last executing test programs: 9.103443987s ago: executing program 2 (id=4015): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0xf}}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000380)={&(0x7f00000001c0)=@generic, 0x80, &(0x7f0000001600)=[{&(0x7f0000000240)=""/142, 0x8e}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000300)=""/93, 0x5d}, {&(0x7f0000000500)=""/253, 0xfd}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x5}, 0x2060) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@struct={0x8, 0x2, 0x0, 0xf, 0x0, 0xffffffff, [{0xe, 0x0, 0x3}, {0x7, 0x3, 0xfffffffd}]}]}, {0x0, [0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f0000000040)=""/249, 0x46, 0xf9, 0x6}, 0x28) (rerun: 32) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b8c373be35c6e17aa31046a876c1d0000007ea60864160af26508001dc0c3000200340031009ee517d34460bc24eab556a705251e618294ff0051f60a84c9f472736f67c5e73bb9e5c446fa30be62cbd4938037e786", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44a904020000000000000000000005100013", 0x1f}], 0x1}, 0x4090) (async) r2 = socket$kcm(0x10, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc29a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x9, @private1}}, 0xa0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) (async) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0xfffffffc, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) (async, rerun: 32) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000020"], 0x33fe0) (async, rerun: 32) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd028ef8020ab0700040005234538ba55"], 0xfe33) 8.908700889s ago: executing program 3 (id=4017): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002e2e0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x1800}, 0x0) 8.783191376s ago: executing program 2 (id=4018): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x11201, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4136}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000300)="00000000000000000000e836b520", 0xe}], 0x1}, 0x8080) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94) (rerun: 64) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = socket$kcm(0x10, 0x400000002, 0x0) (rerun: 64) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d80)="5c0000007a006bcd9e3fe3dc6e08170007000054250ec000488bc3a00000e517d34460bc24fff3000005251e4e82949a3651f668c3664402682fb6e27bbfa83b5cae0300c9fcd1938037e786a600"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x0, 0x0, 0x2, 0x0, 0x0, 0x10}, @exit={0x95, 0x0, 0x7b00}]}, &(0x7f0000000040)='GPL\x00', 0x6, 0x8b, &(0x7f0000000080)=""/139}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x2) (async) socket$kcm(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async, rerun: 32) socket$kcm(0x10, 0x2, 0x4) (rerun: 32) 6.566579626s ago: executing program 0 (id=4025): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x4, @perf_bp={0x0, 0x3}, 0x8010, 0x5, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) unlink(&(0x7f0000000040)='./cgroup/../file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_clone(0x60080, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x2, 0x7, 0x6, 0x3, 0x0, 0x8, 0x40010, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x31a26872, 0x4, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x3, 0x8, 0x3c68, 0xe6, 0x9, 0x0, 0x7, 0x0, 0x1}, r3, 0xd, r0, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r5}, 0x8) write$cgroup_int(r6, &(0x7f00000001c0), 0xfffffdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f00fff9000000000b00000018110000", @ANYRES32=r4, @ANYBLOB="0080ff0000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000bd0a060000000000d500f4ff0100030018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000006500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x94) 6.396925466s ago: executing program 4 (id=4027): socket$kcm(0xa, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x1c, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0x71, 0x0, 0x1, 0x4d}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x2, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 6.374837597s ago: executing program 2 (id=4028): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0, 0x26, 0x0, 0x10000}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000042c7c08e000000000095000000"], &(0x7f0000000480)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r2, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000bada3115d3ab307bbdee1b58", @ANYRES32, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x2, 0x3, 0xff, &(0x7f0000000040)) socket$kcm(0xa, 0x5, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="0f0200003a000517d25a80648c63940d0324fc600b020000280008c321d51f000200080000003e37eb248833c33ccf43bf38", 0x32}, {&(0x7f0000000240)="14ea6b09a80fdd9810700f03d15a4c5ed13c5c9768b359f879a6db6ee18a54321484f4f48481dc5f007ccb4e5142a37bb45726fa7e5362f171c9a4ee99949c6e867251ba84edb024a97e8be1ad62727bb4bed90e4a62941a8336517c6f875606f41898dd831b4a7aec1b41c0c135332020604e9c34ccde232d5b9c76f91adf73c72a6cd62933753ec2263f5067bff09d4bcc1c5665c74e9bb7bc525daaffd17491087a5ffd5fd65eb611c415a9c885535e7d8f4c8058ad267e61da6db9585f4b41357e4823de2a70f4399ed933edbc", 0xcf}, {&(0x7f0000000340)="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", 0xfd}, {&(0x7f0000000100)="de19f496ca4908ffcc8049bc7dae9c6a1d", 0x11}], 0x4, 0x0, 0x0, 0x6c000000}, 0x0) r7 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0xfffffffffffffffe}, 0x10c3, 0x80, 0x8, 0x0, 0x0, 0x1, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="5c00000014006b03000000d86e6c1d00028440fcffff564500004e23e3f58e76110165f450e71b0075e30025", 0x2c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000440)='GPL\x00') close(r4) socket$kcm(0xa, 0x2, 0x3a) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'veth0_virt_wifi\x00', @random="c600"}) 6.283437033s ago: executing program 1 (id=4029): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x0, 0x28}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f00000001c0), 0x0}, 0x20) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0xa00}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) close(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 6.278391513s ago: executing program 3 (id=4030): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000400000000000082ec4b8431ac0502efca80142f26993a411fb7d234ce09f6b2a241518386b46ece8c0d6f2818b31e2314b463d3d4838c68de728bf9a2eb1f4d1d7f8326491d964a9644c95790f418643a661b3a96e42acbb364394f8fd9ccdc194c33eddf8db10e07c99780fb956e3b14a4237fc65b9a992b5c4c20dd5c26d6be8943b1ac5d5a8b247da84da2cc869434357f"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000073013500000000009500000000000000fc87e45434febf37a84d5ecc15e825c298da66f558545cd4c7444c609d364b8a66b27a7e9841edd43b6e341e957227e7da0542a2c9f72f2d037fe2f2d5c4"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703360000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r8}, &(0x7f0000000280), &(0x7f0000000240)=r5}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f00000001c0)=']', 0x1}], 0x2}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000680)=ANY=[@ANYRESOCT=r3], 0xfe33) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYRES64=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x10000000}, 0x10}, 0x94) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r12, &(0x7f0000000cc0)={&(0x7f00000008c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000980)="c15f3c91fc39837bc9091e2832f35f5fcc3ce865ad2d39e7857f882fde0057bf8bc79165c97f48738f502244d893ffcdb3babcbadbc6c370956907149147ac570fb289510d73b0655685478e7b80cb5cb87cad8803f9b2bc6100ce34a427f5c0f31954440de9f55324b6525f0c5c50bfd875beec1befd236bdf0545e35370f085dc31866b3765b41c3f309ec7fe04fcd677ffbb9d667e209391741f598bf0a8aa6bcd60a861a95a56662c92da3ec85", 0xaf}, {&(0x7f0000000a40)="67f830699d8d2687401ad82f965d08f320a5694105d7c59450d2f9ce56d5c52b2a3134980580b60a9f60493ef027705463899a629f8ec7f2bf82ca1f32a26b676872e2aea000f8ddc767f3b0", 0x4c}, {&(0x7f0000000ac0)="bb7e518f7bd35d5b644a5d80f31a4bce19946f21c8c230833dedbc88acf28fc50ab1dcf7390393c857ea2986dee6b838b5d622aba14852e2678674ffb563b0c12ae6abfa8c6307d4a35495352eeafa8cd6598a0781106f049073dd4e6fc3f4c029eb60f3606d642db5e3b70a79792a8fee537ccc9d508c12c8c9e3d42543e77cb7d944f811916d4ba1640e95d722ee7485db025d2eed6fd17cffc2cb4bd3bef2906e289fd58623e342fa6c5be2cfabb4bf4e934692868f526b50284055ec13cad4f1bc88084d1eda858c242ba570", 0xce}, {&(0x7f0000000bc0)="6a5050fadcbc58ef2ff572a1a56fa210384c7608a7488535b5e05705eec1dbd96f8dad5342eb8b012d8ac2939f46d096d571253d5e21deaad4c8acc58b47091d397b63b61ea301417c9c7b86439f13d0f3cfe30e6d9ad68ee61e7ca8705b9d9b070e9e94b6b1cd50e8da066f708437f6", 0x70}, {&(0x7f0000000d40)="086dfdf129eb0a760c9e26cbd9164aae06338435a6726e8af8ddac59c96756c38bfcda7922b9a6d1aece8f30a88e998e2c48f2e3b5e4c2b8613805f220531cfb1411e0dc340ca276d4f3f7a23972b50bbb8227d653b6f655422f32a0fed6e8760e9444f5190a7b4396a78c3a9f1872215291e723b2779f9450a2c2c508045c7d3ce5aa46a5cb5c859115c48988c10cab5b3f0a0f2fe3c15b3aadceaf18d61ec6ac3c9faf62dcaed5c16f0dee9ec90fb45811e160c62b4da0628f947eb1e4f5a842f9a84e552e", 0xc6}], 0x5, 0x0, 0x0, 0xc000}, 0x10) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r11, 0x800454e0, &(0x7f0000000040)=r10) r13 = socket$kcm(0x23, 0x2, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r13, 0x1, 0x3e, &(0x7f00000000c0)=r14, 0x4) 5.867185457s ago: executing program 1 (id=4031): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) 5.853645068s ago: executing program 4 (id=4032): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4d31, 0x44440, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x2, 0x0, 0x5}, 0x0, 0xffffffffffff7fff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1013, &(0x7f0000000a40)=""/4115, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x21) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831373f00000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f11"], 0xfdef) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xc0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.482905959s ago: executing program 0 (id=4033): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x104000, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000140)="d80000001a0081044e81f782db4cb9040a1d08007b49000000000000080005007a010401a80016002000034004000000035c04613cd67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370ef2bebe296ef2b79ff44458612c", 0xd9}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8927, &(0x7f0000000180)='\xcaOKz:|\x7f\xa4Fx\xe1\xf7m!c\x9f\x9a\xf3y\x1fo\xf8b\v\xfe1\x99\xf0\xa2\xf9\x98\x05\xb5\xb3j\xf8\xea\xd7\xe2\xdf\xbf\x1f\t\"\xc3\x11\xb93\x185\xdfD\xd9(b\x11\xb5F3{0\x0e\x90\xc3i\xd3\xce^\xf2\x84\x92\x9a\x16\xa6\x05\xbfq\x11\x03<\xc5\x0f*\x1e\xdc%\xf1\xdd\x01\xb2\xc0\xab:\x9f\x8b\x1e}+\xff\xa9kE\t;\xdb\x8d\xd9v3\x98\xad\xb9\bPd\x13wl\xe3\xc5\xe9\x90') bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[], 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4000000}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4040044) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1a, &(0x7f0000000180)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000be0900000000000055090100000000089500000000000000bd0a0600000000003500f4ff01000000dd90fcff0000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000006000000bf91000000000000b702000003000000850000002a000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x1, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x23) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r1, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x7, [@const={0xf, 0x0, 0x0, 0xa, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}, @ptr={0xb, 0x0, 0x0, 0x2, 0x1}, @union={0xf, 0x4, 0x0, 0x5, 0x1, 0x2, [{0x9, 0x5, 0xb0}, {0x1, 0x2, 0x2}, {0x3, 0x2}, {0x9, 0x4, 0x7}]}, @restrict={0x10}, @var={0x10, 0x0, 0x0, 0xe, 0x3, 0x2}, @fwd={0xf}, @ptr={0xa, 0x0, 0x0, 0x2, 0x1}, @float={0xd, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x30, 0x30, 0x30, 0x30, 0x61]}}, &(0x7f0000000600)=""/75, 0xcb, 0x4b, 0x0, 0x200}, 0x28) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x18, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @alu={0x4, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffff8, 0x10}, @map_val={0x18, 0xb, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x7f}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0x41, 0xe3, &(0x7f00000002c0)=""/227, 0x40f00, 0x40, '\x00', r5, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x3, 0xa, 0x4, 0x10000}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000740)=[r1, r1, r7, r1, r1, r8, r1, r1, r1], &(0x7f0000000880)=[{0x2, 0x3, 0xf, 0xa}, {0x2, 0x2, 0xe, 0x2}, {0x4, 0x3, 0x2, 0x8}, {0x2, 0x2, 0xb, 0xc}, {0x1, 0x4, 0x1, 0x4}, {0x2, 0x4, 0xa, 0x5}, {0x5, 0x4, 0xe, 0x7}, {0x1, 0x2, 0x4, 0x8}, {0x5, 0x5, 0x5, 0x2}, {0x1, 0x3, 0xb, 0x6}], 0x10, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001cc0)={0x6, 0x16, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18230000", @ANYRES32=r7, @ANYBLOB="0000000008000000c2a2f4fff0ffffff18210000", @ANYRES32=r4, @ANYBLOB="0000000001000000d855fcff1000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000009520fefff0ffffff8520000004000000186000000800000000000000000000001801000020786c2500000000002020207b1af8ff0000000000a100000000000007010000f8ffffffb7020000f8c0b6a9b7030000caffffff8500000006000000"], &(0x7f0000000780)='syzkaller\x00', 0xb, 0x89, &(0x7f0000000b80)=""/137, 0x41100, 0x2a, '\x00', r5, 0x25, r8, 0x8, &(0x7f0000000940)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000980)={0x1, 0xf, 0x10b, 0xd}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000c40)=[{0x5, 0x2, 0x1, 0x9}], 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) 4.861231156s ago: executing program 2 (id=4034): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602fd0000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x804) 4.852645046s ago: executing program 4 (id=4035): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000100ffff000000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000002000008500000086000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x6, 0x40000, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x4) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7}, 0x0, 0xfff0000000000003, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x20000000000002a5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e00203003d000b08d25a80648c7494f90324fc600b0002400a000000053582c137153e37000c018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x8927, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x10) 4.647748518s ago: executing program 3 (id=4036): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000020000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) 4.475616078s ago: executing program 0 (id=4037): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000540)={0xffffffffffffffff}, 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000580)=@generic={&(0x7f0000000500)='./file0\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000ff08ffff0000000000000000850000004100000085000009d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.44621625s ago: executing program 1 (id=4038): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x2040) socket$kcm(0x22, 0x2, 0x21) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="a8dd00"/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000040000000200"/21], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r3, 0x58, &(0x7f0000000380)}, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000100)=0x8, 0x12) ioctl$SIOCSIFHWADDR(r6, 0x4030582b, &(0x7f0000000000)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x20100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703300000001ffcffffff000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x9, 0x81, 0xb, 0x1, 0x0, 0x400, 0x20000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000140)}, 0x8, 0x6, 0x7, 0x4, 0x5, 0x532, 0x1, 0x0, 0x8, 0x0, 0x1}, r2, 0x7, 0xffffffffffffffff, 0x4) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400800142603600e120800160000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee50300000000000000b791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x6000}, 0x10) 4.360290795s ago: executing program 2 (id=4039): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41000}, 0x94) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4100, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000240)=r0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x2, 0x0, 0x0, 0x0, 0x0, 0x35a05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x500, 0x2}, 0x1075, 0x6, 0x0, 0x0, 0xffffffffffffbbfe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1c0000000000000}, 0x0, 0x1, 0xffffffffffffffff, 0x1) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) 3.747691051s ago: executing program 0 (id=4040): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000b0000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b030000000000006361"], 0x0, 0x52}, 0x28) 3.747087061s ago: executing program 3 (id=4041): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x2040) socket$kcm(0x22, 0x2, 0x21) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYBLOB="a8dd00"/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000040000000200"/21], 0x50) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x8, 0x12) ioctl$SIOCSIFHWADDR(r5, 0x4030582b, &(0x7f0000000000)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x20100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703300000001ffcffffff000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x9, 0x81, 0xb, 0x1, 0x0, 0x400, 0x20000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000140)}, 0x8, 0x6, 0x7, 0x4, 0x5, 0x532, 0x1, 0x0, 0x8, 0x0, 0x1}, r2, 0x7, 0xffffffffffffffff, 0x4) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400800142603600e120800160000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee50300000000000000b791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x6000}, 0x10) 3.746120771s ago: executing program 4 (id=4042): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x26c787988cd92447) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x19, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000080), 0x2) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="180000003f000b05d25a601037153e3704021680fc0b0900", 0x18}], 0x1}, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x13, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, @fallback=0x2b, r2, 