last executing test programs: 9.579763581s ago: executing program 2 (id=2407): bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0xffffffff}]}, 0x94) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xdc101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x7}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x842, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, r0, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) syz_clone(0x400000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 9.488015673s ago: executing program 2 (id=2409): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x101048, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='GPL\x00'}, 0x94) r0 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0xf}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x0, 0x56}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="4c000000140097f87059ae08060c040002ff0f020000000000001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e7d06a60300000072f750375ed08a5604000000", 0x4c}], 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)=ANY=[@ANYRES32=0x1, @ANYRES32=0x0, @ANYBLOB], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r6, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x767) r8 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) write$cgroup_devices(r7, 0x0, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="2e0000002a00818a04fb7fec598f866b29924a6f130000005e14060800000000000000000f0000000280a71802dd", 0x2e}], 0x1}, 0x0) socket$kcm(0xa, 0x2, 0x0) 9.034915694s ago: executing program 2 (id=2412): perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x7, 0x3, 0x3, 0x9, 0x0, 0x7, 0x40200, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x3, 0x8eaf}, 0x0, 0x8, 0x84a, 0x4, 0x6, 0xffffffff, 0x4, 0x0, 0x5, 0x0, 0x5}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x9) (async) r0 = perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x7, 0x3, 0x3, 0x9, 0x0, 0x7, 0x40200, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x3, 0x8eaf}, 0x0, 0x8, 0x84a, 0x4, 0x6, 0xffffffff, 0x4, 0x0, 0x5, 0x0, 0x5}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000080)) (async) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000080)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%-010d \x00'}, 0x20) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000180)=r1, 0x4) r2 = getpid() r3 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xd, 0x81, 0x81, 0x2, 0x0, 0xc04b, 0xb360, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2543f598044a3662, @perf_bp={&(0x7f0000000240), 0x2}, 0x100120, 0x30e, 0x5, 0x6, 0x6, 0x3, 0x1, 0x0, 0x401, 0x0, 0x8001}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x58, 0x5, 0x6, 0x0, 0xffffffffffffa4a9, 0x202, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x892, 0x2, @perf_config_ext={0x9, 0x9}, 0x10840, 0xfbf4, 0x5, 0x3, 0x7f, 0x4, 0x9, 0x0, 0x3, 0x0, 0x1}, r2, 0xb, r3, 0x0) (async) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x58, 0x5, 0x6, 0x0, 0xffffffffffffa4a9, 0x202, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x892, 0x2, @perf_config_ext={0x9, 0x9}, 0x10840, 0xfbf4, 0x5, 0x3, 0x7f, 0x4, 0x9, 0x0, 0x3, 0x0, 0x1}, r2, 0xb, r3, 0x0) r4 = syz_clone(0x824480, &(0x7f0000000300)="44f5c252a63c3769b2bf5a5a330f0177506e86f044cea406a6dd2e5649c1c10fd88ed10d3345d5e8b1e20eec5126e2760d80634506277560ef46ebd32099b212531c9b0f7ab609b1af35c4eb2b7aa7b4d90a40429a8bcf4da327a9636e2e35", 0x5f, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)="dc03862e1e164f5b236e3ce4814d9e349cc6e5e64faebed984490d6a1e5acffc33afe530101e3119bfee5b864e4ccdb2d6c9133486d6999bd7be34ae17f7a9b6bf8ffbee5d70fe8e4699f79b69bf70973b62aa101861cac153bd9f4d46d610f6aae67a316d132c15419b3e46880611aa3568f9f1311b200d3db75bf35c5ab1401f0aba31f7a661decbc8c0c94e0ff861cfdc8e5202e81baf4d2d0c") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x63, 0xf6, &(0x7f00000004c0)="5634248aed8de7a4b343e7a6f5c50de11f568ccb9e6b39feb2b6385a8f6ebecd2c3731f1f460dc9f1619340198858ded7a240d83da1eb1f47425265c667c4a8e1caff74e77b1cdd570f6747d7b463ff4ccd203012ac9d2f9122a0112e770c9231ac14c", &(0x7f0000000540)=""/246, 0x43, 0x0, 0x3, 0x7e, &(0x7f0000000640)="b7ca8b", &(0x7f0000000680)="ee81c159829c511c2ae4003874ae0e8a2b50d1b329d77faf6a7e138d36c8d5551e9728b5a2b74fcbc6b7fc5dbe7a0163d0f2a24780a37827109f0258a015f9c902c7bb54c2aca9a41da7e631ab74efcd63ba5652d00b07980bc7fca31d3e8320c57ed4c8dfe7a15746d40111d677ebd3a09488683b68c25ff39ddd86d59e", 0x6, 0x0, 0x1}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x63, 0xf6, &(0x7f00000004c0)="5634248aed8de7a4b343e7a6f5c50de11f568ccb9e6b39feb2b6385a8f6ebecd2c3731f1f460dc9f1619340198858ded7a240d83da1eb1f47425265c667c4a8e1caff74e77b1cdd570f6747d7b463ff4ccd203012ac9d2f9122a0112e770c9231ac14c", &(0x7f0000000540)=""/246, 0x43, 0x0, 0x3, 0x7e, &(0x7f0000000640)="b7ca8b", &(0x7f0000000680)="ee81c159829c511c2ae4003874ae0e8a2b50d1b329d77faf6a7e138d36c8d5551e9728b5a2b74fcbc6b7fc5dbe7a0163d0f2a24780a37827109f0258a015f9c902c7bb54c2aca9a41da7e631ab74efcd63ba5652d00b07980bc7fca31d3e8320c57ed4c8dfe7a15746d40111d677ebd3a09488683b68c25ff39ddd86d59e", 0x6, 0x0, 0x1}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='cgroup.events\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r5, 0x0, 0xbf, 0x66, &(0x7f00000007c0)="1398d872e6eded51b27470091bb5666cd69edea6f87273108329ede3fc725ee8e53a47ccb925a2047cf4ec10ca570a0cd9a934d8d6794ef6442372871a0ea09e19d0df413db98ae42a99db282c2af1e6cbf4e6c8c6332a9940984998c4f4a836b972e33def4b7db34ac7cbaa99a506db65d90d439a96f9bb4210d31698b823f80345def82e35e53224b92400feadf529759fbac883330d3f3c226298fe9e8ea03a125b677ea1f1f39ccacebeca97693b83e02a38b2cab557296c8b50d39c47", &(0x7f0000000880)=""/102, 0x4, 0x0, 0xbf, 0x0, &(0x7f0000000900)="ed6e948a6024845799d8c1ee3a36d5213f5edfd8b4721cc2fef49ee80f97423d1e11ada9e0206641ebab65334d5ea8ef5a6b48d2d5b99c637c165363eea85ddb4af0e76d9c07aaf10b3e3951b1b6ae1a0184696beb91f4bfd986f95546a07f866da35d329f5e050cfbd067ec1d7cd62907e179f76e0b4df3809efae6b899a58310c1ddc119c057d674604eff0be6c2151b8e3b05cc400b1acd8d6c56b4ae4fa7c473684ab869cd5d16d960877e672daa983f7d776e16fd4fe25554838f62cc", &(0x7f00000009c0), 0x6, 0x0, 0x9}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r5, 0x0, 0xbf, 0x66, &(0x7f00000007c0)="1398d872e6eded51b27470091bb5666cd69edea6f87273108329ede3fc725ee8e53a47ccb925a2047cf4ec10ca570a0cd9a934d8d6794ef6442372871a0ea09e19d0df413db98ae42a99db282c2af1e6cbf4e6c8c6332a9940984998c4f4a836b972e33def4b7db34ac7cbaa99a506db65d90d439a96f9bb4210d31698b823f80345def82e35e53224b92400feadf529759fbac883330d3f3c226298fe9e8ea03a125b677ea1f1f39ccacebeca97693b83e02a38b2cab557296c8b50d39c47", &(0x7f0000000880)=""/102, 0x4, 0x0, 0xbf, 0x0, &(0x7f0000000900)="ed6e948a6024845799d8c1ee3a36d5213f5edfd8b4721cc2fef49ee80f97423d1e11ada9e0206641ebab65334d5ea8ef5a6b48d2d5b99c637c165363eea85ddb4af0e76d9c07aaf10b3e3951b1b6ae1a0184696beb91f4bfd986f95546a07f866da35d329f5e050cfbd067ec1d7cd62907e179f76e0b4df3809efae6b899a58310c1ddc119c057d674604eff0be6c2151b8e3b05cc400b1acd8d6c56b4ae4fa7c473684ab869cd5d16d960877e672daa983f7d776e16fd4fe25554838f62cc", &(0x7f00000009c0), 0x6, 0x0, 0x9}, 0x50) write$cgroup_freezer_state(r3, &(0x7f0000000a80)='FREEZING\x00', 0x9) (async) write$cgroup_freezer_state(r3, &(0x7f0000000a80)='FREEZING\x00', 0x9) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000cc0)={r5, 0x58, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000d40)={0x10000, 0x0}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0xf, 0x12, &(0x7f0000000ac0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @generic={0x81, 0x4, 0x6, 0xf, 0x800}, @call={0x85, 0x0, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x35}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x2}], &(0x7f0000000b80)='GPL\x00', 0xfffffff9, 0x72, &(0x7f0000000bc0)=""/114, 0x41100, 0x74, '\x00', r6, @fallback=0x38, r5, 0x8, &(0x7f0000000d00)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, r7, r5, 0x0, &(0x7f0000000d80)=[r1, r1, r1, r5, r1, r5, 0xffffffffffffffff], &(0x7f0000000dc0), 0x10, 0x4}, 0x94) syz_clone(0x20010000, &(0x7f0000000ec0)="4d377a405aa305459d", 0x9, &(0x7f0000000f00), &(0x7f0000000f40), &(0x7f0000000f80)="40d0f6d43f3151096645c2f7b28320c91ed1c932242d6d55ee9f1577b06d20462a2ab0819afdf4155a610bf4552e7e4461bad821a00ad3c14fec7c571e44e297441d6e2fcefa4db408ff3534434724d220b336c3dd0d85ebb50cd03bb7d19c813681e28719e872c34fcd0d8f9a004141c57aba99bf6d435ba8f2a07a5cdcea75596c0e045accab681bb2ebf95e757c31e9516b3b7495cbcfcabbb885f1c748ab4e2989feb4a9a6a80157843643d25e79393e94457bd22ca0abdbe35bcadf2ee938f8f29b779abbf090948160f8f02ff2c8cc7e494a9f1bf2da0f38aead4ad90bcfb00200aceb0311a177e0cf6f70457ea1e4677708b7b10e") r9 = openat$cgroup(r5, &(0x7f00000010c0)='syz0\x00', 0x200002, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x8, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001080)={@cgroup=r9, r8, 0x24, 0x2020, 0x0, @void, @void, @value=r10}, 0x20) write$cgroup_pid(r5, &(0x7f0000001140)=r4, 0x12) (async) write$cgroup_pid(r5, &(0x7f0000001140)=r4, 0x12) write$cgroup_devices(r5, &(0x7f0000001180)={'a', ' *:* ', 'rwm\x00'}, 0xa) socket$kcm(0x29, 0x0, 0x0) (async) socket$kcm(0x29, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000012c0)={@ifindex=r6, 0x1e, 0x0, 0x10000, &(0x7f00000011c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000001200)=[0x0], &(0x7f0000001240)=[0x0, 0x0, 0x0], &(0x7f0000001280)=[0x0], 0x0}, 0x40) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001340)={0x1b, 0x0, 0x0, 0xf39, 0x0, r5, 0xb, '\x00', 0x0, r5, 0x2, 0x3}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001300)={@map=r12, r5, 0x25, 0x8, 0x0, @void, @value=r8, @void, @void, r11}, 0x20) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001600)={&(0x7f00000013c0)="54d7e29846fe4e59545a", &(0x7f0000001400)=""/74, &(0x7f0000001480)="c1abc99299947ce7d2b1cad3dd501e10c907d170008c5ce97d74cc9c2e047db63f7525ad2b93800cd596171c420e6f5e2cb88884c3e2f14579cddf3c29de0b45e3fe67e79c3941ae7c70bc778c374c0805a67b93ba817fba0633ed57eb74a57b37901efb8a6b345b37fc805d9c99afbc1d3c0458f4a3cdce6b8a4a9369f86b5467906f63bddbc431fd768bcf3d8ab1", &(0x7f0000001540)="dd939fb4dec0242afbe3b41ddd61719b0a750f7ed3feceffc1df62a1cbcd99111efda078bc54de492202c44b0d0775038e81fb640cdd610350da048724ccaa6e4871057b9f0a7ccc091b8607eda01e4715ffc9efd3aa1249ec1d8036fca766256bf3ed193bc66338198f9069babbb265ff9c1894f3cd9fd05fdf419e21911f15742613ea30b5deaf6e36beaaadd424909a94e5c947e965be52042d2bf1aa0f2de0807b31478b8b76b1fa0caf6dec13b1", 0x7fff, r1}, 0x38) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001640)={r8, r1}, 0xc) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001640)={r8, r1}, 0xc) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000001680)) (async) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000001680)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000016c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000001700)={0x0, r1}, 0x8) 8.650408953s ago: executing program 2 (id=2413): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x5, 0x111, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ff, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x9006, 0xa, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000140)="5c00000013006bcd9e3fe3d46e48aa31086b8703130000001f000000000000000800030018000a000d0013009ee517d34460bc24eab556a705251e6182949a3651f60a84c902d1938037e73f07d0bdd7fcf50e4509c5bb5a00f6", 0x5a}, {&(0x7f0000001640)=';Q', 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x26000004) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f0000000180), 0x8) socket$kcm(0x11, 0x200000000000002, 0x300) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000200)='-.u.]\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 6.177676723s ago: executing program 2 (id=2421): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230686f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8040880) r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r3, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0, 0x6d, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x43, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000880)={r5}, 0x8) close(r6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r1, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000094f20000000000000300000080aeffb7010000001801000020786c25000000000020200007010000f8ffffffb702000008000000b703000003000000850000000600000083341000000000007fd8090026ffffff85200000030000009500"/120], &(0x7f0000000080)='GPL\x00', 0x0, 0x38, &(0x7f0000000180)=""/56, 0x40f00, 0x13, '\x00', r4, 0x25, r6, 0x8, &(0x7f0000000600)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0x10, 0x80000000, 0xc}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000780)=[r1, r7, r1], 0x0, 0x10, 0xb}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f00000008c0)=ANY=[@ANYRES8=r0], &(0x7f0000000480)='syzkaller\x00', 0xaa6}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x20, 0x0, 0x0, 0x0, 0x2e480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1}, 0x106781, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000dc0)={&(0x7f0000000b00)="0a217357e0e5b5276d904b4923874689760242d20f4671466f2ff4bd026bc8040ebcde57840ef69b7795bb74445f08986bf489ad018f80d5ca6e58f2af9a591952dc3d3eab86d39f80d4f239f3c6329bdb8fb10073a2de8823555e6a5b7313e640677b62b9e35a9a10e340c1a0ae2a58e4b0089c29ad9ca84f28208a78977c7313b7653e22fda8188ab4db300eba7cb197ef99e70340dbdf012ecd80567d2e7eb1b4bc50b623822b05566e6c9b8381fded0434bb0e43afc4398d758be0ed4f55bc68e5b9e00b50dfd5affa255ecf6a6db9f5f40f56adb048f8522a29a233cd7da59c72f106b79d30ea7ca1ba9c1da7dc547c6b55cb6d", &(0x7f0000000c00)=""/10, &(0x7f0000000c80)="575c9e6a3fedd55fa68ae530b55e43ddffa32d6b519c5e31df50bfd02526695f471affc144cbdafa340900d61da7b39b4e2cd700b39f7952ed2f6bb2563a91ab5b149a47d81c8bfbf30606c697a0d407d99354e45c8457f1aa", &(0x7f0000000d00)="fd0ffc73e7d526d49a78efbad7b8fcd248f4c5756a5f2e420d93b533c205b8d1e39485acdb702d803bd43eb11e23003ff96c09efd1ebae40f9d12e42cf8d57c66b98ae44eb26c066624c51333e6aa0469a1a364b3f072ed9a9357e7e71f80cfbabd24ab5695d63514143082540b58e5001fce095fec76d4620a27bead2c0fc1d7868187e126a17e8d3f3090226bcf1a69148", 0x9, r1, 0x8e3c028a8cafaf1c}, 0x38) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xe0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) 5.943038169s ago: executing program 2 (id=2426): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4000008, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) r2 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r2, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0xc}, 0x7}, 0x80, 0x0}, 0x200ce0c0) write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[], 0xfe33) sendmsg$inet(r2, &(0x7f0000002b00)={0x0, 0x0, 0x0}, 0x44044) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x4a}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r6, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.332694481s ago: executing program 0 (id=2447): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x43cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f93924fc60040011000a7403004800000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async, rerun: 64) r3 = perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x1}, 0x0, 0xfffffebfffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a867e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c27578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) (async) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10b0c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="dc0100001000000018000000000000000000000000000000950000000000000038720a013653e84c584fdd38a199f6b2df9e19f1574da4512902e83640d72226cbc0c89b926a"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xdd, &(0x7f0000000000)=""/156}, 0x80) (async, rerun: 32) r5 = socket$kcm(0x10, 0x3, 0x10) (rerun: 32) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000007c0)="140000001c000b63d25a80648c2594f91924fc60", 0x14}], 0x1}, 0x0) (async) r6 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x1, 0x25, 0x0, 0x8) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.052255908s ago: executing program 0 (id=2449): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x40, 0x0, 0x2004, 0x4, 0x2, 0x0, 0xfff7, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="1800000068006bcd9e3fe3dc6e08339d0a00000000000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200008000000000000000000000008500000027000000c5000000070000009500000000000000"], &(0x7f0000000680)='GPL\x00'}, 0x5d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events.local\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0x60}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x22, &(0x7f00000018c0), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 2.791178234s ago: executing program 0 (id=2454): bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8931, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8932, &(0x7f0000000080)) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x702, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r3, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff0003, 0x0, 0x0, 0x0, 0x40}, [@call={0x85, 0x0, 0x0, 0x7b}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0xfffffffffffffffe, 0xc2ba, 0x0, 0x4000000, 0xfffffffd}, 0x0, 0xc, 0xffffffffffffffff, 0x12) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="2008020022003507d25a806f8c6394f90524fc600d001141090005000400000037153e370248038011000000d1bd", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e00e020023200b02d25a80ef8c6394f93e24fc60049d0d", 0x17}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070ca00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) 2.747367315s ago: executing program 3 (id=2455): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050047956332c7f700000000006110180000000000dc050007100000009500"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a80000001801000020202500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffba02000008000000b7030000000000008500000011000000a000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) socket$kcm(0x2, 0x200000000000001, 0x106) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) r4 = socket$kcm(0x2, 0x5, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xc) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r3, 0x0, 0x20000011) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, @perf_config_ext, 0x10c012, 0x89, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x2, 0x8, 0x4, 0x5, 0x0, 0xa9f, 0x2082, 0xa9e296c0462a416, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x2, 0x7ff}, 0x4000, 0x80000000, 0x5, 0x9, 0x100000001, 0x1, 0xe, 0x0, 0xf3da, 0x0, 0x8}, 0x0, 0x0, r6, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xde, 0x0, 0x3, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x7fffffff, 0x2, 0x9, 0x0, 0x20000, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0900000000000000ffffff00050000000000", @ANYRES32=r0, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="02000000000000000400"/28], 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000009c0)={r0, 0x20, &(0x7f0000000980)={&(0x7f0000000880)=""/77, 0x4d, 0x0, &(0x7f0000000900)=""/82, 0x52}}, 0x10) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = perf_event_open(&(0x7f0000000640)={0x2, 0xc3, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x12, 0x2c, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000800000000000000d600000018110000", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000d7c2040010000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000018480000fcffffff0000000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @cgroup_sock_addr=0x1d, r0, 0x8, &(0x7f0000000800)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000840)={0x4, 0x6, 0xc, 0xfffffffe}, 0x10, r8, r11, 0x7, &(0x7f0000000400)=[r0, r3, r0, r3, r0, r0, r1, r3, r0], &(0x7f0000000a40)=[{0x4, 0x5, 0x10, 0x4}, {0x3, 0x3, 0xb, 0xb}, {0x2, 0x2, 0x8}, {0x1, 0x1, 0x6, 0x6}, {0x3, 0x4, 0xb}, {0x1, 0x3, 0x9, 0x7}, {0x5, 0x3, 0x81, 0xc}], 0x10, 0x200}, 0x94) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50) r12 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r12, 0x107, 0xe, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 2.487352311s ago: executing program 1 (id=2457): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='syzkaller\x00'}, 0x51) (async) socket$kcm(0x10, 0x2, 0x10) (async) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x11, 0x200000000000002, 0x300) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0xa, 0x2, 0x0) (async) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x11, 0x2, 0x300) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xa0}, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x81000600, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r6 = openat$cgroup_devices(r1, &(0x7f0000000580)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xad}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.485917841s ago: executing program 3 (id=2458): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335db, @perf_config_ext, 0x20, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x6}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, 0x0, 0x3000c085) r3 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@ethernet={0x0, @local}, 0x80, 0x0}, 0x0) openat$cgroup_procs(r1, 0x0, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, 0x0, 0x0) sendmsg$inet(r2, 0x0, 0x4044004) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5d0", 0x1650}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40305829, &(0x7f0000000040)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f00000003c0)=@pppoe={0x18, 0x0, {0x0, @random="4f45dbcdb749", 'ip6gre0\x00'}}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001800)="a5", 0x1}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f00000001c0)={'veth0_to_team\x00', @remote}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r0, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x98, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x8b, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r5, 0x0, 0x5, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8912, &(0x7f0000000080)) 2.485448911s ago: executing program 0 (id=2459): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x50) r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x10e, 0xb, &(0x7f0000000080)=r2, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0x1, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @cgroup_skb=0x1}, 