last executing test programs: 19.024116523s ago: executing program 4 (id=3368): bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup, 0x15, 0x1, 0xc4, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002"], 0x0, 0x26}, 0x28) write$cgroup_subtree(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000071009154090893b3520ba54a07"], 0xfe33) 18.739275371s ago: executing program 4 (id=3372): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef42b000000e3bd", 0x1a}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef42b000000e3bd", 0x1a}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x8}, 0x101000, 0xb, 0x8, 0x0, 0x0, 0x2, 0xffff, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x8}, 0x101000, 0xb, 0x8, 0x0, 0x0, 0x2, 0xffff, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000180)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x20, &(0x7f00000004c0)={&(0x7f0000000340)=""/231, 0xe7, 0x0, &(0x7f0000000440)=""/124, 0x7c}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x20, &(0x7f00000004c0)={&(0x7f0000000340)=""/231, 0xe7, 0x0, &(0x7f0000000440)=""/124, 0x7c}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000540)={0x0, r0}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000540)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1e, 0x3, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r1], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$cgroup_int(r2, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xfc, 0x3, 0x41, 0x0, 0x0, 0xe5b1, 0x1a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8000000000000000, 0x1}, 0x0, 0x2000007fff, 0x0, 0x6, 0x6, 0x6aee, 0x0, 0x0, 0x1000000, 0x0, 0x9}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005", 0x17}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="97d9deabea352018000000000000006761110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000680)={&(0x7f00000001c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000600)=[{&(0x7f00000002c0)="1eed008a190e2f9d000d6ccaa4fa519e1cce009930cdc1ccc1624917830c549afb1372cea80aeb9b2253a788ff01560b00a5e581b783df911755ac1e34d0ad4f475dc5cf92e5dba4b2891a044b04ef7488358cc772ef385cd0dc78a069701766de432cfc7da9587c77200cbd6bfb9b55a43dbc8c", 0x74}, {&(0x7f0000000340)="2c2ccdd2e3d4a6e788743e2b63ec3b132db28c7258cbb2a0a4279381bdfa88844d14ef0ffd05a3b1f521", 0x2a}, {&(0x7f0000000380)="0caaa85515587c8be444621eed00f08b64d41a7787bb82a1378ff8f19ea38b4d12c06f084f024006b79cc2b53d350553f978bc9a6cfd3655f0d6e22c9489c9e0bc9cf1e6f4232b46355cc1851561ed1f96712113ec7531a9c81f2038d8a30eade498df5a65dc9a85fc00cb10fe0733b0d74f917c76825375dd4236301ffa0c6f8317e4399a2e298369159e0e0f3045dc3aa70d17d80c73", 0x97}, {&(0x7f0000000440)="e1050d3a1ed910683d0353c029e05e2dd009e2917cf9380e4ac49f525ee84eab6b00c15016b233b8e6e07d320950f258bc559f0e546295eed17d7d4aea212fc231a2cc72883bff414944d4943e460511bc0f56c80ad379f1246401f985b2bd2d4e7859717059af1fd6bb64e5c69bb5d7fba90c99dace62c98d24803b48fcd6c8649923d7958b31eb84d8b01afc26d24709f9609c3a8b6255c4395805083e9b15e8706a9f4f8e8e81789e95df17d6e037281598c054dd9ac97f7815059f236e5b502965b5d52266094451409d826bc33cdd16337cc0d249d6142a3d36", 0xdc}, {&(0x7f0000000540)="febf9462d5708833b6ff55f0e6ef3e8b27b2f50ee8e4ab3ddc55f26a7f80f628220ccea996dcd0170d802ad41bdd35f54e74e3b0bd2852442832b4640d08e4ad9ea1eff7e31b960868ab4bd10b1c02e29f4a88cfc1ea477ff584a7c61c4a8d5d46f2b86811dcfd6d8189f3d124d39871c94edd59982a3fbeded2619980b37217b360036c1c989cb85496d7ee1bfdd1b7ada1d7aee639e248e87ba798dd86300bcd3ddaed38955877bb450445", 0xac}], 0x5}, 0x4801) (async) sendmsg$inet(r4, &(0x7f0000000680)={&(0x7f00000001c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000600)=[{&(0x7f00000002c0)="1eed008a190e2f9d000d6ccaa4fa519e1cce009930cdc1ccc1624917830c549afb1372cea80aeb9b2253a788ff01560b00a5e581b783df911755ac1e34d0ad4f475dc5cf92e5dba4b2891a044b04ef7488358cc772ef385cd0dc78a069701766de432cfc7da9587c77200cbd6bfb9b55a43dbc8c", 0x74}, {&(0x7f0000000340)="2c2ccdd2e3d4a6e788743e2b63ec3b132db28c7258cbb2a0a4279381bdfa88844d14ef0ffd05a3b1f521", 0x2a}, {&(0x7f0000000380)="0caaa85515587c8be444621eed00f08b64d41a7787bb82a1378ff8f19ea38b4d12c06f084f024006b79cc2b53d350553f978bc9a6cfd3655f0d6e22c9489c9e0bc9cf1e6f4232b46355cc1851561ed1f96712113ec7531a9c81f2038d8a30eade498df5a65dc9a85fc00cb10fe0733b0d74f917c76825375dd4236301ffa0c6f8317e4399a2e298369159e0e0f3045dc3aa70d17d80c73", 0x97}, {&(0x7f0000000440)="e1050d3a1ed910683d0353c029e05e2dd009e2917cf9380e4ac49f525ee84eab6b00c15016b233b8e6e07d320950f258bc559f0e546295eed17d7d4aea212fc231a2cc72883bff414944d4943e460511bc0f56c80ad379f1246401f985b2bd2d4e7859717059af1fd6bb64e5c69bb5d7fba90c99dace62c98d24803b48fcd6c8649923d7958b31eb84d8b01afc26d24709f9609c3a8b6255c4395805083e9b15e8706a9f4f8e8e81789e95df17d6e037281598c054dd9ac97f7815059f236e5b502965b5d52266094451409d826bc33cdd16337cc0d249d6142a3d36", 0xdc}, {&(0x7f0000000540)="febf9462d5708833b6ff55f0e6ef3e8b27b2f50ee8e4ab3ddc55f26a7f80f628220ccea996dcd0170d802ad41bdd35f54e74e3b0bd2852442832b4640d08e4ad9ea1eff7e31b960868ab4bd10b1c02e29f4a88cfc1ea477ff584a7c61c4a8d5d46f2b86811dcfd6d8189f3d124d39871c94edd59982a3fbeded2619980b37217b360036c1c989cb85496d7ee1bfdd1b7ada1d7aee639e248e87ba798dd86300bcd3ddaed38955877bb450445", 0xac}], 0x5}, 0x4801) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504040019000000000035400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x30049014) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 18.477455078s ago: executing program 3 (id=3374): close(0xffffffffffffffff) r0 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x0, 0x0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x62}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x2, 0x2, 0x73) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000400)={&(0x7f0000000580)=@caif, 0x80, 0x0, 0x0, &(0x7f0000001cc0)}, 0x12) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000300000000000000ff0f000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000004acb2547b0af8ff00000000bfa200000000000007020020f8ffffffb703000008004000b704000001000000850000008200000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@enum64={0x1, 0x1, 0x0, 0x13, 0x0, 0x4, [{0x1000000, 0x1, 0x1ff}]}]}, {0x0, [0x2e]}}, &(0x7f00000005c0)=""/217, 0x33, 0xd9, 0x1}, 0x28) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r6, &(0x7f0000000500)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x48000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0xffff7fff, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xcab5, r7}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40804) recvmsg(r0, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/154, 0x9a}, {&(0x7f0000001dc0)=""/245, 0xf5}, {&(0x7f0000001ec0)=""/185, 0xb9}, {&(0x7f0000001f80)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/29, 0x1d}, {&(0x7f0000002fc0)}], 0x7, &(0x7f0000003080)=""/49, 0x31}, 0x3) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000380)=r5, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r8, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x224802, 0x0) ioctl$TUNGETVNETLE(r9, 0x800454dd, 0x0) 18.252833744s ago: executing program 0 (id=3375): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x6a, 0x0, &(0x7f0000000240)="9c85345b6a2aaca2064ecc006161c2fe4f2d593eb38d62f18ea8b30c6595293e8114d046765097e77a677bf010ff2d810b121d38288b44cafe6cc8f47aa001151adf4ac0c3fbf488f018a5ef3790ebe6d1ae66837edc95af2184d0b587d43a9b0ca720a4c155e7cac791", 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) bpf$TOKEN_CREATE(0x24, &(0x7f00000007c0)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x15, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000200)=[{0x4, 0x5, 0x10, 0x4}, {0x0, 0x4, 0xc, 0xb}], 0x10, 0x800}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x10400, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2, 0xa, 0x1, &(0x7f0000000140)={0x0, 0x0}) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1474df3ae2000b63d25a80648c25b3aa450ffc60", 0x14}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f00000002c0)={r0, r1}) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000440), 0x9) setsockopt$sock_attach_bpf(r3, 0x29, 0x49, &(0x7f0000000740)=r1, 0x4) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0xc, 0x0, 0x8}, {0x94, 0x0, 0x2, 0xffffffff}]}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_config_ext={0x47, 0x888}, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x4}, 0xffffffffffffffff, 0x20000000000000, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a0001", 0x37}], 0x1}, 0x4000) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) 17.444620086s ago: executing program 3 (id=3376): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f00000000c0)='./file0\x00') r0 = socket$kcm(0x10, 0x2, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={0x0, 0x0, 0x18}, 0x18) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000001c0)={0xffffffffffffffff, r2}) r3 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x65, &(0x7f0000000000)=r6, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) 17.432144417s ago: executing program 4 (id=3377): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0xd, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916630000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ff3d4301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) recvmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 17.370621388s ago: executing program 1 (id=3379): socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000007126000000000000bf670000000000005601000000ff07ad67060000020000006a0200000ee60000bf250000b4ffffff3d350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56601a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1fb3f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db613d2aec070f718ab629b4975320dd7a7da532281fd22c7b835005bf52715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c4d8d4fee81e3cdd5daf2cdad3d1a74a2f078aa6402483856a6e494408d0b33047f06aec2cc590df28efc7dbec6857db922195a271af103f03e1155197e067b2ebf4e2dae060959c9639564f000fc3cdd05a1575c91cf5ba8b2db403681ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc6ae8faa5f9ad188e07000000000000008d88a0b4684559d46cae41db1b914e93f1f8000000000000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346977b7d1b18013f509675b5b0f352e30dffda780e95c301f4fc7d5a76475ace6b128b02bfd71023daffdf748a6bd356fcba6ec96373d1101000736ac0bbcb5f4836bddfe8bf46308000000ade9e59fcf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e445fe55ac56c0d642986f8bbc7340bc6393f774318c9fc9b05788de2c6e601b50777e8dff581de1d5ae3d801ead7eba31126e2172fa1eadf5f3bec81004d00000000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1d0011ffc1ba5398f3d6812467c1a4186edd036f15bf847c50f79e1a0ad3d2b5080ecb0148e2b86177869884ae62420c9f1b534e969fce97ffff070000000000dbbfe0ed7c5853a665c0805752dca0e571d75cac5a5d8e4f6e05055b6dec5a9a5696f053a92d81fd9e5f2b9dbbe24f38e745b5a95d45003d0600e413dc623f3e6b096c8b0ad7438c6631388892c55b0671140afbfb83bba415f729fea4c8a8a86189dceedad84cdd17c46bdd847a1f4b0facd3744f5bbb06abb319204fca4bcd4297fe7b4cee75abf43e14fe861224799c0f12702964fc890a176fdafa2c9387280b5693c000c0304cece48642649375dae0b7979b229f708a97349e96e783af9a23cd3980a2c29d3d62875e5319cd51bdd224878a0b25edf0e83c930633bd9a0c3e28f359608ea326c77a1aa17318f392a0ec6c188916f452533d4327feccfd68ec8278a90252693fb133c4615801077e1d75420017c03990b855fe481a20b4919bb11c6d737b6545ef140a0fc339bb53953662f1454f9852e7c4e17eb8668f076c659f56d6c7f97a96d6cdf45cfe88b30c170000000001000000effbf33bd1becb0de0a080931f137967de563c29d81aacb3d48226a4e4b6670900000000000000fa68bff3693afc44db223f2be09295e4a8da03d23b48bb38b31a14ffcddd92c38f6b6d86a0e5ed47a82bad5d2a6dce4c4d353261260c9d7a6bd9f2c872c4172a3d2ac80dfb718cc159e6423065624f130000000000000000000000000000000000000000002a37163e8d7ef2f3c58d045f0700000094029acbe333aebd10f2118fbfeda3fa5500d52cd5241588d2b68a332edfef6d701c8936a25d68b841f982511392cc0d3a78616f8ce0f2877d099258bf85866d0ee7f803fa50fd41ef62b028d12028a7b497d92f544523290f520b0d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x48) 17.337356749s ago: executing program 0 (id=3380): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000e00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000200"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002080000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r2) ioctl$TUNSETIFF(r2, 0x541b, 0x0) sendmsg$unix(r2, &(0x7f0000000340)={&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000200)="03f778284242bdae638453449c8c3367d9258db01ecddea1b77cd07aeed1e3df0fe1360a44f707cd6af8c548ca3c73fcba13ed4ae9c47c99369b097c12c2e85a46cc047eb93e3983f80f67aca883fb9d2052e2256a238756", 0x58}], 0x1, 0x0, 0x0, 0x20004800}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 17.164602004s ago: executing program 0 (id=3381): bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext={0x101, 0x6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000ff9087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.119107075s ago: executing program 1 (id=3382): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup, 0x1e, 0x1, 0x10d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x103c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 16.94670196s ago: executing program 3 (id=3383): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209001800030004", 0x2b}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef02"], 0x33fe0) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)="d4", 0x1}], 0x1}, 0x8001) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000b0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r3}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r4, &(0x7f00000001c0), 0x0}, 0x20) recvmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000002f00)=""/4096, 0x1000}], 0x2}, 0x0) 16.91819738s ago: executing program 4 (id=3384): r0 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0xe}, 0x10022, 0xac5d, 0x0, 0x0, 0x0, 0x67af}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200fe8000000000000008000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000c40)="754dab32f442f2ba4eb8006cbf42311156d32ab80e64d3c0da6109de41607dbf651bbfaaa0870e0c8c67ceb73036a1c8946b2cd79d9e226f6e55a48dbdd63d39f7cfc30c873284d94d150f2bbc7af5b828720317763bd42ed27a2b9888ba8309a83636a1b8e6db9c2a542f682cf5cca673b15ce847795cbb15cbec7f14dfa5457c81aacdf58d473af363dc21c3c9a71af31c36c15afe8dd994190565e687a3defe3dba6e0c2141401c0859259867ac61b24c2eed019f699131d990f989b5be4f", &(0x7f0000000d40)="9516b3c6e0b02090c1389babefbdddc1d484692bf187ce43571e20002c478e8b9c2db166a02c4d52b4895b980107d15e5268d0858745801982fd66bd693bca8f6bd1de8c5dce48060ece94915a5212745cf84310203fb6cd2ee4e620c187ddd3d53c1eb58ecf400a486f75cbdeb80c9a32fc4a75b2a3ee2615710b5321aac49433cb1b66136ae06f6d9687e4e55f1f3972f3a8b84a61328632ca83cab3c2692d67f84c6edc61c459c10f1fe2a6c54f018734f5b1c02efc6382ced7f8f9b745ff328c9927513f07", 0x5, r2}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r4) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80x0}}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c00)={&(0x7f0000001b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@fwd={0xb}]}, {0x0, [0x0, 0x0, 0x2e, 0x5f, 0x0]}}, &(0x7f0000001bc0)=""/1, 0x2b, 0x1, 0x1, 0x0, 0x10000}, 0x28) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001cc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x18, 0xb, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b90}}]}, &(0x7f0000000a40)='syzkaller\x00', 0x8, 0x1000, &(0x7f0000000b80)=""/4096, 0x41000, 0x18, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000001c40)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000001c80)={0x3, 0x7, 0xe793, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff], 0x0, 0x10, 0x40}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@bloom_filter={0x1e, 0xf922, 0x4, 0x6315, 0x20090, r2, 0xbd, '\x00', r5, r6, 0x2, 0x1, 0x0, 0x6}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000900)={0x0, 0x3, 0x30}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x20a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb9d001800000000000000280600002800000002000000"], 0x0, 0x42}, 0x28) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000080)) 16.724606226s ago: executing program 0 (id=3385): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113380000000000bf1000000000000025000200091b00003d200000000000008701000000000000bc26000000000000bf67000000000000150300000ee600f0670200000300000015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae4301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x12, 0x3, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x34}}, @ip_tos_u8={{0x14, 0x29, 0x3e}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0xb00) recvmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f00000001c0)=@pppol2tpv3, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000440)=""/245, 0xf5}, {&(0x7f0000000540)=""/143, 0x8f}, {&(0x7f0000000600)=""/71, 0x47}, {&(0x7f0000000680)=""/185, 0xb9}, {&(0x7f0000000740)=""/18, 0x12}, {&(0x7f0000000780)=""/58, 0x3a}, {&(0x7f00000007c0)=""/220, 0xdc}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000000a00)=""/59, 0x3b}, {&(0x7f0000000a40)=""/26, 0x1a}], 0xa}, 0x22) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x20}, 0x18) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000040000050000000000020085000000270000008500000007000005"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a0053ea"], 0xfe33) 16.724308036s ago: executing program 1 (id=3386): close(0xffffffffffffffff) r0 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x0, 0x0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x62}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x2, 0x2, 0x73) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000400)={&(0x7f0000000580)=@caif, 0x80, 0x0, 0x0, &(0x7f0000001cc0)}, 0x12) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000300000000000000ff0f000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000004acb2547b0af8ff00000000bfa200000000000007020020f8ffffffb703000008004000b704000001000000850000008200000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@enum64={0x1, 0x1, 0x0, 0x13, 0x0, 0x4, [{0x1000000, 0x1, 0x1ff}]}]}, {0x0, [0x2e]}}, &(0x7f00000005c0)=""/217, 0x33, 0xd9, 0x1}, 0x28) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r6, &(0x7f0000000500)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x48000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0xffff7fff, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xcab5, r7}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40804) recvmsg(r0, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/154, 0x9a}, {&(0x7f0000001dc0)=""/245, 0xf5}, {&(0x7f0000001ec0)=""/185, 0xb9}, {&(0x7f0000001f80)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/29, 0x1d}, {&(0x7f0000002fc0)}], 0x7, &(0x7f0000003080)=""/49, 0x31}, 0x3) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000000200000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000380)=r5, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r8, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x224802, 0x0) ioctl$TUNGETVNETLE(r9, 0x800454dd, 0x0) 16.650509628s ago: executing program 2 (id=3387): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x92}]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff8a}, 0x94) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) socketpair(0x29, 0x5, 0x0, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r1, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x20, &(0x7f0000000540)={&(0x7f0000000400)=""/157, 0x9d, 0x0, &(0x7f0000000500)=""/43, 0x2b}}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18060200000070fcf5f80000005ca3b4f0c187c0", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000009500000000000000b7020000000000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0xca, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0x1, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff81, 0x0, 0x0, 0x0, 0x1}, [@generic={0x7, 0xa, 0xe, 0x73ef, 0x4}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xe}]}, &(0x7f0000000280)='GPL\x00', 0xff, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f0000000300)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, r3, 0x0, 0xa, &(0x7f00000007c0)=[r5, r6, r7], &(0x7f0000000900)=[{0x3, 0x3, 0xe, 0x2}, {0x1, 0x3, 0xe, 0xc}, {0x2, 0x3, 0x9, 0xa}, {0x2, 0x4, 0xb, 0x7}, {0x4, 0x1, 0x5, 0x3}, {0x2, 0x2, 0x3, 0x4}, {0x0, 0x4, 0x2}, {0x2, 0x5, 0x9, 0x9}, {0x5, 0x5, 0x6}, {0x1, 0x2, 0xe, 0x1}], 0x10, 0x6}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r9 = socket$kcm(0x29, 0x2, 0x0) close(r9) r10 = socket$kcm(0x2b, 0x1, 0x0) close(r10) r11 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r11, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x40) setsockopt$sock_attach_bpf(r9, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r10) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000000780)={'bond0\x00', 0x500}) ioctl$TUNGETIFF(r8, 0x800454d2, &(0x7f0000000140)={'dummy0\x00'}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="2e00000010008188e6b62aa73772cc9f1ba1f848200000005e140602000000000e000a000d000000028000001294", 0x2e}], 0x1}, 0xa000000) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x58}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.463623013s ago: executing program 4 (id=3388): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x997, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x40}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x4040010) r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xdf61}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x28, 0x8, 0x0, 0x44) socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0x7, 0x1, 0x7, [{@rand_addr=0x64010101}]}]}}}], 0x20}, 0x200040c4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8940) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000080000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a00000000a3f500950004000000010045"], 0x0, 0x5}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f2, &(0x7f0000000080)) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000200)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000240)='*', 0x1}], 0x1}, 0x4000) setsockopt$sock_attach_bpf(r0, 0x84, 0x1f, &(0x7f0000000100), 0x120) 16.1764701s ago: executing program 2 (id=3389): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x6) recvmsg(0xffffffffffffffff, 0x0, 0x10104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000c40)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\twrw'], 0xa) socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c0000005a006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36500001a44dd021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84", 0x44}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01063d00000000000000280000002800000002000000000000000000000300000200000002000000000000000100000000000001"], 0x0, 0x42}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 16.152499991s ago: executing program 1 (id=3390): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x6a, 0x0, &(0x7f0000000240)="9c85345b6a2aaca2064ecc006161c2fe4f2d593eb38d62f18ea8b30c6595293e8114d046765097e77a677bf010ff2d810b121d38288b44cafe6cc8f47aa001151adf4ac0c3fbf488f018a5ef3790ebe6d1ae66837edc95af2184d0b587d43a9b0ca720a4c155e7cac791", 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) bpf$TOKEN_CREATE(0x24, &(0x7f00000007c0)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x15, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000200)=[{0x4, 0x5, 0x10, 0x4}, {0x0, 0x4, 0xc, 0xb}], 0x10, 0x800}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x10400, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2, 0xa, 0x1, &(0x7f0000000140)={0x0, 0x0}) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1474df3ae2000b63d25a80648c25b3aa450ffc60", 0x14}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f00000002c0)={r0, r1}) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000440), 0x9) setsockopt$sock_attach_bpf(r3, 0x29, 0x49, &(0x7f0000000740)=r1, 0x4) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0xc, 0x0, 0x8}, {0x94, 0x0, 0x2, 0xffffffff}]}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_config_ext={0x47, 0x888}, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x4}, 0xffffffffffffffff, 0x20000000000000, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a0001", 0x37}], 0x1}, 0x4000) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) 16.002148176s ago: executing program 2 (id=3391): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffff7, &(0x7f00000001c0)=[{&(0x7f0000000040)="9eb33cabec9ae8336a5144cb21ac359528550d07d968a4958a91453fbcb10148bf779b1c4f5b6a531e"}, {&(0x7f0000000080)="08a6a4d06f820fc97f4abdabb913f8a52c"}, {&(0x7f00000000c0)="15654efe8f1b13287b2bc52787f0cfad6fa7f4973de50bdf4d287fba4f9a75a4938cceb4e035dda717dbde3584c24d4946b7ad4efeb626bec9d0b027f1484793ce158cdb801c92074a985a5e5b45e72f8d30dcf6ea84495a456379195e6c3898eb2152e85400593667ca3dbf3e8e762690d10dc8d7229a307a169c86b94c5449367b50516d3683994320472253795d6da240ee7767718a7693a82dadb1d87f86554c000fab6840ddf559e44cd02b9eed37524e5846ae148268e2b476aae5e204c4b9b7b0534b199c5ac0bebc76"}]}, 0x14040) 15.898518168s ago: executing program 3 (id=3392): socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000007126000000000000bf670000000000005601000000ff07ad67060000020000006a0200000ee60000bf2500000000000006350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56601a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1fb3f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db613d2aec070f718ab629b4975320dd7a7da532281fd22c7b835005bf52715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c4d8d4fee81e3cdd5daf2cdad3d1a74a2f078aa6402483856a6e494408d0b33047f06aec2cc590df28efc7dbec6857db922195a271af103f03e1155197e067b2ebf4e2dae060959c9639564f000fc3cdd05a1575c91cf5ba8b2db403681ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc6ae8faa5f9ad188e07000000000000008d88a0b4684559d46cae41db1b914e93f1f8000000000000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346977b7d1b18013f509675b5b0f352e30dffda780e95c301f4fc7d5a76475ace6b128b02bfd71023daffdf748a6bd356fcba6ec96373d1101000736ac0bbcb5f4836bddfe8bf46308000000ade9e59fcf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e445fe55ac56c0d642986f8bbc7340bc6393f774318c9fc9b05788de2c6e601b50777e8dff581de1d5ae3d801ead7eba31126e2172fa1eadf5f3bec81004d00000000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1d0011ffc1ba5398f3d6812467c1a4186edd036f15bf847c50f79e1a0ad3d2b5080ecb0148e2b86177869884ae62420c9f1b534e969fce97ffff070000000000dbbfe0ed7c5853a665c0805752dca0e571d75cac5a5d8e4f6e05055b6dec5a9a5696f053a92d81fd9e5f2b9dbbe24f38e745b5a95d45003d0600e413dc623f3e6b096c8b0ad7438c6631388892c55b0671140afbfb83bba415f729fea4c8a8a86189dceedad84cdd17c46bdd847a1f4b0facd3744f5bbb06abb319204fca4bcd4297fe7b4cee75abf43e14fe861224799c0f12702964fc890a176fdafa2c9387280b5693c000c0304cece48642649375dae0b7979b229f708a97349e96e783af9a23cd3980a2c29d3d62875e5319cd51bdd224878a0b25edf0e83c930633bd9a0c3e28f359608ea326c77a1aa17318f392a0ec6c188916f452533d4327feccfd68ec8278a90252693fb133c4615801077e1d75420017c03990b855fe481a20b4919bb11c6d737b6545ef140a0fc339bb53953662f1454f9852e7c4e17eb8668f076c659f56d6c7f97a96d6cdf45cfe88b30c170000000001000000effbf33bd1becb0de0a080931f137967de563c29d81aacb3d48226a4e4b6670900000000000000fa68bff3693afc44db223f2be09295e4a8da03d23b48bb38b31a14ffcddd92c38f6b6d86a0e5ed47a82bad5d2a6dce4c4d353261260c9d7a6bd9f2c872c4172a3d2ac80dfb718cc159e6423065624f130000000000000000000000000000000000000000002a37163e8d7ef2f3c58d045f0700000094029acbe333aebd10f2118fbfeda3fa5500d52cd5241588d2b68a332edfef6d701c8936a25d68b841f982511392cc0d3a78616f8ce0f2877d099258bf85866d0ee7f803fa50fd41ef62b028d12028a7b497d92f544523290f520b0d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x48) 15.897343288s ago: executing program 1 (id=3393): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f00000000c0)='./file0\x00') r0 = socket$kcm(0x10, 0x2, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={0x0, 0x0, 0x18}, 0x18) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000001c0)={0xffffffffffffffff, r2}) r3 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x65, &(0x7f0000000000)=r6, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) 15.780644051s ago: executing program 2 (id=3394): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0xd, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916630000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ff3d4301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) recvmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 15.739020443s ago: executing program 3 (id=3395): bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext={0x101, 0x6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000ffb087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.698708834s ago: executing program 0 (id=3396): perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x6, 0x0, 0x1, 0x40, 0x0, 0x81, 0xa6f6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x206, 0x2004d3f}, 0x110369, 0x8, 0x0, 0x8, 0x0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='+pids'], 0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 15.562853347s ago: executing program 1 (id=3397): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x80047456, &(0x7f0000000180)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x50) socket$kcm(0x10, 0x2, 0x10) 15.504948529s ago: executing program 0 (id=3398): r0 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0xe}, 0x10022, 0xac5d, 0x0, 0x0, 0x0, 0x67af}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200fe8000000000000008000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000c40)="754dab32f442f2ba4eb8006cbf42311156d32ab80e64d3c0da6109de41607dbf651bbfaaa0870e0c8c67ceb73036a1c8946b2cd79d9e226f6e55a48dbdd63d39f7cfc30c873284d94d150f2bbc7af5b828720317763bd42ed27a2b9888ba8309a83636a1b8e6db9c2a542f682cf5cca673b15ce847795cbb15cbec7f14dfa5457c81aacdf58d473af363dc21c3c9a71af31c36c15afe8dd994190565e687a3defe3dba6e0c2141401c0859259867ac61b24c2eed019f699131d990f989b5be4f", &(0x7f0000000d40)="9516b3c6e0b02090c1389babefbdddc1d484692bf187ce43571e20002c478e8b9c2db166a02c4d52b4895b980107d15e5268d0858745801982fd66bd693bca8f6bd1de8c5dce48060ece94915a5212745cf84310203fb6cd2ee4e620c187ddd3d53c1eb58ecf400a486f75cbdeb80c9a32fc4a75b2a3ee2615710b5321aac49433cb1b66136ae06f6d9687e4e55f1f3972f3a8b84a61328632ca83cab3c2692d67f84c6edc61c459c10f1fe2a6c54f018734f5b1c02efc6382ced7f8f9b745ff328c9927513f07", 0x5, r2}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r4) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80x0}}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c00)={&(0x7f0000001b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@fwd={0xb}]}, {0x0, [0x0, 0x0, 0x2e, 0x5f, 0x0]}}, &(0x7f0000001bc0)=""/1, 0x2b, 0x1, 0x1, 0x0, 0x10000}, 0x28) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001cc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x18, 0xb, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b90}}]}, &(0x7f0000000a40)='syzkaller\x00', 0x8, 0x1000, &(0x7f0000000b80)=""/4096, 0x41000, 0x18, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000001c40)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000001c80)={0x3, 0x7, 0xe793, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff], 0x0, 0x10, 0x40}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@bloom_filter={0x1e, 0xf922, 0x4, 0x6315, 0x20090, r2, 0xbd, '\x00', r5, r6, 0x2, 0x1, 0x0, 0x6}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000900)={0x0, 0x3, 0x30}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x20a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb9d00180000000000000028060000280000000200000001"], 0x0, 0x42}, 0x20) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000080)) 15.504438619s ago: executing program 2 (id=3399): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup, 0x1e, 0x1, 0x10d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x103c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 15.45359579s ago: executing program 4 (id=3400): close(0xffffffffffffffff) r0 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x0, 0x0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x62}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x2, 0x2, 0x73) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000400)={&(0x7f0000000580)=@caif, 0x80, 0x0, 0x0, &(0x7f0000001cc0)}, 0x12) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000300000000000000ff0f000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000004acb2547b0af8ff00000000bfa200000000000007020020f8ffffffb703000008004000b704000001000000850000008200000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@enum64={0x1, 0x1, 0x0, 0x13, 0x0, 0x4, [{0x1000000, 0x1, 0x1ff}]}]}, {0x0, [0x2e]}}, &(0x7f00000005c0)=""/217, 0x33, 0xd9, 0x1}, 0x28) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r6, &(0x7f0000000500)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x48000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0xffff7fff, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xcab5, r7}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40804) recvmsg(r0, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/154, 0x9a}, {&(0x7f0000001dc0)=""/245, 0xf5}, {&(0x7f0000001ec0)=""/185, 0xb9}, {&(0x7f0000001f80)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/29, 0x1d}, {&(0x7f0000002fc0)}], 0x7, &(0x7f0000003080)=""/49, 0x31}, 0x3) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000380)=r5, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r8, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x224802, 0x0) ioctl$TUNGETVNETLE(r9, 0x800454dd, 0x0) 15.323821114s ago: executing program 3 (id=3401): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x6) recvmsg(0xffffffffffffffff, 0x0, 0x10104) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000c40)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\twrw'], 0xa) socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c0000005a006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36500001a44dd021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84", 0x44}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01063d00000000000000280000002800000002000000000000000000000300000200000002000000000000000100000000000001"], 0x0, 0x42}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 15.139016919s ago: executing program 2 (id=3402): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0) syz_clone(0x15209100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20002080) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) recvmsg$unix(r2, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0700686b040000001800000042a0000000000000", @ANYRES32, @ANYBLOB="010400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000080000000000000009000000731105000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000080), &(0x7f0000000240)=r5}, 0x20) 0s ago: executing program 32 (id=3398): r0 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0xe}, 0x10022, 0xac5d, 0x0, 0x0, 0x0, 0x67af}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200fe8000000000000008000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000c40)="754dab32f442f2ba4eb8006cbf42311156d32ab80e64d3c0da6109de41607dbf651bbfaaa0870e0c8c67ceb73036a1c8946b2cd79d9e226f6e55a48dbdd63d39f7cfc30c873284d94d150f2bbc7af5b828720317763bd42ed27a2b9888ba8309a83636a1b8e6db9c2a542f682cf5cca673b15ce847795cbb15cbec7f14dfa5457c81aacdf58d473af363dc21c3c9a71af31c36c15afe8dd994190565e687a3defe3dba6e0c2141401c0859259867ac61b24c2eed019f699131d990f989b5be4f", &(0x7f0000000d40)="9516b3c6e0b02090c1389babefbdddc1d484692bf187ce43571e20002c478e8b9c2db166a02c4d52b4895b980107d15e5268d0858745801982fd66bd693bca8f6bd1de8c5dce48060ece94915a5212745cf84310203fb6cd2ee4e620c187ddd3d53c1eb58ecf400a486f75cbdeb80c9a32fc4a75b2a3ee2615710b5321aac49433cb1b66136ae06f6d9687e4e55f1f3972f3a8b84a61328632ca83cab3c2692d67f84c6edc61c459c10f1fe2a6c54f018734f5b1c02efc6382ced7f8f9b745ff328c9927513f07", 0x5, r2}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r4) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80x0}}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c00)={&(0x7f0000001b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@fwd={0xb}]}, {0x0, [0x0, 0x0, 0x2e, 0x5f, 0x0]}}, &(0x7f0000001bc0)=""/1, 0x2b, 0x1, 0x1, 0x0, 0x10000}, 0x28) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001cc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x18, 0xb, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b90}}]}, &(0x7f0000000a40)='syzkaller\x00', 0x8, 0x1000, &(0x7f0000000b80)=""/4096, 0x41000, 0x18, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000001c40)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000001c80)={0x3, 0x7, 0xe793, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff], 0x0, 0x10, 0x40}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@bloom_filter={0x1e, 0xf922, 0x4, 0x6315, 0x20090, r2, 0xbd, '\x00', r5, r6, 0x2, 0x1, 0x0, 0x6}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000900)={0x0, 0x3, 0x30}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x20a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb9d00180000000000000028060000280000000200000001"], 0x0, 0x42}, 0x20) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000080)) kernel console output (not intermixed with test programs): .1670': attribute type 2 has an invalid length. [ 395.059235][T10107] tap0: tun_chr_ioctl cmd 1074025677 [ 395.082426][T10107] tap0: linktype set to 804 [ 395.953244][T10122] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1682'. [ 397.527913][T10168] netlink: 'syz.3.1694': attribute type 21 has an invalid length. [ 397.595464][T10171] sock: sock_set_timeout: `syz.1.1696' (pid 10171) tries to set negative timeout [ 399.452958][T10209] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1709'. [ 399.483726][T10209] openvswitch: netlink: Message has 6 unknown bytes. [ 400.279384][T10235] device syzkaller0 left promiscuous mode [ 400.514791][T10244] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.1721'. [ 400.669442][T10257] netlink: 'syz.1.1724': attribute type 10 has an invalid length. [ 400.699400][T10257] netlink: 'syz.1.1724': attribute type 6 has an invalid length. [ 