T9508] do_syscall_64+0x55/0xa0 [ 236.708474][ T9508] ? clear_bhb_loop+0x40/0x90 [ 236.713174][ T9508] ? clear_bhb_loop+0x40/0x90 [ 236.717878][ T9508] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 236.723799][ T9508] RIP: 0033:0x7f6ecaf9c799 [ 236.728242][ T9508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.747880][ T9508] RSP: 002b:00007f6ecbe28028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.756336][ T9508] RAX: ffffffffffffffda RBX: 00007f6ecb215fa0 RCX: 00007f6ecaf9c799 [ 236.764333][ T9508] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 236.772337][ T9508] RBP: 00007f6ecb032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 236.780340][ T9508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.788337][ T9508] R13: 00007f6ecb216038 R14: 00007f6ecb215fa0 R15: 00007fff947b1038 [ 236.796353][ T9508] [ 236.833175][ T9513] bridge0: entered promiscuous mode [ 236.838750][ T9513] bridge0: entered allmulticast mode [ 236.847462][ T9518] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1029'. [ 237.246419][ T9530] netlink: 'syz.3.1031': attribute type 21 has an invalid length. [ 237.292020][ T9530] netlink: 'syz.3.1031': attribute type 6 has an invalid length. [ 237.304631][ T9530] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1031'. [ 237.498174][ T9534] netlink: 'syz.3.1031': attribute type 9 has an invalid length. [ 237.898840][ T9543] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.907190][ T9543] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.916704][ T9543] bridge0: left promiscuous mode [ 237.943335][ T9545] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1039'. [ 238.227179][ T9551] netlink: 'syz.2.1044': attribute type 39 has an invalid length. [ 238.708370][ T9563] netlink: 'syz.2.1049': attribute type 5 has an invalid length. [ 238.921114][ T9573] netlink: 13183 bytes leftover after parsing attributes in process `syz.2.1050'. [ 239.458645][ T9584] bridge0: port 3(gretap0) entered blocking state [ 239.495713][ T9584] bridge0: port 3(gretap0) entered disabled state [ 239.503483][ T9584] gretap0: entered allmulticast mode [ 239.547065][ T9584] gretap0: entered promiscuous mode [ 239.576319][ T9584] bridge0: port 3(gretap0) entered blocking state [ 239.583143][ T9584] bridge0: port 3(gretap0) entered forwarding state [ 239.656217][ T9587] netlink: 'syz.3.1055': attribute type 28 has an invalid length. [ 239.664276][ T9587] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1055'. [ 239.692068][ T9569] delete_channel: no stack [ 240.639892][ T9594] aaaaaaaaaaaaaaa: entered promiscuous mode [ 240.769890][ T9606] validate_nla: 1 callbacks suppressed [ 240.769905][ T9606] netlink: 'syz.2.1059': attribute type 2 has an invalid length. [ 240.784267][ T9606] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1059'. [ 240.800978][ T9606] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1059'. [ 241.247321][ T9620] netlink: 'syz.2.1065': attribute type 17 has an invalid length. [ 241.275523][ T9620] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1065'. [ 241.412912][ T9629] netlink: 'syz.0.1066': attribute type 10 has an invalid length. [ 241.743705][ T9636] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1070'. [ 241.921705][ T9644] delete_channel: no stack [ 242.063327][ T9650] netlink: 'syz.0.1074': attribute type 6 has an invalid length. [ 242.076807][ T9650] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1074'. [ 242.130932][ T9652] netlink: 197276 bytes leftover after parsing attributes in process `syz.2.1075'. [ 243.321213][ T9695] netlink: 'syz.2.1091': attribute type 10 has an invalid length. [ 243.333049][ T9695] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1091'. [ 244.462512][ T9725] pimreg: tun_chr_ioctl cmd 1074025677 [ 244.468202][ T9725] pimreg: linktype set to 19 [ 244.986212][ T9743] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1104'. [ 245.141556][ T9744] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 245.687324][ T9764] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1111'. [ 246.898718][ T9789] netlink: 'syz.3.1117': attribute type 2 has an invalid length. [ 246.938200][ T9789] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1117'. [ 248.048677][ T9803] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.1120'. [ 248.111156][ T9801] netlink: 'syz.3.1120': attribute type 3 has an invalid length. [ 248.154039][ T9806] netlink: 'syz.1.1121': attribute type 6 has an invalid length. [ 248.185745][ T9806] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1121'. [ 248.265660][ T9810] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1123'. [ 248.315546][ T9810] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1123'. [ 248.354343][ T9810] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1123'. [ 248.414052][ T9814] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1124'. [ 248.480029][ T9821] netlink: 'syz.1.1126': attribute type 3 has an invalid length. [ 248.504423][ T9821] netlink: 'syz.1.1126': attribute type 7 has an invalid length. [ 248.525516][ T9821] netlink: 'syz.1.1126': attribute type 8 has an invalid length. [ 248.533483][ T9821] netlink: 'syz.1.1126': attribute type 7 has an invalid length. [ 248.555107][ T9821] netlink: 198048 bytes leftover after parsing attributes in process `syz.1.1126'. [ 248.804870][ T9838] netlink: 'syz.2.1132': attribute type 3 has an invalid length. [ 248.814345][ T9838] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1132'. [ 249.172379][ T9851] netlink: 'syz.3.1136': attribute type 6 has an invalid length. [ 249.185669][ T9851] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1136'. [ 249.456599][ T9856] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 249.606207][ T9863] netlink: 'syz.0.1139': attribute type 33 has an invalid length. [ 249.615838][ T9863] `: renamed from team0 (while UP) [ 250.390365][ T9880] syzkaller0: entered promiscuous mode [ 250.398433][ T9880] syzkaller0: entered allmulticast mode [ 250.423901][ T9878] Ÿë: port 1(ip6gretap0) entered blocking state [ 250.485857][ T9878] Ÿë: port 1(ip6gretap0) entered disabled state [ 250.495139][ T9878] ip6gretap0: entered allmulticast mode [ 250.536958][ T9878] ip6gretap0: entered promiscuous mode [ 254.228258][ T9919] validate_nla: 5 callbacks suppressed [ 254.228276][ T9919] netlink: 'syz.1.1153': attribute type 41 has an invalid length. [ 255.632197][ T9933] netlink: 'syz.0.1159': attribute type 21 has an invalid length. [ 255.642786][ T9933] __nla_validate_parse: 4 callbacks suppressed [ 255.642801][ T9933] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1159'. [ 255.682318][ T9940] netlink: 'syz.3.1160': attribute type 10 has an invalid length. [ 255.715432][ T9940] netlink: 209280 bytes leftover after parsing attributes in process `syz.3.1160'. [ 255.741431][ T9940] openvswitch: netlink: Flow key attr not present in new flow. [ 255.947512][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.953900][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.700414][ T9949] netlink: 'syz.1.1161': attribute type 39 has an invalid length. [ 258.001615][ T9965] bridge_slave_1: left allmulticast mode [ 258.008338][ T9965] bridge_slave_1: left promiscuous mode [ 258.014128][ T9965] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.094023][ T9965] bridge_slave_0: left allmulticast mode [ 258.142193][ T9965] bridge_slave_0: left promiscuous mode [ 258.158587][ T9965] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.213631][ T9970] netlink: 'syz.2.1169': attribute type 46 has an invalid length. [ 260.364526][ T9990] netlink: 212424 bytes leftover after parsing attributes in process `syz.1.1174'. [ 260.386803][ T9990] netlink: 'syz.1.1174': attribute type 10 has an invalid length. [ 260.566093][ T9990] team0: Port device macvlan0 added [ 260.608395][ T9995] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1173'. [ 261.036716][T10013] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1180'. [ 261.426875][T10026] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1183'. [ 261.451775][T10016] -1: renamed from syzkaller0 [ 261.908656][T10036] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1186'. [ 261.990497][T10040] netlink: 'syz.2.1187': attribute type 25 has an invalid length. [ 262.018501][T10040] netlink: 'syz.2.1187': attribute type 3 has an invalid length. [ 262.045627][T10040] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1187'. [ 263.373140][T10065] netlink: 'syz.1.1192': attribute type 3 has an invalid length. [ 263.385291][T10065] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1192'. [ 264.254520][T10096] syzkaller0: entered promiscuous mode [ 264.381188][T10102] netlink: 'syz.0.1200': attribute type 7 has an invalid length. [ 264.424550][T10102] netlink: 'syz.0.1200': attribute type 1 has an invalid length. [ 264.445459][T10102] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1200'. [ 266.462789][T10105] netlink: 'syz.1.1201': attribute type 21 has an invalid length. [ 266.471954][T10105] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1201'. [ 266.484636][T10110] netlink: 'syz.3.1202': attribute type 1 has an invalid length. [ 266.802384][ T1000] hsr_slave_0: left promiscuous mode [ 266.811861][ T1000] hsr_slave_1: left promiscuous mode [ 266.825211][ T1000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.835018][ T1000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.849829][ T1000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.860191][ T1000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.874093][ T1000] bridge_slave_1: left allmulticast mode [ 266.884138][ T1000] bridge_slave_1: left promiscuous mode [ 266.894888][ T1000] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.923587][ T1000] bridge_slave_0: left allmulticast mode [ 266.942241][ T1000] bridge_slave_0: left promiscuous mode [ 266.955574][ T1000] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.034771][ T1000] veth1_macvtap: left promiscuous mode [ 267.040993][ T1000] veth0_macvtap: left promiscuous mode [ 267.052405][ T1000] veth1_vlan: left promiscuous mode [ 267.061741][ T1000] veth0_vlan: left promiscuous mode [ 267.260878][T10146] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1213'. [ 267.780521][ T1000] team_slave_1 (unregistering): left promiscuous mode [ 267.787813][ T1000] team_slave_1 (unregistering): left allmulticast mode [ 267.798106][ T1000] team0 (unregistering): Port device team_slave_1 removed [ 267.844251][ T1000] team_slave_0 (unregistering): left promiscuous mode [ 267.852451][ T1000] team_slave_0 (unregistering): left allmulticast mode [ 267.862126][ T1000] team0 (unregistering): Port device team_slave_0 removed [ 267.902914][ T1000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.911891][ T1000] bond_slave_1 (unregistering): left promiscuous mode [ 267.920485][ T1000] bond_slave_1 (unregistering): left allmulticast mode [ 267.962828][ T1000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.972959][ T1000] bond_slave_0 (unregistering): left promiscuous mode [ 267.979845][ T1000] bond_slave_0 (unregistering): left allmulticast mode [ 268.257694][ T1000] bond0 (unregistering): (slave team0): Releasing backup interface [ 268.269512][ T1000] team0 (unregistering): left promiscuous mode [ 268.275803][ T1000] team0 (unregistering): left allmulticast mode [ 268.307870][ T1000] bond0 (unregistering): Released all slaves [ 268.411595][T10134] netlink: 'syz.1.1210': attribute type 1 has an invalid length. [ 268.452355][T10149] bridge_slave_1: left allmulticast mode [ 268.459677][T10149] bridge_slave_1: left promiscuous mode [ 268.466932][T10149] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.478998][T10149] bridge_slave_0: left allmulticast mode [ 268.505961][T10149] bridge_slave_0: left promiscuous mode [ 268.511676][T10149] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.610771][T10152] tap0: tun_chr_ioctl cmd 1074025680 [ 268.754796][T10160] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1219'. [ 268.959927][T10171] syz.2.1220[10171] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 268.960048][T10171] syz.2.1220[10171] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 269.035234][T10173] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1221'. [ 269.117785][T10175] syzkaller0: entered promiscuous mode [ 269.123307][T10175] syzkaller0: entered allmulticast mode [ 269.161060][T10173] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1221'. [ 269.315475][T10183] netlink: 'syz.3.1224': attribute type 1 has an invalid length. [ 269.338524][T10183] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.1224'. [ 269.433753][T10186] netlink: 'syz.1.1225': attribute type 29 has an invalid length. [ 271.173413][T10186] netlink: 'syz.1.1225': attribute type 29 has an invalid length. [ 271.186637][T10194] netlink: 'syz.3.1227': attribute type 21 has an invalid length. [ 271.374470][T10201] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1230'. [ 271.982502][T10227] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1238'. [ 271.999522][T10228] netlink: 'syz.0.1238': attribute type 2 has an invalid length. [ 272.009364][T10228] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1238'. [ 