last executing test programs: 19m44.055609492s ago: executing program 3 (id=3078): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x94f4}}, @call={0x85, 0x0, 0x0, 0xa0}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000100)=r4) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 19m41.033482582s ago: executing program 3 (id=3089): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360"], 0xffdd) 19m37.480256137s ago: executing program 3 (id=3101): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x8, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd8500000073000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r1, 0x0, 0x0}, 0x10) 19m37.313463748s ago: executing program 3 (id=3103): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x5, 0x2, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc) 19m37.281445492s ago: executing program 3 (id=3105): close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x7, 0x11}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000002c0), 0x10000, r0, 0x0, 0x1c000000007400}, 0x38) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 19m37.178122433s ago: executing program 3 (id=3106): r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10010, 0x2c2b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000340)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x8000000000000000, 0x7ff}, 0x110c40, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) 19m21.592785468s ago: executing program 32 (id=3106): r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10010, 0x2c2b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000340)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x8000000000000000, 0x7ff}, 0x110c40, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) 3.596194543s ago: executing program 0 (id=7263): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000010000000000000085000000880000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1d, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000b0000000000000000900000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000414000000b7030000400100000000000057bdf9bc8500000000005509010000000000950000000000000018120000cb3bf407e3f652057d6184e79207a2618137f91507c43d294607de8240cef5ae2195a229c75fc1a1d5de81d5b2f2", @ANYRES64=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], 0x0, 0x4, 0x49, &(0x7f0000000280)=""/73, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb}, 0x94) r1 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x30598, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x80000000}, 0x0, 0x1000000000010000, 0x0, 0x5, 0x8, 0x51, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(r1, &(0x7f0000000a00)={&(0x7f0000000540)=@generic={0x2b, "3624796e16223e5b1846dcf7ca9b79d20e35fc6eed64c73dc8a62c27d9d0eee3fd3bf975b61e1289a058b75c2991e069f69f3264d5c968804778e05708bfee056abe7f3930b0d4d79bee3f96ff24b7e538a4d5a47a89d36b81b32be062625267ec574327811715c378c8a1cb30c8de50382297a9a4c2c90fa582f2a722eb"}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000440)="b82a9ca428745a9d968562365454f268e715", 0x12}, {&(0x7f00000005c0)="8043683dec8d35d21fb637bb65ab542e9a02e385bad5c37da809077680a270815a1b56e95a61276d653722d9cc88c3fff17c8c9608848f4959f958c230e9b745d49f866c3114cda95b899b6649a8036e97dd9af79866622ca6948767135646ccd97841df750eb4debf774af63531670df7a143abf2fedcdc285f091516181b63b3b508848169b138e60f09222105734b700c2ee9583e65112b8215ec440226628f9c8d79fdcb385b19735e280743", 0xae}, {&(0x7f0000000680)="fa915851580b74736ce7b94da5fdd865d60bc53017b8318b2cc78c643995d51e95cd370f470697cb045401a7272b525a5fd14683303b9bde45", 0x39}, {&(0x7f0000000700)="a7e886cdae2823a38cba8e0eb7bcf877bcd240f416243e9b4c15b9c9bed52c", 0x1f}, {&(0x7f0000000740)="9262526e9d981c3f276b27a719006a1fec43bf526db52272ff1bfe5f0ed73c4c5e957517470cc9160c53d8cd8583c999df3d87a6e812cafe30c96c3051c2214081a78a4d1b03d072c338a95f5874421dad7e8277addbcee222c257f671283dcece2663ab016b", 0x66}], 0x5, &(0x7f0000000840)=[{0x58, 0xdf, 0x4, "883670b0ebfdc8995af294eefe83e0a51c18c7e234b998b99337f2d56590427f05ee49eeea123b5a5984041a30e6107f960b7540b5ca51f34199ecdafddb8b00151f41ced660"}, {0x88, 0x3a, 0x5, "5d7b4abca608fe2a03d2c4790a20b9b0ccaa11bbfbd86399313b11a9be02872830ffad0631e29191244c8df1eca84c936d2f33ac236353314d5d9f6250b697a8e8468e32d000ea842c7fae4f2830162e97b5e58a83369373aa21b2a803d1a14cf2e0881d3a33253289ce6691f82227f20e39da1d2c4b"}, {0xd8, 0x102, 0x10, "0fc73aa838a2917a7064c503c870b8b0610731829e4b8b2ccacd761499be28ea7d4d056292c891cb1317e059a5688bbee4d2d99f29b84ff34a3f0e91c64d1a28bddde200cb72f5e48dfb37a7864e3cfab2be7b9a1cc55f28bf59e8bbd60f587e302863f9c71a1ad1cffb4f614d1e77374e2033b3a62d1ca1a202f116f7eeb4cb27c64f3f12e1d1d66fa9bcbb6376e669a93415e56d0f5686e8b0be0d471c3f69378bb8c610beb3a59a3ab102ce18612b91055789ed06059133463e91a625f9443bf9dc3a"}], 0x1b8}, 0x4004050) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e00000016400000000000005c00000000002816"], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @multicast}) socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x40) recvmsg(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socket$kcm(0xa, 0x2, 0x3a) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'team0\x00', @random="2b0100004ec6"}) socket$kcm(0x2, 0x0, 0x84) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) 3.051437294s ago: executing program 4 (id=7266): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x8e6fc310a8f950b6, @perf_bp={0x0, 0x9}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x812, 0x0, 0x0, 0x0, 0x22009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x22005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e00003b000b05d25a80258c6394f90424fc60100005000a000200053582c137153e3704000180fc0b09000300", 0x33fe0}], 0x1}, 0x0) r6 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, r0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x1, 0x27, 0x1, 0x4, 0x0, 0x365e9f33, 0x4a04, 0x9, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x3ff, 0x10}, 0x40, 0x0, 0x7, 0x2, 0x5, 0x200, 0xa, 0x0, 0x7, 0x0, 0xbbe}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x1f, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f7ff1f000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 2.789051367s ago: executing program 1 (id=7267): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x7, 0x7, 0x98, 0x5, 0x0, 0x7fff, 0x20610, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000040), 0x8}, 0x88, 0x4, 0x0, 0x4, 0xc3b8, 0x7, 0x2, 0x0, 0x7e7, 0x0, 0x6}, 0x0, 0x7, r0, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x19}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 