403.662358][T10359] netlink: 'syz.3.1735': attribute type 2 has an invalid length. [ 403.707954][T10359] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.1735'. [ 403.753457][T10366] delete_channel: no stack [ 403.758420][T10366] delete_channel: no stack [ 404.583825][T10379] netlink: 111 bytes leftover after parsing attributes in process `syz.1.1740'. [ 406.681489][T10431] netlink: 'syz.4.1757': attribute type 11 has an invalid length. [ 406.720228][T10431] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1757'. [ 406.772547][T10430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.350388][T10441] netlink: 126612 bytes leftover after parsing attributes in process `syz.2.1760'. [ 407.613723][T10436] netlink: 'syz.0.1759': attribute type 10 has an invalid length. [ 407.694583][T10441] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1760'. [ 410.196442][ T48] Bluetooth: hci2: ISO packet for unknown connection handle 20 [ 411.075470][T10474] netlink: 'syz.4.1768': attribute type 41 has an invalid length. [ 411.175906][T10474] netlink: 'syz.4.1768': attribute type 41 has an invalid length. [ 411.286269][T10472] device wlan1 entered promiscuous mode [ 411.704356][T10481] netlink: 'syz.3.1771': attribute type 19 has an invalid length. [ 411.760930][T10481] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1771'. [ 412.867917][T10505] netlink: 'syz.3.1780': attribute type 10 has an invalid length. [ 413.271738][T10515] netlink: 'syz.2.1779': attribute type 13 has an invalid length. [ 413.279948][T10515] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1779'. [ 413.293281][T10515] syz_tun: refused to change device tx_queue_len [ 413.303941][T10515] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 414.473986][T10543] device wlan1 entered promiscuous mode [ 415.466925][T10563] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1802'. [ 415.661056][T10573] netlink: 'syz.2.1795': attribute type 11 has an invalid length. [ 415.679747][T10573] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1795'. [ 416.469440][T10596] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1801'. [ 416.492778][T10570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.554664][T10599] netlink: 'syz.3.1803': attribute type 3 has an invalid length. [ 416.566880][T10599] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1803'. [ 416.640271][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 416.982410][T10614] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1809'. [ 417.140578][T10619] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.1810'. [ 417.229442][T10621] netlink: 'syz.1.1811': attribute type 21 has an invalid length. [ 418.749174][T10649] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1829'. [ 419.215392][T10663] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1823'. [ 419.715616][T10678] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1827'. [ 419.913545][T10678] team0: Port device team_slave_0 removed [ 419.982368][T10681] netlink: 'syz.3.1828': attribute type 15 has an invalid length. [ 420.001878][T10681] netlink: 'syz.3.1828': attribute type 7 has an invalid length. [ 420.153201][T10693] netlink: 'syz.4.1832': attribute type 21 has an invalid length. [ 420.180567][T10693] netlink: 'syz.4.1832': attribute type 1 has an invalid length. [ 420.213059][T10693] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.1832'. [ 420.254275][T10688] netlink: 'syz.2.1831': attribute type 13 has an invalid length. [ 420.276701][T10688] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1831'. [ 420.289139][T10688] syz_tun: refused to change device tx_queue_len [ 420.296316][T10688] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 420.621775][T10706] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1836'. [ 420.727706][T10708] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1837'. [ 420.818185][T10710] device syzkaller0 entered promiscuous mode [ 421.051719][T10724] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1843'. [ 421.123226][T10730] netlink: 'syz.1.1844': attribute type 29 has an invalid length. [ 423.663754][T10730] netlink: 'syz.1.1844': attribute type 29 has an invalid length. [ 423.689895][T10765] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1854'. [ 423.976004][T10768] device wlan1 entered promiscuous mode [ 425.679214][T10823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1870'. [ 426.087361][T10843] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1874'. [ 426.589177][T10865] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1881'. [ 426.759968][T10873] sctp: [Deprecated]: syz.4.1883 (pid 10873) Use of struct sctp_assoc_value in delayed_ack socket option. [ 426.759968][T10873] Use struct sctp_sack_info instead [ 426.884953][T10876] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1885'. [ 426.920906][T10880] device syzkaller0 entered promiscuous mode [ 429.803498][T10962] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1908'. [ 432.877866][T11037] tap0: tun_chr_ioctl cmd 1074025681 [ 433.683783][T11071] netlink: 'syz.3.1941': attribute type 29 has an invalid length. [ 433.730350][T11068] netlink: 'syz.4.1940': attribute type 6 has an invalid length. [ 433.736547][T11071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1941'. [ 433.772109][T11068] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1940'. [ 433.845187][T11071] netlink: 'syz.3.1941': attribute type 29 has an invalid length. [ 433.915017][T11071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1941'. [ 435.760359][T11117] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 435.780427][T11117] syzkaller0: group set to 26 [ 435.848983][T11122] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1957'. [ 438.394187][T11178] netlink: 'syz.0.1975': attribute type 10 has an invalid length. [ 438.425789][T11178] device wlan1 left promiscuous mode [ 438.516124][T11178] team0: Port device wlan1 removed [ 438.574091][T11178] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 439.065624][T11196] netlink: 'syz.3.1982': attribute type 27 has an invalid length. [ 439.124028][T11196] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1982'. [ 440.167220][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.173755][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.673054][T11207] netlink: 'syz.1.1986': attribute type 19 has an invalid length. [ 442.704897][T11258] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.1999'. [ 442.983308][T11258] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 444.959419][T11303] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.2014'. [ 445.131590][T11304] netlink: 1034 bytes leftover after parsing attributes in process `syz.0.2014'. [ 448.153425][T11323] netlink: 'syz.2.2019': attribute type 3 has an invalid length. [ 448.233754][T11323] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2019'. [ 448.426192][T11339] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2023'. [ 448.650310][T11342] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 448.829515][T11351] netlink: 'syz.4.2026': attribute type 3 has an invalid length. [ 448.868616][T11351] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2026'. [ 450.100743][T11386] netlink: 11594 bytes leftover after parsing attributes in process `syz.2.2039'. [ 450.817216][T11411] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2047'. [ 451.873603][T11434] netlink: 'syz.3.2054': attribute type 29 has an invalid length. [ 452.023049][T11434] netlink: 'syz.3.2054': attribute type 29 has an invalid length. [ 452.315427][T11434] delete_channel: no stack [ 452.818995][T11467] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2062'. [ 454.458988][T11508] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 454.989662][T11508] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 455.783759][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 455.804525][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 455.830331][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 455.911126][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 455.944704][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 455.952893][ T4285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 458.000359][ T48] Bluetooth: hci1: command 0x0409 tx timeout [ 458.301714][T11537] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2082'. [ 458.680298][T11545] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2084'. [ 458.746720][T11525] chnl_net:caif_netlink_parms(): no params data found [ 459.067289][T11525] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.093134][T11525] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.133205][T11525] device bridge_slave_0 entered promiscuous mode [ 459.169439][T11558] netlink: 'syz.1.2088': attribute type 33 has an invalid length. [ 459.185121][T11558] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2088'. [ 459.198382][T11558] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 459.234804][T11558] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 459.259475][T11525] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.268463][T11525] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.277877][T11525] device bridge_slave_1 entered promiscuous mode [ 459.302523][T11561] netlink: 'syz.4.2089': attribute type 21 has an invalid length. [ 459.312285][T11561] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2089'. [ 459.370407][T11561] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2089'. [ 459.469137][T11525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.535678][T11525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.666645][T11561] netlink: 'syz.4.2089': attribute type 1 has an invalid length. [ 459.721314][T11561] netlink: 'syz.4.2089': attribute type 3 has an invalid length. [ 459.763897][T11525] team0: Port device team_slave_0 added [ 459.781490][T11561] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2089'. [ 459.813587][T11525] team0: Port device team_slave_1 added [ 460.080297][ T48] Bluetooth: hci1: command 0x041b tx timeout [ 460.113755][T11525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.133972][T11525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.237334][T11525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.271154][T11525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.278448][T11525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.307070][T11525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.407704][T11525] device hsr_slave_0 entered promiscuous mode [ 460.462151][T11525] device hsr_slave_1 entered promiscuous mode [ 460.480241][T11525] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 460.487918][T11525] Cannot create hsr debugfs directory [ 460.801890][T11585] netlink: 'syz.1.2095': attribute type 40 has an invalid length. [ 460.949488][T11596] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.2097'. [ 462.112769][T11628] netlink: 'syz.1.2105': attribute type 1 has an invalid length. [ 462.122328][T11628] netlink: 'syz.1.2105': attribute type 3 has an invalid length. [ 462.133179][T11628] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2105'. [ 462.160420][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 463.700215][T11525] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.720469][T11618] netlink: 'syz.1.2105': attribute type 21 has an invalid length. [ 463.728410][T11618] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2105'. [ 463.764426][T11618] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2105'. [ 463.892119][T11525] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.240923][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 464.889539][T11525] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.986333][T11640] netlink: 'syz.0.2109': attribute type 10 has an invalid length. [ 465.264682][T11640] bond0: (slave wlan1): Releasing backup interface [ 465.295975][T11640] team0: Port device wlan1 added [ 465.422312][T11525] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.825703][T11525] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 466.889724][T11525] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 467.009717][T11525] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 467.103964][T11525] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 467.169383][T11687] netlink: 'syz.3.2124': attribute type 21 has an invalid length. [ 467.210384][T11687] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2124'. [ 467.219626][T11687] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2124'. [ 467.458111][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 467.603124][T11687] netlink: 'syz.3.2124': attribute type 1 has an invalid length. [ 467.639383][T11687] netlink: 'syz.3.2124': attribute type 3 has an invalid length. [ 467.658303][T11687] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2124'. [ 467.884531][T11525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.926017][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 468.013956][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 468.072961][T11525] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.141534][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 468.181410][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 468.228136][T10333] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.235539][T10333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.300917][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 468.322226][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 468.351075][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 468.391439][T10333] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.398987][T10333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.446835][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 468.509449][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 468.544482][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 468.655969][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 468.726294][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 468.737467][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 468.751128][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 468.799629][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 468.820601][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 468.847081][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 468.907036][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 468.940792][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 469.496455][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 469.540431][T10331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 469.600769][T11525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.709688][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 469.749758][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 469.827546][T10319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 469.841235][T10319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 469.859592][T10319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 469.891357][T10319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 469.924936][T11525] device veth0_vlan entered promiscuous mode [ 469.971207][T11525] device veth1_vlan entered promiscuous mode [ 470.034863][T11736] device syzkaller0 entered promiscuous mode [ 470.170446][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 470.181961][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 470.211699][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 470.226306][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 470.238506][T11525] device veth0_macvtap entered promiscuous mode [ 470.293840][T11525] device veth1_macvtap entered promiscuous mode [ 470.340643][T11525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.380139][T11525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.399134][T11525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.424308][T11525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.466485][T11525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.526248][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 470.555486][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 470.596189][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 470.615329][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 470.676092][T11525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.687304][T11525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.717913][T11525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.736979][T11525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.763142][T11525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.792106][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 470.819759][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 470.854472][T11525] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.876920][T11525] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.932525][T11525] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.959493][T11525] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.619680][T11785] netlink: 'syz.0.2153': attribute type 11 has an invalid length. [ 471.667905][T11785] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2153'. [ 471.914137][T11782] device syzkaller0 entered promiscuous mode [ 472.091309][T11791] netlink: 'syz.3.2154': attribute type 10 has an invalid length. [ 472.159773][T10326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.193881][T10326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.203964][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 472.305954][T10326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.314258][T11797] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2156'. [ 472.334376][T10326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.374224][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 473.264670][T11821] device lo entered promiscuous mode [ 473.279027][T11821] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 474.520452][T11835] device syzkaller0 entered promiscuous mode [ 474.998103][T11844] netlink: 'syz.3.2173': attribute type 3 has an invalid length. [ 475.041819][T11844] netlink: 'syz.3.2173': attribute type 16 has an invalid length. [ 475.090217][T11844] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2173'. [ 475.579473][T11857] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2177'. [ 475.957108][T11870] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2181'. [ 477.212694][T11882] netlink: 'syz.4.2184': attribute type 21 has an invalid length. [ 478.079594][T11904] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2193'. [ 479.029840][T11924] netlink: 'syz.3.2196': attribute type 29 has an invalid length. [ 479.306523][T11924] netlink: 'syz.3.2196': attribute type 29 has an invalid length. [ 480.866233][T11947] netlink: 'syz.3.2206': attribute type 29 has an invalid length. [ 482.209060][T11938] device syzkaller0 entered promiscuous mode [ 482.239967][T11959] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2208'. [ 482.304019][T11961] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 