last executing test programs: 4.835187331s ago: executing program 0 (id=1488): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0xd, &(0x7f00000000c0), 0x10) 4.412544901s ago: executing program 0 (id=1490): r0 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xfe, 0x1a, 0x10, 0x0, 0x0, 0x40002, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x4, @perf_config_ext={0x2f6e, 0x2}, 0x61c, 0x200000000000c8, 0x2, 0x7, 0xfffffffffffbfff8, 0x8001, 0xfff, 0x0, 0xfffffffc, 0x0, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="080000000400000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0813", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$unix(r2, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x24040014) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c000000050000000f00000000000009010000000f00000005000005ff0000000f00000004000000905900000400000002000000010000000700000003000000000000000b00000003000000060000000200000003000000010c0000020000000000000a0300000003000000000000100c00000000615f3000ead38c6a659de9c5ffc152a296c214a50321c75775f210af52c815f646658d"], &(0x7f0000000740)=""/232, 0x89, 0xe8, 0x1, 0x7}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r6}, 0x4) perf_event_open(&(0x7f00000009c0)={0x1, 0x80, 0x7, 0x0, 0xf, 0x4, 0x0, 0x8000, 0x80000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x6ec, 0x400}, 0x201, 0x8, 0xf4, 0x6, 0x0, 0x81, 0xa, 0x0, 0x7, 0x0, 0xf}, 0xffffffffffffffff, 0x5, r0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000d00)=ANY=[@ANYBLOB="4b4ee88fa7d118000000020000000000000000004332aee49c9b543aa67549410879ce00630fdf4e8aef92939742654420105c66520801f9be4c0ba9ce217336778a6bf4b5b05750060c01b5d3acce1b0cc6afbe3e36a1b279fb6f97766618bae2f2362e6e5da40ed6f5", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000280)=""/149, 0x0, 0x95, 0x0, 0xffffff8f, 0x10000}, 0x28) r8 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r8, 0x84, 0x72, &(0x7f0000000000), 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400001000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600800095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c25"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r12}, &(0x7f0000000b00), &(0x7f0000000ac0)=r9}, 0x20) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f00000000c0)=r13, 0x4) sendmsg$inet(r11, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 3.392608559s ago: executing program 0 (id=1494): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x100, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0xe4}, 0x0, 0x80000, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000300)={r0, &(0x7f0000000240), 0x0}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r2) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f7, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x9, 0x4000}, 0x0) recvmsg$unix(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x2062) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004091) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000022000000910a40000000000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x3, &(0x7f00000000c0)=""/3, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) write$cgroup_devices(r2, &(0x7f00000005c0)=ANY=[], 0xfffffeff) 2.999440248s ago: executing program 3 (id=1495): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x115901, 0x4, 0x6, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) socket$kcm(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20040) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0x20, &(0x7f0000000ac0)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000680)=""/151, 0x41000, 0x48, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610414000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r4 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r4) perf_event_open(0x0, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40002100) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0xd0e4, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0, 0x6}, 0x110c0, 0x1, 0x5, 0xb, 0xa, 0x904813a5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 2.687892103s ago: executing program 2 (id=1496): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x11}, [@generic={0x71, 0x1, 0x1, 0x3}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x20840, 0x2, 0xfffffffe}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000640)={0x0, r0}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1813167a24f1f7000000000000000000000000000009ddb4000000400000318d1fed5aa7cdb4d6e1"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r6, 0x107, 0xd, &(0x7f00000000c0), 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xc, &(0x7f0000000100)=r7, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000840)={r8, &(0x7f0000000800)="1851812e3a2affdeeba1afb00809c90237ac45b601a26fc321f1ce1fe9b64b"}, 0x20) sendmsg$inet(r6, &(0x7f0000000b80)={&(0x7f0000000880)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000000b40)=[{&(0x7f00000008c0)="ba0a8b8ec46f0271f4f09a0e73f7b2c072fefc3b2ba3b5aa153fd481340f7c23c934feb2997ec726cf6374070dfaec486a62efc9934a768160cf0c2c1015fb5207e63c57fef09ae1ca11a080eb77cde0e869d26143e628f94cb3d8ff50c6587a99154c9a51bff0e53e001866eaf6d7e861c4d8", 0x73}, {&(0x7f0000000940)="bf7c34514c2c2ca522616d361c6b38b1bb6eb9f537978af5fdc08da628b82beca6438de03aa2d01613a124f178f7fd11a03d576e769543e0dd025cd9f1ec5fbfb5b7998767695a648ce4f3bcc117f8bf00dd7944775c3fbdaa49ec6247472088", 0x60}, {&(0x7f00000009c0)="301acc73cb2cfc9d61f7751a8d5864a701f2fe07f9bfcb8055bd2eea01764fb5a91943f7ef0f8d630e3d52d98d419263ce314146a41fad5bcac12f0f66b75e43a46e3303f08b7194d116a406a5ce83144261036ef7b517b9acd00c3c05b3cb632dfee29a01411a906268b2a45e1d1e785c8aad1a7d8d0944", 0x78}, {&(0x7f0000000a40)="ba0ad1b890d1e3d57ea3048300688160fec0cfc479eda521df708de496511a2174e3c48ae83fba81c983cb4c2274db53e14857b3a831f1c28c253653ef8c237613056692501ced54ba119be1003bd50c4c1947825b5a708b110e993871bdd49b36cdc2e75e5cb5bee73d51bb7b9d32b9c6d564aeac534a8bf2bd28d6525ce328b86b41939ad39e476c5371ec6e513ffebcc6f5e2f9a51dd1d2a5d764730847215ec47625d8c92197891efdab796d98ba3015b9337b65a91217657a38e9e92d56a45abc7bbc63ac1de2f65527b624ccf8db541db901b2678f24d20f7428df0ea97df8", 0xe2}], 0x4}, 0x40046) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x19, &(0x7f0000000000)=r9, 0x8) sendmsg$tipc(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000040)="be981779f82d8f6b8cb3ec873b9bd16289bdd1b1479d4a96d3251103da514d1ce3de817782573764aa979900630a272d95645d443d2dd0524a647e471d42f06e00f9bda651ebf58773ea9aa815b9de439c9b64188f1f39f0a021d78fa8c31720fc4b68875ebbc16b7188c2fa9857ca5e42f6cec5188f9632edade0e8", 0x7c}, {&(0x7f00000001c0)="064592c156d934e32b08121fd2ce5be73bd9fff6e7fd503b376f0b74f55e732b506c1e2c4d4094744f7a922b1000a5769f046c622da476d80e515b7946304eb03f68a7e8c23f7cb803764edfa47d6a3f932cb0919403f15e5e20282aef551223f366e2eadd30e82f61b52e5ea6ff9df6d8bb", 0x72}, {&(0x7f00000002c0)="461c66788d4cea49b828f4ac5250029175f983730ce537fd4ab4ff569e543157e2a1591fe6c5fcc35148587f2f4fc106e86a27442eef70b229d974b3dde31b5571b39d479a4f2ce13e93770c2ac3c300dda5969e976a380958a4335044a3d398cd98406a5a319dd3706e10d4b519ebd67f215e3f7d97d8d01d03a083aac4f9a6538e23eb2b170212b412fdbeb33780089d589cdb2d450baf0d2d53c56866bd43a9ea67bff06cff5202fb2f083c889e20c7a25954514401233a0b287a7f6bbbe7344462ffb735bed1315baa421b5bbee00467751839fa5b1814b0df4f", 0xdc}, {&(0x7f00000003c0)="4adb803abb07997041bba5447b40d503b2eaba42464b9028801e7e7b0aed24444bc467c82f049c579b53225b977af9633d36713283e6a2de7aa9fcf013383939ed8d844b90f71bb7a73b0f294346aea6b6723a885458d31b1cc8fb4d6d524eb2f385043fbb572ebe01cbb8d5b375f46865193545369f11825f6748f09d52176508b49e78a5ae1cebce38dc21f1e85c1ccbc65d04cc1d47b8d86f42d0999286cb3273cab732658e9ab3216b2084612b3b7cfe8bf2cd83c517651cdb409322117cbe356eabe640ab8c", 0xc8}], 0x4, &(0x7f0000000500)="54bf260d0e2f9e72dba98b15150ce03fcca4a0a02d3f0092fa7629d4a9e6522b25c6e8f31aa2f6afd4877a305628fbbaed39e920d6709a9a63c619e2020e86b724e17dc4a17ebeab43cd276b3f9da3e01d7b36bc010225f2b252c08587f349cee828197185df39b642c12fac5841cac26004dc2608b40f8083df60e90fc9593b59bb20fb78694587c2ded6bf34127ba356f4d842a9a8d198a87d82", 0x9b, 0x20000000}, 0x40480c4) r10 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) r12 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={0xffffffffffffffff}, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000740)) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r12) r13 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r13, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x10, @local}, 0x10, &(0x7f0000000100)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1) sendmsg$inet(r13, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000001940)='{', 0xffe0}], 0x1}, 0x80d1) 2.579593168s ago: executing program 0 (id=1498): bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r4, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000740)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000800)=[0x0, 0x0], 0x0, 0x51, &(0x7f0000000840)=[{}], 0x8, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x63, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000d80)={0xffffffffffffffff, 0x20, &(0x7f0000000d40)={&(0x7f0000000b80)=""/169, 0xa9, 0x0, &(0x7f0000000c40)=""/209, 0xd1}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa8}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000280)='GPL\x00', 0x101, 0x8d, &(0x7f0000000680)=""/141, 0x40f00, 0x26, '\x00', r5, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000b40)={0x5, 0xb, 0x3, 0xff}, 0x10, r6, 0xffffffffffffffff, 0x2, &(0x7f0000000e80), &(0x7f0000000ec0)=[{0x4, 0x5, 0x7, 0x6}, {0x0, 0x3, 0x3, 0x3}], 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r3, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000000c0)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r9}, &(0x7f0000000080), &(0x7f0000000200)=r10}, 0x20) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000dc0), 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000e80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000e00), &(0x7f0000000e40)='%+9llu \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x18, 0x2e, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x30, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x2, 0x3, 0x2, 0x10001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000fc0)=[r11, r12], &(0x7f0000001000)=[{0x5, 0x4, 0x2, 0x7}, {0x3, 0x2, 0xf, 0xc}, {0x1, 0x4, 0xa, 0x2}], 0x10, 0x9}, 0x94) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r8, 0x0, 0x31) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r13, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 2.464368243s ago: executing program 1 (id=1499): r0 = socket$kcm(0x29, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x88, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 2.30890411s ago: executing program 3 (id=1500): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x20840, 0x2, 0xfffffffe}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.net/syz1\x00', 0x200002, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0xac, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x2, 0x3}, 0x110161, 0x4, 0x0, 0x1, 0x40000000, 0x0, 0x1, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) perf_event_open$cgroup(&(0x7f00000004c0)={0x0, 0x80, 0xd, 0x8, 0x8, 0x7, 0x0, 0x8, 0x10140, 0x5, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000480), 0x2}, 0x2000, 0x2, 0x7fffffff, 0x3, 0x10001, 0x7, 0x1, 0x0, 0x1, 0x0, 0xca86}, r3, 0x10, r4, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f00000017c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x8, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r2) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000005c0)=@o_path={&(0x7f0000000580)='./file0\x00', r5, 0x4000, r5}, 0x18) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x19, &(0x7f0000000000)=r6, 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) write$cgroup_devices(r8, &(0x7f0000000340)={'a', ' *:* ', 'm\x00'}, 0x8) r9 = socket$kcm(0x10, 0x2, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="12000000040000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r11}, &(0x7f0000000040), &(0x7f0000000140)=r10}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r11}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r10}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r11, &(0x7f0000000040)}, 0x20) sendmsg$kcm(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014000089bbc7a46e363e4a79e37988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0f56a20ff27fdf00", 0x89}], 0x1}, 0x0) 2.187522286s ago: executing program 2 (id=1501): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xc, 0x830d}, 0x0, 0x2, 0x1, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x5, 0x0, 0x0, 0x0, 0x5, 0x62020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x48}, 0x2002) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000003400000000000000008500000053000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8880, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x1c108, 0x3, 0x3, 0x6, 0xa, 0x4, 0x2, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x10) socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(r5, &(0x7f0000000480)={&(0x7f00000002c0)=@nl, 0x80, 0x0}, 0x8400) socketpair$unix(0x1, 0x1, 0x0, 0x0) 2.182266907s ago: executing program 1 (id=1502): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x5, 0x4, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0xe92}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac341400000000001c00000000000000000000004700000044aa00210a9a01"], 0x230}, 0x44050) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 1.737654008s ago: executing program 3 (id=1503): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0x80}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0xb, 0x42, 0x40, 0x42}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000880), 0x1006, r0, 0x0, 0xd88d02a0}, 0x38) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r0, &(0x7f0000000100), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000000000071120e000000000095df2664b88a59e0c138983db27a8e9c51e7c8da900a6752ef84f99e76d886ab0edacee6d2a3fb1c61b7a3e9d2a3fac13886a40e2a714b6a8726bef265d8f6170551544388e16cd013289c0d256f35"], &(0x7f0000000040)='GPL\x00', 0x0, 0xffffffffffffff57, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.363664075s ago: executing program 1 (id=1504): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89fa, &(0x7f0000000900)={'sit0\x00', @random="0000230c1100"}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffdfffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x448e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x9020, 0x10000, 0x8, 0x1, 0x9, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x48) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000100), 0x0}, 0x20) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x14, &(0x7f0000000440), 0x3d) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000200000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b"], 0xfe33) socket$kcm(0x2, 0x5, 0x84) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0xb25, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x1, 0x9e4, 0x5, 0xfc, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x400, 0x1}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) close(0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) (async) socketpair(0x1, 0x1, 0x1, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 1.286817529s ago: executing program 3 (id=1505): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015", 0x1f}], 0x1}, 0x4) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015", 0x1f}], 0x1}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb014018000000000000000c000000a424a1610c"], 0x0, 0x26}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d800000024008106", 0x8}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='freezer.state\x00', 0x0, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000040)='freezer.state\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a"], 0xfe33) 1.210568002s ago: executing program 0 (id=1506): socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x9, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000002009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x800, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x10f, 0x8a, &(0x7f00000001c0), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000690000000000ce033b196df861ea00", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r4 = socket$kcm(0x2, 0x2, 0x73) sendmsg(r4, &(0x7f00000006c0)={&(0x7f0000000180)=@phonet={0x23, 0xf, 0x4}, 0x80, 0x0}, 0x4008844) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000009287000000000000000000001811000082f8ae46a55db096422878a17ca1e13e1881e671d794383537de92a8e84daa953223b2ba4ee5dc1d875d8e0635a692a5b06964e94cf7cc6f7ef26fefb35bc351554f7add319c4c40feecf82837f875c5055a67ba2fc0ff95ec5a6f39846050ea910f04448b6cf10a5e8137a005298d660730b66abd6c55dbab6efe0ea5dd542fa86c1adaae290dc0e62dd6fb729dc21d12b3f8944884353ebdd5ef11755476e528f5b8af7758ef9d3b10610eadfa009c58b12d55d7dc24fbf2ca71d4fb0f7c487e", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0xdd) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) 1.147848405s ago: executing program 2 (id=1507): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b030000000000000063"], 0x0, 0x52}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x104, 0x1108, 0x9, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='GPL\x00', 0xa}, 0x94) socketpair(0xa, 0x804, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)=""/57, 0x39}], 0x1}, 0x10040) 1.106169807s ago: executing program 3 (id=1508): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x26ea}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0xe, &(0x7f0000000b40)=ANY=[@ANYRESHEX=r0], &(0x7f0000000340)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = socket$kcm(0x11, 0xa, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f00000011c0)='GPL\x00', 0x1, 0xff3, &(0x7f0000001200)=""/4083, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x11, 0x2, 0x300) sendmsg$kcm(r4, &(0x7f00000037c0)={&(0x7f0000001000)=@qipcrtr={0x2a, 0x4, 0x7ffe}, 0x80, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="100000000000000001000000020000001000000000000048f74b0e000701000000000020"], 0x20}, 0x20000000) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002540)}, 0x0) sendmsg$inet(r2, 0x0, 0xe900) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000c40), 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xfff) openat$cgroup_ro(r3, &(0x7f0000000100)='blkio.bfq.time\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x4, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e00000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB="0100003fffffe90100080000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xd, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r6}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r7}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r9, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r9, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x24000004) sendmsg$inet(r9, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 1.05819776s ago: executing program 1 (id=1509): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x4, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_config_ext={0x3, 0x6c99e481}, 0x100001, 0xca, 0x5, 0x5, 0xd12, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x2000000000000000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000010040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa108000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000180)='syzkaller\x00'}, 0x90) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xc, 0xff}, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249f21c6eee84309e7a23c19a394830f2539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bfb1c0e6b1244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbb888b0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f94479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b844139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323478a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526894aa7fe5e68949a3b304723177d356c4604bca492ecec37e83efceefd78a2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bd43b5b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebcef5af469abe753314fae31a09c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa7000008000000000000117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d34264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5a71e0d7696caba172745c7dd919ffb631820420b75b6522c0e21c882c66f4f25ffb6d95e07e068000000000000eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6f0100000000000000f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb3bdc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d547bdfba2e09d24d117ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c3868db06fd892d68a547477f8ef686ff0dba7b8c18c94d5a89b0567a851750a35d9cc2217db890d89385fcaa00f0f2e524672e6f4c8bedfd5da5b157709b8265cf511dc5846ab1d85916c4a6b2d1b408575982e11230cbac0a9c6eaa03c945645581f678403c2a936c53ae72940aa92bcf22b82c6bc028e0acdddf9fef595f0f7a9f80c0e4c659ced769ec463d26a81e468846761a8e1efd6a031ab7adc8665e267be0065cc315aa23012423ec8b8492d9b50fa4d8c5891959b761eec6dc988532782fda13239c948e27853606e26225c796b79cc04f3d1a5a13000000001e301d82a27010d3ac6119d2b12caf282413672d20c852c50084d7b2d50754775ed63bc18023c31351af76e24788d96103455693b34e09a163a9f613a7e5530222cebd7fa0fbff32dc98088f9fab33648cc38e87dd2dd6ee157f5f018702696915661715c979b7796d4f101a257688af7c148e8615c938c4ca8a69f6fc585ec1dd1857a501f90b161eff23181a11a2b0da4c58d459cbf9db"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r2], 0x9a) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x10, 0x2, 0xff, 0x0, 0xfffffffffffffffd, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={0x0, 0x1}, 0x8d4a4, 0xca, 0xfffffffd, 0x5, 0xdf1e, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7) r7 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x71, &(0x7f0000000000)=r10, 0x8) recvmsg$unix(r4, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) r12 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r13) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[@ANYRES8=r6, @ANYBLOB="3eca", @ANYRES8=r4], 0x9a) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff23, 0x0, 0x0, 0x0}, 0x94) 694.985997ms ago: executing program 2 (id=1510): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b35d25a806c8c6f94f90c24fc60", 0x14}], 0x1, 0x0, 0x20}, 0x48000) 448.259909ms ago: executing program 2 (id=1511): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4084, 0xff4}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback=0x7f000082}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0x34000}], 0x1}, 0x40) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x0, 0x0, 0x0, 0x0, 0xf2ee, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x2, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000080000000100000004000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000001999521ea9d519a5dae24622c8b3adf78790b0d61b3f4aa85552c888d13571f99813b4a7978025a666c41db4ca2bfd67d8c99aa0bad0e9043b5fe64ae5a1dd2fca3827fa01b0e7d45c00329cb3bb43b87e7a245fe5a8b27e721211e32d01d9c05d0895f36d136656d412774e3c868abe8de2b51de8ffe1dd1dd3840f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x5, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd030000000000008500000033"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1e) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394", 0xf}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xa5ba2b88, &(0x7f0000000080)=[{&(0x7f00000004c0)="e03f03003b000b05d25a806c8c6394f901800000000000000b020a50053582c137153e37000c0280fc80ecd8a3c138d90b1000f80b", 0x33fe0}], 0x1}, 0x40000) 341.718974ms ago: executing program 1 (id=1512): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0x20000000000000c2, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5a1c, 0x40020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) r4 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0xfdef) recvmsg(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001500)=""/4098, 0x1002}], 0x1}, 0x101a0) close(r3) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB='\n\x00\x00\x00( \x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="494622d02c635f52ebaff7b40d069cbd06b455eece88970174baf3d205810afd4db8417e4627774d6ad98848de39c2f08d4cde350c59485b036c8465e13bf61d87f719ed2c175ec58a14fad3d9046b36ba02f556c01d1c6caf4edd03c2ab40333dfac9365a582d244215b5d7f6c30f8e0380d35158d3d3dc67a6411c40d93cec545e77416b91fe1f4b1f294e2d167f27", @ANYRES64=0x0], 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x4, @perf_bp={0x0, 0x3}, 0x828, 0x0, 0x0, 0x7, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 63.615737ms ago: executing program 0 (id=1513): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x7, 0x0, 0x0, 0xe, 0x5, 0x2}, @fwd={0xd}, @ptr={0x3, 0x0, 0x0, 0x2, 0x1}, @func={0xc, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x5f, 0x5f, 0x2e]}}, &(0x7f0000000600)=""/140, 0x51, 0x8c, 0x0, 0x8, 0x10000}, 0x28) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r0}, 0x50) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002400)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000006800000068000000090000000c00000000000001000000005f007d0102000000000000020500000005000000030000054d8200000600000003000000070000000f000000030000f207000000090000000000000000040000000000000000000a00000000070000000000000e01000000eeffffffff5e2e30305f2e1700"], &(0x7f0000001400)=""/4096, 0x89, 0x1000, 0x1, 0x3, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000041000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca920000000000035090100000000009500000000000000bf9800000000000056080000000000008500000007000800b7000000000000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000300)={'ip_vti0\x00', @broadcast}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000300f7ffffffffff0100000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000000400000004000000020000"], 0x50) (async) perf_event_open$cgroup(&(0x7f00000000c0)={0x5, 0x80, 0x3, 0xb, 0x2, 0x7, 0x0, 0x39, 0x9292, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x592, 0x2, @perf_config_ext={0xa6d}, 0x101020, 0x8, 0x480b, 0x6, 0x7, 0x8001, 0x4, 0x0, 0xfffffff9, 0x0, 0x9}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8) (async) r4 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe}, 0x0, 0x0, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='cpu~\"\"\nt\x00') (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x2, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x29) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123900000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800d00000003600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000005000000010001000a00afcb25c4d627079d178e0914050001000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500000000000018490000fe"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000019"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) 38.746918ms ago: executing program 3 (id=1514): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001140)='memory.events\x00', 0x0, 0x0) recvmsg$unix(r2, 0x0, 0x10060) close(0xffffffffffffffff) socket$kcm(0x29, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0/file0\x00', 0x116) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000005c0), 0x12) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20a02, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r5, 0x400454c9, 0xffffffffffffffff) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40107446, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="5c00000014006b02c84e21100af32c6e0a0675f8d34460400000000100005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132be471b93c91b5d7870743719b4b53cf2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000040)=0x1) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xf6, 0x1}]}) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000000000000290000003e"], 0x18}, 0xc) 2.794879ms ago: executing program 1 (id=1515): perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x5, 0x90, 0x7, 0x7f, 0x0, 0xfffffffffffffff6, 0x28010, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0xff, 0x5}, 0x508, 0x6, 0x3d, 0x9, 0xffffffff, 0x1, 0x1, 0x0, 0x3d2af391, 0x0, 0xf}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) (async, rerun: 32) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1e032800008c71ef288563"], 0xffdd) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) (async) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[], 0xffdd) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r3, &(0x7f0000001780)={&(0x7f00000003c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x42, 0x3}, 0x2}}, 0x80, 0x0}, 0x24008010) 0s ago: executing program 2 (id=1516): socket$kcm(0x29, 0x2, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) (async) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000001c0), &(0x7f0000000000), 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000001c0), &(0x7f0000000000), 0x2}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x58121, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x101084, 0x5, 0x0, 0x5, 0x7, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x58121, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x101084, 0x5, 0x0, 0x5, 0x7, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000f9ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000070000000600000000000000", @ANYRES32, @ANYBLOB=' \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0xd7, 0x0, 0x0, 0x7, 0x10000}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r1, &(0x7f0000000740)={&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee01, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38, 0x800}, 0x40800) socket$kcm(0x2, 0x1000000000000002, 0x0) (async) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782ca9fb9040a1d08020a000000040000a118000200fe80000000000e1208000f0100810401a80016eaa40006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775570d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d", 0xca}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x10, 0x3, 0x10) (async) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188005ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x94, 0x0, 0x0, 0x0, 0x11, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) close(0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xa, 0x8421e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x4, 0x6020005, 0xb, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0xb) socket$kcm(0xf, 0x3, 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.40' (ED25519) to the list of known hosts. [ 78.209973][ T5763] cgroup: Unknown subsys name 'net' [ 78.351973][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.012652][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.572981][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.583913][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.591550][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.599777][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.608679][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.618085][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.626090][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.690344][ T5087] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.699871][ T5087] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.708513][ T5087] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.716474][ T5087] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.724160][ T5087] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.737057][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.746675][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.771316][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.784442][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.799642][ T5778] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.807164][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.839676][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.848075][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.857435][ T5778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.870640][ T5778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.880101][ T5778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.894004][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.221783][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 82.370520][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 82.422644][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 82.517602][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 82.541825][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.549697][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.557462][ T5776] bridge_slave_0: entered allmulticast mode [ 82.565317][ T5776] bridge_slave_0: entered promiscuous mode [ 82.581759][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.589239][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.599350][ T5776] bridge_slave_1: entered allmulticast mode [ 82.606739][ T5776] bridge_slave_1: entered promiscuous mode [ 82.690630][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.698206][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.705745][ T5783] bridge_slave_0: entered allmulticast mode [ 82.713384][ T5783] bridge_slave_0: entered promiscuous mode [ 82.750925][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.758233][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.765808][ T5779] bridge_slave_0: entered allmulticast mode [ 82.773260][ T5779] bridge_slave_0: entered promiscuous mode [ 82.780774][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.791163][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.798441][ T5783] bridge_slave_1: entered allmulticast mode [ 82.806176][ T5783] bridge_slave_1: entered promiscuous mode [ 82.816402][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.831352][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.838657][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.845983][ T5779] bridge_slave_1: entered allmulticast mode [ 82.853083][ T5779] bridge_slave_1: entered promiscuous mode [ 82.874563][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.938738][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.971718][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.984683][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.995921][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.011244][ T5776] team0: Port device team_slave_0 added [ 83.041488][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.049359][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.056823][ T5784] bridge_slave_0: entered allmulticast mode [ 83.064408][ T5784] bridge_slave_0: entered promiscuous mode [ 83.097853][ T5776] team0: Port device team_slave_1 added [ 83.122445][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.131135][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.138751][ T5784] bridge_slave_1: entered allmulticast mode [ 83.146217][ T5784] bridge_slave_1: entered promiscuous mode [ 83.168907][ T5783] team0: Port device team_slave_0 added [ 83.191572][ T5779] team0: Port device team_slave_0 added [ 83.219303][ T5783] team0: Port device team_slave_1 added [ 83.236892][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.246891][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.273339][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.287289][ T5779] team0: Port device team_slave_1 added [ 83.306534][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.329758][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.339663][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.366380][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.400006][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.409926][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.417513][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.444529][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.458905][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.466418][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.493039][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.505666][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.512655][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.539181][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.579776][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.587028][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.613983][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.647700][ T5784] team0: Port device team_slave_0 added [ 83.679066][ T5784] team0: Port device team_slave_1 added [ 83.685451][ T5778] Bluetooth: hci0: command tx timeout [ 83.730600][ T5776] hsr_slave_0: entered promiscuous mode [ 83.738769][ T5776] hsr_slave_1: entered promiscuous mode [ 83.761825][ T5783] hsr_slave_0: entered promiscuous mode [ 83.768667][ T5783] hsr_slave_1: entered promiscuous mode [ 83.775213][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.782875][ T5778] Bluetooth: hci1: command tx timeout [ 83.789167][ T5783] Cannot create hsr debugfs directory [ 83.810252][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.818068][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.843811][ T5778] Bluetooth: hci2: command tx timeout [ 83.845843][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.863415][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.870407][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.896942][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.924720][ T5778] Bluetooth: hci3: command tx timeout [ 83.946987][ T5779] hsr_slave_0: entered promiscuous mode [ 83.953807][ T5779] hsr_slave_1: entered promiscuous mode [ 83.960275][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.968143][ T5779] Cannot create hsr debugfs directory [ 84.051520][ T5784] hsr_slave_0: entered promiscuous mode [ 84.058570][ T5784] hsr_slave_1: entered promiscuous mode [ 84.065364][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.072984][ T5784] Cannot create hsr debugfs directory [ 84.490435][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.507800][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.531200][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.542109][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.595882][ T5783] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.613869][ T5783] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.636522][ T5783] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.648537][ T5783] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.751826][ T5779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.764565][ T5779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.777575][ T5779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.789275][ T5779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.914179][ T5784] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.927035][ T5784] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.955883][ T5784] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.968568][ T5784] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.006988][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.054145][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.085417][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.110094][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.127261][ T2943] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.134634][ T2943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.146345][ T2943] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.153664][ T2943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.176098][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.205345][ T2943] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.212529][ T2943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.223473][ T2943] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.230588][ T2943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.279902][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.316871][ T2943] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.324092][ T2943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.376676][ T5783] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.390832][ T5783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.451874][ T2943] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.459124][ T2943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.509580][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.598268][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.681994][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.689235][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.705515][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.712695][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.763541][ T5778] Bluetooth: hci0: command tx timeout [ 85.844954][ T5778] Bluetooth: hci1: command tx timeout [ 85.912022][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.923970][ T5778] Bluetooth: hci2: command tx timeout [ 85.979717][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.005459][ T5778] Bluetooth: hci3: command tx timeout [ 86.141067][ T5783] veth0_vlan: entered promiscuous mode [ 86.214773][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.224288][ T5783] veth1_vlan: entered promiscuous mode [ 86.267750][ T5776] veth0_vlan: entered promiscuous mode [ 86.314161][ T5776] veth1_vlan: entered promiscuous mode [ 86.354551][ T5783] veth0_macvtap: entered promiscuous mode [ 86.372957][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.388101][ T5783] veth1_macvtap: entered promiscuous mode [ 86.429492][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.442606][ T5779] veth0_vlan: entered promiscuous mode [ 86.461005][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.475324][ T5783] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.485433][ T5783] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.501439][ T5783] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.510253][ T5783] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.528805][ T5776] veth0_macvtap: entered promiscuous mode [ 86.551179][ T5779] veth1_vlan: entered promiscuous mode [ 86.594433][ T5776] veth1_macvtap: entered promiscuous mode [ 86.681350][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.699064][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.711919][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.727854][ T5784] veth0_vlan: entered promiscuous mode [ 86.759975][ T5779] veth0_macvtap: entered promiscuous mode [ 86.771248][ T5779] veth1_macvtap: entered promiscuous mode [ 86.783029][ T5784] veth1_vlan: entered promiscuous mode [ 86.790302][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.805655][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.818654][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.837502][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.858247][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.874931][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.886459][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.898841][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.907800][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.919539][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.931491][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.941591][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.952271][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.971562][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.011089][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.025297][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.035492][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.046808][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.059514][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.104393][ T2970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.112311][ T2970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.136558][ T5779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.151905][ T5779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.161754][ T5779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.176723][ T5779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.251601][ T5784] veth0_macvtap: entered promiscuous mode [ 87.319191][ T5784] veth1_macvtap: entered promiscuous mode [ 87.480920][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.501933][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.542914][ T5834] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.547750][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.572770][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.583611][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.596135][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.607795][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.618529][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.635515][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.700221][ T2943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.700898][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.713221][ T2943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.734112][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.748356][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.762337][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.791906][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.808699][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.820792][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.848715][ T5778] Bluetooth: hci0: command tx timeout [ 87.901310][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.907008][ T5784] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.920573][ T5784] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.930424][ T5778] Bluetooth: hci1: command tx timeout [ 87.937008][ T5784] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.947119][ T5784] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.959026][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.004799][ T5778] Bluetooth: hci2: command tx timeout [ 88.062120][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.083605][ T5778] Bluetooth: hci3: command tx timeout [ 88.091797][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.233140][ C0] hrtimer: interrupt took 46541 ns [ 88.293504][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.331936][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.536111][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.553783][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.612637][ T5842] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1'. [ 88.806688][ T5845] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 89.226511][ T5848] netlink: 'syz.1.2': attribute type 7 has an invalid length. [ 89.252734][ T5848] netlink: 'syz.1.2': attribute type 6 has an invalid length. [ 89.414144][ T5856] netlink: 'syz.3.8': attribute type 41 has an invalid length. [ 89.493357][ T5842] syz.0.1 (5842) used greatest stack depth: 20904 bytes left [ 89.594698][ T5859] netlink: 10 bytes leftover after parsing attributes in process `syz.2.11'. [ 89.675463][ T5867] netlink: 'syz.1.9': attribute type 49 has an invalid length. [ 89.731079][ T5867] netlink: 'syz.1.9': attribute type 49 has an invalid length. [ 89.925289][ T5778] Bluetooth: hci0: command tx timeout [ 90.005166][ T5778] Bluetooth: hci1: command tx timeout [ 90.086358][ T5778] Bluetooth: hci2: command tx timeout [ 90.166630][ T5778] Bluetooth: hci3: command tx timeout [ 90.833541][ T5891] netlink: 'syz.2.17': attribute type 7 has an invalid length. [ 90.843589][ T5891] netlink: 'syz.2.17': attribute type 6 has an invalid length. [ 90.932201][ T5894] netlink: 'syz.0.18': attribute type 29 has an invalid length. [ 90.940758][ T5895] netlink: 128 bytes leftover after parsing attributes in process `syz.3.20'. [ 90.970761][ T5895] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 91.145861][ T5894] netlink: 'syz.0.18': attribute type 29 has an invalid length. [ 91.465853][ T5897] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.19'. [ 91.691250][ T5909] netlink: 'syz.0.22': attribute type 3 has an invalid length. [ 91.755864][ T5909] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.22'. [ 91.814921][ T5910] Zero length message leads to an empty skb [ 91.864876][ T5897] syz.1.19 (5897) used greatest stack depth: 20648 bytes left [ 92.054526][ T5922] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.27'. [ 92.096957][ T789] cfg80211: failed to load regulatory.db [ 92.184403][ T5920] delete_channel: no stack [ 92.410318][ T5935] netlink: 192 bytes leftover after parsing attributes in process `syz.2.32'. [ 92.590165][ T5941] netlink: 60 bytes leftover after parsing attributes in process `syz.2.34'. [ 92.662484][ T5941] netlink: 60 bytes leftover after parsing attributes in process `syz.2.34'. [ 92.675751][ T5938] netlink: 60 bytes leftover after parsing attributes in process `syz.2.34'. [ 92.740280][ T5927] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 94.596333][ T5974] __nla_validate_parse: 2 callbacks suppressed [ 94.596352][ T5974] netlink: 7994 bytes leftover after parsing attributes in process `syz.1.39'. [ 94.894146][ T5983] Illegal XDP return value 4294967294 on prog (id 34) dev N/A, expect packet loss! [ 95.476139][ T5996] syzkaller0: entered promiscuous mode [ 95.519646][ T5996] syzkaller0: entered allmulticast mode [ 96.021136][ T6008] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.50'. [ 97.876677][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 100.639227][ T6055] validate_nla: 4 callbacks suppressed [ 100.639244][ T6055] netlink: 'syz.2.61': attribute type 21 has an invalid length. [ 100.683501][ T6060] netlink: 132 bytes leftover after parsing attributes in process `syz.2.61'. [ 100.710275][ T6064] netlink: 'syz.3.62': attribute type 14 has an invalid length. [ 100.736880][ T6064] netlink: 164 bytes leftover after parsing attributes in process `syz.3.62'. [ 100.912755][ T6062] syzkaller0: entered promiscuous mode [ 100.922030][ T6062] syzkaller0: entered allmulticast mode [ 101.447399][ T6075] netlink: 60 bytes leftover after parsing attributes in process `syz.1.66'. [ 102.721121][ T6075] netlink: 60 bytes leftover after parsing attributes in process `syz.1.66'. [ 102.940575][ T6078] netlink: 'syz.1.67': attribute type 3 has an invalid length. [ 102.983391][ T6078] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.67'. [ 103.160809][ T6087] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.69'. [ 103.200272][ T6087] netlink: 6320 bytes leftover after parsing attributes in process `syz.3.69'. [ 103.232095][ T6087] tc_dump_action: action bad kind [ 103.522290][ T6087] netlink: 'syz.3.69': attribute type 28 has an invalid length. [ 103.593283][ T6093] netlink: 60 bytes leftover after parsing attributes in process `syz.2.71'. [ 103.602218][ T6093] netlink: 60 bytes leftover after parsing attributes in process `syz.2.71'. [ 103.643541][ T6093] netlink: 60 bytes leftover after parsing attributes in process `syz.2.71'. [ 106.752823][ T6105] netlink: 'syz.3.75': attribute type 1 has an invalid length. [ 106.793334][ T6103] netlink: 'syz.2.74': attribute type 27 has an invalid length. [ 106.810903][ T6106] netlink: 'syz.2.74': attribute type 10 has an invalid length. [ 106.835457][ T6106] geneve0: entered promiscuous mode [ 106.862212][ T6106] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 106.899686][ T6108] netlink: 'syz.3.75': attribute type 7 has an invalid length. [ 108.382792][ T6161] netlink: 'syz.1.88': attribute type 21 has an invalid length. [ 108.471800][ T6161] warning: `syz.1.88' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 109.082622][ T6161] __nla_validate_parse: 65 callbacks suppressed [ 109.082645][ T6161] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.88'. [ 109.848777][ T6177] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.92'. [ 110.670920][ T6197] netlink: 36 bytes leftover after parsing attributes in process `syz.0.99'. [ 110.691749][ T6197] netlink: 'syz.0.99': attribute type 1 has an invalid length. [ 110.701428][ T6197] netlink: 6 bytes leftover after parsing attributes in process `syz.0.99'. [ 110.752719][ T6193] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 110.773355][ T6193] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 112.592234][ T6235] netlink: 132 bytes leftover after parsing attributes in process `syz.3.104'. [ 112.610425][ T6253] netlink: 132 bytes leftover after parsing attributes in process `syz.3.104'. [ 112.699159][ T6276] mac80211_hwsim hwsim3 .3ãc¤±: renamed from wlan1 (while UP) [ 113.108994][ T6287] can: request_module (can-proto-0) failed. [ 113.150927][ T6284] can: request_module (can-proto-0) failed. [ 113.161003][ T6290] netlink: 'syz.3.108': attribute type 33 has an invalid length. [ 113.170264][ T6290] netlink: 152 bytes leftover after parsing attributes in process `syz.3.108'. [ 113.180276][ T6290] `: renamed from ip6tnl0 (while UP) [ 113.194473][ T6290] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 113.839348][ T6323] netlink: 'syz.3.119': attribute type 3 has an invalid length. [ 113.851027][ T6323] netlink: 132 bytes leftover after parsing attributes in process `syz.3.119'. [ 113.882487][ T6306] syzkaller0: entered promiscuous mode [ 113.891785][ T6306] syzkaller0: entered allmulticast mode [ 113.903345][ T6321] netlink: 'syz.2.118': attribute type 1 has an invalid length. [ 114.238158][ T6330] netlink: zone id is out of range [ 114.264665][ T6330] netlink: set zone limit has 8 unknown bytes [ 114.348743][ T6330] netlink: 143044 bytes leftover after parsing attributes in process `syz.0.121'. [ 114.388161][ T6330] netlink: zone id is out of range [ 114.447669][ T6330] netlink: zone id is out of range [ 114.465456][ T6330] netlink: zone id is out of range [ 114.501114][ T6330] netlink: zone id is out of range [ 114.516019][ T6330] netlink: zone id is out of range [ 114.566326][ T6330] netlink: zone id is out of range [ 114.592563][ T6330] netlink: zone id is out of range [ 114.897310][ T6342] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.123'. [ 116.301142][ T6331] netlink: 'syz.2.118': attribute type 7 has an invalid length. [ 116.321681][ T6345] netlink: 'syz.0.124': attribute type 2 has an invalid length. [ 116.357365][ T6345] netlink: 'syz.0.124': attribute type 8 has an invalid length. [ 116.375054][ T6345] netlink: 132 bytes leftover after parsing attributes in process `syz.0.124'. [ 116.583426][ T6347] netlink: 15179 bytes leftover after parsing attributes in process `syz.3.125'. [ 116.750769][ T6351] syzkaller0: entered promiscuous mode [ 116.756437][ T6351] syzkaller0: entered allmulticast mode [ 122.769175][ T6383] netlink: 'syz.1.135': attribute type 1 has an invalid length. [ 123.144268][ T6403] netlink: 'syz.1.135': attribute type 7 has an invalid length. [ 123.696881][ T6414] netlink: 'syz.2.143': attribute type 12 has an invalid length. [ 123.717716][ T6414] netlink: 132 bytes leftover after parsing attributes in process `syz.2.143'. [ 125.500556][ T6440] netlink: 132 bytes leftover after parsing attributes in process `syz.2.149'. [ 127.044382][ T6459] netlink: 'syz.3.156': attribute type 2 has an invalid length. [ 127.120445][ T6459] netlink: 132 bytes leftover after parsing attributes in process `syz.3.156'. [ 127.157627][ T6459] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.156'. [ 127.206104][ T6459] netlink: 'syz.3.156': attribute type 10 has an invalid length. [ 127.216636][ T6465] net_ratelimit: 394 callbacks suppressed [ 127.216653][ T6465] netlink: zone id is out of range [ 127.247324][ T6465] netlink: set zone limit has 8 unknown bytes [ 127.322223][ T6465] netlink: 143044 bytes leftover after parsing attributes in process `syz.2.157'. [ 127.334289][ T6459] syz_tun: entered promiscuous mode [ 127.369626][ T6465] netlink: zone id is out of range [ 127.435015][ T6465] netlink: zone id is out of range [ 127.466504][ T6465] netlink: zone id is out of range [ 127.472113][ T6465] netlink: zone id is out of range [ 127.503704][ T6459] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 127.540873][ T6465] netlink: zone id is out of range [ 127.549712][ T6465] netlink: zone id is out of range [ 127.581791][ T6465] netlink: zone id is out of range [ 127.594067][ T6465] netlink: zone id is out of range [ 127.712720][ T6459] syz.3.156 (6459) used greatest stack depth: 20328 bytes left [ 128.075600][ T6474] netlink: 'syz.0.160': attribute type 29 has an invalid length. [ 128.111346][ T6474] netlink: 'syz.0.160': attribute type 29 has an invalid length. [ 128.195105][ T6480] netlink: 156 bytes leftover after parsing attributes in process `syz.1.163'. [ 128.895356][ T5778] Bluetooth: hci2: ISO packet for unknown connection handle 3847 [ 129.079308][ T6499] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.168'. [ 129.091904][ T6500] netlink: 14 bytes leftover after parsing attributes in process `syz.3.167'. [ 129.239138][ T6500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.291838][ T6500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.372918][ T6500] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 129.437042][ T6500] bond0 (unregistering): Released all slaves [ 129.771307][ T6521] netlink: 'syz.1.171': attribute type 16 has an invalid length. [ 129.805447][ T6521] netlink: 152 bytes leftover after