274.315784][T10243] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1243'. [ 274.646670][T10252] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 274.693935][T10256] netlink: 'syz.2.1246': attribute type 3 has an invalid length. [ 274.703230][T10256] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.1246'. [ 274.798765][T10252] netlink: 'syz.2.1246': attribute type 12 has an invalid length. [ 274.812582][T10252] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1246'. [ 274.957230][T10258] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1245'. [ 275.587651][T10274] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1252'. [ 276.222034][T10285] netlink: 'syz.2.1255': attribute type 153 has an invalid length. [ 276.266360][T10285] netlink: 'syz.2.1255': attribute type 1 has an invalid length. [ 276.274659][T10285] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.1255'. [ 276.582626][T10314] netlink: 207496 bytes leftover after parsing attributes in process `syz.3.1263'. [ 276.603530][T10310] netlink: 'syz.0.1262': attribute type 10 has an invalid length. [ 276.660271][T10310] `: Device ipvlan1 is up. Set it down before adding it as a team port [ 276.706432][T10314] netlink: 'syz.3.1263': attribute type 2 has an invalid length. [ 276.744848][T10314] netlink: 'syz.3.1263': attribute type 8 has an invalid length. [ 276.773325][T10314] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1263'. [ 277.135583][ T8213] wlan1: Trigger new scan to find an IBSS to join [ 277.160589][T10337] netlink: 'syz.1.1268': attribute type 2 has an invalid length. [ 277.184012][T10339] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1269'. [ 277.215544][T10337] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1268'. [ 277.260421][T10339] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1269'. [ 277.302080][T10343] netlink: 'syz.2.1270': attribute type 10 has an invalid length. [ 278.592647][T10366] netlink: 201660 bytes leftover after parsing attributes in process `syz.1.1275'. [ 278.637364][T10366] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 279.776278][T10393] -1: renamed from syzkaller0 [ 279.985588][T10403] netlink: 'syz.3.1286': attribute type 21 has an invalid length. [ 280.005534][T10403] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1286'. [ 280.099447][ T8213] wlan1: Trigger new scan to find an IBSS to join [ 280.106929][T10403] netlink: 'syz.3.1286': attribute type 10 has an invalid length. [ 280.114781][T10403] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1286'. [ 280.438994][T10422] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1290'. [ 280.460416][T10422] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1290'. [ 280.478546][T10418] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1290'. [ 281.093057][T10433] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 281.171954][T10433] netlink: 'syz.3.1293': attribute type 3 has an invalid length. [ 281.214509][T10433] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.1293'. [ 281.432710][T10444] netlink: 'syz.3.1293': attribute type 12 has an invalid length. [ 281.802621][ T8213] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 282.441459][T10452] netlink: 'syz.0.1298': attribute type 21 has an invalid length. [ 282.465641][T10452] __nla_validate_parse: 1 callbacks suppressed [ 282.465657][T10452] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1298'. [ 282.607901][T10452] netlink: 'syz.0.1298': attribute type 10 has an invalid length. [ 282.629047][T10452] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1298'. [ 282.670752][T10452] batman_adv: batadv0: Adding interface: veth0_vlan [ 282.685285][T10452] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.703901][T10459] netlink: 'syz.1.1300': attribute type 3 has an invalid length. [ 282.716695][T10452] batman_adv: batadv0: Interface activated: veth0_vlan [ 282.731182][T10459] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1300'. [ 282.919577][T10465] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1301'. [ 283.274991][T10478] netlink: 'syz.0.1304': attribute type 2 has an invalid length. [ 283.318661][T10475] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 283.328927][T10478] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1304'. [ 283.387571][T10480] netlink: 'syz.1.1305': attribute type 3 has an invalid length. [ 283.408157][T10480] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.1305'. [ 283.533308][T10475] netlink: 'syz.1.1305': attribute type 12 has an invalid length. [ 283.625825][T10475] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1305'. [ 284.258570][T10499] netlink: 56843 bytes leftover after parsing attributes in process `syz.2.1311'. [ 284.323532][T10501] netlink: 'syz.1.1310': attribute type 29 has an invalid length. [ 284.549210][T10501] netlink: 'syz.1.1310': attribute type 29 has an invalid length. [ 284.881961][T10520] netlink: 'syz.2.1316': attribute type 2 has an invalid length. [ 284.900074][T10520] netlink: 'syz.2.1316': attribute type 8 has an invalid length. [ 284.925419][T10520] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1316'. [ 285.066606][ T6520] wlan1: Trigger new scan to find an IBSS to join [ 285.722546][T10550] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.1325'. [ 286.096030][ T6520] wlan1: Trigger new scan to find an IBSS to join [ 286.920555][T10582] batman_adv: batadv0: Adding interface: virt_wifi0 [ 286.965770][T10582] batman_adv: batadv0: Interface activated: virt_wifi0 [ 287.641440][T10618] __nla_validate_parse: 5 callbacks suppressed [ 287.641476][T10618] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.1340'. [ 287.676305][T10620] validate_nla: 6 callbacks suppressed [ 287.676319][T10620] netlink: 'syz.1.1341': attribute type 1 has an invalid length. [ 287.872377][T10623] netlink: 3890 bytes leftover after parsing attributes in process `syz.2.1342'. [ 288.104895][ T6520] wlan1: Trigger new scan to find an IBSS to join [ 288.520330][T10631] delete_channel: no stack [ 288.545247][T10635] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1346'. [ 288.812644][T10650] ip6gretap0: refused to change device tx_queue_len [ 289.054196][ T1000] wlan1: Creating new IBSS network, BSSID 4a:81:60:d0:97:23 [ 289.136348][ T1000] wlan1: Trigger new scan to find an IBSS to join [ 289.221304][T10668] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1354'. [ 289.301863][T10668] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1354'. [ 289.335413][T10671] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1354'. [ 289.345269][T10665] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1354'. [ 289.463292][T10674] netlink: 'syz.2.1356': attribute type 39 has an invalid length. [ 289.587163][T10676] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1357'. [ 289.760728][T10685] netlink: 'syz.2.1360': attribute type 9 has an invalid length. [ 289.779197][T10685] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1360'. [ 289.971097][T10701] netlink: 'syz.1.1364': attribute type 1 has an invalid length. [ 289.985258][T10701] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1364'. [ 291.811166][T10754] syzkaller0: entered promiscuous mode [ 291.843353][T10754] syzkaller0: entered allmulticast mode [ 292.098867][ T1000] wlan1: Creating new IBSS network, BSSID 76:3d:7a:4d:e3:e3 [ 293.181236][T10788] __nla_validate_parse: 5 callbacks suppressed [ 293.181271][T10788] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1386'. [ 293.807136][T10797] netlink: 'syz.2.1388': attribute type 10 has an invalid length. [ 293.909318][T10799] netlink: 'syz.2.1388': attribute type 46 has an invalid length. [ 294.001304][T10805] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1389'. [ 294.078457][T10805] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1389'. [ 294.138690][T10805] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1389'. [ 294.186808][T10805] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1389'. [ 294.570303][T10820] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1393'. [ 294.953364][T10830] netlink: 'syz.0.1397': attribute type 10 has an invalid length. [ 295.139862][T10830] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 295.479740][T10847] netlink: 'syz.3.1401': attribute type 10 has an invalid length. [ 295.490552][T10847] veth0_macvtap: left promiscuous mode [ 295.597351][T10845] syzkaller0: entered promiscuous mode [ 295.608185][T10845] syzkaller0: entered allmulticast mode [ 295.674464][T10845] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1400'. [ 295.735107][T10852] syzkaller0: entered promiscuous mode [ 295.764259][T10852] syzkaller0: entered allmulticast mode [ 296.387468][T10872] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1408'. [ 296.775060][T10881] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1410'. [ 296.963408][T10890] netlink: 'syz.2.1413': attribute type 39 has an invalid length. [ 297.042070][T10889] netlink: 'syz.2.1413': attribute type 39 has an invalid length. [ 297.318705][T10897] syzkaller0: entered promiscuous mode [ 297.324235][T10897] syzkaller0: entered allmulticast mode [ 300.094925][T10927] netlink: 15358 bytes leftover after parsing attributes in process `syz.3.1423'. [ 300.146118][T10929] syz.0.1424[10929] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 300.146238][T10929] syz.0.1424[10929] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 301.304070][T10945] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1429'. [ 301.568663][T10961] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.1434'. [ 303.400567][T10964] netlink: 'syz.0.1434': attribute type 1 has an invalid length. [ 303.415611][T10964] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1434'. [ 303.868957][T10969] sctp: [Deprecated]: syz.0.1436 (pid 10969) Use of struct sctp_assoc_value in delayed_ack socket option. [ 303.868957][T10969] Use struct sctp_sack_info instead [ 303.929216][T10969] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.1436'. [ 305.815312][T10969] netlink: 'syz.0.1436': attribute type 4 has an invalid length. [ 305.856181][T10969] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1436'. [ 306.178889][T10998] netlink: 'syz.2.1445': attribute type 29 has an invalid length. [ 306.206516][T10998] netlink: 'syz.2.1445': attribute type 29 has an invalid length. [ 306.220652][T10998] netlink: 'syz.2.1445': attribute type 29 has an invalid length. [ 306.239967][T10998] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1445'. [ 307.013670][T11030] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1454'. [ 307.057736][T11030] netlink: 'syz.1.1454': attribute type 2 has an invalid length. [ 307.066139][T11030] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1454'. [ 308.955062][T11088] sctp: [Deprecated]: syz.0.1469 (pid 11088) Use of struct sctp_assoc_value in delayed_ack socket option. [ 308.955062][T11088] Use struct sctp_sack_info instead [ 309.185086][T11092] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.1472'. [ 309.260798][T11092] netlink: 22828 bytes leftover after parsing attributes in process `syz.1.1472'. [ 309.722904][T11117] netlink: 'syz.2.1482': attribute type 3 has an invalid length. [ 309.763167][T11117] netlink: 'syz.2.1482': attribute type 1 has an invalid length. [ 309.786623][T11117] netlink: 198800 bytes leftover after parsing attributes in process `syz.2.1482'. [ 313.215312][T11146] netlink: 'syz.3.1489': attribute type 21 has an invalid length. [ 313.463397][T11159] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.1494'. [ 314.175788][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 314.916081][T11190] netlink: 'syz.2.1503': attribute type 27 has an invalid length. [ 314.937242][T11190] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.1503'. [ 315.052707][T11199] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1504'. [ 315.119194][T11200] netlink: 22 bytes leftover after parsing attributes in process `syz.1.1502'. [ 315.320702][T11210] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1507'. [ 315.339668][T11210] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 315.350670][T11212] netlink: 'syz.0.1506': attribute type 4 has an invalid length. [ 315.364804][T11211] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1507'. [ 315.380737][T11212] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1506'. [ 315.390357][T11210] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 315.406271][T11211] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 315.419962][T11211] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 315.768403][ T5083] Bluetooth: hci0: unexpected event 0x17 length: 15 > 6 [ 316.502192][T11235] syzkaller0: entered promiscuous mode [ 316.535310][T11235] syzkaller0: entered allmulticast mode [ 317.393249][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.402438][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.411560][ T5083] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 320.191725][T11303] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1534'. [ 320.212814][T11303] netlink: 6320 bytes leftover after parsing attributes in process `syz.0.1534'. [ 320.232265][T11303] tc_dump_action: