last executing test programs: 5.311673042s ago: executing program 0 (id=3716): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)}, {&(0x7f0000000500)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badf0300797d62c09ada7441b4f31cd5e6fc4b2a325fb5e811fead55530751e6f4bc4b40d94743ed5bd8ec1fff7b0abcc6eaabeb7a2f5f985467a8db0d81c22b1d076db065fe18bfbbd23eced0adc3d0437a00b672be9fe5f8b4b05b7af57808aef1e5bfe0da1c164d2f14587c6cd75c90906768abfc4b00049707f52adac97728118ed82ca03422689145554b656b8a928a7b2923b93d3f4b36ae93b483944d3720db1195d903f5fcceb05b92a8b0a23ea34d80b72cc2affff3258bb3809415d19ad9be7c", 0xf3}], 0x2}, 0x24001001) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x5, 0x3, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000e00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x2, 0x1, 0x84) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000e40)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000ec0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x108ea5, 0xc78, 0x0, 0x0, 0x0, 0x0, 0xae7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000001a80)='GPL\x00'}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001ac0), 0xc) sendmsg$kcm(r6, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001b40)}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001c00)="1400000029000b05d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000001c40)={0x0, 0xa00, &(0x7f0000001c80)=[{&(0x7f0000001cc0)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)}, 0x10140) r9 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r11 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='memory.swap.max\x00', 0x2, 0x0) sendmsg$unix(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="ae19aec422388f87e67c", 0xa}], 0x1, &(0x7f0000001d00)=[@rights={{0x14, 0x1, 0x1, [r10]}}, @rights={{0x2c, 0x1, 0x1, [r4, 0xffffffffffffffff, r11, r5, r1, r10, r0]}}], 0x48, 0x40004}, 0x200440b8) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0f42, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x6132}) write$cgroup_subtree(r12, &(0x7f0000000300)=ANY=[@ANYBLOB="7c1292442b01696aabaf"], 0xfe3a) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x2}, 0x8, 0x10, &(0x7f0000000bc0), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r13, 0x702, 0xe80, 0x0, &(0x7f0000000c80)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000cc0)=r13, 0x4) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e143a25000000000e000a0023000000028000001294", 0x2e}], 0x1}, 0x40000) 4.999813184s ago: executing program 2 (id=3718): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth0_macvtap\x00', 0x2}) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 4.779921136s ago: executing program 2 (id=3721): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0600000004000000060000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000f2ffffff00000000c80ffa693824fc837a40589918dd367edeee91638c6b28702ed0a35913c9b25505000000a36e5086181727d98d0e03b423a63f7704622c7a68e3f54672af38f574dab412d3e9db8a3b19af7daff652a7f460bd2b1279811ebbd501736805015554f7794ceb130858988c9b00"/135], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830b}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x49, &(0x7f0000000140), 0xcf) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x3, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f00000005c0)={0x0, 0xfffffffffffffedc, &(0x7f0000000600)=[{&(0x7f0000000640)="c018030020000b12d25a80648c2594f90224fc60100c074002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) mkdir(&(0x7f0000000100)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000180), 0x2, 0x0) write$cgroup_type(r5, &(0x7f00000001c0), 0x9) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0x4, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) write$cgroup_subtree(r6, 0x0, 0x6) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x14}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.284001606s ago: executing program 4 (id=3723): r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6e8, 0xa}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000dc0)='GPL\x00', 0x5, 0x252, &(0x7f0000000e00)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000f80)="5c00000014006b05c84e21000ab16d6e230686f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8040880) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000500)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2000000000, 0x10000}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000061104a0000000000a60000000400000095000000000000002bc8eaca85d3ea4fe8bd0578f60b2674fa8fed23dd3a672d91"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3010}, 0x10}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)=@tipc=@name, 0x80, &(0x7f0000000340)=[{&(0x7f0000000240)=""/249, 0xf9}], 0x1}, 0x40000100) 4.089134646s ago: executing program 0 (id=3724): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000700000007000000004000000080000000000000b01000000f9ff000005000004080000000600000003000000ff0000f50200000001000000d5a0000007000000050006000000000000000000010000009db600000800000001000000843000000d000000000000011800000076000007030000000000000b0000000000612e00"], &(0x7f0000000900)=""/175, 0x8c, 0xaf, 0x1, 0x0, 0x10000}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b4000000000000007910480000000000710437000000000095000000"], &(0x7f0000000300)='GPL\x00', 0x2, 0xc3, &(0x7f0000000800)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, r0}, 0x94) (async) r2 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x10c002, 0x3, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000700)='cgroup.clone_children\x00', 0x2, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000680), &(0x7f00000006c0), 0x5, r5}, 0x38) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x19, &(0x7f0000000f40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYRES16=r1, @ANYBLOB="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", @ANYRES16=r4, @ANYRES32=r3, @ANYRES64=r6, @ANYRESHEX=r3], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r7}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000001c0)="b3", 0x0}, 0x20) (async) write$cgroup_int(r4, &(0x7f0000000740)=0xfffffffffffffffc, 0x12) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) mkdir(&(0x7f0000000580)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) write$cgroup_devices(r2, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) (async) r11 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000011c0)="e03f03d833000b35d25a806c8c0594f969b3343e1a", 0x15}], 0x1}, 0x0) (async) sendmsg$kcm(r11, &(0x7f0000001200)={0x0, 0x703, &(0x7f0000001240)=[{&(0x7f0000001280)="e03f030010000b0fd25a806c8c6f94f90a24fc60", 0x33fe0}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0xe, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002a00000095"], &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b80)=ANY=[@ANYRES32=r10, @ANYRES32=r12, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r10}, &(0x7f0000000c00), &(0x7f0000000c40)=r9}, 0x20) (async) sendmsg$inet(r8, &(0x7f0000000c80)={0x0, 0x6000, &(0x7f0000000cc0)=[{&(0x7f0000000d00)='U', 0xa00120}], 0x1}, 0x3) 3.46158383s ago: executing program 2 (id=3726): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f00000004c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@lu}]}, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x0, 0xe, 0x0, &(0x7f0000000700)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) ioctl$TUNSETVNETBE(r3, 0x400454de, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000300000000000000000000008500000087000000850000009e00000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000000140)=""/192}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000440)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f00000004c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@lu}]}, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x0, 0xe, 0x0, &(0x7f0000000700)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) (async) ioctl$TUNSETVNETBE(r3, 0x400454de, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000300000000000000000000008500000087000000850000009e00000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000000140)=""/192}, 0x80) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000440)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 3.287809137s ago: executing program 4 (id=3727): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0xe, &(0x7f0000000480)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000002b000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e6185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f659cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c61a137462c7f2539479f49d4eb2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc16e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c0977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6040099d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663dd472021d202eedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe3594d4a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed180d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35f267632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12a851810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f314001a62863f6e04b4506ac2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab79e609c57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2b4bb9905a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296e99d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55000048e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cf7800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc699d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b85c8086e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000000000000000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7dc1a869fa5551b873e2c838e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867bf0ff0000000000000000000000a0616252abda1102c3eee13eddef0275f21752ee474e32d790ae1f3df77e303ae1968c2a4419d1ca13b97b2c3123ab5b8473b880644e6acfe1d346d1528262c6e91f38029ec24eeb4fe5c1b3726bcfd386ba153fed11692170e5a09432bd02fa9dba861ecad4dbf61a93733a21aeff5f541b8f78bccbf1ac0000000000000000000000145aaaa62ff74b216b2977e7b9261824f663cea60ec6e0fa03bd596cec6d12316c8ed147d4cdd140857444c27c1946b1afcd4ec260694cb71e421744cf1f860840b0decf9be35aeb02d1bf6137b3189edb2d21557e6804ed52305e7deace8b97cd2b423cb79c541762097e29c386634a4bcc3ee91266d808706aadbc4650183d71bf5341edfe4c815d3a87c05d75da20b260d39cdd8559292000cb06faf9972683d3"], &(0x7f0000001080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r2 = perf_event_open(&(0x7f00000010c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x4, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001140)={0x6, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x4a}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001240)={0x6, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000001340)='GPL\x00'}, 0x94) r5 = socket$kcm(0x10, 0x400000002, 0x0) r6 = perf_event_open(&(0x7f0000001380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fff, 0xfffffffffffffffa}, 0x0, 0x2, 0x1, 0x8, 0x3, 0xffffffff, 0x8914, 0x0, 0x0, 0x0, 0x1ffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x23, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1e, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f0000001400)={0x5, 0x80, 0x4, 0x8, 0x3, 0x8, 0x0, 0xffffffffffffff7f, 0x8be51d06ee2c8899, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xea73, 0x0, @perf_bp={0x0, 0xc}, 0x18001, 0x5, 0xa29d, 0x3, 0x8, 0x2, 0x98, 0x0, 0x6, 0x0, 0x3}) r7 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x64, &(0x7f0000001300)=r9, 0x10) openat$cgroup_ro(r9, &(0x7f0000001480)='cgroup.events\x00', 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f00000014c0)=ANY=[@ANYRES32, @ANYRES8=r5], 0xfe33) perf_event_open(&(0x7f0000001500)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x80, 0x4}, 0x0, 0x3, 0xffdffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x102}, 0x0, 0x4, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001580)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007f"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000015c0)={r4, 0x5, 0xb68, 0x0, &(0x7f0000001640)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'geneve1\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8946, &(0x7f0000000240)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x13, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000098"], 0x50) 3.091371187s ago: executing program 0 (id=3728): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000700)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000480)={&(0x7f0000000040), 0x6e, &(0x7f0000001c00)=[{&(0x7f0000000280)=""/216, 0xd8}, {&(0x7f00000001c0)=""/141, 0x8d}, {&(0x7f0000000380)=""/255, 0xff}, {&(0x7f0000002100)=""/207, 0xcf}, {&(0x7f0000000180)=""/13, 0xd}, {&(0x7f0000000980)=""/4080, 0xff0}, {&(0x7f0000001cc0)=""/126, 0x7e}, {&(0x7f0000001a00)=""/233, 0xe9}, {&(0x7f0000001b00)=""/91, 0x5b}, {&(0x7f0000001980)=""/108, 0x6c}], 0xa, &(0x7f0000002200)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x40, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}, 0x10000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000580)=[{0x6, 0x804, 0x0, 0x7}, {0x10400002, 0x2, 0x0, 0x5}], 0x10, 0xfffffffd}, 0x94) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) close(r5) socket$kcm(0xa, 0x5, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x11, 0xc, &(0x7f0000001e80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001f00)={0x6, 0xc, &(0x7f0000001fc0)=ANY=[], &(0x7f0000002000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002040)={r9, 0x2000000, 0xe, 0x0, &(0x7f00000020c0)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r6, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r11 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r11, 0x6, 0xa, &(0x7f0000000140), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000740)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0}, 0x40) setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000780)=r10, 0x10) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000840)={'syzkaller0\x00', 0x7101}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0xa0800, 0x0) close(r12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000008c0)) ioctl$SIOCSIFHWADDR(r12, 0x8943, &(0x7f0000000900)={'syzkaller0\x00'}) r13 = openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r13, &(0x7f0000000100)=r2, 0x12) ioctl$SIOCSIFHWADDR(r12, 0x8943, &(0x7f0000000940)={'syzkaller0\x00', @random="110000000002"}) 2.843861242s ago: executing program 2 (id=3730): r0 = socket$kcm(0x29, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x1c6) r1 = perf_event_open(&(0x7f0000000080)={0x7, 0x80, 0x7, 0x8, 0x6, 0x0, 0x0, 0x81, 0x80880, 0xc, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000040)}, 0x1000, 0x1ff, 0x9, 0x8, 0x7, 0xecbe, 0x4, 0x0, 0x4, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0x1, r0, 0xb) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000100)) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) r3 = syz_clone(0x41080, &(0x7f0000000180)="1e94b0691d5a89bb8e3b3191938793a4701a72ce839be69fd4252dcb0417f56461fd4b74168a69927cc9ef5eea7b0f3dac015254c0bd3b04d530551939367fd94e520136638ad1f3028ba4a287041b885a5b788f3e30a2b5f2621a41c71b5ca7261353a71b78bb", 0x67, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="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") write$cgroup_pid(r2, &(0x7f0000000380)=r3, 0x12) socketpair(0x1d, 0x5, 0x5, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000400), 0x8) ioctl$TUNGETFILTER(r5, 0x801054db, &(0x7f0000000440)=""/147) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000500)='./file0\x00', 0x0, 0x18, r5}, 0x18) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./file0\x00', 0x0, 0x8}, 0x18) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600)=r7, 0x4) r8 = gettid() r9 = syz_open_procfs$namespace(r8, &(0x7f0000000640)='ns/user\x00') close(r9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000700)={r8, r1, 0x0, 0x6, &(0x7f00000006c0)='tasks\x00'}, 0x30) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x12, 0x5, 0x8, 0x40, 0xffffffffffffffff, 0x5, '\x00', 0x0, r5, 0x2, 0x3, 0x1, 0x2}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000980)={&(0x7f00000007c0), &(0x7f0000000800)=""/179, &(0x7f00000008c0)="03ca79c0cc49", &(0x7f0000000900)="44ec8853e38523eaf473242273972440ca59c8b452d6883b53addb87882ef4313316647fc6454c441397fa97df7d80e14c583309a74693232d82f3618c73ebfc7f1314760bc1a69c42025077358fe5c5e5fe52b3d9aadb7ccc88d9a433ef6cac8264fe", 0x4, r6}, 0x38) perf_event_open(&(0x7f00000009c0)={0x3, 0x80, 0x7, 0x7, 0x3, 0x2, 0x0, 0xf6, 0x19401, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff7}, 0x0, 0x10000, 0xff, 0x9, 0x9, 0x6, 0xfff, 0x0, 0x3, 0x0, 0x8}, r8, 0xb, r1, 0x0) r10 = bpf$PROG_LOAD(0x5, 0xffffffffffffffff, 0x0) sendmsg$sock(r4, &(0x7f0000000b00)={&(0x7f0000000a40)=@caif=@rfm={0x25, 0x9, "6f770d754adb5a0651c56619378fca9b"}, 0x80, &(0x7f0000000ac0)}, 0x10) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r11, &(0x7f0000000b80), 0x2, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000c00)={0x1, &(0x7f0000000bc0)=[{0x9, 0x1, 0xa4, 0xb2c}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001d40)={r10, 0x0, 0x3, 0x2e, &(0x7f0000000c40)="c5e5b4", &(0x7f0000000c80)=""/46, 0x2, 0x0, 0x1000, 0x43, &(0x7f0000000cc0)="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", &(0x7f0000001cc0)="a1a2012b60c0922b60e7c3cde612129a770ffaa58a8cb203b28611be6710ff652e3817262d87e8a2bfc8370a8ad6121dd15613fc712e2febb2cfb78286a471c74eee17", 0x6, 0x0, 0x8}, 0x50) recvmsg$kcm(r4, &(0x7f0000002080)={&(0x7f0000001dc0)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001e40)=""/126, 0x7e}, {&(0x7f0000001ec0)=""/9, 0x9}, {&(0x7f0000001f00)=""/236, 0xec}], 0x3, &(0x7f0000002040)=""/10, 0xa}, 0x40) r12 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000002480), 0x4) 2.432033574s ago: executing program 3 (id=3734): perf_event_open(&(0x7f0000002b40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000002bc0)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000080)="a1", 0x0}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002940)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000029c0)={0x5, 0x10, &(0x7f0000002a80)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff8000}, {}, {0x7, 0x0, 0xb, 0x9}}, @printk]}, &(0x7f0000002b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.307947766s ago: executing program 2 (id=3736): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000540)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r1 = socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x7, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000580)={r1, r0}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000300)={'syzkaller0\x00'}) (async) sendmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f0000000100)=@in6={0xa, 0x4e22, 0x5, @mcast1, 0x8}, 0x80, 0x0}, 0x14) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={r6, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@ifindex=r7, 0x1f, 0x0, 0x5, &(0x7f0000000740), 0x0, 0x0, &(0x7f0000000780)=[0x0, 0x0, 0x0], 0x0, &(0x7f00000007c0)}, 0x40) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) (async) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f00000008c0)=r7) 2.297840077s ago: executing program 3 (id=3737): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffc3}, [@alu={0x4, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0xefc, @mcast2, 0x14}, 0x80, 0x0, 0xffffffffffffff04}, 0x0) 2.263560951s ago: executing program 4 (id=3738): socket$kcm(0x21, 0x2, 0x2) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_clone(0x1008800, &(0x7f0000000000)="5e291d87c5d219e8a17f19247fd185e5cd32579b0610af643323be6a16f1f6c35f3cb59c89123ae7bebe059f70407907bc0d0e133cc6", 0x36, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000001c0)="d7a73787b7b4e577fd8c7dec98ffcb96dc5d336983b66b8bf7f34834944a03523ff68dc7c08efd2aaecc15cfb5eef05f6ec2d8ea45f688ef145d28db51e24ba0c150f220b5af639add2fa1f8bc6d082a818af12ccde694d519f24ef7968534d47b08d86ac4a5d9d8d85850fda9cbee5a06406565e1775d7216aeb9c977e4dc0ef6223aff74564e0176cb5e3892679f32fa68adb9") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x1, 0xfd, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe307, 0x1, @perf_bp={&(0x7f0000000280), 0x4}, 0x10c000, 0xac5d, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10}, r2, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4000008, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000003c0)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000440)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000540), 0x12) write$cgroup_int(r4, &(0x7f0000000580)=0x1, 0x12) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(0x3) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) r6 