482.422920][T11963] syzkaller1: tun_chr_ioctl cmd 35108 [ 484.806651][T12003] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2220'. [ 486.751735][T12042] netlink: 'syz.3.2233': attribute type 10 has an invalid length. [ 486.759948][T12042] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2233'. [ 486.790600][T12042] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 487.454129][T12060] netlink: 'syz.1.2239': attribute type 10 has an invalid length. [ 487.945728][T12069] netlink: 'syz.2.2240': attribute type 39 has an invalid length. [ 490.207752][T12096] netlink: 'syz.3.2248': attribute type 10 has an invalid length. [ 490.308145][T12106] netlink: 'syz.0.2251': attribute type 3 has an invalid length. [ 490.330195][T12106] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.2251'. [ 490.356685][T12096] device wlan1 left promiscuous mode [ 490.379811][T12096] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 490.400411][T12105] netlink: 'syz.2.2253': attribute type 49 has an invalid length. [ 491.966104][T12132] netlink: 'syz.0.2261': attribute type 39 has an invalid length. [ 495.519934][T12177] netlink: 'syz.1.2275': attribute type 3 has an invalid length. [ 495.547043][T12177] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.2275'. [ 496.384531][T12195] device pim6reg1 entered promiscuous mode [ 496.395352][T12209] netlink: 'syz.1.2281': attribute type 39 has an invalid length. [ 497.244684][T12213] netlink: 'syz.2.2282': attribute type 13 has an invalid length. [ 497.255984][T12213] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2282'. [ 497.319045][T12213] syz_tun: refused to change device tx_queue_len [ 497.330593][T12213] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 497.696792][T12229] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.2287'. [ 500.123047][T12263] device wlan1 entered promiscuous mode [ 500.272386][T12265] netlink: 'syz.3.2297': attribute type 3 has an invalid length. [ 500.336409][T12265] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.2297'. [ 500.920519][T12276] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2302'. [ 501.603091][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.609495][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.610167][T12328] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 504.623214][T12334] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2318'. [ 507.075069][T12383] device pim6reg1 entered promiscuous mode [ 507.457491][T12401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2340'. [ 508.825077][T12441] netlink: 'syz.3.2351': attribute type 3 has an invalid length. [ 508.856555][T12441] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2351'. [ 509.093144][T12448] netlink: 'syz.4.2353': attribute type 4 has an invalid length. [ 509.120536][T12448] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.2353'. [ 509.124289][T12434] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 509.668754][T12466] netlink: 'syz.0.2360': attribute type 3 has an invalid length. [ 509.688232][T12466] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2360'. [ 510.533853][T12492] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.2368'. [ 510.900323][T12495] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2369'. [ 511.544051][ T48] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 515.931897][T12572] netlink: 'syz.3.2393': attribute type 3 has an invalid length. [ 515.960998][T12572] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2393'. [ 517.438483][T12616] netlink: 'syz.2.2408': attribute type 3 has an invalid length. [ 517.478777][T12616] netlink: 'syz.2.2408': attribute type 181 has an invalid length. [ 518.226078][T12654] netlink: 'syz.2.2417': attribute type 10 has an invalid length. [ 518.269353][T12654] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2417'. [ 518.304996][T12654] device batadv_slave_1 entered promiscuous mode [ 518.331823][T12654] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 518.344441][T12654] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.949370][T12661] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2417'. [ 519.168250][T12671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2422'. [ 521.378544][T12710] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2433'. [ 521.657360][T12723] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.2435'. [ 521.887863][T12733] netlink: 'syz.4.2439': attribute type 29 has an invalid length. [ 521.956151][T12733] netlink: 'syz.4.2439': attribute type 29 has an invalid length. [ 522.046326][T12733] netlink: 'syz.4.2439': attribute type 29 has an invalid length. [ 522.975569][T12759] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2448'. [ 526.437205][T12793] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2461'. [ 526.512866][T12800] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2463'. [ 527.454052][T12813] sock: sock_set_timeout: `syz.2.2468' (pid 12813) tries to set negative timeout [ 527.762163][T12813] netlink: 'syz.2.2468': attribute type 13 has an invalid length. [ 527.778531][T12813] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2468'. [ 527.983285][T12813] syz_tun: refused to change device tx_queue_len [ 528.017457][T12813] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 528.206182][T12817] netlink: 'syz.2.2468': attribute type 13 has an invalid length. [ 528.239147][T12817] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2468'. [ 528.288654][T12817] syz_tun: refused to change device tx_queue_len [ 528.313484][T12817] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 528.367195][T12823] syz.0.2471[12823] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 528.367324][T12823] syz.0.2471[12823] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 528.398734][T12824] netlink: 'syz.2.2468': attribute type 10 has an invalid length. [ 529.195063][T12824] team0: Port device netdevsim0 added [ 530.399339][T12846] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2475'. [ 531.799643][T12884] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2490'. [ 531.955671][T12890] device syzkaller0 entered promiscuous mode [ 532.711208][T12900] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.2492'. [ 532.928076][T12905] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2498'. [ 533.424479][T12928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2504'. [ 533.924609][T12936] sock: sock_set_timeout: `syz.0.2507' (pid 12936) tries to set negative timeout [ 534.220196][T12927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2504'. [ 534.229867][T12926] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2503'. [ 534.296975][T12934] netlink: 'syz.4.2506': attribute type 13 has an invalid length. [ 534.319279][T12934] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2506'. [ 534.427680][T12934] syz_tun: refused to change device tx_queue_len [ 534.440905][T12934] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 534.497485][T12936] netlink: 'syz.0.2507': attribute type 13 has an invalid length. [ 534.524777][T12936] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2507'. [ 534.589160][T12936] syz_tun: refused to change device tx_queue_len [ 534.648483][T12936] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 534.772905][T12940] netlink: 'syz.0.2507': attribute type 13 has an invalid length. [ 534.793247][T12940] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2507'. [ 534.841436][T12940] syz_tun: refused to change device tx_queue_len [ 534.858442][T12940] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 534.892249][T12946] netlink: 'syz.0.2507': attribute type 10 has an invalid length. [ 536.157353][T12986] netlink: 'syz.4.2520': attribute type 1 has an invalid length. [ 536.168807][T12986] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2520'. [ 536.235670][T12990] netlink: 'syz.4.2520': attribute type 10 has an invalid length. [ 536.393331][T12990] device veth1_macvtap left promiscuous mode [ 536.629309][T12983] device bond_slave_1 entered promiscuous mode [ 536.847924][T12998] netlink: 'syz.0.2523': attribute type 22 has an invalid length. [ 536.904619][T12998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2523'. [ 538.275375][ T48] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 538.346733][T13034] netlink: 'syz.3.2536': attribute type 4 has an invalid length. [ 538.756511][T13051] device syzkaller0 left promiscuous mode [ 538.799351][T13051] tap0: tun_chr_ioctl cmd 1074025677 [ 538.831339][T13051] tap0: linktype set to 780 [ 538.852197][T13048] tap0: tun_chr_ioctl cmd 1074025673 [ 539.966159][T13078] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2549'. [ 541.002591][T13095] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2555'. [ 543.289851][T13144] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 543.360412][T13144] syzkaller1: linktype set to 786 [ 543.373966][T13145] syzkaller1: tun_chr_ioctl cmd 1074025672 [ 543.393732][T13145] syzkaller1: ignored: set checksum enabled [ 543.688838][T13153] netlink: 'syz.3.2570': attribute type 16 has an invalid length. [ 543.697296][T13153] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2570'. [ 543.973226][T13155] netlink: 17861 bytes leftover after parsing attributes in process `syz.3.2570'. [ 544.156519][T13155] netlink: 17861 bytes leftover after parsing attributes in process `syz.3.2570'. [ 544.859906][T13168] netlink: 'syz.3.2575': attribute type 7 has an invalid length. [ 544.910685][T13168] netlink: 191184 bytes leftover after parsing attributes in process `syz.3.2575'. [ 544.967662][T13176] netlink: 'syz.3.2575': attribute type 2 has an invalid length. [ 545.020415][T13176] netlink: 'syz.3.2575': attribute type 1 has an invalid length. [ 545.029002][T13176] netlink: 181168 bytes leftover after parsing attributes in process `syz.3.2575'. [ 545.067544][T13178] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2575'. [ 545.606554][T13182] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2577'. [ 547.620443][T13222] netlink: 'syz.1.2590': attribute type 10 has an invalid length. [ 547.661490][T13222] device veth1_macvtap left promiscuous mode [ 548.343468][T13236] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2594'. [ 548.402206][T13242] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2596'. [ 550.867719][T13280] netlink: 'syz.4.2606': attribute type 2 has an invalid length. [ 550.921859][T13280] netlink: 'syz.4.2606': attribute type 8 has an invalid length. [ 550.978238][T13280] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2606'. [ 556.353103][T13365] netlink: 'syz.2.2632': attribute type 25 has an invalid length. [ 556.403844][T13365] netlink: 'syz.2.2632': attribute type 29 has an invalid length. [ 556.645662][T13366] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2632'. [ 558.637474][T13396] netlink: 'syz.2.2641': attribute type 7 has an invalid length. [ 558.761436][T13396] netlink: 191184 bytes leftover after parsing attributes in process `syz.2.2641'. [ 559.383077][T13404] tap0: tun_chr_ioctl cmd 1074025677 [ 559.405744][T13404] tap0: linktype set to 24 [ 559.838887][T10336] device hsr_slave_0 left promiscuous mode [ 559.893452][T10336] device hsr_slave_1 left promiscuous mode [ 560.001478][T10336] bridge0: port 4(team0) entered disabled state [ 560.146330][T10336] bridge0: port 3(hsr0) entered disabled state [ 560.343160][T10336] device bridge_slave_1 left promiscuous mode [ 560.349652][T10336] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.401853][T10336] device bridge_slave_0 left promiscuous mode [ 560.452874][T13419] netlink: 'syz.2.2646': attribute type 29 has an invalid length. [ 560.461816][T10336] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.657282][T10336] device veth1_macvtap left promiscuous mode [ 560.686181][T10336] device veth0_macvtap left promiscuous mode [ 560.714294][T10336] device veth1_vlan left promiscuous mode [ 560.754856][T10336] device veth0_vlan left promiscuous mode [ 563.036654][T10336] device team_slave_1 left promiscuous mode [ 563.045854][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.045937][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.066173][T10336] team0 (unregistering): Port device team_slave_1 removed [ 563.133610][T10336] device team_slave_0 left promiscuous mode [ 563.144737][T10336] team0 (unregistering): Port device team_slave_0 removed [ 563.209796][T10336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 563.285668][T10336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 563.682372][T10336] bond0 (unregistering): Released all slaves [ 563.779196][T13406] tap0: tun_chr_ioctl cmd 1074812117 [ 563.807053][T13419] netlink: 'syz.2.2646': attribute type 29 has an invalid length. [ 564.413274][T13428] device syzkaller0 entered promiscuous mode [ 565.255369][T13449] netlink: 'syz.4.2652': attribute type 3 has an invalid length. [ 565.325534][T13449] netlink: 'syz.4.2652': attribute type 1 has an invalid length. [ 565.406067][T13449] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.2652'. [ 565.766486][T13457] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2656'. [ 569.269335][T13465] netlink: 'syz.0.2658': attribute type 15 has an invalid length. [ 569.292272][T13465] netlink: 'syz.0.2658': attribute type 7 has an invalid length. [ 569.308468][T13472] netlink: 'syz.0.2658': attribute type 39 has an invalid length. [ 569.331120][T13485] netlink: 'syz.4.2663': attribute type 10 has an invalid length. [ 569.361684][T13485] team0: Device vxcan1 is of different type [ 569.595600][T13492] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2667'. [ 572.137985][T13542] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2680'. [ 572.193737][T13544] netlink: 'syz.1.2679': attribute type 21 has an invalid length. [ 573.334379][T13569] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2688'. [ 574.743864][T13583] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.2693'. [ 574.950600][T13583] netlink: 13695 bytes leftover after parsing attributes in process `syz.1.2693'. [ 576.185486][T13603] netlink: 'syz.3.2700': attribute type 10 has an invalid length. [ 576.539920][T13603] team0: Device vxcan1 is of different type [ 577.711785][T13625] netlink: 'syz.2.2707': attribute type 21 has an invalid length. [ 577.740343][T13625] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2707'. [ 577.992758][T13629] netlink: 'syz.0.2708': attribute type 3 has an invalid length. [ 578.039003][T13629] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2708'. [ 579.621372][T13655] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2715'. [ 579.905323][T13659] tap0: tun_chr_ioctl cmd 99999999 [ 580.199139][T13666] netlink: 'syz.0.2717': attribute type 10 has an invalid length. [ 580.480303][ T4289] Bluetooth: hci1: command 0x0406 tx timeout [ 581.728706][T13694] netlink: 'syz.1.2727': attribute type 5 has an invalid length. [ 581.808730][T13701] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2730'. [ 581.972127][T13706] netlink: 65043 bytes leftover after parsing attributes in process `syz.2.2726'. [ 583.033947][T13729] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2737'. [ 584.073985][T13742] netlink: 'syz.0.2740': attribute type 3 has an invalid length. [ 584.162088][T13742] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2740'. [ 584.266407][T13742] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 584.355408][T13742] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 584.757792][T13749] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2743'. [ 586.646826][T13778] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2750'. [ 589.040645][T13810] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2759'. [ 589.836558][T13835] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.2767'. [ 589.874105][T13835] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 590.056198][T13842] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2769'. [ 590.426664][T13831] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.2766'. [ 591.085918][T13862] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2777'. [ 591.365506][T13869] netlink: 'syz.1.2778': attribute type 10 has an invalid length. [ 591.481448][T13869] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2778'. [ 591.642716][T13876] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2780'. [ 591.677551][T13877] netlink: 'syz.3.2780': attribute type 23 has an invalid length. [ 591.704197][T13877] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2780'. [ 592.100762][T13885] netlink: 'syz.1.2784': attribute type 2 has an invalid length. [ 592.108769][T13885] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2784'. [ 592.845461][T13903] device syzkaller0 entered promiscuous mode [ 594.037766][T13901] cgroup: fork rejected by pids controller in /syz4 [ 596.129716][ T4273] bond0: (slave syz_tun): Releasing backup interface [ 596.788687][T10344] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.934463][T10344] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.029304][T13972] netlink: 'syz.3.2809': attribute type 3 has an invalid length. [ 597.058608][T13972] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2809'. [ 597.081720][T10344] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.382867][T10344] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.562273][ T4289] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 597.611518][ T4289] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 597.620774][ T4289] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 597.629257][ T4289] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 597.639640][ T4289] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 597.649167][ T4289] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 597.771420][T13978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2811'. [ 597.974765][T13982] device wlan1 left promiscuous mode [ 598.114515][T10344] device 0 left promiscuous mode [ 598.117432][T13971] cgroup: fork rejected by pids controller in /syz1 [ 599.173392][T13976] chnl_net:caif_netlink_parms(): no params data found [ 599.680763][ T48] Bluetooth: hci3: command 0x0409 tx timeout [ 599.981708][T13976] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.989119][T13976] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.003986][T13976] device bridge_slave_0 entered promiscuous mode [ 600.013583][T13976] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.022580][T13976] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.031247][T13976] device bridge_slave_1 entered promiscuous mode [ 600.171966][T13976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.277508][T13976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.424038][T13976] team0: Port device team_slave_0 added [ 600.462504][T13976] team0: Port device team_slave_1 added [ 600.612221][T14036] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2827'. [ 600.682274][T14039] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2828'. [ 600.692122][T14036] netlink: 'syz.2.2827': attribute type 1 has an invalid length. [ 