0x94) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000000)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x800000000000000}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000002180)=@generic={0x0}, 0x18) socket$kcm(0x1e, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000500)="b9ff03076804268cb89e14f088a847e0ffff2000000000010000ac141416e000000129a13011", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x18000000000002a0, 0x27, 0x0, &(0x7f0000000500)="b9fa030711a5f32e019e14f088a847e0ffff00124000632177fbac141416e000030a94029f0303", 0x0, 0xfefffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x1a, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x7, 0xca, &(0x7f00000001c0)=""/202, 0x100, 0x5, '\x00', r3, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f00000003c0)=[{0x1, 0x2, 0xf, 0x9}, {0x1, 0x5, 0x3, 0xa}, {0x3, 0x5, 0x10, 0x5}, {0x1, 0x3, 0x3, 0x4}, {0x0, 0x1, 0xd, 0x4}, {0x5, 0x5, 0x7}, {0x2, 0x2, 0x5, 0x5}, {0x2, 0x1, 0x10, 0x7}], 0x10, 0x5}, 0x94) 2.349030864s ago: executing program 4 (id=2460): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0xd, 0xfe, 0x1, 0x1, 0x0, 0xfffffffffffffffa, 0x10, 0xf, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x2200, 0xd, 0x3, 0x3, 0x9, 0x9e1, 0x200, 0x0, 0x2, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2040) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) r4 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="8502000000000000181000", @ANYRES32, @ANYBLOB="00008cff07887e7cf8"], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f2, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xf, 0xffffffffffffffff, 0x2) close(0x3) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x20100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x0) syz_clone(0x81084000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)) socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000000500)="d80000001a00810a1d08007b490d4f1e81f8d804000100ff05142603600e12080005007a01e300a80016002000034004000000035c0461c9d67f6f940071342e8728a84942de4fe3aefb8000a007a290457f01e84460dd46302af989b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025c4679ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e78", 0xd8}], 0x1}, 0x2) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) 2.252231606s ago: executing program 1 (id=2461): socket$kcm(0x10, 0x400000002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x76, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x44, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f00000004c0)=r1}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x440}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4, 0x2, 0x0, 0x0, 0x0, 0x6149, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x48440, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20242, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfcb4, &(0x7f0000000700)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000740)={r8, &(0x7f00000006c0)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r9, 0x10d, 0x6, 0x0, 0x0) 2.251692126s ago: executing program 3 (id=2462): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x480, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x2f}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000300)=r5) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x200, 0x80220, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x411, 0x1, 0xb, 0x0, 0x81}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b35d25a806f8c6394f90524fc602f0009000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x2b, 0x1, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x0, 0x480, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x2f}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000300)=r5) (async) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x200, 0x80220, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x411, 0x1, 0xb, 0x0, 0x81}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b35d25a806f8c6394f90524fc602f0009000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) 1.478113405s ago: executing program 0 (id=2463): socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext={0x8000000000000001, 0x8001}, 0x111026, 0xb, 0x8, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x20000016, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0), &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0xcf, &(0x7f0000000400)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xb8, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0), &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0xcf, &(0x7f0000000400)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xb8, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4000810) close(0x3) (async) close(0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="05000000000000950000000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03000000040000000400"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000080), &(0x7f0000000380)=r3}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000080), &(0x7f0000000380)=r3}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x63}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000022000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 1.467031406s ago: executing program 4 (id=2464): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000c80)={r0, &(0x7f0000000c40)}, 0x20) (async) r1 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x0, 0x6f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0xe8}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYRES8=r1, @ANYRES8=r1, @ANYRES8=r1, @ANYRESDEC=r1, @ANYRES16=r2, @ANYRES64=r3, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async, rerun: 64) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000140)=""/237, 0x5a, 0xed, 0x1}, 0x28) (async, rerun: 64) r5 = socket$kcm(0x2, 0x1, 0x0) (rerun: 64) setsockopt$sock_attach_bpf(r5, 0x1, 0x3c, &(0x7f0000000640), 0x4) (async) close(0xffffffffffffffff) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 32) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, &(0x7f0000000900)=""/170, &(0x7f0000000c40), &(0x7f0000000a40), 0x80000001}, 0x38) (rerun: 32) mkdirat$cgroup(r6, &(0x7f0000000b80)='syz0\x00', 0x1ff) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000c00), 0x8) (async, rerun: 64) syz_clone(0x22023500, 0x0, 0x20010, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230007) close(0xffffffffffffffff) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e0000000400000800000000080000000000f6ff4bb45ea7afdb6f0c992dd9287ff5f84f83f74752c1b6d91048d19c4fe1a70ecaf25be2cce87c177d0ab39713443f7eb2761d2cb327107653e7b2755eac882149eee23387ae439711", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0xc, &(0x7f0000001480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020008f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.384266687s ago: executing program 1 (id=2465): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$unix(r3, &(0x7f0000000640)={&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x24004044) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="2b634975202d706572665f6576656e7420c9e100b37b9eea903bf5bacdca46f52400000000fb8fed2700325b3cc5f055b48c89dfe60000"], 0x1a) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x4000000) close(r9) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000000300)=r8) 1.383698597s ago: executing program 3 (id=2466): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r1, 0x0, 0xd9, 0xcf, &(0x7f00000003c0)="e15bfac7379f375fd1ab4b0cdef766ca0a530131a373e4cc583cfada694d4690c2e1f4e49ec5d39f3a58fbe9e100632e479b2e54d793cbb38ce1b065b8f710ee3a2cfb47ffee0db5e97292cc81e2e4da9fa02f64bcac4ee3a6b9c6413c4600038b169a1b23b4368a918ab6e2bc7beb4fa6b659188a420a53964071c272814ecdf23cfa8798d67c884fb440e82bcb695d7a4f0454d7b1f613079faed353e33ad3732e5e1e3a3cc472a9552545013f4c6f674c4f404d681795e7b6d8387b3706642fd77d29f94ab0c5b0b144c16650705876c8305954df4d1b6c", &(0x7f0000000640)=""/207, 0x6, 0x0, 0x30, 0xcb, &(0x7f0000000740)="497ea27cd41ff617e06c2f96f355f9d37c849fa2b3a97f6e24f3fc5706fdcb2726033c00e7b2611a2770f6bf95582c85", &(0x7f0000000780)="783353911e89664dc92cee4810ffe079c466a61ada3ed8608c62c5dd92ff3ab2af91002ecdedfa557d73b81b70ff0741eaa6e6d7f517a5a97886c2aadb68e097a681ade318f5553832e06438099cff5631335aec7ae049878639831153f039c3881a364c5e1ed33d4c7422837b1bba144bb94b6ddb0c6fd0fb8df6827208fceb6323d694f958f8254dda44e5672ecec4adec634c96284221cd8ba2dc7213795991fa3fa0ad48b6faefae8749e4df399a4ac6ad47d53ca8b5f93aac4f9069618d61da2753f09208e939bd6e", 0x6, 0x0, 0x4}, 0x50) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x44c}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x5, 0x98128, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x8000000000000001}, 0x0, 0x7, 0xfffffffe, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0xb27f, 0x829b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe11b, 0x0, @perf_bp={0x0, 0x1}, 0xc486d19d431ce5be, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe9}, 0x0, 0xd, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8940, &(0x7f0000000080)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) r5 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x900000000000000) r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x15, 0x11, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x109242, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x0, 0x0, r6, 0x2) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc00, &(0x7f0000000000)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1.251796901s ago: executing program 4 (id=2467): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x9, 0x711fec55}, 0xa0d2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x1, 0x200, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x6}, 0x1a2d, 0x0, 0x3ff, 0x6, 0x9, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x40, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5}, 0x0, 0x0, 0x90a, 0x0, 0x2823, 0x4}, 0x0, 0xffffffffffffffff, r1, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0xf0, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) socket$kcm(0x11, 0x3, 0x0) (async, rerun: 32) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffe74, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c11", 0x27}], 0x1}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async, rerun: 64) r7 = socket$kcm(0xa, 0x3, 0x3a) (rerun: 64) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x0, 0x80, 0x80, 0x6, 0xf7, 0x2, 0x0, 0x1, 0x0, 0xc, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x5, @perf_config_ext={0x8, 0xa}, 0x12404, 0x7a51, 0x100, 0x7, 0x80000001, 0x10, 0xfffa, 0x0, 0x1, 0x0, 0x1}) (async, rerun: 32) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00'}, 0x88) (async, rerun: 32) setsockopt$sock_attach_bpf(r7, 0x29, 0x7, &(0x7f00000000c0), 0x4) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r9, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffce3, 0x0, &(0x7f00000001c0)='N', 0x0}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x7fffffff, 0x2, 0x8, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4}, 0x50) write$cgroup_subtree(r6, &(0x7f00000002c0)={[{0x2b, 'pids'}, {0x2b, 'devices'}, {0x2b, 'net'}, {0x2b, 'hugetlb'}, {0x2b, 'net_prio'}, {0x2d, 'rlimit'}, {0x2b, 'blkio'}, {0x2b, 'net_prio'}]}, 0x40) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r8, r10}, 0xc) 975.225167ms ago: executing program 4 (id=2468): socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x29, 0x4, 0x0, 0x0) r1 = gettid() r2 = perf_event_open$cgroup(&(0x7f0000000180)={0x2, 0x80, 0x8, 0x81, 0x8, 0x2, 0x0, 0x800, 0x80000, 0x10, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffff8, 0x2, @perf_bp={&(0x7f0000000140), 0x9}, 0x20, 0x3, 0x9, 0x8, 0x3, 0x9, 0x0, 0x0, 0xc, 0x0, 0x100000000}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x80, 0x0, 0x9, 0x3, 0x0, 0x3, 0x12404, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x4, 0x9}, 0x22d0, 0x8001, 0xbf9, 0x9, 0xffffffffffffffff, 0x6f9f, 0x0, 0x0, 0x0, 0x0, 0x847}, r1, 0x2, r2, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x8, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 769.157593ms ago: executing program 4 (id=2469): recvmsg$kcm(0xffffffffffffffff, 0x0, 0x10100) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x725f0627, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b15d25a806c8c6394f90324fc60100000000a000200053582c137153e37000c0a80fc0b1000f835", 0x33fe0}], 0x1}, 0x8000) sendmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="b24d92a5edf1d6d7cbd276dd10b8c9a7446d4dc9c121f90c74d53e5021afdd88e6400cb92f7d12523d6ab13034141bc0981204cb73c2fe56a70d9bda9d41c8efe2c84a3c3c8093fe5982dbd00a814c069ba1a00ddadb167b1d78580f9e0f7c4ec0f930314d18c68949e830d5b63898df2f410c142a38129b267f918727962c283510302fca2235c351352a2b5e2f431314dc00f737", 0x95}], 0x1, &(0x7f00000006c0)=[{0xa8, 0x101, 0x1, "4cc8ce5b8172a1a4e8731fbdfc239f436440da25f913aa1d25ccb889020374643297b9c7d534a9e83255eab10f8c2fd0e048c7cb54e0c2f26f8433c58fb9ab5c0dfa3299e16698fba6e192d1ddb7b44697d5d8ba49b4ade23675505c029eb25260d09da4f059fea56a30752f0cbefa2762b8a5b62be38d09376c2e04180dbd159cc5250f2f371b2c6b7a36ded0aa29e40900"}, {0x108, 0x11, 0x8, "8be3d2cf4ae13317972a4e768d9513e89890f8774a12c7caa87501ca2f63e02c945ce0de5c7d18ecb089b41636e8e5bff0f079eb424245f5d47832dca1cb9e0cc6f113304d00e5675ce310a9daaa6c3219910c8940353b87ccff37a151c63915525cf0f4a709f3c003fcbffa685216409967e3fb4e6a6f5c0d744c26313bd1325c62f340a782c188c9ea3cf594c3ea83da1d713c86e6493f35429c1703a2f9aafe3c6da928c75f70fdb76d8dd3369d0a2a15e0eb4a9dc65f56c66b089c23dc71f01df60ad216dd7c959cff8fc0e8a9894e89bfeadece81e2f1e84638426cd0852eb3c12b0f44a83193c59d1be58790310f7d0e9e48"}, {0x48, 0x11, 0xffffffff, "a5f17e37ae67fdf4c363ba2299dadd8441a55e9b028d8ee5800c1e87b9bd0b307d4bde8a1c38039da2744878a8401caad4d8c92da81e9e12"}], 0x1f8}, 0x4008000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280), 0x0, 0xffffffff}, 0x38) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x16}}, &(0x7f0000000480)='GPL\x00'}, 0x80) 618.127276ms ago: executing program 1 (id=2470): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d080220000000051296a1180002000000000000000e1208000f0100810401a8001600200001400300", 0x3a}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0bf600004e00"], 0xfe33) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000340)=@tipc=@name, 0x80, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/21, 0x15}], 0x1, &(0x7f0000000440)=""/72, 0x48}, 0x101) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@const={0x4, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x3e, 0x30, 0x30, 0x5f, 0x61, 0x61]}}, &(0x7f0000000540)=""/219, 0x2c, 0xdb, 0x1, 0x9}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x8, 0x2, 0x8802, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x2, 0x0, 0x0, 0x0, @value=r3}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x15, &(0x7f0000001480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 566.884797ms ago: executing program 4 (id=2471): perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x70, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x6, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffffebfffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async, rerun: 64) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (rerun: 64) ioctl$TUNATTACHFILTER(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0}) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 480.03166ms ago: executing program 0 (id=2472): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xdc101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x13, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000008085000000700000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0xfffffef3, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x5562, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63f580fc02082c"], 0xfdef) write$cgroup_subtree(r5, &(0x7f00000004c0)=ANY=[], 0xfdef) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$kcm(r6, &(0x7f0000000400)={&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x1, 0x3, 0x3eb, 0x2, {0xa, 0x4e20, 0x1, @loopback, 0x5589}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)="c343bcf901c80bc9626193aeb31ea3a9242bdfd0886b4968d3bb5d2c2695a5086b8899544368b3e0d3de93a94dc8", 0x2e}], 0x1}, 0x2404c000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r8) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200"], 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r12) r13 = perf_event_open(&(0x7f0000000540)={0x2, 0x10, 0x40, 0xf9, 0x5, 0x3, 0x0, 0x8000, 0x8208, 0xd, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000500), 0x1f}, 0x2000, 0xffffffff, 0x5, 0x0, 0x6, 0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0, 0x9, r1, 0x6) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r13, 0x40042409, 0x1) syz_clone(0xc2803000, 0x0, 0x0, 0x0, 0x0, 0x0) 444.02732ms ago: executing program 1 (id=2473): bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x26}, 0x28) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xf851, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x50) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={0xffffffffffffffff}, 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f00000003c0)={r2, r1}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000200850000001500000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r1, &(0x7f00000005c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x0, 0x54dc, 0x0, 0x0, 0x40f00, 0x20}, 0x94) close(0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000070000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6, 0xffffffffffffffff, 0x2000000}, 0xc) r7 = socket$kcm(0xa, 0x1, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a00f23ccefb132f09599a817138001d001931a0e69ee517d34460bc06000000a705259768bd7a9a3651f60a84c93310b49b640fa032cfe620dc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) recvmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000780)=""/123, 0x7b}, {&(0x7f0000000900)=""/249, 0xf9}, {&(0x7f0000000340)=""/8, 0x8}, {&(0x7f0000000240)=""/249, 0xf9}, {&(0x7f00000014c0)=""/200, 0xc8}, {&(0x7f00000011c0)=""/172, 0xac}, {&(0x7f00000036c0)=""/4116, 0x1014}], 0x7}, 0x40012100) recvmsg$kcm(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x1000) setsockopt$sock_attach_bpf(r7, 0x29, 0x12, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0xfffffeff) 133.410598ms ago: executing program 3 (id=2474): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) (async, rerun: 64) socket$kcm(0x10, 0x2, 0x10) (async, rerun: 64) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002400)=""/4073, 0xfe9}, {&(0x7f0000000300)=""/169, 0xa9}], 0x2}, 0x20000000) (async) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async, rerun: 32) r1 = socket$kcm(0xf, 0x3, 0x2) (rerun: 32) sendmsg$inet(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)}, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x10) (async, rerun: 32) sendmsg$inet(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x20004000) (rerun: 32) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d2", 0x9}], 0x1}, 0x40810) recvmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000140)=""/41, 0x29}], 0x1}, 0x10100) r3 = socket$kcm(0x10, 0x400000002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'netdevsim0\x00', 0xf2114ade2ed6148f}) (async, rerun: 64) setsockopt$sock_attach_bpf(r3, 0x10e, 0xb, 0x0, 0x0) (async, rerun: 64) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) (rerun: 32) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x94e4, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0, 0x6}, 0x19183, 0x1, 0x5, 0xb, 0xa, 0x904813a5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000001c0)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000002081afb0a000200", 0x4d}, {&(0x7f0000000300)="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", 0x40e}], 0x2, 0x0, 0x0, 0x5865}, 0x40000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3, 0xfc, 0xff, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_config_ext={0x5}, 0x8b001, 0x0, 0xfffffffd, 0x4, 0x1ff, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0xffffffffffffd}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x10) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) 354.531µs ago: executing program 3 (id=2475): r0 = socket$kcm(0x2, 0x922000000001, 0x106) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x80000}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={0xffffffffffffffff, 0x0, 0x0, 0x4c, 0x0, &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x0, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", 0x0, 0x1, 0x0, 0x13}, 0x50) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff070000000000000000000085000000ae"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') setsockopt$sock_attach_bpf(r4, 0x84, 0x4, &(0x7f0000000040)=r4, 0x4) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000580)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="2e00000011008188040f80ec59acbc0413a1f848100000005e0c0000000000000e001c001400000002800000121f", 0x2e}], 0x1}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) close(0x3) setsockopt$sock_attach_bpf(r0, 0x29, 0x32, 0x0, 0x0) 0s ago: executing program 1 (id=2476): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x400, 0x2, 0x0, 0x7, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x30}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) close(0x3) kernel console output (not intermixed with test programs): ady [ 61.844316][ C0] hrtimer: interrupt took 67404 ns [ 61.850074][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.858821][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.882670][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.892568][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.368336][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.383354][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.431619][ T4284] netlink: 'syz.3.4': attribute type 10 has an invalid length. [ 62.474915][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.488108][ T1279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.502749][ T1279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.528171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.137968][ T4301] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9'. [ 63.155720][ T4300] netdevsim netdevsim2: Direct firmware load for q failed with error -2 [ 63.202914][ T4301] bond0: (slave bond_slave_0): Releasing backup interface [ 63.311037][ T4300] netdevsim netdevsim2: Falling back to sysfs fallback for: q [ 63.329190][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 63.339526][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 63.358922][ T4301] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 63.381799][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 63.395396][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 63.406366][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 63.508933][ T4309] Zero length message leads to an empty skb [ 63.611474][ T4309] netlink: 'syz.3.11': attribute type 7 has an invalid length. [ 63.626995][ T4309] netlink: 140 bytes leftover after parsing attributes in process `syz.3.11'. [ 64.123402][ T4315] netlink: 'syz.4.13': attribute type 10 has an invalid length. [ 64.138950][ T4321] netlink: 'syz.0.16': attribute type 3 has an invalid length. [ 64.155680][ T4315] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13'. [ 64.167083][ T4321] netlink: 201336 bytes leftover after parsing attributes in process `syz.0.16'. [ 64.222830][ T4315] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 64.326882][ T4315] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 64.725039][ T4339] netlink: 'syz.4.22': attribute type 7 has an invalid length. [ 64.752414][ T4339] netlink: 140 bytes leftover after parsing attributes in process `syz.4.22'. [ 64.910912][ T4346] netlink: 152 bytes leftover after parsing attributes in process `syz.0.24'. [ 64.945539][ T4346] bond0: (slave bond_slave_0): Releasing backup interface [ 64.970142][ T4346] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 65.221200][ T4355] netdevsim netdevsim3: Direct firmware load for q failed with error -2 [ 65.243541][ T4355] netdevsim netdevsim3: Falling back to sysfs fallback for: q [ 65.543473][ T4362] netlink: 14 bytes leftover after parsing attributes in process `syz.3.25'. [ 65.623396][ T4362] device hsr_slave_0 left promiscuous mode [ 65.643994][ T4362] device hsr_slave_1 left promiscuous mode [ 65.863062][ T4367] netlink: 'syz.4.30': attribute type 7 has an invalid length. [ 65.925661][ T4364] netlink: 'syz.4.30': attribute type 3 has an invalid length. [ 65.966373][ T4367] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.30'. [ 66.217115][ T4376] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 66.277457][ T4376] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 66.518215][ T4380] device batadv0 entered promiscuous mode [ 66.850564][ T4390] device syzkaller0 entered promiscuous mode [ 67.807851][ T4430] __nla_validate_parse: 2 callbacks suppressed [ 67.807868][ T4430] netlink: 14 bytes leftover after parsing attributes in process `syz.4.46'. [ 67.950198][ T4430] device hsr_slave_0 left promiscuous mode [ 68.126834][ T4430] device hsr_slave_1 left promiscuous mode [ 68.724955][ T4448] netlink: 14 bytes leftover after parsing attributes in process `syz.3.54'. [ 69.327526][ T4459] validate_nla: 2 callbacks suppressed [ 69.327565][ T4459] netlink: 'syz.1.57': attribute type 10 has an invalid length. [ 69.550437][ T4459] team0: Port device netdevsim0 added [ 69.603716][ T4462] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.59'. [ 69.675324][ T4459] syz.1.57 (4459) used greatest stack depth: 19696 bytes left [ 69.706755][ T4466] netlink: 'syz.3.61': attribute type 3 has an invalid length. [ 69.744970][ T4466] netlink: 'syz.3.61': attribute type 1 has an invalid length. [ 69.763299][ T4466] netlink: 193404 bytes leftover after parsing attributes in process `syz.3.61'. [ 69.812558][ T4467] netlink: 72 bytes leftover after parsing attributes in process `syz.2.60'. [ 71.175459][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.181995][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.311621][ T4539] netlink: 'syz.2.80': attribute type 1 has an invalid length. [ 72.333389][ T4543] netlink: 'syz.0.81': attribute type 3 has an invalid length. [ 72.392993][ T4543] netlink: 'syz.0.81': attribute type 8 has an invalid length. [ 72.419617][ T4543] netlink: 197324 bytes leftover after parsing attributes in process `syz.0.81'. [ 73.575795][ T4571] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.88'. [ 73.857759][ T4583] netlink: 208188 bytes leftover after parsing attributes in process `syz.2.92'. [ 74.131548][ T4586] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.95'. [ 75.237210][ T4599] netlink: 'syz.2.98': attribute type 33 has an invalid length. [ 75.272085][ T4599] netlink: 152 bytes leftover after parsing attributes in process `syz.2.98'. [ 75.345407][ T4607] netlink: 164 bytes leftover after parsing attributes in process `syz.4.100'. [ 75.368811][ T4607] netlink: 164 bytes leftover after parsing attributes in process `syz.4.100'. [ 75.677137][ T4613] netlink: 'syz.4.101': attribute type 3 has an invalid length. [ 75.719191][ T4613] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.101'. [ 76.283167][ T7] cfg80211: failed to load regulatory.db [ 76.310929][ T4627] pim6reg: tun_chr_ioctl cmd 1074025677 [ 76.319500][ T4627] pim6reg: linktype set to 823 [ 76.338547][ T4631] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.107'. [ 76.474590][ T4633] netlink: 14 bytes leftover after parsing attributes in process `syz.4.108'. [ 76.485514][ T4630] delete_channel: no stack [ 76.588878][ T4633] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.756069][ T4633] bond0 (unregistering): Released all slaves [ 76.829549][ T4635] netlink: 14 bytes leftover after parsing attributes in process `syz.4.108'. [ 77.041448][ T4635] team0: Port device team_slave_0 removed [ 77.984952][ T4663] netlink: 'syz.4.117': attribute type 10 has an invalid length. [ 78.201275][ T4663] team0: Device wg1 is of different type [ 78.469943][ T4661] delete_channel: no stack [ 79.288785][ T4695] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.123'. [ 80.096946][ T4716] netlink: 132 bytes leftover after parsing attributes in process `syz.2.132'. [ 80.178692][ T4716] netlink: 'syz.2.132': attribute type 4 has an invalid length. [ 82.241426][ T4743] netlink: 'syz.4.137': attribute type 2 has an invalid length. [ 82.270083][ T4743] netlink: 198692 bytes leftover after parsing attributes in process `syz.4.137'. [ 82.419202][ T4748] device wlan1 entered promiscuous mode [ 82.476669][ T4748] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.138'. [ 82.655597][ T4761] netlink: 'syz.4.140': attribute type 21 has an invalid length. [ 82.755406][ T4761] netlink: 128 bytes leftover after parsing attributes in process `syz.4.140'. [ 82.779252][ T4761] netlink: 'syz.4.140': attribute type 4 has an invalid length. [ 82.818942][ T4761] netlink: 'syz.4.140': attribute type 5 has an invalid length. [ 82.849640][ T4761] netlink: 3 bytes leftover after parsing attributes in process `syz.4.140'. [ 82.937143][ T4778] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.142'. [ 83.038116][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): batadv0: link becomes ready [ 83.090274][ T4780] netlink: 176 bytes leftover after parsing attributes in process `syz.3.146'. [ 84.257206][ T4842] netlink: 'syz.1.162': attribute type 29 has an invalid length. [ 84.307140][ T4842] netlink: 'syz.1.162': attribute type 29 has an invalid length. [ 84.338574][ T4843] netlink: 'syz.1.162': attribute type 29 has an invalid length. [ 84.601091][ T4741] wlan1: Trigger new scan to find an IBSS to join [ 84.641773][ T4853] netlink: 186384 bytes leftover after parsing attributes in process `syz.2.165'. [ 84.721302][ T4853] netlink: zone id is out of range [ 84.736623][ T4853] netlink: zone id is out of range [ 84.784781][ T4853] netlink: zone id is out of range [ 84.819515][ T4853] netlink: zone id is out of range [ 84.879193][ T4853] netlink: zone id is out of range [ 84.922485][ T4853] netlink: zone id is out of range [ 84.927644][ T4853] netlink: zone id is out of range [ 84.989277][ T4853] netlink: zone id is out of range [ 85.029243][ T4853] netlink: zone id is out of range [ 85.034608][ T4853] netlink: zone id is out of range [ 85.182950][ T4868] netlink: 40 bytes leftover after parsing attributes in process `syz.3.170'. [ 85.255368][ T4868] netlink: 40 bytes leftover after parsing attributes in process `syz.3.170'. [ 85.315712][ T4868] netlink: 13 bytes leftover after parsing attributes in process `syz.3.170'. [ 85.821054][ T4883] netlink: 'syz.2.174': attribute type 21 has an invalid length. [ 85.844352][ T4883] netlink: 132 bytes leftover after parsing attributes in process `syz.2.174'. [ 85.888103][ T4886] netlink: 'syz.2.174': attribute type 2 has an invalid length. [ 85.926335][ T4886] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.174'. [ 85.995054][ T4885] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.175'. [ 86.048240][ T4885] delete_channel: no stack [ 86.065037][ T4885] delete_channel: no stack [ 86.250589][ T4899] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 86.370719][ T4899] netlink: 36 bytes leftover after parsing attributes in process `syz.3.178'. [ 86.400257][ T4899] : renamed from caif0 [ 87.131099][ T4900] delete_channel: no stack [ 87.393478][ T4944] netlink: 'syz.4.191': attribute type 33 has an invalid length. [ 87.423662][ T4944] netlink: 152 bytes leftover after parsing attributes in process `syz.4.191'. [ 87.780047][ T4963] netlink: 132 bytes leftover after parsing attributes in process `syz.3.197'. [ 87.941080][ T4967] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 88.899580][ T5011] netlink: 'syz.3.210': attribute type 10 has an invalid length. [ 88.953392][ T5011] device dummy0 entered promiscuous mode [ 89.016865][ T5011] bridge0: port 3(dummy0) entered blocking state [ 89.047553][ T5011] bridge0: port 3(dummy0) entered disabled state [ 89.067114][ T5011] bridge0: port 3(dummy0) entered blocking state [ 89.073935][ T5011] bridge0: port 3(dummy0) entered forwarding state [ 89.272019][ T5007] device syzkaller0 entered promiscuous mode [ 89.359397][ T5039] netlink: 'syz.1.214': attribute type 3 has an invalid length. [ 89.400098][ T5040] netlink: 'syz.0.213': attribute type 41 has an invalid length. [ 89.430153][ T5030] device syzkaller0 entered promiscuous mode [ 89.454325][ T5045] netlink: 'syz.3.218': attribute type 1 has an invalid length. [ 89.677331][ T5045] __nla_validate_parse: 10 callbacks suppressed [ 89.677347][ T5045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.218'. [ 89.705626][ T5045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.218'. [ 89.732850][ T5045] netlink: 33 bytes leftover after parsing attributes in process `syz.3.218'. [ 89.748989][ T5045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.218'. [ 89.769773][ T5045] netlink: 33 bytes leftover after parsing attributes in process `syz.3.218'. [ 89.793349][ T5045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.218'. [ 89.814392][ T5045] netlink: 33 bytes leftover after parsing attributes in process `syz.3.218'. [ 90.215576][ T5056] pimreg1: tun_chr_ioctl cmd 1074025677 [ 90.226991][ T5056] pimreg1: linktype set to 768 [ 90.690332][ T9] wlan1: Trigger new scan to find an IBSS to join [ 90.926234][ T5074] netlink: 144 bytes leftover after parsing attributes in process `syz.2.227'. [ 91.027953][ T5074] syz.2.227 uses obsolete (PF_INET,SOCK_PACKET) [ 91.548419][ T5094] netlink: 'syz.3.233': attribute type 16 has an invalid length. [ 91.586661][ T5094] netlink: 48 bytes leftover after parsing attributes in process `syz.3.233'. [ 92.154178][ T5137] netlink: 132 bytes leftover after parsing attributes in process `syz.2.244'. [ 92.205862][ T5143] net_ratelimit: 370 callbacks suppressed [ 92.205877][ T5143] netlink: zone id is out of range [ 92.235743][ T5143] netlink: zone id is out of range [ 92.250421][ T5143] netlink: zone id is out of range [ 92.266386][ T5143] netlink: zone id is out of range [ 92.275939][ T5143] netlink: zone id is out of range [ 92.291544][ T5143] netlink: zone id is out of range [ 92.299827][ T5143] netlink: zone id is out of range [ 92.317030][ T5143] netlink: zone id is out of range [ 92.335682][ T5143] netlink: zone id is out of range [ 92.346718][ T5143] netlink: zone id is out of range [ 92.860863][ T5155] netlink: 'syz.4.247': attribute type 21 has an invalid length. [ 92.868717][ T5155] netlink: 'syz.4.247': attribute type 19 has an invalid length. [ 93.271957][ T5180] netlink: 'syz.4.255': attribute type 11 has an invalid length. [ 93.822249][ T5196] syzkaller0: tun_chr_ioctl cmd 1074025694 [ 93.930899][ T5196] syzkaller0: tun_chr_ioctl cmd 2147767517 [ 95.412070][ T5237] __nla_validate_parse: 5 callbacks suppressed [ 95.412088][ T5237] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.269'. [ 95.639456][ T4238] wlan1: Trigger new scan to find an IBSS to join [ 95.819275][ T5217] delete_channel: no stack [ 95.841597][ T5247] netlink: 'syz.2.271': attribute type 21 has an invalid length. [ 96.325040][ T5268] netlink: 'syz.3.278': attribute type 3 has an invalid length. [ 96.342191][ T5268] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.278'. [ 96.549842][ T5268] device syzkaller0 entered promiscuous mode [ 96.902027][ T5261] delete_channel: no stack [ 96.985815][ T5279] €Â0: renamed from pim6reg1 [ 97.069708][ T9] wlan1: Creating new IBSS network, BSSID 76:3d:a3:93:09:42 [ 97.483504][ T5293] device bridge_slave_1 left promiscuous mode [ 97.520349][ T5293] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.590225][ T5293] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.933486][ T5303] syzkaller1: tun_chr_ioctl cmd 1074025675 [ 97.948133][ T5303] syzkaller1: persist disabled [ 98.052138][ T5305] netlink: 'syz.4.288': attribute type 21 has an invalid length. [ 98.598241][ T5312] netlink: 132 bytes leftover after parsing attributes in process `syz.3.291'. [ 99.064442][ T5318] netlink: 'syz.0.293': attribute type 25 has an invalid length. [ 99.079590][ T5318] netlink: 'syz.0.293': attribute type 5 has an invalid length. [ 99.108160][ T5318] netlink: 40 bytes leftover after parsing attributes in process `syz.0.293'. [ 99.160525][ T5328] netlink: 'syz.3.295': attribute type 3 has an invalid length. [ 99.168225][ T5328] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.295'. [ 99.354283][ T5340] netlink: 'syz.2.296': attribute type 1 has an invalid length. [ 99.404024][ T5340] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.296'. [ 100.691930][ T5352] device syzkaller0 entered promiscuous mode [ 100.708237][ T25] audit: type=1800 audit(1787264801.571:2): pid=5357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.302" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 100.729671][ T5353] device sit0 entered promiscuous mode [ 100.735857][ T5357] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 100.757708][ T5357] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 100.778947][ T5357] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 100.865670][ T5371] ref_ctr_offset mismatch. inode: 0x180 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 101.556527][ T5400] netlink: 72 bytes leftover after parsing attributes in process `syz.2.318'. [ 102.281979][ T5417] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.323'. [ 102.361094][ T5417] net_ratelimit: 239 callbacks suppressed [ 102.361132][ T5417] netlink: zone id is out of range [ 102.408776][ T5417] netlink: zone id is out of range [ 102.415145][ T5417] netlink: zone id is out of range [ 102.444559][ T5417] netlink: zone id is out of range [ 102.468554][ T5417] netlink: zone id is out of range [ 102.495588][ T5417] netlink: zone id is out of range [ 102.536566][ T5417] netlink: zone id is out of range [ 102.548059][ T5429] netlink: 68 bytes leftover after parsing attributes in process `syz.2.326'. [ 102.567993][ T5417] netlink: zone id is out of range [ 102.589310][ T5417] netlink: zone id is out of range [ 102.609307][ T5417] netlink: zone id is out of range [ 102.623912][ T5431] netlink: 'syz.3.327': attribute type 27 has an invalid length. [ 102.661049][ T5431] netlink: 'syz.3.327': attribute type 25 has an invalid length. [ 103.119374][ T5452] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.126854][ T5452] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.332615][ T5449] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.334'. [ 103.956480][ T5507] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.349'. [ 104.014524][ T5506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.168873][ T5512] netlink: 176 bytes leftover after parsing attributes in process `syz.2.350'. [ 104.282115][ T5512] netlink: 'syz.2.350': attribute type 3 has an invalid length. [ 104.333425][ T5512] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.350'. [ 104.573043][ T5534] device syzkaller0 entered promiscuous mode [ 104.805242][ T5553] netlink: 'syz.1.362': attribute type 3 has an invalid length. [ 104.844774][ T5553] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.362'. [ 105.330608][ T5566] netlink: 'syz.1.365': attribute type 9 has an invalid length. [ 105.348654][ T5566] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.365'. [ 105.754087][ T5582] netlink: 144 bytes leftover after parsing attributes in process `syz.3.369'. [ 105.857895][ T5582] team0: Port device team_slave_0 removed [ 105.972526][ T5585] netlink: 'syz.0.370': attribute type 21 has an invalid length. [ 107.398255][ T5628] netlink: 'syz.2.379': attribute type 7 has an invalid length. [ 107.536147][ T5636] __nla_validate_parse: 1 callbacks suppressed [ 107.536182][ T5636] netlink: 184 bytes leftover after parsing attributes in process `syz.2.384'. [ 108.728012][ T5718] netlink: 'syz.3.393': attribute type 28 has an invalid length. [ 109.033319][ T5738] netlink: 'syz.0.398': attribute type 10 has an invalid length. [ 109.041501][ T5738] netlink: 55 bytes leftover after parsing attributes in process `syz.0.398'. [ 109.174619][ T5743] netlink: 'syz.2.400': attribute type 21 has an invalid length. [ 109.183117][ T5743] netlink: 132 bytes leftover after parsing attributes in process `syz.2.400'. [ 109.294691][ T5754] netlink: 'syz.3.403': attribute type 17 has an invalid length. [ 109.305331][ T5754] netlink: 'syz.3.403': attribute type 16 has an invalid length. [ 109.319905][ T5754] netlink: 152 bytes leftover after parsing attributes in process `syz.3.403'. [ 109.403764][ T5764] netlink: 'syz.2.405': attribute type 3 has an invalid length. [ 109.446390][ T5764] netlink: 'syz.2.405': attribute type 1 has an invalid length. [ 109.464699][ T5764] netlink: 'syz.2.405': attribute type 3 has an invalid length. [ 109.479252][ T5764] netlink: 'syz.2.405': attribute type 4 has an invalid length. [ 109.487196][ T5764] netlink: 198492 bytes leftover after parsing attributes in process `syz.2.405'. [ 109.512090][ T5768] netlink: 'syz.2.405': attribute type 8 has an invalid length. [ 109.539142][ T5768] netlink: 'syz.2.405': attribute type 4 has an invalid length. [ 109.598170][ T5768] netlink: 'syz.2.405': attribute type 7 has an invalid length. [ 109.685415][ T5768] netlink: 197844 bytes leftover after parsing attributes in process `syz.2.405'. [ 110.046199][ T5789] netlink: 'syz.2.411': attribute type 27 has an invalid length. [ 110.442592][ T5804] netlink: 132 bytes leftover after parsing attributes in process `syz.4.415'. [ 110.512859][ T5804] netlink: 132 bytes leftover after parsing attributes in process `syz.4.415'. [ 110.734217][ T5812] netlink: 152 bytes leftover after parsing attributes in process `syz.4.418'. [ 110.800494][ T5811] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.417'. [ 110.867731][ T5816] net_ratelimit: 118 callbacks suppressed [ 110.867749][ T5816] openvswitch: netlink: Message has 5 unknown bytes. [ 111.108987][ T5825] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 112.695283][ T5881] __nla_validate_parse: 5 callbacks suppressed [ 112.695299][ T5881] netlink: 140 bytes leftover after parsing attributes in process `syz.0.436'. [ 113.031830][ T5883] device veth0_vlan left promiscuous mode [ 113.155857][ T5883] device veth0_vlan entered promiscuous mode [ 113.273823][ T5883] team0: Device veth0_vlan failed to register rx_handler [ 113.585030][ T5900] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.443'. [ 113.814362][ T5905] netlink: 180 bytes leftover after parsing attributes in process `syz.0.445'. [ 113.989506][ T5911] netlink: 132 bytes leftover after parsing attributes in process `syz.2.447'. [ 114.460211][ T5936] netlink: 132 bytes leftover after parsing attributes in process `syz.1.452'. [ 114.581276][ T5943] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.456'. [ 115.200346][ T25] audit: type=1800 audit(1787264816.071:3): pid=5961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.460" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 115.201199][ T5961] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 115.434506][ T5961] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 115.495634][ T5968] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 115.516724][ T5961] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 115.654099][ T5961] syz.3.460 (5961) used greatest stack depth: 16752 bytes left [ 115.943452][ T5974] device syzkaller0 entered promiscuous mode [ 116.070575][ T5988] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.469'. [ 116.107841][ T5988] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.469'. [ 117.133105][ T6008] validate_nla: 9 callbacks suppressed [ 117.133147][ T6008] netlink: 'syz.3.476': attribute type 10 has an invalid length. [ 117.230980][ T6008] netlink: 55 bytes leftover after parsing attributes in process `syz.3.476'. [ 117.357329][ T6016] netlink: 'syz.1.477': attribute type 9 has an invalid length. [ 117.380314][ T6016] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.477'. [ 117.433370][ T6009] netlink: 'syz.3.476': attribute type 1 has an invalid length. [ 118.263700][ T6050] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.487'. [ 118.902867][ T6069] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.493'. [ 118.973555][ T6069] netlink: get zone limit has 8 unknown bytes [ 119.132654][ T6085] netlink: 36 bytes leftover after parsing attributes in process `syz.0.495'. [ 119.182892][ T6085] : renamed from caif0 [ 119.218534][ T6088] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.495'. [ 119.308417][ T6085] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 119.639762][ T6111] netlink: 132 bytes leftover after parsing attributes in process `syz.4.500'. [ 120.204105][ T6134] netlink: 'syz.1.510': attribute type 10 has an invalid length. [ 120.227879][ T6134] netlink: 40 bytes leftover after parsing attributes in process `syz.1.510'. [ 120.275880][ T6134] device ipvlan1 entered promiscuous mode [ 120.285085][ T6134] bridge0: port 3(ipvlan1) entered blocking state [ 120.306907][ T6134] bridge0: port 3(ipvlan1) entered disabled state [ 120.322251][ T6134] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 121.143832][ T6163] syz.1.517[6163] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.143955][ T6163] syz.1.517[6163] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.479944][ T6174] netlink: 64 bytes leftover after parsing attributes in process `syz.1.520'. [ 121.817124][ T6185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.838826][ T6185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.873074][ T6185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.909240][ T6185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.502143][ T6195] netdevsim netdevsim4: Direct firmware load for .net/syz1 failed with error -2 [ 122.514916][ T6197] device syzkaller0 entered promiscuous mode [ 122.520156][ T6195] netdevsim netdevsim4: Falling back to sysfs fallback for: .net/syz1 [ 122.552059][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 122.671203][ T6201] netlink: 'syz.3.529': attribute type 29 has an invalid length. [ 122.709627][ T6201] netlink: 'syz.3.529': attribute type 29 has an invalid length. [ 122.743385][ T6201] netlink: 'syz.3.529': attribute type 29 has an invalid length. [ 122.768276][ T6201] netlink: 'syz.3.529': attribute type 29 has an invalid length. [ 123.312744][ T6225] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.533'. [ 123.974097][ T6244] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.540'. [ 124.148122][ T6248] device wlan1 entered promiscuous mode [ 124.648588][ T6267] device syzkaller0 entered promiscuous mode [ 125.959425][ T6311] netlink: 'syz.3.558': attribute type 10 has an invalid length. [ 125.977422][ T6311] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.558'. [ 126.994007][ T6322] netlink: 'syz.3.563': attribute type 16 has an invalid length. [ 127.016727][ T6322] netlink: 48 bytes leftover after parsing attributes in process `syz.3.563'. [ 127.052711][ T6322] netlink: 'syz.3.563': attribute type 10 has an invalid length. [ 127.081421][ T6322] netlink: 2 bytes leftover after parsing attributes in process `syz.3.563'. [ 128.500322][ T6327] ODEBUG: Out of memory. ODEBUG disabled [ 130.177982][ T6335] netlink: 144 bytes leftover after parsing attributes in process `syz.3.568'. [ 130.291402][ T6340] device wlan1 entered promiscuous mode [ 130.386138][ T6347] netlink: 'syz.3.571': attribute type 1 has an invalid length. [ 130.439708][ T6347] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.571'. [ 130.645859][ T6351] netlink: 'syz.3.571': attribute type 1 has an invalid length. [ 130.669358][ T6351] netlink: 'syz.3.571': attribute type 4 has an invalid length. [ 130.693094][ T6351] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.571'. [ 130.775354][ T6357] delete_channel: no stack [ 130.790997][ T6357] delete_channel: no stack [ 131.034494][ T6365] netlink: 'syz.3.577': attribute type 9 has an invalid length. [ 131.053214][ T6365] netlink: 'syz.3.577': attribute type 23 has an invalid length. [ 131.076397][ T6365] netlink: 156008 bytes leftover after parsing attributes in process `syz.3.577'. [ 131.096940][ T6364] netlink: 'syz.1.576': attribute type 16 has an invalid length. [ 131.110695][ T6364] netlink: 48 bytes leftover after parsing attributes in process `syz.1.576'. [ 131.162087][ T6364] netlink: 'syz.1.576': attribute type 10 has an invalid length. [ 131.172669][ T6364] netlink: 2 bytes leftover after parsing attributes in process `syz.1.576'. [ 131.185208][ T6364] device hsr0 entered promiscuous mode [ 131.193851][ T6364] bridge0: port 3(hsr0) entered blocking state [ 131.203865][ T6364] bridge0: port 3(hsr0) entered disabled state [ 131.729850][ T6380] netlink: 'syz.1.581': attribute type 3 has an invalid length. [ 131.738219][ T6380] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.581'. [ 132.260637][ T6404] netlink: 15478 bytes leftover after parsing attributes in process `syz.3.588'. [ 132.457841][ T6413] tun0: tun_chr_ioctl cmd 1074025675 [ 132.479270][ T6413] tun0: persist enabled [ 132.485909][ T6413] tun0: tun_chr_ioctl cmd 1074025675 [ 132.494958][ T6413] tun0: persist disabled [ 132.612009][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.618313][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.367492][ T6435] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 133.375143][ T6435] IPv6: NLM_F_CREATE should be set when creating new route [ 133.382412][ T6435] IPv6: NLM_F_CREATE should be set when creating new route [ 133.389645][ T6435] IPv6: NLM_F_CREATE should be set when creating new route [ 133.956959][ T6445] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.598'. [ 134.686992][ T6470] device syzkaller0 left promiscuous mode [ 135.591967][ T6527] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.618'. [ 135.732911][ T6531] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.620'. [ 135.755867][ T6529] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.619'. [ 135.760907][ T6531] netlink: 'syz.2.620': attribute type 21 has an invalid length. [ 135.829342][ T6531] netlink: 132 bytes leftover after parsing attributes in process `syz.2.620'. [ 135.864091][ T6529] netlink: 20624 bytes leftover after parsing attributes in process `syz.4.619'. [ 135.909658][ T6529] tipc: Started in network mode [ 135.929628][ T6529] tipc: Node identity d, cluster identity 46 [ 135.967927][ T6529] tipc: Node number set to 13 [ 135.998797][ T6538] netlink: 60 bytes leftover after parsing attributes in process `syz.3.622'. [ 136.029282][ T6528] delete_channel: no stack [ 136.057855][ T6538] netlink: 60 bytes leftover after parsing attributes in process `syz.3.622'. [ 136.098289][ T6542] netlink: 60 bytes leftover after parsing attributes in process `syz.3.622'. [ 136.605750][ T6546] netlink: 'syz.4.625': attribute type 9 has an invalid length. [ 136.650051][ T6546] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.625'. [ 137.941358][ T6578] netlink: 'syz.4.636': attribute type 21 has an invalid length. [ 137.979169][ T6578] netlink: 'syz.4.636': attribute type 6 has an invalid length. [ 138.061488][ T6581] netlink: 132 bytes leftover after parsing attributes in process `syz.2.637'. [ 138.354356][ T6581] netlink: 'syz.2.637': attribute type 10 has an invalid length. [ 138.704760][ T6585] netlink: 'syz.2.637': attribute type 3 has an invalid length. [ 139.172698][ T6604] netlink: 'syz.2.643': attribute type 17 has an invalid length. [ 139.319838][ T6604] netlink: 'syz.2.643': attribute type 21 has an invalid length. [ 139.327931][ T6604] netlink: 'syz.2.643': attribute type 1 has an invalid length. [ 139.413011][ T6607] netlink: 'syz.2.643': attribute type 2 has an invalid length. [ 139.804031][ T6624] netlink: set zone limit has 8 unknown bytes [ 140.754492][ T6656] device syzkaller0 entered promiscuous mode [ 140.949606][ T6660] validate_nla: 8 callbacks suppressed [ 140.949648][ T6660] netlink: 'syz.4.659': attribute type 10 has an invalid length. [ 141.022294][ T6660] __nla_validate_parse: 9 callbacks suppressed [ 141.022335][ T6660] netlink: 40 bytes leftover after parsing attributes in process `syz.4.659'. [ 141.095875][ T6660] batman_adv: batadv0: Adding interface: virt_wifi0 [ 141.144319][ T6660] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.254855][ T6660] batman_adv: batadv0: Interface activated: virt_wifi0 [ 141.667271][ T6684] netlink: 'syz.1.665': attribute type 9 has an invalid length. [ 141.700419][ T6684] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.665'. [ 141.750684][ T6682] netlink: 'syz.4.663': attribute type 1 has an invalid length. [ 141.771985][ T6682] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.663'. [ 142.124088][ T6699] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.671'. [ 142.293520][ T6699] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 143.192052][ T6740] netlink: 'syz.1.683': attribute type 1 has an invalid length. [ 143.487683][ T6763] netlink: 144 bytes leftover after parsing attributes in process `syz.3.689'. [ 143.545265][ T6763] netlink: 'syz.3.689': attribute type 2 has an invalid length. [ 143.585394][ T6763] netlink: 'syz.3.689': attribute type 1 has an invalid length. [ 143.621444][ T6763] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.689'. [ 143.688129][ T6764] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 144.728255][ T6791] netlink: 'syz.2.692': attribute type 10 has an invalid length. [ 144.793575][ T6791] netlink: 40 bytes leftover after parsing attributes in process `syz.2.692'. [ 144.849193][ T6791] device team0 entered promiscuous mode [ 144.853423][ T6812] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.700'. [ 144.869129][ T6791] device team_slave_0 entered promiscuous mode [ 144.895872][ T6791] device team_slave_1 entered promiscuous mode [ 144.915451][ T6791] bridge0: port 3(team0) entered blocking state [ 144.951466][ T6791] bridge0: port 3(team0) entered disabled state [ 144.994206][ T6791] bridge0: port 3(team0) entered blocking state [ 145.000604][ T6791] bridge0: port 3(team0) entered forwarding state [ 145.652975][ T6827] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.703'. [ 146.193936][ T6860] netlink: 'syz.3.713': attribute type 3 has an invalid length. [ 146.219661][ T6859] netlink: 60 bytes leftover after parsing attributes in process `syz.0.714'. [ 146.230061][ T6860] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.713'. [ 146.369522][ T6869] IPv6: Can't replace route, no match found [ 146.413055][ T6872] netlink: 'syz.3.718': attribute type 1 has an invalid length. [ 146.426167][ T6866] netlink: 'syz.4.715': attribute type 5 has an invalid length. [ 146.436693][ T6872] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.718'. [ 146.480012][ T6866] netlink: 28 bytes leftover after parsing attributes in process `syz.4.715'. [ 146.647089][ T6880] netlink: 'syz.0.721': attribute type 2 has an invalid length. [ 146.672683][ T6880] netlink: 164 bytes leftover after parsing attributes in process `syz.0.721'. [ 146.759432][ T6883] netlink: 'syz.4.720': attribute type 21 has an invalid length. [ 146.834979][ T6883] netlink: 'syz.4.720': attribute type 6 has an invalid length. [ 147.152659][ T6899] netlink: 'syz.0.724': attribute type 10 has an invalid length. [ 147.174387][ T6899] netlink: 40 bytes leftover after parsing attributes in process `syz.0.724'. [ 147.249966][ T6899] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 147.289816][ T6899] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.615827][ T6913] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.726'. [ 147.689997][ T6914] netlink: 14 bytes leftover after parsing attributes in process `syz.2.729'. [ 147.773088][ T6914] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.729'. [ 147.878323][ T6928] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.733'. [ 148.698087][ T6935] netlink: 'syz.0.734': attribute type 10 has an invalid length. [ 148.732632][ T6950] netlink: 'syz.1.737': attribute type 4 has an invalid length. [ 149.246068][ T6965] netlink: 'syz.4.742': attribute type 3 has an invalid length. [ 149.248764][ T6968] syz.0.743[6968] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.280279][ T6968] syz.0.743[6968] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.307396][ T6959] device syzkaller0 entered promiscuous mode [ 149.464989][ T6959] device syzkaller0 left promiscuous mode [ 150.649958][ T7000] tap0: tun_chr_ioctl cmd 35111 [ 150.914781][ T7016] Ÿë: port 1(veth0_to_team) entered blocking state [ 150.957644][ T7016] Ÿë: port 1(veth0_to_team) entered disabled state [ 150.994549][ T7016] device veth0_to_team entered promiscuous mode [ 151.319773][ T7052] __nla_validate_parse: 7 callbacks suppressed [ 151.319789][ T7052] netlink: 68 bytes leftover after parsing attributes in process `syz.1.765'. [ 151.520731][ T7065] netlink: 64 bytes leftover after parsing attributes in process `syz.0.769'. [ 151.835658][ T7076] validate_nla: 3 callbacks suppressed [ 151.835676][ T7076] netlink: 'syz.4.771': attribute type 2 has an invalid length. [ 151.869388][ T7076] netlink: 60 bytes leftover after parsing attributes in process `syz.4.771'. [ 151.901920][ T7073] netlink: 'syz.4.771': attribute type 10 has an invalid length. [ 151.954973][ T7076] netlink: 399 bytes leftover after parsing attributes in process `syz.4.771'. [ 152.056223][ T7073] batman_adv: batadv0: Adding interface: netdevsim0 [ 152.087067][ T7073] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.123963][ T7073] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 152.316555][ T7108] netlink: 'syz.1.779': attribute type 9 has an invalid length. [ 152.327540][ T7108] netlink: 167912 bytes leftover after parsing attributes in process `syz.1.779'. [ 152.424108][ T7117] netlink: 'syz.1.779': attribute type 9 has an invalid length. [ 152.459312][ T7117] netlink: 149324 bytes leftover after parsing attributes in process `syz.1.779'. [ 152.570852][ T7108] netlink: 'syz.1.779': attribute type 3 has an invalid length. [ 152.578870][ T7108] netlink: 'syz.1.779': attribute type 5 has an invalid length. [ 152.839695][ T7108] netlink: 156148 bytes leftover after parsing attributes in process `syz.1.779'. [ 152.904344][ T7148] netlink: 132 bytes leftover after parsing attributes in process `syz.2.786'. [ 153.619739][ T7176] netlink: 'syz.2.790': attribute type 10 has an invalid length. [ 153.807118][ T7191] netlink: 'syz.0.794': attribute type 21 has an invalid length. [ 153.836574][ T7200] netlink: 'syz.2.796': attribute type 15 has an invalid length. [ 153.844578][ T7200] netlink: 'syz.2.796': attribute type 16 has an invalid length. [ 153.852837][ T7200] netlink: 15862 bytes leftover after parsing attributes in process `syz.2.796'. [ 153.871722][ T7191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.794'. [ 153.886543][ T7202] device ipvlan1 left promiscuous mode [ 153.998062][ T7202] device syzkaller0 entered promiscuous mode [ 154.170968][ T7214] sctp: [Deprecated]: syz.2.801 (pid 7214) Use of struct sctp_assoc_value in delayed_ack socket option. [ 154.170968][ T7214] Use struct sctp_sack_info instead [ 154.724046][ T7235] tap0: tun_chr_ioctl cmd 1074025677 [ 154.765002][ T7235] tap0: linktype set to 1 [ 155.174725][ T7249] device batadv_slave_1 entered promiscuous mode [ 157.150169][ T7315] __nla_validate_parse: 4 callbacks suppressed [ 157.150186][ T7315] netlink: 128 bytes leftover after parsing attributes in process `syz.2.828'. [ 157.209770][ T7315] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 157.238863][ T7315] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 157.279859][ T7316] netlink: 128 bytes leftover after parsing attributes in process `syz.2.828'. [ 157.316520][ T7316] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 157.345840][ T7316] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 157.669834][ T7335] validate_nla: 5 callbacks suppressed [ 157.669866][ T7335] netlink: 'syz.4.834': attribute type 4 has an invalid length. [ 157.744148][ T7335] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.834'. [ 157.794270][ T7343] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.837'. [ 157.829481][ T7343] netlink: 6328 bytes leftover after parsing attributes in process `syz.1.837'. [ 157.900798][ T7343] tc_dump_action: action bad kind [ 157.907344][ T7347] netlink: 60 bytes leftover after parsing attributes in process `syz.2.838'. [ 158.003753][ T7352] device batadv_slave_1 entered promiscuous mode [ 158.128053][ T7367] netlink: 'syz.4.844': attribute type 4 has an invalid length. [ 158.154898][ T7367] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.844'. [ 158.282561][ T7375] netlink: 2 bytes leftover after parsing attributes in process `syz.1.847'. [ 158.710539][ T7413] netlink: 60 bytes leftover after parsing attributes in process `syz.1.858'. [ 160.090342][ T7539] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.875'. [ 160.108790][ T7539] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 160.876589][ T7570] tap0: tun_chr_ioctl cmd 1074025677 [ 160.882403][ T7570] tap0: linktype set to 270 [ 161.445460][ T7580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.568870][ T7580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.628616][ T7580] bond0 (unregistering): Released all slaves [ 162.458864][ T7618] __nla_validate_parse: 4 callbacks suppressed [ 162.458895][ T7618] netlink: 184 bytes leftover after parsing attributes in process `syz.3.898'. [ 162.621607][ T7628] netlink: 10 bytes leftover after parsing attributes in process `syz.3.901'. [ 162.786343][ T7630] device syzkaller0 entered promiscuous mode [ 163.216171][ T7646] netlink: 10 bytes leftover after parsing attributes in process `syz.0.904'. [ 163.408433][ T7661] netlink: 128 bytes leftover after parsing attributes in process `syz.3.909'. [ 163.470045][ T7661] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 163.518252][ T7667] netlink: 14 bytes leftover after parsing attributes in process `syz.1.912'. [ 163.587174][ T7667] device hsr_slave_0 left promiscuous mode [ 163.594714][ T7667] device hsr_slave_1 left promiscuous mode [ 163.638177][ T7667] bridge0: port 3(hsr0) entered disabled state [ 164.472409][ T7687] netlink: 128 bytes leftover after parsing attributes in process `syz.2.916'. [ 164.580319][ T7687] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 164.747424][ T7693] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.918'. [ 164.842817][ T7693] bridge_slave_1: default FDB implementation only supports local addresses [ 164.877484][ T7694] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.918'. [ 164.897606][ T7694] bridge_slave_1: default FDB implementation only supports local addresses [ 165.181434][ T7711] netlink: set zone limit has 8 unknown bytes [ 165.216887][ T7704] netlink: set zone limit has 8 unknown bytes [ 165.880482][ T7732] netlink: 'syz.1.930': attribute type 1 has an invalid length. [ 165.950306][ T7732] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.930'. [ 166.036632][ T7732] netlink: 'syz.1.930': attribute type 1 has an invalid length. [ 166.588351][ T7753] netlink: 'syz.2.934': attribute type 21 has an invalid length. [ 166.859924][ T7760] device bridge_slave_1 left promiscuous mode [ 166.866453][ T7760] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.926757][ T7760] device bridge_slave_0 left promiscuous mode [ 166.999340][ T7760] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.670855][ T7784] netlink: 'syz.4.946': attribute type 21 has an invalid length. [ 167.813796][ T7790] netlink: 'syz.1.943': attribute type 8 has an invalid length. [ 167.833745][ T7790] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.943'. [ 167.961248][ T7789] netlink: 'syz.0.944': attribute type 1 has an invalid length. [ 168.005952][ T7789] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.944'. [ 168.415831][ T7806] raw_sendmsg: syz.3.952 forgot to set AF_INET. Fix it! [ 168.867235][ T7820] netlink: 'syz.1.955': attribute type 9 has an invalid length. [ 168.916134][ T7820] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.955'. [ 169.096149][ T7826] netlink: 'syz.1.955': attribute type 9 has an invalid length. [ 169.133573][ T7826] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.955'. [ 169.293983][ T7835] netlink: 125732 bytes leftover after parsing attributes in process `syz.3.958'. [ 169.352817][ T7841] netlink: 'syz.4.960': attribute type 3 has an invalid length. [ 169.378998][ T7841] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.960'. [ 170.691210][ T7899] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.976'. [ 170.703363][ T7892] netlink: 'syz.4.974': attribute type 10 has an invalid length. [ 170.866984][ T7892] team0: Device wg1 is of different type [ 170.870896][ T7902] netlink: 164 bytes leftover after parsing attributes in process `syz.0.977'. [ 170.876226][ T7896] delete_channel: no stack [ 171.142503][ T7917] netlink: 'syz.4.980': attribute type 8 has an invalid length. [ 171.181616][ T7917] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.980'. [ 171.237925][ T7922] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.983'. [ 171.374193][ T7933] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 171.542104][ T7938] device syzkaller0 entered promiscuous mode [ 171.624991][ T7945] TCP: TCP_TX_DELAY enabled [ 172.561178][ T7997] netlink: 'syz.1.1004': attribute type 16 has an invalid length. [ 172.671885][ T8005] netlink: 'syz.0.1006': attribute type 2 has an invalid length. [ 172.706894][ T8005] netlink: 'syz.0.1006': attribute type 8 has an invalid length. [ 172.878297][ T8016] __nla_validate_parse: 8 callbacks suppressed [ 172.878314][ T8016] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.1009'. [ 173.023987][ T8021] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.1011'. [ 173.434296][ T8039] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1018'. [ 173.504982][ T8039] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1018'. [ 173.581421][ T8040] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1018'. [ 173.751617][ T8046] netlink: 134268 bytes leftover after parsing attributes in process `syz.1.1020'. [ 174.187455][ T8055] netlink: 'syz.1.1022': attribute type 3 has an invalid length. [ 174.238008][ T8055] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1022'. [ 174.599909][ T8077] delete_channel: no stack [ 175.128307][ T8106] netlink: 21 bytes leftover after parsing attributes in process `syz.1.1036'. [ 175.171185][ T8106] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 175.891187][ T8128] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1043'. [ 175.927995][ T8126] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1041'. [ 176.067697][ T8135] bridge0: port 3(team0) entered disabled state [ 176.139693][ T8135] device bridge_slave_1 left promiscuous mode [ 176.160608][ T8135] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.213306][ T8135] device bridge_slave_0 left promiscuous mode [ 176.236636][ T8135] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.276981][ T8160] netlink: 'syz.4.1051': attribute type 2 has an invalid length. [ 176.285188][ T8160] netlink: 'syz.4.1051': attribute type 11 has an invalid length. [ 176.362649][ T8157] device syzkaller0 entered promiscuous mode [ 176.986493][ T8212] netlink: 'syz.4.1065': attribute type 29 has an invalid length. [ 177.083086][ T8212] netlink: 'syz.4.1065': attribute type 29 has an invalid length. [ 177.106481][ T8214] netlink: 'syz.4.1065': attribute type 29 has an invalid length. [ 177.115887][ T8212] netlink: 'syz.4.1065': attribute type 29 has an invalid length. [ 177.202455][ T8214] netlink: 'syz.4.1065': attribute type 29 has an invalid length. [ 177.422016][ T8234] netlink: 'syz.0.1074': attribute type 4 has an invalid length. [ 177.441200][ T8234] netlink: 'syz.0.1074': attribute type 7 has an invalid length. [ 177.502645][ T8237] netlink: 'syz.4.1075': attribute type 10 has an invalid length. [ 177.549700][ T8237] device team0 entered promiscuous mode [ 177.558350][ T8237] device team_slave_1 entered promiscuous mode [ 177.685170][ T8237] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 177.887069][ T8248] device sit0 entered promiscuous mode [ 178.014518][ T8258] __nla_validate_parse: 9 callbacks suppressed [ 178.014554][ T8258] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1082'. [ 178.125857][ T8265] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1085'. [ 178.172897][ T8268] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1086'. [ 178.185080][ T8265] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1085'. [ 178.286084][ T8265] team0: Port device team_slave_0 removed [ 178.337212][ T8265] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 178.421882][ T8268] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1086'. [ 178.501742][ T8281] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1090'. [ 178.541263][ T8279] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1090'. [ 179.307383][ T8294] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1093'. [ 179.368913][ T8294] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1093'. [ 179.438747][ T8300] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1093'. [ 180.842805][ T7145] Bluetooth: hci0: command 0x0406 tx timeout [ 180.919486][ T7145] Bluetooth: hci1: command 0x0406 tx timeout [ 180.925620][ T7145] Bluetooth: hci2: command 0x0406 tx timeout [ 180.965030][ T7145] Bluetooth: hci3: command 0x0406 tx timeout [ 180.981869][ T7145] Bluetooth: hci4: command 0x0406 tx timeout [ 181.573125][ T8388] validate_nla: 4 callbacks suppressed [ 181.573141][ T8388] netlink: 'syz.2.1123': attribute type 39 has an invalid length. [ 183.806632][ T8453] __nla_validate_parse: 8 callbacks suppressed [ 183.806656][ T8453] netlink: 399 bytes leftover after parsing attributes in process `syz.4.1138'. [ 183.854062][ T8454] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1140'. [ 184.148401][ T8456] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1140'. [ 184.389613][ T8473] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1145'. [ 184.493795][ T8473] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1145'. [ 184.685715][ T8482] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 184.874239][ T8483] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 184.977798][ T8483] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 185.201070][ T8497] tap0: tun_chr_ioctl cmd 1074025677 [ 185.228755][ T8497] tap0: linktype set to 805 [ 185.597874][ T8502] device veth1_macvtap left promiscuous mode [ 185.818218][ T8508] sctp: [Deprecated]: syz.2.1154 (pid 8508) Use of int in max_burst socket option deprecated. [ 185.818218][ T8508] Use struct sctp_assoc_value instead [ 186.055991][ T8516] netlink: 'syz.0.1153': attribute type 2 has an invalid length. [ 186.198048][ T8516] netlink: 'syz.0.1153': attribute type 1 has an invalid length. [ 186.245188][ T8516] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.1153'. [ 186.708431][ T8534] netlink: 'syz.4.1159': attribute type 2 has an invalid length. [ 187.054178][ T8551] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.1166'. [ 187.154945][ T8557] netlink: 'syz.1.1168': attribute type 10 has an invalid length. [ 187.198952][ T8557] team0: Device vxcan0 is of different type [ 187.395681][ T8576] netlink: 'syz.1.1172': attribute type 20 has an invalid length. [ 187.501298][ T8577] netlink: 'syz.1.1172': attribute type 10 has an invalid length. [ 187.852024][ T8584] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1176'. [ 188.210711][ T8597] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.1180'. [ 188.324470][ T8605] netlink: 'syz.2.1182': attribute type 39 has an invalid length. [ 188.382963][ T8605] netlink: 'syz.2.1182': attribute type 3 has an invalid length. [ 188.452965][ T8605] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1182'. [ 188.660981][ T8618] netlink: 'syz.2.1184': attribute type 33 has an invalid length. [ 188.689406][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 188.754505][ T8618] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.075235][ T8641] __nla_validate_parse: 1 callbacks suppressed [ 189.075248][ T8641] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1191'. [ 189.329746][ T8654] netlink: 'syz.4.1194': attribute type 15 has an invalid length. [ 189.348718][ T8654] netlink: 'syz.4.1194': attribute type 7 has an invalid length. [ 189.370308][ T8654] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1194'. [ 189.533990][ T8661] netlink: 'syz.2.1196': attribute type 1 has an invalid length. [ 189.551594][ T8661] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1196'. [ 189.579307][ T8659] netlink: 197276 bytes leftover after parsing attributes in process `syz.4.1195'. [ 189.946659][ T8670] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1198'. [ 189.973436][ T8670] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1198'. [ 190.344505][ T8670] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1198'. [ 190.806520][ T8700] delete_channel: no stack [ 190.837036][ T8705] delete_channel: no stack [ 190.853114][ T8705] delete_channel: no stack [ 191.503875][ T8718] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1211'. [ 191.614160][ T8718] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 191.657672][ T8718] CPU: 1 PID: 8718 Comm: syz.4.1211 Not tainted syzkaller #0 [ 191.665087][ T8718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 191.675166][ T8718] Call Trace: [ 191.678455][ T8718] [ 191.681390][ T8718] dump_stack_lvl+0x188/0x250 [ 191.686109][ T8718] ? show_regs_print_info+0x20/0x20 [ 191.691325][ T8718] ? load_image+0x410/0x410 [ 191.695864][ T8718] sysfs_warn_dup+0x8a/0xa0 [ 191.700383][ T8718] sysfs_do_create_link_sd+0xc0/0x110 [ 191.705780][ T8718] device_add+0x83b/0x1050 [ 191.710225][ T8718] wiphy_register+0x1e74/0x2c40 [ 191.715112][ T8718] ? cfg80211_event_work+0x40/0x40 [ 191.720239][ T8718] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 191.726429][ T8718] ieee80211_register_hw+0x2a03/0x3a60 [ 191.731910][ T8718] ? ieee80211_register_hw+0xa81/0x3a60 [ 191.737467][ T8718] ? ieee80211_tasklet_handler+0x20/0x20 [ 191.743098][ T8718] ? rcu_is_watching+0x11/0xa0 [ 191.747857][ T8718] ? hrtimer_init+0x10c/0x220 [ 191.752529][ T8718] mac80211_hwsim_new_radio+0x209d/0x4050 [ 191.758258][ T8718] hwsim_new_radio_nl+0xa7d/0xc50 [ 191.763289][ T8718] genl_rcv_msg+0xd0b/0xfa0 [ 191.767793][ T8718] ? genl_bind+0x370/0x370 [ 191.772204][ T8718] ? verify_lock_unused+0x140/0x140 [ 191.777398][ T8718] ? rcu_preempt_deferred_qs_irqrestore+0x82d/0xbd0 [ 191.783985][ T8718] ? perf_trace_lock+0xe4/0x390 [ 191.788834][ T8718] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 191.795197][ T8718] netlink_rcv_skb+0x1e9/0x430 [ 191.799978][ T8718] ? genl_bind+0x370/0x370 [ 191.804392][ T8718] ? netlink_ack+0xb10/0xb10 [ 191.808984][ T8718] ? down_read+0x1aa/0x2e0 [ 191.813399][ T8718] genl_rcv+0x24/0x40 [ 191.817373][ T8718] netlink_unicast+0x78f/0x940 [ 191.822140][ T8718] netlink_sendmsg+0x8ba/0xbe0 [ 191.826903][ T8718] ? lockdep_hardirqs_on+0x94/0x140 [ 191.832101][ T8718] ? netlink_getsockopt+0x570/0x570 [ 191.837291][ T8718] ? aa_sock_msg_perm+0x94/0x150 [ 191.842222][ T8718] ? apparmor_socket_sendmsg+0x88/0x230 [ 191.847756][ T8718] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 191.853035][ T8718] ? security_socket_sendmsg+0x7c/0xa0 [ 191.858482][ T8718] ? netlink_getsockopt+0x570/0x570 [ 191.863674][ T8718] ____sys_sendmsg+0x5be/0x8f0 [ 191.868436][ T8718] ? __sys_sendmsg_sock+0x30/0x30 [ 191.873456][ T8718] ? import_iovec+0x6f/0xa0 [ 191.877953][ T8718] ___sys_sendmsg+0x236/0x2e0 [ 191.882625][ T8718] ? __sys_sendmsg+0x290/0x290 [ 191.887387][ T8718] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 191.893554][ T8718] __se_sys_sendmsg+0x1b7/0x2a0 [ 191.898398][ T8718] ? __x64_sys_sendmsg+0x80/0x80 [ 191.903322][ T8718] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 191.909312][ T8718] ? lockdep_hardirqs_on+0x94/0x140 [ 191.914620][ T8718] do_syscall_64+0x4c/0xa0 [ 191.919039][ T8718] ? clear_bhb_loop+0x30/0x80 [ 191.923712][ T8718] ? clear_bhb_loop+0x30/0x80 [ 191.928389][ T8718] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 191.934316][ T8718] RIP: 0033:0x7f539122c0d9 [ 191.938730][ T8718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.958333][ T8718] RSP: 002b:00007f538f484028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.966753][ T8718] RAX: ffffffffffffffda RBX: 00007f53914b3fa0 RCX: 00007f539122c0d9 [ 191.974715][ T8718] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 191.982675][ T8718] RBP: 00007f53912c3024 R08: 0000000000000000 R09: 0000000000000000 [ 191.990641][ T8718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.998607][ T8718] R13: 00007f53914b4038 R14: 00007f53914b3fa0 R15: 00007fffa63dc3e8 [ 192.006585][ T8718] [ 192.162964][ T8728] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.1212'. [ 193.080501][ T8734] delete_channel: no stack [ 193.137955][ T8745] validate_nla: 1 callbacks suppressed [ 193.137968][ T8745] netlink: 'syz.1.1217': attribute type 2 has an invalid length. [ 193.168252][ T8745] netlink: 'syz.1.1217': attribute type 1 has an invalid length. [ 193.255388][ T8745] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1217'. [ 193.332378][ T8744] netlink: 'syz.1.1217': attribute type 2 has an invalid length. [ 193.414702][ T8744] netlink: 'syz.1.1217': attribute type 1 has an invalid length. [ 193.623522][ T8771] netlink: 'syz.0.1224': attribute type 12 has an invalid length. [ 194.002422][ T8797] IPv6: Can't replace route, no match found [ 194.054631][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.060958][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.166070][ T8804] __nla_validate_parse: 3 callbacks suppressed [ 194.166084][ T8804] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1237'. [ 194.273073][ T8811] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1240'. [ 194.541895][ T8830] netlink: 'syz.1.1245': attribute type 39 has an invalid length. [ 194.613061][ T8830] device macvlan0 entered promiscuous mode [ 194.776854][ T8839] delete_channel: no stack [ 194.916606][ T8850] netlink: 'syz.0.1251': attribute type 39 has an invalid length. [ 195.350241][ T8865] tap0: tun_chr_ioctl cmd 1074025680 [ 195.478654][ T8871] device syzkaller0 entered promiscuous mode [ 196.006205][ T8900] netlink: 'syz.3.1263': attribute type 1 has an invalid length. [ 196.029987][ T8900] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.1263'. [ 196.341092][ T8922] netlink: 'syz.4.1271': attribute type 10 has an invalid length. [ 196.423764][ T8922] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1271'. [ 196.467870][ T8922] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 196.870945][ T8945] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.1276'. [ 196.929006][ T8950] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1277'. [ 197.561899][ T8979] netlink: 'syz.2.1286': attribute type 39 has an invalid length. [ 197.630839][ T8988] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1286'. [ 197.635986][ T8979] device macvlan0 entered promiscuous mode [ 197.748216][ T8983] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1288'. [ 198.151127][ T8991] validate_nla: 2 callbacks suppressed [ 198.151169][ T8991] netlink: 'syz.1.1288': attribute type 1 has an invalid length. [ 198.463411][ T9016] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1295'. [ 198.999745][ T9039] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1301'. [ 199.386586][ T9053] erspan0: mtu less than device minimum [ 199.414758][ T9057] netlink: 'syz.4.1306': attribute type 10 has an invalid length. [ 199.500702][ T9057] batman_adv: batadv0: Removing interface: netdevsim0 [ 199.563123][ T9057] device netdevsim0 entered promiscuous mode [ 199.617692][ T9057] team0: Port device netdevsim0 added [ 199.679172][ T9053] netlink: 'syz.4.1306': attribute type 10 has an invalid length. [ 199.687387][ T9053] device netdevsim0 left promiscuous mode [ 199.946322][ T9053] team0: Port device netdevsim0 removed [ 199.997804][ T9060] __nla_validate_parse: 3 callbacks suppressed [ 199.997822][ T9060] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1308'. [ 200.044971][ T9064] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1309'. [ 200.365125][ T9070] device syzkaller0 entered promiscuous mode [ 200.436983][ T9074] netlink: 'syz.3.1313': attribute type 21 has an invalid length. [ 200.484713][ T9079] netlink: 'syz.4.1314': attribute type 12 has an invalid length. [ 200.534797][ T9079] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1314'. [ 200.642885][ T9081] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1314'. [ 200.644946][ T9083] netlink: 'syz.1.1315': attribute type 3 has an invalid length. [ 200.714541][ T9081] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1314'. [ 200.748062][ T9083] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1315'. [ 200.802895][ T9089] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1314'. [ 200.854613][ T9079] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1314'. [ 201.521636][ T9109] netlink: 'syz.3.1323': attribute type 1 has an invalid length. [ 201.596574][ T9109] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.1323'. [ 202.009381][ T9117] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1324'. [ 204.073536][ T9174] netlink: 'syz.1.1340': attribute type 10 has an invalid length. [ 204.300124][ T9174] team0: Device wg1 is of different type [ 204.463120][ T9185] netlink: 'syz.2.1343': attribute type 1 has an invalid length. [ 204.529557][ T9183] IPv6: NLM_F_CREATE should be specified when creating new route [ 204.865884][ T9192] netlink: 'syz.2.1345': attribute type 10 has an invalid length. [ 204.932484][ T9196] delete_channel: no stack [ 205.286480][ T9212] device wlan0 entered promiscuous mode [ 205.740365][ T9228] device wlan0 left promiscuous mode [ 205.782955][ T9231] netlink: 'syz.1.1354': attribute type 9 has an invalid length. [ 205.895968][ T9231] __nla_validate_parse: 4 callbacks suppressed [ 205.895984][ T9231] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1354'. [ 205.930705][ T9239] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1356'. [ 205.960422][ T9239] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1356'. [ 205.984079][ T9243] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1356'. [ 206.015379][ T9241] netlink: 'syz.3.1358': attribute type 7 has an invalid length. [ 206.670133][ T9256] netlink: 'syz.1.1362': attribute type 33 has an invalid length. [ 206.748317][ T9256] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1362'. [ 206.922832][ T9267] netlink: 'syz.3.1366': attribute type 3 has an invalid length. [ 206.940562][ T9266] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 206.974912][ T9267] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1366'. [ 207.088918][ T9272] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.1368'. [ 207.251267][ T9282] netlink: 16162 bytes leftover after parsing attributes in process `syz.2.1372'. [ 207.697851][ T9298] netlink: 'syz.0.1378': attribute type 21 has an invalid length. [ 207.743588][ T9298] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1378'. [ 207.786419][ T9300] netlink: 'syz.0.1378': attribute type 33 has an invalid length. [ 207.794840][ T9300] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1378'. [ 207.804527][ T9300] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.826679][ T9295] netlink: 'syz.1.1376': attribute type 21 has an invalid length. [ 207.927541][ T9308] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 208.242496][ T9314] delete_channel: no stack [ 209.301773][ T9364] device wlan1 entered promiscuous mode [ 209.560938][ T9384] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0 [ 209.947297][ T9378] IPv6: …: Disabled Multicast RS [ 210.608458][ T9427] validate_nla: 6 callbacks suppressed [ 210.608496][ T9427] netlink: 'syz.2.1413': attribute type 1 has an invalid length. [ 210.924790][ T9460] __nla_validate_parse: 9 callbacks suppressed [ 210.924804][ T9460] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.1422'. [ 211.422636][ T9503] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1434'. [ 211.464836][ T9506] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1435'. [ 211.491005][ T9503] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 211.519166][ T9503] CPU: 0 PID: 9503 Comm: syz.1.1434 Not tainted syzkaller #0 [ 211.526577][ T9503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 211.536626][ T9503] Call Trace: [ 211.539894][ T9503] [ 211.542814][ T9503] dump_stack_lvl+0x188/0x250 [ 211.547490][ T9503] ? show_regs_print_info+0x20/0x20 [ 211.552682][ T9503] ? load_image+0x410/0x410 [ 211.557198][ T9503] sysfs_warn_dup+0x8a/0xa0 [ 211.561693][ T9503] sysfs_do_create_link_sd+0xc0/0x110 [ 211.567055][ T9503] device_add+0x83b/0x1050 [ 211.571472][ T9503] wiphy_register+0x1e74/0x2c40 [ 211.576341][ T9503] ? cfg80211_event_work+0x40/0x40 [ 211.581441][ T9503] ? minstrel_ht_alloc+0x807/0x980 [ 211.586553][ T9503] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 211.592625][ T9503] ieee80211_register_hw+0x2a03/0x3a60 [ 211.598090][ T9503] ? ieee80211_register_hw+0xa81/0x3a60 [ 211.603644][ T9503] ? ieee80211_tasklet_handler+0x20/0x20 [ 211.609278][ T9503] ? rcu_is_watching+0x11/0xa0 [ 211.614042][ T9503] ? hrtimer_init+0x10c/0x220 [ 211.618716][ T9503] mac80211_hwsim_new_radio+0x209d/0x4050 [ 211.624450][ T9503] hwsim_new_radio_nl+0xa7d/0xc50 [ 211.629486][ T9503] genl_rcv_msg+0xd0b/0xfa0 [ 211.633996][ T9503] ? genl_bind+0x370/0x370 [ 211.638409][ T9503] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 211.644132][ T9503] ? verify_lock_unused+0x140/0x140 [ 211.649328][ T9503] ? perf_trace_lock_acquire+0x341/0x3f0 [ 211.654964][ T9503] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 211.661550][ T9503] ? dev_queue_xmit+0x20/0x20 [ 211.666221][ T9503] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 211.672563][ T9503] netlink_rcv_skb+0x1e9/0x430 [ 211.677325][ T9503] ? genl_bind+0x370/0x370 [ 211.681734][ T9503] ? netlink_ack+0xb10/0xb10 [ 211.686332][ T9503] ? down_read+0x1aa/0x2e0 [ 211.690746][ T9503] genl_rcv+0x24/0x40 [ 211.694720][ T9503] netlink_unicast+0x78f/0x940 [ 211.699495][ T9503] netlink_sendmsg+0x8ba/0xbe0 [ 211.704266][ T9503] ? netlink_getsockopt+0x570/0x570 [ 211.709458][ T9503] ? aa_sock_msg_perm+0x94/0x150 [ 211.714392][ T9503] ? apparmor_socket_sendmsg+0x88/0x230 [ 211.719932][ T9503] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 211.725219][ T9503] ? security_socket_sendmsg+0x7c/0xa0 [ 211.730672][ T9503] ? netlink_getsockopt+0x570/0x570 [ 211.735865][ T9503] ____sys_sendmsg+0x5be/0x8f0 [ 211.740635][ T9503] ? __sys_sendmsg_sock+0x30/0x30 [ 211.745664][ T9503] ? import_iovec+0x6f/0xa0 [ 211.750166][ T9503] ___sys_sendmsg+0x236/0x2e0 [ 211.754847][ T9503] ? __sys_sendmsg+0x290/0x290 [ 211.759662][ T9503] __se_sys_sendmsg+0x1b7/0x2a0 [ 211.764510][ T9503] ? __x64_sys_sendmsg+0x80/0x80 [ 211.769436][ T9503] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 211.775431][ T9503] ? lockdep_hardirqs_on+0x94/0x140 [ 211.780629][ T9503] do_syscall_64+0x4c/0xa0 [ 211.785035][ T9503] ? clear_bhb_loop+0x30/0x80 [ 211.789701][ T9503] ? clear_bhb_loop+0x30/0x80 [ 211.794391][ T9503] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 211.800277][ T9503] RIP: 0033:0x7f8b486bf0d9 [ 211.804690][ T9503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.824287][ T9503] RSP: 002b:00007f8b46917028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.832713][ T9503] RAX: ffffffffffffffda RBX: 00007f8b48946fa0 RCX: 00007f8b486bf0d9 [ 211.840690][ T9503] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 211.848661][ T9503] RBP: 00007f8b48756024 R08: 0000000000000000 R09: 0000000000000000 [ 211.856632][ T9503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.864596][ T9503] R13: 00007f8b48947038 R14: 00007f8b48946fa0 R15: 00007ffc78cf7608 [ 211.872591][ T9503] [ 211.901491][ T9501] netlink: 'syz.0.1433': attribute type 11 has an invalid length. [ 211.943743][ T9501] netlink: 212832 bytes leftover after parsing attributes in process `syz.0.1433'. [ 211.966395][ T9511] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1438'. [ 212.003790][ T9504] netlink: 'syz.0.1433': attribute type 11 has an invalid length. [ 212.049244][ T9504] netlink: 212832 bytes leftover after parsing attributes in process `syz.0.1433'. [ 212.087950][ T9512] syz.3.1437 (9512) used obsolete PPPIOCDETACH ioctl [ 212.466700][ T9533] netlink: 399 bytes leftover after parsing attributes in process `syz.1.1444'. [ 212.903172][ T9543] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1447'. [ 213.039994][ T9543] openvswitch: netlink: Flow key attribute not present in set flow. [ 213.344081][ T9543] device syzkaller0 entered promiscuous mode [ 213.533166][ T9561] netlink: 'syz.4.1450': attribute type 9 has an invalid length. [ 213.541527][ T9561] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1450'. [ 213.682664][ T9564] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1450'. [ 213.906829][ T9558] netlink: 'syz.4.1450': attribute type 9 has an invalid length. [ 214.497697][ T9591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.684302][ T9591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.798176][ T9591] bond0 (unregistering): Released all slaves [ 216.414407][ T9661] __nla_validate_parse: 7 callbacks suppressed [ 216.414437][ T9661] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1471'. [ 