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r6, r0, 0x0, 0x0, 0x0}, 0x30) 2.067805191s ago: executing program 3 (id=3739): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller0\x00', @random="d549118d9fde"}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000dc0)='GPL\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x15, 0x2000000000000216, &(0x7f0000000fc0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x7, 0xc, &(0x7f0000001100)=ANY=[], &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000001180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x6}, 0x0, 0x400000, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001280)={0x0, &(0x7f00000012c0)=""/251, &(0x7f00000013c0), &(0x7f0000001400), 0xa7c}, 0x38) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000000e80)=r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="9feb01001800000000000000bc000000bc00000003000000060000000000000700000000070000000000000e01000000010000f40b00000000000008030000000a00000001cc04"], 0x0, 0xd7, 0x0, 0x0, 0x7, 0x10000}, 0x28) r6 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000001440)={&(0x7f0000001480)=@hci={0x1f, 0xc00, 0xe}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001540)='b', 0x10}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) write$cgroup_devices(r0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 2.066060351s ago: executing program 1 (id=3740): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="04000000040000000400000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x7, 0x8, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008002200bfa400000000000007040000f8ffffffb705000000000000850000001900000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e00203003d000b08d25a80648c7494f90324fc600b0002400a000000053582c137153e37000c018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000100)='./file0\x00', r0, 0x4000, r4}, 0x18) 1.97007447s ago: executing program 0 (id=3741): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004970202080002000300010003000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004000) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x0, 0x2, 0x0, 0x0, 0x1e00, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) r1 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@generic={&(0x7f0000000500)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@map=r3, 0xa, 0xa0af1ff6c6463eb6, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0]}, 0x40) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 1.787689669s ago: executing program 1 (id=3742): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="04000000040000000400000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008002200bfa400000000000007040000f8ffffffb705000000000000850000001900000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e00203003d000b08d25a80648c7494f90324fc600b0002400aafff00053582c137153e37000c018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.785238429s ago: executing program 4 (id=3743): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x4, 0x0, 0xfa, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffff, 0xa}, 0x1b3c, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000280)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000003c0)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000004c0)="0204000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x48004) setsockopt$sock_attach_bpf(r4, 0x1, 0x23, &(0x7f0000000500), 0x4) recvmsg(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={0x0, r1, 0x0, 0x1, &(0x7f0000000580)='\x00'}, 0x30) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 1.671844471s ago: executing program 0 (id=3744): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) socketpair(0x25, 0x6, 0x2000000, &(0x7f0000000000)={0xffffffffffffffff}) (async, rerun: 32) r1 = gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="7a0a00ff0000000071108a000000000095"], &(0x7f00000007c0)='syzkaller\x00'}, 0x94) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x1b}, 0x107412, 0x0, 0x0, 0x3d603c7d87ed2789, 0x22c000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000f00000000000000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000050000000100000000000000000000000000000007000000"], 0x50) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000480)='GPL\x00', 0x5, 0xde, &(0x7f00000004c0)=""/222, 0x0, 0x8}, 0x94) (rerun: 32) r3 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000c00)={@fallback=0xffffffffffffffff, 0x0, 0x1, 0x800, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000c80), 0x0, &(0x7f0000000cc0)}, 0x40) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)=ANY=[], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000d40)={0xffffffffffffffff, 0x24, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x410ee50e8eb69be2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x11, 0x0, 0x0, 0x0, 0x2, 0x67, &(0x7f0000000ec0)=""/103, 0x40f00, 0x2, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000f40)=[r5, r5, r4, r4, 0xffffffffffffffff, r4], &(0x7f0000000f80)=[{0x3, 0x2, 0x5, 0xa}, {0x0, 0x5, 0x3, 0x8}], 0x10, 0x7fff}, 0x94) (async) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000fc0)=0xffffffffffffffff, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001040)=@bpf_tracing={0x1a, 0x14, &(0x7f0000001100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x82a0}, @cb_func={0x18, 0x7}, @ldst={0x0, 0x0, 0x4, 0x6, 0x8, 0x2, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000011c0)='GPL\x00', 0x6, 0xf0, &(0x7f0000001200)=""/240, 0x41100, 0x1, '\x00', r6, 0x1c, r7, 0x8, &(0x7f0000001300)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000001340)={0x0, 0x2, 0x101}, 0x10, 0xd6fa, 0xffffffffffffffff, 0x4, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff], &(0x7f00000013c0)=[{0x0, 0x3, 0x3, 0xa}, {0x0, 0x1, 0x6, 0x4}, {0x2, 0x3, 0x5}, {0x1, 0x5, 0xf, 0x1}], 0x10, 0x7ff}, 0x94) r9 = socket$kcm(0x2c, 0x3, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001400)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r9, 0x11b, 0x3, &(0x7f0000001440)=r10, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001540)={0x6, 0x4, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xd}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000840)='syzkaller\x00', 0x1, 0xa2, &(0x7f0000000880)=""/162, 0x41000, 0x24, '\x00', r6, 0x25, r10, 0x8, &(0x7f0000001480)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000014c0)={0x1, 0xb, 0x3, 0xfffffff7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001500)=[r2, r2, r2, r2], 0x0, 0x10, 0xb}, 0x94) sendmsg$kcm(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000640)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a0001802e2a2100d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) (async) r11 = socket$kcm(0x2, 0x5, 0x84) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r13) (async) recvmsg$unix(r12, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000680)) setsockopt$sock_attach_bpf(r11, 0x84, 0x6e, &(0x7f0000000000)=r14, 0x10) 1.57869109s ago: executing program 2 (id=3745): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x8}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x45, 0x0, 0xfd, 0x0, 0x9c, 0x10803, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0xffff, 0x5, 0x4, 0x2, 0x200000a, 0x48, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) socket$kcm(0xa, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x4, &(0x7f0000000340)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffcac, 0xfffffffffffffffd}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0x2}, {}]}]}, {0x0, [0x5f, 0x2e]}}, &(0x7f0000000900)=""/144, 0x38, 0x90, 0x1}, 0x20) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0xfffffeff, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}, 0x4869, 0x6, 0xfffffffe, 0xf, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0xec) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f00000000c0), 0x12) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400010404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000280)={0x0, 0x39, &(0x7f00000002c0)=[{&(0x7f0000000840)="89000000120081ae08060cdc030ec0007f03e3f70006000006e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec081228000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x1, 0x12) 1.555545743s ago: executing program 4 (id=3746): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="1400000036000b63d25a595c779f10ce0630fc60", 0x14}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x1, 0x5d}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e000000000000000a0000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000700)={r2, 0x0, &(0x7f0000000740)=""/53}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000007c0)={0x2, 0x80, 0x8, 0x61, 0x6, 0x3, 0x0, 0x6, 0x12001, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x3, 0x5}, 0x10000, 0xb, 0x9, 0x9, 0x5, 0xa9b4, 0x5, 0x0, 0x8, 0x0, 0x3ff}, r3, 0x10, r1, 0x8) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000840)={r2, 0x0, 0x0}, 0x20) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1}, 0x1) r4 = socket$kcm(0xa, 0x5, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000940)={r5}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000a00)="d8000000140081044e81f782db44b9040a1d08bc01000000040000a118000200fc00000000000e1208000f0100810401a80016eaa40001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_tracing={0x1a, 0x1a, &(0x7f0000000bc0)=@raw=[@exit, @jmp={0x5, 0x0, 0x4, 0x3, 0x2, 0x10, 0xffffffffffffffff}, @exit, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @exit, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @alu={0x4, 0x0, 0x7, 0x2, 0x1, 0xffffffffffffffe0, 0x8}], &(0x7f0000000cc0)='syzkaller\x00', 0x7, 0xb2, &(0x7f0000000d00)=""/178, 0x41000, 0x2, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x16923, r3, 0x5, &(0x7f0000000dc0)=[r2], &(0x7f0000000e00)=[{0x5, 0x2, 0xb}, {0x1, 0x2, 0x3, 0x3}, {0x1, 0x1, 0x0, 0xa}, {0x0, 0x1, 0x2, 0x8}, {0x2, 0x4, 0x2, 0x3}], 0x10, 0x9}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8936, &(0x7f0000000e80)={r5}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000ec0)={'pimreg\x00', 0x5dcf70ef8daa5d0e}) perf_event_open(&(0x7f0000000f00)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000f80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.4798249s ago: executing program 3 (id=3747): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x5b}, 0x28) socket$kcm(0x21, 0x2, 0x2) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000009, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000000000, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, r3, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff75) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000300)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r6, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500), 0x0, 0x9b, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x8, 0x1040bb, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000005c0)={r5, &(0x7f0000000600), &(0x7f0000000640)=""/164}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000700), 0x43) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002140)={0x6, 0x13, &(0x7f0000002200)=ANY=[@ANYBLOB="1800000008000000000000000600000018110000", @ANYRES32=r5, @ANYBLOB="00000000b7030000000000008500000083000000bf0900000000feff5509010000000000950000000000000018012fc2f308", @ANYRES32=r5, @ANYBLOB="000000000000000085000000680000000231060082890000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x9, 0xdb, &(0x7f00000022c0)=""/219, 0x41000, 0x40, '\x00', r7, 0x25, r2, 0x8, &(0x7f0000002040)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000002080)={0x5, 0xfffffffb, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000020c0)=[r5, r5, r5, r2, r5, r5], &(0x7f0000002100)=[{0x2, 0x1, 0xc, 0x5}, {0x2, 0x2, 0x2, 0x8}, {0x4, 0x4, 0xc, 0x5}], 0x10, 0xaa1}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x4, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000001b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000001b40), 0x8, 0x10, &(0x7f0000001b80), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r9, 0x2000000, 0x5e, 0x0, &(0x7f0000001c40)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xc69a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket$kcm(0x1e, 0x7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x1e, 0x4, &(0x7f0000000c80)=ANY=[], &(0x7f0000000cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f0000000740), 0x43) write$cgroup_subtree(r10, &(0x7f0000000780)=ANY=[], 0x101d0) bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x1a, 0x4, &(0x7f0000001d40)=ANY=[@ANYBLOB="b40000000000000079fbc0000000000062000000000000009500000000000000"], &(0x7f0000001d80)='GPL\x00', 0x2, 0xc3, &(0x7f0000001dc0)=""/195, 0x0, 0x0, '\x00', 0x0, @tracing, 0xffffffffffffffff, 0x8, &(0x7f0000001ec0)={0x0, 0xfffffffc}, 0x8, 0x10, &(0x7f0000001f00), 0x10}, 0x94) sendmsg$kcm(r10, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[], 0x1458}, 0x240480d1) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x16, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f0000000000), 0x4) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'macvlan1\x00', @random="02000000e29b"}) 1.47716912s ago: executing program 1 (id=3748): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000001000000040000005c"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x402, 0x0, 0xfffffffe, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000000000007311410000000000851000000a0000002233b35122554f969500000000a505000000000000000000"], &(0x7f0000000240)='GPL\x00', 0x5, 0x29e, &(0x7f0000000500)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='blkio.bfq.idle_time\x00', 0x275a, 0x0) close(r3) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x1, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000740)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x0, 0xf, 0x2, 0xff, 0x0, 0xfffffffffffffffd, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x1}, 0x81400, 0xca, 0xfffffffd, 0x5, 0xdf1e, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) recvmsg$unix(r2, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r5, &(0x7f00000008c0)=ANY=[@ANYRES8=r3, @ANYBLOB="3eca", @ANYRES8=r4], 0x9a) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000380), 0xc, r0}, 0x38) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.150574283s ago: executing program 1 (id=3749): r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x80, 0x8, 0x9, 0x80, 0x0, 0x9090, 0x4800, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfd7, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x4, 0x7, 0x3, 0x7, 0xa, 0x7f, 0x8, 0x0, 0x9, 0x0, 0x10}, 0x0, 0xc, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0x3) r1 = perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x80, 0x4, 0x1a, 0x3, 0x0, 0x0, 0x6, 0xa, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x6, @perf_bp={&(0x7f0000000100), 0x2}, 0x41, 0x4, 0xf, 0x6, 0xb, 0xa, 0x5f55, 0x0, 0x2, 0x0, 0xe9b5}, 0xffffffffffffffff, 0x3, r0, 0xb) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) r2 = socket$kcm(0x29, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0xfffffffffffff275) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x1, 0x80, 0x6, 0x3, 0x0, 0x6, 0xf9d08, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f00000001c0), 0x4}, 0x420, 0x5, 0x0, 0x8, 0x6, 0x9ef, 0x32, 0x0, 0x5, 0x0, 0x5}, 0x0, 0x0, r0, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x82, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000002c0)={0x1, 0x2, [@remote, @local]}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x4, [@restrict={0xb, 0x0, 0x0, 0xb, 0x2}, @enum64={0x10, 0x2, 0x0, 0x13, 0x0, 0xc, [{0x9, 0x16, 0x80000000}, {0x8, 0x4, 0x40}]}, @fwd={0x10}, @fwd={0xb}, @func={0x5, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x0, 0x30]}}, &(0x7f0000000380)=""/87, 0x70, 0x57, 0x0, 0x1}, 0x28) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, '\x00', 0x0, r4, 0x2, 0x0, 0x5}, 0x50) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@o_path={&(0x7f00000006c0)='./file0\x00', 0x0, 0x8, r0}, 0x18) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0x0, 0x8}, 0xc) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@o_path={&(0x7f0000000780)='./file0\x00', 0x0, 0x8, r4}, 0x18) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x9, '\x00', 0x0, r4, 0x2, 0x5, 0x1}, 0x50) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x5139, 0x0, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, r2, 0x4, 0x1}, 0x50) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0xe, &(0x7f00000004c0)=@raw=[@map_idx_val={0x18, 0xb, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @ldst={0x1, 0x1, 0x0, 0x6, 0x6, 0x0, 0xffffffffffffffff}], &(0x7f0000000540)='syzkaller\x00', 0x7, 0x94, &(0x7f0000000580)=""/148, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0xe, 0x9, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000900)=[r6, r7, r8, 0xffffffffffffffff, r9, r10], &(0x7f0000000940)=[{0x4, 0x3, 0x5, 0x3}, {0x4, 0x4, 0x2, 0x9}, {0x5, 0x5, 0x1, 0xa}], 0x10, 0x1}, 0x94) recvmsg(r2, &(0x7f0000000bc0)={&(0x7f0000000a40)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000ac0)=""/92, 0x5c}], 0x1, &(0x7f0000000b80)=""/1, 0x1}, 0x10040) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001c40)={r10, &(0x7f0000000c00)="7ea0d63cffadff20521ff28516e61816937b66895671722a1161831c55732dfdf77e8c1498698a50ae868416bf56239ab7", &(0x7f0000000c40)=""/4096}, 0x20) r12 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001c80)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(r12, &(0x7f0000001cc0)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001d00)={0x1b, 0x0, 0x0, 0x3, 0x0, r10, 0x3, '\x00', 0x0, r4, 0x3, 0x3, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001e00)={{0x1, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001dc0)=r11}, 0x20) r15 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003080)={&(0x7f0000002040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@const={0x4, 0x0, 0x0, 0xa, 0x5}, @const={0xd, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x61, 0x0, 0x5f, 0x5f, 0x2e, 0x2e, 0x30, 0x2e]}}, &(0x7f0000002080)=""/4096, 0x3a, 0x1000, 0x1, 0x6}, 0x28) r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003140)={0xffffffffffffffff, 0x6, 0x8}, 0xc) r17 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003180)={0x1b, 0x0, 0x0, 0x6, 0x0, r7, 0x9, '\x00', 0x0, r4, 0x3, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000032c0)={0x6, 0x19, &(0x7f0000001e40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r13}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r14}}, @exit, @call={0x85, 0x0, 0x0, 0xc7}, @alu={0x7, 0x1, 0x5, 0x3, 0x6, 0xffffffffffffffff, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001f40)='syzkaller\x00', 0x400, 0xac, &(0x7f0000001f80)=""/172, 0x1f00, 0x1, '\x00', 0x0, 0x25, r15, 0x8, &(0x7f00000030c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000003100)={0x0, 0xe, 0xd6, 0x8}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000003200)=[r16, r9, r17, r8, r8, r5, r10, r10], &(0x7f0000003240)=[{0x2, 0x3, 0xb, 0x6}, {0x3, 0x5, 0x6, 0x7}, {0x4, 0x2, 0x1, 0xa}, {0x1, 0x3, 0x9, 0x4}, {0x2, 0x1, 0x9, 0xd}, {0x0, 0x3, 0x10, 0x8}, {0x5, 0x4, 0xe, 0x3}, {0x1, 0x2, 0x5, 0x8}]}, 0x94) r18 = openat$tun(0xffffffffffffff9c, &(0x7f0000003380), 0x80000, 0x0) ioctl$TUNSETSTEERINGEBPF(r18, 0x800454e0, &(0x7f00000033c0)=r12) 993.525609ms ago: executing program 4 (id=3750): r0 = socket$kcm(0x10, 0x400000002, 0x0) (async) socket$kcm(0xa, 0x5, 0x0) (async) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5}, r2, 0x0, 0xffffffffffffffff, 0x4) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x105b41, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01", 0x9}], 0x2}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x85, 0x7c, 0xa6, 0x0, 0x0, 0x2, 0x19200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xe8, 0x401}, 0x2012, 0x40000009, 0xffffffff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x4, 0xffffffffffffffff, 0x2) (async, rerun: 64) socket$kcm(0x2, 0x5, 0x84) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000010000000000000ff500000000612e00d395c78af6d83ef02983ffe8bc7416a3b328bcff565874d293d055ae6797c2eb910ac9e033396c2a241a4e516fa721389f36e2494d8cb7f53af55c5e6590cd7928fad1e2a62010a5aaf287c0eb133b1a02f41177c08350ded4112c4bc13c394955a0cf70568925f9a8d2f9a60dededed02bc5fe6c59a2aecdb273ad7022ce80b7df8fed1a15c16fb916bfcc1a0c3dc4209ac64945f4b34ff918d1b1981835caec5"], 0x0, 0x28}, 0x28) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) close(r4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000005c0)={'syzkaller0\x00', @multicast}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000002c0)={'veth0_to_team\x00', 