parsing attributes in process `syz.1.171'. [ 130.540125][ T6535] syzkaller0: entered promiscuous mode [ 130.572537][ T6535] syzkaller0: entered allmulticast mode [ 132.399876][ T6538] syzkaller0: entered promiscuous mode [ 132.405663][ T6538] syzkaller0: entered allmulticast mode [ 133.053996][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.060828][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.198325][ T6569] syz.3.185[6569] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.198516][ T6569] syz.3.185[6569] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.655694][ T6579] netlink: 'syz.3.186': attribute type 12 has an invalid length. [ 134.697410][ T6579] netlink: 132 bytes leftover after parsing attributes in process `syz.3.186'. [ 135.783440][ T6583] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.794511][ T6583] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.809050][ T6583] bridge0: entered allmulticast mode [ 135.923846][ T6587] bridge_slave_1: left allmulticast mode [ 135.943474][ T6587] bridge_slave_1: left promiscuous mode [ 135.950576][ T6587] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.996569][ T6587] bridge_slave_0: left allmulticast mode [ 136.014297][ T6587] bridge_slave_0: left promiscuous mode [ 136.029717][ T6587] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.457060][ T6641] netlink: 'syz.2.201': attribute type 10 has an invalid length. [ 141.132271][ T6641] team0: Port device netdevsim0 added [ 141.213969][ T6637] netlink: 'syz.2.201': attribute type 10 has an invalid length. [ 141.226565][ T6653] netlink: 'syz.0.200': attribute type 1 has an invalid length. [ 141.257231][ T6653] netlink: 'syz.0.200': attribute type 2 has an invalid length. [ 141.290262][ T6637] team0: Port device netdevsim0 removed [ 141.293371][ T6653] netlink: 'syz.0.200': attribute type 2 has an invalid length. [ 141.314436][ T6653] netlink: 'syz.0.200': attribute type 3 has an invalid length. [ 141.318026][ T6637] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 141.322894][ T6653] netlink: 'syz.0.200': attribute type 4 has an invalid length. [ 141.344045][ T6653] netlink: 'syz.0.200': attribute type 5 has an invalid length. [ 141.360627][ T6653] netlink: 'syz.0.200': attribute type 6 has an invalid length. [ 141.370830][ T6653] netlink: 'syz.0.200': attribute type 7 has an invalid length. [ 141.379057][ T6653] netlink: 126304 bytes leftover after parsing attributes in process `syz.0.200'. [ 141.415391][ T6656] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.203'. [ 144.257209][ T6719] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 145.046993][ T6728] netlink: 3 bytes leftover after parsing attributes in process `syz.2.223'. [ 145.057438][ T6731] netlink: 3 bytes leftover after parsing attributes in process `syz.2.223'. [ 145.245825][ T6742] netlink: 2 bytes leftover after parsing attributes in process `syz.3.228'. [ 145.259607][ T6742] hsr0: entered promiscuous mode [ 145.268945][ T6742] bridge0: port 3(hsr0) entered blocking state [ 145.312014][ T6742] bridge0: port 3(hsr0) entered disabled state [ 145.329859][ T6742] hsr0: entered allmulticast mode [ 145.373151][ T6742] hsr_slave_0: entered allmulticast mode [ 145.378966][ T6742] hsr_slave_1: entered allmulticast mode [ 145.391926][ T6742] bridge0: port 3(hsr0) entered blocking state [ 145.398445][ T6742] bridge0: port 3(hsr0) entered forwarding state [ 145.418201][ T6746] net_ratelimit: 393 callbacks suppressed [ 145.418251][ T6746] veth0_vlan: mtu less than device minimum [ 146.112843][ T6763] validate_nla: 5 callbacks suppressed [ 146.112858][ T6763] netlink: 'syz.2.231': attribute type 16 has an invalid length. [ 146.127284][ T6763] netlink: 'syz.2.231': attribute type 3 has an invalid length. [ 146.137494][ T6763] netlink: 132 bytes leftover after parsing attributes in process `syz.2.231'. [ 146.615135][ T6788] netlink: 'syz.0.235': attribute type 21 has an invalid length. [ 147.000743][ T5778] Bluetooth: hci1: ISO packet for unknown connection handle 1854 [ 147.268497][ T6798] netlink: 'syz.0.240': attribute type 21 has an invalid length. [ 147.810607][ T6803] netlink: 'syz.1.241': attribute type 10 has an invalid length. [ 147.843548][ T6803] netlink: 40 bytes leftover after parsing attributes in process `syz.1.241'. [ 147.894824][ T6803] team0: entered promiscuous mode [ 147.903467][ T6803] team_slave_0: entered promiscuous mode [ 147.923500][ T6803] team_slave_1: entered promiscuous mode [ 147.936491][ T6803] team0: entered allmulticast mode [ 147.951164][ T6803] team_slave_0: entered allmulticast mode [ 147.959446][ T6803] team_slave_1: entered allmulticast mode [ 147.984567][ T6803] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 148.115173][ T6811] netlink: 'syz.0.245': attribute type 13 has an invalid length. [ 148.122977][ T6811] netlink: 'syz.0.245': attribute type 58 has an invalid length. [ 148.248016][ T6811] netlink: 152 bytes leftover after parsing attributes in process `syz.0.245'. [ 148.296615][ T6807] netlink: 'syz.2.243': attribute type 39 has an invalid length. [ 152.193396][ T6826] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.206193][ T6826] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.352932][ T6826] bridge0: entered allmulticast mode [ 152.916892][ T6828] bridge_slave_1: left allmulticast mode [ 152.923032][ T6828] bridge_slave_1: left promiscuous mode [ 152.929259][ T6828] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.995348][ T6828] bridge_slave_0: left allmulticast mode [ 153.001115][ T6828] bridge_slave_0: left promiscuous mode [ 153.038505][ T6828] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.323948][ T6840] syzkaller0: entered promiscuous mode [ 153.329506][ T6840] syzkaller0: entered allmulticast mode [ 153.565534][ T6851] netlink: 'syz.1.254': attribute type 3 has an invalid length. [ 153.633247][ T6851] netlink: 16795 bytes leftover after parsing attributes in process `syz.1.254'. [ 155.726547][ T6897] syzkaller0: entered promiscuous mode [ 155.743414][ T6897] syzkaller0: entered allmulticast mode [ 159.267489][ T6935] netlink: 'syz.0.272': attribute type 3 has an invalid length. [ 159.293275][ T6935] netlink: 'syz.0.272': attribute type 6 has an invalid length. [ 159.315018][ T6935] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.272'. [ 159.505098][ T6923] syzkaller0: entered promiscuous mode [ 159.510654][ T6923] syzkaller0: entered allmulticast mode [ 162.262641][ T6965] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.280'. [ 162.499387][ T6959] delete_channel: no stack [ 162.748758][ T6976] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.283'. [ 162.771724][ T6976] openvswitch: netlink: Key type 29 is not supported [ 163.166572][ T6991] netlink: 'syz.0.287': attribute type 30 has an invalid length. [ 164.662821][ T7027] delete_channel: no stack [ 169.770902][ T7077] netlink: 144 bytes leftover after parsing attributes in process `syz.3.304'. [ 170.191232][ T7077] team0: Port device team_slave_0 removed [ 170.239549][ T7077] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 170.294033][ T7081] netlink: 144 bytes leftover after parsing attributes in process `syz.3.304'. [ 170.322951][ T7081] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 170.466709][ T7077] syz.3.304 (7077) used greatest stack depth: 20224 bytes left [ 170.528335][ T7085] IPv6: NLM_F_CREATE should be specified when creating new route [ 170.636121][ T7090] netlink: 180 bytes leftover after parsing attributes in process `syz.1.308'. [ 170.700577][ T7089] netlink: 180 bytes leftover after parsing attributes in process `syz.1.308'. [ 170.783929][ T7099] netlink: 'syz.3.309': attribute type 10 has an invalid length. [ 170.848526][ T7099] netlink: 'syz.3.309': attribute type 10 has an invalid length. [ 171.100233][ T7105] netlink: 144 bytes leftover after parsing attributes in process `syz.1.311'. [ 171.121999][ T7105] team_slave_0: left promiscuous mode [ 171.131328][ T7105] team_slave_0: left allmulticast mode [ 171.161247][ T7105] team0: Port device team_slave_0 removed [ 171.174889][ T7105] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 171.727050][ T7130] sit0: entered allmulticast mode [ 172.146116][ T7135] syz.0.315 uses obsolete (PF_INET,SOCK_PACKET) [ 173.434161][ T7163] netlink: 'syz.1.319': attribute type 3 has an invalid length. [ 173.442342][ T7163] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.319'. [ 173.686286][ T7171] netlink: 'syz.2.321': attribute type 11 has an invalid length. [ 173.718786][ T7171] netlink: 212788 bytes leftover after parsing attributes in process `syz.2.321'. [ 174.075527][ T7169] sit0: entered promiscuous mode [ 174.901358][ T7183] netlink: 'syz.0.324': attribute type 10 has an invalid length. [ 175.278803][ T7198] netlink: 'syz.1.325': attribute type 21 has an invalid length. [ 175.289475][ T7198] netlink: 100 bytes leftover after parsing attributes in process `syz.1.325'. [ 175.313512][ T7199] netlink: 'syz.1.325': attribute type 10 has an invalid length. [ 175.708467][ T7219] netlink: 'syz.3.330': attribute type 13 has an invalid length. [ 175.754197][ T7219] netlink: 'syz.3.330': attribute type 58 has an invalid length. [ 175.773495][ T7219] netlink: 152 bytes leftover after parsing attributes in process `syz.3.330'. [ 176.418760][ T7253] netlink: 'syz.2.337': attribute type 1 has an invalid length. [ 176.449117][ T7253] netlink: 'syz.2.337': attribute type 3 has an invalid length. [ 176.492844][ T7253] netlink: 132 bytes leftover after parsing attributes in process `syz.2.337'. [ 176.513969][ T7254] netlink: 'syz.2.337': attribute type 10 has an invalid length. [ 176.521760][ T7254] netlink: 168 bytes leftover after parsing attributes in process `syz.2.337'. [ 176.996432][ T7266] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.341'. [ 177.029589][ T7259] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.342'. [ 177.062836][ T7273] netlink: 'syz.2.343': attribute type 21 has an invalid length. [ 177.071616][ T7273] netlink: 'syz.2.343': attribute type 6 has an invalid length. [ 177.080030][ T7273] netlink: 132 bytes leftover after parsing attributes in process `syz.2.343'. [ 177.406575][ T7259] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 177.417117][ T7259] CPU: 1 PID: 7259 Comm: syz.1.342 Not tainted syzkaller #0 [ 177.424468][ T7259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 177.434624][ T7259] Call Trace: [ 177.437948][ T7259] [ 177.440927][ T7259] dump_stack_lvl+0x18c/0x250 [ 177.445687][ T7259] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 177.451906][ T7259] ? show_regs_print_info+0x20/0x20 [ 177.457166][ T7259] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 177.463404][ T7259] sysfs_warn_dup+0x8e/0xa0 [ 177.467957][ T7259] sysfs_do_create_link_sd+0xc0/0x110 [ 177.473470][ T7259] device_add_class_symlinks+0x1cf/0x240 [ 177.479174][ T7259] device_add+0x4f9/0xc40 [ 177.483560][ T7259] wiphy_register+0x1d99/0x2ac0 [ 177.488493][ T7259] ? cfg80211_event_work+0x40/0x40 [ 177.493663][ T7259] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 177.499896][ T7259] ieee80211_register_hw+0x2dd8/0x3b30 [ 177.505425][ T7259] ? ieee80211_register_hw+0xfb1/0x3b30 [ 177.511030][ T7259] ? ieee80211_tasklet_handler+0x20/0x20 [ 177.516712][ T7259] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 177.522665][ T7259] ? __debug_object_init+0xec/0x450 [ 177.527931][ T7259] ? __asan_memset+0x22/0x40 [ 177.532595][ T7259] ? __hrtimer_init+0x189/0x270 [ 177.537509][ T7259] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 177.543323][ T7259] ? mac80211_hwsim_free+0x220/0x220 [ 177.548659][ T7259] ? rcu_is_watching+0x15/0xb0 [ 177.553485][ T7259] ? kstrndup+0xbd/0x140 [ 177.557813][ T7259] hwsim_new_radio_nl+0xdad/0x1a70 [ 177.562996][ T7259] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 177.568876][ T7259] ? mark_lock+0x94/0x320 [ 177.573272][ T7259] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 177.579670][ T7259] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 177.585918][ T7259] ? lockdep_hardirqs_on+0x98/0x150 [ 177.591165][ T7259] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 177.597398][ T7259] genl_family_rcv_msg_doit+0x21a/0x310 [ 177.603026][ T7259] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 177.608986][ T7259] ? bpf_lsm_capable+0x9/0x10 [ 177.613730][ T7259] ? security_capable+0x89/0xb0 [ 177.618670][ T7259] genl_rcv_msg+0x611/0x7a0 [ 177.623262][ T7259] ? genl_bind+0x360/0x360 [ 177.627733][ T7259] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 177.634118][ T7259] ? lockdep_hardirqs_on+0x98/0x150 [ 177.639376][ T7259] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 177.645605][ T7259] netlink_rcv_skb+0x235/0x4c0 [ 177.650420][ T7259] ? genl_bind+0x360/0x360 [ 177.654906][ T7259] ? netlink_ack+0x1160/0x1160 [ 177.659756][ T7259] ? __lock_acquire+0x7d80/0x7d80 [ 177.664859][ T7259] ? down_read+0x1ac/0x2e0 [ 177.669330][ T7259] genl_rcv+0x28/0x40 [ 177.673372][ T7259] netlink_unicast+0x7b1/0x930 [ 177.678228][ T7259] netlink_sendmsg+0x8d0/0xbf0 [ 177.683061][ T7259] ? lockdep_hardirqs_on+0x98/0x150 [ 177.688313][ T7259] ? netlink_getsockopt+0x590/0x590 [ 177.693569][ T7259] ? ____sys_sendmsg+0x580/0x980 [ 177.698551][ T7259] ? netlink_getsockopt+0x590/0x590 [ 177.703774][ T7259] ____sys_sendmsg+0x61b/0x980 [ 177.708601][ T7259] ? __asan_memset+0x22/0x40 [ 177.713246][ T7259] ? __sys_sendmsg_sock+0x30/0x30 [ 177.718285][ T7259] ? __import_iovec+0x5f2/0x850 [ 177.723187][ T7259] ? import_iovec+0x73/0xa0 [ 177.727761][ T7259] ___sys_sendmsg+0x2a6/0x360 [ 177.732501][ T7259] ? __sys_sendmsg+0x2b0/0x2b0 [ 177.737416][ T7259] ? perf_trace_preemptirq_template+0xac/0x330 [ 177.743765][ T7259] ? ___sys_sendmsg+0xa/0x360 [ 177.748561][ T7259] __se_sys_sendmsg+0x1d0/0x2c0 [ 177.753477][ T7259] ? __x64_sys_sendmsg+0x80/0x80 [ 177.758476][ T7259] ? lockdep_hardirqs_on+0x98/0x150 [ 177.763697][ T7259] do_syscall_64+0x55/0xb0 [ 177.768133][ T7259] ? clear_bhb_loop+0x40/0x90 [ 177.772831][ T7259] ? clear_bhb_loop+0x40/0x90 [ 177.777556][ T7259] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 177.783515][ T7259] RIP: 0033:0x7fd4d779e159 [ 177.787975][ T7259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.807608][ T7259] RSP: 002b:00007fd4d871a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.816047][ T7259] RAX: ffffffffffffffda RBX: 00007fd4d7a26090 RCX: 00007fd4d779e159 [ 177.824048][ T7259] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000018 [ 177.832057][ T7259] RBP: 00007fd4d783506b R08: 0000000000000000 R09: 0000000000000000 [ 177.840067][ T7259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.848069][ T7259] R13: 00007fd4d7a26128 R14: 00007fd4d7a26090 R15: 00007ffc204c1778 [ 177.856090][ T7259] [ 178.077358][ T7281] netlink: 132 bytes leftover after parsing attributes in process `syz.0.345'. [ 178.129473][ T7283] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.344'. [ 178.236104][ T7283] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.344'. [ 180.061202][ T7333] netlink: 'syz.0.356': attribute type 29 has an invalid length. [ 180.146254][ T7333] netlink: 'syz.0.356': attribute type 29 has an invalid length. [ 180.285684][ T7342] netlink: 'syz.2.358': attribute type 16 has an invalid length. [ 180.298162][ T7342] netlink: 'syz.2.358': attribute type 3 has an invalid length. [ 180.307016][ T7342] __nla_validate_parse: 66 callbacks suppressed [ 180.307030][ T7342] netlink: 132 bytes leftover after parsing attributes in process `syz.2.358'. [ 181.285901][ T7354] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.360'. [ 181.346605][ T7354] bridge_slave_1: default FDB implementation only supports local addresses [ 182.166572][ T7349] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.257298][ T7349] syz.0.360 (7349) used greatest stack depth: 19368 bytes left [ 182.446884][ T7389] netlink: 'syz.3.372': attribute type 10 has an invalid length. [ 182.483694][ T7389] netlink: 55 bytes leftover after parsing attributes in process `syz.3.372'. [ 183.067404][ T7394] netlink: 3554 bytes leftover after parsing attributes in process `syz.1.373'. [ 183.927314][ T7403] netlink: 'syz.0.376': attribute type 10 has an invalid length. [ 183.941009][ T7403] veth0_vlan: entered allmulticast mode [ 184.086954][ T7411] netlink: 'syz.3.379': attribute type 9 has an invalid length. [ 184.159764][ T7411] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.379'. [ 184.235618][ T7412] netlink: 'syz.3.379': attribute type 9 has an invalid length. [ 184.304118][ T7412] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.379'. [ 184.306739][ T7403] veth0_vlan: left promiscuous mode [ 184.413629][ T7411] netlink: 'syz.3.379': attribute type 9 has an invalid length. [ 184.421366][ T7411] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.379'. [ 184.551306][ T7412] netlink: 'syz.3.379': attribute type 9 has an invalid length. [ 184.596239][ T7412] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.379'. [ 184.683027][ T7411] netlink: 'syz.3.379': attribute type 9 has an invalid length. [ 184.731430][ T7403] veth0_vlan: entered promiscuous mode [ 184.742584][ T7411] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.379'. [ 184.768665][ T7412] netlink: 'syz.3.379': attribute type 9 has an invalid length. [ 184.777586][ T7412] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.379'. [ 184.794719][ T7403] team0: Device veth0_vlan failed to register rx_handler [ 184.929888][ T7425] netlink: 'syz.1.382': attribute type 10 has an invalid length. [ 184.965292][ T7403] syz.0.376 (7403) used greatest stack depth: 18408 bytes left [ 184.985123][ T7425] nlmon0: entered promiscuous mode [ 185.001411][ T7425] nlmon0: entered allmulticast mode [ 185.012241][ T7425] team0: Device nlmon0 is of different type [ 185.147584][ T7430] netlink: 'syz.3.383': attribute type 21 has an invalid length. [ 185.265318][ T7439] openvswitch: netlink: Flow key attribute not present in set flow. [ 185.310987][ T7428] veth1_to_bond: entered allmulticast mode [ 186.192085][ T7467] __nla_validate_parse: 2 callbacks suppressed [ 186.192104][ T7467] netlink: 132 bytes leftover after parsing attributes in process `syz.0.392'. [ 186.299985][ T7470] netlink: 55 bytes leftover after parsing attributes in process `syz.3.393'. [ 186.680197][ T7470] team0: Port device geneve1 added [ 187.270117][ T7495] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.397'. [ 187.687543][ T7503] sit0: entered allmulticast mode [ 188.028800][ T7519] validate_nla: 3 callbacks suppressed [ 188.028816][ T7519] netlink: 'syz.0.403': attribute type 5 has an invalid length. [ 189.555990][ T7546] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.748724][ T7552] syzkaller0: entered promiscuous mode [ 189.762110][ T7552] syzkaller0: entered allmulticast mode [ 192.597440][ T7563] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.415'. [ 194.495791][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.502175][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.841240][ T7588] netlink: 'syz.2.422': attribute type 39 has an invalid length. [ 196.644950][ T7633] netlink: 'syz.3.435': attribute type 21 has an invalid length. [ 196.653800][ T7633] netlink: 100 bytes leftover