2.750439339s ago: executing program 0 (id=7268): r0 = socket$kcm(0x29, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x3, 0x1}, {0x4, 0x5}, {0xe, 0x5}, {0x3, 0x3}, {0x6}]}]}}, &(0x7f0000000080)=""/78, 0x4e, 0x4e, 0x1, 0x1, 0x10000}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x20, 0xf, 0x4, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, r1, 0x2, 0x3}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001580)={0x6, 0x4, &(0x7f0000000440)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0x5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000480)='syzkaller\x00', 0x5, 0x1000, &(0x7f00000004c0)=""/4096, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001500)={0x1, 0x8}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001540)=[{0x2, 0x4, 0xa, 0x1}], 0x10, 0x3e1e}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x1c, 0x3, &(0x7f00000001c0)=@raw=[@ldst={0x0, 0x3, 0x6, 0x0, 0x3, 0xffffffffffffffe0, 0x10}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}], &(0x7f0000000200)='GPL\x00', 0x2, 0x93, &(0x7f0000000240)=""/147, 0x41100, 0x2, '\x00', r3, @fallback=0x18, r1, 0x8, &(0x7f00000003c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x10, 0x400, 0x100}, 0x10, 0xffffffffffffffff, r4, 0x7, 0x0, &(0x7f0000001640)=[{0x5, 0x1, 0x5, 0x4}, {0x2, 0x2, 0xa, 0xc}, {0x3, 0x1, 0x0, 0x3}, {0x3, 0x1, 0xc, 0x4}, {0x3, 0x4, 0x6, 0x9}, {0x1, 0x5, 0x6, 0x6}, {0x2, 0x2, 0x4, 0x3}], 0x10, 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c00)={r4, 0xe0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001940)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000001980)=[0x0], &(0x7f00000019c0)=[0x0, 0x0, 0x0], 0x0, 0x97, &(0x7f0000001a00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001a40), &(0x7f0000001a80), 0x8, 0xac, 0x8, 0x8, &(0x7f0000001ac0)}}, 0x10) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001c80)=@bpf_lsm={0x1d, 0xa, &(0x7f0000001780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1ff}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x6e}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x5}, @ldst={0x3, 0x2, 0x6, 0x4, 0x0, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000001800)='syzkaller\x00', 0x2, 0x56, &(0x7f0000001840)=""/86, 0x41000, 0x42, '\x00', r3, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000018c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001900)={0x2, 0x6, 0x1, 0x9}, 0x10, r6, 0x0, 0x0, &(0x7f0000001c40)=[0x1, r2], 0x0, 0x10, 0xf}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001fc0)={{r2, 0xffffffffffffffff}, &(0x7f0000001f40), &(0x7f0000001f80)=r5}, 0x20) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002000)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x1, '\x00', 0x0, r1, 0x3, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002140)={0x18, 0x12, &(0x7f0000001d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @jmp={0x5, 0x1, 0x1, 0x4, 0x1, 0x20, 0x52dc808075812995}, @alu={0x4, 0x1, 0x0, 0x0, 0x2, 0x20, 0x4}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x555d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x3, 0x1, 0x0, 0x7, 0x7, 0xfffffffffffffff8, 0xfffffffffffffff0}]}, &(0x7f0000001e00)='syzkaller\x00', 0x9, 0x49, &(0x7f0000001e40)=""/73, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x31, r1, 0x8, &(0x7f0000001ec0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000001f00)={0x1, 0x3, 0x3, 0x3}, 0x10, 0xffffffffffffffff, r5, 0x8, &(0x7f0000002080)=[r2, r8, r2, r2, r9, r2, r2, r2, r2, r2], &(0x7f00000020c0)=[{0x3, 0x3, 0x6, 0x9}, {0x5, 0x4, 0x1, 0xb}, {0x0, 0x4, 0xa, 0x1}, {0x3, 0x5, 0x3, 0x6}, {0x3, 0x1, 0x6, 0x4}, {0x4, 0x1, 0xe, 0x4}, {0x2, 0x2, 0x5}, {0x2, 0x1, 0x7}], 0x10, 0xfff}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000002200)=@bloom_filter={0x1e, 0xe, 0xffffffff, 0xe, 0x40040, r2, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2, 0x2}, 0x50) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000002280), 0x8000, 0x0) ioctl$TUNSETSTEERINGEBPF(r11, 0x800454e0, &(0x7f00000022c0)=r4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000025c0)={r4, 0xe0, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000002300)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0xa, &(0x7f0000002340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5e, &(0x7f00000023c0)=[{}], 0x8, 0x10, &(0x7f0000002400), &(0x7f0000002440), 0x8, 0xcd, 0x8, 0x8, &(0x7f0000002480)}}, 0x10) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002600)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', r3, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x50) r14 = perf_event_open(&(0x7f0000002680)={0x0, 0x80, 0xc, 0x7, 0x9, 0x3, 0x0, 0x1, 0x80300, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0xb, 0x86ad}, 0x100, 0x8, 0x3800000, 0x2, 0x8, 0x10000, 0x30c, 0x0, 0x8, 0x0, 0x1}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0xa) r15 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000029c0)={0x6, 0x23, &(0x7f0000002700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7f}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@jmp={0x5, 0x1, 0x6, 0xb, 0xb, 0x10, 0x4}, @alu={0x7, 0x1, 0x9, 0x5, 0x9, 0x6, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff8}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @ldst={0x0, 0x0, 0x3, 0xb, 0xa, 0x4, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002840)='GPL\x00', 0xd56, 0x2f, &(0x7f0000002880)=""/47, 0x40f00, 0x2, '\x00', r12, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000028c0)={0x4, 0xd, 0x2, 0x10}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000002900)=[r13, r2, r10, r2, r2, r9, r10, r8], &(0x7f0000002940)=[{0x2, 0x1, 0xc, 0x4}, {0x0, 0x5, 0xd, 0x2}, {0x4, 0x1, 0x0, 0x4}, {0x4, 0x4, 0x10, 0x7}, {0x298d, 0x4, 0x10, 0x2}, {0x2, 0x3, 0x0, 0x1}, {0x3, 0x4, 0x4, 0x7}, {0x5, 0x4, 0x3, 0x5}], 0x10, 0x6}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r14, 0x40042408, r15) r16 = openat$cgroup(0xffffffffffffffff, &(0x7f0000002bc0)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002b80)={@cgroup=r16, 0x10, 0x0, 0xb60d, &(0x7f0000002a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000002ac0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002b00)=[0x0, 0x0], &(0x7f0000002b40)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000002c40)=@generic={&(0x7f0000002c00)='./file0\x00', r5}, 0x18) sendmsg$sock(r0, &(0x7f0000003080)={&(0x7f0000002c80)=@hci={0x1f, 0x1, 