0x8, &(0x7f0000000740)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, r2, 0x0, &(0x7f0000000980)=[r2, r4], 0x0, 0x10, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1200000001000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000000100"/20, @ANYRES32=0x0], 0x50) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1e, 0xd, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="f1fffc000400004008000000efff79a47ce446d8071e701475d793b6713fa74a00", @ANYRES32=r2, @ANYBLOB='\n\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="01000000000000000500"/27], 0x50) socket$kcm(0x29, 0x5, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0xa, 0x0, 0x0) write$cgroup_subtree(r2, 0x0, 0xfdef) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="1c000000210081044e81f782db44b9040200000000806c0100001500", 0x1c}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x23, 0x0, &(0x7f0000000140)="c1188e19b95de5fe4284860186dda955d7c84d7a7f9ea77d737d598e5751b15a469faf", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) 3.663903616s ago: executing program 2 (id=4043): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) 3.548841253s ago: executing program 1 (id=4044): socket$kcm(0xf, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffed4, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff00) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0x10000000000, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000006007000000441c0503"], 0x30}, 0x40880) 3.479203037s ago: executing program 0 (id=4045): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4d31, 0x44440, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x2, 0x0, 0x5}, 0x0, 0xffffffffffff7fff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1013, &(0x7f0000000a40)=""/4115, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x21) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831373f00000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f11"], 0xfdef) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xc0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.196447443s ago: executing program 4 (id=4046): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xc1, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$sock_attach_bpf(r3, 0x6, 0xd, &(0x7f0000000040)=r3, 0x4) sendmsg$inet(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20000014) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00', @broadcast}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r4, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0, 0xc4, &(0x7f0000000200)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x9f, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r5, 0x0, 0x4) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 2.872982682s ago: executing program 1 (id=4047): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000400000000000082ec4b8431ac0502efca80142f26993a411fb7d234ce09f6b2a241518386b46ece8c0d6f2818b31e2314b463d3d4838c68de728bf9a2eb1f4d1d7f8326491d964a9644c95790f418643a661b3a96e42acbb364394f8fd9ccdc194c33eddf8db10e07c99780fb956e3b14a4237fc65b9a992b5c4c20dd5c26d6be8943b1ac5d5a8b247da84da2cc869434357f"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000073013500000000009500000000000000fc87e45434febf37a84d5ecc15e825c298da66f558545cd4c7444c609d364b8a66b27a7e9841edd43b6e341e957227e7da0542a2c9f72f2d037fe2f2d5c4"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703360000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r8}, &(0x7f0000000280), &(0x7f0000000240)=r5}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{0x0}, {&(0x7f00000001c0)=']', 0x1}], 0x2}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000680)=ANY=[@ANYRESOCT=r3], 0xfe33) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYRES64=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x10000000}, 0x10}, 0x94) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r12, &(0x7f0000000cc0)={&(0x7f00000008c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000980)="c15f3c91fc39837bc9091e2832f35f5fcc3ce865ad2d39e7857f882fde0057bf8bc79165c97f48738f502244d893ffcdb3babcbadbc6c370956907149147ac570fb289510d73b0655685478e7b80cb5cb87cad8803f9b2bc6100ce34a427f5c0f31954440de9f55324b6525f0c5c50bfd875beec1befd236bdf0545e35370f085dc31866b3765b41c3f309ec7fe04fcd677ffbb9d667e209391741f598bf0a8aa6bcd60a861a95a56662c92da3ec85", 0xaf}, {&(0x7f0000000a40)="67f830699d8d2687401ad82f965d08f320a5694105d7c59450d2f9ce56d5c52b2a3134980580b60a9f60493ef027705463899a629f8ec7f2bf82ca1f32a26b676872e2aea000f8ddc767f3b0", 0x4c}, {&(0x7f0000000ac0)="bb7e518f7bd35d5b644a5d80f31a4bce19946f21c8c230833dedbc88acf28fc50ab1dcf7390393c857ea2986dee6b838b5d622aba14852e2678674ffb563b0c12ae6abfa8c6307d4a35495352eeafa8cd6598a0781106f049073dd4e6fc3f4c029eb60f3606d642db5e3b70a79792a8fee537ccc9d508c12c8c9e3d42543e77cb7d944f811916d4ba1640e95d722ee7485db025d2eed6fd17cffc2cb4bd3bef2906e289fd58623e342fa6c5be2cfabb4bf4e934692868f526b50284055ec13cad4f1bc88084d1eda858c242ba570", 0xce}, {&(0x7f0000000bc0)="6a5050fadcbc58ef2ff572a1a56fa210384c7608a7488535b5e05705eec1dbd96f8dad5342eb8b012d8ac2939f46d096d571253d5e21deaad4c8acc58b47091d397b63b61ea301417c9c7b86439f13d0f3cfe30e6d9ad68ee61e7ca8705b9d9b070e9e94b6b1cd50e8da066f708437f6", 0x70}, {&(0x7f0000000d40)="086dfdf129eb0a760c9e26cbd9164aae06338435a6726e8af8ddac59c96756c38bfcda7922b9a6d1aece8f30a88e998e2c48f2e3b5e4c2b8613805f220531cfb1411e0dc340ca276d4f3f7a23972b50bbb8227d653b6f655422f32a0fed6e8760e9444f5190a7b4396a78c3a9f1872215291e723b2779f9450a2c2c508045c7d3ce5aa46a5cb5c859115c48988c10cab5b3f0a0f2fe3c15b3aadceaf18d61ec6ac3c9faf62dcaed5c16f0dee9ec90fb45811e160c62b4da0628f947eb1e4f5a842f9a84e552e", 0xc6}], 0x5, 0x0, 0x0, 0xc000}, 0x10) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r11, 0x800454e0, &(0x7f0000000040)=r10) r13 = socket$kcm(0x23, 0x2, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r13, 0x1, 0x3e, &(0x7f00000000c0)=r14, 0x4) 2.290210506s ago: executing program 3 (id=4048): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="00000000000000002702000014005800b7030000000000008500000059000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000c80)='syzkaller\x00'}, 0x94) (async) sendmsg(r0, &(0x7f0000000a40)={&(0x7f0000000380)=@ieee802154={0x24, @none={0x0, 0x1}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000580)="4ccead290104f012968e05e4cc7e871e640b0c87593e63b490da301f824f58001040d2a48afc7511f3d030ad72812cf2a9930758636d9040543edd69acefc87e1e80ba0dc13c405af0feab082e1413c6f7c5282418bf23f191932a2ddb373d5b6df8eac2f9a5475b65a70b1c13d3a188d776a2c28e062b58ba4beefc422e21d1ca6e2ce3d500c4b22b3b8dec91d3af06be529f1bc82ef05b4422f9c3d0d959a425e648be1c07129c33744b5cd3f73f5275e9f5382601470f43b8b26f75", 0xbd}], 0x1, &(0x7f0000000640)=[{0xb8, 0x118, 0x298, "f0cc1e6b4cfd3edfd6c447da979d9f8a8d8451548205f4f12e58a6a64ebf87f9a83074a9ca958e29dbb1e1856c92b5f38c764278679bc020fe63023d2623e422b5b2051ff936b83a5cb94e1ced5e134aa6967ad886acdcff05443186123977880ef9d1c1722f3c35de2ac63486f9d6bd58523c0551cbce24c386bdbd8dbc7e3780808e19109aa9fab2a97e8cf4dc4d60d41063e8a0d891134ca3f8b4c8abd2bda8d1"}, {0x60, 0x10e, 0xd, "24faddc8a07df6be91aaa7d9863f2afb5a2f7a7b8169e0edc1aeadc93d51a13165270b65df76db984d235583f15d62882b64ae85b0a93c25cc79bbd3e5bdcb16e2ac018f694142cd41c6be1d"}, {0x28, 0x6, 0x0, "1000052f0709f88bc43c6bfd7778b2c504e5"}, {0x50, 0x3a, 0x7, "e40db7656022ea1340a89d07d2c58a7a5f0268e2b88f9f024f17a715859e17f31597f82ccbb176298ac7bb14fe4fbe1ebeed32e129dc0903ca2f9d7f13"}, {0xa8, 0x10a, 0xd, "822ecfe8ceab3cde0c382be08d6ddced9a91164ffee0e161b654595703942cd98bc460f6120bc2933ecd5cc6399baeeac53f0c91d8a8cce7f2756ff42732d0760033d3e5e82d2215a9e2f31dbbbe030320c8763cb9bea626d07234844f22ff3be82ec41d94a749f7f89a0123eeaffdee07ba3bfcaa607a3bd25ca59e00b10c4747148588906463a10af3a894ff1f71c017398dc8e82ab6"}, {0x28, 0x11, 0x9, "d7b5b764bd4b9fbf26e53ff3d605f4b9343418b0ce3e"}, {0x58, 0x1, 0xff, "50c7df109788329dad1f3ef225dcdc11532f9882bab17752d8f1b6a0495e5b5fc8f414c6acb5802e018b793e635a3fe5416af2afeadd597fdf68bbdfc7110a351cb2eeebd971"}, {0x68, 0x103, 0xa0000, "6c53b602c16eb6488dce20fea804f16c58a32ebbf417249390dcc8ea84db34c075995dc7937e73f86739e22c6aa5224f6262cafb1bd1273715a887450d5c703b1be76a542359f19c2eca544f6f137616f863d5c3"}, {0xb0, 0x29, 0x0, "cb27ca8511aa9bcde962a76c94ae174a0b348b9fbafc7d3013fdaf40fcdc305b4d0c3554550add9b8d2e46652344d9ece2077eee075d9e76ae0321785601b0129337c7202906d300a183cf310bd6657ed8d9a48df4129db14203b331274fcf7c2b8e9647326ec37a98fac60b99a72836db9a1124f3b91f19b774bdb427c2dae572022123c8912e06ba80485ce50322ac6769289da25d64e2b72a87"}], 0x3d0}, 0x40) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={&(0x7f0000000080)="286421253c366b1eab8b3a6f0f9e", &(0x7f00000000c0)=""/201, &(0x7f00000001c0)="7ca56b9e1a667e6e6e35064c75e880ab9d666da961ac670a105ab45e0956cf0e66da17f3b921a1cf78ab06ced2815f46688ca978c062ef6990532e51229228a50fe5d01013a737c7cb60192c7c387ea0cdd491c69af119efedf16d3e3103dea257a6fc4f21a91269ee34e3d4c33717a88fcc9a76efa93b1ccb152f5eb0a5a419ddcaf4fef41f48efe719d25ae670b06b32384d5f97167f95cbd7", &(0x7f0000000280)="76f6d83b7a9130701c46ad088d5401021d6632a1deab5605173f83ba9ecbd22098a297502e972aefcce44b8d971b23b923c36b0e79adbd7227ca2f703e41bebb4c123e92d487e6a6989804108fd160102977999e597f32130c9fe51e4e7a44612b76caf36559376d0ec50a74253bf634ff32853d210b82e95349db6869c85711c1299a399c3880db0ae3d24b90d3e430f677ff40d526357cdaa748f7987d", 0xfffffffe, r0}, 0x38) 1.860983871s ago: executing program 0 (id=4049): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x4, @perf_bp={0x0, 0x3}, 0x8010, 0x5, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) unlink(&(0x7f0000000040)='./cgroup/../file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_clone(0x60080, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x2, 0x7, 0x6, 0x3, 0x0, 0x8, 0x40010, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x31a26872, 0x4, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x3, 0x8, 0x3c68, 0xe6, 0x9, 0x0, 0x7, 0x0, 0x1}, r3, 0xd, r0, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r5}, 0x8) write$cgroup_int(r6, &(0x7f00000001c0), 0xfffffdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f00fff9000000000b00000018110000", @ANYRES32=r4, @ANYBLOB="00d0ff0000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000bd0a060000000000d500f4ff0100030018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000006500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x94) 1.655639083s ago: executing program 3 (id=4050): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000480)={0x4, &(0x7f00000004c0)=[{0x2d, 0x0, 0x2}, {0x15}, {}, {0x6, 0x0, 0x0, 0xf000000}]}) 1.569170848s ago: executing program 1 (id=4051): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffb, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x758, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x6}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742d1680d85ff9782762f0800", 0x0, 0xeaa2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x29, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r5, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x11}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x0) recvmsg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2040) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b04c84e21000af32c6e0a0675f800250002240000000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 0s ago: executing program 4 (id=4052): perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_bp={&(0x7f0000000040), 0x9}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x94, 0x1}, 0x48) sendmsg$kcm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a19c9d8714060014000000000508000a0043000040a80012001200014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f661", 0x6e}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a325fb5e811fead55530751e6f4bc4b40d94743ed5bd8ec1fff7b0abcc6eaabeb7a2f5f985467a8db", 0x6a}], 0x2}, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x18, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB="180000000200000000000000080000000c910c00080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000087000000060000009500000000000000"], &(0x7f0000001440)='syzkaller\x00', 0x7d3, 0x7, &(0x7f0000001480)=""/7, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000014c0)={0x2, 0x5, 0x6474, 0xfffffffd}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001500)=[0x1], &(0x7f0000001540)=[{0x2, 0x3, 0x9, 0x6}, {0x5, 0x2, 0xf, 0x8}, {0xef, 0x5, 0x8, 0xa}], 0x10, 0xc2d1}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001340)={@fallback=r4, r2, 0x4, 0x0, r3, @void, @value=r5}, 0x20) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): nterface: virt_wifi0 [ 517.494190][T12777] netlink: 'syz.2.2770': attribute type 27 has an invalid length. [ 517.511186][T12777] netlink: 'syz.2.2770': attribute type 3 has an invalid length. [ 517.519208][T12777] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2770'. [ 517.671249][T12759] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 518.522807][T12807] device syzkaller0 entered promiscuous mode [ 521.144668][T12821] netlink: 'syz.1.2788': attribute type 10 has an invalid length. [ 521.158452][T12821] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 521.189956][T12843] netlink: 'syz.0.2796': attribute type 37 has an invalid length. [ 521.391702][T12847] netlink: 'syz.2.2800': attribute type 39 has an invalid length. [ 521.420430][T12849] netlink: 212940 bytes leftover after parsing attributes in process `syz.3.2798'. [ 521.979264][T12859] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.2803'. [ 522.095470][T12861] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2802'. [ 522.525783][T12867] netlink: 'syz.1.2805': attribute type 10 has an invalid length. [ 522.549467][T12867] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.557697][T12867] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.222389][T12881] netlink: 'syz.0.2810': attribute type 10 has an invalid length. [ 523.658652][T12896] netlink: 'syz.1.2815': attribute type 21 has an invalid length. [ 523.691257][T12896] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2815'. [ 523.847227][T12902] netlink: 'syz.3.2817': attribute type 39 has an invalid length. [ 524.765320][T12922] netlink: 'syz.1.2822': attribute type 41 has an invalid length. [ 524.781656][T12922] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2822'. [ 524.845205][T12922] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 524.875457][T12921] can: request_module (can-proto-0) failed. [ 525.059877][T12934] netlink: 'syz.3.2827': attribute type 37 has an invalid length. [ 525.153476][T12936] netlink: 'syz.2.2829': attribute type 10 has an invalid length. [ 525.162110][T12936] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2829'. [ 525.293152][T12935] delete_channel: no stack [ 525.664967][T12950] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2836'. [ 525.691271][T12950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2836'. [ 526.115146][T12962] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2841'. [ 526.379142][T12966] validate_nla: 3 callbacks suppressed [ 526.379175][T12966] netlink: 'syz.0.2843': attribute type 41 has an invalid length. [ 526.397564][T12966] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2843'. [ 526.416807][T12966] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 526.612168][T12973] netlink: 'syz.1.2845': attribute type 37 has an invalid length. [ 526.797034][T12977] netlink: 'syz.3.2846': attribute type 10 has an invalid length. [ 526.817731][T12977] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2846'. [ 526.855697][T12977] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 526.879767][T12984] netlink: 'syz.3.2846': attribute type 21 has an invalid length. [ 527.751636][T12976] delete_channel: no stack [ 527.960606][T13002] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.2855'. [ 528.024115][T13005] netlink: 'syz.0.2856': attribute type 39 has an invalid length. [ 528.603494][T13021] netlink: 'syz.3.2861': attribute type 39 has an invalid length. [ 529.362777][T13023] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2862'. [ 529.392107][T13022] delete_channel: no stack [ 529.417392][T13037] netlink: 'syz.2.2866': attribute type 10 has an invalid length. [ 529.456282][T13037] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2866'. [ 529.512627][T13038] netlink: 'syz.2.2866': attribute type 21 has an invalid length. [ 530.485446][T13036] delete_channel: no stack [ 530.679650][T13053] netlink: 'syz.3.2873': attribute type 39 has an invalid length. [ 531.924824][T13076] netlink: 'syz.1.2879': attribute type 10 has an invalid length. [ 532.411068][T13094] netlink: 'syz.1.2884': attribute type 39 has an invalid length. [ 533.293208][T13101] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2887'. [ 533.335302][T13101] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2887'. [ 533.367950][T13099] netlink: 'syz.0.2886': attribute type 10 has an invalid length. [ 533.382945][T13099] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2886'. [ 533.403503][T13101] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2887'. [ 533.425082][T13105] netlink: 'syz.0.2886': attribute type 21 has an invalid length. [ 533.481572][T13098] delete_channel: no stack [ 533.569501][T13112] netlink: 'syz.3.2890': attribute type 10 has an invalid length. [ 533.630590][T13116] netlink: 'syz.1.2891': attribute type 39 has an invalid length. [ 534.559069][T13123] netlink: 'syz.0.2902': attribute type 39 has an invalid length. [ 535.179147][T13147] netlink: 'syz.3.2901': attribute type 10 has an invalid length. [ 535.198948][T13147] team0: Port device dummy0 added [ 535.802911][T13158] netlink: 'syz.2.2906': attribute type 39 has an invalid length. [ 535.895783][T13156] netlink: 'syz.4.2904': attribute type 10 has an invalid length. [ 535.932633][T13156] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2904'. [ 536.110699][T13155] delete_channel: no stack [ 536.175310][T13166] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2908'. [ 537.145400][T13173] validate_nla: 2 callbacks suppressed [ 537.145417][T13173] netlink: 'syz.2.2911': attribute type 10 has an invalid length. [ 537.159474][T13173] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2911'. [ 537.179163][T13173] netlink: 'syz.2.2911': attribute type 21 has an invalid length. [ 537.232184][T13172] delete_channel: no stack [ 537.968663][T13185] delete_channel: no stack [ 538.235078][T13201] netlink: 'syz.4.2922': attribute type 39 has an invalid length. [ 