after parsing attributes in process `syz.3.435'. [ 196.915610][ T7651] netlink: 'syz.2.439': attribute type 10 has an invalid length. [ 196.924067][ T7651] netlink: 211796 bytes leftover after parsing attributes in process `syz.2.439'. [ 196.936165][ T7651] openvswitch: netlink: Message has 4 unknown bytes. [ 199.995743][ T7673] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.443'. [ 201.099774][ T7715] netlink: 'syz.0.454': attribute type 21 has an invalid length. [ 201.180918][ T7715] netlink: 132 bytes leftover after parsing attributes in process `syz.0.454'. [ 201.735059][ T7726] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.456'. [ 203.317216][ T7760] netlink: 'syz.1.465': attribute type 7 has an invalid length. [ 203.434005][ T7760] can: request_module (can-proto-0) failed. [ 203.442850][ T7755] netlink: 'syz.2.464': attribute type 4 has an invalid length. [ 203.458358][ T7755] netlink: 206236 bytes leftover after parsing attributes in process `syz.2.464'. [ 203.602481][ T7768] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.467'. [ 203.924108][ T7771] netlink: 'syz.0.468': attribute type 21 has an invalid length. [ 204.185667][ T7781] netlink: 'syz.3.471': attribute type 10 has an invalid length. [ 204.197126][ T7781] netlink: 132 bytes leftover after parsing attributes in process `syz.3.471'. [ 204.217305][ T7782] netlink: 'syz.3.471': attribute type 10 has an invalid length. [ 204.237059][ T7782] netlink: 132 bytes leftover after parsing attributes in process `syz.3.471'. [ 204.268609][ T7784] netlink: 'syz.0.470': attribute type 9 has an invalid length. [ 204.295446][ T7784] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.470'. [ 204.391720][ T7787] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.472'. [ 205.309149][ T7820] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.479'. [ 205.658773][ T7829] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.481'. [ 206.222541][ T7849] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.486'. [ 206.277028][ T7845] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.485'. [ 206.312412][ T7850] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.486'. [ 206.807187][ T7799] Bluetooth: hci1: command 0x0406 tx timeout [ 206.813725][ T7799] Bluetooth: hci2: command 0x0406 tx timeout [ 206.819971][ T7799] Bluetooth: hci0: command 0x0406 tx timeout [ 206.826337][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 206.846293][ T7867] netlink: 'syz.1.493': attribute type 21 has an invalid length. [ 207.004687][ T7867] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.493'. [ 207.384944][ T7879] netlink: 'syz.3.494': attribute type 2 has an invalid length. [ 207.398085][ T7879] netlink: 'syz.3.494': attribute type 5 has an invalid length. [ 207.482814][ T7881] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.495'. [ 207.555674][ T7881] raw_sendmsg: syz.1.495 forgot to set AF_INET. Fix it! [ 207.681079][ T7881] netlink: 'syz.1.495': attribute type 2 has an invalid length. [ 207.697844][ T7881] netlink: 11835 bytes leftover after parsing attributes in process `syz.1.495'. [ 209.693715][ T7924] netlink: 'syz.2.505': attribute type 12 has an invalid length. [ 209.735559][ T7924] netlink: 197276 bytes leftover after parsing attributes in process `syz.2.505'. [ 210.537052][ T5782] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 212.623227][ T7972] netlink: 'syz.1.518': attribute type 1 has an invalid length. [ 212.631160][ T7972] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.518'. [ 213.877792][ T7995] netlink: 176 bytes leftover after parsing attributes in process `syz.2.526'. [ 214.003976][ T7994] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.525'. [ 214.009501][ T7996] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.525'. [ 214.302237][ T8004] syzkaller0: entered promiscuous mode [ 214.318718][ T8006] netlink: 'syz.2.528': attribute type 29 has an invalid length. [ 214.327469][ T8004] syzkaller0: entered allmulticast mode [ 214.361984][ T8010] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.530'. [ 216.165867][ T8006] netlink: 'syz.2.528': attribute type 29 has an invalid length. [ 216.193638][ T8029] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 216.592505][ T8049] netlink: 'syz.2.540': attribute type 29 has an invalid length. [ 216.611201][ T8049] netlink: 'syz.2.540': attribute type 29 has an invalid length. [ 216.835890][ T8055] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.542'. [ 216.859257][ T8059] netlink: 'syz.3.543': attribute type 21 has an invalid length. [ 217.305422][ T8077] ¥: port 1(team0) entered blocking state [ 217.311384][ T8077] ¥: port 1(team0) entered disabled state [ 217.318234][ T8077] team0: entered allmulticast mode [ 217.323523][ T8077] team_slave_0: entered allmulticast mode [ 217.330019][ T8077] team_slave_1: entered allmulticast mode [ 217.339134][ T8077] team0: entered promiscuous mode [ 217.360459][ T8077] team_slave_0: entered promiscuous mode [ 217.380253][ T8077] team_slave_1: entered promiscuous mode [ 217.397639][ T8078] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.547'. [ 219.679358][ T8100] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.553'. [ 219.808252][ T8100] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 220.518140][ T8125] netlink: 'syz.1.558': attribute type 64 has an invalid length. [ 220.536362][ T8125] netlink: 'syz.1.558': attribute type 64 has an invalid length. [ 220.570116][ T8119] netlink: 'syz.1.558': attribute type 64 has an invalid length. [ 222.262269][ T8165] netlink: 'syz.3.570': attribute type 10 has an invalid length. [ 222.433139][ T8165] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.482358][ T8165] bridge_slave_1: left allmulticast mode [ 222.543578][ T8165] bridge_slave_1: left promiscuous mode [ 222.549868][ T8165] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.360377][ T8215] netlink: 16358 bytes leftover after parsing attributes in process `syz.2.582'. [ 225.027443][ T8213] netlink: 192568 bytes leftover after parsing attributes in process `syz.1.584'. [ 225.062733][ T8213] netlink: 240 bytes leftover after parsing attributes in process `syz.1.584'. [ 225.163475][ T8228] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.587'. [ 225.518430][ T8231] netlink: 'syz.0.588': attribute type 2 has an invalid length. [ 225.641768][ T8228] netlink: 'syz.2.587': attribute type 2 has an invalid length. [ 225.702371][ T8228] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.587'. [ 226.240946][ T8245] netlink: 14 bytes leftover after parsing attributes in process `syz.0.592'. [ 226.268692][ T8245] netlink: get zone limit has 4 unknown bytes [ 226.319203][ T8244] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.593'. [ 226.832172][ T8268] netlink: 'syz.3.599': attribute type 10 has an invalid length. [ 227.337412][ T8274] syzkaller0: entered promiscuous mode [ 227.343812][ T8274] syzkaller0: entered allmulticast mode [ 227.806020][ T8294] netlink: 'syz.3.607': attribute type 13 has an invalid length. [ 227.814104][ T8294] netlink: 152 bytes leftover after parsing attributes in process `syz.3.607'. [ 227.825037][ T8294] syz_tun: refused to change device tx_queue_len [ 227.832026][ T8294] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 227.941676][ T8297] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.606'. [ 227.969213][ T8297] bridge_slave_1: default FDB implementation only supports local addresses [ 228.361748][ T8286] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.605'. [ 228.955418][ T8326] netlink: 128 bytes leftover after parsing attributes in process `syz.3.614'. [ 228.972309][ T8326] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.372496][ T8335] syzkaller0: entered promiscuous mode [ 229.385510][ T8335] syzkaller0: entered allmulticast mode [ 229.643512][ T8345] netlink: 'syz.1.617': attribute type 21 has an invalid length. [ 231.999875][ T8354] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 232.007182][ T8354] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode [ 232.023171][ T8353] netlink: 'syz.0.621': attribute type 21 has an invalid length. [ 232.031351][ T8353] netlink: 132 bytes leftover after parsing attributes in process `syz.0.621'. [ 232.393912][ T8370] netlink: 60 bytes leftover after parsing attributes in process `syz.0.623'. [ 232.609141][ T8377] netlink: 'syz.1.627': attribute type 2 has an invalid length. [ 232.629027][ T8377] netlink: 132 bytes leftover after parsing attributes in process `syz.1.627'. [ 232.796754][ T8381] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 232.805058][ T8381] IPv6: NLM_F_CREATE should be set when creating new route [ 232.813191][ T8381] IPv6: NLM_F_CREATE should be set when creating new route [ 232.821327][ T8381] IPv6: NLM_F_CREATE should be set when creating new route [ 232.895078][ T8384] netlink: 'syz.2.628': attribute type 9 has an invalid length. [ 232.936726][ T8384] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.628'. [ 232.958094][ T8383] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.629'. [ 233.303446][ T8395] netlink: 'syz.0.631': attribute type 11 has an invalid length. [ 233.320730][ T8395] netlink: 140 bytes leftover after parsing attributes in process `syz.0.631'. [ 233.607179][ T8404] netlink: 128 bytes leftover after parsing attributes in process `syz.1.636'. [ 233.654916][ T8404] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 233.927061][ T8413] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.638'. [ 234.250056][ T8417] netlink: 132 bytes leftover after parsing attributes in process `syz.0.640'. [ 236.674375][ T8458] netlink: 'syz.3.649': attribute type 10 has an invalid length. [ 239.097681][ T8505] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.658'. [ 239.152307][ T8501] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.658'. [ 239.570275][ T8514] netlink: 'syz.2.660': attribute type 27 has an invalid length. [ 239.581121][ T8514] netlink: 'syz.2.660': attribute type 4 has an invalid length. [ 239.590774][ T8514] netlink: 152 bytes leftover after parsing attributes in process `syz.2.660'. [ 240.147373][ T8535] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.664'. [ 240.688887][ T8552] netlink: 40 bytes leftover after parsing attributes in process `syz.2.671'. [ 240.699655][ T8557] netlink: 'syz.2.671': attribute type 10 has an invalid length. [ 240.783892][ T8560] netlink: 'syz.3.672': attribute type 12 has an invalid length. [ 240.792246][ T8560] netlink: 132 bytes leftover after parsing attributes in process `syz.3.672'. [ 240.805129][ T8552] netlink: 40 bytes leftover after parsing attributes in process `syz.2.671'. [ 240.820304][ T8552] netlink: 13 bytes leftover after parsing attributes in process `syz.2.671'. [ 240.872203][ T8566] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.673'. [ 241.249632][ T8574] netlink: 'syz.1.676': attribute type 3 has an invalid length. [ 241.261063][ T8574] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.676'. [ 241.631328][ T8582] netlink: 'syz.3.678': attribute type 9 has an invalid length. [ 241.653269][ T8582] netlink: 'syz.3.678': attribute type 23 has an invalid length. [ 241.701540][ T8585] netlink: 'syz.3.678': attribute type 10 has an invalid length. [ 241.781113][ T8585] bridge0: port 3(hsr0) entered disabled state [ 241.840717][ T8585] hsr0: left allmulticast mode [ 241.850206][ T8585] hsr_slave_0: left allmulticast mode [ 241.867429][ T8585] hsr_slave_1: left allmulticast mode [ 241.902989][ T8585] bridge0: port 3(hsr0) entered disabled state [ 242.066087][ T8581] netlink: 'syz.3.678': attribute type 10 has an invalid length. [ 243.021569][ T8617] netlink: 'syz.0.686': attribute type 10 has an invalid length. [ 243.064812][ T8617] ¥: port 1(team0) entered disabled state [ 243.644794][ T8617] bridge0: port 3(team0) entered blocking state [ 243.651653][ T8617] bridge0: port 3(team0) entered disabled state [ 243.738000][ T8617] bridge0: port 3(team0) entered blocking state [ 243.745841][ T8617] bridge0: port 3(team0) entered forwarding state [ 244.190331][ T8638] __nla_validate_parse: 3 callbacks suppressed [ 244.190370][ T8638] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.690'. [ 244.589412][ T8653] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 244.597090][ T8653] IPv6: NLM_F_CREATE should be set when creating new route [ 244.604677][ T8653] IPv6: NLM_F_CREATE should be set when creating new route [ 244.612264][ T8653] IPv6: NLM_F_CREATE should be set when creating new route [ 244.782005][ T8656] netlink: 192188 bytes leftover after parsing attributes in process `syz.3.694'. [ 244.803223][ T8656] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 245.016931][ T8658] validate_nla: 3 callbacks suppressed [ 245.016948][ T8658] netlink: 'syz.2.696': attribute type 2 has an invalid length. [ 245.063172][ T8658] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.696'. [ 245.359856][ T8666] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.697'. [ 245.522205][ T8673] netlink: 763 bytes leftover after parsing attributes in process `syz.2.700'. [ 245.960376][ T8692] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 245.986362][ T8689] netlink: 'syz.2.704': attribute type 3 has an invalid length. [ 246.013261][ T8692] syzkaller1: linktype set to 769 [ 246.024867][ T8689] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.704'. [ 246.648496][ T8703] veth1_macvtap: left promiscuous mode [ 246.706817][ T8703] netlink: 100 bytes leftover after parsing attributes in process `syz.3.705'. [ 247.014255][ T8706] netlink: 'syz.3.706': attribute type 21 has an invalid length. [ 247.022151][ T8706] netlink: 156 bytes leftover after parsing attributes in process `syz.3.706'. [ 247.258178][ T5782] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 248.009920][ T8729] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.714'. [ 248.023348][ T8734] netlink: 'syz.3.715': attribute type 13 has an invalid length. [ 248.031139][ T8734] netlink: 152 bytes leftover after parsing attributes in process `syz.3.715'. [ 248.094487][ T8734] syz_tun: refused to change device tx_queue_len [ 248.123338][ T8734] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 248.168318][ T8729] netlink: 'syz.2.714': attribute type 1 has an invalid length. [ 248.328967][ T8726] netlink: 'syz.1.712': attribute type 23 has an invalid length. [ 248.422222][ T8741] openvswitch: netlink: Duplicate key (type 0). [ 248.657880][ T8730] netlink: 'syz.1.712': attribute type 3 has an invalid length. [ 250.637141][ T8796] __nla_validate_parse: 4 callbacks suppressed [ 250.637161][ T8796] netlink: 152 bytes leftover after parsing attributes in process `syz.1.726'. [ 250.753383][ T8796] netlink: 6 bytes leftover after parsing attributes in process `syz.1.726'. [ 251.742343][ T8807] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.727'. [ 252.970130][ T8828] netlink: 'syz.0.732': attribute type 3 has an invalid length. [ 253.000892][ T8828] netlink: 'syz.0.732': attribute type 1 has an invalid length. [ 253.029342][ T8828] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.732'. [ 253.176591][ T8856] netlink: 132 bytes leftover after parsing attributes in process `syz.2.736'. [ 255.928270][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.939804][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.970600][ T8865] netlink: 134736 bytes leftover after parsing attributes in process `syz.2.738'. [ 259.062932][ T8940] netlink: 'syz.3.756': attribute type 16 has an invalid length. [ 259.071806][ T8940] netlink: 48 bytes leftover after parsing attributes in process `syz.3.756'. [ 259.086841][ T8940] veth1_macvtap: entered allmulticast mode [ 260.601476][ T8971] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 260.838859][ T8982] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.769'. [ 261.182195][ T8990] netlink: 188 bytes leftover after parsing attributes in process `syz.3.772'. [ 264.962883][ T9015] netlink: 'syz.0.779': attribute type 21 has an invalid length. [ 264.998892][ T9015] netlink: 156 bytes leftover after parsing attributes in process `syz.0.779'. [ 265.095547][ T9013] netlink: 'syz.1.778': attribute type 10 has an invalid length. [ 265.143872][ T9013] netlink: 2 bytes leftover after parsing attributes in process `syz.1.778'. [ 265.174015][ T9013] hsr0: entered promiscuous mode [ 265.339311][ T9015] sit0: entered promiscuous mode [ 266.714404][ T9029] sock: sock_set_timeout: `syz.0.782' (pid 9029) tries to set negative timeout [ 266.898967][ T9034] IPv6: NLM_F_CREATE should be specified when creating new route [ 267.048563][ T9034] netlink: 1 bytes leftover after parsing attributes in process `syz.3.783'. [ 269.565513][ T9053] netlink: 'syz.0.788': attribute type 1 has an invalid length. [ 269.596088][ T9053] netlink: 'syz.0.788': attribute type 3 has an invalid length. [ 269.624976][ T9053] netlink: 132 bytes leftover after parsing attributes in process `syz.0.788'. [ 270.099150][ T9056] netlink: 14 bytes leftover after parsing attributes in process `syz.2.789'. [ 270.437665][ T9058] netlink: 'syz.2.789': attribute type 10 has an invalid length. [ 270.463545][ T9058] netlink: 40 bytes leftover after parsing attributes in process `syz.2.789'. [ 270.530471][ T9058] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 270.934799][ T9063] netlink: 168 bytes leftover after parsing attributes in process `syz.0.791'. [ 274.312256][ T9082] netlink: 'syz.1.795': attribute type 10 has an invalid length. [ 274.383978][ T9082] netlink: 40 bytes leftover after parsing attributes in process `syz.1.795'. [ 274.465670][ T9082] dummy0: entered allmulticast mode [ 274.571894][ T9082] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 274.663834][ T9084] netlink: 'syz.0.796': attribute type 1 has an invalid length. [ 274.671812][ T9084] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.796'. [ 275.336805][ T9089] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.797'. [ 275.552685][ T9089] netlink: zone id is out of range [ 275.595666][ T9089] netlink: zone id is out of range [ 275.600909][ T9089] netlink: zone id is out of range [ 275.703826][ T9089] netlink: zone id is out of range [ 275.709066][ T9089] netlink: zone id is out of range [ 275.793211][ T9089] netlink: zone id is out of range [ 275.798445][ T9089] netlink: zone id is out of range [ 275.909560][ T9088] netlink: 'syz.2.797': attribute type 46 has an invalid length. [ 275.963575][ T9089] netlink: zone id is out of range [ 275.983197][ T9089] netlink: zone id is out of range [ 276.055804][ T9088] netlink: 2 bytes leftover after parsing attributes in process `syz.2.797'. [ 278.784381][ T9103] netlink: 152 bytes leftover after parsing attributes in process `syz.0.801'. [ 279.116313][ T9103] bond0: (slave bond_slave_0): Releasing backup interface [ 282.707122][ T9140] netlink: 'syz.2.812': attribute type 9 has an invalid length. [ 282.719521][ T9143] netlink: 'syz.3.811': attribute type 15 has an invalid length. [ 282.730737][ T9140] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.812'. [ 282.781923][ T9143] netlink: 156 bytes leftover after parsing attributes in process `syz.3.811'. [ 282.990805][ T9146] netlink: 'syz.3.811': attribute type 10 has