action bad kind [ 320.256675][T11303] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1534'. [ 320.282498][T11303] netlink: 6320 bytes leftover after parsing attributes in process `syz.0.1534'. [ 320.309143][T11303] tc_dump_action: action bad kind [ 321.221258][ T8212] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 323.614247][T11330] netlink: 'syz.0.1542': attribute type 11 has an invalid length. [ 323.763288][T11336] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1543'. [ 323.916971][T11337] netlink: 'syz.3.1544': attribute type 27 has an invalid length. [ 323.946163][T11337] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1544'. [ 325.043809][T11371] netlink: 'syz.0.1550': attribute type 11 has an invalid length. [ 325.076918][T11371] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1550'. [ 325.987455][T11400] netlink: 'syz.1.1558': attribute type 1 has an invalid length. [ 326.033470][T11402] netlink: 'syz.2.1557': attribute type 21 has an invalid length. [ 326.595311][T11415] netlink: 'syz.3.1563': attribute type 21 has an invalid length. [ 326.610507][T11415] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1563'. [ 326.782647][T11415] netlink: 'syz.3.1563': attribute type 10 has an invalid length. [ 326.805519][T11415] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1563'. [ 326.898945][T11418] netlink: 'syz.1.1564': attribute type 9 has an invalid length. [ 326.929613][T11418] netlink: 399 bytes leftover after parsing attributes in process `syz.1.1564'. [ 326.953265][T11422] netlink: 'syz.0.1565': attribute type 2 has an invalid length. [ 328.655731][T11452] lo: left promiscuous mode [ 328.660326][T11452] lo: entered allmulticast mode [ 328.687203][T11454] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1577'. [ 329.472541][T11478] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1584'. [ 329.587103][T11484] netlink: 'syz.3.1586': attribute type 2 has an invalid length. [ 329.595079][T11484] netlink: 'syz.3.1586': attribute type 8 has an invalid length. [ 329.612368][T11484] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1586'. [ 329.634424][T11486] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1587'. [ 329.646064][T11486] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 330.486803][T11514] netlink: 21 bytes leftover after parsing attributes in process `syz.3.1595'. [ 330.525595][T11514] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 331.739189][T11533] netlink: 'syz.1.1599': attribute type 30 has an invalid length. [ 331.753434][T11534] netlink: 'syz.1.1599': attribute type 10 has an invalid length. [ 331.890370][T11537] netlink: 'syz.0.1600': attribute type 153 has an invalid length. [ 331.934697][T11539] netlink: 'syz.0.1600': attribute type 29 has an invalid length. [ 331.956721][T11537] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1600'. [ 332.599076][T11547] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1602'. [ 332.809341][T11534] team0: Device wg1 is of different type [ 332.833319][T11539] netlink: 'syz.0.1600': attribute type 29 has an invalid length. [ 332.888193][T11547] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 333.155119][T11551] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.1604'. [ 333.189570][T11551] netlink: 6332 bytes leftover after parsing attributes in process `syz.0.1604'. [ 333.558403][T11573] netlink: 'syz.1.1609': attribute type 3 has an invalid length. [ 333.566948][T11575] tun0: tun_chr_ioctl cmd 2148553947 [ 333.592425][T11580] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.1611'. [ 333.604005][T11573] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1609'. [ 333.645086][T11580] : renamed from veth0_to_bond (while UP) [ 333.760844][T11573] netlink: 'syz.1.1609': attribute type 10 has an invalid length. [ 334.186882][T11595] netlink: 'syz.2.1616': attribute type 64 has an invalid length. [ 334.702277][T11626] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1626'. [ 334.713760][T11626] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 334.722131][T11626] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode [ 334.739186][T11626] syz.1.1626[11626] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 334.739395][T11626] syz.1.1626[11626] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 335.209910][T11634] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1629'. [ 335.247950][T11634] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 336.703204][T11659] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1635'. [ 336.722578][T11659] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 336.734486][T11659] CPU: 1 PID: 11659 Comm: syz.0.1635 Not tainted syzkaller #0 [ 336.742125][T11659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 336.752214][T11659] Call Trace: [ 336.755509][T11659] [ 336.758448][T11659] dump_stack_lvl+0x18c/0x250 [ 336.763163][T11659] ? show_regs_print_info+0x20/0x20 [ 336.768390][T11659] ? load_image+0x400/0x400 [ 336.772937][T11659] sysfs_warn_dup+0x8e/0xa0 [ 336.777458][T11659] sysfs_do_create_link_sd+0xc0/0x110 [ 336.782853][T11659] device_add_class_symlinks+0x1cf/0x240 [ 336.788505][T11659] device_add+0x507/0xc20 [ 336.792846][T11659] wiphy_register+0x1dad/0x2ae0 [ 336.797727][T11659] ? cfg80211_event_work+0x40/0x40 [ 336.802846][T11659] ? minstrel_ht_alloc+0x88a/0x990 [ 336.807971][T11659] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 336.814058][T11659] ieee80211_register_hw+0x3464/0x4250 [ 336.819548][T11659] ? ieee80211_tasklet_handler+0x20/0x20 [ 336.825182][T11659] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 336.831087][T11659] ? __debug_object_init+0xec/0x450 [ 336.836301][T11659] ? __asan_memset+0x22/0x40 [ 336.840902][T11659] ? __hrtimer_init+0x186/0x270 [ 336.845762][T11659] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 336.851511][T11659] ? mac80211_hwsim_free+0x220/0x220 [ 336.856806][T11659] ? rcu_is_watching+0x15/0xb0 [ 336.861675][T11659] ? kstrndup+0xbd/0x140 [ 336.865940][T11659] hwsim_new_radio_nl+0xdc9/0x1a90 [ 336.871074][T11659] ? __nla_validate+0x50/0x50 [ 336.875785][T11659] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 336.882143][T11659] ? __nla_parse+0x40/0x50 [ 336.886577][T11659] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 336.892913][T11659] genl_family_rcv_msg_doit+0x211/0x310 [ 336.898459][T11659] ? end_current_label_crit_section+0x170/0x170 [ 336.904706][T11659] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 336.910606][T11659] ? bpf_lsm_capable+0x9/0x10 [ 336.915300][T11659] ? security_capable+0x89/0xb0 [ 336.920157][T11659] genl_rcv_msg+0x619/0x7a0 [ 336.924669][T11659] ? genl_bind+0x360/0x360 [ 336.929085][T11659] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 336.935432][T11659] ? ref_tracker_free+0x690/0x840 [ 336.940481][T11659] netlink_rcv_skb+0x241/0x4d0 [ 336.945261][T11659] ? genl_bind+0x360/0x360 [ 336.949688][T11659] ? netlink_ack+0x1180/0x1180 [ 336.954468][T11659] ? __lock_acquire+0x7d40/0x7d40 [ 336.959502][T11659] ? down_read+0x1ac/0x2e0 [ 336.963928][T11659] genl_rcv+0x28/0x40 [ 336.967913][T11659] netlink_unicast+0x751/0x8d0 [ 336.972699][T11659] netlink_sendmsg+0x8d0/0xbf0 [ 336.977488][T11659] ? netlink_getsockopt+0x590/0x590 [ 336.982704][T11659] ? aa_sock_msg_perm+0x94/0x150 [ 336.987654][T11659] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 336.992944][T11659] ? security_socket_sendmsg+0x80/0xa0 [ 336.998405][T11659] ? netlink_getsockopt+0x590/0x590 [ 337.003632][T11659] ____sys_sendmsg+0x5ba/0x960 [ 337.008414][T11659] ? __asan_memset+0x22/0x40 [ 337.013015][T11659] ? __sys_sendmsg_sock+0x30/0x30 [ 337.018034][T11659] ? __import_iovec+0x5f2/0x850 [ 337.022911][T11659] ? import_iovec+0x73/0xa0 [ 337.027427][T11659] ___sys_sendmsg+0x2a6/0x360 [ 337.032110][T11659] ? __sys_sendmsg+0x2a0/0x2a0 [ 337.036901][T11659] ? debug_mutex_init+0x38/0x70 [ 337.041788][T11659] __se_sys_sendmsg+0x1c2/0x2b0 [ 337.046653][T11659] ? __x64_sys_sendmsg+0x80/0x80 [ 337.051607][T11659] ? lockdep_hardirqs_on+0x98/0x150 [ 337.056820][T11659] do_syscall_64+0x55/0xa0 [ 337.061244][T11659] ? clear_bhb_loop+0x40/0x90 [ 337.065934][T11659] ? clear_bhb_loop+0x40/0x90 [ 337.070627][T11659] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 337.076532][T11659] RIP: 0033:0x7f636759c799 [ 337.080951][T11659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.100571][T11659] RSP: 002b:00007f63657f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 337.109003][T11659] RAX: ffffffffffffffda RBX: 00007f6367816180 RCX: 00007f636759c799 [ 337.116980][T11659] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000e [ 337.124952][T11659] RBP: 00007f6367632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 337.133358][T11659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 337.141352][T11659] R13: 00007f6367816218 R14: 00007f6367816180 R15: 00007ffdb2c1b5a8 [ 337.149335][T11659] [ 337.307566][T11663] netlink: 'syz.1.1637': attribute type 4 has an invalid length. [ 337.315759][T11663] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1637'. [ 337.704235][T11678] netlink: 'syz.0.1641': attribute type 21 has an invalid length. [ 337.716021][T11678] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1641'. [ 337.994838][T11690] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1643'. [ 338.015461][T11690] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 338.045442][T11690] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 338.119843][T11694] netlink: 192440 bytes leftover after parsing attributes in process `syz.0.1645'. [ 338.132704][T11694] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 338.243033][T11694] netlink: 'syz.0.1645': attribute type 4 has an invalid length. [ 338.260949][T11694] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1645'. [ 338.311543][T11700] pim6reg1: entered allmulticast mode [ 338.902347][T11714] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1652'. [ 339.098090][T11713] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1650'. [ 339.180248][T11713] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 340.004247][ T5083] Bluetooth: hci3: ISO packet for unknown connection handle 4095 [ 340.018263][T11758] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1664'. [ 340.055720][T11759] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1664'. [ 343.320466][T11773] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1669'. [ 344.128059][T11812] netlink: 'syz.0.1678': attribute type 21 has an invalid length. [ 344.270167][T11810] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.1677'. [ 345.868192][T11848] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.1687'. [ 346.270420][T11866] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1691'. [ 347.683450][T11903] netlink: 'syz.3.1701': attribute type 9 has an invalid length. [ 347.720383][T11903] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1701'. [ 347.956015][T11888] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1697'. [ 348.545765][T11914] netlink: 'syz.2.1705': attribute type 1 has an invalid length. [ 348.563941][T11914] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1705'. [ 348.811701][T11931] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.1707'. [ 348.923728][T11931] netlink: 6332 bytes leftover after parsing attributes in process `syz.2.1707'. [ 349.305362][T11948] netlink: 'syz.0.1713': attribute type 12 has an invalid length. [ 349.325711][T11948] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1713'. [ 349.377077][T11951] netlink: 'syz.0.1713': attribute type 10 has an invalid length. [ 349.459526][T11951] `: Port device hsr_slave_0 added [ 349.772780][T11955] syzkaller0: entered promiscuous mode [ 349.788780][T11955] syzkaller0: entered allmulticast mode [ 351.917393][T11981] tap0: tun_chr_ioctl cmd 1074025675 [ 351.922741][T11981] tap0: persist enabled [ 351.941103][T11984] tap1: tun_chr_ioctl cmd 1074025677 [ 351.950302][T11984] tap1: linktype set to 778 [ 351.967946][T11985] tap0: tun_chr_ioctl cmd 1074025675 [ 351.973362][T11985] tap0: persist enabled [ 352.135897][T11998] netlink: 'syz.2.1726': attribute type 21 has an invalid length. [ 352.144037][T11998] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1726'. [ 352.155239][T11998] netlink: 'syz.2.1726': attribute type 1 has an invalid length. [ 352.318680][T12006] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1727'. [ 352.402665][T12010] netlink: 'syz.2.1729': attribute type 10 has an invalid length. [ 352.578215][ T8212] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 352.707410][T12023] netlink: 'syz.0.1733': attribute type 29 has an invalid length. [ 352.739169][T12023] netlink: 'syz.0.1733': attribute type 29 has an invalid length. [ 352.782911][T12031] netlink: 'syz.0.1733': attribute type 29 has an invalid length. [ 352.803181][T12023] netlink: 'syz.0.1733': attribute type 29 has an invalid length. [ 352.829675][T12034] netlink: 4079 bytes leftover after parsing attributes in process `syz.2.1737'. [ 352.849158][T12023] netlink: 'syz.0.1733': attribute type 29 has an invalid length. [ 355.979177][T12087] tap0: tun_chr_ioctl cmd 35108 [ 356.037538][T12089] netlink: 'syz.3.1754': attribute type 4 has an