216.470884][ T9665] netlink: 'syz.1.1472': attribute type 11 has an invalid length. [ 218.238750][ T9686] netlink: 'syz.4.1477': attribute type 10 has an invalid length. [ 218.274107][ T9686] netlink: 'syz.4.1477': attribute type 4 has an invalid length. [ 218.353848][ T9686] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1477'. [ 218.436225][ T9686] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 218.797122][ T9694] netlink: 'syz.3.1480': attribute type 21 has an invalid length. [ 218.825729][ T9694] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1480'. [ 218.835413][ T9694] netlink: 'syz.3.1480': attribute type 4 has an invalid length. [ 218.886767][ T9694] netlink: 'syz.3.1480': attribute type 5 has an invalid length. [ 218.904938][ T9694] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1480'. [ 219.958258][ T9744] netlink: 'syz.1.1490': attribute type 4 has an invalid length. [ 220.219194][ T9750] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1494'. [ 220.494018][ T9759] netlink: 'syz.4.1495': attribute type 10 has an invalid length. [ 220.649191][ T9759] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.1495'. [ 221.686118][ T9789] netdevsim netdevsim1: Direct firmware load for Ö failed with error -2 [ 221.782004][ T9789] netdevsim netdevsim1: Falling back to sysfs fallback for: Ö [ 222.032203][ T9794] device sit0 entered promiscuous mode [ 222.512430][ T9801] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1510'. [ 223.198705][ T9811] netlink: 'syz.3.1511': attribute type 16 has an invalid length. [ 223.248103][ T9811] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1511'. [ 223.350700][ T9816] netlink: 'syz.3.1511': attribute type 10 has an invalid length. [ 223.367303][ T9816] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1511'. [ 224.358461][ T9846] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1522'. [ 224.866258][ T9855] netlink: 'syz.4.1524': attribute type 27 has an invalid length. [ 224.941231][ T9855] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1524'. [ 224.978705][ T9855] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 226.132117][ T9885] IPv6: …: Disabled Multicast RS [ 226.756469][ T9910] netlink: 'syz.2.1541': attribute type 21 has an invalid length. [ 226.785749][ T9910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1541'. [ 226.808393][ T9903] netlink: 'syz.4.1538': attribute type 3 has an invalid length. [ 226.839385][ T9903] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1538'. [ 227.247972][ T9922] netlink: 'syz.1.1544': attribute type 3 has an invalid length. [ 227.256126][ T9922] netlink: 'syz.1.1544': attribute type 6 has an invalid length. [ 227.264353][ T9922] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.1544'. [ 227.369650][ T9901] delete_channel: no stack [ 227.502412][ T9935] netlink: 'syz.3.1548': attribute type 8 has an invalid length. [ 227.563232][ T9935] netlink: 197324 bytes leftover after parsing attributes in process `syz.3.1548'. [ 227.651522][ T9945] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1551'. [ 228.770564][ T9997] netlink: 'syz.4.1567': attribute type 21 has an invalid length. [ 228.778770][ T9997] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1567'. [ 228.995564][T10011] netlink: 'syz.4.1571': attribute type 10 has an invalid length. [ 229.058202][T10011] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1571'. [ 229.287142][T10015] netlink: 'syz.1.1574': attribute type 1 has an invalid length. [ 229.374072][T10015] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1574'. [ 229.992481][T10043] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1584'. [ 230.020569][T10043] netlink: 8454 bytes leftover after parsing attributes in process `syz.0.1584'. [ 230.102882][T10043] netlink: 'syz.0.1584': attribute type 4 has an invalid length. [ 230.126473][T10043] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1584'. [ 230.592212][T10084] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 230.599511][T10084] IPv6: NLM_F_CREATE should be set when creating new route [ 230.606733][T10084] IPv6: NLM_F_CREATE should be set when creating new route [ 230.613974][T10084] IPv6: NLM_F_CREATE should be set when creating new route [ 230.782155][T10089] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1595'. [ 230.872172][T10091] netlink: 'syz.3.1597': attribute type 2 has an invalid length. [ 230.889195][T10091] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.1597'. [ 230.941461][T10093] netlink: 'syz.1.1596': attribute type 30 has an invalid length. [ 231.142137][T10108] netlink: 'syz.3.1601': attribute type 3 has an invalid length. [ 231.375093][T10112] device wlan1 left promiscuous mode [ 232.050022][T10148] netlink: 'syz.2.1614': attribute type 10 has an invalid length. [ 232.060715][T10145] netlink: 'syz.4.1613': attribute type 3 has an invalid length. [ 232.084923][T10145] netlink: 'syz.4.1613': attribute type 7 has an invalid length. [ 232.372211][T10164] delete_channel: no stack [ 232.630315][T10186] __nla_validate_parse: 7 callbacks suppressed [ 232.630332][T10186] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1624'. [ 232.728174][T10192] netlink: 118424 bytes leftover after parsing attributes in process `syz.1.1627'. [ 233.113018][T10224] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1635'. [ 233.497972][T10262] netlink: 209832 bytes leftover after parsing attributes in process `syz.2.1642'. [ 233.848972][T10277] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.1649'. [ 234.005190][T10290] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1652'. [ 234.208974][T10305] device pim6reg1 entered promiscuous mode [ 234.247157][T10308] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1656'. [ 234.324232][T10310] validate_nla: 5 callbacks suppressed [ 234.324249][T10310] netlink: 'syz.4.1657': attribute type 2 has an invalid length. [ 234.419367][T10310] netlink: 195336 bytes leftover after parsing attributes in process `syz.4.1657'. [ 235.117813][T10353] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1671'. [ 235.148362][T10353] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1671'. [ 235.939486][T10378] netlink: 'syz.2.1676': attribute type 4 has an invalid length. [ 235.959599][T10372] can: request_module (can-proto-0) failed. [ 236.150668][T10393] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 236.559593][T10414] device wlan1 left promiscuous mode [ 236.658306][T10421] netlink: 'syz.3.1690': attribute type 21 has an invalid length. [ 237.047552][T10451] netlink: 'syz.3.1700': attribute type 4 has an invalid length. [ 237.086086][T10452] netlink: 'syz.1.1699': attribute type 17 has an invalid length. [ 237.118364][T10452] netlink: 'syz.1.1699': attribute type 16 has an invalid length. [ 238.090086][T10496] netlink: 'syz.3.1715': attribute type 3 has an invalid length. [ 238.097959][T10496] __nla_validate_parse: 11 callbacks suppressed [ 238.098054][T10496] netlink: 201336 bytes leftover after parsing attributes in process `syz.3.1715'. [ 238.387869][T10500] device syzkaller0 entered promiscuous mode [ 238.433283][T10509] netlink: 'syz.4.1716': attribute type 275 has an invalid length. [ 238.551840][T10516] pim6reg: tun_chr_ioctl cmd 1074025677 [ 238.611334][T10516] pim6reg: linktype set to 823 [ 238.649884][T10518] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1719'. [ 238.693476][T10516] pim6reg: tun_chr_ioctl cmd 2147767520 [ 238.763983][T10523] netlink: 'syz.4.1721': attribute type 16 has an invalid length. [ 238.782758][T10523] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1721'. [ 238.878292][T10523] device pim6reg1 entered promiscuous mode [ 239.049833][T10544] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 239.063597][T10544] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 239.286741][T10552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.422769][T10560] netlink: 189104 bytes leftover after parsing attributes in process `syz.3.1729'. [ 240.015057][T10589] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1738'. [ 240.069771][T10589] : renamed from caif0 [ 240.308077][T10589] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 240.368355][T10598] netlink: 'syz.2.1738': attribute type 10 has an invalid length. [ 240.759469][T10611] device syzkaller0 entered promiscuous mode [ 240.881235][T10624] netlink: 'syz.2.1747': attribute type 4 has an invalid length. [ 240.922927][T10624] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1747'. [ 240.953140][T10609] netlink: 'syz.1.1742': attribute type 10 has an invalid length. [ 240.978044][T10609] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.985681][T10609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.994615][T10609] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.001783][T10609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.027887][T10609] team0: Port device bridge0 added [ 241.039748][T10628] netlink: 'syz.0.1748': attribute type 4 has an invalid length. [ 241.063754][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 241.078210][T10629] netlink: 'syz.2.1747': attribute type 3 has an invalid length. [ 241.096669][T10629] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1747'. [ 241.868203][T10649] netlink: 'syz.2.1755': attribute type 39 has an invalid length. [ 242.005219][T10663] netlink: 2220 bytes leftover after parsing attributes in process `syz.4.1758'. [ 242.161813][T10673] netlink: 'syz.0.1761': attribute type 21 has an invalid length. [ 242.201576][T10673] netlink: 'syz.0.1761': attribute type 1 has an invalid length. [ 242.240296][T10675] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1763'. [ 242.499939][T10694] netlink: 143108 bytes leftover after parsing attributes in process `syz.0.1767'. [ 242.548100][T10697] netlink: 'syz.2.1766': attribute type 21 has an invalid length. [ 242.555972][T10695] netlink: 'syz.4.1768': attribute type 10 has an invalid length. [ 242.676273][T10695] IPv6: NLM_F_CREATE should be specified when creating new route [ 242.804939][T10693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.464164][T10745] mac80211_hwsim hwsim4 »»»»»»: renamed from wlan0 [ 243.935231][T10749] __nla_validate_parse: 3 callbacks suppressed [ 243.935269][T10749] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.1783'. [ 244.235429][T10793] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1792'. [ 244.351759][T10797] netlink: 'syz.4.1795': attribute type 11 has an invalid length. [ 244.361288][T10793] device pim6reg1 entered promiscuous mode [ 244.375437][T10797] netlink: 188816 bytes leftover after parsing attributes in process `syz.4.1795'. [ 245.330192][T10817] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1802'. [ 245.330473][T10818] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1802'. [ 245.643889][T10833] validate_nla: 10 callbacks suppressed [ 245.643905][T10833] netlink: 'syz.0.1806': attribute type 2 has an invalid length. [ 245.942773][T10841] netlink: 'syz.3.1809': attribute type 29 has an invalid length. [ 246.008747][T10841] netlink: 'syz.3.1809': attribute type 29 has an invalid length. [ 246.038466][T10844] netlink: 'syz.3.1809': attribute type 29 has an invalid length. [ 246.151555][T10846] netlink: 'syz.1.1811': attribute type 21 has an invalid length. [ 246.193035][T10846] netlink: 'syz.1.1811': attribute type 1 has an invalid length. [ 246.252364][T10847] netlink: 'syz.1.1811': attribute type 21 has an invalid length. [ 246.289475][T10847] netlink: 'syz.1.1811': attribute type 1 has an invalid length. [ 246.593102][T10863] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1814'. [ 247.148097][T10875] netlink: 'syz.4.1816': attribute type 4 has an invalid length. [ 247.182181][T10875] netlink: 'syz.4.1816': attribute type 3 has an invalid length. [ 247.219114][T10875] netlink: 153952 bytes leftover after parsing attributes in process `syz.4.1816'. [ 247.452574][T10883] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1819'. [ 248.277370][T10883] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1819'. [ 248.311170][T10895] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1821'. [ 248.505550][T10899] device pim6reg1 entered promiscuous mode [ 249.581232][T10908] __nla_validate_parse: 1 callbacks suppressed [ 249.581251][T10908] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1824'. [ 249.678551][T10908] delete_channel: no stack [ 251.935058][T10950] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.1837'. [ 252.353923][T10968] validate_nla: 3 callbacks suppressed [ 252.353940][T10968] netlink: 'syz.2.1843': attribute type 10 has an invalid length. [ 252.412856][T10968] netlink: 209860 bytes leftover after parsing attributes in process `syz.2.1843'. [ 252.441341][T10968] openvswitch: netlink: Message has 4 unknown bytes. [ 252.492703][T10968] netlink: 'syz.2.1843': attribute type 3 has an invalid length. [ 252.511480][T10968] netlink: 'syz.2.1843': attribute type 1 has an invalid length. [ 252.531925][T10968] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.1843'. [ 252.931542][T10979] netlink: 'syz.2.1847': attribute type 8 has an invalid length. [ 252.943144][T10979] netlink: 187020 bytes leftover after parsing attributes in process `syz.2.1847'. [ 253.006722][T10993] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1850'. [ 253.048527][T10993] team0: Port device team_slave_0 removed [ 253.070757][T10993] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 253.250725][T11012] device bridge_slave_0 entered promiscuous mode [ 253.295201][T11015] netlink: 'syz.1.1857': attribute type 10 has an invalid length. [ 253.610854][T11015] device veth0_vlan left promiscuous mode [ 253.655728][T11015] device veth0_vlan entered promiscuous mode [ 253.691726][T11015] team0: Device veth0_vlan failed to register rx_handler [ 253.975746][T11030] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1861'. [ 254.419649][T11049] netlink: 'syz.4.1867': attribute type 29 has an invalid length. [ 254.661012][T11052] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1869'. [ 254.739266][T11049] netlink: 'syz.4.1867': attribute type 29 has an invalid length. [ 254.788434][T11063] netlink: 'syz.0.1871': attribute type 6 has an invalid length. [ 254.847104][T11063] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1871'. [ 254.876928][T11054] netlink: 'syz.4.1867': attribute type 29 has an invalid length. [ 255.492488][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.498912][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.864501][T11107] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.1883'. [ 256.173878][T11121] netlink: 'syz.3.1886': attribute type 13 has an invalid length. [ 256.199357][T11121] netlink: 24643 bytes leftover after parsing attributes in process `syz.3.1886'. [ 256.295915][T11122] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1885'. [ 256.885303][T11137] device syzkaller0 entered promiscuous mode [ 257.230446][T11143] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1893'. [ 257.545789][T11170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.766337][T11177] device syzkaller0 left promiscuous mode [ 258.275753][T11203] netlink: 192584 bytes leftover after parsing attributes in process `syz.3.1908'. [ 258.448601][T11207] validate_nla: 2 callbacks suppressed [ 258.448617][T11207] netlink: 'syz.4.1907': attribute type 10 has an invalid length. [ 258.586201][T11207] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1907'. [ 258.598240][T11213] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 258.604310][T11214] netlink: 'syz.3.1910': attribute type 29 has an invalid length. [ 258.630518][T11207] device vxcan0 entered promiscuous mode [ 258.649346][T11207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 258.699421][T11207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 258.706912][T11207] A link change request failed with some changes committed already. Interface vxcan0 may have been left with an inconsistent configuration, please check. [ 258.849378][T11214] netlink: 'syz.3.1910': attribute type 29 has an invalid length. [ 259.666037][T11238] netlink: set zone limit has 8 unknown bytes [ 259.924100][T11243] netlink: 'syz.3.1919': attribute type 29 has an invalid length. [ 259.962639][T11243] netlink: 'syz.3.1919': attribute type 29 has an invalid length. [ 259.996598][T11243] netlink: 'syz.3.1919': attribute type 29 has an invalid length. [ 260.036321][T11243] netlink: 'syz.3.1919': attribute type 12 has an invalid length. [ 260.058837][T11246] netlink: 'syz.4.1920': attribute type 10 has an invalid length. [ 260.089154][T11243] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1919'. [ 260.098521][T11246] netlink: 'syz.4.1920': attribute type 10 has an invalid length. [ 260.114884][T11249] netlink: 'syz.3.1919': attribute type 29 has an invalid length. [ 261.327213][T11293] netlink: 149044 bytes leftover after parsing attributes in process `syz.2.1933'. [ 261.446030][T11303] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1934'. [ 261.678531][T11312] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1937'. [ 261.820268][T11319] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1939'. [ 261.889454][T11317] syzkaller0: mtu greater than device maximum [ 262.396235][T11347] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.1947'. [ 262.428981][T11360] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1951'. [ 262.550981][T11364] netlink: 156008 bytes leftover after parsing attributes in process `syz.3.1952'. [ 262.785325][T11373] netlink: 199832 bytes leftover after parsing attributes in process `syz.2.1957'. [ 262.850761][T11375] netlink: 199832 bytes leftover after parsing attributes in process `syz.2.1957'. [ 263.429938][T11407] device syzkaller0 entered promiscuous mode [ 263.507344][T11411] device sit0 left promiscuous mode [ 263.638599][T11416] device sit0 entered promiscuous mode [ 264.159825][T11436] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 264.225865][T11436] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 264.486532][T11467] device batadv_slave_1 entered promiscuous mode [ 265.147116][T11490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.199868][T11490] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.260208][T11490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.299270][T11490] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.320607][T11490] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 265.346685][T11490] batman_adv: batadv0: Removing interface: virt_wifi0 [ 265.894921][T11542] validate_nla: 4 callbacks suppressed [ 265.894936][T11542] netlink: 'syz.4.2006': attribute type 29 has an invalid length. [ 266.003298][T11542] netlink: 'syz.4.2006': attribute type 29 has an invalid length. [ 266.022538][T11545] netlink: 'syz.4.2006': attribute type 29 has an invalid length. [ 266.117651][T11542] netlink: 'syz.4.2006': attribute type 29 has an invalid length. [ 266.393932][T11552] netlink: 'syz.0.2008': attribute type 10 has an invalid length. [ 266.423113][T11552] __nla_validate_parse: 3 callbacks suppressed [ 266.423143][T11552] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2008'. [ 266.443732][T11556] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2010'. [ 266.473575][T11556] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 266.645358][T11558] netlink: 'syz.3.2011': attribute type 10 has an invalid length. [ 266.696073][T11558] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.728517][T11558] device bridge_slave_1 left promiscuous mode [ 266.740707][T11558] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.161235][T11585] netlink: 'syz.3.2019': attribute type 21 has an invalid length. [ 267.216694][T11585] netlink: 'syz.3.2019': attribute type 10 has an invalid length. [ 267.242233][T11585] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.2019'. [ 268.051749][T11610] netlink: 'syz.3.2026': attribute type 10 has an invalid length. [ 268.094512][T11610] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2026'. [ 268.343643][T11628] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.2027'. [ 268.453384][T11625] delete_channel: no stack [ 268.507927][T11629] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 268.515256][T11629] IPv6: NLM_F_CREATE should be set when creating new route [ 268.785250][T11634] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2033'. [ 269.089478][T11655] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2039'. [ 269.098933][T11655] openvswitch: netlink: Tunnel attr 2 has unexpected len 8 expected 4 [ 269.365359][T11669] netlink: 'syz.4.2042': attribute type 1 has an invalid length. [ 269.378136][T11668] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2045'. [ 269.563222][T11669] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.2042'. [ 269.642080][T11683] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2048'. [ 269.923125][T11698] tap0: tun_chr_ioctl cmd 1074025677 [ 269.928713][T11698] tap0: linktype set to 786 [ 271.420137][T11765] device sit0 left promiscuous mode [ 271.548076][T11766] device sit0 entered promiscuous mode [ 271.862153][T11777] validate_nla: 4 callbacks suppressed [ 271.862169][T11777] netlink: 'syz.4.2075': attribute type 10 has an invalid length. [ 271.939482][T11776] can: request_module (can-proto-5) failed. [ 271.975914][T11777] __nla_validate_parse: 2 callbacks suppressed [ 271.975928][T11777] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2075'. [ 272.024348][T11777] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 272.076481][T11784] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 272.213665][T11794] netlink: 'syz.3.2080': attribute type 29 has an invalid length. [ 272.240274][T11794] netlink: 'syz.3.2080': attribute type 29 has an invalid length. [ 272.277913][T11795] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.2078'. [ 272.333744][T11794] netlink: 'syz.3.2080': attribute type 1 has an invalid length. [ 272.358023][T11794] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.2080'. [ 272.408823][T11793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.457611][T11799] netlink: 'syz.0.2081': attribute type 29 has an invalid length. [ 272.483715][T11799] netlink: 'syz.0.2081': attribute type 29 has an invalid length. [ 272.565685][T11800] netlink: 'syz.0.2081': attribute type 29 has an invalid length. [ 272.651132][T11799] netlink: 'syz.0.2081': attribute