600.855039][T13976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 600.899694][T13976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 600.967275][T13976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.071694][T13976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.079027][T13976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.201137][T13976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.691308][ T4289] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 601.737031][ T4289] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 601.751476][ T4289] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 601.761044][ T4289] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 601.768480][ T4289] Bluetooth: hci3: command 0x041b tx timeout [ 601.775851][ T4285] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 601.785421][ T4285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 601.870640][T14053] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2831'. [ 602.165363][T13976] device hsr_slave_0 entered promiscuous mode [ 602.189629][T13976] device hsr_slave_1 entered promiscuous mode [ 602.338996][T10344] device hsr_slave_0 left promiscuous mode [ 602.372663][T10344] device hsr_slave_1 left promiscuous mode [ 602.391519][T10344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 602.399510][T10344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 602.458362][T10344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.477224][T10344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 602.532534][T10344] device bridge_slave_1 left promiscuous mode [ 602.538842][T10344] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.604977][T10344] device bridge_slave_0 left promiscuous mode [ 602.630488][T10344] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.709936][T10344] device veth0_macvtap left promiscuous mode [ 602.745155][T10344] device veth1_vlan left promiscuous mode [ 602.770120][T10344] device veth0_vlan left promiscuous mode [ 603.154714][T10344] team0 (unregistering): Port device geneve1 removed [ 603.676002][T14099] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2841'. [ 603.840486][T14051] Bluetooth: hci0: command 0x0409 tx timeout [ 603.841436][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 604.127628][T10344] team0 (unregistering): Port device team_slave_1 removed [ 604.208317][T10344] team0 (unregistering): Port device team_slave_0 removed [ 604.297702][T10344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 604.643856][T10344] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 604.718435][T10344] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 604.781225][T10344] bond0 (unregistering): Released all slaves [ 605.306304][T14112] netlink: 'syz.0.2846': attribute type 3 has an invalid length. [ 605.334732][T14112] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2846'. [ 605.591476][T14047] chnl_net:caif_netlink_parms(): no params data found [ 605.920216][ T48] Bluetooth: hci3: command 0x0419 tx timeout [ 605.924338][T14051] Bluetooth: hci0: command 0x041b tx timeout [ 606.545332][T14047] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.553571][T14047] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.566787][T14047] device bridge_slave_0 entered promiscuous mode [ 606.576450][T14047] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.584100][T14047] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.592754][T14047] device bridge_slave_1 entered promiscuous mode [ 606.786965][T10344] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.798782][T14051] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 606.811828][T14051] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 606.820568][T14051] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 606.828986][T14051] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 606.837492][T14051] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 606.845100][T14051] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 606.949825][T14047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.023002][T14047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.166785][T10344] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.327215][T14158] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2853'. [ 607.364076][T14047] team0: Port device team_slave_0 added [ 607.398764][T10344] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.446422][T14047] team0: Port device team_slave_1 added [ 607.518096][T10344] team0: Port device netdevsim0 removed [ 607.529766][T10344] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.626386][T13976] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 607.707697][T13976] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 607.729831][T13976] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 607.764964][T14047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.784203][T14047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.830683][T14047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 607.852678][T13976] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 607.938866][T14047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 607.950501][T14047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.990144][T14047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.009694][T14051] Bluetooth: hci0: command 0x040f tx timeout [ 608.265945][T14047] device hsr_slave_0 entered promiscuous mode [ 608.306714][T14047] device hsr_slave_1 entered promiscuous mode [ 608.316929][T14047] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 608.355498][T14047] Cannot create hsr debugfs directory [ 608.484155][T10344] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.666879][T10344] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.833452][T10344] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.868391][T14143] chnl_net:caif_netlink_parms(): no params data found [ 608.880448][T14051] Bluetooth: hci1: command 0x0409 tx timeout [ 609.001664][T10344] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.199248][T13976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.358857][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 609.391203][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 609.431815][T13976] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.453967][T14143] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.476731][T14143] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.489141][T14143] device bridge_slave_0 entered promiscuous mode [ 609.556994][T10342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 609.598244][T10342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 609.621236][T10342] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.628502][T10342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.655409][T10342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 609.677958][T14143] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.700233][T14143] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.708727][T14143] device bridge_slave_1 entered promiscuous mode [ 609.750624][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 609.771695][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 609.822935][T10343] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.830233][T10343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.931164][T14143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.080076][T14051] Bluetooth: hci0: command 0x0419 tx timeout [ 610.089402][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 610.115120][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 610.147224][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 610.184970][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 610.213824][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 610.233629][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 610.489436][T14143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 610.583577][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 610.605054][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 610.628282][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 610.758752][T14143] team0: Port device team_slave_0 added [ 610.772211][T13976] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 610.816636][T13976] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 610.853094][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 610.907747][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 610.908948][T14219] netlink: 'syz.3.2863': attribute type 11 has an invalid length. [ 610.928669][T14143] team0: Port device team_slave_1 added [ 610.960256][T14051] Bluetooth: hci1: command 0x041b tx timeout [ 611.016537][T14219] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2863'. [ 611.064041][T14219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.535336][T14143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.545398][T14143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.710627][T14143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.763537][T14143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 611.796853][T14143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.885066][T14143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.164799][T14143] device hsr_slave_0 entered promiscuous mode [ 612.193032][T14143] device hsr_slave_1 entered promiscuous mode [ 612.199941][T14143] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 612.208435][T14143] Cannot create hsr debugfs directory [ 612.422607][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 612.481143][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 612.525497][T13976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 613.040323][T14051] Bluetooth: hci1: command 0x040f tx timeout [ 613.511529][T14047] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 613.563652][T14047] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 613.612540][T14047] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 613.764738][T14047] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 614.368229][T14276] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2870'. [ 614.675200][T14288] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 614.813545][T12027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 614.857818][T12027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 614.976025][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 615.011155][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 615.033897][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 615.064298][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 615.099776][T13976] device veth0_vlan entered promiscuous mode [ 615.120228][T14051] Bluetooth: hci1: command 0x0419 tx timeout [ 615.158484][T14047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 615.216017][T13976] device veth1_vlan entered promiscuous mode [ 615.258500][T14047] 8021q: adding VLAN 0 to HW filter on device team0 [ 615.271106][T10336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 615.279409][T10336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 615.380635][T10336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 615.530070][T10336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 615.538603][T10336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 615.561834][T10336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 615.577509][T10336] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.584879][T10336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 615.594197][T10336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 615.703198][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 615.751944][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 615.889755][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.897240][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 615.944423][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 615.967652][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 615.994746][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 616.009489][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 616.058047][T13976] device veth0_macvtap entered promiscuous mode [ 616.286201][T10342] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 616.306997][T10342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 616.347102][T10342] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 616.388729][T10342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 616.398807][T10342] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 616.414622][T10342] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 616.431826][T13976] device veth1_macvtap entered promiscuous mode [ 616.498035][T10344] device hsr_slave_0 left promiscuous mode [ 616.511011][T10344] device hsr_slave_1 left promiscuous mode [ 616.569668][T10344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 616.580848][T10344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 616.603877][T10344] device bridge_slave_1 left promiscuous mode [ 616.610700][T10344] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.622447][T10344] device bridge_slave_0 left promiscuous mode [ 616.628828][T10344] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.710676][T10344] device veth1_macvtap left promiscuous mode [ 616.716853][T10344] device veth0_macvtap left promiscuous mode [ 616.730355][T10344] device veth1_vlan left promiscuous mode [ 616.736618][T10344] device veth0_vlan left promiscuous mode [ 616.771696][T10344] device veth0_macvtap left promiscuous mode [ 616.778179][T10344] device veth1_vlan left promiscuous mode [ 616.806826][T10344] device veth0_vlan left promiscuous mode [ 617.766946][T10344] team0 (unregistering): Port device team_slave_1 removed [ 617.812314][T10344] team0 (unregistering): Port device team_slave_0 removed [ 617.864669][T10344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 617.911867][T10344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 618.236025][T10344] bond0 (unregistering): Released all slaves [ 618.924204][T10344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 618.971555][T10344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 619.244852][T10344] bond0 (unregistering): Released all slaves [ 619.285467][T10342] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 619.295645][T10342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 619.304883][T10342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 619.334961][T14047] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 619.349516][T14047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 619.384692][T10342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 619.411314][T10342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 619.456419][T13976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.477769][T13976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.518590][T13976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 619.546108][T10336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 619.571186][T10336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 619.586395][T14143] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 619.597911][T13976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.617465][T13976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.629270][T13976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 619.648115][T14143] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 619.675927][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 619.692821][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 619.710889][T13976] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.719848][T13976] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.736132][T13976] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.745407][T13976] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.759126][T14143] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 619.782091][T14143] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 619.963921][T10342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.978798][T10342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.000807][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 620.059088][T10343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.069569][T10343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.071180][T14143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 620.088746][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 620.115344][T14047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.130374][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 620.138446][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 620.168572][T14143] 8021q: adding VLAN 0 to HW filter on device team0 [ 620.206034][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 620.221360][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 620.231723][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 620.240403][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 620.248686][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 620.259155][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 620.274209][T10326] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.281482][T10326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 620.295492][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 620.325196][T10342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 620.342515][T10342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 620.360034][T10342] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.367467][T10342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.376235][T10342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 620.402432][T10342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 620.424378][T10342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 620.436305][T10342] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 620.463570][T10342] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 620.526474][T10342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 620.552141][T10342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 620.581532][T10342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 620.598095][T10342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 620.613057][T14047] device veth0_vlan entered promiscuous mode [ 620.677525][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 620.689678][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 620.725877][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 620.799847][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 620.891619][T14047] device veth1_vlan entered promiscuous mode [ 620.907875][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 620.923752][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 620.973507][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 621.036334][T14143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 621.106337][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 621.128618][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 621.165235][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 