539.184234][T13215] netlink: 'syz.3.2930': attribute type 10 has an invalid length. [ 539.194190][T13215] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2930'. [ 539.205121][T13215] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 539.264047][T13215] netlink: 'syz.3.2930': attribute type 21 has an invalid length. [ 539.342524][T13214] delete_channel: no stack [ 539.577052][T13230] netlink: 'syz.2.2935': attribute type 4 has an invalid length. [ 539.633062][T13230] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2935'. [ 540.091861][T13249] netlink: 'syz.3.2942': attribute type 39 has an invalid length. [ 540.726018][T13258] netlink: 'syz.4.2944': attribute type 10 has an invalid length. [ 540.786181][T13258] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2944'. [ 540.830608][T13259] netlink: 'syz.4.2944': attribute type 21 has an invalid length. [ 540.954918][T13257] delete_channel: no stack [ 541.513584][T13274] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 541.531129][T13274] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 541.539057][T13274] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 541.548010][T13274] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 541.555944][T13274] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 541.571527][T13274] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 541.717618][ T8901] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.748281][T13280] netlink: 'syz.4.2950': attribute type 10 has an invalid length. [ 541.799266][T13280] team0: Port device dummy0 added [ 542.028683][ T8901] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.283895][T13294] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2957'. [ 542.322969][ T8901] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.337306][T13291] netlink: 'syz.0.2956': attribute type 39 has an invalid length. [ 542.434615][ T8901] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.708652][T13272] chnl_net:caif_netlink_parms(): no params data found [ 542.947418][T13299] netlink: 'syz.4.2958': attribute type 10 has an invalid length. [ 542.963395][T13299] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2958'. [ 543.024124][ T8901] device 0 left promiscuous mode [ 543.092623][T13299] netlink: 'syz.4.2958': attribute type 21 has an invalid length. [ 543.161928][T13298] delete_channel: no stack [ 543.216000][ T8901] tipc: Left network mode [ 543.228400][T13272] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.245045][T13272] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.273975][T13272] device bridge_slave_0 entered promiscuous mode [ 543.302046][T13272] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.309320][T13272] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.326733][T13272] device bridge_slave_1 entered promiscuous mode [ 543.591312][ T4268] Bluetooth: hci4: command 0x0409 tx timeout [ 543.645775][T13272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.720707][T13272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.829933][T13272] team0: Port device team_slave_0 added [ 543.979313][T13272] team0: Port device team_slave_1 added [ 544.100599][T13272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.169608][T13272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.227583][T13272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.376920][T13272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.395331][T13272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.557615][T13272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.659186][T13340] netlink: 'syz.0.2968': attribute type 39 has an invalid length. [ 544.809870][T13349] netlink: 'syz.1.2970': attribute type 10 has an invalid length. [ 544.898182][T13349] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2970'. [ 544.998996][T13345] netlink: 'syz.1.2970': attribute type 21 has an invalid length. [ 545.099887][T13343] delete_channel: no stack [ 545.171784][T13272] device hsr_slave_0 entered promiscuous mode [ 545.179695][T13272] device hsr_slave_1 entered promiscuous mode [ 545.187221][T13272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 545.196041][T13272] Cannot create hsr debugfs directory [ 545.476894][T13354] netlink: 'syz.3.2972': attribute type 10 has an invalid length. [ 545.492350][T13354] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2972'. [ 545.514126][T13354] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 545.659261][T13357] netlink: 'syz.3.2972': attribute type 21 has an invalid length. [ 545.676507][ T4268] Bluetooth: hci4: command 0x041b tx timeout [ 545.763278][T13351] delete_channel: no stack [ 546.141780][T13369] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2976'. [ 546.179241][T13369] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 546.347642][T13371] netlink: 146340 bytes leftover after parsing attributes in process `syz.3.2977'. [ 546.372379][T13374] netlink: 'syz.4.2978': attribute type 10 has an invalid length. [ 546.391951][T13371] openvswitch: netlink: Key type 386 is out of range max 32 [ 546.697006][T13386] netlink: 212940 bytes leftover after parsing attributes in process `syz.4.2980'. [ 546.801726][ T8901] device hsr_slave_0 left promiscuous mode [ 546.841011][ T8901] device hsr_slave_1 left promiscuous mode [ 546.863455][ T8901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.936053][ T8901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.968416][ T8901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.976329][ T8901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 547.013138][ T8901] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 547.028029][ T8901] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 547.073101][ T8901] bridge0: port 3(team0) entered disabled state [ 547.087190][ T8901] device bridge_slave_1 left promiscuous mode [ 547.148364][ T8901] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.183307][ T8901] device bridge_slave_0 left promiscuous mode [ 547.200660][ T8901] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.334053][ T8901] device veth1_macvtap left promiscuous mode [ 547.341600][ T8901] device veth1_vlan left promiscuous mode [ 547.350579][ T8901] device veth0_vlan left promiscuous mode [ 547.751134][ T4268] Bluetooth: hci4: command 0x040f tx timeout [ 547.773224][ T8901] device geneve1 left promiscuous mode [ 547.822560][ T8901] team0 (unregistering): Port device geneve1 removed [ 548.248694][ T8901] device team_slave_1 left promiscuous mode [ 548.255942][ T8901] team0 (unregistering): Port device team_slave_1 removed [ 548.319301][ T8901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.328148][ T8901] device bond_slave_1 left promiscuous mode [ 548.538168][ T8901] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 548.546649][ T8901] device batadv0 left promiscuous mode [ 548.583260][ T8901] device dummy0 left promiscuous mode [ 548.589741][ T8901] team0 (unregistering): Port device dummy0 removed [ 548.632993][ T8901] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 548.642210][ T8901] device bridge0 left promiscuous mode [ 548.647903][ T8901] bond0 (unregistering): Released all slaves [ 548.771239][T13391] netlink: 'syz.3.2981': attribute type 10 has an invalid length. [ 548.779258][T13391] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2981'. [ 548.789614][T13391] device dummy0 entered promiscuous mode [ 548.821542][T13391] team0: Port device dummy0 removed [ 548.827320][T13391] bridge0: port 3(dummy0) entered blocking state [ 548.834138][T13391] bridge0: port 3(dummy0) entered disabled state [ 548.843381][T13397] netlink: 'syz.3.2981': attribute type 41 has an invalid length. [ 548.864316][T13401] netlink: 'syz.4.2982': attribute type 10 has an invalid length. [ 548.876036][T13401] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.887648][T13401] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.899928][T13401] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.914075][T13401] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.951454][T13408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2983'. [ 549.220134][T13416] netlink: 'syz.3.2984': attribute type 10 has an invalid length. [ 549.241585][T13416] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2984'. [ 549.262213][T13416] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 549.309840][T13417] netlink: 'syz.3.2984': attribute type 21 has an invalid length. [ 549.422483][T13413] delete_channel: no stack [ 549.464193][T13272] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 549.476529][T13272] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 549.495027][T13272] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 549.506953][T13272] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 549.601841][T13419] syzkaller0: create flow: hash 1733518017 index 1 [ 549.635643][ T4316] syzkaller0: tun_net_xmit 76 [ 549.640864][ T4316] syzkaller0: tun_net_xmit 48 [ 549.661246][ T6243] syzkaller0: tun_net_xmit 76 [ 549.731767][T13421] syzkaller0: delete flow: hash 1733518017 index 1 [ 549.831144][T13274] Bluetooth: hci4: command 0x0419 tx timeout [ 551.238450][T13272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.257547][ T8906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 551.285858][ T8906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 551.297521][T13272] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.358039][ T8906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 551.377039][ T8906] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 551.405611][ T8906] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.413020][ T8906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.441948][ T8906] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 551.475921][T13444] netlink: 'syz.3.2988': attribute type 10 has an invalid length. [ 551.616183][T13451] netlink: 'syz.0.2987': attribute type 21 has an invalid length. [ 551.635003][ T8895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 551.666322][ T8895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 551.703217][ T8895] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.710548][ T8895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.802475][T13448] netlink: 'syz.0.2987': attribute type 10 has an invalid length. [ 551.831497][T13448] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2987'. [ 551.900436][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 551.923946][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 551.941692][T13446] delete_channel: no stack [ 551.972038][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 551.987323][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 552.024071][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 552.043916][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 552.106034][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 552.135327][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 552.179517][T13272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 552.218657][T13272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 552.245884][T13463] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2993'. [ 552.266044][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 552.284489][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 552.324326][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 553.454708][T13494] netlink: 'syz.0.3000': attribute type 4 has an invalid length. [ 553.472118][T13494] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3000'. [ 553.676335][T13272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.686297][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 553.694528][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 553.761829][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 553.776023][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 553.838891][T13272] device veth0_vlan entered promiscuous mode [ 553.867734][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 553.895318][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 553.921932][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 553.940069][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 553.969466][T13272] device veth1_vlan entered promiscuous mode [ 554.030217][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 554.042160][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 554.060631][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 554.081900][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 554.106250][T13272] device veth0_macvtap entered promiscuous mode [ 554.133781][T13272] device veth1_macvtap entered promiscuous mode [ 554.203880][T13272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.237281][T13272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.264395][T13272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.291943][T13272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.331951][T13272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.370273][T13272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.403539][T13272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.420336][ T8906] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 554.434668][ T8906] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 554.446206][ T8906] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 554.459061][ T8906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 554.474551][T13272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.492096][T13272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.505219][T13272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.517216][T13272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.532527][T13272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.546165][T13272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.565644][T13272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 554.574996][ T8906] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 554.587742][ T8906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 554.604045][T13272] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.618106][T13272] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.627778][T13272] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.643590][T13272] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.814598][ T8906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.830590][ T8906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.982637][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 555.023550][ T8908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.085510][ T8908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.257647][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 555.552603][T13528] netlink: 'syz.2.2940': attribute type 4 has an invalid length. [ 555.591376][T13528] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2940'. [ 556.937407][T13546] netlink: 'syz.1.3013': attribute type 21 has an invalid length. [ 556.972161][T13274] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 556.982961][T13274] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 556.994848][T13274] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 557.004119][T13274] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 557.012628][T13274] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 557.019972][T13274] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 557.031336][T13546] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3013'. [ 557.040829][T13553] netlink: 'syz.0.3015': attribute type 2 has an invalid length. [ 557.336125][T13561] netlink: 'syz.0.3019': attribute type 3 has an invalid length. [ 557.363495][T13561] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3019'. [ 557.417167][T13563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3020'. [ 557.496166][ T8906] bond0: (slave netdevsim0): Releasing backup interface [ 557.935495][ T8906] tipc: Left network mode [ 558.272136][T13577] netlink: 'syz.0.3025': attribute type 10 has an invalid length. [ 558.290401][T13577] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3025'. [ 558.481841][T13580] netlink: 'syz.0.3025': attribute type 21 has an invalid length. [ 558.496520][T13550] chnl_net:caif_netlink_parms(): no params data found [ 558.552192][T13575] delete_channel: no stack [ 558.802317][T13593] netlink: 'syz.1.3026': attribute type 10 has an invalid length. [ 558.813529][T13593] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3026'. [ 558.970521][T13593] netlink: 'syz.1.3026': attribute type 21 has an invalid length. [ 559.075170][T13592] delete_channel: no stack [ 559.115693][ T4268] Bluetooth: hci3: command 0x0409 tx timeout [ 559.256316][T13550] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.268127][T13550] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.355793][T13550] device bridge_slave_0 entered promiscuous mode [ 559.488981][T13550] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.541132][T13550] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.591060][T13550] device bridge_slave_1 entered promiscuous mode [ 559.763617][T13550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.814322][T13550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.959168][T13550] team0: Port device team_slave_0 added [ 560.001548][T13550] team0: Port device team_slave_1 added [ 560.194536][T13550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 560.209885][T13550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.281560][T13550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 560.366816][T13550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 560.383120][T13550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.421217][T13631] netlink: 'syz.1.3036': attribute type 29 has an invalid length. [ 560.474073][T13550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 560.772375][T13631] netlink: 'syz.1.3036': attribute type 29 has an invalid length. [ 560.844550][T13638] netlink: 'syz.2.3037': attribute type 10 has an invalid length. [ 560.905444][T13638] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3037'. [ 561.000346][T13638] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 561.041383][T13638] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.122208][T13638] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 561.191351][ T4268] Bluetooth: hci3: command 0x041b tx timeout [ 561.271262][T13635] netlink: 'syz.2.3037': attribute type 21 has an invalid length. [ 561.363104][T13633] delete_channel: no stack [ 561.459092][T13550] device hsr_slave_0 entered promiscuous mode [ 561.506794][T13550] device hsr_slave_1 entered promiscuous mode [ 561.541978][T13550] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 561.566299][T13550] Cannot create hsr debugfs directory [ 561.936601][T13651] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3042'. [ 562.278285][T13655] netlink: 'syz.2.3043': attribute type 10 has an invalid length. [ 562.323426][T13655] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 562.417519][ T8906] device hsr_slave_0 left promiscuous mode [ 562.477560][ T8906] device hsr_slave_1 left promiscuous mode [ 562.495871][ T8906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 562.522858][ T8906] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 562.536274][ T8906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 562.545744][ T8906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 562.569969][ T8906] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 562.586238][ T8906] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 562.601689][ T8906] device bridge_slave_1 left promiscuous mode [ 562.615785][ T8906] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.672111][ T8906] device veth1_macvtap left promiscuous mode [ 562.687147][ T8906] device veth1_vlan left promiscuous mode [ 562.702642][ T8906] device veth0_vlan left promiscuous mode [ 562.714095][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.720475][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.997134][ T8906] team0 (unregistering): Port device geneve1 removed [ 563.271353][ T4268] Bluetooth: hci3: command 0x040f tx timeout [ 563.376357][ T8906] team0 (unregistering): Port device team_slave_1 removed [ 563.441448][ T8906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 563.478788][ T8906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 563.629618][ T8906] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 563.667177][ T8906] team0 (unregistering): Port device dummy0 removed [ 563.688784][ T8906] bond0 (unregistering): (slave team0): Releasing backup interface [ 563.716453][ T8906] bond0 (unregistering): Released all slaves [ 563.803990][T13661] netlink: 'syz.1.3045': attribute type 10 has an invalid length. [ 563.814199][T13667] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3047'. [ 563.831708][T13667] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 564.466691][T13681] netlink: 'syz.3.3051': attribute type 10 has an invalid length. [ 564.493438][T13681] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3051'. [ 564.524618][T13681] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 564.552579][T13687] netlink: 'syz.3.3051': attribute type 21 has an invalid length. [ 564.569586][T13690] netlink: 'syz.0.3053': attribute type 10 has an invalid length. [ 564.610868][T13680] delete_channel: no stack [ 564.622869][T13690] team0: Device hsr_slave_0 failed to register rx_handler [ 564.889762][T13550] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 564.930693][T13550] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 564.994163][T13550] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 565.039766][T13550] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 565.279390][T13715] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3058'. [ 565.311603][T13713] device syzkaller0 entered promiscuous mode [ 565.351249][ T4268] Bluetooth: hci3: command 0x0419 tx timeout [ 566.864262][T13735] delete_channel: no stack [ 567.370473][T13736] netlink: 'syz.0.3065': attribute type 10 has an invalid length. [ 567.380373][T13736] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3065'. [ 567.400416][T13737] netlink: 'syz.0.3065': attribute type 21 has an invalid length. [ 567.473268][T13550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 567.535484][ T8901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 567.553397][ T8901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 567.580034][T13550] 8021q: adding VLAN 0 to HW filter on device team0 [ 567.903368][T13746] delete_channel: no stack [ 567.930730][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 567.953351][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 567.962457][ T8908] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.969623][ T8908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.032323][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 568.051647][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 568.080809][ T8908] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.088078][ T8908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.160459][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 568.180197][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 568.252141][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 568.267384][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 568.288037][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 568.307073][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 568.351565][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 568.381850][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 568.415336][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 568.455533][T13550] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 568.481189][T13550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 568.500459][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 568.512010][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 568.536274][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 568.565719][T13766] netlink: 'syz.1.3074': attribute type 4 has an invalid length. [ 568.580635][T13766] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3074'. [ 568.793417][T13775] syzkaller1: tun_chr_ioctl cmd 1074025684 [ 569.926811][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 569.957237][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 570.021618][T13550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.990058][T13813] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3085'. [ 572.135591][ T8889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 572.155048][ T8889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 572.925470][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 573.024205][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 573.046146][T13550] device veth0_vlan entered promiscuous mode [ 573.072407][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 573.100348][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 573.141511][T13550] device veth1_vlan entered promiscuous mode [ 573.229879][ T8906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 573.252403][ T8906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 573.326879][T13550] device veth0_macvtap entered promiscuous mode [ 573.372312][T13867] netlink: 'syz.0.3097': attribute type 2 has an invalid length. [ 573.380396][T13867] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3097'. [ 573.438092][T13873] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.3098'. [ 573.444460][T13550] device veth1_macvtap entered promiscuous mode [ 573.552317][T13550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 573.605230][T13550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.640536][T13550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 573.670948][T13550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.693360][T13550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 573.708724][T13550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.748792][T13550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 573.843374][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 573.876228][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 573.922020][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 573.945486][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 573.976678][T13550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.020682][T13550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.051036][T13550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.071396][T13550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.100959][T13550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.120917][T13550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.163433][T13550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 574.297037][ T8889] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 574.306538][ T8889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 574.327896][T13550] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.352017][T13550] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.378689][T13550] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.388175][T13550] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.414966][T13898] netlink: 'syz.1.3112': attribute type 10 has an invalid length. [ 574.437182][T13898] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3112'. [ 574.524763][T13898] netlink: 'syz.1.3112': attribute type 21 has an invalid length. [ 574.647081][ T8882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.656501][T13887] delete_channel: no stack [ 574.681812][ T8882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.716914][ T8889] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 574.772279][ T8906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.780143][ T8906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.810473][ T8889] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 574.931392][T13903] netlink: 'syz.2.3107': attribute type 3 has an invalid length. [ 574.975582][T13903] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3107'. [ 576.506566][T13936] netlink: 'syz.4.3117': attribute type 10 has an invalid length. [ 576.605532][T13936] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 577.019154][ T4268] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 577.028997][ T4268] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 577.036954][ T4268] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 577.048035][ T4268] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 577.062592][ T4268] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 577.069933][ T4268] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 577.190166][T13948] netlink: 'syz.3.3119': attribute type 10 has an invalid length. [ 577.251753][T13948] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3119'. [ 577.265430][T13948] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 577.329520][T13951] netlink: 'syz.4.3121': attribute type 10 has an invalid length. [ 577.373501][T13951] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.383306][T13951] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.520582][T13951] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.529155][T13951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.537484][T13951] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.545238][T13951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.660078][T13951] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 577.763621][T13946] netlink: 'syz.3.3119': attribute type 21 has an invalid length. [ 578.542135][T13959] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3124'. [ 578.672274][T13941] delete_channel: no stack [ 578.855071][T13947] chnl_net:caif_netlink_parms(): no params data found [ 579.111096][T13274] Bluetooth: hci0: command 0x0409 tx timeout [ 580.110571][T13947] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.146758][T13991] delete_channel: no stack [ 580.194577][T13947] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.215692][T13947] device bridge_slave_0 entered promiscuous mode [ 580.226297][T13993] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3136'. [ 580.639275][T13989] netlink: 'syz.0.3134': attribute type 10 has an invalid length. [ 580.730778][T13947] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.758815][T13947] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.781191][T13947] device bridge_slave_1 entered promiscuous mode [ 580.920062][T13998] netlink: 'syz.2.3137': attribute type 10 has an invalid length. [ 580.969049][T13947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.015160][T13947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.178024][T13947] team0: Port device team_slave_0 added [ 581.191260][T13274] Bluetooth: hci0: command 0x041b tx timeout [ 581.222470][T14002] netlink: 'syz.2.3140': attribute type 4 has an invalid length. [ 581.230776][T14002] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3140'. [ 581.246605][T13947] team0: Port device team_slave_1 added [ 581.291923][ T46] device 0 left promiscuous mode [ 581.327288][T13947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.359140][T13947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.476504][T13947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.496282][ T46] tipc: Left network mode [ 581.520428][T13947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.543689][T13947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.679400][T13947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.079481][T14031] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3147'. [ 583.281099][T13274] Bluetooth: hci0: command 0x040f tx timeout [ 583.440779][T14019] netlink: 'syz.4.3146': attribute type 7 has an invalid length. [ 583.657250][T13947] device hsr_slave_0 entered promiscuous mode [ 583.686602][T13947] device hsr_slave_1 entered promiscuous mode [ 583.716020][T13947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 583.749413][T13947] Cannot create hsr debugfs directory [ 583.959350][T14045] netlink: 'syz.0.3150': attribute type 10 has an invalid length. [ 584.036812][T14045] team0: Port device dummy0 removed [ 584.058328][T14045] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 585.351202][T13274] Bluetooth: hci0: command 0x0419 tx timeout [ 586.144894][T14085] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3160'. [ 586.742359][T14089] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 586.917077][T13947] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 586.969142][T13947] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 587.036977][T13947] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 587.198123][ T46] team0: Port device wlan1 removed [ 587.245442][T13947] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 587.342725][T14098] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 587.501852][T14108] netlink: 'syz.2.3164': attribute type 21 has an invalid length. [ 587.566780][T14099] netlink: 'syz.2.3164': attribute type 10 has an invalid length. [ 587.601470][T14099] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3164'. [ 587.701787][ T46] device hsr_slave_0 left promiscuous mode [ 587.728507][T14098] delete_channel: no stack [ 587.758465][ T46] device hsr_slave_1 left promiscuous mode [ 587.795170][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 587.815333][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.851670][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 587.866205][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.879867][ T46] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 587.901965][ T46] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 587.935664][ T46] device bridge_slave_1 left promiscuous mode [ 587.961471][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.980465][ T46] device bridge_slave_0 left promiscuous mode [ 587.991425][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.071544][ T46] device veth1_macvtap left promiscuous mode [ 588.093031][ T46] device veth1_vlan left promiscuous mode [ 588.940055][ T46] team0 (unregistering): Port device team_slave_1 removed [ 589.021371][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.062118][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.240418][ T46] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 589.281154][ T46] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 589.306119][ T46] bond0 (unregistering): (slave team0): Releasing backup interface [ 589.336760][ T46] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 589.345883][ T46] bond0 (unregistering): Released all slaves [ 589.555526][T13947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 589.687585][T13947] 8021q: adding VLAN 0 to HW filter on device team0 [ 589.711403][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 589.719702][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 589.752100][T14151] netlink: 'syz.3.3175': attribute type 3 has an invalid length. [ 589.770284][T14151] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3175'. [ 589.782248][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 589.800482][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 589.819565][ T8908] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.826835][ T8908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 589.885808][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 589.918196][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 589.951201][ T8908] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.958425][ T8908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.021287][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 590.040450][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 590.733243][ T8889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 590.751871][ T8889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 590.793393][ T8889] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 590.823445][ T8889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 590.842085][ T8889] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 590.852746][ T8889] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 590.908821][T13947] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 590.939891][T13947] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 590.964128][ T8863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 590.974165][ T8863] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 590.997342][ T8863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 591.016193][ T8863] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 591.043152][ T8863] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 591.697202][ T8906] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 591.715102][ T8906] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 593.076620][T13947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 