an invalid length. [ 283.017709][ T9146] netlink: 2 bytes leftover after parsing attributes in process `syz.3.811'. [ 283.038515][ T9146] batadv_slave_1: entered promiscuous mode [ 283.093685][ T9146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.130579][ T9146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.346807][ T9150] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.813'. [ 283.389074][ T9150] netlink: 6320 bytes leftover after parsing attributes in process `syz.0.813'. [ 283.430567][ T9150] netlink: 6 bytes leftover after parsing attributes in process `syz.0.813'. [ 284.865649][ T9187] netlink: 'syz.3.824': attribute type 39 has an invalid length. [ 285.408635][ T9202] sit0: left promiscuous mode [ 285.775866][ T9206] sit0: entered promiscuous mode [ 286.150324][ T9221] netlink: 209832 bytes leftover after parsing attributes in process `syz.3.833'. [ 286.182692][ T9224] netlink: 'syz.0.832': attribute type 3 has an invalid length. [ 286.217515][ T9224] netlink: 'syz.0.832': attribute type 4 has an invalid length. [ 286.230933][ T9224] netlink: 9067 bytes leftover after parsing attributes in process `syz.0.832'. [ 286.250162][ T9224] netlink: 'syz.0.832': attribute type 3 has an invalid length. [ 286.261194][ T9224] netlink: 'syz.0.832': attribute type 4 has an invalid length. [ 286.276140][ T9224] netlink: 9067 bytes leftover after parsing attributes in process `syz.0.832'. [ 286.291208][ T9224] netlink: 'syz.0.832': attribute type 3 has an invalid length. [ 286.321900][ T9227] netlink: 'syz.3.833': attribute type 29 has an invalid length. [ 286.333540][ T9224] netlink: 9067 bytes leftover after parsing attributes in process `syz.0.832'. [ 288.081931][ T9254] validate_nla: 64 callbacks suppressed [ 288.081973][ T9254] netlink: 'syz.3.842': attribute type 21 has an invalid length. [ 288.108537][ T9254] __nla_validate_parse: 30 callbacks suppressed [ 288.108556][ T9254] netlink: 100 bytes leftover after parsing attributes in process `syz.3.842'. [ 288.149262][ T9235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.462026][ T9261] tap0: tun_chr_ioctl cmd 2147767519 [ 293.764947][ T9342] netlink: 'syz.0.862': attribute type 10 has an invalid length. [ 293.804324][ T9342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.812232][ T9342] bond0: entered promiscuous mode [ 293.843292][ T9342] bond_slave_1: entered promiscuous mode [ 293.859085][ T9342] bond0: entered allmulticast mode [ 293.881377][ T9342] bond_slave_1: entered allmulticast mode [ 293.896266][ T9342] team0: Port device bond0 added [ 294.141452][ T9356] netlink: 'syz.0.867': attribute type 6 has an invalid length. [ 294.149749][ T9356] netlink: 168 bytes leftover after parsing attributes in process `syz.0.867'. [ 294.162365][ T9356] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.867'. [ 294.667547][ T9369] netlink: 152 bytes leftover after parsing attributes in process `syz.1.870'. [ 294.689367][ T9369] bond0: (slave bond_slave_0): Releasing backup interface [ 294.714481][ T9369] net_ratelimit: 240 callbacks suppressed [ 294.714498][ T9369] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 294.750627][ T9373] netlink: set zone limit has 8 unknown bytes [ 295.342016][ T9383] netlink: 188 bytes leftover after parsing attributes in process `syz.0.876'. [ 295.967022][ T9396] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.880'. [ 296.908694][ T9423] netlink: 152 bytes leftover after parsing attributes in process `syz.2.888'. [ 296.923831][ T9423] bond0: (slave bond_slave_0): Releasing backup interface [ 296.997852][ T9423] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 297.423436][ T9443] netlink: 60 bytes leftover after parsing attributes in process `syz.2.893'. [ 297.458888][ T9443] netlink: 60 bytes leftover after parsing attributes in process `syz.2.893'. [ 297.605891][ T9444] netlink: 60 bytes leftover after parsing attributes in process `syz.2.893'. [ 297.706847][ T9449] netlink: 60 bytes leftover after parsing attributes in process `syz.2.893'. [ 297.848281][ T9449] netlink: 'syz.2.893': attribute type 2 has an invalid length. [ 298.375581][ T9462] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 298.413745][ T9462] CPU: 1 PID: 9462 Comm: syz.1.902 Not tainted syzkaller #0 [ 298.421117][ T9462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 298.431233][ T9462] Call Trace: [ 298.434563][ T9462] [ 298.437544][ T9462] dump_stack_lvl+0x18c/0x250 [ 298.442297][ T9462] ? show_regs_print_info+0x20/0x20 [ 298.447582][ T9462] ? load_image+0x420/0x420 [ 298.452167][ T9462] sysfs_warn_dup+0x8e/0xa0 [ 298.456728][ T9462] sysfs_do_create_link_sd+0xc0/0x110 [ 298.462155][ T9462] device_add_class_symlinks+0x1cf/0x240 [ 298.467856][ T9462] device_add+0x4f9/0xc40 [ 298.472258][ T9462] wiphy_register+0x1d99/0x2ac0 [ 298.477194][ T9462] ? cfg80211_event_work+0x40/0x40 [ 298.482375][ T9462] ? minstrel_ht_alloc+0x88a/0x990 [ 298.487565][ T9462] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 298.493701][ T9462] ieee80211_register_hw+0x2dd8/0x3b30 [ 298.499252][ T9462] ? ieee80211_register_hw+0xfb1/0x3b30 [ 298.504875][ T9462] ? ieee80211_tasklet_handler+0x20/0x20 [ 298.510571][ T9462] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 298.516525][ T9462] ? __debug_object_init+0xec/0x450 [ 298.521809][ T9462] ? __asan_memset+0x22/0x40 [ 298.526469][ T9462] ? __hrtimer_init+0x189/0x270 [ 298.531384][ T9462] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 298.537180][ T9462] ? mac80211_hwsim_free+0x220/0x220 [ 298.542493][ T9462] ? rcu_is_watching+0x15/0xb0 [ 298.547291][ T9462] ? kstrndup+0xbd/0x140 [ 298.551578][ T9462] hwsim_new_radio_nl+0xdad/0x1a70 [ 298.556718][ T9462] ? mark_lock+0x94/0x320 [ 298.561083][ T9462] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 298.567120][ T9462] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 298.573497][ T9462] ? lockdep_hardirqs_on+0x98/0x150 [ 298.578737][ T9462] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 298.584940][ T9462] ? genl_family_rcv_msg_doit+0x106/0x310 [ 298.590710][ T9462] ? kasan_check_range+0x89/0x290 [ 298.595778][ T9462] genl_family_rcv_msg_doit+0x21a/0x310 [ 298.601377][ T9462] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 298.607319][ T9462] ? bpf_lsm_capable+0x9/0x10 [ 298.612033][ T9462] ? security_capable+0x89/0xb0 [ 298.616930][ T9462] genl_rcv_msg+0x611/0x7a0 [ 298.621473][ T9462] ? genl_bind+0x360/0x360 [ 298.625924][ T9462] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 298.632284][ T9462] ? mark_lock+0x94/0x320 [ 298.636644][ T9462] netlink_rcv_skb+0x235/0x4c0 [ 298.641436][ T9462] ? genl_bind+0x360/0x360 [ 298.645888][ T9462] ? netlink_ack+0x1160/0x1160 [ 298.650693][ T9462] ? down_read+0x61/0x2e0 [ 298.655053][ T9462] ? down_read+0x1ac/0x2e0 [ 298.659494][ T9462] genl_rcv+0x28/0x40 [ 298.663513][ T9462] netlink_unicast+0x7b1/0x930 [ 298.668311][ T9462] netlink_sendmsg+0x8d0/0xbf0 [ 298.673124][ T9462] ? netlink_getsockopt+0x590/0x590 [ 298.678360][ T9462] ? apparmor_socket_sendmsg+0x8e/0x330 [ 298.683938][ T9462] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 298.689265][ T9462] ? security_socket_sendmsg+0x80/0xa0 [ 298.694752][ T9462] ? netlink_getsockopt+0x590/0x590 [ 298.699982][ T9462] ____sys_sendmsg+0x61b/0x980 [ 298.704805][ T9462] ? __asan_memset+0x22/0x40 [ 298.709431][ T9462] ? __sys_sendmsg_sock+0x30/0x30 [ 298.714482][ T9462] ? __import_iovec+0x5f2/0x850 [ 298.719377][ T9462] ? import_iovec+0x73/0xa0 [ 298.723918][ T9462] ___sys_sendmsg+0x2a6/0x360 [ 298.728632][ T9462] ? __sys_sendmsg+0x2b0/0x2b0 [ 298.733468][ T9462] __se_sys_sendmsg+0x1d0/0x2c0 [ 298.738345][ T9462] ? perf_trace_preemptirq_template+0x269/0x330 [ 298.744622][ T9462] ? __x64_sys_sendmsg+0x80/0x80 [ 298.749614][ T9462] ? lockdep_hardirqs_on+0x98/0x150 [ 298.754848][ T9462] do_syscall_64+0x55/0xb0 [ 298.759320][ T9462] ? clear_bhb_loop+0x40/0x90 [ 298.764080][ T9462] ? clear_bhb_loop+0x40/0x90 [ 298.768813][ T9462] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 298.774754][ T9462] RIP: 0033:0x7fd4d779e159 [ 298.779203][ T9462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.798852][ T9462] RSP: 002b:00007fd4d873b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.807297][ T9462] RAX: ffffffffffffffda RBX: 00007fd4d7a25fa0 RCX: 00007fd4d779e159 [ 298.815321][ T9462] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 298.823335][ T9462] RBP: 00007fd4d783506b R08: 0000000000000000 R09: 0000000000000000 [ 298.831346][ T9462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.839348][ T9462] R13: 00007fd4d7a26038 R14: 00007fd4d7a25fa0 R15: 00007ffc204c1778 [ 298.847413][ T9462] [ 298.883943][ T9469] netlink: 'syz.3.904': attribute type 1 has an invalid length. [ 299.191872][ T9471] __nla_validate_parse: 2 callbacks suppressed [ 299.191911][ T9471] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.906'. [ 299.273552][ T9471] netlink: 'syz.2.906': attribute type 1 has an invalid length. [ 299.281489][ T9471] netlink: 21820 bytes leftover after parsing attributes in process `syz.2.906'. [ 299.785844][ T9491] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.912'. [ 299.802389][ T9491] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 299.888229][ T9492] netlink: 'syz.0.912': attribute type 29 has an invalid length. [ 299.900952][ T9492] netlink: 'syz.0.912': attribute type 29 has an invalid length. [ 299.915156][ T9491] netlink: 'syz.0.912': attribute type 29 has an invalid length. [ 300.868609][ T9507] netlink: 'syz.1.917': attribute type 39 has an invalid length. [ 301.860206][ T9541] netlink: 'syz.1.925': attribute type 10 has an invalid length. [ 301.924688][ T9541] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.925'. [ 303.022464][ T9579] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.935'. [ 303.072780][ T9579] tc_dump_action: action bad kind [ 303.341388][ T9585] netlink: 'syz.2.937': attribute type 21 has an invalid length. [ 305.008745][ T9634] netlink: 'syz.0.945': attribute type 28 has an invalid length. [ 305.017170][ T9634] netlink: 'syz.0.945': attribute type 29 has an invalid length. [ 305.025657][ T9634] netlink: 132 bytes leftover after parsing attributes in process `syz.0.945'. [ 305.066558][ T9636] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 305.077069][ T9636] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 306.320710][ T9654] netlink: 207684 bytes leftover after parsing attributes in process `syz.3.949'. [ 306.365105][ T9654] netlink: 'syz.3.949': attribute type 1 has an invalid length. [ 306.383642][ T9654] netlink: 'syz.3.949': attribute type 2 has an invalid length. [ 306.437594][ T9656] delete_channel: no stack [ 306.935496][ T9678] netlink: 60 bytes leftover after parsing attributes in process `syz.3.955'. [ 307.086011][ T9687] netlink: 'syz.0.956': attribute type 9 has an invalid length. [ 307.113324][ T9687] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.956'. [ 307.122726][ T9692] netlink: 'syz.1.957': attribute type 6 has an invalid length. [ 307.246963][ T9692] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.957'. [ 308.667491][ T9735] netlink: 'syz.2.966': attribute type 1 has an invalid length. [ 309.057169][ T9743] netlink: 'syz.0.968': attribute type 3 has an invalid length. [ 309.088736][ T9743] netlink: 128708 bytes leftover after parsing attributes in process `syz.0.968'. [ 309.108579][ T9745] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.970'. [ 309.144776][ T9752] delete_channel: no stack [ 309.163556][ T9752] delete_channel: no stack [ 310.339883][ T9775] veth1_macvtap: left promiscuous mode [ 310.383633][ T9775] macsec0: entered allmulticast mode [ 310.426859][ T9784] netlink: 'syz.3.979': attribute type 10 has an invalid length. [ 310.957243][ T9808] netlink: 'syz.1.985': attribute type 3 has an invalid length. [ 311.000272][ T9808] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.985'. [ 311.164310][ T9808] netlink: 'syz.1.985': attribute type 39 has an invalid length. [ 311.395131][ T9817] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.986'. [ 314.842045][ T9844] syzkaller0: entered promiscuous mode [ 314.847784][ T9844] syzkaller0: entered allmulticast mode [ 314.975125][ T9846] netlink: 'syz.3.991': attribute type 21 has an invalid length. [ 314.982935][ T9846] netlink: 'syz.3.991': attribute type 4 has an invalid length. [ 315.005946][ T9846] netlink: 'syz.3.991': attribute type 23 has an invalid length. [ 315.066192][ T9846] netlink: 20 bytes leftover after parsing attributes in process `syz.3.991'. [ 315.122841][ T9854] netlink: 149044 bytes leftover after parsing attributes in process `syz.0.993'. [ 315.153676][ T9857] netlink: 48 bytes leftover after parsing attributes in process `syz.3.991'. [ 316.625696][ T9876] @0Ù: renamed from bond_slave_1 (while UP) [ 316.694570][ T9877] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.1000'. [ 316.712407][ T9877] openvswitch: netlink: Duplicate key (type 0). [ 317.378217][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.389490][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.640515][ T9892] netlink: 'syz.1.1005': attribute type 10 has an invalid length. [ 319.264205][ T9893] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1005'. [ 319.735529][ T9915] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.1012'. [ 320.626841][ T9933] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1017'. [ 321.533890][ T9940] netlink: 'syz.3.1019': attribute type 3 has an invalid length. [ 321.633517][ T9940] netlink: 'syz.3.1019': attribute type 1 has an invalid length. [ 321.731117][ T9940] netlink: 193404 bytes leftover after parsing attributes in process `syz.3.1019'. [ 321.868997][ T9953] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.1023'. [ 322.228446][ T9959] netlink: 'syz.0.1024': attribute type 15 has an invalid length. [ 322.274663][ T9959] netlink: 'syz.0.1024': attribute type 7 has an invalid length. [ 322.597592][ T9972] netlink: 'syz.1.1027': attribute type 13 has an invalid length. [ 322.611687][ T9972] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1027'. [ 322.627856][ T9972] syz_tun: refused to change device tx_queue_len [ 322.640603][ T9972] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 323.586259][ T5782] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 323.617711][ T9984] netlink: 'syz.0.1030': attribute type 21 has an invalid length. [ 323.626807][ T9984] netlink: 'syz.0.1030': attribute type 12 has an invalid length. [ 323.641330][ T9984] netlink: 'syz.0.1030': attribute type 13 has an invalid length. [ 323.649389][ T9984] netlink: 12226 bytes leftover after parsing attributes in process `syz.0.1030'. [ 327.161651][T10065] netlink: 'syz.2.1049': attribute type 21 has an invalid length. [ 327.181953][T10065] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1049'. [ 327.541410][T10074] syzkaller0: entered promiscuous mode [ 327.553213][T10074] syzkaller0: entered allmulticast mode [ 329.929438][T10127] netlink: 'syz.1.1067': attribute type 9 has an invalid length. [ 329.937798][T10127] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1067'. [ 330.455282][T10138] netlink: 'syz.1.1067': attribute type 9 has an invalid length. [ 330.546971][T10138] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1067'. [ 331.358138][T10147] netlink: 63719 bytes leftover after parsing attributes in process `syz.2.1072'. [ 332.936472][T10184] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1080'. [ 332.973295][T10184] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.036017][ T5782] Bluetooth: hci3: unexpected event 0x03 length: 151 > 11 [ 333.311107][T10187] netlink: 'syz.2.1081': attribute type 21 has an invalid length. [ 333.368938][T10189] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1082'. [ 333.392373][T10187] IPv6: NLM_F_CREATE should be specified when creating new route [ 333.454914][T10187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 333.462698][T10187] IPv6: NLM_F_CREATE should be set when creating new route [ 333.470467][T10187] IPv6: NLM_F_CREATE should be set when creating new route [ 333.480475][T10187] IPv6: NLM_F_CREATE should be set when creating new route [ 333.527393][T10194] netlink: 'syz.0.1083': attribute type 9 has an invalid length. [ 333.581020][T10194] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1083'. [ 333.972634][T10197] netlink: 'syz.0.1083': attribute type 9 has an invalid length. [ 334.034137][T10197] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1083'. [ 334.097075][T10209] netlink: 'syz.3.1086': attribute type 3 has an invalid length. [ 334.106450][T10209] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1086'. [ 334.471466][T10221] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1090'. [ 334.510663][T10223] netlink: 207496 bytes leftover after parsing attributes in process `syz.1.1091'. [ 334.712430][T10227] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1092'. [ 334.872084][T10230] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1093'. [ 335.029032][T10234] netlink: 'syz.0.1093': attribute type 21 has an invalid length. [ 335.037408][T10234] netlink: 'syz.0.1093': attribute type 7 has an invalid length. [ 335.050729][T10236] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1093'. [ 335.069927][T10237] netlink: 'syz.0.1093': attribute type 21 has an invalid length. [ 335.078375][T10237] netlink: 'syz.0.1093': attribute type 7 has an invalid length. [ 336.014113][T10279] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 336.646063][T10284] netlink: 'syz.2.1100': attribute type 3 has an invalid length. [ 336.666565][T10284] netlink: 'syz.2.1100': attribute type 1 has an invalid length. [ 337.813137][T10325] mac80211_hwsim hwsim6 ..