621.182742][T14047] device veth0_macvtap entered promiscuous mode [ 621.232728][T14047] device veth1_macvtap entered promiscuous mode [ 621.295716][T14047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.327063][T14047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.344538][T14047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.361494][T14047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.387001][T14047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 621.431186][T10344] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 621.439541][T10344] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 621.484265][T10344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 621.536981][T10344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 621.562780][T14047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.579776][T14047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.590819][T14047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.602973][T14047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.614921][T14047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.640995][T10344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 621.661769][T10344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 621.704083][T14047] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.723796][T14047] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.749657][T14373] netlink: 'syz.4.2888': attribute type 7 has an invalid length. [ 621.750996][T14047] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.808014][T14047] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.816695][T14373] netlink: 191184 bytes leftover after parsing attributes in process `syz.4.2888'. [ 622.070727][T12027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.088949][T12027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.115863][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 622.188196][T10343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.198138][T10343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.229943][T10344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 622.377988][T10336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 622.396140][T10336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 622.478925][T14143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 622.607593][T14391] sctp: [Deprecated]: syz.1.2824 (pid 14391) Use of struct sctp_assoc_value in delayed_ack socket option. [ 622.607593][T14391] Use struct sctp_sack_info instead [ 622.737899][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 622.781124][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 622.900454][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 622.909623][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 622.971199][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 622.991178][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 623.002751][T14143] device veth0_vlan entered promiscuous mode [ 623.060833][T14143] device veth1_vlan entered promiscuous mode [ 623.087205][T14396] netlink: 87536 bytes leftover after parsing attributes in process `syz.4.2893'. [ 623.133953][T14396] netlink: 'syz.4.2893': attribute type 21 has an invalid length. [ 623.142840][T14396] netlink: 'syz.4.2893': attribute type 1 has an invalid length. [ 623.151797][T14396] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.2893'. [ 623.240836][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 623.257519][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 623.297931][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 623.309503][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 623.320349][T14143] device veth0_macvtap entered promiscuous mode [ 623.328229][T14404] netlink: 'syz.3.2896': attribute type 10 has an invalid length. [ 623.354512][T14404] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 623.482050][T14410] netlink: 'syz.1.2897': attribute type 29 has an invalid length. [ 623.507695][T14405] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 623.538787][T14143] device veth1_macvtap entered promiscuous mode [ 623.555249][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 623.563731][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 623.573060][T14410] netlink: 'syz.1.2897': attribute type 29 has an invalid length. [ 623.648861][T14412] netlink: 'syz.1.2897': attribute type 29 has an invalid length. [ 623.671235][T14413] netlink: 'syz.1.2897': attribute type 29 has an invalid length. [ 623.705988][T14143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.717458][T14143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.728709][T14143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.740237][T14143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.750874][T14143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.814810][T14143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.854491][T14143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 623.887347][T12027] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 623.902319][T12027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 623.937004][T14143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 623.971151][T14143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.981798][T14143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 623.992882][T14143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.005507][T14143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.030287][T14143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.074101][T14143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 624.106829][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 624.129550][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 624.153267][T14427] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2902'. [ 624.189712][T14143] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.210505][T14143] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.227628][T14143] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.268221][T14143] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.392256][T14437] netlink: 'syz.1.2906': attribute type 3 has an invalid length. [ 624.428819][T14437] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2906'. [ 624.482696][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.489242][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.820526][ T4352] syzkaller0: tun_net_xmit 76 [ 624.992560][T10343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.007697][T10343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.071035][T10336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 625.188726][T10336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.207195][T10336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.255022][T10344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 625.276599][T14459] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 625.372276][T14455] netlink: 87536 bytes leftover after parsing attributes in process `syz.0.2910'. [ 625.402014][T14455] netlink: 'syz.0.2910': attribute type 21 has an invalid length. [ 625.461161][T14455] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.2910'. [ 625.522067][T14461] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2845'. [ 627.317333][ T4285] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 627.333307][ T48] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 627.345232][ T4285] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 627.355669][ T48] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 627.364711][ T48] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 627.372693][ T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 627.678023][T14475] chnl_net:caif_netlink_parms(): no params data found [ 627.789351][T14475] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.805229][T14475] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.817611][T14475] device bridge_slave_0 entered promiscuous mode [ 627.832489][T14475] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.865111][T14475] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.882855][T14475] device bridge_slave_1 entered promiscuous mode [ 627.932054][T14475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 627.954708][T14475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 628.019493][T14475] team0: Port device team_slave_0 added [ 628.030517][T14475] team0: Port device team_slave_1 added [ 628.065385][T14475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 628.085003][T14475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 628.125193][T14475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 628.146193][T14475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 628.155781][T14475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 628.196524][T14475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 628.573932][T14475] device hsr_slave_0 entered promiscuous mode [ 628.617225][T14475] device hsr_slave_1 entered promiscuous mode [ 628.632779][T14475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 628.650840][T14475] Cannot create hsr debugfs directory [ 629.204175][T14497] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.2919'. [ 629.266479][T14497] netlink: zone id is out of range [ 629.274681][T14497] netlink: zone id is out of range [ 629.293029][T14497] netlink: zone id is out of range [ 629.372144][T14497] netlink: del zone limit has 4 unknown bytes [ 629.440503][T14051] Bluetooth: hci5: command 0x0409 tx timeout [ 629.597488][T14475] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.961725][T14519] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2926'. [ 630.159863][T14475] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.239886][T12027] tipc: Left network mode [ 630.324040][T14525] netlink: 87536 bytes leftover after parsing attributes in process `syz.1.2927'. [ 630.337313][T14475] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.421671][T14530] validate_nla: 1 callbacks suppressed [ 630.421689][T14530] netlink: 'syz.1.2927': attribute type 21 has an invalid length. [ 630.455834][T14530] netlink: 'syz.1.2927': attribute type 1 has an invalid length. [ 630.489111][T14530] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.2927'. [ 630.739320][T12027] device ip6gretap0 left promiscuous mode [ 630.759352][T12027] : port 1(ip6gretap0) entered disabled state [ 630.875352][T14475] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.888143][T14546] netlink: 'syz.4.2935': attribute type 3 has an invalid length. [ 630.953022][T14546] netlink: 'syz.4.2935': attribute type 1 has an invalid length. [ 630.985879][T14546] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2935'. [ 631.600089][T14051] Bluetooth: hci5: command 0x041b tx timeout [ 631.645090][T14560] netlink: 'syz.4.2938': attribute type 29 has an invalid length. [ 631.757127][T14475] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 632.038862][T14560] netlink: 'syz.4.2938': attribute type 29 has an invalid length. [ 632.137260][T14564] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2939'. [ 632.197710][T14475] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 632.324483][T14475] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 632.339880][T14571] netlink: 'syz.4.2938': attribute type 1 has an invalid length. [ 632.358400][T14571] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.2938'. [ 632.540673][T14475] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 632.576342][T14566] netlink: 'syz.4.2938': attribute type 29 has an invalid length. [ 633.577597][T14475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 633.649369][T10342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 633.668823][T10342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 633.680395][T14051] Bluetooth: hci5: command 0x040f tx timeout [ 633.699754][T14594] netlink: 'syz.4.2947': attribute type 10 has an invalid length. [ 633.792402][T14594] team0: Port device dummy0 added [ 633.859268][T14475] 8021q: adding VLAN 0 to HW filter on device team0 [ 633.872311][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 633.895597][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 633.912001][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.919869][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 633.936182][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 633.962492][T10344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 633.986118][T10344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 634.010850][T10344] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.018325][T10344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.053085][T14603] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2948'. [ 634.106095][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 634.132297][T14603] openvswitch: netlink: Message has 6 unknown bytes. [ 634.186954][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 634.234301][T10344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 634.268174][T10344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 634.331798][T10344] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 634.401977][T10344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 634.428699][T10344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 634.457292][T10344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 634.470995][T10344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 634.567929][T10342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 634.592183][T10342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 634.632586][T14475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 634.696013][T14610] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2951'. [ 635.336750][T12027] bond0: (slave wlan1): Releasing backup interface [ 635.760278][T14051] Bluetooth: hci5: command 0x0419 tx timeout [ 635.819400][T14637] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2959'. [ 636.046444][T12027] device hsr_slave_0 left promiscuous mode [ 636.062912][T12027] device hsr_slave_1 left promiscuous mode [ 636.286415][T14051] Bluetooth: hci3: unexpected event 0x1c length: 15 > 5 [ 640.873537][T12027] team0 (unregistering): Port device team_slave_1 removed [ 640.927925][T12027] team0 (unregistering): Port device team_slave_0 removed [ 640.977560][T12027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 641.024050][T12027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 641.073035][T12027] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 641.360481][T12027] bond0 (unregistering): Released all slaves [ 641.424289][T14475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 641.434078][T14648] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2964'. [ 641.460919][T10342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 641.468950][T10342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 641.629724][T10344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 641.663978][T10344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 641.836846][T10344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 641.857106][T10344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 641.941524][T14475] device veth0_vlan entered promiscuous mode [ 642.018455][T10344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 642.036369][T10344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 642.099578][T14475] device veth1_vlan entered promiscuous mode [ 642.262304][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 642.317322][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 642.354849][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 642.364793][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 642.378163][T14475] device veth0_macvtap entered promiscuous mode [ 642.405112][T14475] device veth1_macvtap entered promiscuous mode [ 642.681575][T10344] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 642.714639][T10344] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 642.863307][T14475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 642.890083][T14475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.920222][T14475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 642.940087][T14475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.970099][T14475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 642.990306][T14475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.030056][T14475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.045888][T14475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.092581][T14475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 643.116007][T14475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.136368][T14475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.157064][T14475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.178928][T14475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.199831][T14475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.215939][T14475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.226481][T14475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.239450][T14475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.329877][T14695] netlink: 'syz.0.2977': attribute type 7 has an invalid length. [ 643.338519][T14475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 643.357799][T10339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 643.366752][T14695] netlink: 191184 bytes leftover after parsing attributes in process `syz.0.2977'. [ 643.377181][T10339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 643.433363][T10339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 643.449370][T10339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 643.476891][T14475] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.520038][T14475] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.540171][T14475] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.549887][T14475] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.987506][T10342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.020749][T10342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.080907][T10344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 644.145027][T10339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.182828][T10339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.267358][T10339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 645.222271][T14735] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2989'. [ 645.709370][T14747] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2994'. [ 645.753986][T14746] netlink: 'syz.2.2991': attribute type 7 has an invalid length. [ 645.810261][T14746] netlink: 191184 bytes leftover after parsing attributes in process `syz.2.2991'. [ 646.296226][ T4285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 646.315056][ T4285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 646.342745][ T4285] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 646.357036][ T4285] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 646.376707][T14757] netlink: 'syz.2.2997': attribute type 3 has