0x400}) (async) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000300)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, 0x0, 0x10}, 0x20040090) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r5) (async, rerun: 32) socket$kcm(0x11, 0xa, 0x300) (async, rerun: 32) ioctl$TUNGETVNETLE(r5, 0x8953, &(0x7f00000006c0)) (async) socket$kcm(0xf, 0x3, 0x2) (async, rerun: 64) write$cgroup_devices(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe800000000000", @ANYRESDEC], 0xffdd) (rerun: 64) 869.543632ms ago: executing program 3 (id=3751): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x22, 0x7, 0x0) perf_event_open(&(0x7f0000001180)={0x1, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x10c002, 0xac5d, 0x400, 0x7, 0x0, 0xdf61}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)=[{0x0}], 0x1}, 0x0) perf_event_open(&(0x7f0000001280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x1, 0x2, &(0x7f00000013c0)=ANY=[@ANYBLOB="611040000000000000000000"], &(0x7f0000001400)='GPL\x00'}, 0x94) recvmsg(0xffffffffffffffff, 0x0, 0x140) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000001440)={'wlan1\x00', @random="8000230d1100"}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20048811) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20028814) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x29, 0x7, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xd000000000000000}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000b40)='GPL\x00', 0x5, 0x252, &(0x7f0000000b80)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)}, 0x1c0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYRES8=r4, @ANYBLOB="3eca"], 0x9a) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000001140), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x15, 0x10, &(0x7f0000001040)=ANY=[@ANYBLOB="18080000000000000000001a000000001811e3ff1700000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70600001fffffff8500000005000000bf09000000000000260901000000000095000000000000004c68000000000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000f80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2c, 0x3, 0x0) 787.24351ms ago: executing program 1 (id=3752): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000000000f00bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000deffffff6a0a00ff00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2f01806fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c5c77f0979b34e1ad837ff0d10b97163c1d6d0e196bf02f46c7953ab1abda45cbe8d0d26b5069f8a98f7dc8f772c06b74635fc9f9de9ca3c0ec0cb9bf4e418d076df4c7df0a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d25c32aac1c7d5b5be399f6609876b5887437a172fbc02a74135b29194e533583f76e412dff048f0000000000000000b2728a0481e9f0da43bb6cfb851cd364ff19002cc93c1c13ca67fdc6c238342033070000004a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad3e328a100000000b515a1000000000000140eb2e9c15b6c8f6198282df27badac8500bc7d202e099009ca515007e5f009735200040000001896d46cdac0abb841d9f96e2e6a19b7bf661c01800000d77d6165f253683cd8dc926518c699a2b14fb2bb40425dee631368340711a8c47318d5d13085938c3ec5c39b540b34157b0330aa16bd0998607f0ecea84919712d36930abab426f58317cb"], &(0x7f0000000340)='GPL\x00'}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x50801000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x19, 0x5, 0x8, 0x7, 0x1800, 0x1, 0x0, '\x00', 0x0, r2, 0x3, 0x0, 0x2}, 0x50) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000300)=[{&(0x7f00000003c0)='\\', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r3, &(0x7f0000000400)={&(0x7f0000000440)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000540)="84", 0x1}], 0x1}, 0x8040) close(r3) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) close(r3) ioctl$SIOCSIFHWADDR(r2, 0x8b15, &(0x7f0000000040)={'wlan1\x00', @random="e51d0f00"}) write$cgroup_pid(r2, &(0x7f0000000080)=r1, 0x12) 199.50351ms ago: executing program 3 (id=3753): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x1, 0x1a, &(0x7f0000000180), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="b648db320c716311baa96383d085aa64742a4f370156f4077cd7bdfc1fdabd0074d89a017a60fce4fff71b5ca66a685177584daec75352381ac36d39af40f2a056836c3810ab09a7d1c93305826400"/91, @ANYRES32=r1, @ANYRES8=r1], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)="d0f937758433d506932c912c70ecf5978fb34b0cae0830279e850bb0f17d9db0e76de55fb39db0f1c6449d9eaa43d1a6fdabee3fe7664f1f693d3097d930dc8d706ce3b4b3bce17e7f0823e4ed42ecf26c999b4f4f773bab59ac38e11f69c9c9b87c3eb51c20a3dba1b18980238fe473c42aafb25b507acd541f59595309fa90e7c039ea48", 0x85}], 0x1, &(0x7f0000000580)=[{0xa8, 0x11, 0x6, "e521cdce1f80bbb3c66b15d929bd7242268c23ba31a111a70abee2406b8c37086c83f75d5c6161e85893fbfc955c9c0d8d34a832c933626c43a6310a08449a421972bd24883f3c3beb00668e406408292fb43eca50a883aa03506fcd8dcb735f0d7d4d2af5ab7554bf8d1fad175fcc6212da06e68e6a96954574d3a516fbfca2abfeb5027f36e7b672985c6c98e654addd"}, {0x20, 0x10b, 0x3, "436b2c92703e7ed8521b22"}, {0xf8, 0x115, 0x7, "80c9a94979b25d37034cfdbaab91edefa38fa5c5ef1a7238dfea69d92d4541987732311039e5ff2951124ba0d005b5cc4d81517651e3831dd08d688a576a252a0be2b59b86dd53a59645c69cb35e3badce21f6b15c667da371251a53a6f578df12846f2d93a3e68cb116a02dbfaa4e57d44b9b19ee240faac6fde6362b5aa32b8fcf313303b079a77d7971632dc8f8a2f6e3dc8a385b976d1534446b5b81409e63ba39723ce4ce5b1e22f87ff4bdcb804822fb032f00f7a29253ea5829724e1829526edb31a2061c73aea158324f85e7d922c3e18b58c91948cf1df5f679412d9335f9d13557"}, {0xe8, 0x117, 0x4, "2e7389df6ce222861fefd2c1fb4e12ae341cf23e204fc1d114094b9423d2b01dfe41a7d3f6d5533ba1d1d299407c8b246527c27bcb824704654fd65e70bdf88da5253b6138d86a0ada4390e851b8739a2c001f0267182821bb7ad1393054151469f24804baf01a833c7076a32923cb1e6181ddd830dc6ea1875e670746138e132f62fbabd8ec501e6ed1806af677278d0cf16c3ef58fd5992ae98ccbaaef8552ddeb20ab0057cfd300d0826cf31488328c3e58305636627b03ead97dd2eb1326bf318858f2f79895c634fb213c6700f20d6cdd2da4"}, {0x90, 0x102, 0x1, "ba9c20b0cb3c928b5fb06faa37b4ce5c131c81558c15edc40cc07ada263a91bc5ba0515a81117193dc6eb26932e29c96e0896d3eda87f08c26d68fbd608d6ead202b8146e8e995a4815e34b663f4f034c2f70527363d8c6b98b07476e9953c1f36231b2a41b1b339b99cc2bb6e45c56bd6a3b8ffcd04f46c4deb"}, {0x10, 0x10e, 0x1}], 0x348}, 0x4040000) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = gettid() syz_open_procfs$namespace(r5, &(0x7f0000000140)='ns/time\x00') r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_lsm={0x1d, 0x15, &(0x7f0000000940)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x8, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x50}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000a00)='GPL\x00', 0x6, 0xd9, &(0x7f0000000a40)=""/217, 0x41000, 0xf93ff172ab1cd01d, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x2, 0x6, 0x5, 0x88a}, 0x10, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000bc0)=[r1, r1, r1, r4, r1, r1, r1], &(0x7f0000000c00)=[{0x3, 0x5, 0x10, 0xb}, {0x1, 0x2, 0xe, 0x6}, {0x2, 0x2, 0x9, 0x4}, {0x3, 0x4, 0xc, 0x2}, {0x0, 0x4, 0x6, 0xc}, {0x1, 0x1, 0xd, 0x5}, {0x3, 0x2, 0x6, 0x4}], 0x10, 0x48c9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001000)={r6, 0x0, 0xa1, 0x68, &(0x7f0000000d40)="ef519e32b68efe7493e6fa886ec6efa02a4ae0b114ad8380f2930e16ce474d9623f72265990a164f6287da3641b6108cf48f3a47fba05213662d42f4a3fe1f320a04c69ffdd02c7e8f37ffc121ec71d6230688071e5c3c4d511bf91e34f1f747bedf14f42b092f67af0343b1b1ac5ee8a73dffba23be03a3043d658c68a7bdf65e93c0b233c589f4433d59d0946dbe1cb8092a4ec6a07947ced56cbdb8a832955f", &(0x7f0000000e00)=""/104, 0x101, 0x0, 0x42, 0xfd, &(0x7f0000000e80)="3773e2c195c03f4f58bdc2a87300b19fad6c05fc2a1ffe4fc4a65300526b9e710c3f06a55afcda6a0f1eef29ad8d7c43047568272a2d6709f308cc73a9cd704824c8", &(0x7f0000000f00)="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", 0x6, 0x0, 0x10001}, 0x50) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e00203003d000b08d25a80648c7494f90324fc600b0002400a000000053582c137153e37000c018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'sit0\x00', 0x200}) 50.092905ms ago: executing program 0 (id=3754): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="a28b", 0x2}], 0x1}, 0x4006041) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0f00000004000000040000001600000000000000e7f77693fbb033d03605a5494675e340eec28544911e2a6f1c72190966f26d02364b0400582227b24fab51a528e2b20001b84b54569d58adc7c3c2aacc32fcdff80095cc347f72c551198867988413060de0777acbffa56d3cfcb2a5157cdc9727a9fb15a7c2aaa55c996c28d3df5fa478039c29e4c8f45071c28355686c8b142564b2475207ae494b00"/168, @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0xe, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000600), &(0x7f0000000640)=r1}, 0x20) (async, rerun: 64) sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)='U', 0xfdef}], 0x1}, 0x4000007) (rerun: 64) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000780)={0x5, 0x80, 0x9, 0x4, 0x5f, 0xa, 0x0, 0xea88, 0x1848, 0x6, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xcc1, 0x0, @perf_bp={&(0x7f0000000740), 0x1}, 0x1381, 0x3ff, 0x10000, 0x4, 0x0, 0x2, 0xa0, 0x0, 0x100, 0x0, 0x8}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) 0s ago: executing program 1 (id=3755): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, 0x0, 0x24000088) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x80e1, 0xff6c, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r3}, &(0x7f00000004c0), &(0x7f0000000500)=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r4, 0x2000012, 0xe, 0x0, &(0x7f00000005c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000080)) kernel console output (not intermixed with test programs): id length. [ 714.952939][T15552] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2725'. [ 714.974589][T15553] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2725'. [ 715.038892][T15562] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.2727'. [ 715.853625][T15575] netlink: 'syz.1.2732': attribute type 2 has an invalid length. [ 716.293566][T15579] device syzkaller0 entered promiscuous mode [ 716.379616][T15588] ¥: port 1(team0) entered blocking state [ 716.392131][T15596] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.2737'. [ 716.419955][T15588] ¥: port 1(team0) entered disabled state [ 716.455608][T15596] net_ratelimit: 6 callbacks suppressed [ 716.455626][T15596] netlink: zone id is out of range [ 716.468727][T15588] device team0 entered promiscuous mode [ 716.474642][T15588] device team_slave_0 entered promiscuous mode [ 716.493915][T15588] device team_slave_1 entered promiscuous mode [ 716.503866][T15596] netlink: zone id is out of range [ 716.524275][T15596] netlink: get zone limit has 8 unknown bytes [ 716.533419][T15590] device team0 left promiscuous mode [ 716.545174][T15590] device team_slave_0 left promiscuous mode [ 716.552162][T15590] device team_slave_1 left promiscuous mode [ 716.560938][T15590] ¥: port 1(team0) entered disabled state [ 716.707165][T15598] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.2738'. [ 716.721350][T15598] netlink: zone id is out of range [ 716.726694][T15598] netlink: zone id is out of range [ 716.734304][T15598] netlink: get zone limit has 8 unknown bytes [ 719.115589][T15622] netlink: 'syz.1.2746': attribute type 10 has an invalid length. [ 719.168989][T15622] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2746'. [ 719.476679][T15636] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.2749'. [ 719.487725][T15636] netlink: zone id is out of range [ 719.499660][T15636] netlink: zone id is out of range [ 719.504936][T15636] netlink: get zone limit has 8 unknown bytes [ 719.537769][T15631] netlink: 'syz.1.2748': attribute type 10 has an invalid length. [ 719.736662][T15646] netlink: 'syz.3.2752': attribute type 39 has an invalid length. [ 720.352161][T15655] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2751'. [ 721.233767][T15683] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2760'. [ 721.502498][T15692] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.2762'. [ 721.538876][T15692] netlink: zone id is out of range [ 721.544121][T15692] netlink: zone id is out of range [ 721.588561][T15692] netlink: get zone limit has 8 unknown bytes [ 721.890525][T15712] netlink: 'syz.3.2764': attribute type 21 has an invalid length. [ 721.958122][T15719] netlink: 'syz.0.2766': attribute type 33 has an invalid length. [ 722.023854][T15719] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2766'. [ 723.141128][T15741] netlink: 'syz.1.2773': attribute type 3 has an invalid length. [ 723.160726][T15741] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2773'. [ 725.357867][T15751] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.2777'. [ 725.377084][T15751] netlink: zone id is out of range [ 725.386889][T15751] netlink: zone id is out of range [ 725.397969][T15751] netlink: get zone limit has 8 unknown bytes [ 727.066339][T15798] netlink: 'syz.4.2788': attribute type 10 has an invalid length. [ 727.089402][T15801] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.2789'. [ 727.132038][T15798] device wlan1 left promiscuous mode [ 727.146268][T15801] netlink: zone id is out of range [ 727.168526][T15801] netlink: zone id is out of range [ 727.177371][T15801] netlink: get zone limit has 8 unknown bytes [ 727.274090][T15802] netlink: 'syz.3.2790': attribute type 10 has an invalid length. [ 727.809158][T15814] netlink: 'syz.2.2793': attribute type 39 has an invalid length. [ 728.154626][T15825] rxe_eth0 speed is unknown, defaulting to 1000 [ 729.967181][T15849] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.2802'. [ 729.996408][T15849] netlink: zone id is out of range [ 730.012002][T15849] netlink: zone id is out of range [ 730.032472][T15849] netlink: get zone limit has 8 unknown bytes [ 730.155788][T15851] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2810'. [ 730.159666][T15857] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2803'. [ 730.200920][T15846] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2810'. [ 730.205870][T15856] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2803'. [ 730.239055][T15846] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 730.665826][T15872] netlink: 'syz.3.2807': attribute type 10 has an invalid length. [ 731.367266][T15879] rxe_eth0 speed is unknown, defaulting to 1000 [ 731.496502][T15892] netlink: 'syz.2.2814': attribute type 21 has an invalid length. [ 731.588627][T15888] netlink: 'syz.4.2813': attribute type 10 has an invalid length. [ 731.924974][T15900] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.2816'. [ 731.958610][T15900] netlink: zone id is out of range [ 731.984981][T15900] netlink: zone id is out of range [ 732.005185][T15900] netlink: get zone limit has 8 unknown bytes [ 732.011403][T15895] delete_channel: no stack [ 732.307230][T15914] netlink: 'syz.1.2821': attribute type 10 has an invalid length. [ 732.451936][T15914] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 732.691039][T15919] netlink: 131088 bytes leftover after parsing attributes in process `syz.0.2822'. [ 732.773847][T15919] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 732.827505][T15919] CPU: 1 PID: 15919 Comm: syz.0.2822 Not tainted syzkaller #0 [ 732.835053][T15919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 732.845261][T15919] Call Trace: [ 732.848586][T15919] [ 732.851558][T15919] dump_stack_lvl+0x188/0x24e [ 732.856304][T15919] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 732.862563][T15919] ? show_regs_print_info+0x12/0x12 [ 732.867843][T15919] ? load_image+0x410/0x410 [ 732.872425][T15919] sysfs_warn_dup+0x8a/0xa0 [ 732.877012][T15919] sysfs_do_create_link_sd+0xc0/0x110 [ 732.882455][T15919] device_add+0x83b/0x1050 [ 732.886939][T15919] wiphy_register+0x1f16/0x2c50 [ 732.891874][T15919] ? cfg80211_event_work+0x40/0x40 [ 732.897049][T15919] ? minstrel_ht_alloc+0x894/0xa20 [ 732.902220][T15919] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 732.908347][T15919] ieee80211_register_hw+0x2e33/0x3b00 [ 732.913862][T15919] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 732.920104][T15919] ? ieee80211_register_hw+0xec1/0x3b00 [ 732.925700][T15919] ? ieee80211_register_hw+0xec1/0x3b00 [ 732.931412][T15919] ? ieee80211_tasklet_handler+0x20/0x20 [ 732.937101][T15919] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 732.943054][T15919] ? __debug_object_init+0xed/0x440 [ 732.948316][T15919] ? memset+0x1e/0x40 [ 732.952342][T15919] ? __hrtimer_init+0x189/0x270 [ 732.957259][T15919] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 732.963070][T15919] ? memcpy+0x3c/0x60 [ 732.967119][T15919] hwsim_new_radio_nl+0xab7/0xc90 [ 732.972222][T15919] genl_family_rcv_msg_doit+0x22f/0x350 [ 732.977834][T15919] ? end_current_label_crit_section+0x170/0x170 [ 732.984134][T15919] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 732.990266][T15919] ? bpf_lsm_capable+0x5/0x10 [ 732.994990][T15919] ? security_capable+0x85/0xb0 [ 732.999899][T15919] genl_rcv_msg+0x601/0x790 [ 733.004463][T15919] ? lockdep_hardirqs_on+0x94/0x140 [ 733.009703][T15919] ? genl_bind+0x360/0x360 [ 733.014168][T15919] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 733.020578][T15919] netlink_rcv_skb+0x1ef/0x440 [ 733.025399][T15919] ? genl_bind+0x360/0x360 [ 733.029870][T15919] ? netlink_ack+0x1160/0x1160 [ 733.034699][T15919] ? down_read+0x1a8/0x2d0 [ 733.039159][T15919] genl_rcv+0x24/0x40 [ 733.043202][T15919] netlink_unicast+0x7ad/0x920 [ 733.048056][T15919] netlink_sendmsg+0x8ad/0xbd0 [ 733.052885][T15919] ? netlink_getsockopt+0x550/0x550 [ 733.058150][T15919] ? apparmor_socket_sendmsg+0x8a/0x330 [ 733.063748][T15919] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 733.069090][T15919] ? security_socket_sendmsg+0x7c/0xa0 [ 733.074599][T15919] ? netlink_getsockopt+0x550/0x550 [ 733.079855][T15919] ____sys_sendmsg+0x5ed/0x9a0 [ 733.084684][T15919] ? __sys_sendmsg_sock+0x30/0x30 [ 733.089761][T15919] ? __import_iovec+0x306/0x510 [ 733.094677][T15919] ? import_iovec+0x6f/0xa0 [ 733.099227][T15919] ___sys_sendmsg+0x2a2/0x360 [ 733.103985][T15919] ? __sys_sendmsg+0x2a0/0x2a0 [ 733.108818][T15919] ? ct_nmi_exit+0x145/0x1c0 [ 733.113450][T15919] ? ct_irq_exit_irqson+0x113/0x170 [ 733.118746][T15919] __se_sys_sendmsg+0x1c3/0x2b0 [ 733.123656][T15919] ? __x64_sys_sendmsg+0x80/0x80 [ 733.128663][T15919] ? syscall_enter_from_user_mode+0x2a/0x80 [ 733.134608][T15919] do_syscall_64+0x4c/0xa0 [ 733.139094][T15919] ? clear_bhb_loop+0x60/0xb0 [ 733.144018][T15919] ? clear_bhb_loop+0x60/0xb0 [ 733.148785][T15919] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 733.154727][T15919] RIP: 0033:0x7f9a16b9fb19 [ 733.159210][T15919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.178867][T15919] RSP: 002b:00007f9a17a2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 733.187358][T15919] RAX: ffffffffffffffda RBX: 00007f9a16e25fa0 RCX: 00007f9a16b9fb19 [ 733.195378][T15919] RDX: 0000000000000000 RSI: 0000200000000ac0 RDI: 0000000000000015 [ 733.203385][T15919] RBP: 00007f9a16c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 733.211399][T15919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 733.219416][T15919] R13: 00007f9a16e26038 R14: 00007f9a16e25fa0 R15: 00007fff9bc77e68 [ 733.227449][T15919] [ 735.227608][T15996] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.2830'. [ 735.258298][T15996] netlink: zone id is out of range [ 735.275138][T15996] netlink: zone id is out of range [ 735.288567][T15996] netlink: get zone limit has 8 unknown bytes [ 735.691542][T16014] netlink: 'syz.2.2836': attribute type 10 has an invalid length. [ 735.782720][T16014] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 737.044789][T16049] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.2845'. [ 737.073452][T16049] netlink: zone id is out of range [ 737.091271][T16049] netlink: zone id is out of range [ 737.109847][T16049] netlink: get zone limit has 8 unknown bytes [ 737.500533][T16059] netlink: 'syz.0.2850': attribute type 46 has an invalid length. [ 737.556989][T16059] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2850'. [ 738.081654][T16070] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 738.091871][T16070] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 738.099801][T16070] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 738.108296][T16070] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 738.118700][T16070] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 738.127166][T16070] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 738.182218][T16068] rxe_eth0 speed is unknown, defaulting to 1000 [ 738.225941][ T6595] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.354638][ T6595] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.579420][ T6595] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.647711][T16081] netlink: 'syz.0.2852': attribute type 10 has an invalid length. [ 738.851043][ T6595] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.160528][T16094] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.2857'. [ 739.196798][T16096] netlink: 'syz.1.2858': attribute type 2 has an invalid length. [ 739.242848][T16094] netlink: zone id is out of range [ 739.258067][ T6595] device 0 left promiscuous mode [ 739.273870][T16094] netlink: zone id is out of range [ 739.287091][T16094] netlink: get zone limit has 8 unknown bytes [ 739.406826][T16099] netlink: 'syz.1.2858': attribute type 2 has an invalid length. [ 739.427758][ T6595] device 1 left promiscuous mode [ 739.463609][T16068] chnl_net:caif_netlink_parms(): no params data found [ 739.741494][T16096] device .