0x3}, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002d00)="d4c848a066e7e1abbd1fe25bb9f0fd51c6b3c14dcf48c82965370fc58dfb3862f888d08e7ac19f243bb90e02ccdf0295129bf17187b3bd34e89e4341c2296891cae1d8131917f5cbf788137bed3a7063556a5a94d896a39b4171d5ddd44fee0854dfba4ffd8e4b7fafbc70f9d9983f03e99ca1cc072e20872f1553ff09ac3f19b144", 0x82}, {&(0x7f0000002dc0)}, {&(0x7f0000002e00)="9250bb629363b360f9ac979cdd96c66851e9be452bad1f47f57164d48cebf3dd32c479128162a2441ff1465301f44379ba9f56f5c0c52980e1bbf2052b8bd40660b699577fc9cca8f8b1e38d54bd56a9dbf7fc42c68614caca47e325727427e11972d57ba88a9e4bc538994d8e2321199092e73591232bb9e64013acd4a18b2f8cdb16f8fbb3efc57b160daeb36055c4e23809acc3e21fb5debbb8928e1abd80cd59d906189c6c1f8f691ff6bbe20ec9fb0a3b6c15584549f446097ea106873429af7e238099a4ee57ebaf077e74ee77b9f648653df8420015dcf9c05bd49e0551d2ed30852b41d550d109a59bff44", 0xef}, {&(0x7f0000002f00)="d7c59cb62ee142ae53e914652f10277d1dd12c65ba9171e8e819f1646d3dedfb634ff6b48a11e5add0f231ab0f00bab2200900ac0892d4aa3b3a9c6dc9c61ab4d4d14e1629def7129e73932c590ddfa5a2aeac", 0x53}], 0x4, &(0x7f0000002fc0)=[@txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x7ff}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x8000000}}], 0x90}, 0x4004811) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000041c0)={r10, &(0x7f00000030c0)="a1d8285bda49cd7d9c3834c58a45bfb774c37811456e954f7d531acba47a2a59d19ab1041e3877a385d7cfe7b726b4c00ea6f36202fba58fc04af29b45ed3b3353051c79b69f8c15ee5f1fab979c5102553a4909b3d62ac80924fe033c60977b2bbd8e3a5d206083663a2380161455a4a59e4b417c3320da9dd29a18af6bbee0fa95f684734afb0231e63065c5007651896717df7b3f42a988d54651729090f459efb55c718ef939c9e7ed79838badad6a8d1a127b98dfa5a1b4b3882233a5ab5a", &(0x7f00000031c0)=""/4096, 0x4}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000004240)=@generic={&(0x7f0000004200)='./file0\x00', r13}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000005400)={{r2, 0xffffffffffffffff}, &(0x7f0000005380), &(0x7f00000053c0)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000005440)={&(0x7f0000004280)="afe566ffee861cef722ea12e17bf7a6b31c81c7a35e264ea46a972a9e5817b85c3479b0f26c7a2ed9c518b6e80200cbed7213af3e10fbc8788853d888d4359289408c4a535343e7af5d2e370e6773db88606c7a6f1607a9e5b45e33a60d9a215a77a304b7a7e765be537e643cb9790c34d3f7643", &(0x7f0000004300)=""/4096, &(0x7f0000005300)="e574f027c56c69b8e3c7a5cb5d1667b01797dc1da4", &(0x7f0000005340)="6675031f8a52816afceae73f8785b2c2e12407c3c72d8f3f799f84", 0x7, r18}, 0x38) r19 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r19, &(0x7f0000006a00)={&(0x7f0000005480)=@x25, 0x80, &(0x7f0000006880)=[{&(0x7f0000005500)=""/63, 0x3f}, {&(0x7f0000005540)=""/4096, 0x1000}, {&(0x7f0000006540)=""/80, 0x50}, {&(0x7f00000065c0)=""/40, 0x28}, {&(0x7f0000006600)=""/92, 0x5c}, {&(0x7f0000006680)=""/123, 0x7b}, {&(0x7f0000006700)=""/88, 0x58}, {&(0x7f0000006780)=""/209, 0xd1}], 0x8, &(0x7f0000006900)=""/217, 0xd9}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000006a40)={@map=r18, r7, 0x1a, 0x2024, 0x0, @void, @void, @value, @void, r17}, 0x20) 2.506881345s ago: executing program 2 (id=7269): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x11, &(0x7f0000000640)=ANY=[@ANYBLOB="4f46ba3fab6032730b2af2e9d28cfbd379d52cb49b7146cfec8cb47c7801a1ede6cdf747515fe2382a0284a08cc063856391153c9cc19dcb832313e2794fbcafd461c73b8c986585c77366edb5bdc7915c"], &(0x7f0000000b00)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340100003401000008000000000000000700000d0000000008000000000000000c00000003000000030000000300000005100000030000000e0000000200000009000000010000000e000000050000000d00000000000002020000000b0000000a000005370000000300000002000000080000000300000002000000800600000700000005000000040000000a00000002000000090000000300000002000000d500000000000000020000000000000008000000000000000180000007000000030000000900000010000000030000006300000009000000050000000d000000030000000000000c0300000000000000050000050400000002000000000000000d0000000e00000004000000040000000100000000000000ffffffff0900000004000000f7ffffff0500000000000000090000000b0000000000000c0400000000002e3098000000"], &(0x7f0000000180)=""/127, 0x154, 0x7f, 0x0, 0xffff}, 0x28) r3 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3ff78000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x6, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000300)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r3, @ANYRES32=r2], &(0x7f0000000280)='GPL\x00', 0x8000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000005d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2000000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e002700100000000280000012", 0x2d}], 0x1}, 0x40000) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) perf_event_open(&(0x7f0000001240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="9fcb010018000000000000000c0000000c00000009"], 0x0, 0x2d, 0x0, 0x1, 0x4}, 0x28) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x420702, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f0000000280)={'wlan0\x00', 0x400}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ff, 0x2122, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x80000, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r10}, 0x38) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000500000085000000060000009500"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r11}, 0xc) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) 2.506309045s ago: executing program 1 (id=7270): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="96567519ac8c7fe1b0d688dafc7da1194e8d27cfe1d40906d7c1ea7c4f96fa9da74052e4d338ca9a8dfd07cfd0e2a955984244b4eaf618baa811c4607ad384a821d6843f0d74ef322a9d345a28f47b8c4e4e8d1787be379faf3adf597e50df129fdce8be46301da435a19bdcb0ed75c7d03311cac484fcad19ef3df3311c982806f674fff3aef624df31ccf22f84"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socket$kcm(0xa, 0x5, 0x0) (async) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)={r2}) 2.376239912s ago: executing program 4 (id=7271): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x6, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000300142603600e1208000f0000000401a8001600a400014005000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) close(r4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r8 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@datasec={0x3, 0x1, 0x0, 0xf, 0x3, [{0x2, 0x1, 0x3}], "4494a5"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\x00'}]}, {0x0, [0x0, 0x2e, 0x5f]}}, &(0x7f00000014c0)=""/2, 0x45, 0x2, 0x1}, 0x28) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) close(r10) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0x12, &(0x7f00000008c0)=r11, 