593.185446][T14196] netlink: 'syz.4.3179': attribute type 3 has an invalid length. [ 593.194994][T14196] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3179'. [ 593.301360][ T8889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 593.331984][ T8889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 593.412685][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 593.434518][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 593.461964][T13947] device veth0_vlan entered promiscuous mode [ 593.469138][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 593.500099][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 593.554196][T13947] device veth1_vlan entered promiscuous mode [ 593.584998][T14204] delete_channel: no stack [ 593.617620][T14211] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3184'. [ 593.643495][T13947] device veth0_macvtap entered promiscuous mode [ 593.662645][T14211] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3184'. [ 593.733710][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 593.758153][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 593.820237][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 593.890379][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 593.937510][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 593.968608][T13947] device veth1_macvtap entered promiscuous mode [ 593.989338][T14209] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 594.062911][T14216] netlink: 'syz.4.3185': attribute type 10 has an invalid length. [ 594.090420][T14216] bond0: (slave dummy0): Releasing backup interface [ 594.153743][T14216] team0: Port device dummy0 added [ 594.218511][T13947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.267733][T13947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.290418][T13947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.319379][T13947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.374216][T13947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.407408][T13947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.486152][T13947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 594.529722][T14222] netlink: 212940 bytes leftover after parsing attributes in process `syz.4.3187'. [ 594.547801][ T8889] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 594.558931][ T8889] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 594.575600][ T8889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 594.604624][T14223] netlink: 'syz.2.3186': attribute type 7 has an invalid length. [ 594.651396][T13947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.672995][T14223] netlink: 'syz.2.3186': attribute type 1 has an invalid length. [ 594.676876][T13947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.682236][T14223] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3186'. [ 594.712233][T13947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.726502][T13947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.740481][T13947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.764877][T13947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.776483][T13947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 594.809647][ T8906] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 594.829174][ T8906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 594.940681][T13947] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.954186][T13947] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.968058][T13947] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.979246][T13947] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.167351][ T8863] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.187495][ T8863] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.266040][ T8906] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 595.532060][ T8906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.554973][ T8906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.577870][ T8863] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 595.679184][T14243] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3195'. [ 595.738561][T14243] netlink: 'syz.0.3195': attribute type 10 has an invalid length. [ 595.831665][T14244] delete_channel: no stack [ 596.393447][T14249] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 596.701682][T14265] netlink: 'syz.4.3204': attribute type 4 has an invalid length. [ 596.767011][T14265] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3204'. [ 596.922160][T14264] netlink: 'syz.1.3203': attribute type 10 has an invalid length. [ 596.936512][T14264] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3203'. [ 596.984548][T14264] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 597.007756][T14264] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.111955][T14264] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 597.181873][T14267] netlink: 'syz.1.3203': attribute type 21 has an invalid length. [ 597.270097][T13274] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 597.286533][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 597.294724][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 597.304242][T13274] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 597.312884][T13274] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 597.320689][T13274] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 597.398738][ T8863] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.422263][T14262] delete_channel: no stack [ 597.527253][ T8863] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.665304][ T8863] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.728504][T14278] delete_channel: no stack [ 597.777262][ T8863] bond0: (slave netdevsim0): Releasing backup interface [ 598.415545][ T8863] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.472757][T14277] device syzkaller0 entered promiscuous mode [ 598.711191][ T8906] wlan1: Trigger new scan to find an IBSS to join [ 599.351678][T13274] Bluetooth: hci1: command 0x0409 tx timeout [ 599.615565][T14306] delete_channel: no stack [ 600.217793][T14307] netlink: 'syz.4.3219': attribute type 10 has an invalid length. [ 600.225904][T14307] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3219'. [ 600.236150][T14307] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 600.243444][T14307] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 600.279260][T14307] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 600.307979][T14308] netlink: 'syz.4.3219': attribute type 21 has an invalid length. [ 600.517587][ T8863] tipc: Left network mode [ 600.556115][T14270] chnl_net:caif_netlink_parms(): no params data found [ 600.722878][T14270] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.730076][T14270] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.738781][T14270] device bridge_slave_0 entered promiscuous mode [ 600.747887][T14270] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.755309][T14270] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.763931][T14270] device bridge_slave_1 entered promiscuous mode [ 600.841827][T14270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.981606][T14270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.079385][T14331] delete_channel: no stack [ 601.382501][T14270] team0: Port device team_slave_0 added [ 601.397164][T14345] netlink: 'syz.2.3225': attribute type 28 has an invalid length. [ 601.431156][T13274] Bluetooth: hci1: command 0x041b tx timeout [ 601.445846][T14345] netlink: 'syz.2.3225': attribute type 3 has an invalid length. [ 601.475577][T14345] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3225'. [ 601.576127][T14270] team0: Port device team_slave_1 added [ 601.665355][T14347] device syzkaller0 entered promiscuous mode [ 601.679816][T14345] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3225'. [ 601.790218][T14270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.809691][T14270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.883786][T14270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.082812][T14270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.141067][T14270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.190192][T14270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.500268][T14270] device hsr_slave_0 entered promiscuous mode [ 602.511588][T14270] device hsr_slave_1 entered promiscuous mode [ 602.711108][ T8882] wlan1: Trigger new scan to find an IBSS to join [ 602.999935][ T8863] bond0: (slave wlan1): Releasing backup interface [ 603.516511][T13274] Bluetooth: hci1: command 0x040f tx timeout [ 604.309776][T14395] netlink: 'syz.4.3242': attribute type 39 has an invalid length. [ 604.331936][T14395] device veth0_macvtap left promiscuous mode [ 604.510336][ T8863] device hsr_slave_0 left promiscuous mode [ 604.523834][ T8863] device hsr_slave_1 left promiscuous mode [ 604.550608][ T8863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 604.569702][ T8863] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 604.602651][ T8863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 604.619365][ T8863] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 604.642080][ T8863] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 604.661254][T14416] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.3244'. [ 604.683478][ T8863] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 604.711385][ T8882] wlan1: Creating new IBSS network, BSSID 16:b7:ba:ee:d8:cb [ 604.718569][T14416] netlink: zone id is out of range [ 604.728720][ T8863] device bridge_slave_1 left promiscuous mode [ 604.748240][ T8863] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.756297][T14416] netlink: zone id is out of range [ 604.766508][T14416] netlink: zone id is out of range [ 604.776777][ T8863] device bridge_slave_0 left promiscuous mode [ 604.787936][T14416] netlink: zone id is out of range [ 604.801499][ T8863] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.845219][T14416] netlink: zone id is out of range [ 604.871616][T14416] netlink: zone id is out of range [ 604.902026][ T8863] device veth1_macvtap left promiscuous mode [ 604.918767][T14416] netlink: zone id is out of range [ 604.922300][ T8863] device veth1_vlan left promiscuous mode [ 605.004061][T14416] netlink: zone id is out of range [ 605.048936][T14416] netlink: zone id is out of range [ 605.055754][T14425] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3247'. [ 605.071004][T14416] netlink: zone id is out of range [ 605.397470][ T8863] team0 (unregistering): Port device geneve1 removed [ 605.592884][T13274] Bluetooth: hci1: command 0x0419 tx timeout [ 605.767999][ T8863] team0 (unregistering): Port device team_slave_1 removed [ 605.833930][ T8863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 605.879223][ T8863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 606.048951][ T8863] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 606.095336][ T8863] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 606.137664][ T8863] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 606.146522][ T8863] bond0 (unregistering): Released all slaves [ 606.223599][T14425] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3247'. [ 607.243265][T14448] netlink: 212940 bytes leftover after parsing attributes in process `syz.4.3251'. [ 607.427563][T14270] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 607.474945][T14270] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 607.516265][T14270] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 607.587883][T14270] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 607.689546][T14452] netlink: 'syz.3.3253': attribute type 10 has an invalid length. [ 607.734724][T14452] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3253'. [ 607.833031][T14452] netlink: 'syz.3.3253': attribute type 21 has an invalid length. [ 607.989857][T14451] delete_channel: no stack [ 608.165518][T14270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 608.186933][T14467] netlink: 'syz.4.3255': attribute type 10 has an invalid length. [ 608.243220][T14467] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3255'. [ 608.282773][T14471] netlink: 'syz.4.3255': attribute type 21 has an invalid length. [ 608.339700][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 608.349608][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 608.371567][T14466] delete_channel: no stack [ 608.384597][T14270] 8021q: adding VLAN 0 to HW filter on device team0 [ 608.429173][ T8882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 608.448910][ T8882] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 608.489112][ T8882] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.496378][ T8882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 608.563046][ T8882] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 608.583146][ T8882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 608.592402][ T8882] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 608.619564][ T8882] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.626742][ T8882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 608.668034][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 608.716144][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 608.770815][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 608.790048][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 608.806273][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 608.821321][T14485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3260'. [ 608.917922][ T8863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 608.934656][ T8863] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 608.969670][T14493] netlink: 'syz.3.3263': attribute type 10 has an invalid length. [ 609.024599][T14270] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 609.084016][T14270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 609.152623][ T8863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 609.178120][ T8863] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 609.192215][ T8863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 609.220640][ T8863] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 609.270604][ T8863] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 610.382344][T14518] netlink: 'syz.4.3270': attribute type 10 has an invalid length. [ 610.390424][T14518] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3270'. [ 610.461270][T14521] netlink: 'syz.4.3270': attribute type 21 has an invalid length. [ 610.522513][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 610.547680][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 610.591110][T14270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 610.688537][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 610.702867][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 610.756462][ T8880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 610.831447][ T8880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 610.863959][T14270] device veth0_vlan entered promiscuous mode [ 610.872388][T14516] delete_channel: no stack [ 610.901149][ T8880] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 610.909730][ T8880] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 610.934330][T14270] device veth1_vlan entered promiscuous mode [ 610.992614][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 611.008162][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 611.032526][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 611.062440][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 611.093124][T14270] device veth0_macvtap entered promiscuous mode [ 611.130802][T14270] device veth1_macvtap entered promiscuous mode [ 611.202002][T14270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.230961][T14270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.251058][T14270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.272201][T14270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.320956][T14270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.361411][T14270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.408768][T14270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.470054][T14537] netlink: 'syz.4.3274': attribute type 39 has an invalid length. [ 611.526526][ T8882] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 611.575902][ T8882] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 611.609346][ T8882] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 611.640440][ T8882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 611.678177][T14270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.706440][T14270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.744010][T14270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.782454][T14270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.823295][T14270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.878325][T14270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.926129][T14270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 611.961769][ T8882] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 611.988509][ T8882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 612.037793][T14270] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.061016][T14270] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.090174][T14270] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.110413][T14270] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.250609][T14538] device syzkaller0 entered promiscuous mode [ 612.935208][T14575] sctp: [Deprecated]: syz.3.3282 (pid 14575) Use of struct sctp_assoc_value in delayed_ack socket option. [ 612.935208][T14575] Use struct sctp_sack_info instead [ 613.087156][T14575] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3282'. [ 613.133534][T14575] net_ratelimit: 7 callbacks suppressed [ 613.133612][T14575] openvswitch: netlink: Flow key attr not present in new flow. [ 614.848987][T14592] delete_channel: no stack [ 616.759275][T14593] netlink: 'syz.4.3285': attribute type 10 has an invalid length. [ 616.771038][T14593] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3285'. [ 616.780352][T14594] netlink: 'syz.4.3285': attribute type 21 has an invalid length. [ 616.790333][T14605] netlink: 'syz.3.3291': attribute type 39 has an invalid length. [ 616.915307][ T8863] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.978750][ T8863] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.028230][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 