*! entered promiscuous mode [ 739.795503][ T6595] tipc: Left network mode [ 740.218631][T16070] Bluetooth: hci5: command 0x0409 tx timeout [ 740.459786][T16068] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.467272][T16068] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.517110][T16068] device bridge_slave_0 entered promiscuous mode [ 740.633051][T16132] netlink: 'syz.2.2866': attribute type 2 has an invalid length. [ 740.664075][T16068] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.679414][T16068] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.727909][T16068] device bridge_slave_1 entered promiscuous mode [ 741.103897][T16068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.192780][T16068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 741.214446][T16151] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.2870'. [ 741.248120][T16151] netlink: zone id is out of range [ 741.259376][T16151] netlink: zone id is out of range [ 741.264762][T16151] netlink: get zone limit has 8 unknown bytes [ 741.376341][T16068] team0: Port device team_slave_0 added [ 741.417464][T16068] team0: Port device team_slave_1 added [ 741.588775][T16068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 741.596238][T16068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 741.627351][T16068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 741.684835][T16068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 741.693775][T16068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 741.743529][T16068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 741.863680][T16068] device hsr_slave_0 entered promiscuous mode [ 741.870639][T16068] device hsr_slave_1 entered promiscuous mode [ 742.294914][T16070] Bluetooth: hci5: command 0x041b tx timeout [ 742.617554][T16068] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 742.639021][T16068] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 742.657203][T16068] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 742.668953][T16068] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 742.726968][ T6595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 742.736414][ T6595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 742.746416][ T6595] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 742.754214][ T6595] batman_adv: batadv0: Removing interface: virt_wifi0 [ 742.794858][ T6595] device veth1_macvtap left promiscuous mode [ 742.801566][ T6595] device veth0_macvtap left promiscuous mode [ 744.368578][T16070] Bluetooth: hci5: command 0x040f tx timeout [ 745.040661][T16068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 745.055163][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 745.065554][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 745.092510][T16068] 8021q: adding VLAN 0 to HW filter on device team0 [ 745.103409][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 745.129520][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 745.138130][ T6603] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.145333][ T6603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 745.164457][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 745.173418][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 745.182775][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 745.193735][ T6603] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.200942][ T6603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 745.211761][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 745.240178][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 745.267568][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 745.278645][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 745.301723][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 745.313049][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 745.326364][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 745.341890][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 745.352352][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 745.363291][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 745.373285][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 745.389006][T16068] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 745.737163][ T6595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 745.745209][ T6595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 745.758325][T16068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 746.200384][ T6595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 746.220701][ T6595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 746.258219][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 746.267986][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 746.279996][T16068] device veth0_vlan entered promiscuous mode [ 746.290928][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 746.304458][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 746.320578][T16068] device veth1_vlan entered promiscuous mode [ 746.347801][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 746.361965][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 746.372117][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 746.383970][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 746.396374][T16068] device veth0_macvtap entered promiscuous mode [ 746.411539][T16068] device veth1_macvtap entered promiscuous mode [ 746.433855][T16068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 746.448925][T16070] Bluetooth: hci5: command 0x0419 tx timeout [ 746.457506][T16068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.471055][T16068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 746.482766][T16068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.497900][T16068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 746.509226][ T6600] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 746.522731][ T6600] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 746.535174][ T6600] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 746.549409][ T6600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 746.567279][T16068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 746.578304][T16068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.593360][T16068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 746.604312][T16068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.620045][T16068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 746.633735][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 746.644312][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 746.659650][T16068] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.679094][T16068] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.687848][T16068] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.701580][T16068] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.835564][ T6603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 746.848689][ T6603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 746.866974][ T6595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 746.897439][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 746.906290][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 746.920027][ T6595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 747.046057][T16218] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.2882'. [ 747.129101][T16218] netlink: zone id is out of range [ 747.162755][T16218] netlink: zone id is out of range [ 747.203726][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.210259][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.249176][T16218] netlink: get zone limit has 8 unknown bytes [ 747.357410][T16226] netlink: 'syz.3.2884': attribute type 10 has an invalid length. [ 747.447594][T16223] netlink: 'syz.3.2884': attribute type 10 has an invalid length. [ 747.746102][T16237] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.2886'. [ 747.788922][T16237] netlink: zone id is out of range [ 747.794249][T16237] netlink: zone id is out of range [ 747.827566][T16237] netlink: get zone limit has 8 unknown bytes [ 747.958902][T16242] netlink: 'syz.4.2871': attribute type 10 has an invalid length. [ 748.023119][T16242] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.087432][T16242] device bridge_slave_1 left promiscuous mode [ 748.129905][T16242] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.247050][T16242] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 748.292293][T16252] netlink: 'syz.1.2874': attribute type 21 has an invalid length. [ 748.320665][T16252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2874'. [ 749.033168][T16268] netlink: 'syz.0.2879': attribute type 10 has an invalid length. [ 749.967442][T16292] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.2890'. [ 750.033444][T16292] netlink: zone id is out of range [ 750.066408][T16292] netlink: zone id is out of range [ 750.096953][T16292] netlink: get zone limit has 8 unknown bytes [ 750.194182][T16273] rxe_eth0 speed is unknown, defaulting to 1000 [ 753.360554][T16334] netlink: 'syz.0.2895': attribute type 1 has an invalid length. [ 753.388449][T16334] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2895'. [ 753.546074][T16342] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2898'. [ 753.632761][ T6600] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 753.651984][T11370] syzkaller0: tun_net_xmit 48 [ 753.847913][T16352] netlink: 'syz.1.2899': attribute type 9 has an invalid length. [ 753.934193][T16352] netlink: 134768 bytes leftover after parsing attributes in process `syz.1.2899'. [ 755.807224][T16378] rxe_eth0 speed is unknown, defaulting to 1000 [ 755.860314][T16384] device syzkaller0 entered promiscuous mode [ 756.811700][T16412] netlink: 'syz.2.2911': attribute type 21 has an invalid length. [ 757.009664][T16416] netlink: 'syz.3.2912': attribute type 10 has an invalid length. [ 757.435704][T16437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 757.465790][T16437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.515625][T16437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 757.589982][T16437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.576673][ T4292] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 758.586845][ T4292] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 758.599333][ T4292] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 758.609756][ T4292] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 758.617452][ T4292] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 758.625676][ T4292] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 758.804131][T16459] rxe_eth0 speed is unknown, defaulting to 1000 [ 759.837324][ T6584] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.242091][T16459] chnl_net:caif_netlink_parms(): no params data found [ 760.332407][ T6584] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.486184][ T6584] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.526086][T16507] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2935'. [ 760.668183][ T6584] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.690539][ T4292] Bluetooth: hci2: command 0x0409 tx timeout [ 760.911293][T16459] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.923231][T16459] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.934016][T16459] device bridge_slave_0 entered promiscuous mode [ 760.965724][T16459] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.994785][T16459] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.026838][T16459] device bridge_slave_1 entered promiscuous mode [ 761.202042][T16459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 761.264981][T16459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 761.380386][ T6584] device 0 left promiscuous mode [ 761.547746][T16459] team0: Port device team_slave_0 added [ 761.571267][ T6584] device 1 left promiscuous mode [ 761.613751][T16459] team0: Port device team_slave_1 added [ 761.686985][ T6584] device 2 left promiscuous mode [ 761.714219][T16459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 761.728790][T16459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 761.810786][T16459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 761.881285][ T6584] device 3 left promiscuous mode [ 761.899394][T16459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 761.906403][T16459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 762.014597][T16459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 762.362235][T16547] netlink: 'syz.1.2944': attribute type 10 has an invalid length. [ 762.629251][T16556] netlink: 'syz.2.2946': attribute type 10 has an invalid length. [ 762.715136][T16556] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2946'. [ 762.768707][ T4292] Bluetooth: hci2: command 0x041b tx timeout [ 762.877915][T16459] device hsr_slave_0 entered promiscuous mode [ 762.925397][T16459] device hsr_slave_1 entered promiscuous mode [ 762.962844][T16459] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 762.994408][T16459] Cannot create hsr debugfs directory [ 764.288068][T16595] netlink: 'syz.0.2953': attribute type 3 has an invalid length. [ 764.314517][T16595] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2953'. [ 764.855658][ T4292] Bluetooth: hci2: command 0x040f tx timeout [ 764.994686][T16610] netlink: 'syz.1.2956': attribute type 2 has an invalid length. [ 765.008777][T16610] netlink: 'syz.1.2956': attribute type 8 has an invalid length. [ 765.038458][T16610] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2956'. [ 765.977046][T16459] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 766.309720][T16459] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 766.330669][T16459] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 766.356996][T16653] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2964'. [ 766.383445][T16459] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 766.420879][T16653] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2964'. [ 766.455202][T16656] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2964'. [ 766.928925][ T4292] Bluetooth: hci2: command 0x0419 tx timeout [ 766.976990][ T6584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 766.991460][ T6584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 767.139513][ T6584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 767.169727][ T6584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 767.206040][ T6584] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 767.241167][ T6584] batman_adv: batadv0: Removing interface: virt_wifi0 [ 767.406062][T16675] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.2968'. [ 769.836770][T16459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 769.851292][T16669] netlink: 'syz.4.2967': attribute type 2 has an invalid length. [ 769.859625][T16669] netlink: 'syz.4.2967': attribute type 8 has an invalid length. [ 769.867370][T16669] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2967'. [ 769.879156][T16675] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 769.898048][T16675] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 769.913176][T16675] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 769.944154][ T6582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 769.962189][ T6582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 770.020448][T16459] 8021q: adding VLAN 0 to HW filter on device team0 [ 770.093249][ T6600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 770.124707][ T6600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 770.163962][ T6600] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.171240][ T6600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 770.262766][ T6600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 770.329915][ T6600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 770.381931][ T6600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 770.446000][ T6600] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.453227][ T6600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 770.542191][ T6600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 770.713804][T16700] : port 1(ip6gretap0) entered blocking state [ 770.728878][T16700] : port 1(ip6gretap0) entered disabled state [ 770.800542][T16700] device ip6gretap0 entered promiscuous mode [ 770.868447][ T6600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 770.910815][ T6600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 770.936508][ T6600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 770.956883][ T6600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 771.009209][ T6600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 771.032990][ T6600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 771.043629][ T6600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 771.058688][ T6600] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 771.077343][T16707] tap0: tun_chr_ioctl cmd 1074025677 [ 771.092274][T16707] tap0: linktype set to 778 [ 771.097332][T16701] device ip6gretap0 left promiscuous mode [ 771.106934][T16701] : port 1(ip6gretap0) entered disabled state [ 771.143811][T16459] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 771.203727][T16459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 771.228974][ T6600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 771.238264][ T6600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 771.289423][T16713] netlink: 'syz.1.2977': attribute type 27 has an invalid length. [ 771.319849][T16719] netlink: 'syz.1.2977': attribute type 3 has an invalid length. [ 771.327648][T16719] netlink: 'syz.1.2977': attribute type 304 has an invalid length. [ 772.347293][T16755] netlink: 'syz.1.2984': attribute type 10 has an invalid length. [ 772.639463][ T6586] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 772.647905][ T6586] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 772.693618][T16459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 772.788997][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 772.807774][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 772.905074][ T9333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 772.943494][ T9333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 772.954855][T16459] device veth0_vlan entered promiscuous mode [ 772.984019][T16786] : port 1(ip6gretap0) entered blocking state [ 772.996263][T16786] : port 1(ip6gretap0) entered disabled state [ 773.021457][T16786] device ip6gretap0 entered promiscuous mode [ 773.054413][ T9333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 773.063000][ T9333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 773.078583][T16791] device ip6gretap0 left promiscuous mode [ 773.096132][T16791] : port 1(ip6gretap0) entered disabled state [ 773.121185][T16459] device veth1_vlan entered promiscuous mode [ 773.215515][ T9333] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 773.224868][ T9333] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 773.274346][ T9333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 773.315132][ T9333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 773.356248][T16459] device veth0_macvtap entered promiscuous mode [ 773.405251][T16459] device veth1_macvtap entered promiscuous mode [ 773.488680][T16799] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2992'. [ 773.509802][T16459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 773.528852][T16799] netlink: zone id is out of range [ 773.534614][T16459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 773.555636][T16799] netlink: zone id is out of range [ 773.561799][T16459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 773.578564][T16799] netlink: zone id is out of range [ 773.605422][T16459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 773.630165][T16459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 773.656758][ T9333] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 773.681349][ T9333] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 773.712086][ T9333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 773.739356][ T9333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 773.759778][T16459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 