0x4) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="b702000009000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065060400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c008cbdd3b4c3b7f28754860c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05ae8a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3cf96f9483ff19a6471bf5abc742d9cbcfb964b11b31034694a6aad86cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df424d1bafe5725c8a404724f8a4f1cda7997b65954f74097560b91da309b887af2485c2d9ab09b523000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb7818000000009dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbef88811dc8c1b27ac7d9a6bb70f60eb9c01dd2fc79b85e4d961498f3a80131d21d856177a2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009d81003f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e750339643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2dfae60ab958e9f3ef9b4aaa4e8d6166f636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978a2df2f2a29a387c6f0576b36038f819286eca99a6a434811cf2a117d775fe986a49fb82cf5f15972d5ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e6735305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a54b49e1ae6c5aa620d27e91aa0aa0ed6fcacfc91fbb4c256409e54daefbb107c381fa729ff5f3907d93430da178d685d7730f5e129438a5214f722096d2986334c2576bef69145d3fbd78a9059e454474f92e65828b018174a9f4738b8c71fbdeac26ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a378ed4c6267965af78b861bd025312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68f78215d65f96eb55db8cbcb060008000d988374f85451a694ffe38a1d03916ff10dc82b31c98d42e1a1bda1290de1a499a5a385b31112a48ba3e6d6849914c1788a7aca37177cc341fff44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553e4ece78d4c1501c70f5d81e0725d5b273755c0000000000000000aa4234ff82182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a11993d54f97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a923655800a2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574e6e6aefb7a68da5ec1ae49f968bbe0e0bf9878516f553639f5b4828e92019b61f5874be1c7cdd9482df50bc24b8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483bd8920efcf30a798c2b636243e0a37262ca47dfeefa753ba528f7ba77e825051ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8e220bb4d83de1e4dc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a409315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f0000000086e172932e03000000000000005942e1b9d6dc28ab8e19e1111dd893e801015642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f845d1cc9ec4eee79c298fb0ba939b13707044e2e9cc0d350438c1c8c6bb9a38c6ac5ca0d9cf1f3d6915f25cb26edfc28b3079b97df32601240e454db103fb0c4a143673a3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4054605558ab31f339f6a4caf2ee2fd01f34dca3300000000000000000000000000000000f59f8e6e00000000c44130098d833a24000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c595426ae40d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd603fd7f8898c70b5c65f2e28f22e1a79a6af3a54861b07f124642e98389557affbdede09b5566a4a1ee73b20846810030a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae3a9052be8eec1e95f6ad8d41dd34829503ba4b66e27154cb6e34aa13450522df1723130b6fe347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca1598137ddd1090ded672f5a48a40cab3f640c8241a364cbdd3f188eec7da7bccafbd5bf28a46f0eecc6b550471b0b0770c6a5a411c0e0b19e15a461e7c6833ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd25091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a674bd16b8f7e6aed12a305366599f5f029a7b24558c027518c669760500002f1c19d16a6f391906000000cc0bbbfb8c698ecc137d96711100e0108d3bd2afed0b279ebf0527552a9331e646c424b14ffbb815622bfd2f635855bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc784c9f940d9fb0464a6cce635e14b80dc5c1c64e75e6bd5355d84f8df272f18f58c570e7afd83ee77f157c146aa747b728969aeb4aba1d8f9de1b3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846c0a85f20c80007c0ce6efce627b95b8ad3003385de97101678fb2163ecea6e70a77a6fbc089e31a5ccece932229b8f79faa6863d6857c3d9a9710f9f8ad16eeb8342278f311cbc226498028234d21466892983378fe64acbb44f694cd78e43c74aa75505cb1c91b189f8f89f233a05f5cd4e173a373178557843dd705268f74a9e5429945503195aefd6706b584d8408c9652b3fe68500747f7ee8375fa559c3ad195d3795df1a8364cd13acc3256ee4634c73eeb6954d0fcf09ab84df0b8900e0c6fea2ccb600ae7a4b128cae19df160e7c207b89132d1d5bdc9ffc79f0549b82df521817651d5fead5128205b92ccdccc69407ab556217af277af911dbd456dfc43dd061b6c91485dcc208cf0b3d0bf851de413f5de5ec015e296914afab6411109355e027ce04990d9aae251b9deb11b7db45b9f15b7b55d8fdbedd9e6cf891205694f02be8b9ea8ecd41308a0e1b93ae3435bfa88b440b1f701b4d0fc49c82193f27f8023b630ea97edbf3bf421a0a1a2b4ac7bb30bcd1cdd172c0df37408fd6827bb03e8742fc1c7a2befd1299928c5f79e846a8dc7ca648d960a759e6711b69776896a9656d59af6d44bc5348229fa84ae78af8421a22c4b4c17a3d24a4a0104000000000000d77cc4eef51c2b417c8c7458ddd7dd9d1a863bf0a9e1a30a19020490038017a5c7e474c83302a2c2b5c976dacf3dda7191c757f208000000000000005f7ed983f65723fbb36b9b51abb0dbcd335700000000000000000000000000000086666201251aa4f139d0485ffcf89f01639fd1579a3802f720a0215c720a97071f5065a23642a58275dbca444b00e2e5835185d5d5b2796eb0fe32cf3b0633f58ecc7648c3c6efe82f93a3008052416512eea30ea9472e0b456a652883c0907323cf03be193a05008cdef7a98a1671a1918df310dc4bfd61c3db4819ab1c57b348a8ff1ed36364a20fe846f1cd086058d139ce528425b31c5d08b433562ffb318c1285011f9b78b2401989384311101e452f54661ecdb2514a6ae50dbdd422de0f0f8c670000000000390be79688f80c47314cb1b14afcaa5d23f9032e0ec51f45f447d6a7c798fcf7e60e2180e289410801e4f03a0e140f388f25b92da1025d8409e171a2336ed71cca86eb4658fe06df286e0e20276b0618eeffd05774f15686cd9d3182ca2fec863875f305fed6baf48a594db12582a38cfdffffffffffffff0cf8d920517835fe7d09cfcb624f6931f1cc6f6b71f58de9ddc38e0c43992f6bc57a718d0cfd197b5324b4e05ef1caa96db3ae1f2f2e5791faba2ebbe1a6faf21f2748fb1fb6743c3ca8af4e6b02518c9b7fdc1b5721eb1c3ed98db25536f74ac7861afc94544e52dcb5c60460a05802e3b437ac977bfa26b887a2443e8d559c58187f004eb82b07937df6e96f77ed551926bec4e0188fae10a35d1c5f1768ac6be829bea46f1babc3d74adc31ca71bdab9079e4288881b434484eadde9da6b81802842abd462d546c59d87acc014f81d3414759bda12d2a2c6bc1bfa807bd3101eb227184a61107b6d0618e2a3b842671e084ac3f0ff94dc48b51601247318ab4d1c5106458000000000008000000000000cfee0107e6c2fe8639d926829fdbbd86bf591a8c3c235d8939af9d923f648165881a6c29997234406400b3b1c321cc158dbe17123eace30000000000009ea77cb4d3ca892600000000796de6ae4ae40bdf9a6e8c5dc29562262af9cd54e8e3ecc7e3c8cba0ecc791683496c4e5c1a5729714d9f9031f49b400cd2667b4ea6df54809615a4f973f93e6ccec72f16ff998e29ed99df733680a9d5cea57f99cc139b6ea9014f3000000000000000000000000000000000000feeab45a4046a622b0dceb413e4e39b7317e92cbed46b41ab5115bfb542c933783d750852dfdc6656aaf15e10615a88821f2f1bc53969b52d6852755e7681ad5beda80b38ccd34116b99f50b4fdd967b3f20f260455412b67563e40e323bde9d673fceda0ad6981565c8a183d928903b4f4472dde41b6dcd75314c31e704dfcb222c8359fe88944f852242270c932abfaeece0843d708f5cd25b2a63ae1e79723c1c3c013836b47da0a35d0f34c070000000000000422ae2c148d444dd437a7d2f5e575009bc2d17a199802409329dae8baa58d3de63ad45328a9d4dc1ace543dfe11913c6c6413f8f7a15657d012fea460bb4656a20df1ba26932b0ef49f8ea88d7b4c1289314ba789661640f1b5d7cbae103fa95b0035f1e8e866307d4796eab0992704f9e00be4b1af8dfa9e94ad74e607ea9d7d7a95ed5a15429426abbed8d2c657018305c6f9e5159a5453f958991a908ff4cb2e8cbccb1d3c8daf754e4b01b2edd023e5bfdf293bd28fc1f8885f6edd5a715df4d180247feb08e9e2e5126c48be6098e711f0d86de5d76fdccae34eef9197c32ab4e6fcb52eb9ce18fdb621a75913a97254d783778203ec0bd1a8859683e1d01da4e81fb73bb3b358340a0310bf5ae17b917208da607fd7b125cf99fd3e9056f5184df7570ede94b736ae354b5b8ae2cc473b455f2f86d47c69027676bf1141f316b0f278f1692406572ee82766f8e5ff1cfec2a7a6cab7d0f2582a877c9bd4ca81089373f738d02e6bb4d3df30ac0f041e51ad36e1ff140812baf54b80635cc80963c8f69fa4506f7a30c99d3e538cc0aeafcad86ead38ed949aa3c204aea50e5e0039f01b82595b7dc921a8acc1f76340f060cc9a3acad3451c17dc9b5ca5d10a0cb1708592d1900a046f33761d50895febd9fd58cb132989766cf7c252daac259576ec218e3857e6fa97fe445d1fab51d87302a4bb28a4cfe462ee4849cc6832650188ca187d85509d8beccf9d9cf752368985804195b9fd2faf1aff8248f3981bd55cbbf514cd8365fee72cc7af053e5388ceadadb967ef735181df6a90cab13f58f6d563c9ab4ad37297aecffd8446cb2b14ec36a99af8393e3760d5970ba1debdcbccd54012c559ee2797ff962328aa6a252c0756e396ce4d52937546675203bdf1d6b120acac576523f8b1daa922188bf61536312f90dba92fb380c3c6fb5f9883a2c4dd99a1bac9b7cb25ff2ef9bd58ff97ddfdd2d4bcc371ee82245b57cd91a7fa3479cd339f54a5c422b753cd42d441ea881d46e419312db1f0cccced13468a188df7ab4840b9961e2a8b5202c9d9b00ee912572eea15d13abdf3b21ad680c88a513021c1d3a7b30d64960c03a01364b2324966bd89d917b15dcb4f8cbacfe05ddcc213d14189edcd9f8b828ebaaab4f56470d3abef47b6d88dc438c9b0a253c26c386464754e76c0d7bfbc1dfa7248982ec26bd725eb623bb12f96e63eb5d1a0030e58a6653247c986c7ca9f15fd84d5eb1cd5ee35c4f464dc1a789b06c6c7074fc927680eac8546b2aee2f8867d6bf36b88a99ff67c7b2dd68ae3380622653efcad276a0f4b446091b80653014e67629dfde0091c7f090a22b5c427d03ddbc"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r12, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x44, &(0x7f00000000c0), 0x4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0x4}, 0x80, 0x0}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0xd, &(0x7f0000000000)=r13, 0x8) setsockopt$sock_attach_bpf(r1, 0x84, 0x7b, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000005f00071b189da80400008000000000af1f39"], 0xfe33) 2.170819394s ago: executing program 2 (id=7272): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x6, 0x43, 0x1}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x10, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x22d7, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x6d}}]}, &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r2, 0xe0, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5a, &(0x7f0000000940)=[{}, {}], 0x10, 0x10, &(0x7f0000000ac0), &(0x7f0000000b00), 0x8, 0x52, 0x8, 0x8, &(0x7f0000000b40)}}, 0x10) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001d40)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001dc0)={0xc00, 0x0}, 0x8) (async) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0x3, 0x25, 0x0, 0x0, 0x0, 0x119, 0x0, 0xffffffffffffffa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x40) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001e00)={0xffffffffffffffff, 0xa7, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001ec0)={0x16, 0x1f, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}}, @ldst={0x3, 0x2, 0x3, 0x8, 0x9, 0x100, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000}, @ldst={0x2, 0x0, 0xc0d6898c2c936c0a, 0x3, 0x1, 0x30}, @jmp={0x5, 0x1, 0x0, 0x5, 0x7, 0x4, 0x1}, @ldst={0x1, 0x0, 0xf, 0x7, 0x4, 0x8, 0xffffffffffffffff}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='GPL\x00', 0x2, 0x2e, &(0x7f0000000540)=""/46, 0x41000, 0x10, '\x00', r5, @flow_dissector=0x11, r6, 0x8, &(0x7f0000001d80)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, r7, r8, 0x2, &(0x7f0000001e40)=[r0, r0, r1, r9, r0, r1, r0], &(0x7f0000001e80)=[{0x0, 0x5, 0x10, 0x7}, {0x1, 0x5, 0x2, 0xb}]}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r11 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20}, 0x50) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x6, [@datasec={0x9, 0x3, 0x0, 0xf, 0x2, [{0x3, 0xd3, 0x7}, {0x5, 0x3, 0x7}, {0x3, 0x7fffffff, 0x1}], "2992"}, @datasec={0xd, 0x1, 0x0, 0xf, 0x2, [{0x5, 0x0, 0x6}], "7605"}]}, {0x0, [0x0, 0x30, 0x0, 0x61]}}, &(0x7f0000000c40)=""/4096, 0x6a, 0x1000, 0x0, 0x6}, 0x28) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r15}, &(0x7f0000000280), &(0x7f0000000240)=r12}, 0x20) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r15, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r13, 0x1, 0x32, &(0x7f00000000c0)=r16, 0x4) (async) sendmsg$inet(r14, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1.720967772s ago: executing program 0 (id=7273): perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x3}, 0x6002, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x5460, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000dfffffffffffffff00005f4591c4637961ce1ad06b7991943370b0b100776a02d4770522f916dad7c10a51c2562f813da959f13113932574fd79fe1bad7a074adf5dd30a705fd0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc641}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@fallback=r3, 0x0, 0x0, 0xf98, &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000400), &(0x7f00000004c0)=[0x0]}, 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x4, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)={r7}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x80000000}, {0x1000000a, 0x4}], 0x10, 0x4}, 0x2) close(0x3) (async) socket$kcm(0xa, 0x5, 0x0) (async, rerun: 32) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async, rerun: 32) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\n\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x1, 0x7e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xa) (async, rerun: 32) perf_event_open(&(0x7f0000000140)={0x1, 0x89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10a408, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff5, 0x0, 0x80, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000540)=@generic={&(0x7f0000000500)='./file0\x00', r5}, 0x18) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x80, 0x0}, 0xd0a0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000340), 