617.109127][ T8908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.131549][ T8908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.163311][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 617.806043][T14647] netlink: 'syz.0.3300': attribute type 10 has an invalid length. [ 617.816003][T14647] team0: Device dummy0 is up. Set it down before adding it as a team port [ 618.425382][T14658] netlink: 'syz.4.3302': attribute type 10 has an invalid length. [ 618.451621][T14658] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3302'. [ 618.511462][T14661] netlink: 'syz.4.3302': attribute type 21 has an invalid length. [ 618.658264][T14655] delete_channel: no stack [ 618.775060][T14668] netlink: 'syz.0.3306': attribute type 10 has an invalid length. [ 618.852122][T14668] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.861815][T14668] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.074509][T14668] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.082219][T14668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.091339][T14668] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.099326][T14668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.370159][T14668] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 619.420277][T14673] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3307'. [ 619.714541][T14673] team0: Port device team_slave_0 removed [ 619.744551][T14673] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 619.791947][T14684] netlink: 'syz.3.3310': attribute type 21 has an invalid length. [ 619.807944][T14684] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3310'. [ 620.298438][T14711] netlink: 'syz.1.3318': attribute type 21 has an invalid length. [ 620.320479][T14711] netlink: 'syz.1.3318': attribute type 1 has an invalid length. [ 620.329794][T14711] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3318'. [ 620.583596][T14716] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3319'. [ 621.429926][T14727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3321'. [ 621.568698][T14715] delete_channel: no stack [ 621.906963][T14740] validate_nla: 2 callbacks suppressed [ 621.906981][T14740] netlink: 'syz.4.3325': attribute type 10 has an invalid length. [ 622.090488][T14740] team0: Port device geneve1 added [ 622.250942][T14749] delete_channel: no stack [ 624.170112][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.176707][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.213800][ T4268] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 624.228034][ T4268] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 624.236999][ T4268] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 624.248628][ T4268] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 624.262449][ T4268] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 624.270287][ T4268] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 624.511176][T14823] netlink: 'syz.2.3354': attribute type 11 has an invalid length. [ 624.592498][T14823] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3354'. [ 625.055259][T14828] netlink: 'syz.0.3355': attribute type 39 has an invalid length. [ 625.402423][T14820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 625.472010][T14828] device veth0_macvtap left promiscuous mode [ 625.888037][T14841] netlink: 'syz.2.3359': attribute type 16 has an invalid length. [ 625.904742][T14841] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3359'. [ 625.992673][T14818] chnl_net:caif_netlink_parms(): no params data found [ 626.276461][ T8880] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.311445][ T4268] Bluetooth: hci5: command 0x0409 tx timeout [ 626.348113][T14852] netlink: 'syz.4.3363': attribute type 10 has an invalid length. [ 626.394925][T14852] team0: Port device dummy0 removed [ 626.406914][T14852] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 627.229551][ T8880] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.349623][ T8880] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.523094][ T8880] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.535642][T14818] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.549675][T14818] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.558438][T14818] device bridge_slave_0 entered promiscuous mode [ 627.574604][T14818] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.586772][T14818] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.596782][T14818] device bridge_slave_1 entered promiscuous mode [ 627.660081][T14818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 627.710712][T14818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 627.863581][T14818] team0: Port device team_slave_0 added [ 627.883128][T14818] team0: Port device team_slave_1 added [ 627.977045][T14818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.990291][T14818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 628.041325][T14818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 628.071292][T14818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 628.089016][T14818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 628.120678][T14818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 628.270235][T14818] device hsr_slave_0 entered promiscuous mode [ 628.296619][T14818] device hsr_slave_1 entered promiscuous mode [ 628.332102][T14818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 628.360082][T14818] Cannot create hsr debugfs directory [ 628.374053][ T8880] tipc: Left network mode [ 628.391164][ T4268] Bluetooth: hci5: command 0x041b tx timeout [ 630.438939][T14924] netlink: 'syz.4.3383': attribute type 10 has an invalid length. [ 630.448418][T14924] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3383'. [ 630.481332][ T4268] Bluetooth: hci5: command 0x040f tx timeout [ 631.931616][T14923] delete_channel: no stack [ 631.975295][T14924] netlink: 'syz.4.3383': attribute type 21 has an invalid length. [ 632.561368][ T4268] Bluetooth: hci5: command 0x0419 tx timeout [ 632.877472][ T8880] team0: Port device wlan1 removed [ 632.928877][T14818] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 632.991923][T14818] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 633.271589][T14953] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3389'. [ 633.496198][T14953] team0: Port device team_slave_0 removed [ 633.563406][T14953] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 633.600628][T14818] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 633.643820][T14818] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 633.716330][ T8880] device hsr_slave_0 left promiscuous mode [ 633.737065][ T8880] device hsr_slave_1 left promiscuous mode [ 633.786099][ T8880] bridge0: port 3(dummy0) entered disabled state [ 633.803433][ T8880] device bridge_slave_1 left promiscuous mode [ 633.809955][ T8880] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.848139][ T8880] device bridge_slave_0 left promiscuous mode [ 633.868657][ T8880] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.956302][ T8880] device veth1_macvtap left promiscuous mode [ 633.979317][ T8880] device veth1_vlan left promiscuous mode [ 635.197625][ T8880] team0 (unregistering): Port device geneve1 removed [ 635.872330][ T8880] team0 (unregistering): Port device team_slave_1 removed [ 635.935962][ T8880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 636.191063][ T8880] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 636.199937][ T8880] bond0 (unregistering): Released all slaves [ 636.307262][T14986] netlink: 'syz.4.3394': attribute type 21 has an invalid length. [ 636.316653][T14986] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3394'. [ 636.338675][T14991] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.3395'. [ 636.361145][T14991] netlink: 6332 bytes leftover after parsing attributes in process `syz.1.3395'. [ 636.706319][T14818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 636.747794][ T8906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 636.785866][ T8906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 636.823587][T14818] 8021q: adding VLAN 0 to HW filter on device team0 [ 636.853294][ T8899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 636.895409][ T8899] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 636.923834][ T8899] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.931013][ T8899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.996249][ T8899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 637.037682][ T8899] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 637.081768][ T8899] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.089045][ T8899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 637.255370][ T8899] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 637.283069][ T8899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 637.322609][ T8899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 637.356927][ T8899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 637.394081][ T8899] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 637.423267][ T8899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 637.472084][ T8899] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 637.530738][T14818] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 637.603029][T14818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 637.684423][T15035] netlink: 'syz.4.3404': attribute type 10 has an invalid length. [ 638.566955][ T8899] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 638.575329][ T8899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 638.612229][ T8899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 638.636846][ T8899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 638.691257][ T8899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 638.729352][ T8899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 639.167183][T15058] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3410'. [ 639.668303][T15058] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 639.896625][T15058] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 639.941448][T15058] bond0 (unregistering): Released all slaves [ 640.029151][T14818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.042699][ T8863] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 640.050264][ T8863] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 640.111631][ T8863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 640.131660][ T8863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 640.178399][T14818] device veth0_vlan entered promiscuous mode [ 640.199558][ T8863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 640.210257][ T8863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 640.239633][T14818] device veth1_vlan entered promiscuous mode [ 640.252074][ T8863] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 640.263291][ T8863] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 640.277423][ T8863] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 640.328272][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 640.348568][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 640.384841][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 640.428372][T14818] device veth0_macvtap entered promiscuous mode [ 640.456527][T14818] device veth1_macvtap entered promiscuous mode [ 640.493424][T14818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.515860][T14818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.530983][T14818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.551080][T14818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.570923][T14818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.598477][T14818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.618064][T14818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.638828][T14818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.660669][T14818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 640.689174][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 640.708033][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 640.732923][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 640.746450][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 640.757239][T14818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.790015][T14818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.821995][T14818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.851124][T14818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.891123][T14818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.922016][T14818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.951319][T14818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.979318][T14818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.011536][T14818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 641.052030][ T8882] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 641.071069][ T8882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 641.093690][T14818] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.122917][T14818] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.141036][T14818] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.170072][T14818] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.345824][ T8908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.366312][ T8908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.408357][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 641.517022][ T8908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.531705][ T8908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.558315][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 641.947024][T15111] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 643.122267][T15129] netlink: 'syz.0.3432': attribute type 10 has an invalid length. [ 643.187620][T15129] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3432'. [ 643.259642][T15129] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 643.274257][T15129] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.365943][T15129] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 643.397401][T15131] netlink: 'syz.0.3432': attribute type 21 has an invalid length. [ 643.433377][T15124] delete_channel: no stack [ 643.560740][T15148] netlink: 'syz.3.3438': attribute type 10 has an invalid length. [ 643.970007][T15155] delete_channel: no stack [ 644.242970][T15166] netlink: 'syz.1.3446': attribute type 10 has an invalid length. [ 644.273940][T15166] team0: Device dummy0 is up. Set it down before adding it as a team port [ 645.053351][T15180] netlink: 'syz.4.3451': attribute type 6 has an invalid length. [ 645.071082][T15180] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3451'. [ 645.447688][T15188] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3455'. [ 645.466620][T15188] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 645.564924][T15186] netlink: 'syz.3.3454': attribute type 39 has an invalid length. [ 645.669311][T15186] device veth0_macvtap left promiscuous mode [ 646.727556][T15208] netlink: 'syz.0.3462': attribute type 4 has an invalid length. [ 646.759326][T15208] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3462'. [ 648.273327][T15241] netlink: 'syz.4.3472': attribute type 39 has an invalid length. [ 648.503270][T15244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3473'. [ 648.660521][T15254] netlink: 'syz.1.3478': attribute type 23 has an invalid length. [ 649.456230][T15286] netlink: 'syz.0.3486': attribute type 10 has an invalid length. [ 649.485171][T15286] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3486'. [ 649.710518][T15286] netlink: 'syz.0.3486': attribute type 21 has an invalid length. [ 649.781465][T15285] netlink: 'syz.3.3487': attribute type 10 has an invalid length. [ 649.805480][T15279] delete_channel: no stack [ 649.824048][T15285] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3487'. [ 649.903874][T15285] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 649.929609][T15285] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 650.068911][T15285] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 650.144890][T15287] netlink: 'syz.3.3487': attribute type 21 has an invalid length. [ 650.262228][T15284] delete_channel: no stack [ 650.349084][T15300] netlink: 'syz.4.3493': attribute type 3 has an invalid length. [ 650.441443][T15300] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3493'. [ 651.046358][T15324] netlink: 'syz.3.3502': attribute type 10 has an invalid length. [ 651.151379][T15324] team0: Device hsr_slave_0 failed to register rx_handler [ 651.625131][T15338] netlink: 'syz.0.3507': attribute type 6 has an invalid length. [ 651.668405][T15338] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3507'. [ 652.936219][T15379] netlink: 'syz.0.3522': attribute type 10 has an invalid length. [ 653.001972][T15379] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 653.090120][T15382] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.3524'. [ 653.805347][T15413] netlink: 'syz.0.3535': attribute type 10 has an invalid length. [ 653.825965][T15413] bond0: (slave dummy0): Releasing backup interface [ 653.888649][T15413] team0: Port device dummy0 added [ 653.917311][T15412] netlink: 'syz.4.3537': attribute type 21 has an invalid length. [ 653.966270][T15412] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3537'. [ 654.427205][T15426] netlink: 'syz.4.3543': attribute type 10 has an invalid length. [ 654.453226][T15426] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3543'. [ 654.559059][T15426] netlink: 'syz.4.3543': attribute type 21 has an invalid length. [ 654.712581][T15425] delete_channel: no stack [ 655.699951][T15449] netlink: 'syz.1.3549': attribute type 10 has an invalid length. [ 655.741510][T15449] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3549'. [ 655.877395][T15446] netlink: 'syz.1.3549': attribute type 21 has an invalid length. [ 656.001755][T15452] netlink: 'syz.3.3551': attribute type 4 has an invalid length. [ 656.009578][T15452] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3551'. [ 656.031071][T15445] delete_channel: no stack [ 656.518221][T15461] device syzkaller0 entered promiscuous mode [ 656.526269][T15463] netlink: 'syz.0.3556': attribute type 10 has an invalid length. [ 656.535263][T15463] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3556'. [ 656.576646][T15463] netlink: 'syz.0.3556': attribute type 21 has an invalid length. [ 656.633582][T15462] delete_channel: no stack [ 