invalid length. [ 356.082126][T12089] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1754'. [ 358.844269][T12135] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1767'. [ 360.477099][T12152] netlink: 'syz.3.1771': attribute type 1 has an invalid length. [ 360.613668][T12152] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1771'. [ 360.652145][T12159] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1772'. [ 360.664465][T12159] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1772'. [ 360.686181][T12159] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1772'. [ 360.792017][T12161] netlink: 56537 bytes leftover after parsing attributes in process `syz.2.1774'. [ 361.758050][T12183] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1772'. [ 361.811220][T12181] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1778'. [ 361.949429][T12181] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1778'. [ 362.434396][T12196] netlink: 'syz.1.1783': attribute type 7 has an invalid length. [ 362.483354][T12196] netlink: 'syz.1.1783': attribute type 1 has an invalid length. [ 362.545655][T12196] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1783'. [ 362.636385][T12205] netlink: 'syz.2.1787': attribute type 39 has an invalid length. [ 362.762147][T12205] hsr_slave_1 (unregistering): left promiscuous mode [ 363.065549][T12224] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1792'. [ 363.669568][T12237] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1796'. [ 364.194914][T12252] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1800'. [ 364.316256][T12257] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1803'. [ 368.361521][T12305] netlink: 'syz.1.1815': attribute type 29 has an invalid length. [ 368.376693][T12306] netlink: 'syz.0.1816': attribute type 10 has an invalid length. [ 368.393728][T12306] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1816'. [ 368.419556][T12305] netlink: 'syz.1.1815': attribute type 29 has an invalid length. [ 368.508120][T12307] netlink: 'syz.1.1815': attribute type 29 has an invalid length. [ 368.546876][T12309] netlink: 'syz.1.1815': attribute type 29 has an invalid length. [ 368.633795][T12319] delete_channel: no stack [ 368.643952][T12319] delete_channel: no stack [ 368.886121][T12330] netlink: 'syz.2.1822': attribute type 2 has an invalid length. [ 369.645039][T12360] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1831'. [ 369.918345][T12366] netlink: 'syz.1.1833': attribute type 21 has an invalid length. [ 370.131554][T12375] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.1835'. [ 370.143749][T12375] netlink: del zone limit has 8 unknown bytes [ 370.494062][T12380] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1836'. [ 371.281362][T12400] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1841'. [ 371.310517][T12400] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1841'. [ 371.968744][T12412] netlink: 'syz.3.1845': attribute type 21 has an invalid length. [ 372.000298][T12412] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1845'. [ 372.024716][T12412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1845'. [ 372.091484][T12412] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1845'. [ 373.418944][T12452] netlink: 'syz.0.1854': attribute type 3 has an invalid length. [ 373.445711][T12452] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1854'. [ 373.613970][ T5083] Bluetooth: hci1: unknown advertising packet type: 0x80 [ 373.614054][ T5083] Bluetooth: hci1: Malformed LE Event: 0x02 [ 373.898699][T12476] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1862'. [ 376.115613][ T8211] wlan1: Trigger new scan to find an IBSS to join [ 377.133965][T12529] netlink: 'syz.1.1875': attribute type 39 has an invalid length. [ 377.173311][T12529] netlink: 'syz.1.1875': attribute type 21 has an invalid length. [ 377.261496][T12529] -: renamed from syzkaller0 [ 378.216275][T12553] netlink: 'syz.3.1881': attribute type 6 has an invalid length. [ 378.600136][T12565] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.1885'. [ 378.736777][T12570] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1886'. [ 378.824738][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.831396][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.898859][T12573] delete_channel: no stack [ 378.968764][T12580] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 379.008436][T12579] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 379.065766][ T11] wlan1: Trigger new scan to find an IBSS to join [ 381.130299][T12638] netlink: 'syz.1.1905': attribute type 2 has an invalid length. [ 381.155656][T12638] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.1905'. [ 381.212729][T12638] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 381.233072][T12638] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode [ 382.099109][ T6518] wlan1: Trigger new scan to find an IBSS to join [ 383.810424][ T6518] wlan1: Creating new IBSS network, BSSID ce:5c:0d:be:f5:42 [ 384.470653][ T5083] Bluetooth: hci3: unknown advertising packet type: 0x80 [ 384.470724][ T5083] Bluetooth: hci3: Malformed LE Event: 0x02 [ 387.485243][T12686] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1919'. [ 388.620261][ T5083] Bluetooth: hci3: unknown advertising packet type: 0x80 [ 388.620301][ T5083] Bluetooth: hci3: Malformed LE Event: 0x02 [ 389.829574][T12744] netlink: 'syz.3.1935': attribute type 21 has an invalid length. [ 389.873849][T12744] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1935'. [ 390.421638][T12759] netlink: 'syz.2.1939': attribute type 4 has an invalid length. [ 390.440060][T12759] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1939'. [ 390.464150][T12759] netlink: 'syz.2.1939': attribute type 27 has an invalid length. [ 390.485978][T12759] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.1939'. [ 390.960108][T12770] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.1941'. [ 392.006357][T12792] netlink: 'syz.0.1950': attribute type 25 has an invalid length. [ 392.055123][T12792] netlink: 'syz.0.1950': attribute type 9 has an invalid length. [ 392.402816][T12801] netlink: 'syz.1.1953': attribute type 3 has an invalid length. [ 395.545797][ T5083] Bluetooth: hci0: unknown advertising packet type: 0x80 [ 395.545887][ T5083] Bluetooth: hci0: Malformed LE Event: 0x02 [ 400.519198][T12913] ip6gretap0: refused to change device tx_queue_len [ 400.672029][T12918] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1986'. [ 400.698314][T12923] netlink: 'syz.3.1988': attribute type 21 has an invalid length. [ 400.720764][T12918] netlink: 'syz.2.1986': attribute type 29 has an invalid length. [ 400.767313][T12918] netlink: 'syz.2.1986': attribute type 29 has an invalid length. [ 400.777315][T12926] netlink: 'syz.2.1986': attribute type 29 has an invalid length. [ 400.789421][T12918] netlink: 'syz.2.1986': attribute type 29 has an invalid length. [ 400.804194][T12918] netlink: 'syz.2.1986': attribute type 29 has an invalid length. [ 400.980937][T12918] netlink: 'syz.2.1986': attribute type 29 has an invalid length. [ 401.006157][T12918] netlink: 'syz.2.1986': attribute type 29 has an invalid length. [ 401.900522][T12943] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 402.032738][T12950] netlink: 'syz.2.1995': attribute type 10 has an invalid length. [ 402.041239][T12950] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1995'. [ 402.803736][T12966] syzkaller0: entered promiscuous mode [ 402.809463][T12966] syzkaller0: entered allmulticast mode [ 403.376733][ T5083] Bluetooth: hci3: unknown advertising packet type: 0x80 [ 403.376794][ T5083] Bluetooth: hci3: Malformed LE Event: 0x02 [ 405.258827][T12969] netlink: 'syz.1.2001': attribute type 7 has an invalid length. [ 405.268322][T12976] bridge0: entered promiscuous mode [ 405.278327][T12976] bridge0: entered allmulticast mode [ 405.573623][ T5083] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 406.330352][ T5083] Bluetooth: hci1: unknown advertising packet type: 0x80 [ 406.330392][ T5083] Bluetooth: hci1: Malformed LE Event: 0x02 [ 406.966247][T13033] syzkaller0: entered promiscuous mode [ 406.976374][T13033] syzkaller0: entered allmulticast mode [ 407.094142][T13037] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2020'. [ 407.374182][T13041] IPv6: Can't replace route, no match found [ 407.414163][T13045] syzkaller0: entered allmulticast mode [ 407.521865][T13042] delete_channel: no stack [ 407.633911][T13053] netlink: 'syz.1.2026': attribute type 13 has an invalid length. [ 407.663359][T13053] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2026'. [ 407.691633][T13053] syz_tun: refused to change device tx_queue_len [ 407.721771][T13057] netlink: 'syz.1.2026': attribute type 2 has an invalid length. [ 407.748729][T13057] netlink: 'syz.1.2026': attribute type 8 has an invalid length. [ 407.775202][T13057] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2026'. [ 407.837403][T13053] netlink: 'syz.1.2026': attribute type 11 has an invalid length. [ 408.329753][ T5083] Bluetooth: hci0: unknown advertising packet type: 0x80 [ 408.329792][ T5083] Bluetooth: hci0: Malformed LE Event: 0x02 [ 408.770480][T13084] netlink: 'syz.1.2036': attribute type 9 has an invalid length. [ 408.808904][T13084] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2036'. [ 408.913341][T13086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2036'. [ 409.207493][T13093] netlink: 'syz.3.2038': attribute type 21 has an invalid length. [ 409.216890][T13093] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2038'. [ 409.711779][T13113] netlink: 'syz.1.2045': attribute type 21 has an invalid length. [ 410.176612][T13121] netlink: 'syz.3.2046': attribute type 3 has an invalid length. [ 410.186582][T13121] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2046'. [ 410.468204][T13138] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2052'. [ 410.821810][T13149] syzkaller0: entered promiscuous mode [ 410.831661][T13149] syzkaller0: entered allmulticast mode [ 410.910247][T13160] netlink: 'syz.0.2059': attribute type 22 has an invalid length. [ 410.927167][T13160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2059'. [ 410.998270][T13156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.909278][T13179] netlink: 'syz.3.2065': attribute type 23 has an invalid length. [ 413.917525][T13179] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2065'. [ 414.272547][T13198] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.2070'. [ 414.289753][ C1] bridge0: received packet on gretap0 with own address as source address (addr:aa:aa:aa:aa:aa:10, vlan:0) [ 414.396610][ T5083] Bluetooth: hci0: unknown advertising packet type: 0x80 [ 414.396651][ T5083] Bluetooth: hci0: Malformed LE Event: 0x02 [ 415.249090][T13210] netlink: 'syz.3.2075': attribute type 10 has an invalid length. [ 415.265572][T13210] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2075'. [ 415.520361][ T5083] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 415.522484][ T5083] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 417.536555][ T5083] Bluetooth: hci0: command 0x0406 tx timeout [ 418.550441][T13239] netlink: 822 bytes leftover after parsing attributes in process `syz.2.2085'. [ 418.561249][T13239] veth0_to_bond: invalid flags given to default FDB implementation [ 418.777124][T13254] netlink: 'syz.0.2088': attribute type 1 has an invalid length. [ 418.789426][T13254] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2088'. [ 418.955222][T13256] netlink: 'syz.1.2089': attribute type 7 has an invalid length. [ 420.002988][T13269] netlink: 'syz.3.2092': attribute type 41 has an invalid length. [ 420.022662][T13269] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2092'. [ 420.553741][ T5774] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 421.120543][ T5774] Bluetooth: hci0: unexpected event 0x04 length: 151 > 10 [ 422.497963][T13329] netlink: 'syz.0.2110': attribute type 10 has an invalid length. [ 422.719506][T13329] `: Device wg1 is of different type [ 422.829459][T13332] netlink: 'syz.0.2110': attribute type 4 has an invalid length. [ 423.135894][ T5774] Bluetooth: hci0: command 0x0406 tx timeout [ 423.656070][T13360] syzkaller0: entered promiscuous mode [ 423.680354][T13360] syzkaller0: entered allmulticast mode [ 423.768955][T13365] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.2119'. [ 426.525057][T13400] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2128'. [ 428.238938][T13410] netlink: 'syz.2.2130': attribute type 10 has an invalid length. [ 428.249197][T13410] veth0_macvtap: left promiscuous mode [ 428.400163][T13413] netlink: 'syz.0.2131': attribute type 10 has an invalid length. [ 428.418837][T13413] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2131'. [ 428.471282][T13413] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2131'. [ 428.513698][T13421] €Â0: renamed from batadv_slave_1 (while UP) [ 428.739652][T13422] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.2133'. [ 430.078176][T13449] netlink: 'syz.3.2143': attribute type 10 has an invalid length. [ 430.133777][T13449] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2143'. [ 