0x0}, 0x20) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8993, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x13, 0xa, &(0x7f0000000080)=@raw=[@alu={0x4, 0x1, 0xc, 0x1, 0x2, 0xffffffffffffffc0, 0x10}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x10}, @map_fd={0x18, 0x6, 0x1, 0x0, r7}], &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x22, '\x00', r8, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x7, 0x1, 0x7}, 0x10, 0xffffffffffffffff, r7, 0x0, &(0x7f0000000380)=[r7], &(0x7f00000003c0), 0x10, 0x9}, 0x94) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x6420, 0x3, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200001, 0x1, @perf_bp={0x0, 0x3}, 0x10781, 0x10, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) r11 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r11, 0x8903, 0x0) write$cgroup_subtree(r10, &(0x7f0000010040)=ANY=[], 0x31) 1.507414864s ago: executing program 1 (id=7276): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x7, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x12e1, 0x0, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x0, 0xffffffffffffffff, 0x9) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b80)={&(0x7f0000000ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@union={0x1, 0x0, 0x0, 0x5, 0x1, 0x6}]}, {0x0, [0x2e, 0x1e]}}, 0x0, 0x28, 0x0, 0x1}, 0x28) (async) socketpair(0x15, 0x5, 0x0, &(0x7f0000000500)) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000085000000a000000095"], &(0x7f0000000380)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', r0}, 0x18) 1.250537907s ago: executing program 4 (id=7277): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000010000000000000085000000880000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1d, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000b0000000000000000900000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000414000000b7030000400100000000000057bdf9bc8500000000005509010000000000950000000000000018120000cb3bf407e3f652057d6184e79207a2618137f91507c43d294607de8240cef5ae2195a229c75fc1a1d5de81d5b2f2", @ANYRES64=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], 0x0, 0x4, 0x49, &(0x7f0000000280)=""/73, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb}, 0x94) r1 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x30598, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x80000000}, 0x0, 0x1000000000010000, 0x0, 0x5, 0x8, 0x51, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(r1, &(0x7f0000000a00)={&(0x7f0000000540)=@generic={0x2b, "3624796e16223e5b1846dcf7ca9b79d20e35fc6eed64c73dc8a62c27d9d0eee3fd3bf975b61e1289a058b75c2991e069f69f3264d5c968804778e05708bfee056abe7f3930b0d4d79bee3f96ff24b7e538a4d5a47a89d36b81b32be062625267ec574327811715c378c8a1cb30c8de50382297a9a4c2c90fa582f2a722eb"}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000440)="b82a9ca428745a9d968562365454f268e715", 0x12}, {&(0x7f00000005c0)="8043683dec8d35d21fb637bb65ab542e9a02e385bad5c37da809077680a270815a1b56e95a61276d653722d9cc88c3fff17c8c9608848f4959f958c230e9b745d49f866c3114cda95b899b6649a8036e97dd9af79866622ca6948767135646ccd97841df750eb4debf774af63531670df7a143abf2fedcdc285f091516181b63b3b508848169b138e60f09222105734b700c2ee9583e65112b8215ec440226628f9c8d79fdcb385b19735e280743", 0xae}, {&(0x7f0000000680)="fa915851580b74736ce7b94da5fdd865d60bc53017b8318b2cc78c643995d51e95cd370f470697cb045401a7272b525a5fd14683303b9bde45", 0x39}, {&(0x7f0000000700)="a7e886cdae2823a38cba8e0eb7bcf877bcd240f416243e9b4c15b9c9bed52c", 0x1f}, {&(0x7f0000000740)="9262526e9d981c3f276b27a719006a1fec43bf526db52272ff1bfe5f0ed73c4c5e957517470cc9160c53d8cd8583c999df3d87a6e812cafe30c96c3051c2214081a78a4d1b03d072c338a95f5874421dad7e8277addbcee222c257f671283dcece2663ab016b", 0x66}], 0x5, &(0x7f0000000840)=[{0x58, 0xdf, 0x4, "883670b0ebfdc8995af294eefe83e0a51c18c7e234b998b99337f2d56590427f05ee49eeea123b5a5984041a30e6107f960b7540b5ca51f34199ecdafddb8b00151f41ced660"}, {0x88, 0x3a, 0x5, "5d7b4abca608fe2a03d2c4790a20b9b0ccaa11bbfbd86399313b11a9be02872830ffad0631e29191244c8df1eca84c936d2f33ac236353314d5d9f6250b697a8e8468e32d000ea842c7fae4f2830162e97b5e58a83369373aa21b2a803d1a14cf2e0881d3a33253289ce6691f82227f20e39da1d2c4b"}, {0xd8, 0x102, 0x10, "0fc73aa838a2917a7064c503c870b8b0610731829e4b8b2ccacd761499be28ea7d4d056292c891cb1317e059a5688bbee4d2d99f29b84ff34a3f0e91c64d1a28bddde200cb72f5e48dfb37a7864e3cfab2be7b9a1cc55f28bf59e8bbd60f587e302863f9c71a1ad1cffb4f614d1e77374e2033b3a62d1ca1a202f116f7eeb4cb27c64f3f12e1d1d66fa9bcbb6376e669a93415e56d0f5686e8b0be0d471c3f69378bb8c610beb3a59a3ab102ce18612b91055789ed06059133463e91a625f9443bf9dc3a"}], 0x1b8}, 0x4004050) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e00000016400000000000005c00000000002816"], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @multicast}) socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x40) recvmsg(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socket$kcm(0xa, 0x2, 0x3a) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'team0\x00', @random="2b0100004ec6"}) socket$kcm(0x2, 0x0, 0x84) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) 1.071640225s ago: executing program 1 (id=7278): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180900000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x9, 0x8}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x5, '\x00', r3, r4, 0x5, 0x1, 0x4}, 0x50) syz_clone(0x100000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x6, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0, 0xe}, 0x4008, 0x2, 0x7fffefff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x21838, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) close(0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000700000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 949.169142ms ago: executing program 0 (id=7279): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="04fbffff03000000040083fa33", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0xee, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xb}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x4, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) (async) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x4, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x50, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1c, 0xfd, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f00000002c0), 0x1}, 0x10c042, 0xac5d, 0x0, 0x3, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x9, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x19, 