an invalid length. [ 646.384823][T14757] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2997'. [ 646.394568][ T4285] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 646.403020][ T4285] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 646.417986][T14687] bond0: (slave syz_tun): Releasing backup interface [ 647.279140][T12027] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.181491][T14765] netlink: 'syz.3.3000': attribute type 10 has an invalid length. [ 648.252083][T14765] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3000'. [ 648.403478][T14765] device team0 entered promiscuous mode [ 648.480403][ T4285] Bluetooth: hci2: command 0x0409 tx timeout [ 648.558037][T14765] device team_slave_0 entered promiscuous mode [ 648.752861][T14765] device team_slave_1 entered promiscuous mode [ 648.795393][T14765] bridge0: port 3(team0) entered blocking state [ 648.831341][T14765] bridge0: port 3(team0) entered disabled state [ 648.875073][T14765] bridge0: port 3(team0) entered blocking state [ 648.884264][T14765] bridge0: port 3(team0) entered forwarding state [ 649.372832][T14776] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3003'. [ 649.438325][T12027] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.583496][T14789] netlink: 'syz.1.3006': attribute type 7 has an invalid length. [ 649.622395][T14789] netlink: 191184 bytes leftover after parsing attributes in process `syz.1.3006'. [ 650.369268][T12027] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.684571][ T4285] Bluetooth: hci2: command 0x041b tx timeout [ 650.766671][T14755] chnl_net:caif_netlink_parms(): no params data found [ 650.981056][T12027] team0: Port device netdevsim0 removed [ 650.989740][T12027] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.379180][T14807] netlink: 'syz.4.3012': attribute type 4 has an invalid length. [ 651.390375][T14807] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3012'. [ 651.619826][T14806] netlink: 'syz.1.3011': attribute type 10 has an invalid length. [ 651.953103][T14806] device syz_tun entered promiscuous mode [ 652.084994][T14806] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 652.165619][T14755] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.180202][T14755] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.212871][T14755] device bridge_slave_0 entered promiscuous mode [ 652.263407][T14824] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3015'. [ 652.375447][T14755] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.400600][T14755] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.439281][T14755] device bridge_slave_1 entered promiscuous mode [ 652.646956][T14755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.717100][T14755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 652.727188][ T4285] Bluetooth: hci2: command 0x040f tx timeout [ 652.764586][T14829] netlink: 'syz.3.3016': attribute type 7 has an invalid length. [ 652.813533][T14829] netlink: 191184 bytes leftover after parsing attributes in process `syz.3.3016'. [ 652.897195][T14755] team0: Port device team_slave_0 added [ 652.953896][T14755] team0: Port device team_slave_1 added [ 653.113917][T14755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.172206][T14755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.397330][T14755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.253569][T12027] device ip6gretap0 left promiscuous mode [ 654.266898][T12027] : port 1(ip6gretap0) entered disabled state [ 654.771416][T14755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.779006][T14755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.806327][ T4285] Bluetooth: hci2: command 0x0419 tx timeout [ 655.010004][T14755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 655.180216][T14851] netlink: 'syz.1.3019': attribute type 10 has an invalid length. [ 655.254112][T14851] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3019'. [ 655.567955][T14870] netlink: 'syz.3.3022': attribute type 4 has an invalid length. [ 655.620199][T14851] device team0 entered promiscuous mode [ 655.625932][T14851] device team_slave_0 entered promiscuous mode [ 655.634696][T14870] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3022'. [ 655.724329][T14851] device team_slave_1 entered promiscuous mode [ 656.020497][T14851] bridge0: port 3(team0) entered blocking state [ 656.027399][T14851] bridge0: port 3(team0) entered disabled state [ 656.227474][T14851] bridge0: port 3(team0) entered blocking state [ 656.234189][T14851] bridge0: port 3(team0) entered forwarding state [ 656.619249][T14755] device hsr_slave_0 entered promiscuous mode [ 656.690830][T14755] device hsr_slave_1 entered promiscuous mode [ 656.699313][T14755] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 656.710803][T14755] Cannot create hsr debugfs directory [ 657.038715][T14879] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3024'. [ 657.050801][T14879] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 657.137490][T14879] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 657.950278][T14891] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3027'. [ 658.569217][T14919] netlink: 'syz.2.3035': attribute type 1 has an invalid length. [ 658.578071][T14919] netlink: 'syz.2.3035': attribute type 3 has an invalid length. [ 658.587281][T14919] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3035'. [ 659.624901][T14929] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3037'. [ 659.664160][T14929] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 659.754241][T14929] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 659.879235][T14935] netlink: 'syz.4.3038': attribute type 2 has an invalid length. [ 659.905426][T14935] netlink: 'syz.4.3038': attribute type 8 has an invalid length. [ 659.946018][T14935] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3038'. [ 659.995436][T14946] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3040'. [ 660.465037][T14951] netlink: 'syz.2.3041': attribute type 10 has an invalid length. [ 660.493706][T14951] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3041'. [ 660.661765][T14951] device team0 entered promiscuous mode [ 660.719126][T14951] device team_slave_0 entered promiscuous mode [ 660.825326][T14951] device team_slave_1 entered promiscuous mode [ 661.032141][T14951] bridge0: port 3(team0) entered blocking state [ 661.098878][T14951] bridge0: port 3(team0) entered disabled state [ 661.329401][T14983] netlink: 'syz.1.3047': attribute type 3 has an invalid length. [ 661.363012][T14983] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3047'. [ 661.738252][T14951] bridge0: port 3(team0) entered blocking state [ 661.746680][T14951] bridge0: port 3(team0) entered forwarding state [ 662.644095][T12027] team0: Port device wlan1 removed [ 662.748024][T14997] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3051'. [ 662.757963][T14997] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 662.825175][T14997] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 662.842656][T14755] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 662.977980][T14755] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 663.218174][T14755] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 663.286924][T14755] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 663.345914][T15007] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3053'. [ 663.417977][T12027] device hsr_slave_0 left promiscuous mode [ 663.427836][T12027] device hsr_slave_1 left promiscuous mode [ 663.474224][T12027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 663.488980][T12027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.517102][T12027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 663.567654][T12027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.652637][T12027] device veth1_macvtap left promiscuous mode [ 663.676106][T12027] device veth0_macvtap left promiscuous mode [ 664.641005][T12027] team0 (unregistering): Port device team_slave_1 removed [ 664.697714][T12027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 664.754778][T12027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 664.966357][T12027] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 665.069378][T12027] bond0 (unregistering): Released all slaves [ 665.377808][T14755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.398461][T14755] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.457370][T14755] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 665.472788][T14755] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 665.570591][T15073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 665.579766][T15073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 665.680953][T15073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 665.747230][T15073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 665.854341][T15073] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.861684][T15073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.921728][T15073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 665.949632][T15073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 665.977587][T15073] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.984868][T15073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.072788][T15073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 666.127245][T15073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 666.151890][T15073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 666.171646][T15073] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 666.185889][T15073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 666.208223][T15073] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 666.254153][T15073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 666.350864][T15073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 666.369035][T15073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 666.430461][T15073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 667.313799][T15073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 667.353269][T15073] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 667.398146][T15073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 668.149252][T15137] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3075'. [ 668.278074][T12027] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 668.313524][T12027] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 668.374189][T14755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 668.564391][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 668.619818][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 668.808598][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 668.832498][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 668.917655][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 669.007489][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 669.063269][T14755] device veth0_vlan entered promiscuous mode [ 669.119569][T14755] device veth1_vlan entered promiscuous mode [ 669.293768][T15162] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3079'. [ 669.460520][T15167] netlink: 'syz.4.3080': attribute type 1 has an invalid length. [ 669.469581][T15167] netlink: 15998 bytes leftover after parsing attributes in process `syz.4.3080'. [ 669.518966][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 669.539611][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 669.579215][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 669.613137][T15074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 669.647130][T14755] device veth0_macvtap entered promiscuous mode [ 669.683234][T14755] device veth1_macvtap entered promiscuous mode [ 669.791496][T14755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.924077][T14755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.986679][T14755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.035142][T14755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.129359][T14755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.176566][T14755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.222458][T14755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.276577][T14755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.315237][T14755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 670.348796][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 670.370567][T10326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 670.404042][T14755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.442889][T14755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.550851][T14755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.568646][T14755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.600043][T14755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.696568][T14755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.753508][T14755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.765248][T14755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.779249][T14755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 670.794912][T15073] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 670.832042][T15073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 670.883222][T14755] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.910129][T14755] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.937584][T14755] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.938610][T15197] netlink: 'syz.2.3088': attribute type 7 has an invalid length. [ 670.961623][T14755] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.994218][T15197] netlink: 191184 bytes leftover after parsing attributes in process `syz.2.3088'. [ 671.154542][T15073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.190475][T15073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.219561][T12027] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 671.307013][T15073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.328759][T15073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.366564][T15078] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 671.722845][T15217] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3092'. [ 672.076126][T15219] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2987'. [ 672.248089][T15214] netlink: 'syz.0.2987': attribute type 21 has an invalid length. [ 672.270267][T15214] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2987'. [ 672.307421][T15214] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2987'. [ 672.394912][T15229] netlink: 'syz.3.3095': attribute type 10 has an invalid length. [ 672.451463][T15229] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3095'. [ 672.773709][T15245] netlink: 'syz.2.3099': attribute type 7 has an invalid length. [ 672.817421][T15245] netlink: 191184 bytes leftover after parsing attributes in process `syz.2.3099'. [ 673.865922][T15270] netlink: 63747 bytes leftover after parsing attributes in process `syz.4.3103'. [ 674.317512][T15276] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3106'. [ 675.924616][T15309] netlink: 'syz.0.3114': attribute type 7 has an invalid length. [ 675.990186][T15309] netlink: 191184 bytes leftover after parsing attributes in process `syz.0.3114'. [ 677.007784][T15332] netlink: 'syz.2.3123': attribute type 2 has an invalid length. [ 677.261079][T15340] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3126'. [ 677.391857][T15342] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3125'. [ 677.777585][T15348] netlink: 'syz.1.3128': attribute type 7 has an invalid length. [ 677.820139][T15348] netlink: 191184 bytes leftover after parsing attributes in process `syz.1.3128'. [ 678.393309][T15363] netlink: 'syz.1.3132': attribute type 21 has an invalid length. [ 678.440096][T15363] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3132'. [ 678.472003][T15363] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3132'. [ 679.075076][T15383] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3138'. [ 679.531618][T15396] netlink: 'syz.2.3142': attribute type 7 has an invalid length. [ 679.570572][T15396] netlink: 191184 bytes leftover after parsing attributes in process `syz.2.3142'. [ 679.875425][T15401] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3143'. [ 680.283716][T15398] netlink: 'syz.4.3143': attribute type 21 has an invalid length. [ 680.310347][T15398] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3143'. [ 680.369796][T15398] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3143'. [ 681.936086][T15448] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3155'. [ 682.454551][T15452] netlink: 'syz.2.3157': attribute type 7 has an invalid length. [ 682.510110][T15452] netlink: 191184 bytes leftover after parsing attributes in process `syz.2.3157'. [ 683.118422][T15464] netlink: 'syz.4.3158': attribute type 10 has an invalid length. [ 683.248069][T15464] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3158'. [ 683.784312][T15479] netlink: 63747 bytes leftover after parsing attributes in process `syz.1.3162'. [ 685.047770][T15483] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3163'. [ 685.969858][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.976598][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.026466][T15482] netlink: 'syz.3.3163': attribute type 21 has an invalid length. [ 686.049089][T15482] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3163'. [ 686.153662][T15482] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3163'. [ 686.196529][T15505] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3170'. [ 686.250977][T15503] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3169'. [ 688.237285][T15534] netlink: 'syz.1.3177': attribute type 10 has an invalid length. [ 688.263781][T15534] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3177'. [ 689.534691][T15546] netlink: 63747 bytes leftover after parsing attributes in process `syz.2.3179'. [ 689.924290][T15549] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3182'. [ 691.573115][T15580] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3191'. [ 691.980874][T15587] -: renamed from syzkaller0 [ 692.279927][T15598] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3197'. [ 692.604188][T15606] netlink: 'syz.2.3199': attribute type 3 has an invalid length. [ 692.676738][T15606] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3199'. [ 695.908840][T14143] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 695.940119][T14143] CPU: 0 PID: 14143 Comm: syz-executor Not tainted syzkaller #0 [ 695.948712][T14143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 695.958955][T14143] Call Trace: [ 695.962242][T14143] [ 695.965292][T14143] dump_stack_lvl+0x188/0x24e [ 695.970015][T14143] ? ___ratelimit+0x14e/0x5f0 [ 695.975013][T14143] ? show_regs_print_info+0x12/0x12 [ 695.980264][T14143] ? load_image+0x400/0x400 [ 695.985264][T14143] ? ___ratelimit+0x45e/0x5f0 [ 695.990163][T14143] ? radix_tree_cpu_dead+0x160/0x160 [ 695.995954][T14143] dump_header+0xd7/0x820 [ 696.000854][T14143] oom_kill_process+0x361/0x550 [ 696.005891][T14143] out_of_memory+0xe91/0x1240 [ 