ãc¤±: renamed from wlan1 (while UP) [ 338.063356][ T5782] Bluetooth: hci0: unexpected event 0x35 length: 15 > 6 [ 338.140146][T10335] __nla_validate_parse: 6 callbacks suppressed [ 338.140179][T10335] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.1114'. [ 340.392052][T10371] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.1126'. [ 340.771495][T10374] netlink: 'syz.0.1124': attribute type 25 has an invalid length. [ 340.834253][T10374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1124'. [ 341.064510][T10378] sit0: left promiscuous mode [ 341.435940][T10380] sit0: entered promiscuous mode [ 341.627356][T10397] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.1129'. [ 341.985401][T10398] netlink: 'syz.3.1130': attribute type 39 has an invalid length. [ 342.660346][T10415] netlink: 'syz.1.1134': attribute type 3 has an invalid length. [ 342.679800][T10415] netlink: 128940 bytes leftover after parsing attributes in process `syz.1.1134'. [ 342.720692][T10420] netlink: 'syz.2.1135': attribute type 2 has an invalid length. [ 342.785482][T10420] netlink: 'syz.2.1135': attribute type 2 has an invalid length. [ 344.470869][T10425] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1137'. [ 344.966086][T10453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1144'. [ 344.981606][T10453] netlink: 33 bytes leftover after parsing attributes in process `syz.3.1144'. [ 344.992072][T10453] netlink: 33 bytes leftover after parsing attributes in process `syz.3.1144'. [ 345.222391][T10459] netlink: 'syz.0.1147': attribute type 3 has an invalid length. [ 345.242345][T10459] netlink: 'syz.0.1147': attribute type 1 has an invalid length. [ 345.252185][T10459] netlink: 'syz.0.1147': attribute type 1 has an invalid length. [ 345.275443][T10459] netlink: 'syz.0.1147': attribute type 2 has an invalid length. [ 345.289798][T10459] netlink: 198100 bytes leftover after parsing attributes in process `syz.0.1147'. [ 345.658819][T10472] netlink: 'syz.0.1151': attribute type 7 has an invalid length. [ 346.957054][T10486] netlink: 'syz.1.1156': attribute type 21 has an invalid length. [ 347.437285][T10490] netlink: 'syz.2.1157': attribute type 10 has an invalid length. [ 347.470621][T10490] bond0: (slave netdevsim0): Releasing backup interface [ 347.592341][T10490] team0: Port device netdevsim0 added [ 347.998741][T10503] netlink: 'syz.1.1162': attribute type 9 has an invalid length. [ 348.009498][T10503] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1162'. [ 349.076922][T10525] netlink: 'syz.3.1168': attribute type 2 has an invalid length. [ 349.552996][T10542] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1173'. [ 349.697772][T10543] netlink: 4068 bytes leftover after parsing attributes in process `syz.0.1172'. [ 352.718489][T10559] netlink: 'syz.0.1176': attribute type 9 has an invalid length. [ 352.748870][T10559] netlink: 'syz.0.1176': attribute type 23 has an invalid length. [ 352.760212][T10559] netlink: 156008 bytes leftover after parsing attributes in process `syz.0.1176'. [ 353.632833][T10579] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1182'. [ 353.759967][T10588] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1182'. [ 353.879507][T10596] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1184'. [ 353.891742][T10597] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1184'. [ 353.901199][T10596] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1184'. [ 353.928916][T10598] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1184'. [ 353.945022][T10596] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1184'. [ 354.311955][T10605] netlink: 'syz.2.1187': attribute type 29 has an invalid length. [ 354.365081][T10605] netlink: 'syz.2.1187': attribute type 29 has an invalid length. [ 354.824700][T10626] netlink: 'syz.0.1192': attribute type 12 has an invalid length. [ 354.835674][T10626] __nla_validate_parse: 1 callbacks suppressed [ 354.835690][T10626] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1192'. [ 355.349330][T10635] netlink: 209796 bytes leftover after parsing attributes in process `syz.2.1194'. [ 355.400811][T10644] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1195'. [ 355.473942][T10644] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 355.562058][T10653] netlink: 'syz.0.1197': attribute type 27 has an invalid length. [ 355.600161][T10653] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1197'. [ 355.759818][T10659] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1199'. [ 356.162566][T10673] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.1204'. [ 356.626402][T10675] netlink: 'syz.0.1205': attribute type 10 has an invalid length. [ 356.634737][T10685] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1208'. [ 356.654455][T10675] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.1205'. [ 356.671695][T10675] openvswitch: netlink: Flow key attr not present in new flow. [ 356.681096][T10685] hsr_slave_0: left promiscuous mode [ 356.698144][T10685] hsr_slave_1: left promiscuous mode [ 356.836692][T10695] netlink: 65007 bytes leftover after parsing attributes in process `syz.2.1209'. [ 360.579382][T10721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.297103][T10753] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.1225'. [ 364.486356][T10760] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1226'. [ 364.771722][T10775] netlink: 'syz.3.1230': attribute type 1 has an invalid length. [ 364.779749][T10775] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.1230'. [ 364.789192][T10775] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1230'. [ 365.789733][T10798] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1237'. [ 366.181966][T10811] netlink: 'syz.3.1241': attribute type 1 has an invalid length. [ 366.921225][T10838] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1248'. [ 366.931284][T10838] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1248'. [ 366.944653][T10838] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1248'. [ 366.962829][T10838] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1248'. [ 366.984548][T10838] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.078328][T10838] bridge_slave_0 (unregistering): left promiscuous mode [ 367.104667][T10838] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.509362][T10851] netlink: 'syz.0.1252': attribute type 25 has an invalid length. [ 367.518167][T10851] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.1252'. [ 367.601166][T10851] netlink: 'syz.0.1252': attribute type 10 has an invalid length. [ 367.898177][T10851] caif0: entered promiscuous mode [ 367.905524][T10851] caif0: entered allmulticast mode [ 367.912904][T10851] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 368.559205][T10873] netlink: 'syz.1.1258': attribute type 13 has an invalid length. [ 369.988040][T10880] __nla_validate_parse: 7 callbacks suppressed [ 369.988059][T10880] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.1261'. [ 370.007697][T10880] netlink: zone id is out of range [ 370.012887][T10880] netlink: zone id is out of range [ 370.018720][T10880] netlink: zone id is out of range [ 370.024001][T10880] netlink: zone id is out of range [ 370.029290][T10880] netlink: zone id is out of range [ 370.034524][T10880] netlink: zone id is out of range [ 370.039806][T10880] netlink: zone id is out of range [ 370.050346][T10880] netlink: zone id is out of range [ 370.113876][ T5782] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3 [ 370.117453][T10880] netlink: zone id is out of range [ 370.135201][T10893] netlink: 'syz.2.1264': attribute type 2 has an invalid length. [ 370.173142][T10893] netlink: 'syz.2.1264': attribute type 3 has an invalid length. [ 370.209685][T10893] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1264'. [ 370.680867][T10901] netlink: 'syz.2.1265': attribute type 25 has an invalid length. [ 370.695689][T10902] netlink: 'syz.0.1273': attribute type 10 has an invalid length. [ 370.718921][T10901] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.1265'. [ 370.773797][T10902] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 370.802635][T10902] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 370.862353][T10902] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 370.909090][T10902] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 370.941955][T10902] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 371.101473][T10901] netlink: 'syz.2.1265': attribute type 10 has an invalid length. [ 371.132244][T10901] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1265'. [ 371.185056][T10901] caif0: entered promiscuous mode [ 371.192687][T10901] caif0: entered allmulticast mode [ 371.597293][T10911] netlink: 'syz.2.1268': attribute type 2 has an invalid length. [ 371.605331][T10911] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1268'. [ 372.111903][T10925] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 372.176143][T10925] syzkaller0: entered promiscuous mode [ 372.194464][T10925] syzkaller0: entered allmulticast mode [ 376.399813][T10936] netlink: 'syz.3.1276': attribute type 25 has an invalid length. [ 376.433239][T10936] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.1276'. [ 376.478757][T10936] netlink: 'syz.3.1276': attribute type 10 has an invalid length. [ 376.491081][T10936] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1276'. [ 376.523581][T10936] caif0: entered promiscuous mode [ 376.534110][T10936] caif0: entered allmulticast mode [ 376.539665][T10936] net_ratelimit: 333 callbacks suppressed [ 376.539709][T10936] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 376.611936][T10942] netlink: 'syz.2.1277': attribute type 10 has an invalid length. [ 376.835542][T10942] team0: Port device .3ãc¤± added [ 376.867654][T10940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.650416][T10967] netlink: 'syz.0.1287': attribute type 4 has an invalid length. [ 377.660847][T10967] netlink: 119932 bytes leftover after parsing attributes in process `syz.0.1287'. [ 378.305371][T10965] netlink: 'syz.3.1286': attribute type 64 has an invalid length. [ 378.757476][T10986] delete_channel: no stack [ 378.786700][T10986] delete_channel: no stack [ 378.819852][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.828520][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.075351][T10993] netlink: set zone limit has 8 unknown bytes [ 379.651963][T11014] netlink: 'syz.3.1301': attribute type 4 has an invalid length. [ 379.679883][T11014] netlink: 'syz.3.1301': attribute type 10 has an invalid length. [ 379.690167][T11014] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1301'. [ 380.294536][T11024] netlink: 'syz.0.1311': attribute type 29 has an invalid length. [ 380.326621][T11032] netlink: 'syz.3.1305': attribute type 6 has an invalid length. [ 380.341934][T11024] netlink: 'syz.0.1311': attribute type 29 has an invalid length. [ 380.863663][T11050] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1312'. [ 380.872690][T11050] vcan0: entered promiscuous mode [ 380.973414][T11050] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 381.437956][T11065] validate_nla: 1 callbacks suppressed [ 381.437991][T11065] netlink: 'syz.3.1315': attribute type 4 has an invalid length. [ 383.056053][T11113] netlink: 'syz.2.1326': attribute type 6 has an invalid length. [ 383.064098][T11113] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1326'. [ 383.166002][T11119] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1327'. [ 384.184600][T11144] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1333'. [ 384.624517][T11161] netlink: 'syz.2.1338': attribute type 2 has an invalid length. [ 384.798835][T11173] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1342'. [ 386.790288][T11219] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1353'. [ 386.831518][T11219] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 387.272689][T11238] syzkaller0: left promiscuous mode [ 387.291662][T11238] syzkaller0: left allmulticast mode [ 387.294758][T11241] netlink: 'syz.0.1358': attribute type 3 has an invalid length. [ 387.316657][T11241] netlink: 'syz.0.1358': attribute type 5 has an invalid length. [ 387.335192][T11241] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.1358'. [ 387.729562][T11250] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1361'. [ 387.860785][T11250] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1361'. [ 388.697833][T11267] netlink: 'syz.0.1366': attribute type 29 has an invalid length. [ 389.123126][T11267] netlink: 'syz.0.1366': attribute type 29 has an invalid length. [ 389.159113][T11271] netlink: 'syz.2.1368': attribute type 13 has an invalid length. [ 389.168475][T11271] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1368'. [ 389.191360][T11269] netlink: 'syz.0.1366': attribute type 29 has an invalid length. [ 389.518010][T11276] netlink: 76312 bytes leftover after parsing attributes in process `syz.3.1370'. [ 390.230873][T11296] netlink: 'syz.3.1376': attribute type 14 has an invalid length. [ 390.245887][T11296] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1376'. [ 390.427424][T11297] netlink: 'syz.3.1376': attribute type 10 has an invalid length. [ 390.557899][ T5782] Bluetooth: hci3: unexpected event 0x06 length: 151 > 3 [ 391.009594][ T5782] Bluetooth: hci2: ISO packet for unknown connection handle 3100 [ 391.807162][T11326] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1385'. [ 391.833148][T11326] openvswitch: netlink: Flow key attribute not present in set flow. [ 391.971598][T11331] syzkaller0: entered promiscuous mode [ 391.984615][T11331] syzkaller0: entered allmulticast mode [ 392.033656][T10800] syzkaller0: tun_net_xmit 48 [ 392.060147][T11331] syzkaller0: tun_net_xmit 1280 [ 392.094517][T11331] syzkaller0: create flow: hash 3503366838 index 1 [ 392.853307][T11323] syzkaller0: delete flow: hash 3503366838 index 1 [ 395.562327][T11365] netlink: 192108 bytes leftover after parsing attributes in process `syz.0.1394'. [ 396.097040][T11392] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1401'. [ 396.111119][T11392] openvswitch: netlink: Key type 29 is not supported [ 396.808194][T11418] netlink: 26 bytes leftover after parsing attributes in process `syz.2.1410'. [ 397.014679][T11420] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.1411'. [ 397.627692][T11432] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1415'. [ 400.497607][T11461] netlink: 'syz.3.1422': attribute type 21 has an invalid length. [ 400.601148][T11461] netlink: 'syz.3.1422': attribute type 12 has an invalid length. [ 400.615877][T11461] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1422'. [ 400.652713][ T5782] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 400.665882][T11463] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1423'. [ 400.743997][T11463] openvswitch: netlink: Flow key attribute not present in set flow. [ 400.799131][T11463] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.1423'. [ 400.867941][T11463] openvswitch: netlink: Duplicate key (type 0). [ 401.484243][T11471] netlink: 'syz.2.1424': attribute type 29 has an invalid length. [ 401.505184][T11471] netlink: 'syz.2.1424': attribute type 29 has an invalid length. [ 402.005274][T11482] netlink: 'syz.1.1427': attribute type 13 has an invalid length. [ 402.030701][T11482] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1427'. [ 402.080653][T11482] erspan0: refused to change device tx_queue_len [ 402.524919][T11502] netlink: 'syz.1.1432': attribute type 10 has an invalid length. [ 402.533670][T11502] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1432'. [ 402.545695][T11502] ipvlan1: entered promiscuous mode [ 402.551239][T11502] ipvlan1: entered allmulticast mode [ 402.562486][T11502] veth0_vlan: entered allmulticast mode [ 402.587292][T11502] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 402.925077][T11512] netlink: 'syz.0.1436': attribute type 3 has an invalid length. [ 402.946768][T11512] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1436'. [ 403.014253][T11512] netlink: 'syz.0.1436': attribute type 10 has an invalid length. [ 403.081515][T11512] bridge0: port 3(team0) entered disabled state [ 403.116834][T11512] team0: left allmulticast mode [ 403.122044][T11512] team_slave_0: left allmulticast mode [ 403.149566][T11508] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1434'. [ 403.172695][T11512] team_slave_1: left allmulticast mode [ 403.182867][T11512] bond0: left allmulticast mode [ 403.189298][T11512] @0Ù: left allmulticast mode [ 403.195201][T11512] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 403.213911][T11512] team0: left promiscuous mode [ 403.219052][T11512] team_slave_0: left promiscuous mode [ 403.228380][T11512] team_slave_1: left promiscuous mode [ 403.237279][T11512] bond0: left promiscuous mode [ 403.244836][T11512] @0Ù: left promiscuous mode [ 403.252276][T11512] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 403.264687][T11512] bridge0: port 3(team0) entered disabled state [ 403.308531][T11512] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.696252][T11533] netlink: 'syz.2.1442': attribute type 10 has an invalid length. [ 403.806403][T11533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.834011][T11533] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 403.849603][T11535] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1442'. [ 403.884248][T11534] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1442'. [ 404.516484][T11541] netlink: 'syz.0.1443': attribute type 2 has an invalid length. [ 404.528018][T11541] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1443'. [ 405.723372][T11591] __nla_validate_parse: 2 callbacks suppressed [ 405.723390][T11591] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1454'. [ 406.246761][T11609] validate_nla: 3 callbacks suppressed [ 406.247038][T11609] netlink: 'syz.0.1461': attribute type 21 has an invalid length. [ 406.267857][T11609] IPv6: NLM_F_CREATE should be specified when creating new route [ 406.277144][T11609] IPv6: Can't replace route, no match found [ 406.332252][T11609] netlink: 'syz.0.1461': attribute type 10 has an invalid length. [ 406.459828][T11609] team0: Device wg1 is of different type [ 406.513412][T11614] netlink: 'syz.1.1462': attribute type 28 has an invalid length. [ 406.883688][T11621] netlink: 'syz.1.1464': attribute type 3 has an invalid length. [ 406.903408][T11621] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1464'. [ 406.955609][T11629] netlink: 'syz.0.1472': attribute type 10 has an invalid length. [ 406.994544][T11621] netlink: 'syz.1.1464': attribute type 10 has an invalid length. [ 407.015399][T11621] team0: left promiscuous mode [ 407.020653][T11621] team_slave_1: left promiscuous mode [ 407.043519][T11621] team0: left allmulticast mode [ 407.048885][T11621] team_slave_1: left allmulticast mode [ 407.167602][T11621] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.200329][T11621] bond0: (slave team0): Enslaving as an active interface with an up link [ 407.213648][T11631] IPv6: Can't replace route, no match found [ 407.281855][T11621] syz.1.1464 (11621) used greatest stack depth: 16872 bytes left [ 407.672153][T11636] netlink: 'syz.1.1468': attribute type 21 has an invalid length. [ 408.192548][T11654] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1473'. [ 408.209750][T11654] veth1_vlan: mtu less than device minimum [ 408.363232][T11660] netlink: 'syz.3.1475': attribute type 13 has an invalid length. [ 408.371122][T11660] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1475'. [ 408.399502][T11660] syz_tun: refused to change device tx_queue_len [ 408.406243][T11660] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 408.839953][T11672] netlink: 'syz.2.1477': attribute type 3 has an invalid length. [ 408.849579][T11672] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1477'. [ 408.918327][T11676] netlink: 'syz.2.1477': attribute type 10 has an invalid length. [ 409.031908][T11676] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.065968][T11676] bond0: (slave team0): Enslaving as an active interface with an up link [ 409.097963][T11680] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1480'. [ 410.532756][T11704] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1487'. [ 410.601052][T11704] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 412.833969][T11744] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.841854][T11744] bridge0: entered allmulticast mode [ 413.223216][T11744] bridge_slave_1: left allmulticast mode [ 413.279760][T11744] bridge_slave_1: left promiscuous mode [ 413.303381][T11744] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.678122][T11753] netlink: 170416 bytes leftover after parsing attributes