0x0, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}, 0x1a00, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) sendmsg$sock(r1, &(0x7f0000000200)={&(0x7f0000000300)=@hci={0x1f, 0x4, 0x1}, 0x80, 0x0}, 0x8000) recvmsg(r1, 0x0, 0x2000) socket$kcm(0x2, 0x5, 0x84) close(0xffffffffffffffff) (async) perf_event_open(0x0, 0x0, 0xffbfffffffffefff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x1], 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x7}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x28, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0}, 0x90) (async) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) (async) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1e20) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="2e00000010008188040f46ecdb4cb9cca7480ef421000000e3bd6efb440013030e000a000d000008ba8000001201", 0x2e}], 0x1}, 0x0) 787.861893ms ago: executing program 2 (id=7280): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2, 0x0, 0xffffffff}]}, 0x94) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x17, &(0x7f0000000000)=r6, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0xfa, 0x0, 0x0, 0x0, 0x10001, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xa}, 0x8000, 0x0, 0x80000, 0x1, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r9, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000001c0)="2e00000010008188040f46ecdb4cb9cca7480ef40f000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b20d25a80648c2594f90124fc60100c030002180000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)={r7, r2}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r11) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r14, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) close(r13) 728.166432ms ago: executing program 1 (id=7281): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x20000800) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080)) sendmsg(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="ef", 0x1}], 0x1}, 0x40000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 596.434478ms ago: executing program 4 (id=7282): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) socket$kcm(0xf, 0x3, 0x2) socket$kcm(0xf, 0x3, 0x2) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="020e000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x5, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0), 0x10}, 0x94) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x800, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x20000000000001e9, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90324fc60100c028010000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r8 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000000000000000}, 0x104101, 0x4, 0x0, 0x3, 0x2000000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r8, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r8) 548.654219ms ago: executing program 0 (id=7283): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xd, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x7, 0x3}, 0x808a, 0x5, 0x43a1bd76, 0x4c6a20a0aad416d3, 0x8, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x4, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41b2cc32b38d3440c6942cb76cab300"/57, 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x100e4a, 0x0, 0x4000, 0x0, 0x17, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000000c0)='!!\xa0/@\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401c5820, &(0x7f0000000000)=0x1000000005) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x4000800) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair(0x18, 0x3, 0x2, &(0x7f0000000380)) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0xed, 0xd, 0x2, 0x0, 0x0, 0x0, 0x80000, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x1ff) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 445.053611ms ago: executing program 1 (id=7284): r0 = getpid() perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c23003f) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd", @ANYRES64=r1], 0xa) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x6500, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10001}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0x3) 407.020804ms ago: executing program 2 (id=7285): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$kcm(0x22, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="460a00000000000061115c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r2 = perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x374, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0xfffffffc, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xa) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x161) (async) sendmsg$inet(r6, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000000000001100000000000000000000c2d63c67000000000000000000"], 0x98}, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r8) close(r1) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e817782db4cb904021d0800067c7c09e8fe0ba10a0007", 0x1f}], 0x1}, 0x2002c040) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d"], 0xfe33) (async) sendmsg$kcm(r0, 0x0, 0x0) 69.168213ms ago: executing program 0 (id=7286): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x24, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x83, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) r2 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r2, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x0, @dev, 0x7}, 0x80, 0x0}, 0x200ce0c0) write$cgroup_subtree(r1, 0x0, 0xfe33) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000005000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = socket$kcm(0xa, 0x2, 0x73) r5 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e22}}, 0x80, 0x0}, 0x20008044) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0xfffe, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r10) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') close(r5) setsockopt$sock_attach_bpf(r4, 0x29, 0x21, &(0x7f0000000200), 0x4) r11 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r11, &(0x7f0000000580)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x28}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)="ffa8", 0x2}, {&(0x7f0000000400)="3cd9", 0x2}], 0x2}, 0x40810) sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f0000000000)=@nl=@unspec={0x0, 0x0, 0xa00}, 0x80, 0x0}, 0x810) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r12, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="1000"/14, 0x0, 0x202, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x26) 