773.775706][T16459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 773.793331][T16459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 773.804896][T16459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 773.823213][T16459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 773.852560][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 773.869098][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 773.923461][T16459] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.953168][T16459] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.008414][T16459] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.017222][T16459] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.276535][T16821] netlink: 'syz.4.2997': attribute type 10 has an invalid length. [ 775.334088][T16821] team0: Port device wlan1 added [ 775.540836][ T6586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 775.558793][ T6586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 775.590905][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 775.660056][ T6582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 775.708546][ T6582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 775.755773][ T6586] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 775.850817][T16845] netlink: 'syz.2.3001': attribute type 2 has an invalid length. [ 776.062375][T16859] device bridge_slave_0 left promiscuous mode [ 776.151521][T16865] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.2918'. [ 776.154563][T16859] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.257226][T16888] netlink: 'syz.0.3010': attribute type 21 has an invalid length. [ 777.290448][T16888] netlink: 'syz.0.3010': attribute type 1 has an invalid length. [ 777.321957][T16889] netlink: 'syz.3.3009': attribute type 10 has an invalid length. [ 777.549917][T16889] team0: Port device wlan1 added [ 778.079147][T16916] netlink: 'syz.0.3013': attribute type 3 has an invalid length. [ 778.086958][T16916] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3013'. [ 778.181467][T16909] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.3012'. [ 778.254222][T16070] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 778.263819][T16070] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 778.271775][T16070] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 778.282457][T16070] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 778.291339][T16070] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 778.301306][T16070] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 778.613738][ T6582] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.800726][ T6582] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.824251][T16924] rxe_eth0 speed is unknown, defaulting to 1000 [ 778.834875][T16931] netlink: 'syz.3.3015': attribute type 2 has an invalid length. [ 778.931691][ T6582] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.173783][ T6582] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.231602][T16949] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3020'. [ 779.511572][ T6582] device 0 left promiscuous mode [ 779.610531][ T6582] device .*! left promiscuous mode [ 780.224284][T16924] chnl_net:caif_netlink_parms(): no params data found [ 780.289617][ T6582] tipc: Left network mode [ 780.368444][ T4292] Bluetooth: hci3: command 0x0409 tx timeout [ 780.528926][T16924] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.596275][T16924] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.634762][T16924] device bridge_slave_0 entered promiscuous mode [ 780.909268][T16924] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.916440][T16924] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.939407][T16924] device bridge_slave_1 entered promiscuous mode [ 781.123855][T17002] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.3031'. [ 781.265965][T16924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 781.368468][T16995] netlink: 'syz.3.3030': attribute type 10 has an invalid length. [ 781.816376][T16995] device veth0_vlan left promiscuous mode [ 781.890831][T16995] device veth0_vlan entered promiscuous mode [ 781.966176][T16995] team0: Device veth0_vlan failed to register rx_handler [ 782.341580][T16924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 782.448678][ T4292] Bluetooth: hci3: command 0x041b tx timeout [ 782.516589][T16924] team0: Port device team_slave_0 added [ 782.656025][T16924] team0: Port device team_slave_1 added [ 782.778677][T16924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 782.785694][T16924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 782.938399][T16924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 782.987859][T16924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 782.996929][T16924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 783.089456][T16924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 783.245297][T17017] device syzkaller0 entered promiscuous mode [ 783.278540][T17039] netlink: 'syz.2.3037': attribute type 2 has an invalid length. [ 783.306877][T17039] netlink: 'syz.2.3037': attribute type 8 has an invalid length. [ 783.316993][T17039] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3037'. [ 784.535376][ T4292] Bluetooth: hci3: command 0x040f tx timeout [ 785.172070][T17071] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3044'. [ 786.618462][ T4292] Bluetooth: hci3: command 0x0419 tx timeout [ 786.754527][T17064] netlink: 'syz.3.3041': attribute type 9 has an invalid length. [ 786.793187][T17064] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3041'. [ 786.804207][T17071] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3044'. [ 786.896440][T16924] device hsr_slave_0 entered promiscuous mode [ 786.923437][T16924] device hsr_slave_1 entered promiscuous mode [ 786.963830][T16924] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 786.974010][T16924] Cannot create hsr debugfs directory [ 787.681822][T17117] netlink: 'syz.4.3052': attribute type 2 has an invalid length. [ 787.729432][T17116] netlink: 'syz.3.3053': attribute type 10 has an invalid length. [ 787.802205][T17116] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3053'. [ 787.845514][T17116] device hsr0 entered promiscuous mode [ 787.897721][T17116] bridge0: port 3(hsr0) entered blocking state [ 787.925778][T17116] bridge0: port 3(hsr0) entered disabled state [ 787.947374][T17116] bridge0: port 3(hsr0) entered blocking state [ 787.953850][T17116] bridge0: port 3(hsr0) entered forwarding state [ 787.954700][T17117] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3052'. [ 788.016514][T17119] netlink: 'syz.3.3053': attribute type 21 has an invalid length. [ 788.113016][T17124] sock: sock_set_timeout: `syz.0.3054' (pid 17124) tries to set negative timeout [ 789.632734][T17145] netlink: 'syz.4.3057': attribute type 2 has an invalid length. [ 789.644554][T17145] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.3057'. [ 791.567139][ T6582] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 791.607939][ T6582] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 791.648231][ T6582] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 791.840454][ T6582] bond0 (unregistering): Released all slaves [ 791.883920][T17137] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.3056'. [ 791.908910][T17137] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.3056'. [ 791.918179][T17137] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3056'. [ 791.947193][T17154] netlink: 'syz.4.3060': attribute type 1 has an invalid length. [ 791.969216][T17154] netlink: 'syz.4.3060': attribute type 4 has an invalid length. [ 791.993970][T17154] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3060'. [ 792.962805][T16924] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 793.005770][T16924] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 793.044140][T16924] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 793.089658][T16924] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 793.112203][T17193] cgroup: fork rejected by pids controller in /syz4 [ 793.135362][T17195] netlink: 'syz.0.3067': attribute type 33 has an invalid length. [ 793.164497][T17195] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3067'. [ 793.221220][T17195] netlink: 'syz.0.3067': attribute type 33 has an invalid length. [ 793.258888][T17195] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3067'. [ 793.332176][T17195] netlink: 'syz.0.3067': attribute type 33 has an invalid length. [ 793.348764][T17195] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3067'. [ 793.489199][T17195] netlink: 'syz.0.3067': attribute type 33 has an invalid length. [ 793.524351][T17195] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3067'. [ 793.541476][T17195] netlink: 'syz.0.3067': attribute type 33 has an invalid length. [ 793.578782][T17195] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3067'. [ 793.630087][T17195] netlink: 'syz.0.3067': attribute type 33 has an invalid length. [ 793.663929][T17195] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3067'. [ 793.717328][T17216] netlink: zone id is out of range [ 793.723361][T17195] netlink: 'syz.0.3067': attribute type 33 has an invalid length. [ 793.738558][T17216] netlink: zone id is out of range [ 793.743831][T17216] netlink: get zone limit has 8 unknown bytes [ 793.782284][T17195] netlink: 'syz.0.3067': attribute type 33 has an invalid length. [ 793.963899][T16924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 794.021037][ T6586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 794.040909][ T6586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 794.072972][T16924] 8021q: adding VLAN 0 to HW filter on device team0 [ 794.093879][ T6586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 794.161114][ T6586] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 794.176901][ T6586] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.184139][ T6586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 794.237514][ T6586] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 794.252378][ T6586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 794.272763][ T6586] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 794.289259][ T6586] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.296463][ T6586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 794.336207][ T6586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 794.370063][ T6586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 794.522734][ T6582] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.564016][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 794.578630][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 794.587668][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 794.607977][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 794.643149][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 794.665531][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 794.684358][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 794.743789][ T6582] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.772512][T16924] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 794.788102][T16924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 794.803297][ T6586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 794.814561][ T6586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 795.702074][ T6582] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.849318][ T4292] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 795.858295][ T4292] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 795.869211][ T4292] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 795.879346][ T4292] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 795.886859][ T4292] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 795.895082][ T4292] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 795.917086][ T6582] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.009679][T17261] rxe_eth0 speed is unknown, defaulting to 1000 [ 796.226409][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 796.238909][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 796.290311][T16924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 796.456667][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 796.469268][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 796.497652][T17278] netlink: zone id is out of range [ 796.511030][T17278] netlink: zone id is out of range [ 796.516321][T17278] netlink: get zone limit has 8 unknown bytes [ 796.819158][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 796.827794][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 796.861577][T16924] device veth0_vlan entered promiscuous mode [ 796.884097][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 796.970303][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 797.979361][T16070] Bluetooth: hci4: command 0x0409 tx timeout [ 798.169190][T16924] device veth1_vlan entered promiscuous mode [ 798.201035][T17301] __nla_validate_parse: 7 callbacks suppressed [ 798.201053][T17301] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3088'. [ 798.257997][T17301] device hsr_slave_0 left promiscuous mode [ 798.532839][T16924] device veth0_macvtap entered promiscuous mode [ 798.556123][ T6586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 798.569495][ T6586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 798.641383][T16924] device veth1_macvtap entered promiscuous mode [ 798.650246][ T6586] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 798.658879][ T6586] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 798.724188][T16924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.746822][T16924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.771202][T16924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.798576][T16924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.809674][T16924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.820419][T16924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.832327][T16924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 798.878895][T17339] validate_nla: 2 callbacks suppressed [ 798.878922][T17339] netlink: 'syz.2.3093': attribute type 29 has an invalid length. [ 798.902619][ T6586] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 798.918960][ T6586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 798.930568][T16924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 798.947997][T16924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.971745][T16924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 799.005116][T16924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.037306][T16924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 799.064823][T16924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.096295][T16924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 799.117365][T17339] netlink: 'syz.2.3093': attribute type 29 has an invalid length. [ 799.134227][T17341] netlink: 'syz.2.3093': attribute type 29 has an invalid length. [ 799.166014][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 799.176069][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 799.193767][T17261] chnl_net:caif_netlink_parms(): no params data found [ 799.236037][T16924] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.247790][T16924] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.263975][T16924] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.274487][T16924] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.547592][ T6582] team0: Port device wlan1 removed [ 799.567328][T17261] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.585950][T17261] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.599860][T17261] device bridge_slave_0 entered promiscuous mode [ 799.610247][T17261] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.617537][T17261] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.626167][T17261] device bridge_slave_1 entered promiscuous mode [ 799.695722][T17261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 799.785825][T17261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 799.830818][T17261] team0: Port device team_slave_0 added [ 799.869965][ T6588] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 799.890795][ T6588] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 799.899936][T17261] team0: Port device team_slave_1 added [ 799.990493][ T6588] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 800.022719][ T6582] device hsr_slave_0 left promiscuous mode [ 800.029526][ T6582] device hsr_slave_1 left promiscuous mode [ 800.036342][ T6582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 800.045813][ T6582] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 800.049264][T16070] Bluetooth: hci4: command 0x041b tx timeout [ 800.071515][ T6582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 800.079165][ T6582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 800.106343][ T6582] device veth1_macvtap left promiscuous mode [ 800.112521][ T6582] device veth0_macvtap left promiscuous mode [ 800.118834][ T6582] device veth1_vlan left promiscuous mode [ 800.124974][ T6582] device veth0_vlan left promiscuous mode [ 800.706309][ T6582] team0 (unregistering): Port device team_slave_1 removed [ 800.748171][ T6582] team0 (unregistering): Port device team_slave_0 removed [ 800.800924][ T6582] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 800.843452][ T6582] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 800.886984][ T6582] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 801.149088][ T6582] bond0 (unregistering): Released all slaves [ 801.189231][T17261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.199001][T17261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 801.225304][T17261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 801.259736][ T6591] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 801.267626][ T6591] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 801.282203][T17261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 801.328142][T17261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 801.396571][T17261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 801.412092][T17368] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.3095'. [ 801.431705][T17368] netlink: zone id is out of range [ 801.436930][T17368] netlink: zone id is out of range [ 801.442876][T17368] netlink: get zone limit has 8 unknown bytes [ 801.472271][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 801.644324][T17261] device hsr_slave_0 entered promiscuous mode [ 801.709764][T17261] device hsr_slave_1 entered promiscuous mode [ 801.834879][T17370] rxe_eth0 speed is unknown, defaulting to 1000 [ 802.129908][T16070] Bluetooth: hci4: command 0x040f tx timeout [ 802.557023][T17393] netlink: 'syz.3.3098': attribute type 10 has an invalid length. [ 802.645645][T17393] team0: Port device geneve1 added [ 802.810801][T17386] rxe_eth0 speed is unknown, defaulting to 1000 [ 802.875772][T17399] netlink: 'syz.2.3099': attribute type 10 has an invalid length. [ 802.915493][T17399] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3099'. [ 802.957764][T17399] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 803.211177][T17410] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 804.208674][T16070] Bluetooth: hci4: command 0x0419 tx timeout [ 806.196751][T17424] netlink: 'syz.2.3103': attribute type 28 has an invalid length. [ 806.205170][T17424] netlink: 'syz.2.3103': attribute type 29 has an invalid length. [ 806.217950][T17424] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3103'. [ 806.487440][T17261] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 806.722862][T17261] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 806.827079][T17261] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 806.945390][T17261] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 807.215106][T17261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.278039][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 807.301614][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 807.331512][T17261] 8021q: adding VLAN 0 to HW filter on device team0 [ 807.378746][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 807.409441][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 807.448781][ T6612] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.455947][ T6612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 807.524149][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 807.561312][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 807.594524][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 807.618044][ T6612] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.625304][ T6612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 807.661448][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 807.704161][ T6582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 807.736934][ T6582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 807.777687][ T6582] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 807.819509][ T6582] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 807.842284][ T6582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 807.866193][ T6582] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 807.897464][ T6582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 807.933693][ T6582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 807.976124][ T6582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 807.995430][ T6582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 808.018758][T17261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 808.495557][T17474] netlink: 'syz.3.3114': attribute type 33 has an invalid length. [ 808.538555][T17474] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3114'. [ 808.623326][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.629760][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.983601][T17498] netlink: 'syz.0.3118': attribute type 10 has an invalid length. [ 808.997928][T17498] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.017763][T17498] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.037259][T17498] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.055572][T17498] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.101225][T17498] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.135150][T17498] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.164332][T17498] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.195438][T17498] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.231267][T17498] team0: Port device geneve1 added [ 809.476784][T17261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 809.503529][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 809.536090][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 809.574353][T17510] netlink: 'syz.2.3120': attribute type 10 has an invalid length. [ 809.588778][T17510] device wlan1 left promiscuous mode [ 809.840405][T17514] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3122'. [ 809.926780][T17517] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3122'. [ 810.028456][T17514] netlink: 'syz.0.3122': attribute type 3 has an invalid length. [ 810.067193][T17514] netlink: 'syz.0.3122': attribute type 6 has an invalid length. [ 810.079249][T17514] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3122'. [ 810.322941][T17523] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.3123'. [ 810.406139][T17524] netlink: 'syz.1.3123': attribute type 8 has an invalid length. [ 810.424397][T17524] netlink: 'syz.1.3123': attribute type 1 has an invalid length. [ 810.442095][T17524] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.3123'. [ 811.494378][T17527] delete_channel: no stack [ 812.740675][T17523] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 812.754379][T17523] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 812.765100][T17523] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 813.145966][T17549] netlink: 'syz.1.3127': attribute type 2 has an invalid length. [ 813.183698][T17549] netlink: 'syz.1.3127': attribute type 8 has an invalid length. [ 813.224974][T17549] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3127'. [ 814.049264][T17561] netlink: 'syz.2.3130': attribute type 29 has an invalid length. [ 814.057447][T17561] netlink: 'syz.2.3130': attribute type 29 has an invalid length. [ 814.100363][T17562] netlink: 'syz.2.3130': attribute type 29 has an invalid length. [ 814.149308][T17561] netlink: 'syz.2.3130': attribute type 29 has an invalid length. [ 814.194744][T17562] netlink: 'syz.2.3130': attribute type 29 has an invalid length. [ 814.263642][T17572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3132'. [ 814.379992][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 814.401571][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 814.459442][T17572] netlink: 'syz.1.3132': attribute type 25 has an invalid length. [ 814.479908][T17572] netlink: 'syz.1.3132': attribute type 29 has an invalid length. [ 814.554088][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 814.573077][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 814.600133][T17585] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3134'. [ 814.641947][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 814.677297][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 814.714652][T17261] device veth0_vlan entered promiscuous mode [ 814.752588][T17261] device veth1_vlan entered promiscuous mode [ 814.822736][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 814.844026][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 814.869229][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 814.892207][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 814.922198][T17261] device veth0_macvtap entered promiscuous mode [ 814.964208][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 815.013110][T17261] device veth1_macvtap entered promiscuous mode [ 815.118717][T17261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.215765][T17261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.266636][T17261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.297736][T17261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.318038][T17261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.350848][T17261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.385749][T17261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 815.421594][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 815.449337][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 815.484910][T17261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.518473][T17261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.558583][T17261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.590248][T17261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.622120][T17261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.642877][T17261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.675288][T17261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 815.833181][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 815.847275][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 815.889115][T17261] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.897899][T17261] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.926595][T17261] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.948432][T17261] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.344410][ T6612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 816.398396][ T6612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 816.512507][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 816.884071][ T4374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 816.900140][ T4374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 816.907871][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 816.977952][T17620] netlink: 'syz.0.3144': attribute type 10 has an invalid length. [ 817.232104][T17635] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.3149'. [ 817.255706][T17635] netlink: zone id is out of range [ 817.264235][T17635] netlink: zone id is out of range [ 817.278034][T17635] netlink: zone id is out of range [ 817.283908][T17635] netlink: get zone limit has 8 unknown bytes [ 817.328882][T17630] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3146'. [ 817.697830][T17645] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3151'. [ 817.808080][T17645] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3151'. [ 818.371735][T17652] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3154'. [ 818.715706][ T4292] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 818.733670][ T4292] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 818.742532][ T4292] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 818.742743][T17659] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3156'. [ 818.769242][ T4292] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 818.777543][ T4292] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 818.786038][ T4292] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 818.841748][ T6621] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.878906][T17662] rxe_eth0 speed is unknown, defaulting to 1000 [ 818.940942][T17659] netlink: zone id is out of range [ 819.072635][T17659] netlink: del zone limit has 4 unknown bytes [ 819.477510][ T6621] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.678561][ T6621] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.811317][T17677] validate_nla: 3 callbacks suppressed [ 819.811339][T17677] netlink: 'syz.3.3159': attribute type 3 has an invalid length. [ 819.881580][T17677] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3159'. [ 819.931606][T17678] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3159'. [ 820.402307][ T6621] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.657882][T17683] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.3160'. [ 820.733305][T17683] netlink: zone id is out of range [ 820.777765][T17683] netlink: zone id is out of range [ 820.822891][T17683] netlink: zone id is out of range [ 820.858867][T16070] Bluetooth: hci1: command 0x0409 tx timeout [ 820.888672][T17683] netlink: get zone limit has 8 unknown bytes [ 820.984847][ T6621] device 0 left promiscuous mode [ 821.498760][T17692] netlink: 'syz.3.3162': attribute type 19 has an invalid length. [ 821.570668][T17693] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3162'. [ 821.614397][T17693] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 821.654120][ T6621] device 0 left promiscuous mode [ 821.691021][T17662] chnl_net:caif_netlink_parms(): no params data found [ 822.217397][T17662] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.228509][T17662] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.243606][T17662] device bridge_slave_0 entered promiscuous mode [ 822.311107][T17662] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.320747][T17662] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.350391][T17662] device bridge_slave_1 entered promiscuous mode [ 822.806784][T17729] netlink: 'syz.4.3169': attribute type 11 has an invalid length. [ 822.900332][T17729] netlink: 'syz.4.3169': attribute type 6 has an invalid length. [ 822.908143][T17729] netlink: 125060 bytes leftover after parsing attributes in process `syz.4.3169'. [ 822.928537][T16070] Bluetooth: hci1: command 0x041b tx timeout [ 823.020278][T17662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 823.032448][T17662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 823.291049][T17662] team0: Port device team_slave_0 added [ 823.497164][T17662] team0: Port device team_slave_1 added [ 823.522230][T17740] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.3172'. [ 823.601692][T17740] net_ratelimit: 1 callbacks suppressed [ 823.601708][T17740] netlink: zone id is out of range [ 823.684683][T17740] netlink: zone id is out of range [ 823.709688][T17740] netlink: zone id is out of range [ 823.738573][T17740] netlink: get zone limit has 8 unknown bytes [ 823.877977][T17733] rxe_eth0 speed is unknown, defaulting to 1000 [ 823.932634][T17662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 823.978596][T17662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 824.088475][T17662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 824.295227][T17662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 824.318430][T17662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 824.455132][T17662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 824.487271][T17759] netlink: 'syz.1.3175': attribute type 39 has an invalid length. [ 824.859393][T17769] device veth1_macvtap left promiscuous mode [ 825.008926][T16070] Bluetooth: hci1: command 0x040f tx timeout [ 825.260172][T17662] device hsr_slave_0 entered promiscuous mode [ 825.277780][T17662] device hsr_slave_1 entered promiscuous mode [ 825.381538][T17662] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 825.406577][T17662] Cannot create hsr debugfs directory [ 825.579539][T17774] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3187'. [ 825.926787][T17783] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3180'. [ 827.099969][T16070] Bluetooth: hci1: command 0x0419 tx timeout [ 827.534719][T17816] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.3185'. [ 827.600745][T17816] netlink: zone id is out of range [ 827.622064][T17816] netlink: zone id is out of range [ 827.643116][T17816] netlink: zone id is out of range [ 827.659823][T17816] netlink: zone id is out of range [ 827.681743][T17816] netlink: zone id is out of range [ 827.702164][T17816] netlink: get zone limit has 8 unknown bytes [ 828.154730][T17662] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 828.193643][T17662] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 828.239476][T17662] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 828.258919][T17662] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 828.507341][ T6621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 828.545429][ T6621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 828.567708][ T6621] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 828.588495][ T6621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 829.037720][ T6621] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 829.382856][T17849] netlink: 'syz.4.3193': attribute type 1 has an invalid length. [ 829.462331][T17849] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.3193'. [ 829.577153][T17847] netlink: 'syz.0.3201': attribute type 3 has an invalid length. [ 829.599692][T17850] netlink: 'syz.4.3193': attribute type 1 has an invalid length. [ 829.608697][T17850] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.3193'. [ 829.610022][T17847] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.3201'. [ 829.898887][ T6621] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 830.040426][ T6621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 830.191770][T17862] netlink: 'syz.3.3197': attribute type 29 has an invalid length. [ 830.215737][ T6621] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 830.228086][T17864] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.3196'. [ 830.254424][T17864] netlink: zone id is out of range [ 830.260227][T17864] netlink: zone id is out of range [ 830.265388][T17864] netlink: zone id is out of range [ 830.272305][T17864] netlink: zone id is out of range [ 830.277685][T17864] netlink: zone id is out of range [ 830.283620][T17864] netlink: get zone limit has 8 unknown bytes [ 830.709822][ T6621] bond0 (unregistering): Released all slaves [ 830.759153][T17841] netlink: 'syz.1.3189': attribute type 11 has an invalid length. [ 830.767047][T17841] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3189'. [ 830.819547][T17862] netlink: 'syz.3.3197': attribute type 29 has an invalid length. [ 831.102339][T17662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 831.199325][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 831.214949][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 831.336397][T17662] 8021q: adding VLAN 0 to HW filter on device team0 [ 831.541154][T17888] device syzkaller0 entered promiscuous mode [ 831.581707][T17878] netlink: 'syz.4.3200': attribute type 10 has an invalid length. [ 831.695413][T17878] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.900450][T17878] device bridge_slave_1 left promiscuous mode [ 831.924280][T17878] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.281450][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 832.303129][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 832.312488][ T6612] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.319719][ T6612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 834.406123][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 834.425022][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 834.446283][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 834.457067][ T6612] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.464284][ T6612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 834.481706][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 834.494107][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 834.511357][T17908] netlink: 'syz.1.3207': attribute type 10 has an invalid length. [ 834.520948][T17908] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3207'. [ 834.531510][T17908] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 834.538784][T17908] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 834.568112][T17908] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 834.620992][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 834.630852][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 834.665250][T17914] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.3208'. [ 834.674491][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 834.696889][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 834.721903][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 834.726987][T17914] netlink: zone id is out of range [ 834.749724][T17914] netlink: zone id is out of range [ 834.761255][T17914] netlink: zone id is out of range [ 834.768075][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 834.788180][T17914] netlink: zone id is out of range [ 834.791956][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 834.823007][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 834.863696][T17662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 834.877970][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 835.141089][T17924] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3211'. [ 835.330792][T17933] netlink: 'syz.1.3211': attribute type 1 has an invalid length. [ 835.356747][T17933] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.3211'. [ 835.526515][T17924] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3211'. [ 835.536209][T17928] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3211'. [ 835.558867][T17932] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3211'. [ 835.585472][T17932] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 835.958278][T17948] netlink: 'syz.4.3213': attribute type 3 has an invalid length. [ 836.023165][T17948] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.3213'. [ 836.158182][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 836.189211][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 836.222947][T17662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 836.290824][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 836.336659][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 836.449799][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 836.473173][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 836.496664][T17662] device veth0_vlan entered promiscuous mode [ 836.509764][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 836.569555][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 836.597483][T17662] device veth1_vlan entered promiscuous mode [ 836.668573][ T6582] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 837.526591][T17967] netlink: 'syz.3.3219': attribute type 10 has an invalid length. [ 837.681246][T17967] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.898649][T17967] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.007074][T17977] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.3221'. [ 838.020562][T17977] net_ratelimit: 2 callbacks suppressed [ 838.020592][T17977] netlink: zone id is out of range [ 838.031881][T17977] netlink: zone id is out of range [ 838.037047][T17977] netlink: zone id is out of range [ 838.044069][T17977] netlink: zone id is out of range [ 838.051111][T17977] netlink: zone id is out of range [ 838.056795][T17977] netlink: get zone limit has 8 unknown bytes [ 839.375862][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 839.396897][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 839.418940][T17662] device veth0_macvtap entered promiscuous mode [ 839.432964][T17982] netlink: 'syz.1.3222': attribute type 10 has an invalid length. [ 839.552275][T17982] team0 (unregistering): Port device team_slave_0 removed [ 839.592131][T17982] team0 (unregistering): Port device team_slave_1 removed [ 839.613348][T17662] device veth1_macvtap entered promiscuous mode [ 839.645700][ T6612] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 839.670972][T17992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3224'. [ 