656.683706][T15466] netlink: 'syz.4.3557': attribute type 3 has an invalid length. [ 656.701280][T15466] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3557'. [ 657.484169][T15488] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3564'. [ 658.845750][T15484] netlink: 'syz.2.3562': attribute type 39 has an invalid length. [ 658.859843][T15484] device veth0_macvtap left promiscuous mode [ 659.499737][T15508] netlink: 'syz.1.3570': attribute type 10 has an invalid length. [ 659.524047][T15508] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3570'. [ 659.554404][T15508] netlink: 'syz.1.3570': attribute type 21 has an invalid length. [ 659.681604][T15503] delete_channel: no stack [ 659.828653][T15522] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.3575'. [ 659.914729][T15522] openvswitch: netlink: Flow actions attr not present in new flow. [ 660.024673][T15527] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3578'. [ 660.197254][T15531] netlink: 'syz.4.3580': attribute type 39 has an invalid length. [ 660.324576][T15535] netlink: 'syz.2.3581': attribute type 10 has an invalid length. [ 660.445414][T15535] team0: Port device geneve1 added [ 662.193227][T15579] netlink: 'syz.4.3596': attribute type 10 has an invalid length. [ 662.267768][T15583] netlink: 'syz.2.3598': attribute type 39 has an invalid length. [ 662.460269][T15588] netlink: 'syz.4.3599': attribute type 39 has an invalid length. [ 662.791608][T15596] netlink: 'syz.1.3601': attribute type 39 has an invalid length. [ 662.884570][T15596] device veth0_macvtap left promiscuous mode [ 663.116054][T15606] netlink: 'syz.4.3606': attribute type 29 has an invalid length. [ 663.707246][T15625] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3610'. [ 663.853564][T15621] delete_channel: no stack [ 663.884047][T15627] validate_nla: 5 callbacks suppressed [ 663.884078][T15627] netlink: 'syz.2.3612': attribute type 29 has an invalid length. [ 664.043609][T15631] netlink: 'syz.1.3614': attribute type 39 has an invalid length. [ 664.328884][T15630] netlink: 'syz.3.3613': attribute type 10 has an invalid length. [ 664.379459][T15630] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3613'. [ 664.505255][T15641] netlink: 'syz.2.3617': attribute type 39 has an invalid length. [ 665.137694][T15654] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3620'. [ 665.203874][T15654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 665.324755][T15654] team0: Port device team_slave_0 removed [ 665.357172][T15654] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 665.374274][T15628] delete_channel: no stack [ 665.514783][T15663] netlink: 184 bytes leftover after parsing attributes in process `syz.1.3624'. [ 665.713929][T15669] netlink: 'syz.3.3625': attribute type 39 has an invalid length. [ 665.917270][T15673] netlink: 'syz.4.3627': attribute type 10 has an invalid length. [ 665.931840][T15673] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3627'. [ 665.973271][T15673] netlink: 'syz.4.3627': attribute type 21 has an invalid length. [ 666.066838][T15671] delete_channel: no stack [ 666.549495][T15682] netlink: 'syz.1.3628': attribute type 4 has an invalid length. [ 666.621034][T15682] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3628'. [ 666.839685][T15686] netlink: 'syz.3.3630': attribute type 39 has an invalid length. [ 667.067952][T15692] device syzkaller0 entered promiscuous mode [ 667.190992][T13274] Bluetooth: hci4: command 0x0406 tx timeout [ 667.326413][T15698] netlink: 'syz.4.3634': attribute type 39 has an invalid length. [ 668.439853][T15717] sctp: [Deprecated]: syz.3.3641 (pid 15717) Use of struct sctp_assoc_value in delayed_ack socket option. [ 668.439853][T15717] Use struct sctp_sack_info instead [ 668.959635][T15725] netlink: 'syz.3.3643': attribute type 3 has an invalid length. [ 668.971691][T15725] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3643'. [ 670.123364][T15711] bond0: (slave bridge0): Error: Slave device does not support XDP [ 670.297422][T15727] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3644'. [ 670.829679][T15746] netlink: 212940 bytes leftover after parsing attributes in process `syz.4.3647'. [ 670.866695][T15745] netlink: 'syz.2.3648': attribute type 39 has an invalid length. [ 671.372647][T15753] netlink: 'syz.1.3653': attribute type 10 has an invalid length. [ 671.392229][T15753] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3653'. [ 671.424958][T15753] netlink: 'syz.1.3653': attribute type 21 has an invalid length. [ 671.491990][T15752] delete_channel: no stack [ 671.994103][T15767] device syzkaller0 entered promiscuous mode [ 672.050364][T15778] netlink: 'syz.4.3660': attribute type 10 has an invalid length. [ 674.764274][T15808] netlink: 'syz.2.3669': attribute type 10 has an invalid length. [ 674.814830][T15808] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3669'. [ 674.902203][T15805] netlink: 'syz.2.3669': attribute type 21 has an invalid length. [ 675.001773][T15804] delete_channel: no stack [ 675.070242][T15817] netlink: 'syz.1.3673': attribute type 10 has an invalid length. [ 675.589095][T15837] netlink: 'syz.4.3682': attribute type 10 has an invalid length. [ 675.606980][T15837] bond0: (slave dummy0): Releasing backup interface [ 675.642651][T15837] team0: Port device dummy0 added [ 676.077504][T15847] netlink: 'syz.3.3686': attribute type 7 has an invalid length. [ 676.290469][T15851] netlink: 'syz.4.3687': attribute type 35 has an invalid length. [ 676.439175][T15849] netlink: 'syz.3.3688': attribute type 10 has an invalid length. [ 676.464962][T15849] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3688'. [ 676.523467][T15849] netlink: 'syz.3.3688': attribute type 21 has an invalid length. [ 676.592525][T15848] delete_channel: no stack [ 677.426678][T15873] netlink: 'syz.1.3697': attribute type 13 has an invalid length. [ 677.458478][T15873] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3697'. [ 677.524797][T15873] syz_tun: refused to change device tx_queue_len [ 677.545395][T15873] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 677.931856][T15889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 677.939319][T15889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 677.962739][T15889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 677.980564][T15889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 678.069826][T15889] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 678.146799][T15889] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 678.739352][T15912] netlink: 'syz.2.3710': attribute type 4 has an invalid length. [ 678.756290][T15912] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3710'. [ 679.244274][T15923] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3713'. [ 680.467311][T15943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3721'. [ 680.844769][T15953] netlink: 'syz.1.3725': attribute type 33 has an invalid length. [ 680.863012][T15953] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3725'. [ 680.901336][T15958] netlink: 'syz.1.3725': attribute type 39 has an invalid length. [ 681.224996][T15964] netlink: 'syz.3.3729': attribute type 3 has an invalid length. [ 681.243535][T15964] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3729'. [ 681.553626][T15975] netlink: 212940 bytes leftover after parsing attributes in process `syz.0.3732'. [ 681.588338][T15977] netlink: 'syz.4.3735': attribute type 3 has an invalid length. [ 681.636766][T15977] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3735'. [ 682.550969][ T4268] Bluetooth: hci3: command 0x0406 tx timeout [ 682.597810][T15992] netlink: 'syz.4.3739': attribute type 39 has an invalid length. [ 683.069404][T15995] device syzkaller0 entered promiscuous mode [ 683.683084][T16003] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3743'. [ 685.599089][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.605809][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.748353][T16006] netlink: 'syz.4.3744': attribute type 10 has an invalid length. [ 685.762419][T16008] device bond_slave_1 entered promiscuous mode [ 685.969130][T16019] netlink: 'syz.0.3747': attribute type 3 has an invalid length. [ 685.977098][T16019] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3747'. [ 686.066455][T16020] netlink: 'syz.3.3749': attribute type 10 has an invalid length. [ 686.109386][T16020] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3749'. [ 686.175740][T16020] netlink: 'syz.3.3749': attribute type 21 has an invalid length. [ 686.270160][T16017] delete_channel: no stack [ 686.421647][T16026] netlink: 'syz.4.3751': attribute type 10 has an invalid length. [ 686.450429][T16026] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3751'. [ 686.482648][T16026] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 686.550119][T16029] netlink: 'syz.4.3751': attribute type 21 has an invalid length. [ 686.751810][T16025] delete_channel: no stack [ 686.840447][T16037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 686.891227][T16037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 686.940611][T16037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 687.001303][T16037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 687.044359][T16037] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 687.068569][T16037] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 687.224630][T16043] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3758'. [ 687.255618][T16049] netlink: 'syz.2.3760': attribute type 10 has an invalid length. [ 687.270156][T16049] bond0: (slave dummy0): Releasing backup interface [ 687.293703][T16049] team0: Port device dummy0 added [ 687.771987][T16062] netlink: 'syz.2.3765': attribute type 3 has an invalid length. [ 687.780420][T16062] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3765'. [ 688.132976][T16065] netlink: 'syz.3.3767': attribute type 3 has an invalid length. [ 688.193562][T16069] netlink: 'syz.2.3769': attribute type 10 has an invalid length. [ 688.202338][T16065] netlink: 'syz.3.3767': attribute type 4 has an invalid length. [ 688.221290][T16069] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3769'. [ 688.262507][T16065] netlink: 9067 bytes leftover after parsing attributes in process `syz.3.3767'. [ 688.331644][T16068] delete_channel: no stack [ 688.509334][T16073] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3770'. [ 688.559451][T16073] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate. [ 689.663043][T16098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3778'. [ 689.905005][T16107] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3782'. [ 689.927686][T16107] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 690.883254][T16113] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3784'. [ 691.092495][T16113] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 691.301758][T16111] delete_channel: no stack [ 691.323481][T16120] validate_nla: 4 callbacks suppressed [ 691.323497][T16120] netlink: 'syz.3.3784': attribute type 21 has an invalid length. [ 691.614723][T16125] TCP: TCP_TX_DELAY enabled [ 691.996271][T16135] netlink: 'syz.0.3790': attribute type 4 has an invalid length. [ 692.116156][T16135] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3790'. [ 692.750280][T16147] netlink: 'syz.0.3793': attribute type 10 has an invalid length. [ 692.876396][T16147] team0: Port device dummy0 removed [ 692.931026][T16147] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 693.459832][T16156] netlink: 'syz.1.3798': attribute type 39 has an invalid length. [ 694.667402][T16187] netlink: 'syz.2.3810': attribute type 10 has an invalid length. [ 694.708496][T16184] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3809'. [ 694.765548][T16187] team0: Port device dummy0 removed [ 694.784535][T16187] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 694.833310][T16189] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3811'. [ 694.875347][T16184] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3809'. [ 694.926386][T16191] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3809'. [ 695.001600][T16195] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3809'. [ 695.816966][T16221] netlink: 'syz.1.3820': attribute type 39 has an invalid length. [ 696.261517][T16225] netlink: 'syz.4.3822': attribute type 21 has an invalid length. [ 696.269522][T16225] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3822'. [ 696.349059][T16219] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.3812'. [ 696.587936][T16230] netlink: 'syz.0.3823': attribute type 21 has an invalid length. [ 697.058256][T16236] netlink: 'syz.1.3825': attribute type 10 has an invalid length. [ 697.088675][T16236] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3825'. [ 697.186700][T16236] netlink: 'syz.1.3825': attribute type 21 has an invalid length. [ 697.481280][T16235] delete_channel: no stack [ 698.401693][T16257] netlink: 'syz.2.3833': attribute type 10 has an invalid length. [ 699.546306][T16269] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3836'. [ 700.224441][T16277] netlink: 'syz.3.3839': attribute type 10 has an invalid length. [ 700.241287][T16277] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3839'. [ 700.324868][T16277] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 700.472469][T16277] netlink: 'syz.3.3839': attribute type 21 has an invalid length. [ 700.572107][T16276] delete_channel: no stack [ 701.570401][T16271] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.3837'. [ 702.102616][T16318] netlink: 'syz.4.3852': attribute type 10 has an invalid length. [ 702.124534][T16318] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3852'. [ 702.143822][T16318] device batadv_slave_1 entered promiscuous mode [ 702.183841][T16315] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3852'. [ 702.266522][T16320] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3855'. [ 702.429232][T16331] netlink: 'syz.3.3856': attribute type 37 has an invalid length. [ 702.577363][T16325] netlink: 'syz.0.3854': attribute type 10 has an invalid length. [ 702.612497][T16325] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3854'. [ 702.794563][T16327] netlink: 'syz.0.3854': attribute type 21 has an invalid length. [ 702.898288][T16333] device pim6reg1 entered promiscuous mode [ 702.904739][T16322] delete_channel: no stack [ 703.022875][T16340] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3860'. [ 703.031168][T13274] Bluetooth: hci0: command 0x0406 tx timeout [ 703.093129][T16341] netlink: 'syz.4.3859': attribute type 10 has an invalid length. [ 703.207603][T16341] team0: Port device dummy0 removed [ 703.221825][T16341] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 704.094538][T16355] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3863'. [ 704.156170][T16355] netlink: 'syz.3.3863': attribute type 10 has an invalid length. [ 704.175413][T16355] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3863'. [ 704.202737][T16355] device dummy0 entered promiscuous mode [ 704.235785][T16355] bridge0: port 3(dummy0) entered blocking state [ 704.255190][T16355] bridge0: port 3(dummy0) entered disabled state [ 704.280703][T16355] bridge0: port 3(dummy0) entered blocking state [ 704.288284][T16355] bridge0: port 3(dummy0) entered forwarding state [ 704.376570][T16353] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.3862'. [ 705.459081][T16378] netlink: 'syz.4.3871': attribute type 10 has an invalid length. [ 705.491220][T16378] __nla_validate_parse: 1 callbacks suppressed [ 705.491237][T16378] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3871'. [ 705.579134][T16378] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 705.696520][T16381] netlink: 'syz.4.3871': attribute type 21 has an invalid length. [ 705.822113][T16377] delete_channel: no stack [ 706.836120][T16404] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3881'. [ 706.857151][T16404] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 707.105964][T16410] netlink: 'syz.4.3883': attribute type 39 has an invalid length. [ 707.622442][T16421] netlink: 'syz.0.3887': attribute type 10 has an invalid length. [ 707.630513][T16421] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3887'. [ 707.849161][T16423] netlink: 'syz.0.3887': attribute type 21 has an invalid length. [ 708.114735][T16420] delete_channel: no stack [ 708.562599][T16434] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.3892'. [ 708.737614][T16442] netlink: 'syz.3.3894': attribute type 4 has an invalid length. [ 708.792091][T16442] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3894'. [ 710.711100][T16487] netlink: 'syz.0.3911': attribute type 10 has an invalid length. [ 710.775355][T16487] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.783491][T16487] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.344278][T16507] netlink: 'syz.2.3919': attribute type 21 has an invalid length. [ 711.380977][T16507] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3919'. [ 711.858039][T16513] netlink: 'syz.3.3920': attribute type 13 has an invalid length. [ 711.973768][T16513] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3920'. [ 712.085094][T16513] syz_tun: refused to change device tx_queue_len [ 712.198111][T16513] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 712.826974][T16532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3927'. [ 713.043263][T16536] netlink: 'syz.0.3929': attribute type 1 has an invalid length. [ 713.072922][T16536] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.3929'. [ 713.130796][T16534] netlink: 'syz.3.3928': attribute type 3 has an invalid length. [ 713.176634][T16534] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3928'. [ 713.709047][T16548] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3933'. [ 713.964537][T16552] netlink: 'syz.3.3934': attribute type 10 has an invalid length. [ 714.934247][T16552] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.944917][T16552] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.956182][T16552] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.968048][T16552] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.013473][T16552] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.070954][T16552] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.079723][T16552] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.115427][T16552] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.137187][T16552] team0: Port device geneve1 