696.010787][T14143] ? mem_cgroup_out_of_memory+0xbd/0x390 [ 696.016582][T14143] ? mutex_lock_nested+0x10/0x10 [ 696.021542][T14143] ? unregister_oom_notifier+0x20/0x20 [ 696.027726][T14143] mem_cgroup_out_of_memory+0x2c3/0x390 [ 696.033563][T14143] ? mem_cgroup_oom_trylock+0x210/0x210 [ 696.039410][T14143] ? do_raw_spin_unlock+0x11d/0x230 [ 696.044744][T14143] try_charge_memcg+0xcba/0x1800 [ 696.049871][T14143] ? verify_lock_unused+0x140/0x140 [ 696.055116][T14143] ? percpu_ref_put+0x180/0x180 [ 696.060121][T14143] charge_memcg+0x117/0x3a0 [ 696.064698][T14143] ? __mem_cgroup_charge+0x80/0x80 [ 696.069972][T14143] ? mem_cgroup_swapin_charge_folio+0x2f/0x380 [ 696.076436][T14143] mem_cgroup_swapin_charge_folio+0x25e/0x380 [ 696.083098][T14143] __read_swap_cache_async+0x3eb/0x960 [ 696.089014][T14143] swap_cluster_readahead+0x38e/0x690 [ 696.094704][T14143] ? read_swap_cache_async+0xa0/0xa0 [ 696.100405][T14143] ? __lock_acquire+0x7d10/0x7d10 [ 696.105564][T14143] ? xas_descend+0x3a4/0x490 [ 696.110394][T14143] swapin_readahead+0xfc/0x930 [ 696.115204][T14143] ? put_swap_device+0x1e/0x230 [ 696.120301][T14143] ? __lock_acquire+0x7d10/0x7d10 [ 696.125549][T14143] ? exit_swap_address_space+0x280/0x280 [ 696.131757][T14143] ? put_swap_device+0x1e/0x230 [ 696.136733][T14143] ? put_swap_device+0x1e/0x230 [ 696.141628][T14143] ? put_swap_device+0x17e/0x230 [ 696.146883][T14143] ? swap_cache_get_folio+0x137/0x5b0 [ 696.152393][T14143] do_swap_page+0x321/0x3ab0 [ 696.157028][T14143] ? count_memcg_event_mm+0x8a/0x3c0 [ 696.162698][T14143] ? count_memcg_event_mm+0x36b/0x3c0 [ 696.168279][T14143] ? __lock_acquire+0x7d10/0x7d10 [ 696.173456][T14143] ? count_memcg_event_mm+0x8a/0x3c0 [ 696.178779][T14143] ? put_page+0x270/0x270 [ 696.183172][T14143] handle_mm_fault+0x197b/0x3ee0 [ 696.188214][T14143] ? mt_find+0x157/0x830 [ 696.192604][T14143] ? numa_migrate_prep+0x250/0x250 [ 696.197958][T14143] ? lock_chain_count+0x20/0x20 [ 696.202860][T14143] ? lock_mm_and_find_vma+0xae/0x2f0 [ 696.208711][T14143] do_user_addr_fault+0x51f/0xb10 [ 696.213895][T14143] exc_page_fault+0x60/0x100 [ 696.218624][T14143] ? clear_bhb_loop+0x60/0xb0 [ 696.223435][T14143] asm_exc_page_fault+0x22/0x30 [ 696.228415][T14143] RIP: 0033:0x7fd8c859c104 [ 696.232872][T14143] Code: 41 83 e2 40 75 40 89 f0 f7 d0 a9 00 00 41 00 74 35 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 48 3d 00 f0 ff ff 77 44 <48> 8b 54 24 18 64 48 2b 14 25 28 00 00 00 75 47 48 83 c4 58 c3 0f [ 696.253240][T14143] RSP: 002b:00007ffc1cfc7910 EFLAGS: 00010207 [ 696.259359][T14143] RAX: 0000000000000003 RBX: 00000000000000d3 RCX: 00007fd8c859c0fc [ 696.268084][T14143] RDX: 0000000000090800 RSI: 00007fd8c86326ab RDI: 00000000ffffff9c [ 696.276712][T14143] RBP: 00007ffc1cfc79bc R08: 0000000000000000 R09: 0000000000000000 [ 696.285207][T14143] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000003d [ 696.293569][T14143] R13: 0000000000000000 R14: 00000000000a9402 R15: 00007ffc1cfc7a10 [ 696.301606][T14143] [ 696.578192][T14143] memory: usage 246808kB, limit 307200kB, failcnt 2694 [ 696.592464][T14143] memory+swap: usage 246256kB, limit 9007199254740988kB, failcnt 0 [ 696.621013][T14143] kmem: usage 240520kB, limit 9007199254740988kB, failcnt 0 [ 696.628640][T14143] Memory cgroup stats for /syz2: [ 696.629188][T14143] anon 0 [ 696.629188][T14143] file 0 [ 696.629188][T14143] kernel 246292480 [ 696.629188][T14143] kernel_stack 32768 [ 696.629188][T14143] pagetables 126976 [ 696.629188][T14143] sec_pagetables 0 [ 696.629188][T14143] percpu 30848 [ 696.629188][T14143] sock 0 [ 696.629188][T14143] vmalloc 8392704 [ 696.629188][T14143] shmem 0 [ 696.629188][T14143] zswap 0 [ 696.629188][T14143] zswapped 0 [ 696.629188][T14143] file_mapped 0 [ 696.629188][T14143] file_dirty 0 [ 696.629188][T14143] file_writeback 0 [ 696.629188][T14143] swapcached 237568 [ 696.629188][T14143] anon_thp 0 [ 696.629188][T14143] file_thp 0 [ 696.629188][T14143] shmem_thp 0 [ 696.629188][T14143] inactive_anon 0 [ 696.629188][T14143] active_anon 4096 [ 696.629188][T14143] inactive_file 0 [ 696.629188][T14143] active_file 0 [ 696.629188][T14143] unevictable 0 [ 696.629188][T14143] slab_reclaimable 8712 [ 696.629188][T14143] slab_unreclaimable 194816 [ 696.629188][T14143] slab 203528 [ 696.735571][T14143] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3199,pid=15602,uid=0 [ 696.764913][T14143] Memory cgroup out of memory: Killed process 15604 (syz.2.3199) total-vm:102416kB, anon-rss:1236kB, file-rss:22724kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 698.530282][T15642] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3213'. [ 698.729883][ T4285] Bluetooth: hci5: unexpected event 0x06 length: 15 > 3 [ 698.749266][T15634] netlink: 'syz.2.3209': attribute type 16 has an invalid length. [ 698.783443][T15634] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3209'. [ 699.135049][T15659] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.3219'. [ 700.526131][T15696] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3227'. [ 701.587813][T15717] tap0: tun_chr_ioctl cmd 35108 [ 704.166329][T15745] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3243'. [ 705.169611][T15766] can: request_module (can-proto-0) failed. [ 705.724425][T15801] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.3259'. [ 705.793006][T15801] netlink: 'syz.4.3259': attribute type 1 has an invalid length. [ 705.810520][T15801] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.3259'. [ 707.999614][T15788] netlink: 'syz.0.3256': attribute type 16 has an invalid length. [ 708.012575][T15788] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3256'. [ 708.149820][T15791] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3257'. [ 708.169042][T15799] netlink: 'syz.4.3259': attribute type 21 has an invalid length. [ 708.206895][T15799] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3259'. [ 708.217138][T15799] netlink: 'syz.4.3259': attribute type 5 has an invalid length. [ 708.734959][T15820] Ÿë: port 1(veth0_to_team) entered blocking state [ 708.759487][T15821] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3264'. [ 708.783585][T15820] Ÿë: port 1(veth0_to_team) entered disabled state [ 709.015148][T15820] device veth0_to_team entered promiscuous mode [ 709.224702][T15834] netlink: 'syz.4.3268': attribute type 3 has an invalid length. [ 709.244759][T15834] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3268'. [ 709.268374][T15827] IPv6: Can't replace route, no match found [ 709.746777][T15852] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3273'. [ 709.859206][T15850] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3275'. [ 709.900924][T15853] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3273'. [ 710.237189][T15865] netlink: 'syz.0.3277': attribute type 10 has an invalid length. [ 710.285370][T15865] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3277'. [ 710.332190][ T4285] Bluetooth: hci5: unexpected event 0x0b length: 15 > 11 [ 711.645202][T15898] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3289'. [ 712.019243][T15902] netlink: 'syz.4.3292': attribute type 1 has an invalid length. [ 712.056211][T15902] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3292'. [ 712.131348][T15907] netlink: 'syz.0.3294': attribute type 10 has an invalid length. [ 712.139432][T15907] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3294'. [ 712.678812][T15916] netlink: 'syz.1.3296': attribute type 16 has an invalid length. [ 712.713246][T15916] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3296'. [ 712.932031][T15912] netlink: 146340 bytes leftover after parsing attributes in process `syz.3.3290'. [ 713.020568][T15912] openvswitch: netlink: Key type 386 is out of range max 32 [ 713.088829][T15921] device sit0 entered promiscuous mode [ 713.521122][T15942] netlink: 'syz.0.3303': attribute type 22 has an invalid length. [ 714.875819][T15961] netlink: 'syz.4.3307': attribute type 10 has an invalid length. [ 715.127524][T15961] __nla_validate_parse: 2 callbacks suppressed [ 715.127546][T15961] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3307'. [ 717.231626][T16001] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3317'. [ 717.791028][T16012] netlink: 'syz.0.3318': attribute type 1 has an invalid length. [ 718.671101][T16023] IPv6: Can't replace route, no match found [ 719.500182][T16034] netlink: 'syz.4.3326': attribute type 10 has an invalid length. [ 719.508482][T16034] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3326'. [ 719.779239][T16045] netlink: 'syz.0.3329': attribute type 5 has an invalid length. [ 720.191803][T16051] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3331'. [ 720.852203][T16073] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3338'. [ 721.294232][T16094] netlink: 'syz.0.3342': attribute type 10 has an invalid length. [ 721.350565][T16094] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3342'. [ 721.394644][T16096] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.3344'. [ 721.832359][T16101] netlink: 'syz.4.3345': attribute type 10 has an invalid length. [ 722.024704][T16101] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3345'. [ 722.040494][T16101] device team0 entered promiscuous mode [ 722.075218][T16101] device team_slave_0 entered promiscuous mode [ 722.127318][T16101] device team_slave_1 entered promiscuous mode [ 722.178432][T16101] device dummy0 entered promiscuous mode [ 722.222020][T16101] bridge0: port 3(team0) entered blocking state [ 722.244021][T16101] bridge0: port 3(team0) entered disabled state [ 722.259344][T16101] bridge0: port 3(team0) entered blocking state [ 722.265910][T16101] bridge0: port 3(team0) entered forwarding state [ 722.684343][T16115] bridge0: port 3(team0) entered disabled state [ 722.714076][T16115] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.741057][T16115] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.872115][T16125] netlink: 'syz.1.3352': attribute type 7 has an invalid length. [ 722.880673][T16125] netlink: 191184 bytes leftover after parsing attributes in process `syz.1.3352'. [ 723.840104][T14051] Bluetooth: hci3: command 0x0406 tx timeout [ 724.425491][T16138] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3357'. [ 724.765587][T16149] netlink: 'syz.2.3359': attribute type 10 has an invalid length. [ 724.779088][T16149] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3359'. [ 724.962997][T16163] netlink: 'syz.0.3364': attribute type 7 has an invalid length. [ 724.972275][T16163] netlink: 191184 bytes leftover after parsing attributes in process `syz.0.3364'. [ 725.469656][T16175] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3370'. [ 725.832623][T16182] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.3372'. [ 726.247554][T16196] netlink: 'syz.0.3375': attribute type 10 has an invalid length. [ 726.264941][T16196] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3375'. [ 727.053426][T16204] netlink: 'syz.4.3377': attribute type 7 has an invalid length. [ 727.111137][T16204] netlink: 191184 bytes leftover after parsing attributes in process `syz.4.3377'. [ 727.497296][T16218] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.3383'. [ 727.576145][T16219] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3384'. [ 727.719679][T16228] netlink: 'syz.2.3387': attribute type 10 has an invalid length. [ 727.746693][T16228] bridge0: port 4(veth0_to_bond) entered blocking state [ 727.789437][T16228] bridge0: port 4(veth0_to_bond) entered disabled state [ 727.819574][T16228] device veth0_to_bond entered promiscuous mode [ 728.181298][T16238] netlink: 'syz.1.3390': attribute type 10 has an invalid length. [ 728.189613][T16238] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3390'. [ 728.570152][T16247] netlink: 'syz.2.3394': attribute type 7 has an invalid length. [ 728.578810][T16247] netlink: 191184 bytes leftover after parsing attributes in process `syz.2.3394'. [ 728.919281][T16257] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3398'. [ 728.968786][ T4285] Bluetooth: hci1: command 0x0406 tx timeout [ 728.975863][T14051] Bluetooth: hci0: command 0x0406 tx timeout [ 747.401247][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.408322][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 754.590261][T14051] Bluetooth: hci5: command 0x0406 tx timeout [ 756.340541][ T4332] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { P16264 1-.... } 2666 jiffies s: 72437 root: 0x2/T [ 756.369861][ T4332] rcu: blocking rcu_node structures (internal RCU debug): [ 756.377504][ T4332] Sending NMI from CPU 0 to CPUs 1: [ 756.383064][ C1] NMI backtrace for cpu 1 [ 756.383075][ C1] CPU: 1 PID: 16263 Comm: syz.3.3401 Not tainted syzkaller #0 [ 756.383093][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 756.383101][ C1] RIP: 0010:__cant_migrate+0x15a/0x2f0 [ 756.383124][ C1] Code: 08 00 00 00 00 65 48 8b 04 25 28 00 00 00 48 3b 84 24 80 00 00 00 0f 85 09 01 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d 48 89 7c 24 18 89 74 24 14 48 c7 c0 00 f2 80 8c 48 c1 e8 03 42 [ 756.383137][ C1] RSP: 0018:ffffc900001e0798 EFLAGS: 00000046 [ 756.383152][ C1] RAX: e91e5d0efcb59900 RBX: ffffc9000c94b000 RCX: dffffc0000000000 [ 756.383163][ C1] RDX: 0000000000000100 RSI: 000000000000024e RDI: ffffffff8a9186a0 [ 756.383174][ C1] RBP: ffffc900001e0898 R08: dffffc0000000000 R09: 1ffffffff215f248 [ 756.383184][ C1] R10: dffffc0000000000 R11: fffffbfff215f249 R12: ffffffff8cb7fca0 [ 756.383194][ C1] R13: ffff88801c6b4f98 R14: ffff88801c6b4fa8 R15: 0000000000000001 [ 756.383205][ C1] FS: 00007f5fe59f66c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 756.383218][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 756.383229][ C1] CR2: 00007fd8c9407d58 CR3: 0000000026711000 CR4: 00000000003506e0 [ 756.383251][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 756.383260][ C1] DR3: 0000000000008d24 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 756.383270][ C1] Call Trace: [ 756.383276][ C1] [ 756.383280][ C1] trace_call_bpf+0x2e8/0x6b0 [ 756.383302][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 756.383323][ C1] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 756.383345][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 756.383359][ C1] ? sched_clock_cpu+0x6e/0x260 [ 756.383378][ C1] perf_trace_run_bpf_submit+0x79/0x1c0 [ 756.383400][ C1] perf_trace_preemptirq_template+0x268/0x320 [ 756.383420][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 756.383440][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 756.383460][ C1] ? __irq_exit_rcu+0x147/0x230 [ 756.383474][ C1] ? irq_exit_rcu+0x20/0x20 [ 756.383490][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 756.383507][ C1] trace_irq_enable_rcuidle+0xd3/0x140 [ 756.383528][ C1] trace_hardirqs_on+0x24/0x40 [ 756.383545][ C1] asm_sysvec_irq_work+0x16/0x20 [ 756.383561][ C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 756.383577][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 d2 33 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 756.383588][ C1] RSP: 0018:ffffc900001e0ac0 EFLAGS: 00000206 [ 756.383600][ C1] RAX: e91e5d0efcb59900 RBX: 1ffff9200003c160 RCX: e91e5d0efcb59900 [ 756.383610][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1120 RDI: ffffffff8adf1320 [ 756.383620][ C1] RBP: ffffc900001e0bb0 R08: ffff8880b8f3580b R09: 1ffff110171e6b01 [ 756.383630][ C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: 0000000000000246 [ 756.383640][ C1] R13: dffffc0000000000 R14: ffff8880b8f3b900 R15: 0000000000000002 [ 756.383659][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 756.383679][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 756.383699][ C1] __rcu_read_unlock+0x78/0xd0 [ 756.383712][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 756.383733][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 756.383750][ C1] ieee80211_iterate_active_interfaces_atomic+0x156/0x170 [ 756.383771][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 756.383793][ C1] __hrtimer_run_queues+0x54a/0xd50 [ 756.383822][ C1] ? hw_scan_work+0xf50/0xf50 [ 756.383845][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 756.383861][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 756.383883][ C1] hrtimer_run_softirq+0x183/0x2a0 [ 756.383901][ C1] handle_softirqs+0x2a1/0x930 [ 756.383919][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 756.383934][ C1] ? do_softirq+0x210/0x210 [ 756.383950][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 756.383965][ C1] __irq_exit_rcu+0x13b/0x230 [ 756.383984][ C1] ? irq_exit_rcu+0x20/0x20 [ 756.384003][ C1] irq_exit_rcu+0x5/0x20 [ 756.384015][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 756.384032][ C1] [ 756.384036][ C1] [ 756.384041][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 756.384059][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 756.384076][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 2f ed 20 f7 65 8b 05 80 70 ca 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 756.384087][ C1] RSP: 0018:ffffc9000c81fac0 EFLAGS: 00000206 [ 756.384099][ C1] RAX: dffffc0000000004 RBX: 0000000000000a02 RCX: e91e5d0efcb59900 [ 756.384109][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1120 RDI: 0000000000000001 [ 756.384119][ C1] RBP: ffffc9000c81fb58 R08: ffff8880b8f3580b R09: 1ffff110171e6b01 [ 756.384130][ C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: dffffc0000000000 [ 756.384140][ C1] R13: ffff888063350000 R14: ffffffff96ebd5b8 R15: 1ffff92001903f58 [ 756.384159][ C1] ? _raw_spin_unlock+0x40/0x40 [ 756.384176][ C1] ? page_ext_put+0x98/0xb0 [ 756.384197][ C1] debug_check_no_obj_freed+0x515/0x530 [ 756.384222][ C1] free_unref_page_prepare+0x2a6/0x9a0 [ 756.384252][ C1] free_unref_page+0x2e/0x3f0 [ 756.384273][ C1] __unfreeze_partials+0x1a5/0x200 [ 756.384294][ C1] put_cpu_partial+0x17c/0x250 [ 756.384310][ C1] ? put_cpu_partial+0x6e/0x250 [ 756.384328][ C1] qlist_free_all+0x76/0xe0 [ 756.384345][ C1] kasan_quarantine_reduce+0x144/0x160 [ 756.384362][ C1] __kasan_slab_alloc+0x1e/0x80 [ 756.384381][ C1] slab_post_alloc_hook+0x4b/0x480 [ 756.384396][ C1] ? slab_pre_alloc_hook+0x59/0x310 [ 756.384414][ C1] kmem_cache_alloc+0x123/0x2f0 [ 756.384429][ C1] ? getname_flags+0xb7/0x500 [ 756.384445][ C1] getname_flags+0xb7/0x500 [ 756.384460][ C1] __x64_sys_mkdirat+0x78/0x90 [ 756.384477][ C1] do_syscall_64+0x4c/0xa0 [ 756.384496][ C1] ? clear_bhb_loop+0x60/0xb0 [ 756.384513][ C1] ? clear_bhb_loop+0x60/0xb0 [ 756.384531][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 756.384548][ C1] RIP: 0033:0x7f5fe779cdd9 [ 756.384562][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 756.384573][ C1] RSP: 002b:00007f5fe59f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 756.384588][ C1] RAX: ffffffffffffffda RBX: 00007f5fe7a15fa0 RCX: 00007f5fe779cdd9 [ 756.384598][ C1] RDX: 00000000000001ff RSI: 0000200000000040 RDI: ffffffffffffff9c [ 756.384608][ C1] RBP: 00007f5fe7832d69 R08: 0000000000000000 R09: 0000000000000000 [ 756.384617][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 756.384626][ C1] R13: 00007f5fe7a16038 R14: 00007f5fe7a15fa0 R15: 00007ffc340a6268 [ 756.384644][ C1]