839.722923][T17992] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3224'. [ 839.887649][T17662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 839.901225][T17662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.911412][T17662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 839.922676][T17662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.933126][T17662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 839.948523][T17662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.985029][T17662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 840.038611][T18001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3224'. [ 840.047640][T18001] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3224'. [ 840.094593][ T6595] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 840.156061][ T6595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 840.184195][T17662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 840.204970][T17662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.233350][T17662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 840.268363][T17662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.288690][T17662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 840.306091][T17662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.318021][T17662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 840.334819][T17662] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.353419][T17662] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.362571][T17662] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.375410][T17662] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.387775][ T6595] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 840.412256][ T6595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 840.654581][ T6604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 840.673158][ T6604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 840.708079][ T6618] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 840.740857][T18027] device wlan1 entered promiscuous mode [ 840.766844][ T6612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 840.806931][ T6612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 840.832664][ T6618] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 840.985067][T18034] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.3231'. [ 841.014534][T18034] netlink: zone id is out of range [ 841.021683][T18034] netlink: zone id is out of range [ 841.031754][T18034] netlink: zone id is out of range [ 841.037751][T18037] netlink: 'syz.2.3150': attribute type 9 has an invalid length. [ 841.052798][T18034] netlink: zone id is out of range [ 841.062045][T18037] netlink: 7679 bytes leftover after parsing attributes in process `syz.2.3150'. [ 842.771423][T18092] netlink: 'syz.2.3234': attribute type 39 has an invalid length. [ 843.739959][ T4292] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 843.768947][ T4292] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 843.788542][ T4292] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 843.798074][ T4292] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 843.806301][ T4292] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 843.814864][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 844.605207][T18099] rxe_eth0 speed is unknown, defaulting to 1000 [ 844.694700][ T41] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.824376][ T41] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.991139][ T41] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.073612][T18111] device wlan1 entered promiscuous mode [ 845.092013][T18113] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.3243'. [ 845.138721][T18113] net_ratelimit: 2 callbacks suppressed [ 845.138738][T18113] netlink: zone id is out of range [ 845.150651][T18113] netlink: zone id is out of range [ 845.155906][T18113] netlink: zone id is out of range [ 845.161256][T18113] netlink: zone id is out of range [ 845.166656][T18113] netlink: zone id is out of range [ 845.172525][T18113] netlink: get zone limit has 8 unknown bytes [ 845.184078][ T41] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.224811][T18115] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3244'. [ 845.255791][T18115] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3244'. [ 845.293085][T18118] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3244'. [ 845.892013][ T4292] Bluetooth: hci5: command 0x0409 tx timeout [ 846.046823][T18142] netlink: 'syz.3.3248': attribute type 10 has an invalid length. [ 846.121206][T18142] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3248'. [ 846.198750][T18142] batman_adv: batadv0: Adding interface: virt_wifi0 [ 846.205798][T18142] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 846.337591][T18142] batman_adv: batadv0: Interface activated: virt_wifi0 [ 846.429518][ T41] device 0 left promiscuous mode [ 846.578951][T18124] netlink: 'syz.2.3247': attribute type 21 has an invalid length. [ 846.598753][T18124] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3247'. [ 846.635647][T18124] netlink: 'syz.2.3247': attribute type 5 has an invalid length. [ 846.664359][T18124] netlink: 'syz.2.3247': attribute type 6 has an invalid length. [ 846.709004][T18124] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3247'. [ 846.766906][T18099] chnl_net:caif_netlink_parms(): no params data found [ 846.806990][ T41] tipc: Left network mode [ 847.158832][T18156] netlink: 'syz.4.3253': attribute type 4 has an invalid length. [ 847.218413][T18156] netlink: 'syz.4.3253': attribute type 26 has an invalid length. [ 847.276397][T18156] netlink: 60519 bytes leftover after parsing attributes in process `syz.4.3253'. [ 847.396343][T18163] netlink: 59859 bytes leftover after parsing attributes in process `syz.4.3253'. [ 847.411443][T18178] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.3256'. [ 847.473025][T18178] netlink: zone id is out of range [ 847.502405][T18178] netlink: zone id is out of range [ 847.524088][T18178] netlink: get zone limit has 8 unknown bytes [ 847.545588][T18099] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.565652][T18099] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.597962][T18099] device bridge_slave_0 entered promiscuous mode [ 847.639300][T18161] : port 1(gretap0) entered blocking state [ 847.645460][T18161] : port 1(gretap0) entered disabled state [ 847.677346][T18161] device gretap0 entered promiscuous mode [ 847.828237][T18099] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.845820][T18099] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.934561][T18099] device bridge_slave_1 entered promiscuous mode [ 847.968953][ T4292] Bluetooth: hci5: command 0x041b tx timeout [ 848.709113][T18099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 849.287450][T18099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 849.983895][T18217] netlink: 'syz.1.3262': attribute type 21 has an invalid length. [ 850.049005][T16070] Bluetooth: hci5: command 0x040f tx timeout [ 851.014164][T18099] team0: Port device team_slave_0 added [ 851.176972][T18099] team0: Port device team_slave_1 added [ 851.299702][T18264] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3265'. [ 851.323047][T18265] netlink: 'syz.1.3264': attribute type 10 has an invalid length. [ 851.349132][T18265] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3264'. [ 851.409970][T18271] netlink: 'syz.1.3264': attribute type 10 has an invalid length. [ 851.469012][T18099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 851.476030][T18099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 851.602726][T18099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 851.660692][T18277] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.3268'. [ 851.686825][T18274] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3267'. [ 851.722976][T18274] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 851.738820][T18277] netlink: zone id is out of range [ 851.744159][T18277] netlink: zone id is out of range [ 851.788849][T18277] netlink: get zone limit has 8 unknown bytes [ 851.810910][T18274] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 851.851142][T18099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 851.858170][T18099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 851.954578][T18099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 852.128805][T16070] Bluetooth: hci5: command 0x0419 tx timeout [ 852.275739][T18099] device hsr_slave_0 entered promiscuous mode [ 852.308754][T18099] device hsr_slave_1 entered promiscuous mode [ 852.330434][T18099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 852.353227][T18099] Cannot create hsr debugfs directory [ 852.732252][T18313] netlink: 'syz.2.3276': attribute type 10 has an invalid length. [ 852.755664][T18313] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3276'. [ 852.825516][T18313] batman_adv: batadv0: Adding interface: virt_wifi0 [ 852.867771][T18313] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 852.985221][T18313] batman_adv: batadv0: Interface activated: virt_wifi0 [ 856.033246][T18356] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.3281'. [ 856.048049][T18356] netlink: zone id is out of range [ 856.055790][T18356] netlink: zone id is out of range [ 856.066024][T18356] netlink: get zone limit has 8 unknown bytes [ 856.387227][T18366] netlink: 'syz.3.3284': attribute type 2 has an invalid length. [ 856.433239][T18366] netlink: 'syz.3.3284': attribute type 1 has an invalid length. [ 856.458164][T18366] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.3284'. [ 856.469323][T18361] netlink: 'syz.1.3283': attribute type 10 has an invalid length. [ 856.477246][T18361] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3283'. [ 856.534139][T18361] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.541880][T18361] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.593183][T18361] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.600455][T18361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 856.607952][T18361] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.615236][T18361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 856.719243][T18361] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 856.997997][T18384] netlink: 'syz.2.3287': attribute type 29 has an invalid length. [ 857.086341][T18390] netlink: 'syz.3.3286': attribute type 4 has an invalid length. [ 857.219771][T18390] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3286'. [ 857.428999][T18382] netlink: 'syz.3.3286': attribute type 4 has an invalid length. [ 857.436835][T18382] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3286'. [ 857.495954][T18384] netlink: 'syz.2.3287': attribute type 29 has an invalid length. [ 857.548886][T18385] netlink: 'syz.2.3287': attribute type 29 has an invalid length. [ 857.682621][T18387] netlink: 'syz.2.3287': attribute type 29 has an invalid length. [ 857.723024][T18388] netlink: 'syz.2.3287': attribute type 29 has an invalid length. [ 858.043585][T18099] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 858.100480][T18099] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 858.139214][T18099] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 858.169233][T18099] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 858.242797][ T41] device veth1_macvtap left promiscuous mode [ 858.263787][ T41] device veth0_macvtap left promiscuous mode [ 858.770476][ T41] team0 (unregistering): Port device geneve1 removed [ 859.725166][ T41] team0 (unregistering): Port device team_slave_1 removed [ 859.834672][ T41] team0 (unregistering): Port device team_slave_0 removed [ 860.203153][T18433] netlink: 131088 bytes leftover after parsing attributes in process `syz.3.3296'. [ 860.267685][T18437] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3295'. [ 860.321361][T18437] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 860.355367][T18437] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 860.375747][T18415] rxe_eth0 speed is unknown, defaulting to 1000 [ 860.847614][T18099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 860.956594][T18099] 8021q: adding VLAN 0 to HW filter on device team0 [ 860.980405][ T6317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 860.996046][ T6317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 861.021144][ T6317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 861.041541][ T6317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 861.072431][ T6317] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.079680][ T6317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 861.091950][ T6317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 861.120987][ T6591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 861.137007][ T6591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 861.155725][ T6591] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.162979][ T6591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 861.276071][ T6591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 861.291962][ T6591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 861.310931][ T6591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 861.330581][ T6591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 861.349441][ T6591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 861.359753][ T6591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 861.368724][ T6591] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 861.395867][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 861.411546][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 861.428022][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 861.445908][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 861.466568][T18099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 862.891702][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 862.941073][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 862.964914][T18099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 863.024127][T18497] validate_nla: 5 callbacks suppressed [ 863.024145][T18497] netlink: 'syz.2.3309': attribute type 3 has an invalid length. [ 863.069597][T18496] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3308'. [ 863.124008][ T6591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 863.141487][ T6591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 863.231511][ T6591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 863.245751][ T6591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 863.267812][T18099] device veth0_vlan entered promiscuous mode [ 863.297981][ T6591] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 863.343454][ T6591] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 863.405782][T18099] device veth1_vlan entered promiscuous mode [ 863.453808][ T6591] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 863.553943][ T6591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 863.572760][ T6591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 863.622847][T18099] device veth0_macvtap entered promiscuous mode [ 863.706769][T18099] device veth1_macvtap entered promiscuous mode [ 863.794441][T18099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 863.805674][T18099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.816414][T18099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 863.828047][T18099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.888929][T18099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 863.914104][T18099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.937592][T18099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 863.971583][T18099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.004084][T18099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 864.023723][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 864.039428][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 864.067134][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 864.097138][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 864.126413][T18099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.152821][T18099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.182511][T18099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.212820][T18099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.235455][T18099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.261114][T18099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.301721][T18099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.341087][T18099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.387818][T18099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 864.422563][ T6591] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 864.440002][ T6591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 864.484276][T18099] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.502631][T18099] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.528068][T18099] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.546812][T18099] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.751644][ T6586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 866.805514][ T6586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 866.851201][ T6586] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 866.932435][T18531] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.3314'. [ 866.947393][ T6584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 866.976014][ T6584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 867.072234][T18537] device syzkaller0 entered promiscuous mode [ 867.149287][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 870.055475][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.061891][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.935872][T18571] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 870.954259][T18571] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 872.442502][T18621] netlink: 'syz.0.3329': attribute type 29 has an invalid length. [ 872.466316][T18621] netlink: 'syz.0.3329': attribute type 29 has an invalid length. [ 872.555168][T18621] netlink: 'syz.0.3329': attribute type 29 has an invalid length. [ 873.272295][T18634] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3333'. [ 873.291413][T18634] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3333'. [ 873.302450][T18634] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3333'. [ 873.385968][T18634] netlink: 'syz.0.3333': attribute type 21 has an invalid length. [ 873.426992][T18634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3333'. [ 873.447421][T18636] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.3332'. [ 874.207091][T18667] netlink: 'syz.2.3341': attribute type 39 has an invalid length. [ 874.431516][T18664] IPv6: …: Disabled Multicast RS [ 876.076115][T18657] rxe_eth0 speed is unknown, defaulting to 1000 [ 879.143800][T18752] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3363'. [ 879.444143][T18752] netlink: zone id is out of range [ 879.565823][T18756] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3363'. [ 879.808548][T18752] netlink: zone id is out of range [ 879.955780][T18756] netlink: zone id is out of range [ 880.018690][T18752] netlink: zone id is out of range [ 880.023966][T18752] netlink: zone id is out of range [ 880.429450][T18756] netlink: zone id is out of range [ 880.434757][T18756] netlink: zone id is out of range [ 880.511698][T18752] netlink: zone id is out of range [ 880.568429][T18756] netlink: zone id is out of range [ 880.588690][T18752] netlink: zone id is out of range [ 881.922662][T18747] rxe_eth0 speed is unknown, defaulting to 1000 [ 882.368418][T16070] Bluetooth: hci2: command 0x0406 tx timeout [ 882.690150][T18797] netlink: 131088 bytes leftover after parsing attributes in process `syz.4.3373'. [ 883.493086][T18806] netlink: 'syz.4.3374': attribute type 21 has an invalid length. [ 883.568496][T18806] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3374'. [ 883.596579][T18810] netlink: 'syz.4.3374': attribute type 29 has an invalid length. [ 883.804233][T18807] netlink: 'syz.4.3374': attribute type 21 has an invalid length. [ 883.955775][T18807] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3374'. [ 884.131920][T18810] netlink: 'syz.4.3374': attribute type 29 has an invalid length. [ 884.205830][T18811] netlink: 'syz.4.3374': attribute type 29 has an invalid length. [ 885.853541][T18828] rxe_eth0 speed is unknown, defaulting to 1000 [ 886.414360][T18859] netlink: 22 bytes leftover after parsing attributes in process `syz.4.3386'. [ 886.517117][T18859] netlink: 'syz.4.3386': attribute type 21 has an invalid length. [ 887.960244][T18883] rxe_eth0 speed is unknown, defaulting to 1000 [ 888.274139][T18893] device syzkaller0 entered promiscuous mode [ 888.716118][T18921] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3400'. [ 