430.182020][T13449] netlink: 'syz.3.2143': attribute type 10 has an invalid length. [ 430.208015][T13449] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2143'. [ 431.054505][ T6520] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.226174][ T6520] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.372053][ T6520] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.538848][ T6520] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.554551][ T5083] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 431.567388][ T5083] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 431.584746][ T5083] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 431.594673][ T5083] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 431.602844][ T5083] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 431.610612][ T5083] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 431.914496][T13487] netlink: 'syz.0.2155': attribute type 12 has an invalid length. [ 431.938496][T13487] netlink: 'syz.0.2155': attribute type 11 has an invalid length. [ 432.007987][T13487] netlink: 188816 bytes leftover after parsing attributes in process `syz.0.2155'. [ 432.428903][T13515] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2159'. [ 432.600837][ T5083] Bluetooth: hci1: Dropping invalid advertising data [ 432.607899][ T5083] Bluetooth: hci1: Malformed LE Event: 0x02 [ 432.740216][T13474] chnl_net:caif_netlink_parms(): no params data found [ 433.100894][ T6520] bridge0: port 5(gretap0) entered disabled state [ 433.158323][ T6520] gretap0 (unregistering): left allmulticast mode [ 433.165130][ T6520] gretap0 (unregistering): left promiscuous mode [ 433.202518][ T6520] bridge0: port 5(gretap0) entered disabled state [ 433.225646][T13534] netlink: 'syz.1.2163': attribute type 9 has an invalid length. [ 433.234437][T13534] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2163'. [ 433.291713][T13533] netlink: 'syz.1.2163': attribute type 10 has an invalid length. [ 433.573957][T13547] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2164'. [ 433.592956][T13474] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.600239][T13474] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.607669][T13474] bridge_slave_0: entered allmulticast mode [ 433.614502][T13474] bridge_slave_0: entered promiscuous mode [ 433.622601][T13474] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.630151][T13474] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.637789][T13474] bridge_slave_1: entered allmulticast mode [ 433.647585][T13474] bridge_slave_1: entered promiscuous mode [ 433.664457][T13547] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2164'. [ 433.675908][T13548] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2164'. [ 433.705861][ T5083] Bluetooth: hci0: command tx timeout [ 433.874767][T13474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.912202][T13474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.013909][T13561] netlink: 'syz.0.2168': attribute type 13 has an invalid length. [ 434.032657][T13561] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2168'. [ 434.062837][T13561] erspan0: refused to change device tx_queue_len [ 434.083970][T13561] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 434.228687][T13474] team0: Port device team_slave_0 added [ 434.267421][T13474] team0: Port device team_slave_1 added [ 434.392209][T13578] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2171'. [ 434.430077][T13474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.451082][T13474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.500735][T13474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.514257][T13474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.522083][T13474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.550109][T13474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.832599][ T6520] hsr_slave_0: left promiscuous mode [ 434.843976][ T6520] bond0: left allmulticast mode [ 434.849006][ T6520] bond_slave_0: left allmulticast mode [ 434.854575][ T6520] bond_slave_1: left allmulticast mode [ 434.863997][ T6520] bridge0: port 4(bond0) entered disabled state [ 434.897934][ T6520] bridge0: port 3(team0) entered disabled state [ 434.912983][ T6520] bridge_slave_1: left allmulticast mode [ 434.918928][ T6520] bridge_slave_1: left promiscuous mode [ 434.924648][ T6520] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.934071][ T6520] bridge_slave_0: left allmulticast mode [ 434.939792][ T6520] bridge_slave_0: left promiscuous mode [ 434.946009][ T6520] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.215824][ T6520] geneve1 (unregistering): left promiscuous mode [ 435.223282][ T6520] geneve1 (unregistering): left allmulticast mode [ 435.233359][ T6520] team0 (unregistering): Port device geneve1 removed [ 435.513716][ T6520] team_slave_1 (unregistering): left promiscuous mode [ 435.523449][ T6520] team_slave_1 (unregistering): left allmulticast mode [ 435.531545][ T6520] team0 (unregistering): Port device team_slave_1 removed [ 435.574616][ T6520] C (unregistering): left promiscuous mode [ 435.581393][ T6520] team0 (unregistering): Port device C removed [ 435.630737][ T6520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.640933][ T6520] bond_slave_1 (unregistering): left promiscuous mode [ 435.690631][ T6520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.699777][ T6520] bond_slave_0 (unregistering): left promiscuous mode [ 435.781247][ T5083] Bluetooth: hci0: command tx timeout [ 435.979750][ T6520] bond0 (unregistering): Released all slaves [ 436.054842][T13474] hsr_slave_0: entered promiscuous mode [ 436.062837][T13474] hsr_slave_1: entered promiscuous mode [ 436.069627][T13474] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 436.079002][T13474] Cannot create hsr debugfs directory [ 436.131739][T13595] netlink: 'syz.1.2173': attribute type 21 has an invalid length. [ 436.139897][T13595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2173'. [ 436.151922][T13596] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2173'. [ 436.526012][ T5083] Bluetooth: hci1: Dropping invalid advertising data [ 436.532854][ T5083] Bluetooth: hci1: Malformed LE Event: 0x02 [ 437.874032][ T5083] Bluetooth: hci0: command tx timeout [ 439.524726][T13629] __nla_validate_parse: 1 callbacks suppressed [ 439.524742][T13629] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.2178'. [ 439.882290][T13644] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2184'. [ 439.913039][T13644] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2184'. [ 439.935474][ T5083] Bluetooth: hci0: command tx timeout [ 440.010768][T13647] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2184'. [ 440.032478][T13649] netlink: 'syz.0.2183': attribute type 2 has an invalid length. [ 440.046957][T13649] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2183'. [ 440.066733][T13644] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2184'. [ 440.260034][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.267109][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.282485][T13474] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 440.309472][T13474] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 440.329871][T13474] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 440.349534][T13474] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 440.531365][T13474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.557625][T13474] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.578251][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.585499][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.604547][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.611772][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.769156][T13671] netlink: 'syz.0.2187': attribute type 10 has an invalid length. [ 440.785484][T13671] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2187'. [ 440.807760][T13671] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 441.053272][T13671] batman_adv: batadv0: Removing interface: veth0_vlan [ 441.090327][T13671] veth1_vlan (unregistering): left allmulticast mode [ 441.177427][T13675] netlink: 'syz.3.2188': attribute type 21 has an invalid length. [ 441.462989][ T5083] Bluetooth: hci1: Dropping invalid advertising data [ 441.469948][ T5083] Bluetooth: hci1: Malformed LE Event: 0x02 [ 441.494571][T13474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.746794][T13474] veth0_vlan: entered promiscuous mode [ 441.806573][T13474] veth1_vlan: entered promiscuous mode [ 441.908694][T13474] veth0_macvtap: entered promiscuous mode [ 441.948866][T13474] veth1_macvtap: entered promiscuous mode [ 442.016859][T13474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.053230][T13474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.077866][T13474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.119210][T13474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.150148][T13474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.195222][T13474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.227373][T13474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.283156][T13474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.315939][T13474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.340077][T13474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.405515][T13474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.446113][T13474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.488052][T13474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.518367][T13474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.573898][T13474] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.589737][T13474] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.600586][T13474] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.632941][T13474] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.937043][T13738] netlink: 'syz.3.2201': attribute type 6 has an invalid length. [ 442.954181][T12470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.962510][T13733] delete_channel: no stack [ 442.987048][T12470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.056355][ T8213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.076823][ T8213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.433310][ T5083] Bluetooth: hci0: unknown advertising packet type: 0x80 [ 443.433372][ T5083] Bluetooth: hci0: Malformed LE Event: 0x02 [ 443.957894][T13772] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2209'. [ 445.588468][T13801] netlink: 'syz.3.2215': attribute type 6 has an invalid length. [ 446.838686][ T5083] Bluetooth: hci1: unknown advertising packet type: 0x31 [ 446.838722][ T5083] Bluetooth: hci1: unknown advertising packet type: 0x0a [ 446.846768][ T5083] Bluetooth: hci1: Malformed LE Event: 0x02 [ 447.504920][T13870] netlink: 135856 bytes leftover after parsing attributes in process `syz.2.2227'. [ 448.771138][T13904] netlink: 'syz.2.2235': attribute type 3 has an invalid length. [ 448.795323][T13902] netlink: 'syz.1.2234': attribute type 153 has an invalid length. [ 448.795413][T13904] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2235'. [ 448.821453][T13902] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.2234'. [ 449.344163][ T5083] Bluetooth: hci0: unknown advertising packet type: 0x31 [ 449.344202][ T5083] Bluetooth: hci0: unknown advertising packet type: 0x0a [ 449.352467][ T5083] Bluetooth: hci0: Malformed LE Event: 0x02 [ 449.562573][T13933] netlink: 'syz.0.2242': attribute type 2 has an invalid length. [ 449.584324][T13933] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2242'. [ 449.936841][T13943] netlink: 'syz.0.2244': attribute type 10 has an invalid length. [ 450.319977][T13955] netlink: 'syz.3.2247': attribute type 5 has an invalid length. [ 450.337675][T13955] netlink: 'syz.3.2247': attribute type 1 has an invalid length. [ 450.348098][T13955] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.2247'. [ 450.504333][T13963] netlink: 'syz.2.2250': attribute type 28 has an invalid length. [ 450.512328][T13963] netlink: 'syz.2.2250': attribute type 4 has an invalid length. [ 450.521675][T13965] netlink: 'syz.3.2251': attribute type 1 has an invalid length. [ 450.531269][T13963] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2250'. [ 450.532227][T13965] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2251'. [ 451.022483][ T5083] Bluetooth: hci0: unknown advertising packet type: 0x31 [ 451.022524][ T5083] Bluetooth: hci0: unknown advertising packet type: 0x0a [ 451.030074][ T5083] Bluetooth: hci0: Malformed LE Event: 0x02 [ 452.056273][T14003] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2262'. [ 452.413467][T14005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.699490][T14024] netlink: 'syz.0.2268': attribute type 21 has an invalid length. [ 452.708294][T14024] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2268'. [ 452.787750][T14027] sock: sock_set_timeout: `syz.0.2269' (pid 14027) tries to set negative timeout [ 452.954060][ T5083] Bluetooth: hci1: unknown advertising packet type: 0x80 [ 452.954108][ T5083] Bluetooth: hci1: Malformed LE Event: 0x02 [ 453.078567][T14037] netlink: 