in process `syz.1.1502'. [ 414.368141][ T5782] Bluetooth: hci3: adv larger than maximum supported [ 414.928332][T11787] validate_nla: 4 callbacks suppressed [ 414.928370][T11787] netlink: 'syz.2.1511': attribute type 10 has an invalid length. [ 414.970581][T11787] netlink: 211796 bytes leftover after parsing attributes in process `syz.2.1511'. [ 414.984479][T11787] openvswitch: netlink: Message has 4 unknown bytes. [ 415.050122][T11789] netlink: 'syz.1.1512': attribute type 10 has an invalid length. [ 415.063672][T11789] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1512'. [ 415.298989][T11803] syzkaller0: entered promiscuous mode [ 415.313032][T11803] syzkaller0: entered allmulticast mode [ 520.342962][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 520.349972][ C0] rcu: 0-...!: (1 GPs behind) idle=7544/1/0x4000000000000000 softirq=37719/37720 fqs=2 [ 520.360871][ C0] rcu: (t=10502 jiffies g=46001 q=118 ncpus=2) [ 520.367143][ C0] rcu: rcu_preempt kthread starved for 10499 jiffies! g46001 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 520.378372][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 520.388372][ C0] rcu: RCU grace-period kthread stack dump: [ 520.394291][ C0] task:rcu_preempt state:R running task stack:27240 pid:17 ppid:2 flags:0x00004000 [ 520.405116][ C0] Call Trace: [ 520.408446][ C0] [ 520.411409][ C0] __schedule+0x15ae/0x4660 [ 520.415962][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 520.421026][ C0] ? lock_chain_count+0x20/0x20 [ 520.425945][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 520.431183][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 520.437116][ C0] ? asan.module_dtor+0x20/0x20 [ 520.442013][ C0] ? rcu_is_watching+0x15/0xb0 [ 520.446854][ C0] schedule+0xbd/0x170 [ 520.450979][ C0] schedule_timeout+0x188/0x2d0 [ 520.455880][ C0] ? console_conditional_schedule+0x40/0x40 [ 520.461833][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 520.467760][ C0] ? update_process_times+0x1b0/0x1b0 [ 520.473172][ C0] ? prepare_to_swait_event+0x344/0x360 [ 520.478754][ C0] rcu_gp_fqs_loop+0x30d/0x1590 [ 520.483646][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 520.489835][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 520.494911][ C0] ? rcu_gp_init+0x1530/0x1530 [ 520.499725][ C0] ? rcu_gp_cleanup+0xade/0xc30 [ 520.504621][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 520.509864][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 520.515104][ C0] rcu_gp_kthread+0x9d/0x3b0 [ 520.519749][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 520.524912][ C0] ? __kthread_parkme+0x71/0x1c0 [ 520.529899][ C0] ? __kthread_parkme+0x15b/0x1c0 [ 520.534960][ C0] kthread+0x2fa/0x390 [ 520.539070][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 520.544223][ C0] ? kthread_blkcg+0xd0/0xd0 [ 520.548857][ C0] ret_from_fork+0x48/0x80 [ 520.553322][ C0] ? kthread_blkcg+0xd0/0xd0 [ 520.557951][ C0] ret_from_fork_asm+0x11/0x20 [ 520.562772][ C0] [ 520.565822][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 520.572234][ C0] Sending NMI from CPU 0 to CPUs 1: [ 520.577497][ C1] NMI backtrace for cpu 1 [ 520.577506][ C1] CPU: 1 PID: 11801 Comm: syz.2.1516 Not tainted syzkaller #0 [ 520.577521][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 520.577530][ C1] RIP: 0010:__lock_acquire+0x9d9/0x7d80 [ 520.577560][ C1] Code: 03 42 0f b6 04 00 84 c0 0f 85 24 01 00 00 45 0f b6 24 24 45 84 e4 74 3e 0f b6 84 24 90 00 00 00 41 0f b6 cc 44 38 e0 0f 42 c8 <89> 8c 24 90 00 00 00 49 81 c6 ca 00 00 00 4c 89 f0 48 c1 e8 03 42 [ 520.577573][ C1] RSP: 0018:ffffc900001ef8a0 EFLAGS: 00000046 [ 520.577586][ C1] RAX: 0000000000000002 RBX: 0000000000000003 RCX: 0000000000000002 [ 520.577595][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff911eb500 [ 520.577604][ C1] RBP: ffffc900001efae8 R08: dffffc0000000000 R09: 1ffffffff223d6a0 [ 520.577616][ C1] R10: dffffc0000000000 R11: fffffbfff223d6a1 R12: 0000000000000002 [ 520.577631][ C1] R13: ffff88802493a980 R14: ffffffff90b54e90 R15: ffff88802493a980 [ 520.577643][ C1] FS: 00007f6a10b086c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 520.577656][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 520.577666][ C1] CR2: 0000000100000001 CR3: 000000005faf2000 CR4: 00000000003506e0 [ 520.577679][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 520.577688][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 520.577697][ C1] Call Trace: [ 520.577702][ C1] [ 520.577714][ C1] ? __read_once_word_nocheck+0x9/0x10 [ 520.577751][ C1] ? exc_general_protection+0x168/0x1f0 [ 520.577775][ C1] ? verify_lock_unused+0x140/0x140 [ 520.577800][ C1] ? asm_exc_general_protection+0x26/0x30 [ 520.577827][ C1] lock_acquire+0x19e/0x420 [ 520.577845][ C1] ? perf_output_begin_forward+0xc2/0xa60 [ 520.577863][ C1] ? perf_callchain_user+0xe30/0x15d0 [ 520.577892][ C1] ? read_lock_is_recursive+0x20/0x20 [ 520.577911][ C1] ? get_perf_callchain+0x3f8/0x510 [ 520.577930][ C1] ? put_callchain_entry+0xb0/0xb0 [ 520.577949][ C1] perf_output_begin_forward+0xde/0xa60 [ 520.577966][ C1] ? perf_output_begin_forward+0xc2/0xa60 [ 520.577985][ C1] ? perf_reg_abi+0x62/0x90 [ 520.577999][ C1] ? perf_prepare_sample+0x1558/0x1db0 [ 520.578018][ C1] ? __perf_cgroup_move+0x60/0x60 [ 520.578034][ C1] ? read_lock_is_recursive+0x20/0x20 [ 520.578053][ C1] ? perf_callchain+0x220/0x220 [ 520.578075][ C1] perf_event_output_forward+0x25a/0x3e0 [ 520.578094][ C1] ? perf_event_output_forward+0xb9/0x3e0 [ 520.578112][ C1] ? perf_prepare_header+0x1e0/0x1e0 [ 520.578138][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 520.578159][ C1] __perf_event_overflow+0x461/0x660 [ 520.578181][ C1] perf_swevent_event+0x319/0x570 [ 520.578202][ C1] ? perf_tp_event+0x1550/0x1550 [ 520.578221][ C1] ? perf_trace_buf_alloc+0x290/0x290 [ 520.578242][ C1] ? verify_lock_unused+0x140/0x140 [ 520.578264][ C1] perf_tp_event+0x620/0x1550 [ 520.578285][ C1] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 520.578308][ C1] ? trace_irq_enable+0xbb/0xe0 [ 520.578343][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 520.578359][ C1] ? sched_clock_cpu+0x75/0x430 [ 520.578374][ C1] ? ktime_get+0x24b/0x280 [ 520.578395][ C1] perf_trace_run_bpf_submit+0xf4/0x1c0 [ 520.578417][ C1] perf_trace_preemptirq_template+0x269/0x330 [ 520.578442][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 520.578466][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 520.578492][ C1] ? __irq_exit_rcu+0xdf/0x190 [ 520.578508][ C1] ? irq_exit_rcu+0x20/0x20 [ 520.578526][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 520.578550][ C1] trace_irq_enable+0xbb/0xe0 [ 520.578572][ C1] trace_hardirqs_on+0x18/0x40 [ 520.578594][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 520.578623][ C1] RIP: 0010:unwind_next_frame+0x1f4/0x2990 [ 520.578640][ C1] Code: fe 00 00 00 81 40 0f 92 c5 4c 89 f7 48 c7 c6 00 00 c0 8a e8 ae d7 4b 00 49 81 fe 00 00 c0 8a 0f 93 c0 40 08 e8 4c 89 74 24 50 <0f> 85 e2 00 00 00 49 29 de 49 c1 ee 08 44 8b 2d c0 1a 6e 0b 41 8d [ 520.578653][ C1] RSP: 0018:ffffc900001f0498 EFLAGS: 00000246 [ 520.578665][ C1] RAX: ffffffff813bb500 RBX: ffffffff81000000 RCX: ffff888024939e00 [ 520.578677][ C1] RDX: 0000000000000100 RSI: ffffffff8ac00000 RDI: ffffffff8152e17c [ 520.578688][ C1] RBP: ffffc900001f0500 R08: ffffc900001f0630 R09: 000000000000000a [ 520.578699][ C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffffc900001f0e40 [ 520.578709][ C1] R13: ffffc900001f0568 R14: ffffffff8152e17c R15: 0000000000000001 [ 520.578721][ C1] ? handle_softirqs+0x27c/0x820 [ 520.578738][ C1] ? 0xffffffff81000000 [ 520.578750][ C1] ? unwind_next_frame+0x130/0x2990 [ 520.578766][ C1] ? handle_softirqs+0x27c/0x820 [ 520.578784][ C1] ? unwind_next_frame+0x1e2/0x2990 [ 520.578802][ C1] ? handle_softirqs+0x27c/0x820 [ 520.578818][ C1] ? handle_softirqs+0x27d/0x820 [ 520.578835][ C1] ? handle_softirqs+0x27d/0x820 [ 520.578850][ C1] ? stack_trace_save+0x100/0x100 [ 520.578871][ C1] arch_stack_walk+0x144/0x190 [ 520.578891][ C1] ? handle_softirqs+0x27d/0x820 [ 520.578909][ C1] stack_trace_save+0xaa/0x100 [ 520.578929][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 520.578961][ C1] ? stack_trace_save+0xaa/0x100 [ 520.578979][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 520.578999][ C1] kasan_set_track+0x4e/0x70 [ 520.579017][ C1] ? kasan_set_track+0x4e/0x70 [ 520.579033][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 520.579050][ C1] ? slab_post_alloc_hook+0x6a/0x4d0 [ 520.579072][ C1] ? kmem_cache_alloc_node+0x1af/0x310 [ 520.579094][ C1] ? kmalloc_reserve+0x95/0x240 [ 520.579112][ C1] ? __alloc_skb+0x138/0x2c0 [ 520.579129][ C1] ? aoecmd_cfg+0x2c5/0xa50 [ 520.579149][ C1] ? call_timer_fn+0x189/0x540 [ 520.579163][ C1] ? __run_timers+0x570/0x810 [ 520.579178][ C1] ? run_timer_softirq+0x67/0xf0 [ 520.579192][ C1] ? handle_softirqs+0x27d/0x820 [ 520.579225][ C1] __kasan_slab_alloc+0x6c/0x80 [ 520.579244][ C1] slab_post_alloc_hook+0x6a/0x4d0 [ 520.579270][ C1] kmem_cache_alloc_node+0x1af/0x310 [ 520.579293][ C1] ? kmalloc_reserve+0x95/0x240 [ 520.579316][ C1] kmalloc_reserve+0x95/0x240 [ 520.579336][ C1] __alloc_skb+0x138/0x2c0 [ 520.579373][ C1] aoecmd_cfg+0x2c5/0xa50 [ 520.579396][ C1] ? aoecmd_cfg+0x10e/0xa50 [ 520.579418][ C1] ? ktcomplete+0x2a0/0x2a0 [ 520.579448][ C1] call_timer_fn+0x189/0x540 [ 520.579464][ C1] ? skbfree+0x340/0x340 [ 520.579485][ C1] ? call_timer_fn+0xd2/0x540 [ 520.579501][ C1] ? __run_timers+0x810/0x810 [ 520.579522][ C1] ? skbfree+0x340/0x340 [ 520.579545][ C1] __run_timers+0x570/0x810 [ 520.579568][ C1] ? detach_timer+0x2b0/0x2b0 [ 520.579591][ C1] run_timer_softirq+0x67/0xf0 [ 520.579608][ C1] handle_softirqs+0x27d/0x820 [ 520.579628][ C1] ? read_tsc+0x9/0x20 [ 520.579645][ C1] ? ktime_get+0x24b/0x280 [ 520.579664][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 520.579683][ C1] ? do_softirq+0x1a0/0x1a0 [ 520.579701][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 520.579724][ C1] __irq_exit_rcu+0xd3/0x190 [ 520.579740][ C1] ? irq_exit_rcu+0x20/0x20 [ 520.579760][ C1] irq_exit_rcu+0x9/0x20 [ 520.579775][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 520.579790][ C1] [ 520.579795][ C1] [ 520.579800][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 520.579823][ C1] RIP: 0010:generic_exec_single+0x477/0x4e0 [ 520.579842][ C1] Code: 75 11 e8 2c 10 0b 00 48 85 db 75 16 e8 22 10 0b 00 eb 15 e8 1b 10 0b 00 e8 a6 cf 14 09 48 85 db 74 ea e8 0c 10 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 43 c7 44 2c 08 [ 520.579855][ C1] RSP: 0018:ffffc90018557a00 EFLAGS: 00000246 [ 520.579867][ C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: ffff888024939e00 [ 520.579877][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 520.579886][ C1] RBP: ffffc90018557ad0 R08: ffffffff911eb5ff R09: 1ffffffff223d6bf [ 520.579898][ C1] R10: dffffc0000000000 R11: fffffbfff223d6c0 R12: 1ffff920030aaf44 [ 520.579909][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff920030aaf65 [ 520.579929][ C1] ? event_function+0x300/0x300 [ 520.579950][ C1] ? smp_call_function_single+0x5a0/0x5a0 [ 520.579969][ C1] ? percpu_counter_add_batch+0x1f4/0x2a0 [ 520.579992][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 520.580007][ C1] ? smp_call_function_single+0xb0/0x5a0 [ 520.580028][ C1] smp_call_function_single+0x36d/0x5a0 [ 520.580047][ C1] ? event_function+0x300/0x300 [ 520.580067][ C1] ? flush_smp_call_function_queue+0x250/0x250 [ 520.580087][ C1] ? event_function+0x300/0x300 [ 520.580113][ C1] perf_install_in_context+0x5bb/0x920 [ 520.580137][ C1] ? alloc_file_pseudo+0x1ae/0x210 [ 520.580154][ C1] ? exclusive_event_installable+0x2c0/0x2c0 [ 520.580175][ C1] ? add_event_to_ctx+0x1170/0x1170 [ 520.580194][ C1] ? anon_inode_getfile+0x109/0x1a0 [ 520.580219][ C1] ? perf_event__header_size+0x165/0x220 [ 520.580242][ C1] __se_sys_perf_event_open+0x1818/0x1d40 [ 520.580269][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 520.580294][ C1] ? lock_chain_count+0x20/0x20 [ 520.580315][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 520.580330][ C1] ? __x64_sys_perf_event_open+0x20/0xc0 [ 520.580350][ C1] do_syscall_64+0x55/0xb0 [ 520.580371][ C1] ? clear_bhb_loop+0x40/0x90 [ 520.580393][ C1] ? clear_bhb_loop+0x40/0x90 [ 520.580415][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 520.580437][ C1] RIP: 0033:0x7f6a0fb9e159 [ 520.580450][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.580463][ C1] RSP: 002b:00007f6a10b08028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 520.580478][ C1] RAX: ffffffffffffffda RBX: 00007f6a0fe26090 RCX: 00007f6a0fb9e159 [ 520.580489][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000480 [ 520.580500][ C1] RBP: 00007f6a0fc3506b R08: 000000000000000a R09: 0000000000000000 [ 520.580510][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 520.580520][ C1] R13: 00007f6a0fe26128 R14: 00007f6a0fe26090 R15: 00007ffde21ed778 [ 520.580538][ C1] [ 520.581496][ C0] CPU: 0 PID: 11799 Comm: syz.2.1516 Not tainted syzkaller #0 [ 521.569178][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 521.579271][ C0] RIP: 0010:__sanitizer_cov_trace_switch+0x7f/0xe0 [ 521.585819][ C0] Code: c9 eb 08 49 ff c1 4c 39 c8 74 77 4e 8b 54 ce 10 65 44 8b 1d 8b 27 7c 7e 41 81 e3 00 01 ff 00 74 13 41 81 fb 00 01 00 00 75 d9 <41> 83 b8 24 16 00 00 00 74 cf 45 8b 98 00 16 00 00 41 83 fb 03 75 [ 521.605462][ C0] RSP: 0018:ffffc90000007390 EFLAGS: 00000246 [ 521.611576][ C0] RAX: 0000000000000008 RBX: 0000000000000000 RCX: 0000000000000003 [ 521.619588][ C0] RDX: ffffffff813bbb18 RSI: ffffffff8cfa0900 RDI: 0000000000000004 [ 521.627803][ C0] RBP: ffffc90000007538 R08: ffff88802bbd0000 R09: 0000000000000007 [ 521.635813][ C0] R10: 0000000000000009 R11: 0000000000000100 R12: ffffffff8f0e6af2 [ 521.643827][ C0] R13: ffffc900000074e8 R14: 0000000000000004 R15: dffffc0000000000 [ 521.651864][ C0] FS: 00007f6a10b296c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 521.660853][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 521.667494][ C0] CR2: 0000000100000000 CR3: 000000005faf2000 CR4: 00000000003506f0 [ 521.675616][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 521.683631][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 521.691641][ C0] Call Trace: [ 521.694951][ C0] [ 521.697827][ C0] unwind_next_frame+0x748/0x2990 [ 521.702904][ C0] ? arch_stack_walk+0xf8/0x190 [ 521.707809][ C0] __unwind_start+0x5bb/0x730 [ 521.712536][ C0] ? stack_trace_save+0x100/0x100 [ 521.717619][ C0] arch_stack_walk+0xf8/0x190 [ 521.722351][ C0] ? arch_stack_walk+0xf8/0x190 [ 521.727259][ C0] stack_trace_save+0xaa/0x100 [ 521.732070][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 521.737232][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 521.742561][ C0] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 521.748848][ C0] kasan_set_track+0x4e/0x70 [ 521.753540][ C0] ? __kmem_cache_alloc_node+0x194/0x250 [ 521.759219][ C0] ? switchdev_deferred_enqueue+0x2d/0x240 [ 521.765072][ C0] __kasan_kmalloc+0x8f/0xa0 [ 521.769709][ C0] ? switchdev_deferred_enqueue+0x2d/0x240 [ 521.775571][ C0] ? switchdev_port_obj_add_deferred+0x350/0x350 [ 521.781941][ C0] __kmalloc+0xb7/0x240 [ 521.786155][ C0] switchdev_deferred_enqueue+0x2d/0x240 [ 521.791836][ C0] br_switchdev_mdb_notify+0x410/0x870 [ 521.797351][ C0] ? br_switchdev_port_vlan_del+0x120/0x120 [ 521.803320][ C0] ? br_multicast_host_join+0x2e0/0x2e0 [ 521.808919][ C0] ? do_raw_spin_lock+0x11f/0x2b0 [ 521.814003][ C0] br_mdb_notify+0x68/0x970 [ 521.818564][ C0] ? read_lock_is_recursive+0x20/0x20 [ 521.823999][ C0] br_multicast_group_expired+0x284/0x530 [ 521.829778][ C0] call_timer_fn+0x189/0x540 [ 521.834419][ C0] ? br_multicast_destroy_mdb_entry+0xc0/0xc0 [ 521.840533][ C0] ? call_timer_fn+0xd2/0x540 [ 521.845304][ C0] ? __run_timers+0x810/0x810 [ 521.850039][ C0] ? br_multicast_destroy_mdb_entry+0xc0/0xc0 [ 521.856158][ C0] __run_timers+0x570/0x810 [ 521.860717][ C0] ? detach_timer+0x2b0/0x2b0 [ 521.865444][ C0] run_timer_softirq+0x67/0xf0 [ 521.870247][ C0] handle_softirqs+0x27d/0x820 [ 521.875050][ C0] ? read_tsc+0x9/0x20 [ 521.879166][ C0] ? ktime_get+0x24b/0x280 [ 521.883633][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 521.888436][ C0] ? do_softirq+0x1a0/0x1a0 [ 521.892987][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 521.898234][ C0] __irq_exit_rcu+0xd3/0x190 [ 521.902866][ C0] ? irq_exit_rcu+0x20/0x20 [ 521.907411][ C0] irq_exit_rcu+0x9/0x20 [ 521.911755][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 521.917419][ C0] [ 521.920465][ C0] [ 521.923430][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 521.929460][ C0] RIP: 0010:generic_exec_single+0x477/0x4e0 [ 521.935395][ C0] Code: 75 11 e8 2c 10 0b 00 48 85 db 75 16 e8 22 10 0b 00 eb 15 e8 1b 10 0b 00 e8 a6 cf 14 09 48 85 db 74 ea e8 0c 10 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 43 c7 44 2c 08 [ 521.955043][ C0] RSP: 0018:ffffc9001841fa00 EFLAGS: 00000246 [ 521.961171][ C0] RAX: 0000000000000000 RBX: 0000000000000200 RCX: ffff88802bbd0000 [ 521.969213][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 521.977225][ C0] RBP: ffffc9001841fad0 R08: ffffffff911eb5ff R09: 1ffffffff223d6bf [ 521.985237][ C0] R10: dffffc0000000000 R11: fffffbfff223d6c0 R12: 1ffff92003083f44 [ 521.993245][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92003083f65 [ 522.001287][ C0] ? event_function+0x300/0x300 [ 522.006191][ C0] ? smp_call_function_single+0x5a0/0x5a0 [ 522.011968][ C0] ? percpu_counter_add_batch+0x1f4/0x2a0 [ 522.017733][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 522.022974][ C0] ? smp_call_function_single+0xb0/0x5a0 [ 522.028660][ C0] smp_call_function_single+0x36d/0x5a0 [ 522.034263][ C0] ? event_function+0x300/0x300 [ 522.039165][ C0] ? flush_smp_call_function_queue+0x250/0x250 [ 522.045368][ C0] ? event_function+0x300/0x300 [ 522.050280][ C0] perf_install_in_context+0x5bb/0x920 [ 522.055796][ C0] ? alloc_file_pseudo+0x1ae/0x210 [ 522.060955][ C0] ? exclusive_event_installable+0x2c0/0x2c0 [ 522.066986][ C0] ? add_event_to_ctx+0x1170/0x1170 [ 522.072244][ C0] ? anon_inode_getfile+0x109/0x1a0 [ 522.077487][ C0] ? perf_event__header_size+0x165/0x220 [ 522.083164][ C0] __se_sys_perf_event_open+0x1818/0x1d40 [ 522.088960][ C0] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 522.094650][ C0] ? lock_chain_count+0x20/0x20 [ 522.099552][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 522.104795][ C0] ? __x64_sys_perf_event_open+0x20/0xc0 [ 522.110486][ C0] do_syscall_64+0x55/0xb0 [ 522.114980][ C0] ? clear_bhb_loop+0x40/0x90 [ 522.119793][ C0] ? clear_bhb_loop+0x40/0x90 [ 522.124525][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 522.130466][ C0] RIP: 0033:0x7f6a0fb9e159 [ 522.134931][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.154582][ C0] RSP: 002b:00007f6a10b29028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 522.163047][ C0] RAX: ffffffffffffffda RBX: 00007f6a0fe25fa0 RCX: 00007f6a0fb9e159 [ 522.171058][ C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000480 [ 522.179069][ C0] RBP: 00007f6a0fc3506b R08: 000000000000000a R09: 0000000000000000 [ 522.187089][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 522.195097][ C0] R13: 00007f6a0fe26038 R14: 00007f6a0fe25fa0 R15: 00007ffde21ed778 [ 522.203127][ C0]