type 29 has an invalid length. [ 272.793556][T11808] netlink: 'syz.0.2084': attribute type 39 has an invalid length. [ 272.860686][T11808] device hsr_slave_0 left promiscuous mode [ 272.921194][T11806] device syzkaller0 entered promiscuous mode [ 272.941585][T11809] netlink: 'syz.0.2084': attribute type 10 has an invalid length. [ 272.960871][T11809] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2084'. [ 272.991882][T11809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.019331][T11809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.063495][T11809] team0: Device batadv_slave_1 is up. Set it down before adding it as a team port [ 273.318460][T11824] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2088'. [ 273.637762][T11838] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2092'. [ 273.858894][T11843] team0: Device gre0 is of different type [ 274.013296][T11846] netlink: 65035 bytes leftover after parsing attributes in process `syz.0.2094'. [ 274.208886][T11860] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.2098'. [ 274.266283][T11860] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2098'. [ 274.387497][T11862] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2100'. [ 274.691320][ T7528] wlan1: Trigger new scan to find an IBSS to join [ 275.193908][T11911] device syzkaller0 entered promiscuous mode [ 275.418463][T11937] team0 (unregistering): Port device team_slave_1 removed [ 275.488171][T11937] team0 (unregistering): Port device netdevsim0 removed [ 275.527832][T11937] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.535114][T11937] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.613113][T11937] team0 (unregistering): Port device bridge0 removed [ 275.697081][T11951] team0 (unregistering): Port device team_slave_1 removed [ 277.225052][T12018] __nla_validate_parse: 5 callbacks suppressed [ 277.225067][T12018] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2148'. [ 277.355604][T12021] validate_nla: 12 callbacks suppressed [ 277.382977][T12021] netlink: 'syz.4.2149': attribute type 19 has an invalid length. [ 277.394506][T12021] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2149'. [ 277.976951][T12049] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2156'. [ 278.078806][T12057] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2161'. [ 278.112838][T12057] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2161'. [ 278.135533][T12055] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2162'. [ 278.418603][T12079] cgroup: fork rejected by pids controller in /syz4 [ 278.608287][ T9637] wlan1: Trigger new scan to find an IBSS to join [ 278.957999][T12195] netlink: 'syz.1.2175': attribute type 25 has an invalid length. [ 278.984136][T12195] netlink: 'syz.1.2175': attribute type 9 has an invalid length. [ 279.019425][T12195] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2175'. [ 279.049254][T12197] netlink: 'syz.0.2174': attribute type 3 has an invalid length. [ 279.066770][T12197] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2174'. [ 279.129671][T12195] netlink: 'syz.1.2175': attribute type 10 has an invalid length. [ 279.139400][T12201] netlink: 'syz.2.2176': attribute type 4 has an invalid length. [ 279.166092][T12197] netlink: 'syz.0.2174': attribute type 11 has an invalid length. [ 279.179433][T12197] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2174'. [ 279.333812][T12212] netlink: 'syz.3.2179': attribute type 21 has an invalid length. [ 279.596499][T12224] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 279.621008][ T9637] wlan1: Creating new IBSS network, BSSID 72:84:0e:af:62:6f [ 279.714947][T12239] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2186'. [ 280.163533][T12257] netlink: 'syz.1.2192': attribute type 2 has an invalid length. [ 280.196854][T12257] netlink: 'syz.1.2192': attribute type 1 has an invalid length. [ 280.417404][T12237] chnl_net:caif_netlink_parms(): no params data found [ 280.598734][T12237] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.606871][T12237] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.615160][T12237] device bridge_slave_0 entered promiscuous mode [ 280.624461][T12237] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.632087][T12237] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.640587][T12237] device bridge_slave_1 entered promiscuous mode [ 280.666303][T12237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.678133][T12237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.708186][T12237] team0: Port device team_slave_0 added [ 280.716386][T12237] team0: Port device team_slave_1 added [ 280.737804][T12237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.745064][T12237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.772377][T12237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.785166][T12237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.793286][T12237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.847568][T12237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.910784][T12237] device hsr_slave_0 entered promiscuous mode [ 280.917685][T12237] device hsr_slave_1 entered promiscuous mode [ 281.136419][T12296] netlink: 'syz.3.2200': attribute type 11 has an invalid length. [ 281.236530][T12237] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.341244][T12237] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.469946][T12237] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.550610][T12237] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.752187][T12237] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 281.807193][ T7138] Bluetooth: hci0: command 0x0409 tx timeout [ 281.825294][T12237] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 281.853712][T12237] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 281.882771][T12237] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 282.311793][T12237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.407271][ T7528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 282.435603][ T7528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 282.462456][T12237] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.556684][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 282.600068][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 282.706715][ T4238] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.713886][ T4238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.734600][T12339] delete_channel: no stack [ 282.765548][T12340] __nla_validate_parse: 7 callbacks suppressed [ 282.765575][T12340] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.2214'. [ 282.796366][T12339] delete_channel: no stack [ 282.803360][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 282.841309][ T7528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 282.878078][ T7528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 282.908629][ T7528] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.915769][ T7528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.943245][ T7528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 283.006559][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 283.059344][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 283.100219][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 283.108448][T12348] validate_nla: 7 callbacks suppressed [ 283.108457][T12348] netlink: 'syz.0.2216': attribute type 3 has an invalid length. [ 283.130045][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 283.146339][T12348] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.2216'. [ 283.156842][T12237] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 283.218027][T12237] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 283.274987][ T9637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 283.292016][ T9637] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 283.305460][ T9637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 283.315387][ T9637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 283.324791][ T9637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 283.333756][ T9637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 283.354688][T12358] sctp: [Deprecated]: syz.1.2220 (pid 12358) Use of int in max_burst socket option deprecated. [ 283.354688][T12358] Use struct sctp_assoc_value instead [ 283.356543][ T9637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 283.584610][T12367] netlink: 'syz.0.2222': attribute type 2 has an invalid length. [ 283.600959][T12367] netlink: 198692 bytes leftover after parsing attributes in process `syz.0.2222'. [ 283.676319][T12374] netlink: 'syz.2.2223': attribute type 4 has an invalid length. [ 283.710139][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 283.737684][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 283.766327][T12374] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.2223'. [ 283.768891][T12237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.872903][T12385] netlink: 61963 bytes leftover after parsing attributes in process `syz.0.2225'. [ 283.891390][ T5660] Bluetooth: hci0: command 0x041b tx timeout [ 283.921511][T12383] netlink: 61963 bytes leftover after parsing attributes in process `syz.0.2225'. [ 284.163772][T12405] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2230'. [ 284.661810][T12428] device syzkaller0 entered promiscuous mode [ 284.758321][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 284.767369][ T1170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 284.828094][ T9637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 284.855485][ T9637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 284.876328][T12237] device veth0_vlan entered promiscuous mode [ 284.902135][ T9637] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 284.917243][ T9637] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 284.946146][T12237] device veth1_vlan entered promiscuous mode [ 284.961732][T12439] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2237'. [ 285.026760][T12435] device syzkaller0 entered promiscuous mode [ 285.072515][T12439] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 285.096563][ T7011] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 285.113198][ T7011] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 285.135168][ T7011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 285.144088][ T7011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 285.155943][T12237] device veth0_macvtap entered promiscuous mode [ 285.227636][T12237] device veth1_macvtap entered promiscuous mode [ 285.263413][T12237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.301507][T12237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.328131][T12237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.341784][T12237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.351997][T12237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.362768][T12237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.384214][T12237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.423632][ T7528] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 285.453330][ T7528] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 285.461383][T12456] netlink: 'syz.0.2242': attribute type 2 has an invalid length. [ 285.470250][ T7528] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 285.484329][T12456] netlink: 148628 bytes leftover after parsing attributes in process `syz.0.2242'. [ 285.488132][ T7528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 285.532662][T12461] netlink: 'syz.1.2243': attribute type 39 has an invalid length. [ 285.649911][T12460] netlink: 'syz.1.2243': attribute type 39 has an invalid length. [ 285.686347][T12237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.712188][T12237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.763123][T12237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.793472][T12237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.839417][T12237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.876543][ T9637] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 285.897196][ T9637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 285.940266][T12481] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2247'. [ 285.958038][T12237] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.968261][ T5665] Bluetooth: hci0: command 0x040f tx timeout [ 285.989634][T12237] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.998477][T12237] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.012832][T12237] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.091367][ T7528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.103926][ T7528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.126944][ T9637] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 286.220563][ T9637] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.228415][ T9637] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.278721][ T7528] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 286.611633][T12507] netlink: 'syz.0.2254': attribute type 10 has an invalid length. [ 286.867583][T12507] team0: Device gre0 is of different type [ 288.039648][ T5665] Bluetooth: hci0: command 0x0419 tx timeout [ 289.078138][T12626] __nla_validate_parse: 2 callbacks suppressed [ 289.078153][T12626] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2280'. [ 289.119658][T12626] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.2280'. [ 289.562490][T12639] netlink: 'syz.2.2284': attribute type 9 has an invalid length. [ 289.599222][T12639] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2284'. [ 289.747688][T12644] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2284'. [ 289.805503][T12644] device bridge_slave_1 entered promiscuous mode [ 290.176469][T12662] netlink: 'syz.4.2291': attribute type 46 has an invalid length. [ 290.469346][T12673] netlink: 'syz.2.2295': attribute type 21 has an invalid length. [ 290.501180][T12673] netlink: 'syz.2.2295': attribute type 1 has an invalid length. [ 290.529260][T12673] netlink: 'syz.2.2295': attribute type 2 has an invalid length. [ 290.541957][T12673] netlink: 9062 bytes leftover after parsing attributes in process `syz.2.2295'. [ 290.553715][T12676] netlink: 'syz.1.2296': attribute type 41 has an invalid length. [ 290.562769][T12676] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2296'. [ 290.579735][T12676] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 290.616718][T12670] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2294'. [ 290.644627][T12675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.690237][T12670] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 290.927808][T12693] netlink: 'syz.0.2302': attribute type 21 has an invalid length. [ 290.944834][T12693] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2302'. [ 290.954315][T12693] netlink: 'syz.0.2302': attribute type 5 has an invalid length. [ 290.975852][T12693] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2302'. [ 290.990029][T12689] netlink: 'syz.2.2301': attribute type 21 has an invalid length. [ 290.998043][T12689] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2301'. [ 291.039873][T12692] netlink: 'syz.4.2303': attribute type 39 has an invalid length. [ 293.873094][T12867] device syzkaller0 entered promiscuous mode [ 294.000664][T12880] device syzkaller0 entered promiscuous mode [ 294.224970][T12893] __nla_validate_parse: 12 callbacks suppressed [ 294.225002][T12893] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2357'. [ 294.410902][T12904] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2361'. [ 294.458615][T12905] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2357'. [ 294.628166][T12911] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2364'. [ 295.091209][T12927] validate_nla: 19 callbacks suppressed [ 295.091244][T12927] netlink: 'syz.4.2366': attribute type 3 has an invalid length. [ 295.159587][T12927] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.2366'. [ 295.181264][T12933] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2366'. [ 295.309850][T12938] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.2371'. [ 295.594051][T12955] netlink: 205108 bytes leftover after parsing attributes in process `syz.3.2376'. [ 295.686281][T12963] netlink: 'syz.3.2376': attribute type 20 has an invalid length. [ 295.722248][T12955] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 295.769770][T12955] CPU: 0 PID: 12955 Comm: syz.3.2376 Not tainted syzkaller #0 [ 295.777294][T12955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 295.787378][T12955] Call Trace: [ 295.790682][T12955] [ 295.793634][T12955] dump_stack_lvl+0x188/0x250 [ 295.798343][T12955] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 295.804555][T12955] ? show_regs_print_info+0x20/0x20 [ 295.809792][T12955] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 295.816025][T12955] sysfs_warn_dup+0x8a/0xa0 [ 295.820565][T12955] sysfs_do_create_link_sd+0xc0/0x110 [ 295.825983][T12955] device_add+0x83b/0x1050 [ 295.830456][T12955] wiphy_register+0x1e74/0x2c40 [ 295.835408][T12955] ? cfg80211_event_work+0x40/0x40 [ 295.840557][T12955] ? minstrel_ht_alloc+0x807/0x980 [ 295.845727][T12955] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 295.851847][T12955] ieee80211_register_hw+0x2a03/0x3a60 [ 295.857368][T12955] ? ieee80211_register_hw+0xa81/0x3a60 [ 295.862989][T12955] ? ieee80211_tasklet_handler+0x20/0x20 [ 295.868682][T12955] ? rcu_is_watching+0x11/0xa0 [ 295.873502][T12955] ? hrtimer_init+0x10c/0x220 [ 295.878228][T12955] mac80211_hwsim_new_radio+0x209d/0x4050 [ 295.884035][T12955] hwsim_new_radio_nl+0xa7d/0xc50 [ 295.889149][T12955] genl_rcv_msg+0xd0b/0xfa0 [ 295.893723][T12955] ? genl_bind+0x370/0x370 [ 295.898201][T12955] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 295.904049][T12955] ? verify_lock_unused+0x140/0x140 [ 295.909282][T12955] ? perf_trace_lock_acquire+0x341/0x3f0 [ 295.914978][T12955] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 295.921624][T12955] ? dev_queue_xmit+0x20/0x20 [ 295.926328][T12955] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 295.932751][T12955] netlink_rcv_skb+0x1e9/0x430 [ 295.937557][T12955] ? genl_bind+0x370/0x370 [ 295.942021][T12955] ? netlink_ack+0xb10/0xb10 [ 295.946681][T12955] ? down_read+0x1aa/0x2e0 [ 295.951141][T12955] genl_rcv+0x24/0x40 [ 295.955152][T12955] netlink_unicast+0x78f/0x940 [ 295.959987][T12955] netlink_sendmsg+0x8ba/0xbe0 [ 295.964785][T12955] ? lockdep_hardirqs_on+0x94/0x140 [ 295.970051][T12955] ? netlink_getsockopt+0x570/0x570 [ 295.975303][T12955] ? __sanitizer_cov_trace_pc+0x41/0x60 [ 295.980894][T12955] ? security_socket_sendmsg+0x7c/0xa0 [ 295.986385][T12955] ? netlink_getsockopt+0x570/0x570 [ 295.991628][T12955] ____sys_sendmsg+0x5be/0x8f0 [ 295.996460][T12955] ? __sys_sendmsg_sock+0x30/0x30 [ 296.001548][T12955] ? import_iovec+0x6f/0xa0 [ 296.006098][T12955] ___sys_sendmsg+0x236/0x2e0 [ 296.010836][T12955] ? __sys_sendmsg+0x290/0x290 [ 296.015760][T12955] __se_sys_sendmsg+0x1b7/0x2a0 [ 296.020774][T12955] ? __x64_sys_sendmsg+0x80/0x80 [ 296.025737][T12955] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 296.031794][T12955] ? lockdep_hardirqs_on+0x94/0x140 [ 296.037041][T12955] do_syscall_64+0x4c/0xa0 [ 296.041482][T12955] ? clear_bhb_loop+0x30/0x80 [ 296.046188][T12955] ? clear_bhb_loop+0x30/0x80 [ 296.050902][T12955] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 296.056833][T12955] RIP: 0033:0x7efe274800d9 [ 296.061278][T12955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.080912][T12955] RSP: 002b:00007efe256d8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.089364][T12955] RAX: ffffffffffffffda RBX: 00007efe27707fa0 RCX: 00007efe274800d9 [ 296.097345][T12955] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 296.105316][T12955] RBP: 00007efe27517024 R08: 0000000000000000 R09: 0000000000000000 [ 296.113290][T12955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.121257][T12955] R13: 00007efe27708038 R14: 00007efe27707fa0 R15: 00007ffc6f3c86b8 [ 296.129266][T12955] [ 296.534780][T12958] netlink: 205108 bytes leftover after parsing attributes in process `syz.0.2377'. [ 296.563003][T12958] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 296.658560][T12991] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2385'. [ 297.563203][T13027] netlink: 'syz.1.2396': attribute type 16 has an invalid length. [ 297.637659][T13027] device pim6reg1 entered promiscuous mode [ 297.692650][T13038] netlink: 'syz.3.2400': attribute type 7 has an invalid length. [ 297.747976][T13041] sctp: [Deprecated]: syz.2.2401 (pid 13041) Use of int in maxseg socket option. [ 297.747976][T13041] Use struct sctp_assoc_value instead [ 301.082483][T13084] netlink: 'syz.2.2413': attribute type 19 has an invalid length. [ 301.124515][T13084] __nla_validate_parse: 2 callbacks suppressed [ 301.124533][T13084] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2413'. [ 301.213046][T13091] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 301.642754][ T9] tipc: Subscription rejected, illegal request [ 301.781280][T13111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.060015][T13123] netlink: 'syz.4.2428': attribute type 12 has an invalid length. [ 302.109382][T13123] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2428'. [ 302.466360][T13134] netlink: 'syz.1.2430': attribute type 19 has an invalid length. [ 302.519221][T13134] netlink: 14524 bytes leftover after parsing attributes in process `syz.1.2430'. [ 303.032926][T13162] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2439'. [ 303.753958][T13162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.839237][T13162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.864175][T13162] bond0 (unregistering): Released all slaves [ 303.915668][T13180] netlink: 'syz.0.2442': attribute type 10 has an invalid length. [ 303.940687][T13180] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2442'. [ 303.980489][T13180] batman_adv: batadv0: Adding interface: veth0_vlan [ 303.987542][T13180] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.044245][T13180] batman_adv: batadv0: Interface activated: veth0_vlan [ 304.222020][T13189] netlink: 'syz.3.2444': attribute type 11 has an invalid length. [ 304.222074][T13192] netlink: 'syz.4.2446': attribute type 9 has an invalid length. [ 304.222094][T13192] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2446'. [ 