'syz.0.2272': attribute type 21 has an invalid length. [ 453.899950][T14052] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 453.913391][T14052] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 454.169551][T14058] netlink: 'syz.3.2279': attribute type 21 has an invalid length. [ 454.188311][T14058] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2279'. [ 454.494993][T14081] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2289'. [ 454.498442][ T5083] Bluetooth: hci1: unknown advertising packet type: 0x80 [ 454.504114][ T5083] Bluetooth: hci1: Malformed LE Event: 0x02 [ 454.687387][T14081] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2289'. [ 454.700370][T14087] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2291'. [ 454.775609][T14088] netlink: 36727 bytes leftover after parsing attributes in process `syz.2.2290'. [ 454.943175][T14096] : renamed from bond_slave_0 (while UP) [ 454.983898][ T5083] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 455.019959][T14095] delete_channel: no stack [ 455.154951][T14107] sit0: left promiscuous mode [ 455.320120][T14107] sit0: entered promiscuous mode [ 455.458899][T14115] netlink: 'syz.0.2296': attribute type 8 has an invalid length. [ 455.510826][T14115] netlink: 'syz.0.2296': attribute type 1 has an invalid length. [ 455.534708][T14115] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2296'. [ 455.684228][T14117] delete_channel: no stack [ 455.697751][T14117] delete_channel: no stack [ 455.729196][ T5083] Bluetooth: hci0: unknown advertising packet type: 0x80 [ 455.729235][ T5083] Bluetooth: hci0: Malformed LE Event: 0x02 [ 456.061826][T14132] team0: Port device team_slave_0 removed [ 456.069369][T14132] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 456.138014][T14130] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 456.188321][T14132] netlink: 'syz.1.2302': attribute type 21 has an invalid length. [ 456.219160][T14132] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2302'. [ 456.471717][T14143] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2305'. [ 457.666796][ T5083] Bluetooth: hci0: unknown advertising packet type: 0x80 [ 457.666837][ T5083] Bluetooth: hci0: Malformed LE Event: 0x02 [ 457.949425][T14161] netlink: 'syz.1.2311': attribute type 10 has an invalid length. [ 458.032769][T14161] team0: Device wg1 is of different type [ 458.464294][T14169] netlink: 'syz.2.2312': attribute type 10 has an invalid length. [ 458.475917][T14169] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2312'. [ 458.508319][T14169] bridge0: port 3(ipvlan1) entered blocking state [ 458.535944][T14169] bridge0: port 3(ipvlan1) entered disabled state [ 458.542727][T14169] ipvlan1: entered allmulticast mode [ 458.561586][T14169] veth0_vlan: entered allmulticast mode [ 458.584514][T14169] ipvlan1: left allmulticast mode [ 458.599855][T14169] veth0_vlan: left allmulticast mode [ 458.622098][T14169] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 458.849270][T14176] netlink: 204732 bytes leftover after parsing attributes in process `syz.2.2314'. [ 458.863281][T14176] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 459.767920][ T5083] Bluetooth: hci0: unknown advertising packet type: 0x80 [ 459.767960][ T5083] Bluetooth: hci0: Malformed LE Event: 0x02 [ 459.786974][ T28] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 460.571010][T14213] netlink: 'syz.1.2325': attribute type 10 has an invalid length. [ 460.650257][T14213] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 460.905784][T14223] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2328'. [ 460.961170][T14223] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2328'. [ 460.974203][T14223] bridge_slave_1: default FDB implementation only supports local addresses [ 461.042305][T14230] netlink: 703 bytes leftover after parsing attributes in process `syz.1.2331'. [ 461.086800][T14232] sit0: entered allmulticast mode [ 461.101083][T14230] netlink: 703 bytes leftover after parsing attributes in process `syz.1.2331'. [ 461.144395][T14232] sit0: entered promiscuous mode [ 461.244656][ T5083] Bluetooth: hci1: unknown advertising packet type: 0x80 [ 461.244698][ T5083] Bluetooth: hci1: Malformed LE Event: 0x02 [ 462.450431][T14260] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.2337'. [ 462.461589][T14260] netlink: zone id is out of range [ 462.467741][T14260] netlink: zone id is out of range [ 462.473436][T14260] netlink: zone id is out of range [ 462.489862][T14260] netlink: zone id is out of range [ 462.496083][T14260] netlink: zone id is out of range [ 462.505605][T14260] netlink: zone id is out of range [ 462.511318][T14260] netlink: zone id is out of range [ 462.519931][T14260] netlink: zone id is out of range [ 464.369854][T14264] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2338'. [ 464.379419][T14264] net_ratelimit: 333 callbacks suppressed [ 464.379432][T14264] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 465.309863][ T5083] Bluetooth: hci0: unknown advertising packet type: 0x80 [ 465.309905][ T5083] Bluetooth: hci0: Malformed LE Event: 0x02 [ 466.197923][T14309] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2351'. [ 466.227677][ T5083] Bluetooth: hci0: unknown advertising packet type: 0x80 [ 466.227716][ T5083] Bluetooth: hci0: Malformed LE Event: 0x02 [ 466.461433][T14316] netlink: 'syz.2.2354': attribute type 29 has an invalid length. [ 466.501821][T14316] netlink: 'syz.2.2354': attribute type 29 has an invalid length. [ 466.522687][T14317] netlink: 'syz.2.2354': attribute type 29 has an invalid length. [ 466.669502][T14322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.027282][T14347] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2360'. [ 468.097869][T14347] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 468.138488][T14347] CPU: 0 PID: 14347 Comm: syz.3.2360 Not tainted syzkaller #0 [ 468.146133][T14347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 468.156236][T14347] Call Trace: [ 468.159556][T14347] [ 468.162522][T14347] dump_stack_lvl+0x18c/0x250 [ 468.167265][T14347] ? show_regs_print_info+0x20/0x20 [ 468.172521][T14347] ? load_image+0x400/0x400 [ 468.177111][T14347] sysfs_warn_dup+0x8e/0xa0 [ 468.181661][T14347] sysfs_do_create_link_sd+0xc0/0x110 [ 468.187091][T14347] device_add_class_symlinks+0x1cf/0x240 [ 468.192790][T14347] device_add+0x507/0xc20 [ 468.197190][T14347] wiphy_register+0x1dad/0x2ae0 [ 468.202113][T14347] ? cfg80211_event_work+0x40/0x40 [ 468.207252][T14347] ? minstrel_ht_alloc+0x88a/0x990 [ 468.212423][T14347] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 468.218533][T14347] ieee80211_register_hw+0x3464/0x4250 [ 468.224048][T14347] ? ieee80211_tasklet_handler+0x20/0x20 [ 468.229701][T14347] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 468.235612][T14347] ? __debug_object_init+0xec/0x450 [ 468.240838][T14347] ? __asan_memset+0x22/0x40 [ 468.245445][T14347] ? __hrtimer_init+0x186/0x270 [ 468.250314][T14347] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 468.256097][T14347] ? mac80211_hwsim_free+0x220/0x220 [ 468.261409][T14347] ? rcu_is_watching+0x15/0xb0 [ 468.266188][T14347] ? kstrndup+0xbd/0x140 [ 468.270455][T14347] hwsim_new_radio_nl+0xdc9/0x1a90 [ 468.275594][T14347] ? __nla_validate+0x50/0x50 [ 468.280308][T14347] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 468.286677][T14347] ? __nla_parse+0x40/0x50 [ 468.291115][T14347] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 468.297471][T14347] genl_family_rcv_msg_doit+0x211/0x310 [ 468.303036][T14347] ? end_current_label_crit_section+0x170/0x170 [ 468.309391][T14347] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 468.315309][T14347] ? bpf_lsm_capable+0x9/0x10 [ 468.320004][T14347] ? security_capable+0x89/0xb0 [ 468.324881][T14347] genl_rcv_msg+0x619/0x7a0 [ 468.329406][T14347] ? genl_bind+0x360/0x360 [ 468.333835][T14347] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 468.340183][T14347] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 468.346832][T14347] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 468.353535][T14347] netlink_rcv_skb+0x241/0x4d0 [ 468.358322][T14347] ? genl_bind+0x360/0x360 [ 468.362755][T14347] ? netlink_ack+0x1180/0x1180 [ 468.367555][T14347] ? __lock_acquire+0x7d40/0x7d40 [ 468.372614][T14347] ? net_generic+0x1e/0x240 [ 468.377224][T14347] ? down_read+0x1ac/0x2e0 [ 468.381667][T14347] genl_rcv+0x28/0x40 [ 468.385658][T14347] netlink_unicast+0x751/0x8d0 [ 468.390452][T14347] netlink_sendmsg+0x8d0/0xbf0 [ 468.395251][T14347] ? netlink_getsockopt+0x590/0x590 [ 468.400464][T14347] ? aa_sock_msg_perm+0x94/0x150 [ 468.405422][T14347] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 468.410817][T14347] ? security_socket_sendmsg+0x80/0xa0 [ 468.416289][T14347] ? netlink_getsockopt+0x590/0x590 [ 468.421509][T14347] ____sys_sendmsg+0x5ba/0x960 [ 468.426297][T14347] ? __asan_memset+0x22/0x40 [ 468.430899][T14347] ? __sys_sendmsg_sock+0x30/0x30 [ 468.435929][T14347] ? __import_iovec+0x5f2/0x850 [ 468.440829][T14347] ? import_iovec+0x73/0xa0 [ 468.445350][T14347] ___sys_sendmsg+0x2a6/0x360 [ 468.450057][T14347] ? __sys_sendmsg+0x2a0/0x2a0 [ 468.454915][T14347] __se_sys_sendmsg+0x1c2/0x2b0 [ 468.459782][T14347] ? __x64_sys_sendmsg+0x80/0x80 [ 468.464761][T14347] ? lockdep_hardirqs_on+0x98/0x150 [ 468.469983][T14347] do_syscall_64+0x55/0xa0 [ 468.474415][T14347] ? clear_bhb_loop+0x40/0x90 [ 468.479112][T14347] ? clear_bhb_loop+0x40/0x90 [ 468.483826][T14347] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 468.489733][T14347] RIP: 0033:0x7f3cbdd9c799 [ 468.494166][T14347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.513781][T14347] RSP: 002b:00007f3cbecad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 468.522213][T14347] RAX: ffffffffffffffda RBX: 00007f3cbe015fa0 RCX: 00007f3cbdd9c799 [ 468.530282][T14347] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 468.538264][T14347] RBP: 00007f3cbde32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 468.546247][T14347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.554228][T14347] R13: 00007f3cbe016038 R14: 00007f3cbe015fa0 R15: 00007ffd044a4928 [ 468.562324][T14347] [ 468.725460][T14358] IPv6: Can't replace route, no match found [ 469.742168][ T5083] Bluetooth: hci3: unknown advertising packet type: 0x80 [ 469.742209][ T5083] Bluetooth: hci3: Malformed LE Event: 0x02 [ 470.096716][T14391] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2376'. [ 470.390387][T14397] netlink: 'syz.1.2378': attribute type 28 has an invalid length. [ 470.405825][T14397] netlink: 'syz.1.2378': attribute type 29 has an invalid length. [ 470.425840][T14397] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2378'. [ 470.467739][T14409] netlink: 'syz.3.2382': attribute type 5 has an invalid length. [ 470.484098][T14409] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2382'. [ 470.613052][T14412] netlink: 'syz.2.2385': attribute type 29 has an invalid length. [ 470.879782][T14424] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.2388'. [ 470.932922][T14424] openvswitch: netlink: IP tunnel dst address not specified [ 471.197256][T14439] netlink: 138280 bytes leftover after parsing attributes in process `syz.2.2394'. [ 471.215285][T14439] netlink: 'syz.2.2394': attribute type 1 has an invalid length. [ 471.311992][T14442] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2395'. [ 471.323506][T14442] : entered promiscuous mode [ 471.358112][T14449] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2396'. [ 471.385465][T14449] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 471.518696][T14451] cgroup: fork rejected by pids controller in /syz2 [ 471.565616][T14449] netlink: 'syz.1.2396': attribute type 21 has an invalid length. [ 471.589516][T14449] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2396'. [ 471.678315][T14483] netlink: 'syz.3.2398': attribute type 21 has an invalid length. [ 472.348013][ T8213] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.449906][T14579] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.2409'. [ 472.487483][ T8213] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.613328][ T8213] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.743322][ T8213] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.893728][T14589] netlink: 'syz.3.2413': attribute type 29 has an invalid length. [ 472.911666][T14589] netlink: 'syz.3.2413': attribute type 29 has an invalid length. [ 472.928046][T14589] netlink: 'syz.3.2413': attribute type 29 has an invalid length. [ 473.245278][ T5774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 473.268013][T14600] lo: entered allmulticast mode [ 473.268216][ T5774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 473.282148][ T5774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 473.293847][ T5774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 473.302674][ T5774] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 473.311388][ T5774] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 474.530343][T14601] chnl_net:caif_netlink_parms(): no params data found [ 474.962912][T14651] delete_channel: no stack [ 474.981822][T14651] delete_channel: no stack [ 