added [ 715.172072][T16567] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3938'. [ 715.275585][T16555] device syzkaller0 entered promiscuous mode [ 715.557936][T16566] IPv6: Can't replace route, no match found [ 715.601029][T16571] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 717.862445][T16600] netlink: 'syz.0.3949': attribute type 10 has an invalid length. [ 718.072986][T16613] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3955'. [ 718.126840][T16613] netlink: 'syz.4.3955': attribute type 10 has an invalid length. [ 718.163944][T16613] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3955'. [ 718.194508][T16613] device dummy0 entered promiscuous mode [ 718.249387][T16613] bond0: (slave dummy0): Releasing backup interface [ 718.269696][T16613] bridge0: port 3(dummy0) entered blocking state [ 718.276404][T16613] bridge0: port 3(dummy0) entered disabled state [ 718.299650][T16617] netlink: 'syz.1.3956': attribute type 10 has an invalid length. [ 718.316602][T16620] netlink: 'syz.0.3957': attribute type 39 has an invalid length. [ 719.046676][T16641] netlink: 'syz.1.3965': attribute type 10 has an invalid length. [ 719.560544][T16658] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3970'. [ 719.656912][T16658] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 719.765276][T16661] device sit0 entered promiscuous mode [ 720.180498][T16678] netlink: 'syz.0.3980': attribute type 39 has an invalid length. [ 720.305183][T16682] netlink: 'syz.3.3981': attribute type 4 has an invalid length. [ 720.367381][T16682] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3981'. [ 720.503876][T16684] netlink: 'syz.1.3983': attribute type 10 has an invalid length. [ 720.522220][T16684] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3983'. [ 720.560526][T16684] netlink: 'syz.1.3983': attribute type 21 has an invalid length. [ 720.661274][T16683] delete_channel: no stack [ 720.750718][T16692] netlink: 763 bytes leftover after parsing attributes in process `syz.2.3984'. [ 720.825386][T16695] netlink: 763 bytes leftover after parsing attributes in process `syz.2.3984'. [ 721.830658][T16714] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.3992'. [ 721.870096][T16714] netlink: 6955 bytes leftover after parsing attributes in process `syz.0.3992'. [ 721.967042][T16723] netlink: 'syz.1.3995': attribute type 4 has an invalid length. [ 721.991034][T16723] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3995'. [ 722.144300][T16728] netlink: 'syz.4.3999': attribute type 39 has an invalid length. [ 723.378735][T16755] validate_nla: 1 callbacks suppressed [ 723.378755][T16755] netlink: 'syz.4.4008': attribute type 13 has an invalid length. [ 723.427880][T16755] __nla_validate_parse: 1 callbacks suppressed [ 723.427897][T16755] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4008'. [ 723.452206][T16755] syz_tun: refused to change device tx_queue_len [ 723.478925][T16755] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 723.511896][ T4268] Bluetooth: hci1: command 0x0406 tx timeout [ 723.701364][T16765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4009'. [ 723.812939][T16761] netlink: 'syz.3.4011': attribute type 3 has an invalid length. [ 723.882048][T16761] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4011'. [ 724.195850][T16780] netlink: 'syz.1.4014': attribute type 10 has an invalid length. [ 724.323810][T16780] team0: Port device geneve1 added [ 724.435440][T16785] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.4017'. [ 724.512878][T16788] netlink: 'syz.0.4019': attribute type 39 has an invalid length. [ 726.458435][T16793] delete_channel: no stack [ 726.519845][T16794] netlink: 'syz.4.4020': attribute type 10 has an invalid length. [ 726.537302][T16794] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4020'. [ 726.572052][T16794] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 726.613932][T16797] netlink: 'syz.4.4020': attribute type 21 has an invalid length. [ 726.919294][T16812] netlink: 'syz.4.4027': attribute type 10 has an invalid length. [ 726.952231][T16812] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.960040][T16812] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.078911][T16816] netlink: 463 bytes leftover after parsing attributes in process `syz.2.4028'. [ 727.342023][T16823] netlink: 'syz.4.4032': attribute type 39 has an invalid length. [ 727.394168][T16820] netlink: 'syz.3.4030': attribute type 10 has an invalid length. [ 727.515235][T16820] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4030'. [ 727.667657][T16820] bridge0: port 4(veth0_vlan) entered blocking state [ 727.699544][T16820] bridge0: port 4(veth0_vlan) entered disabled state [ 728.005666][T16820] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 728.428440][T16840] netlink: 'syz.2.4034': attribute type 10 has an invalid length. [ 728.540466][T16839] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.4035'. [ 728.571549][T16839] netlink: zone id is out of range [ 728.577162][T16839] netlink: zone id is out of range [ 728.598246][T16839] netlink: zone id is out of range [ 728.656639][T16839] netlink: zone id is out of range [ 728.667004][T16839] netlink: get zone limit has 8 unknown bytes [ 728.693521][T16845] netlink: 'syz.3.4036': attribute type 10 has an invalid length. [ 728.710939][T16845] bridge0: port 3(dummy0) entered disabled state [ 728.780222][T16845] team0: Device dummy0 is up. Set it down before adding it as a team port [ 729.009508][T16852] netlink: 'syz.1.4038': attribute type 10 has an invalid length. [ 729.101497][T16852] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4038'. [ 729.173997][T16848] netlink: 'syz.1.4038': attribute type 21 has an invalid length. [ 729.311266][T16847] delete_channel: no stack [ 729.528968][T16859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4042'. [ 729.745281][T16863] netlink: 'syz.3.4041': attribute type 10 has an invalid length. [ 729.832658][T16863] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4041'. [ 729.908052][T16863] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 730.096618][T16866] netlink: 'syz.3.4041': attribute type 21 has an invalid length. [ 730.305479][T16862] delete_channel: no stack [ 730.346969][T16870] netlink: 'syz.0.4045': attribute type 39 has an invalid length. [ 730.519965][T16875] netlink: 'syz.1.4047': attribute type 10 has an invalid length. [ 730.540093][T16875] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4047'. [ 730.708978][T16875] bridge0: port 3(veth0_vlan) entered blocking state [ 730.804019][T16875] bridge0: port 3(veth0_vlan) entered disabled state [ 731.099761][T16875] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 746.235916][ T4268] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 746.245453][ T4268] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 746.253750][ T4268] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 746.262535][ T4268] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 746.270698][ T4268] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 746.291316][ T4268] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 747.078723][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.085279][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.322603][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 750.421140][T13274] Bluetooth: hci2: command 0x041b tx timeout [ 750.642755][T13274] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 750.660554][T13274] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 750.668844][T13274] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 750.679627][ T4268] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 750.687930][ T4268] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 750.696144][ T4268] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 751.492318][T13274] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 751.501118][T13274] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 751.511977][T13274] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 751.519689][T13274] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 751.535015][T13274] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 751.542409][T13274] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 751.552897][T13274] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 751.560560][T13274] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 751.570159][T13274] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 751.579114][T13274] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 751.586728][T13274] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 751.595454][T13274] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 752.480958][T16915] Bluetooth: hci2: command 0x040f tx timeout [ 752.520338][T13274] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 752.541072][T13274] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 752.549174][T13274] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 752.558605][T13274] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 752.566736][T13274] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 752.579631][T13274] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 752.721371][T16915] Bluetooth: hci6: command 0x0409 tx timeout [ 753.621396][T16915] Bluetooth: hci7: command 0x0409 tx timeout [ 753.671931][T16915] Bluetooth: hci8: command 0x0409 tx timeout [ 754.571660][T16915] Bluetooth: hci2: command 0x0419 tx timeout [ 754.671611][T16915] Bluetooth: hci9: command 0x0409 tx timeout [ 754.821626][T16915] Bluetooth: hci6: command 0x041b tx timeout [ 755.671259][T16915] Bluetooth: hci7: command 0x041b tx timeout [ 755.771895][T16915] Bluetooth: hci8: command 0x041b tx timeout [ 756.721552][T16915] Bluetooth: hci9: command 0x041b tx timeout [ 756.871378][T16915] Bluetooth: hci6: command 0x040f tx timeout [ 757.771543][T16915] Bluetooth: hci7: command 0x040f tx timeout [ 757.871667][T16915] Bluetooth: hci8: command 0x040f tx timeout [ 758.571484][ T26] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2646 jiffies s: 86817 root: 0x1/. [ 758.602083][ T26] rcu: blocking rcu_node structures (internal RCU debug): [ 758.609403][ T26] Sending NMI from CPU 1 to CPUs 0: [ 758.614745][ C0] NMI backtrace for cpu 0 [ 758.614755][ C0] CPU: 0 PID: 16887 Comm: syz.0.4049 Not tainted syzkaller #0 [ 758.614771][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 758.614780][ C0] RIP: 0010:lock_release+0x13c/0x920 [ 758.614807][ C0] Code: 7e 49 8d 9e dc 0a 00 00 48 89 d8 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 5b 05 00 00 83 3b 00 0f 85 6b 04 00 00 4c 89 74 24 08 <43> c6 44 2f 08 00 48 c7 84 24 a0 00 00 00 00 00 00 00 9c 8f 84 24 [ 758.614821][ C0] RSP: 0018:ffffc90000007480 EFLAGS: 00000046 [ 758.614834][ C0] RAX: 0000000000000000 RBX: ffff8880645cc65c RCX: c93a3a4d036a5a00 [ 758.614846][ C0] RDX: 0000000000000000 RSI: ffffffff8adf0d00 RDI: ffffffff8adf0cc0 [ 758.614857][ C0] RBP: ffffc90000007590 R08: ffffffff8e1fcb6f R09: 1ffffffff1c3f96d [ 758.614869][ C0] R10: dffffc0000000000 R11: fffffbfff1c3f96e R12: dffffc0000000000 [ 758.614881][ C0] R13: dffffc0000000000 R14: ffff8880645cbb80 R15: 1ffff92000000e9c [ 758.614894][ C0] FS: 00007f9327fd66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 758.614908][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 758.614919][ C0] CR2: 00007fd6d13f6990 CR3: 0000000024a2f000 CR4: 00000000003506f0 [ 758.614934][ C0] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 758.614944][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 758.614954][ C0] Call Trace: [ 758.614959][ C0] [ 758.614969][ C0] ? __virt_addr_valid+0x188/0x540 [ 758.614993][ C0] ? perf_swevent_get_recursion_context+0xda/0x150 [ 758.615021][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 758.615041][ C0] ? perf_trace_buf_alloc+0x12c/0x300 [ 758.615059][ C0] ? verify_lock_unused+0x140/0x140 [ 758.615082][ C0] ? perf_trace_lock_acquire+0x19f/0x3e0 [ 758.615103][ C0] ? __virt_addr_valid+0x188/0x540 [ 758.615125][ C0] ? __virt_addr_valid+0x188/0x540 [ 758.615147][ C0] __virt_addr_valid+0x435/0x540 [ 758.615172][ C0] kasan_addr_to_slab+0x9/0xc0 [ 758.615194][ C0] __kasan_record_aux_stack+0xf/0xc0 [ 758.615210][ C0] irq_work_queue_on+0x10f/0x260 [ 758.615237][ C0] rcu_read_unlock_special+0x3c9/0x510 [ 758.615260][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 758.615279][ C0] ? __cant_sleep+0x220/0x220 [ 758.615303][ C0] __rcu_read_unlock+0x78/0xd0 [ 758.615317][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 758.615341][ C0] trace_call_bpf+0x5bb/0x6b0 [ 758.615362][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 758.615391][ C0] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 758.615422][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 758.615436][ C0] ? sched_clock_cpu+0x6e/0x260 [ 758.615461][ C0] perf_trace_run_bpf_submit+0x79/0x1c0 [ 758.615490][ C0] perf_trace_preemptirq_template+0x268/0x320 [ 758.615515][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 758.615535][ C0] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 758.615560][ C0] ? __irq_exit_rcu+0x147/0x230 [ 758.615575][ C0] ? irq_exit_rcu+0x20/0x20 [ 758.615594][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 758.615612][ C0] trace_irq_enable_rcuidle+0xd3/0x140 [ 758.615637][ C0] trace_hardirqs_on+0x24/0x40 [ 758.615668][ C0] asm_sysvec_irq_work+0x16/0x20 [ 758.615684][ C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 758.615700][ C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 92 31 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 758.615712][ C0] RSP: 0018:ffffc90000007aa0 EFLAGS: 00000206 [ 758.615723][ C0] RAX: c93a3a4d036a5a00 RBX: 1ffff92000000f5c RCX: c93a3a4d036a5a00 [ 758.615734][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0d20 [ 758.615744][ C0] RBP: ffffc90000007b90 R08: ffffffff90af42df R09: 1ffffffff215e85b [ 758.615755][ C0] R10: dffffc0000000000 R11: fffffbfff215e85c R12: 0000000000000246 [ 758.615765][ C0] R13: dffffc0000000000 R14: ffff8880b8e3b900 R15: 0000000000000001 [ 758.615791][ C0] ? mac80211_hwsim_beacon_tx+0x61e/0xae0 [ 758.615812][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 758.615839][ C0] __rcu_read_unlock+0x78/0xd0 [ 758.615852][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 758.615875][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 758.615890][ C0] ieee80211_iterate_active_interfaces_atomic+0x156/0x170 [ 758.615915][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 758.615941][ C0] __hrtimer_run_queues+0x560/0xd70 [ 758.615967][ C0] ? hw_scan_work+0xf50/0xf50 [ 758.615998][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 758.616015][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 758.616043][ C0] hrtimer_run_softirq+0x183/0x2a0 [ 758.616064][ C0] handle_softirqs+0x2a1/0x930 [ 758.616086][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 758.616105][ C0] ? do_softirq+0x210/0x210 [ 758.616123][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 758.616141][ C0] __irq_exit_rcu+0x13b/0x230 [ 758.616155][ C0] ? irq_exit_rcu+0x20/0x20 [ 758.616179][ C0] irq_exit_rcu+0x5/0x20 [ 758.616191][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 758.616216][ C0] [ 758.616220][ C0] [ 758.616225][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 758.616242][ C0] RIP: 0010:lock_acquire+0x225/0x4a0 [ 758.616262][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 758.616273][ C0] RSP: 0018:ffffc90003fe7380 EFLAGS: 00000206 [ 758.616285][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: c93a3a4d036a5a00 [ 758.616294][ C0] RDX: 0000000000000000 RSI: ffffffff8a8c23a0 RDI: ffffffff8adf0d20 [ 758.616304][ C0] RBP: ffffc90003fe74a0 R08: dffffc0000000000 R09: 1ffffffff215e848 [ 758.616315][ C0] R10: dffffc0000000000 R11: fffffbfff215e849 R12: 0000000000000000 [ 758.616325][ C0] R13: 1ffff920007fce7c R14: 0000000000000246 R15: dffffc0000000000 [ 758.616360][ C0] ? read_lock_is_recursive+0x10/0x10 [ 758.616387][ C0] ? page_ext_put+0x98/0xb0 [ 758.616413][ C0] ? pfn_valid+0xcd/0x420 [ 758.616435][ C0] pfn_valid+0xe9/0x420 [ 758.616453][ C0] ? pfn_valid+0xcd/0x420 [ 758.616475][ C0] page_table_check_set+0x25/0x6d0 [ 758.616500][ C0] copy_page_range+0x24ea/0x3900 [ 758.616568][ C0] ? pfn_valid+0x450/0x450 [ 758.616603][ C0] ? up_write+0x1bb/0x420 [ 758.616619][ C0] ? vma_interval_tree_insert_after+0x245/0x2a0 [ 758.616642][ C0] copy_mm+0xec3/0x1690 [ 758.616658][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 758.616685][ C0] ? copy_signal+0x680/0x680 [ 758.616700][ C0] ? lockdep_init_map_type+0x98/0x8d0 [ 758.616738][ C0] ? __init_rwsem+0x11e/0x160 [ 758.616757][ C0] ? copy_signal+0x556/0x680 [ 758.616776][ C0] copy_process+0x1979/0x4030 [ 758.616798][ C0] ? debug_object_activate+0x4f0/0x4f0 [ 758.616822][ C0] ? copy_process+0x94d/0x4030 [ 758.616849][ C0] ? idle_dummy+0x10/0x10 [ 758.616868][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 758.616895][ C0] kernel_clone+0x24b/0x900 [ 758.616909][ C0] ? ktime_get+0x7b/0x270 [ 758.616924][ C0] ? ktime_get+0x7b/0x270 [ 758.616945][ C0] ? create_io_thread+0x170/0x170 [ 758.616968][ C0] ? perf_trace_preemptirq_template+0xa8/0x320 [ 758.616988][ C0] ? irqentry_enter+0x33/0x50 [ 758.617010][ C0] __x64_sys_clone+0x1a7/0x220 [ 758.617029][ C0] ? __ia32_sys_vfork+0x140/0x140 [ 758.617066][ C0] ? syscall_enter_from_user_mode+0x2a/0x80 [ 758.617085][ C0] do_syscall_64+0x4c/0xa0 [ 758.617103][ C0] ? clear_bhb_loop+0x60/0xb0 [ 758.617119][ C0] ? clear_bhb_loop+0x60/0xb0 [ 758.617138][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 758.617155][ C0] RIP: 0033:0x7f932719af79 [ 758.617168][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 758.617180][ C0] RSP: 002b:00007f9327fd5fd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 758.617194][ C0] RAX: ffffffffffffffda RBX: 00007f9327415fa0 RCX: 00007f932719af79 [ 758.617204][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000060080 [ 758.617213][ C0] RBP: 00007f93272316e0 R08: 0000000000000000 R09: 0000000000000000 [ 758.617222][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 758.617231][ C0] R13: 00007f9327416038 R14: 00007f9327415fa0 R15: 00007ffdd703be88 [ 758.617256][ C0] [ 758.822138][T16915] Bluetooth: hci9: command 0x040f tx timeout [ 759.439485][T13274] Bluetooth: hci6: command 0x0419 tx timeout [ 759.841616][T16915] Bluetooth: hci7: command 0x0419 tx timeout [ 759.941646][T16915] Bluetooth: hci8: command 0x0419 tx timeout [ 761.550855][T16915] Bluetooth: hci9: command 0x0419 tx timeout