892.014726][T18890] rxe_eth0 speed is unknown, defaulting to 1000 [ 892.270218][T18946] net_ratelimit: 268 callbacks suppressed [ 892.270235][T18946] sock: sock_set_timeout: `syz.4.3410' (pid 18946) tries to set negative timeout [ 893.987004][T18983] tc_dump_action: action bad kind [ 894.307196][T18993] netlink: 'syz.3.3421': attribute type 21 has an invalid length. [ 895.969683][T19045] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3432'. [ 896.010693][T19044] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.3433'. [ 896.048614][T19044] netlink: zone id is out of range [ 896.054058][T19044] netlink: get zone limit has 8 unknown bytes [ 896.333525][T19054] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.3436'. [ 896.373901][T19054] netlink: zone id is out of range [ 896.396018][T19054] netlink: get zone limit has 8 unknown bytes [ 896.571321][T19067] netlink: 'syz.1.3436': attribute type 3 has an invalid length. [ 896.627902][T19067] netlink: 1034 bytes leftover after parsing attributes in process `syz.1.3436'. [ 896.826639][T19066] netlink: 'syz.1.3436': attribute type 3 has an invalid length. [ 896.881148][T19066] netlink: 1034 bytes leftover after parsing attributes in process `syz.1.3436'. [ 897.689115][T19092] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.3446'. [ 899.310615][T19120] netlink: 'syz.0.3454': attribute type 3 has an invalid length. [ 899.344303][T19120] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3454'. [ 899.363505][T19121] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3454'. [ 899.439873][T19121] netlink: zone id is out of range [ 899.445560][T19121] netlink: zone id is out of range [ 899.463256][T19121] netlink: zone id is out of range [ 899.483834][T19121] netlink: zone id is out of range [ 899.505583][T19121] netlink: zone id is out of range [ 899.530947][T19121] netlink: zone id is out of range [ 899.592372][T19121] netlink: del zone limit has 4 unknown bytes [ 899.815430][T19127] netlink: 'syz.1.3456': attribute type 5 has an invalid length. [ 899.961538][T19105] rxe_eth0 speed is unknown, defaulting to 1000 [ 900.494232][T19138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3458'. [ 902.857007][ T4292] Bluetooth: hci3: command 0x0406 tx timeout [ 905.133004][T19166] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3466'. [ 905.144882][T19166] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 905.188648][T19166] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 905.372402][T19172] netlink: 'syz.2.3468': attribute type 21 has an invalid length. [ 905.445912][T19172] netlink: 'syz.2.3468': attribute type 21 has an invalid length. [ 906.898992][T19218] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3481'. [ 906.925378][T19218] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 907.005972][T19218] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 908.852249][T19238] rxe_eth0 speed is unknown, defaulting to 1000 [ 908.974749][T19268] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 908.982972][T19268] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 909.583759][T19265] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3495'. [ 909.793836][T19283] netlink: 'syz.2.3498': attribute type 10 has an invalid length. [ 911.178079][T19307] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.3507'. [ 912.579942][T19314] netlink: 126324 bytes leftover after parsing attributes in process `syz.3.3504'. [ 913.129371][T19322] netlink: 'syz.1.3510': attribute type 4 has an invalid length. [ 913.137209][T19322] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3510'. [ 913.217623][T19320] tun0: tun_chr_ioctl cmd 1074025677 [ 913.255702][T19320] tun0: linktype set to 805 [ 913.574323][T19328] delete_channel: no stack [ 914.041420][T19346] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.3517'. [ 914.143317][T19346] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.3517'. [ 914.193118][T19340] device syzkaller0 entered promiscuous mode [ 914.311832][T19342] netlink: 'syz.1.3515': attribute type 39 has an invalid length. [ 915.238966][T19357] netlink: 'syz.3.3518': attribute type 3 has an invalid length. [ 915.278876][T19357] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3518'. [ 918.208523][ T4292] Bluetooth: hci4: command 0x0406 tx timeout [ 918.774051][T19365] netlink: 'syz.0.3521': attribute type 21 has an invalid length. [ 918.834851][T19382] rxe_eth0 speed is unknown, defaulting to 1000 [ 923.075825][T19436] netlink: 'syz.1.3536': attribute type 10 has an invalid length. [ 923.359156][T19455] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3540'. [ 923.661585][T19461] device ipvlan0 entered promiscuous mode [ 924.549087][T19484] netlink: 'syz.1.3547': attribute type 21 has an invalid length. [ 924.685843][T19484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3547'. [ 924.710993][T19492] netlink: 'syz.0.3549': attribute type 1 has an invalid length. [ 925.829726][T19523] netlink: 'syz.1.3557': attribute type 21 has an invalid length. [ 925.847515][T19523] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3557'. [ 925.938798][T19529] netlink: 'syz.4.3559': attribute type 21 has an invalid length. [ 926.002163][T19534] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3560'. [ 926.107699][T19541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3561'. [ 926.145573][T19541] tc_dump_action: action bad kind [ 926.251640][T19527] delete_channel: no stack [ 926.958651][T19566] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3568'. [ 927.060339][T19566] netlink: 'syz.1.3568': attribute type 21 has an invalid length. [ 927.079375][T19566] netlink: 'syz.1.3568': attribute type 1 has an invalid length. [ 929.536552][T19620] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.3582'. [ 929.602451][T19625] netlink: 'syz.0.3583': attribute type 41 has an invalid length. [ 929.947648][T19630] netlink: 126324 bytes leftover after parsing attributes in process `syz.2.3585'. [ 931.491480][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.498009][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.455683][T19663] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3591'. [ 936.758736][T19733] netlink: 'syz.3.3607': attribute type 2 has an invalid length. [ 936.780585][T19733] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3607'. [ 936.810608][T19733] device syzkaller0 entered promiscuous mode [ 937.100019][T19741] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3609'. [ 938.386637][T19762] netlink: 'syz.0.3614': attribute type 4 has an invalid length. [ 938.479190][T19762] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3614'. [ 939.379301][T19770] netlink: 134780 bytes leftover after parsing attributes in process `syz.4.3617'. [ 939.578466][T19770] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3617'. [ 940.604035][T19806] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3626'. [ 940.744641][T19814] netlink: 'syz.1.3629': attribute type 4 has an invalid length. [ 940.815413][T19814] netlink: 134728 bytes leftover after parsing attributes in process `syz.1.3629'. [ 941.594166][T19842] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3635'. [ 941.761232][T19846] FAULT_INJECTION: forcing a failure. [ 941.761232][T19846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 941.827010][T19846] CPU: 0 PID: 19846 Comm: syz.4.3637 Not tainted syzkaller #0 [ 941.834567][T19846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 941.844676][T19846] Call Trace: [ 941.848029][T19846] [ 941.851005][T19846] dump_stack_lvl+0x188/0x24e [ 941.855749][T19846] ? show_regs_print_info+0x12/0x12 [ 941.861004][T19846] ? load_image+0x410/0x410 [ 941.865571][T19846] ? __lock_acquire+0x7ea0/0x7ea0 [ 941.870695][T19846] should_fail_ex+0x390/0x4c0 [ 941.875436][T19846] _copy_from_user+0x2c/0x170 [ 941.880206][T19846] ___sys_sendmsg+0x1c3/0x360 [ 941.884945][T19846] ? __sys_sendmsg+0x2a0/0x2a0 [ 941.889789][T19846] ? __lock_acquire+0x7ea0/0x7ea0 [ 941.894894][T19846] __se_sys_sendmsg+0x1c3/0x2b0 [ 941.899806][T19846] ? __x64_sys_sendmsg+0x80/0x80 [ 941.904822][T19846] ? lockdep_hardirqs_on+0x94/0x140 [ 941.910060][T19846] do_syscall_64+0x4c/0xa0 [ 941.914572][T19846] ? clear_bhb_loop+0x60/0xb0 [ 941.919373][T19846] ? clear_bhb_loop+0x60/0xb0 [ 941.924115][T19846] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 941.930069][T19846] RIP: 0033:0x7f34efb9fb19 [ 941.934576][T19846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 941.954235][T19846] RSP: 002b:00007f34f0a8b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 941.962705][T19846] RAX: ffffffffffffffda RBX: 00007f34efe25fa0 RCX: 00007f34efb9fb19 [ 941.970734][T19846] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 941.978762][T19846] RBP: 00007f34f0a8b090 R08: 0000000000000000 R09: 0000000000000000 [ 941.986798][T19846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 941.994843][T19846] R13: 00007f34efe26038 R14: 00007f34efe25fa0 R15: 00007ffcecd178b8 [ 942.002921][T19846] [ 942.051551][T19850] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.3638'. [ 942.065960][T19850] netlink: zone id is out of range [ 942.071745][T19850] netlink: zone id is out of range [ 942.077312][T19850] netlink: get zone limit has 8 unknown bytes [ 943.818631][T16070] Bluetooth: hci1: command 0x0406 tx timeout [ 944.089318][T19884] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.3656'. [ 944.108402][T19884] netlink: zone id is out of range [ 944.113625][T19884] netlink: zone id is out of range [ 944.138812][T19884] netlink: get zone limit has 8 unknown bytes [ 944.286016][T19888] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3646'. [ 944.345661][T19890] rxe_eth0 speed is unknown, defaulting to 1000 [ 944.806782][T19911] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3650'. [ 945.075837][T19905] rxe_eth0 speed is unknown, defaulting to 1000 [ 945.513707][T19928] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.3653'. [ 945.533865][T19928] netlink: zone id is out of range [ 945.555525][T19928] netlink: zone id is out of range [ 945.571815][T19928] netlink: get zone limit has 8 unknown bytes [ 945.590847][T19926] netlink: 'syz.4.3652': attribute type 21 has an invalid length. [ 945.605400][T19926] netlink: 9618 bytes leftover after parsing attributes in process `syz.4.3652'. [ 945.847783][T19935] netlink: 'syz.4.3657': attribute type 3 has an invalid length. [ 945.858736][T19935] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.3657'. [ 946.109718][T19942] netlink: 130960 bytes leftover after parsing attributes in process `syz.1.3659'. [ 946.260886][T19942] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 946.361894][T19944] netlink: 'syz.4.3660': attribute type 2 has an invalid length. [ 946.379485][T19944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3660'. [ 946.829160][T19960] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.3663'. [ 947.396190][T19977] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.3667'. [ 947.434610][T19977] netlink: zone id is out of range [ 947.449742][T19977] netlink: zone id is out of range [ 947.463161][T19977] netlink: get zone limit has 8 unknown bytes [ 947.654557][T19980] netlink: 'syz.3.3668': attribute type 10 has an invalid length. [ 947.727204][T19980] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3668'. [ 947.993057][T19990] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3670'. [ 948.421118][T20006] netlink: 'syz.1.3671': attribute type 1 has an invalid length. [ 948.523640][T19998] rxe_eth0 speed is unknown, defaulting to 1000 [ 949.667752][T20042] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3681'. [ 949.749085][T20043] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.3681'. [ 949.758711][T20043] netlink: zone id is out of range [ 949.764026][T20043] netlink: zone id is out of range [ 949.776064][T20043] netlink: zone id is out of range [ 949.781549][T20043] netlink: zone id is out of range [ 949.786935][T20043] netlink: zone id is out of range [ 949.799445][T20043] netlink: zone id is out of range [ 949.804869][T20043] netlink: zone id is out of range [ 950.807108][T20076] netlink: 763 bytes leftover after parsing attributes in process `syz.2.3690'. [ 950.840514][T20065] netlink: 'syz.3.3687': attribute type 10 has an invalid length. [ 951.150070][T20065] team0: Device wg1 is of different type [ 951.589363][T20092] netlink: 'syz.4.3692': attribute type 10 has an invalid length. [ 952.595169][T20119] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.3700'. [ 952.615944][T20122] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.3701'. [ 952.678499][T20122] net_ratelimit: 29 callbacks suppressed [ 952.678527][T20122] netlink: zone id is out of range [ 952.713442][T20122] netlink: zone id is out of range [ 952.725664][T20122] netlink: get zone limit has 8 unknown bytes [ 953.196261][T20143] netlink: 'syz.4.3707': attribute type 21 has an invalid length. [ 953.865345][T20151] sctp: [Deprecated]: syz.3.3709 (pid 20151) Use of struct sctp_assoc_value in delayed_ack socket option. [ 953.865345][T20151] Use struct sctp_sack_info instead [ 954.020947][T20161] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3712'. [ 954.038693][T20161] tc_dump_action: action bad kind [ 954.255689][T20163] device syzkaller0 entered promiscuous mode [ 954.680885][T20172] netlink: 'syz.4.3715': attribute type 10 has an invalid length. [ 954.715444][T20173] netlink: 'syz.0.3716': attribute type 10 has an invalid length. [ 954.732510][T20176] netlink: 152508 bytes leftover after parsing attributes in process `syz.3.3717'. [ 954.832959][T20173] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 955.007074][T20173] netlink: 'syz.0.3716': attribute type 10 has an invalid length. [ 955.496758][T20187] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3721'. [ 955.864968][T20195] netlink: 'syz.4.3723': attribute type 2 has an invalid length. [ 955.922166][T20199] device bridge0 entered promiscuous mode [ 955.967600][T20195] netlink: 'syz.4.3723': attribute type 39 has an invalid length. [ 956.165594][T20196] netlink: 212940 bytes leftover after parsing attributes in process `syz.0.3724'. [ 956.394222][T20205] tap0: tun_chr_ioctl cmd 1074025677 [ 956.418102][T20205] tap0: linktype set to 272 [ 956.961118][T20225] netlink: 132028 bytes leftover after parsing attributes in process `syz.1.3729'. [ 957.284539][T20229] can: request_module (can-proto-5) failed. [ 957.813519][T20252] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.3740'. [ 957.835451][T20252] netlink: zone id is out of range [ 957.845372][T20252] netlink: zone id is out of range [ 957.860412][T20252] netlink: zone id is out of range [ 957.881185][T20252] netlink: get zone limit has 8 unknown bytes [ 958.114435][T20263] netlink: 152508 bytes leftover after parsing attributes in process `syz.1.3742'. [ 958.876008][T20268] netlink: 'syz.0.3744': attribute type 2 has an invalid length. [ 958.953476][T20268] device .*! entered promiscuous mode [ 959.807099][T20308] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.3753'. [ 959.841910][T20313] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 959.849807][T20313] #PF: supervisor instruction fetch in kernel mode [ 959.856889][T20313] #PF: error_code(0x0010) - not-present page [ 959.862924][T20313] PGD 63aa2067 P4D 63aa2067 PUD 0 [ 959.868123][T20313] Oops: 0010 [#1] PREEMPT SMP KASAN [ 959.873358][T20313] CPU: 1 PID: 20313 Comm: syz.1.3755 Not tainted syzkaller #0 [ 959.880889][T20313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 959.890985][T20313] RIP: 0010:0x0 [ 959.894498][T20313] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 959.901919][T20313] RSP: 0018:ffffc90005d37498 EFLAGS: 00010246 [ 959.907997][T20308] netlink: zone id is out of range [ 959.908034][T20308] netlink: zone id is out of range [ 959.913143][T20313] RAX: 1ffffffff17755af RBX: 1ffff92000ba6ea4 RCX: 0000000000000001 [ 959.913161][T20313] RDX: ffffc90005d37540 RSI: 0000000000000001 RDI: ffff888078c48000 [ 959.913177][T20313] RBP: ffffc90005d375b0 R08: ffff888078c4803f R09: 1ffff1100f189007 [ 959.913193][T20313] R10: dffffc0000000000 R11: ffffed100f189008 R12: ffffe8ffffd57980 [ 959.934646][T20308] netlink: zone id is out of range [ 959.942334][T20313] R13: ffffffff8bbaad78 R14: 0000000000000000 R15: ffff888078c48000 [ 959.942354][T20313] FS: 00007f1c136086c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 959.942373][T20313] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 959.942388][T20313] CR2: ffffffffffffffd6 CR3: 0000000056d4a000 CR4: 00000000003506e0 [ 959.981207][T20308] netlink: zone id is out of range [ 959.987068][T20313] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 959.987088][T20313] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 959.987102][T20313] Call Trace: [ 960.011585][T20313] [ 960.014554][T20313] bond_xdp_xmit+0x31e/0x550 [ 960.015364][T20308] netlink: zone id is out of range [ 960.019184][T20313] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 960.019222][T20313] ? bond_xdp_xmit+0x94/0x550 [ 960.019251][T20313] ? bond_xdp+0x8c0/0x8c0 [ 960.035198][T20308] netlink: zone id is out of range [ 960.044779][T20313] ? lock_is_held_type+0x13a/0x190 [ 960.049955][T20313] bq_xmit_all+0xca9/0x1120 [ 960.054537][T20313] ? bpf_bprintf_prepare+0x1258/0x1450 [ 960.060063][T20313] ? bq_enqueue+0x2ef/0x3d0 [ 960.064619][T20313] ? __dev_flush+0x1b0/0x1b0 [ 960.069255][T20313] ? dev_map_enqueue_multi+0xf89/0x10f0 [ 960.074864][T20313] ? dev_map_enqueue+0x330/0x330 [ 960.079858][T20313] ? rcu_is_watching+0x11/0xa0 [ 960.084686][T20313] ? trace_xdp_redirect+0xb3/0x2b0 [ 960.089859][T20313] __dev_flush+0xbf/0x1b0 [ 960.094276][T20313] xdp_do_flush+0xa/0x20 [ 960.098597][T20313] bpf_test_run_xdp_live+0x1549/0x1a90 [ 960.104107][T20313] ? 0xffffffffa00051c0 [ 960.108304][T20313] ? text_poke_copy+0x7b/0x90 [ 960.113059][T20313] ? bpf_test_run_xdp_live+0x515/0x1a90 [ 960.118662][T20313] ? xdp_convert_md_to_buff+0x330/0x330 [ 960.124280][T20313] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 960.130506][T20313] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 960.136825][T20313] bpf_prog_test_run_xdp+0x757/0xf80 [ 960.142168][T20313] ? __lock_acquire+0x7ea0/0x7ea0 [ 960.147255][T20313] ? dev_put+0x80/0x80 [ 960.151389][T20313] ? dev_put+0x80/0x80 [ 960.155497][T20313] bpf_prog_test_run+0x31c/0x390 [ 960.160496][T20313] __sys_bpf+0x62b/0x780 [ 960.164811][T20313] ? bpf_link_show_fdinfo+0x550/0x550 [ 960.170233][T20313] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 960.176427][T20313] __x64_sys_bpf+0x78/0x90 [ 960.180876][T20313] do_syscall_64+0x4c/0xa0 [ 960.185326][T20313] ? clear_bhb_loop+0x60/0xb0 [ 960.190035][T20313] ? clear_bhb_loop+0x60/0xb0 [ 960.194776][T20313] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 960.200700][T20313] RIP: 0033:0x7f1c1279fb19 [ 960.205139][T20313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 960.224779][T20313] RSP: 002b:00007f1c13608028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 960.233231][T20313] RAX: ffffffffffffffda RBX: 00007f1c12a25fa0 RCX: 00007f1c1279fb19 [ 960.241250][T20313] RDX: 0000000000000050 RSI: 0000200000000540 RDI: 000000000000000a [ 960.249250][T20313] RBP: 00007f1c12837b70 R08: 0000000000000000 R09: 0000000000000000 [ 960.257253][T20313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 960.265265][T20313] R13: 00007f1c12a26038 R14: 00007f1c12a25fa0 R15: 00007ffd1155e6b8 [ 960.273285][T20313] [ 960.276338][T20313] Modules linked in: [ 960.280271][T20313] CR2: 0000000000000000 [ 960.284481][T20313] ---[ end trace 0000000000000000 ]--- [ 960.289966][T20313] RIP: 0010:0x0 [ 960.293460][T20313] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 960.300844][T20313] RSP: 0018:ffffc90005d37498 EFLAGS: 00010246 [ 960.306944][T20313] RAX: 1ffffffff17755af RBX: 1ffff92000ba6ea4 RCX: 0000000000000001 [ 960.314940][T20313] RDX: ffffc90005d37540 RSI: 0000000000000001 RDI: ffff888078c48000 [ 960.322949][T20313] RBP: ffffc90005d375b0 R08: ffff888078c4803f R09: 1ffff1100f189007 [ 960.330960][T20313] R10: dffffc0000000000 R11: ffffed100f189008 R12: ffffe8ffffd57980 [ 960.338961][T20313] R13: ffffffff8bbaad78 R14: 0000000000000000 R15: ffff888078c48000 [ 960.347043][T20313] FS: 00007f1c136086c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 960.356025][T20313] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 960.362639][T20313] CR2: ffffffffffffffd6 CR3: 0000000056d4a000 CR4: 00000000003506e0 [ 960.370639][T20313] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 960.378634][T20313] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 960.386633][T20313] Kernel panic - not syncing: Fatal exception in interrupt [ 960.394415][T20313] Kernel Offset: disabled [ 960.398758][T20313] Rebooting in 86400 seconds..