475.060930][T14601] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.073986][T14601] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.085026][T14601] bridge_slave_0: entered allmulticast mode [ 475.096901][T14601] bridge_slave_0: entered promiscuous mode [ 475.117590][T14601] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.124754][T14601] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.181770][T14601] bridge_slave_1: entered allmulticast mode [ 475.201388][T14601] bridge_slave_1: entered promiscuous mode [ 475.366319][T14661] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.2426'. [ 475.387511][ T5774] Bluetooth: hci0: command tx timeout [ 475.409703][T14661] netlink: 'syz.0.2426': attribute type 4 has an invalid length. [ 475.452681][T14661] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2426'. [ 477.457061][ T5774] Bluetooth: hci0: command tx timeout [ 477.913069][T14601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.058773][T14601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.199137][ T8213] hsr_slave_0: left promiscuous mode [ 478.210232][ T8213] hsr_slave_1: left promiscuous mode [ 478.222784][ T8213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.241327][ T8213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.276796][ T8213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.302494][ T8213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.323555][ T8213] bridge_slave_1: left allmulticast mode [ 478.338641][ T8213] bridge_slave_1: left promiscuous mode [ 478.348557][ T8213] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.369997][ T8213] bridge_slave_0: left allmulticast mode [ 478.378077][ T8213] bridge_slave_0: left promiscuous mode [ 478.384197][ T8213] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.462820][ T8213] veth1_macvtap: left promiscuous mode [ 478.469757][ T8213] veth0_macvtap: left promiscuous mode [ 478.480081][ T8213] veth1_vlan: left promiscuous mode [ 478.490110][ T8213] veth0_vlan: left promiscuous mode [ 479.535611][ T5774] Bluetooth: hci0: command tx timeout [ 479.854763][ T8213] team0 (unregistering): Port device team_slave_1 removed [ 479.946779][ T8213] team0 (unregistering): Port device team_slave_0 removed [ 480.028681][ T8213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.091802][ T8213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.493213][ T8213] bond0 (unregistering): Released all slaves [ 480.627784][T14601] team0: Port device team_slave_0 added [ 480.683540][T14601] team0: Port device team_slave_1 added [ 480.784438][T14601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.805417][T14601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.877169][T14601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.913510][T14601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.950239][T14601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.016711][T14601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.151698][T14601] hsr_slave_0: entered promiscuous mode [ 481.202753][T14601] hsr_slave_1: entered promiscuous mode [ 481.224452][T14601] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 481.249818][T14601] Cannot create hsr debugfs directory [ 481.256219][T14728] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 481.263467][T14728] IPv6: NLM_F_CREATE should be set when creating new route [ 481.618549][ T5774] Bluetooth: hci0: command tx timeout [ 484.480083][T14757] netlink: 'syz.0.2448': attribute type 39 has an invalid length. [ 484.720515][T14766] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.2450'. [ 485.049617][T14773] netlink: 'syz.3.2451': attribute type 6 has an invalid length. [ 485.062146][T14773] netlink: 'syz.3.2451': attribute type 3 has an invalid length. [ 485.073470][T14773] netlink: 153952 bytes leftover after parsing attributes in process `syz.3.2451'. [ 485.243080][T14601] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 485.260424][T14601] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 485.291844][T14601] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 485.321344][T14601] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 485.376641][T14778] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2453'. [ 485.418455][T14778] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2453'. [ 485.454792][T14782] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2453'. [ 485.506996][T14778] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2453'. [ 485.544414][T14778] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2453'. [ 485.695059][T14788] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2455'. [ 485.714979][T14601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.727668][T14788] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2455'. [ 485.788793][T14601] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.802152][T14790] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2455'. [ 485.863816][ T8211] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.871056][ T8211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.957607][ T8213] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.964776][ T8213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.099276][T14601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.258953][T14601] veth0_vlan: entered promiscuous mode [ 487.311598][T14601] veth1_vlan: entered promiscuous mode [ 487.394795][T14601] veth0_macvtap: entered promiscuous mode [ 487.407197][T14601] veth1_macvtap: entered promiscuous mode [ 487.443701][T14601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.484597][T14601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.515504][T14601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.535566][T14601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.555406][T14601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.576053][T14601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.588198][T14601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.647711][T14601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.693519][T14601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.711029][T14601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.745422][T14601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.755303][T14601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.785519][T14601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.802728][T14601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.885085][T14601] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.901353][T14601] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.919710][T14601] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.947028][T14601] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.241408][ T8211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.265475][ T8211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.347233][T12471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.355119][T12471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.417919][T14869] netlink: 'syz.0.2470': attribute type 39 has an invalid length. [ 489.240673][T14892] netlink: 'syz.2.2475': attribute type 7 has an invalid length. [ 490.058717][T14910] netlink: 'syz.1.2480': attribute type 3 has an invalid length. [ 490.081108][T14913] __nla_validate_parse: 7 callbacks suppressed [ 490.081566][T14913] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2481'. [ 490.125691][T14910] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2480'. [ 490.316106][ T5083] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 490.335610][ T5083] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 490.344461][ T5083] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 490.361379][ T5083] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 490.373763][ T5083] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 490.383375][ T5083] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 490.572626][T14930] netlink: 'syz.0.2484': attribute type 9 has an invalid length. [ 490.590696][T14930] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2484'. [ 491.150267][ T8211] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.508281][ T8211] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.602818][T14918] chnl_net:caif_netlink_parms(): no params data found [ 491.631728][T14966] IPv6: Can't replace route, no match found [ 491.648098][T14965] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 491.798322][ T8211] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.006074][ T8211] .`: (slave netdevsim0): Releasing backup interface [ 492.056535][ T8211] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.415693][T14990] netlink: 'syz.1.2490': attribute type 10 has an invalid length. [ 492.425516][ T5083] Bluetooth: hci4: command tx timeout [ 492.455518][T14990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.579691][T14990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.641049][T14918] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.656863][T14918] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.674365][T14918] bridge_slave_0: entered allmulticast mode [ 492.702424][T14918] bridge_slave_0: entered promiscuous mode [ 492.712193][T15006] netlink: 'syz.0.2497': attribute type 29 has an invalid length. [ 492.723052][T14918] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.736269][T14918] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.745884][T14918] bridge_slave_1: entered allmulticast mode [ 492.755887][T14918] bridge_slave_1: entered promiscuous mode [ 492.789796][T15003] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2497'. [ 492.799237][T15006] netlink: 'syz.0.2497': attribute type 29 has an invalid length. [ 492.895935][T15008] netlink: 'syz.0.2497': attribute type 29 has an invalid length. [ 492.960036][T15003] netlink: 'syz.0.2497': attribute type 29 has an invalid length. [ 492.994372][T14918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.038558][T14918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.184374][T14918] team0: Port device team_slave_0 added [ 493.243741][T14918] team0: Port device team_slave_1 added [ 493.282046][T15018] netlink: 26 bytes leftover after parsing attributes in process `syz.2.2500'. [ 493.381847][T14918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.405484][T14918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.445414][T14918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.466733][T15018] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2500'. [ 493.837779][T15018] team0: Port device team_slave_0 removed [ 493.905340][T15018] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 493.923434][T14918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.931864][T14918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.965436][T14918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.097267][T14918] hsr_slave_0: entered promiscuous mode [ 494.136028][T14918] hsr_slave_1: entered promiscuous mode [ 494.238903][T14918] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 494.247387][T14918] Cannot create hsr debugfs directory [ 494.255909][T15026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.365493][T15026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.495478][ T5083] Bluetooth: hci4: command tx timeout [ 495.947772][T15061] netlink: 'syz.1.2508': attribute type 29 has an invalid length. [ 496.556217][T15065] netlink: 'syz.2.2509': attribute type 11 has an invalid length. [ 496.580237][ T5083] Bluetooth: hci4: command tx timeout [ 496.817383][T15151] netlink: 'syz.0.2512': attribute type 10 has an invalid length. [ 496.838096][T15061] netlink: 'syz.1.2508': attribute type 29 has an invalid length. [ 498.655498][ T5083] Bluetooth: hci4: command tx timeout [ 500.229938][T15178] IPv6: Can't replace route, no match found [ 500.294363][T15182] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2518'. [ 501.710853][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.717668][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.755187][T14918] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 501.822017][T14918] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 501.952645][T14918] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 502.021094][T14918] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 502.070805][T15235] netlink: 'syz.1.2529': attribute type 1 has an invalid length. [ 502.094528][T15235] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.2529'. [ 502.218679][ T8211] [ 502.221052][ T8211] ====================================================== [ 502.228073][ T8211] WARNING: possible circular locking dependency detected [ 502.235107][ T8211] syzkaller #0 Not tainted [ 502.239518][ T8211] ------------------------------------------------------ [ 502.246528][ T8211] kworker/u4:12/8211 is trying to acquire lock: [ 502.252094][T15239] netlink: 'syz.0.2530': attribute type 3 has an invalid length. [ 502.252752][ T8211] ffff88805e0a0d00 (team->team_lock_key#4){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 502.260693][T15239] netlink: 'syz.0.2530': attribute type 8 has an invalid length. [ 502.270033][ T8211] [ 502.270033][ T8211] but task is already holding lock: [ 502.270042][ T8211] ffff8880790f0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 502.270083][ T8211] [ 502.270083][ T8211] which lock already depends on the new lock. [ 502.270083][ T8211] [ 502.270088][ T8211] [ 502.270088][ T8211] the existing dependency chain (in reverse order) is: [ 502.270092][ T8211] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 502.270092][ T8211] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 502.270111][ T8211] __mutex_lock+0x136/0xcc0 [ 502.270128][ T8211] ieee80211_open+0x144/0x200 [ 502.270140][ T8211] __dev_open+0x2cb/0x430 [ 502.270154][ T8211] dev_open+0xab/0x190 [ 502.270165][ T8211] team_add_slave+0x75f/0x29a0 [ 502.270183][ T8211] do_setlink+0xdfe/0x4130 [ 502.270195][ T8211] rtnl_newlink+0x17da/0x20a0 [ 502.270207][ T8211] rtnetlink_rcv_msg+0x869/0xfa0 [ 502.299990][T15239] netlink: 158280 bytes leftover after parsing attributes in process `syz.0.2530'. [ 502.305960][ T8211] netlink_rcv_skb+0x241/0x4d0 [ 502.305990][ T8211] netlink_unicast+0x751/0x8d0 [ 502.306006][ T8211] netlink_sendmsg+0x8d0/0xbf0 [ 502.306021][ T8211] ____sys_sendmsg+0x5ba/0x960 [ 502.306034][ T8211] ___sys_sendmsg+0x2a6/0x360 [ 502.306045][ T8211] __se_sys_sendmsg+0x1c2/0x2b0 [ 502.306056][ T8211] do_syscall_64+0x55/0xa0 [ 502.306074][ T8211] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 502.306090][ T8211] [ 502.306090][ T8211] -> #0 (team->team_lock_key#4){+.