304.316437][T13189] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2444'. [ 304.350385][T13194] netlink: 'syz.1.2448': attribute type 3 has an invalid length. [ 304.368102][T13194] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2448'. [ 304.934941][T13218] delete_channel: no stack [ 304.991621][T13222] netlink: 'syz.0.2454': attribute type 3 has an invalid length. [ 305.010177][T13222] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.2454'. [ 305.050718][T13225] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.2454'. [ 305.497728][T13246] netlink: 'syz.3.2462': attribute type 9 has an invalid length. [ 306.449574][T13264] device syzkaller0 entered promiscuous mode [ 306.675602][T13276] netlink: 'syz.3.2466': attribute type 10 has an invalid length. [ 306.765429][T13276] device wlan1 left promiscuous mode [ 306.876207][T13280] netlink: 'syz.4.2469': attribute type 10 has an invalid length. [ 306.884129][T13280] __nla_validate_parse: 1 callbacks suppressed [ 306.884144][T13280] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2469'. [ 306.899807][T13280] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 307.287235][T13292] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2473'. [ 307.376876][T13292] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2473'. [ 307.453919][T13289] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2473'. [ 307.486081][T13294] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2473'. [ 307.671386][ C0] ------------[ cut here ]------------ [ 307.671400][ C0] WARNING: CPU: 0 PID: 13302 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 307.671436][ C0] Modules linked in: [ 307.671446][ C0] CPU: 0 PID: 13302 Comm: syz.3.2475 Not tainted syzkaller #0 [ 307.671461][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 307.671470][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 307.671488][ C0] Code: 24 45 31 f6 31 ff 89 de e8 2d 96 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b0 92 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 307.671501][ C0] RSP: 0018:fffffe0000016958 EFLAGS: 00010006 [ 307.671513][ C0] RAX: ffffffff81a06ae0 RBX: 0000000000000008 RCX: ffff88802aa81dc0 [ 307.671531][ C0] RDX: 0000000000110000 RSI: 0000000000000000 RDI: 0000000000000000 [ 307.671541][ C0] RBP: 0000000000000000 R08: ffff88802aa81dc7 R09: 1ffff110055503b8 [ 307.671552][ C0] R10: dffffc0000000000 R11: ffffed10055503b9 R12: ffff88802aa83548 [ 307.671563][ C0] R13: 00007ffffffff000 R14: fffffe00000169c8 R15: 0000000020000000 [ 307.671573][ C0] FS: 00007efe256d86c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 307.671587][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 307.671598][ C0] CR2: 000000110c252ee9 CR3: 0000000056ee6000 CR4: 00000000003506f0 [ 307.671611][ C0] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000200000000300 [ 307.671622][ C0] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 307.671632][ C0] Call Trace: [ 307.671637][ C0] <#DB> [ 307.671646][ C0] bpf_probe_read_compat+0xdd/0x170 [ 307.671668][ C0] bpf_prog_ba6f4f59b8fe48b1+0x40/0x384 [ 307.671683][ C0] bpf_overflow_handler+0x3fd/0x4a0 [ 307.671705][ C0] ? perf_event_switch_output+0x730/0x730 [ 307.671727][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 307.671745][ C0] __perf_event_overflow+0x35f/0x550 [ 307.671764][ C0] perf_bp_event+0x276/0x320 [ 307.671783][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 307.671817][ C0] ? rcu_lock_acquire+0x9/0x30 [ 307.671835][ C0] ? read_lock_is_recursive+0x10/0x10 [ 307.671859][ C0] hw_breakpoint_exceptions_notify+0x14d/0x470 [ 307.671878][ C0] atomic_notifier_call_chain+0x15d/0x280 [ 307.671898][ C0] notify_die+0x141/0x1a0 [ 307.671915][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 307.671935][ C0] ? exc_debug+0x6e/0x130 [ 307.671951][ C0] ? trace_hardirqs_off_finish+0x57/0x1f0 [ 307.671969][ C0] notify_debug+0x20/0x30 [ 307.671986][ C0] exc_debug+0xcf/0x130 [ 307.672002][ C0] asm_exc_debug+0x1a/0x40 [ 307.672018][ C0] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 307.672034][ C0] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 89 d1 83 f8 [ 307.672046][ C0] RSP: 0018:ffffc9000404f2b8 EFLAGS: 00050206 [ 307.672059][ C0] RAX: ffffffff83e67101 RBX: 0000000000000d24 RCX: 0000000000000a44 [ 307.672069][ C0] RDX: 0000000000000d24 RSI: 0000200000000320 RDI: ffff8880513ae404 [ 307.672079][ C0] RBP: ffffc9000404f418 R08: ffff8880513aee47 R09: 1ffff1100a275dc8 [ 307.672090][ C0] R10: dffffc0000000000 R11: ffffed100a275dc9 R12: ffff8880513ae124 [ 307.672101][ C0] R13: 0000000000000dff R14: 0000200000000040 R15: 0000000000000000 [ 307.672116][ C0] ? _copy_from_iter+0x251/0x1160 [ 307.672136][ C0] [ 307.672140][ C0] [ 307.672144][ C0] _copy_from_iter+0x322/0x1160 [ 307.672167][ C0] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 307.672186][ C0] ? __virt_addr_valid+0x3c6/0x470 [ 307.672201][ C0] ? __phys_addr_symbol+0x2b/0x70 [ 307.672214][ C0] ? __check_object_size+0x30c/0x410 [ 307.672233][ C0] tipc_msg_build+0x7f4/0xde0 [ 307.672261][ C0] tipc_send_group_bcast+0x7d4/0xad0 [ 307.672288][ C0] ? tipc_wait_for_connect+0x600/0x600 [ 307.672301][ C0] ? perf_trace_buf_update+0xa8/0x230 [ 307.672320][ C0] ? perf_swevent_event+0xcb/0x540 [ 307.672336][ C0] ? wait_woken+0x1b0/0x1b0 [ 307.672354][ C0] ? perf_tp_event+0xa7e/0xbe0 [ 307.672374][ C0] __tipc_sendmsg+0x313/0x2b60 [ 307.672399][ C0] ? local_bh_enable+0x20/0x20 [ 307.672421][ C0] ? verify_lock_unused+0x140/0x140 [ 307.672439][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 307.672455][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 307.672473][ C0] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 307.672492][ C0] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 307.672510][ C0] ? mark_lock+0x94/0x320 [ 307.672531][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 307.672550][ C0] ? lock_chain_count+0x20/0x20 [ 307.672571][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 307.672587][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 307.672612][ C0] tipc_sendmsg+0x51/0x70 [ 307.672627][ C0] sock_write_iter+0x2a6/0x3a0 [ 307.672646][ C0] ? sock_read_iter+0x380/0x380 [ 307.672660][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 307.672682][ C0] ? memset+0x1e/0x40 [ 307.672698][ C0] ? iov_iter_init+0xb4/0x170 [ 307.672714][ C0] vfs_write+0x748/0xd70 [ 307.672734][ C0] ? file_end_write+0x250/0x250 [ 307.672748][ C0] ? rcu_nmi_exit+0x6f/0xf0 [ 307.672767][ C0] ? __fget_files+0x402/0x470 [ 307.672787][ C0] ? __fdget_pos+0x1e2/0x370 [ 307.672799][ C0] ? ksys_write+0x70/0x260 [ 307.672815][ C0] ksys_write+0x153/0x260 [ 307.672830][ C0] ? __ia32_sys_read+0x80/0x80 [ 307.672847][ C0] ? syscall_enter_from_user_mode+0x2a/0x70 [ 307.672866][ C0] do_syscall_64+0x4c/0xa0 [ 307.672880][ C0] ? clear_bhb_loop+0x30/0x80 [ 307.672894][ C0] ? clear_bhb_loop+0x30/0x80 [ 307.672910][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 307.672925][ C0] RIP: 0033:0x7efe274800d9 [ 307.672937][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.672949][ C0] RSP: 002b:00007efe256d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 307.672964][ C0] RAX: ffffffffffffffda RBX: 00007efe27707fa0 RCX: 00007efe274800d9 [ 307.672975][ C0] RDX: 00000000000101d0 RSI: 0000200000000040 RDI: 0000000000000005 [ 307.672984][ C0] RBP: 00007efe27517024 R08: 0000000000000000 R09: 0000000000000000 [ 307.672994][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.673003][ C0] R13: 00007efe27708038 R14: 00007efe27707fa0 R15: 00007ffc6f3c86b8 [ 307.673023][ C0] [ 307.673034][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 307.673041][ C0] CPU: 0 PID: 13302 Comm: syz.3.2475 Not tainted syzkaller #0 [ 307.673056][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 307.673063][ C0] Call Trace: [ 307.673068][ C0] <#DB> [ 307.673073][ C0] dump_stack_lvl+0x188/0x250 [ 307.673093][ C0] ? show_regs_print_info+0x20/0x20 [ 307.673111][ C0] ? load_image+0x410/0x410 [ 307.673135][ C0] panic+0x2f8/0x850 [ 307.673155][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 307.673178][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 307.673195][ C0] __warn+0x248/0x2b0 [ 307.673211][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 307.673228][ C0] report_bug+0x1b9/0x2e0 [ 307.673248][ C0] handle_bug+0x3a/0x70 [ 307.673261][ C0] exc_invalid_op+0x16/0x40 [ 307.673276][ C0] asm_exc_invalid_op+0x16/0x20 [ 307.673290][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 307.673306][ C0] Code: 24 45 31 f6 31 ff 89 de e8 2d 96 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b0 92 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 307.673319][ C0] RSP: 0018:fffffe0000016958 EFLAGS: 00010006 [ 307.673331][ C0] RAX: ffffffff81a06ae0 RBX: 0000000000000008 RCX: ffff88802aa81dc0 [ 307.673341][ C0] RDX: 0000000000110000 RSI: 0000000000000000 RDI: 0000000000000000 [ 307.673351][ C0] RBP: 0000000000000000 R08: ffff88802aa81dc7 R09: 1ffff110055503b8 [ 307.673361][ C0] R10: dffffc0000000000 R11: ffffed10055503b9 R12: ffff88802aa83548 [ 307.673372][ C0] R13: 00007ffffffff000 R14: fffffe00000169c8 R15: 0000000020000000 [ 307.673388][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 307.673408][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 307.673426][ C0] bpf_probe_read_compat+0xdd/0x170 [ 307.673445][ C0] bpf_prog_ba6f4f59b8fe48b1+0x40/0x384 [ 307.673459][ C0] bpf_overflow_handler+0x3fd/0x4a0 [ 307.673479][ C0] ? perf_event_switch_output+0x730/0x730 [ 307.673501][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 307.673518][ C0] __perf_event_overflow+0x35f/0x550 [ 307.673542][ C0] perf_bp_event+0x276/0x320 [ 307.673560][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 307.673594][ C0] ? rcu_lock_acquire+0x9/0x30 [ 307.673611][ C0] ? read_lock_is_recursive+0x10/0x10 [ 307.673633][ C0] hw_breakpoint_exceptions_notify+0x14d/0x470 [ 307.673651][ C0] atomic_notifier_call_chain+0x15d/0x280 [ 307.673670][ C0] notify_die+0x141/0x1a0 [ 307.673687][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 307.673707][ C0] ? exc_debug+0x6e/0x130 [ 307.673722][ C0] ? trace_hardirqs_off_finish+0x57/0x1f0 [ 307.673739][ C0] notify_debug+0x20/0x30 [ 307.673754][ C0] exc_debug+0xcf/0x130 [ 307.673770][ C0] asm_exc_debug+0x1a/0x40 [ 307.673784][ C0] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 307.673799][ C0] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 89 d1 83 f8 [ 307.673811][ C0] RSP: 0018:ffffc9000404f2b8 EFLAGS: 00050206 [ 307.673823][ C0] RAX: ffffffff83e67101 RBX: 0000000000000d24 RCX: 0000000000000a44 [ 307.673833][ C0] RDX: 0000000000000d24 RSI: 0000200000000320 RDI: ffff8880513ae404 [ 307.673843][ C0] RBP: ffffc9000404f418 R08: ffff8880513aee47 R09: 1ffff1100a275dc8 [ 307.673854][ C0] R10: dffffc0000000000 R11: ffffed100a275dc9 R12: ffff8880513ae124 [ 307.673865][ C0] R13: 0000000000000dff R14: 0000200000000040 R15: 0000000000000000 [ 307.673880][ C0] ? _copy_from_iter+0x251/0x1160 [ 307.673898][ C0] [ 307.673903][ C0] [ 307.673907][ C0] _copy_from_iter+0x322/0x1160 [ 307.673929][ C0] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 307.673948][ C0] ? __virt_addr_valid+0x3c6/0x470 [ 307.673963][ C0] ? __phys_addr_symbol+0x2b/0x70 [ 307.673977][ C0] ? __check_object_size+0x30c/0x410 [ 307.673995][ C0] tipc_msg_build+0x7f4/0xde0 [ 307.674021][ C0] tipc_send_group_bcast+0x7d4/0xad0 [ 307.674044][ C0] ? tipc_wait_for_connect+0x600/0x600 [ 307.674056][ C0] ? perf_trace_buf_update+0xa8/0x230 [ 307.674076][ C0] ? perf_swevent_event+0xcb/0x540 [ 307.674092][ C0] ? wait_woken+0x1b0/0x1b0 [ 307.674108][ C0] ? perf_tp_event+0xa7e/0xbe0 [ 307.674129][ C0] __tipc_sendmsg+0x313/0x2b60 [ 307.674152][ C0] ? local_bh_enable+0x20/0x20 [ 307.674172][ C0] ? verify_lock_unused+0x140/0x140 [ 307.674189][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 307.674204][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 307.674221][ C0] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 307.674241][ C0] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 307.674258][ C0] ? mark_lock+0x94/0x320 [ 307.674274][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 307.674293][ C0] ? lock_chain_count+0x20/0x20 [ 307.674313][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 307.674330][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 307.674355][ C0] tipc_sendmsg+0x51/0x70 [ 307.674370][ C0] sock_write_iter+0x2a6/0x3a0 [ 307.674392][ C0] ? sock_read_iter+0x380/0x380 [ 307.674406][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 307.674428][ C0] ? memset+0x1e/0x40 [ 307.674444][ C0] ? iov_iter_init+0xb4/0x170 [ 307.674460][ C0] vfs_write+0x748/0xd70 [ 307.674480][ C0] ? file_end_write+0x250/0x250 [ 307.674493][ C0] ? rcu_nmi_exit+0x6f/0xf0 [ 307.674513][ C0] ? __fget_files+0x402/0x470 [ 307.674537][ C0] ? __fdget_pos+0x1e2/0x370 [ 307.674550][ C0] ? ksys_write+0x70/0x260 [ 307.674565][ C0] ksys_write+0x153/0x260 [ 307.674581][ C0] ? __ia32_sys_read+0x80/0x80 [ 307.674598][ C0] ? syscall_enter_from_user_mode+0x2a/0x70 [ 307.674616][ C0] do_syscall_64+0x4c/0xa0 [ 307.674630][ C0] ? clear_bhb_loop+0x30/0x80 [ 307.674644][ C0] ? clear_bhb_loop+0x30/0x80 [ 307.674660][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 307.674675][ C0] RIP: 0033:0x7efe274800d9 [ 307.674687][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.674699][ C0] RSP: 002b:00007efe256d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 307.674714][ C0] RAX: ffffffffffffffda RBX: 00007efe27707fa0 RCX: 00007efe274800d9 [ 307.674725][ C0] RDX: 00000000000101d0 RSI: 0000200000000040 RDI: 0000000000000005 [ 307.674735][ C0] RBP: 00007efe27517024 R08: 0000000000000000 R09: 0000000000000000 [ 307.674744][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.674753][ C0] R13: 00007efe27708038 R14: 00007efe27707fa0 R15: 00007ffc6f3c86b8 [ 307.674774][ C0] [ 307.674965][ C0] Kernel Offset: disabled [ 307.674986][ C0] [ 307.674988][ C0] ================================ [ 307.674990][ C0] WARNING: inconsistent lock state [ 307.674995][ C0] syzkaller #0 Not tainted [ 307.674999][ C0] -------------------------------- [ 307.675001][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 307.675005][ C0] syz.3.2475/13302 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 307.675015][ C0] ffffffff8c313a38 ((console_sem).lock){-.-.}-{2:2}, at: down_trylock+0x1c/0xa0 [ 307.675035][ C0] {INITIAL USE} state was registered at: [ 307.675038][ C0] irq event stamp: 3398 [ 307.675041][ C0] hardirqs last enabled at (3397): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 307.675053][ C0] hardirqs last disabled at (3398): [] exc_debug+0x6e/0x130 [ 307.675062][ C0] softirqs last enabled at (3374): [] tipc_sendmsg+0x43/0x70 [ 307.675072][ C0] softirqs last disabled at (3372): [] lock_sock_nested+0x68/0x100 [ 307.675081][ C0] [ 307.675081][ C0] other info that might help us debug this: [ 307.675084][ C0] Possible unsafe locking scenario: [ 307.675084][ C0] [ 307.675086][ C0] CPU0 [ 307.675087][ C0] ---- [ 307.675089][ C0] lock((console_sem).lock); [ 307.675093][ C0] [ 307.675095][ C0] lock((console_sem).lock); [ 307.675099][ C0] [ 307.675099][ C0] *** DEADLOCK *** [ 307.675099][ C0] [ 307.675101][ C0] 1 lock held by syz.3.2475/13302: [ 307.675106][ C0] #0: ffff88807de58820 (sk_lock-AF_TIPC){+.+.}-{0:0}, at: tipc_sendmsg+0x43/0x70 [ 307.675124][ C0] [ 307.675124][ C0] stack backtrace: [ 307.675126][ C0] CPU: 0 PID: 13302 Comm: syz.3.2475 Not tainted syzkaller #0 [ 307.675134][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 307.675138][ C0] Call Trace: [ 307.675141][ C0] <#DB> [ 307.675144][ C0] dump_stack_lvl+0x188/0x250 [ 307.675154][ C0] ? show_regs_print_info+0x20/0x20 [ 307.675165][ C0] ? print_usage_bug+0x42a/0x690 [ 307.675172][ C0] ? verify_lock_unused+0x15/0x140 [ 307.675182][ C0] lock_acquire+0x2c3/0x400 [ 307.675192][ C0] ? down_trylock+0x1c/0xa0 [ 307.675200][ C0] ? read_lock_is_recursive+0x10/0x10 [ 307.675209][ C0] ? perf_trace_lock+0xe4/0x390 [ 307.675219][ C0] ? perf_trace_lock+0xe4/0x390 [ 307.675227][ C0] _raw_spin_lock_irqsave+0xb0/0x100 [ 307.675236][ C0] ? down_trylock+0x1c/0xa0 [ 307.675243][ C0] ? _raw_spin_lock+0x40/0x40 [ 307.675251][ C0] ? verify_lock_unused+0x15/0x140 [ 307.675261][ C0] down_trylock+0x1c/0xa0 [ 307.675270][ C0] __down_trylock_console_sem+0xd4/0x1f0 [ 307.675279][ C0] ? is_console_locked+0x5/0x10 [ 307.675286][ C0] ? panic+0x395/0x850 [ 307.675295][ C0] ? console_trylock+0x70/0x70 [ 307.675302][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 307.675311][ C0] ? give_up_console+0x20/0x20 [ 307.675321][ C0] console_unblank+0x28/0x180 [ 307.675329][ C0] panic+0x395/0x850 [ 307.675339][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 307.675350][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 307.675359][ C0] __warn+0x248/0x2b0 [ 307.675368][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 307.675377][ C0] report_bug+0x1b9/0x2e0 [ 307.675387][ C0] handle_bug+0x3a/0x70 [ 307.675395][ C0] exc_invalid_op+0x16/0x40 [ 307.675402][ C0] asm_exc_invalid_op+0x16/0x20 [ 307.675410][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 307.675419][ C0] Code: 24 45 31 f6 31 ff 89 de e8 2d 96 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b0 92 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 307.675426][ C0] RSP: 0018:fffffe0000016958 EFLAGS: 00010006 [ 307.675433][ C0] RAX: ffffffff81a06ae0 RBX: 0000000000000008 RCX: ffff88802aa81dc0 [ 307.675439][ C0] RDX: 0000000000110000 RSI: 0000000000000000 RDI: 0000000000000000 [ 307.675444][ C0] RBP: 0000000000000000 R08: ffff88802aa81dc7 R09: 1ffff110055503b8 [ 307.675449][ C0] R10: dffffc0000000000 R11: ffffed10055503b9 R12: ffff88802aa83548 [ 307.675455][ C0] R13: 00007ffffffff000 R14: fffffe00000169c8 R15: 0000000020000000 [ 307.675463][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 307.675472][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 307.675482][ C0] bpf_probe_read_compat+0xdd/0x170 [ 307.675492][ C0] bpf_prog_ba6f4f59b8fe48b1+0x40/0x384 [ 307.675500][ C0] bpf_overflow_handler+0x3fd/0x4a0 [ 307.675510][ C0] ? perf_event_switch_output+0x730/0x730 [ 307.675526][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 307.675535][ C0] __perf_event_overflow+0x35f/0x550 [ 307.675544][ C0] perf_bp_event+0x276/0x320 [ 307.675554][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 307.675568][ C0] ? rcu_lock_acquire+0x9/0x30 [ 307.675577][ C0] ? read_lock_is_recursive+0x10/0x10 [ 307.675588][ C0] hw_breakpoint_exceptions_notify+0x14d/0x470 [ 307.675597][ C0] atomic_notifier_call_chain+0x15d/0x280 [ 307.675607][ C0] notify_die+0x141/0x1a0 [ 307.675616][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 307.675626][ C0] ? exc_debug+0x6e/0x130 [ 307.675633][ C0] ? trace_hardirqs_off_finish+0x57/0x1f0 [ 307.675643][ C0] notify_debug+0x20/0x30 [ 307.675651][ C0] exc_debug+0xcf/0x130 [ 307.675660][ C0] asm_exc_debug+0x1a/0x40 [ 307.675667][ C0] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 307.675676][ C0] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 89 d1 83 f8 [ 307.675682][ C0] RSP: 0018:ffffc9000404f2b8 EFLAGS: 00050206 [ 307.675688][ C0] RAX: ffffffff83e67101 RBX: 0000000000000d24 RCX: 0000000000000a44 [ 307.675694][ C0] RDX: 0000000000000d24 RSI: 0000200000000320 RDI: ffff8880513ae404 [ 307.675699][ C0] RBP: ffffc9000404f418 R08: ffff8880513aee47 R09: 1ffff1100a275dc8 [ 307.675705][ C0] R10: dffffc0000000000 R11: ffffed100a275dc9 R12: ffff8880513ae124 [ 307.675710][ C0] R13: 0000000000000dff R14: 0000200000000040 R15: 0000000000000000 [ 307.675717][ C0] ? _copy_from_iter+0x251/0x1160 [ 307.675727][ C0] [ 307.675729][ C0] [ 307.675731][ C0] _copy_from_iter+0x322/0x1160 [ 307.675742][ C0] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 307.675751][ C0] ? __virt_addr_valid+0x3c6/0x470 [ 307.675759][ C0] ? __phys_addr_symbol+0x2b/0x70 [ 307.675766][ C0] ? __check_object_size+0x30c/0x410 [ 307.675776][ C0] tipc_msg_build+0x7f4/0xde0 [ 307.675789][ C0] tipc_send_group_bcast+0x7d4/0xad0 [ 307.675801][ C0] ? tipc_wait_for_connect+0x600/0x600 [ 307.675808][ C0] ? perf_trace_buf_update+0xa8/0x230 [ 307.675818][ C0] ? perf_swevent_event+0xcb/0x540 [ 307.675826][ C0] ? wait_woken+0x1b0/0x1b0 [ 307.675835][ C0] ? perf_tp_event+0xa7e/0xbe0 [ 307.675845][ C0] __tipc_sendmsg+0x313/0x2b60 [ 307.675857][ C0] ? local_bh_enable+0x20/0x20 [ 307.675867][ C0] ? verify_lock_unused+0x140/0x140 [ 307.675876][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 307.675885][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 307.675894][ C0] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 307.675903][ C0] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 307.675913][ C0] ? mark_lock+0x94/0x320 [ 307.675921][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 307.675931][ C0] ? lock_chain_count+0x20/0x20 [ 307.675941][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 307.675949][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 307.675961][ C0] tipc_sendmsg+0x51/0x70 [ 307.675969][ C0] sock_write_iter+0x2a6/0x3a0 [ 307.675978][ C0] ? sock_read_iter+0x380/0x380 [ 307.675986][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 307.675996][ C0] ? memset+0x1e/0x40 [ 307.676004][ C0] ? iov_iter_init+0xb4/0x170 [ 307.676013][ C0] vfs_write+0x748/0xd70 [ 307.676022][ C0] ? file_end_write+0x250/0x250 [ 307.676029][ C0] ? rcu_nmi_exit+0x6f/0xf0 [ 307.676039][ C0] ? __fget_files+0x402/0x470 [ 307.676048][ C0] ? __fdget_pos+0x1e2/0x370 [ 307.676055][ C0] ? ksys_write+0x70/0x260 [ 307.676063][ C0] ksys_write+0x153/0x260 [ 307.676071][ C0] ? __ia32_sys_read+0x80/0x80 [ 307.676079][ C0] ? syscall_enter_from_user_mode+0x2a/0x70 [ 307.676089][ C0] do_syscall_64+0x4c/0xa0 [ 307.676096][ C0] ? clear_bhb_loop+0x30/0x80 [ 307.676104][ C0] ? clear_bhb_loop+0x30/0x80 [ 307.676111][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 307.676120][ C0] RIP: 0033:0x7efe274800d9 [ 307.676126][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.676132][ C0] RSP: 002b:00007efe256d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 307.676140][ C0] RAX: ffffffffffffffda RBX: 00007efe27707fa0 RCX: 00007efe274800d9 [ 307.676146][ C0] RDX: 00000000000101d0 RSI: 0000200000000040 RDI: 0000000000000005 [ 307.676151][ C0] RBP: 00007efe27517024 R08: 0000000000000000 R09: 0000000000000000 [ 307.676156][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.676160][ C0] R13: 00007efe27708038 R14: 00007efe27707fa0 R15: 00007ffc6f3c86b8 [ 307.676170][ C0]