+.}-{3:3}: [ 502.423627][ T8211] __lock_acquire+0x2df1/0x7d40 [ 502.429013][ T8211] lock_acquire+0x19e/0x420 [ 502.434046][ T8211] __mutex_lock+0x136/0xcc0 [ 502.439086][ T8211] team_del_slave+0x32/0x1c0 [ 502.444212][ T8211] team_device_event+0x28d/0xa20 [ 502.449676][ T8211] notifier_call_chain+0x197/0x380 [ 502.455317][ T8211] unregister_netdevice_many_notify+0x100d/0x1900 [ 502.462261][ T8211] unregister_netdevice_queue+0x32c/0x370 [ 502.468517][ T8211] _cfg80211_unregister_wdev+0x16b/0x580 [ 502.474684][ T8211] ieee80211_remove_interfaces+0x49e/0x690 [ 502.481018][ T8211] ieee80211_unregister_hw+0x5d/0x2a0 [ 502.486928][ T8211] mac80211_hwsim_del_radio+0x289/0x480 [ 502.493006][ T8211] hwsim_exit_net+0x58d/0x650 [ 502.498215][ T8211] cleanup_net+0x70a/0xbb0 [ 502.503161][ T8211] process_scheduled_works+0xa5d/0x15d0 [ 502.509233][ T8211] worker_thread+0xa55/0xfc0 [ 502.514351][ T8211] kthread+0x2fa/0x390 [ 502.518944][ T8211] ret_from_fork+0x48/0x80 [ 502.523885][ T8211] ret_from_fork_asm+0x11/0x20 [ 502.529179][ T8211] [ 502.529179][ T8211] other info that might help us debug this: [ 502.529179][ T8211] [ 502.539500][ T8211] Possible unsafe locking scenario: [ 502.539500][ T8211] [ 502.546953][ T8211] CPU0 CPU1 [ 502.552324][ T8211] ---- ---- [ 502.557704][ T8211] lock(&rdev->wiphy.mtx); [ 502.562213][ T8211] lock(team->team_lock_key#4); [ 502.569685][ T8211] lock(&rdev->wiphy.mtx); [ 502.576711][ T8211] lock(team->team_lock_key#4); [ 502.581669][ T8211] [ 502.581669][ T8211] *** DEADLOCK *** [ 502.581669][ T8211] [ 502.589808][ T8211] 5 locks held by kworker/u4:12/8211: [ 502.595177][ T8211] #0: ffff88801a254938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 502.606076][ T8211] #1: ffffc90003977d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 502.616627][ T8211] #2: ffffffff8e3b3d10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 502.626050][ T8211] #3: ffffffff8e3c0d48 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 502.635880][ T8211] #4: ffff8880790f0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 502.646648][ T8211] [ 502.646648][ T8211] stack backtrace: [ 502.652518][ T8211] CPU: 1 PID: 8211 Comm: kworker/u4:12 Not tainted syzkaller #0 [ 502.660135][ T8211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 502.670266][ T8211] Workqueue: netns cleanup_net [ 502.675027][ T8211] Call Trace: [ 502.678295][ T8211] [ 502.681218][ T8211] dump_stack_lvl+0x18c/0x250 [ 502.685893][ T8211] ? load_image+0x400/0x400 [ 502.690385][ T8211] ? show_regs_print_info+0x20/0x20 [ 502.695576][ T8211] ? print_circular_bug+0x12b/0x1a0 [ 502.700770][ T8211] check_noncircular+0x2fc/0x400 [ 502.705702][ T8211] ? print_deadlock_bug+0x5d0/0x5d0 [ 502.710889][ T8211] ? lockdep_lock+0xf5/0x230 [ 502.715468][ T8211] ? __lock_acquire+0x1273/0x7d40 [ 502.720483][ T8211] ? _find_first_zero_bit+0xd3/0x100 [ 502.725758][ T8211] __lock_acquire+0x2df1/0x7d40 [ 502.730614][ T8211] ? verify_lock_unused+0x140/0x140 [ 502.735895][ T8211] ? verify_lock_unused+0x140/0x140 [ 502.741089][ T8211] lock_acquire+0x19e/0x420 [ 502.745579][ T8211] ? team_del_slave+0x32/0x1c0 [ 502.750339][ T8211] ? __might_sleep+0xe0/0xe0 [ 502.754917][ T8211] ? read_lock_is_recursive+0x20/0x20 [ 502.760285][ T8211] __mutex_lock+0x136/0xcc0 [ 502.764782][ T8211] ? team_del_slave+0x32/0x1c0 [ 502.769535][ T8211] ? __lock_acquire+0x7d40/0x7d40 [ 502.774547][ T8211] ? rcu_is_watching+0x15/0xb0 [ 502.779302][ T8211] ? trace_contention_end+0x39/0xe0 [ 502.784484][ T8211] ? __mutex_lock+0x315/0xcc0 [ 502.789150][ T8211] ? team_del_slave+0x32/0x1c0 [ 502.793904][ T8211] ? mutex_lock_nested+0x20/0x20 [ 502.798835][ T8211] ? bond_netdev_event+0xeb/0xf20 [ 502.803900][ T8211] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 502.809533][ T8211] team_del_slave+0x32/0x1c0 [ 502.814117][ T8211] team_device_event+0x28d/0xa20 [ 502.819043][ T8211] notifier_call_chain+0x197/0x380 [ 502.824148][ T8211] unregister_netdevice_many_notify+0x100d/0x1900 [ 502.830554][ T8211] ? lock_chain_count+0x20/0x20 [ 502.835400][ T8211] ? unregister_netdevice_many+0x20/0x20 [ 502.841024][ T8211] ? kernfs_remove_by_name_ns+0x117/0x150 [ 502.846736][ T8211] ? __lock_acquire+0x7d40/0x7d40 [ 502.851763][ T8211] unregister_netdevice_queue+0x32c/0x370 [ 502.857480][ T8211] ? list_netdevice+0x730/0x730 [ 502.862323][ T8211] ? kernfs_remove_by_name_ns+0x117/0x150 [ 502.868034][ T8211] _cfg80211_unregister_wdev+0x16b/0x580 [ 502.873658][ T8211] ieee80211_remove_interfaces+0x49e/0x690 [ 502.879454][ T8211] ? ieee80211_do_stop+0x1e20/0x1e20 [ 502.884725][ T8211] ? rcu_is_watching+0x15/0xb0 [ 502.889487][ T8211] ieee80211_unregister_hw+0x5d/0x2a0 [ 502.894886][ T8211] mac80211_hwsim_del_radio+0x289/0x480 [ 502.900423][ T8211] ? rhashtable_remove_fast+0xc00/0xc00 [ 502.905958][ T8211] hwsim_exit_net+0x58d/0x650 [ 502.910626][ T8211] ? hwsim_init_net+0x90/0x90 [ 502.915293][ T8211] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 502.921348][ T8211] cleanup_net+0x70a/0xbb0 [ 502.925768][ T8211] ? ops_free_list+0x3b0/0x3b0 [ 502.930525][ T8211] ? _raw_spin_unlock_irq+0x23/0x50 [ 502.935714][ T8211] ? process_scheduled_works+0x96f/0x15d0 [ 502.941431][ T8211] ? process_scheduled_works+0x96f/0x15d0 [ 502.947143][ T8211] process_scheduled_works+0xa5d/0x15d0 [ 502.952687][ T8211] ? worker_attach_to_pool+0x380/0x380 [ 502.958138][ T8211] ? assign_work+0x3d2/0x5d0 [ 502.962725][ T8211] worker_thread+0xa55/0xfc0 [ 502.967320][ T8211] kthread+0x2fa/0x390 [ 502.971376][ T8211] ? pr_cont_work+0x560/0x560 [ 502.976043][ T8211] ? kthread_blkcg+0xd0/0xd0 [ 502.980623][ T8211] ret_from_fork+0x48/0x80 [ 502.985030][ T8211] ? kthread_blkcg+0xd0/0xd0 [ 502.989610][ T8211] ret_from_fork_asm+0x11/0x20 [ 502.994373][ T8211] [ 503.172118][ T8211] team0: Port device wlan1 removed [ 503.498359][ T8211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.516653][ T8211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.538193][ T8211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.555514][ T8211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.576036][ T8211] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 503.583149][ T8211] batman_adv: batadv0: Removing interface: virt_wifi0 [ 503.603513][ T8211] veth1_macvtap: left promiscuous mode [ 503.958893][ T8211] team0 (unregistering): Port device team_slave_1 removed [ 504.004476][ T8211] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.041337][ T8211] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.121941][ T8211] .` (unregistering): (slave batadv0): Releasing backup interface [ 504.180755][ T8211] .` (unregistering): Released all slaves [ 504.764472][ T8211] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.832844][ T8211] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.891588][ T8211] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.941910][ T8211] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.058001][ T8211] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.141060][ T8211] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.190757][ T8211] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.312586][ T8211] bond0: (slave netdevsim0): Releasing backup interface [ 505.321145][ T8211] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.443134][ T8211] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.501313][ T8211] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.551831][ T8211] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.619721][ T8211] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.957051][ T8211] ip6gretap0 (unregistering): left allmulticast mode [ 505.963761][ T8211] ip6gretap0 (unregistering): left promiscuous mode [ 505.970584][ T8211] Ÿë: port 1(ip6gretap0) entered disabled state [ 506.422827][ T8211] bridge0: port 3(gretap0) entered disabled state [ 506.440007][ T8211] gretap0 (unregistering): left allmulticast mode [ 506.446694][ T8211] gretap0 (unregistering): left promiscuous mode [ 506.453099][ T8211] bridge0: port 3(gretap0) entered disabled state [ 507.654401][ T8211] hsr_slave_0: left promiscuous mode [ 507.660430][ T8211] hsr_slave_1: left promiscuous mode [ 507.670309][ T8211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.679060][ T8211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.688585][ T8211] bridge_slave_1: left allmulticast mode [ 507.694245][ T8211] bridge_slave_1: left promiscuous mode [ 507.700115][ T8211] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.708910][ T8211] bridge_slave_0: left allmulticast mode [ 507.714545][ T8211] bridge_slave_0: left promiscuous mode [ 507.720492][ T8211] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.730561][ T8211] hsr_slave_0: left promiscuous mode [ 507.736752][ T8211] hsr_slave_1: left promiscuous mode [ 507.742416][ T8211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 507.750645][ T8211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.758231][ T8211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.767100][ T8211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.774575][ T8211] bridge_slave_1: left allmulticast mode [ 507.780345][ T8211] bridge_slave_1: left promiscuous mode [ 507.786266][ T8211] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.794322][ T8211] bridge_slave_0: left allmulticast mode [ 507.800172][ T8211] bridge_slave_0: left promiscuous mode [ 507.805956][ T8211] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.816359][ T8211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 507.823760][ T8211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.831836][ T8211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.839400][ T8211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.846961][ T8211] bridge_slave_1: left allmulticast mode [ 507.852586][ T8211] bridge_slave_1: left promiscuous mode [ 507.859940][ T8211] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.868383][ T8211] bridge_slave_0: left promiscuous mode [ 507.874001][ T8211] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.886419][ T8211] hsr_slave_0: left promiscuous mode [ 507.892037][ T8211] hsr_slave_1: left promiscuous mode [ 507.900400][ T8211] veth1_macvtap: left promiscuous mode [ 507.908686][ T8211] veth0_macvtap: left promiscuous mode [ 507.914214][ T8211] veth1_vlan: left promiscuous mode [ 507.922177][ T8211] veth0_vlan: left promiscuous mode [ 507.928827][ T8211] veth1_macvtap: left promiscuous mode [ 507.934328][ T8211] veth0_macvtap: left promiscuous mode [ 507.939954][ T8211] veth1_vlan: left promiscuous mode [ 507.945210][ T8211] veth0_vlan: left promiscuous mode [ 508.143318][ T8211] team0 (unregistering): Port device team_slave_1 removed [ 508.173194][ T8211] team0 (unregistering): Port device team_slave_0 removed [ 508.202641][ T8211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 508.227825][ T8211] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 508.277902][ T8211] bond0 (unregistering): Released all slaves [ 508.430841][ T8211] team0 (unregistering): Port device team_slave_1 removed [ 508.476657][ T8211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 508.510438][ T8211] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 508.571820][ T8211] bond0 (unregistering): Released all slaves [ 508.764812][ T8211] ` (unregistering): Port device hsr_slave_0 removed [ 508.810379][ T8211] ` (unregistering): Port device team_slave_1 removed [ 508.838599][ T8211] ` (unregistering): Port device C removed [ 508.863179][ T8211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 508.892946][ T8211] bond0 (unregistering): (slave 10): Releasing backup interface [ 508.979493][ T8211] bond0 (unregistering): Released all slaves [ 509.229269][ T8211] team0 (unregistering): Port device macvlan0 removed [ 509.360950][ T8211] team0 (unregistering): Port device team_slave_1 removed