23.736014ms ago: executing program 2 (id=7287): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0x7}, 0x104101, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000200e8fe55a1180015000600142603600e120900210000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7ce", 0x6c}, {&(0x7f0000000540)="47e2ef3330b4efa56e2aed9961d244728046f7e077f2e17fe99eb02cc704ca74e513a8046b12c800061e2d1a3b750e5d29002c99980f4a0ccd7a793f2f41bf6f028eb2ad8ba2068150ea4164d3cc2563ae7aaa346f975c0bbc6150f0b4ad75d246ac5fecbd465371b5cf8316", 0x6c}], 0x2}, 0x84884) 0s ago: executing program 4 (id=7288): socketpair(0x2b, 0x4, 0x401, &(0x7f0000000000)) (async) socketpair(0x2b, 0x4, 0x401, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x101) (async) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x101) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)='%+9llu \x00'}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x100}, [@map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @generic={0x0, 0x2, 0x2, 0x5, 0x257}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x71, &(0x7f0000000180)=""/113, 0x41000, 0x44, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000200)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xf, 0xffff, 0x2}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000340)=[r3, r1, r2, r1], &(0x7f0000000380)=[{0x4, 0x4, 0xb, 0x3}, {0x1, 0x3, 0x5, 0xa}, {0x2, 0xf, 0x2, 0x8}, {0x1, 0x3, 0x2, 0x4}], 0x10, 0x33ea}, 0x94) write$cgroup_int(r1, &(0x7f0000000480)=0x5, 0x12) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x2) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_subtree(r4, &(0x7f0000000540), 0x2, 0x0) socketpair(0x29, 0x800, 0x8, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) (async) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000005c0)={r1}, 0x8) (async) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000005c0)={r1}, 0x8) r10 = socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x1a, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xe}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000700)='syzkaller\x00', 0x10001, 0xd1, &(0x7f0000000740)=""/209, 0x41100, 0x4, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000840)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000880)=[r2, r3], &(0x7f00000008c0)=[{0x0, 0x3, 0xd, 0x6}, {0x2, 0x8, 0x10, 0xa}, {0x4, 0x5, 0x0, 0x9}], 0x10, 0x6}, 0x94) (async) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x1a, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xe}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000700)='syzkaller\x00', 0x10001, 0xd1, &(0x7f0000000740)=""/209, 0x41100, 0x4, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000840)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000880)=[r2, r3], &(0x7f00000008c0)=[{0x0, 0x3, 0xd, 0x6}, {0x2, 0x8, 0x10, 0xa}, {0x4, 0x5, 0x0, 0x9}], 0x10, 0x6}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r11) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r10, 0x0, 0x50, 0xb1, &(0x7f00000009c0)="43000a5c56ee5afabb696ffe8cca2d87ee98e462b7e85098555a8b5908df40a1fd5f9686fe3fe7e44668259da3476f21412273a6d2d615bf2127ba8d0682cf7d2c3d9ae78a645e168741a0bd74b760d7", &(0x7f0000000a40)=""/177, 0xa3, 0x0, 0x32, 0x94, &(0x7f0000000b00)="5d7d106f5d5c697fdb20005d931989c35b85250916d6fca399b7d8e1535e2b296b50eb447d11b298255fb46ed2781edd0ce4", &(0x7f0000000b40)="d791c7dfc1a8bd158693bb643b3c1c1459592ff8cb5e8e3be4739796e1e6adc259de30cfee79c24ddb01161977607e09ec223ad0264b431b677d8d3ca14197d2f97a1644d96c53725cbb7f35d0a775da6d381a4399c271c2dc64ac7ee3a6a838f89d94688e86f1e1c7d66aa119f99219a1c3925baf7c0f6970790651887d77d388f23353015a7a475a45f91e000fae928b7fb862", 0x1, 0x0, 0x15f}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r10, 0x0, 0x50, 0xb1, &(0x7f00000009c0)="43000a5c56ee5afabb696ffe8cca2d87ee98e462b7e85098555a8b5908df40a1fd5f9686fe3fe7e44668259da3476f21412273a6d2d615bf2127ba8d0682cf7d2c3d9ae78a645e168741a0bd74b760d7", &(0x7f0000000a40)=""/177, 0xa3, 0x0, 0x32, 0x94, &(0x7f0000000b00)="5d7d106f5d5c697fdb20005d931989c35b85250916d6fca399b7d8e1535e2b296b50eb447d11b298255fb46ed2781edd0ce4", &(0x7f0000000b40)="d791c7dfc1a8bd158693bb643b3c1c1459592ff8cb5e8e3be4739796e1e6adc259de30cfee79c24ddb01161977607e09ec223ad0264b431b677d8d3ca14197d2f97a1644d96c53725cbb7f35d0a775da6d381a4399c271c2dc64ac7ee3a6a838f89d94688e86f1e1c7d66aa119f99219a1c3925baf7c0f6970790651887d77d388f23353015a7a475a45f91e000fae928b7fb862", 0x1, 0x0, 0x15f}, 0x50) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c80)={0x0, 0xfffffff7, 0x10}, 0xc) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000cc0)={0x2, 0x4, 0x8, 0x1, 0x80, r12, 0xe5ea, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x50) sendmsg$kcm(r8, &(0x7f0000002300)={&(0x7f0000000d40)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x8008}, 0x80, &(0x7f0000002280)=[{&(0x7f0000000dc0)="be01b275791a3e5abc1e28c44020d6e19cdaddf16fa45f70d8b7661b63787dfd58e6044138370482aac8bfdd58674b32ec4eaa271488d449b82c5b19eee3c8c19af5a6dfe8e2c5139996aa0f6637fbb5405d68ff485779be6890b2551dab51409409cd1bb809e13e3a8a4444c3d4c7118542546a05aed1c8fa41cf4c9640121691329eda69351a9d24d88de3f62109eeff4c451e23d2d45e77f93aaa9b9c8eb7667017c72c2809c51e85f908da288bacbbcd959a8bb3bd3f2294b79996896c4f0edb15ef1772a965c7014c487fbe49e45a2614e528746bd0668994", 0xdb}, {&(0x7f0000000ec0)="48c7539ab9eee986a78cb7aa59595624212d1417e855e1dd989bf5e1c26521f16d1237a5d0978f6e26cd20623d85f5d56c8e06e86c0361bd974f0c55448779aff34f0079e7c2a17f383702a09727c421", 0x50}, {&(0x7f0000000f40)="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", 0x1000}, {&(0x7f0000001f40)="35146f6c6bdb2755a3dd1ffb9e358cefeaf8b776ce66b015669a9346db6b83a68cddbf99b2bb378292f13da036a38c918c4d01896b10b50058471d58ff2b255636acb6ea0e8332f221d2aca770923f704f9559da7faaf128f497228b9905d0d5f1cb25cd84f1db56999bcdf7de8fc9c9352383a5ff00ff8d2adebd", 0x7b}, {&(0x7f0000001fc0)="9cfb8e05ffbe00a8c903e9161a71305b56a24d3c3bb9877fa8b281871cfeb22dcd74e7abd30b2b338959f0031a522d13a9bf56ebb77033ffe6316dbc1ee5ac7a37683dfa7806187094ee03790f453cafc3d6bd098f2f10630f4bbe92fc144924ea281f5240e11f8eb7ab2d7c6fc207e29c779ae1835622114da14344c4e83bffe7d7e15b844c42b9d7ab", 0x8a}, {&(0x7f0000002080)="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", 0xfa}, {&(0x7f0000002180)="2d291c349d88df58ab08e9eee57530ea7fa0209412e2a92668569353dbc7c06a20d93b307ce9e43d871d6a331c4b1411922fc11614f13162db96924a7d822612a3bf5ea57a940d86fce6afa8c54e20dcd7e394927d7de020ad6fc10f042e6bf9fdef482f3f14973f214d58addc35bf9939a51c01476bd1a627ce6ee0b5fb084d251c80211a484e5d9007ee2478c8389ed2a3c936f8737be0bce10c56dc0b7ce23d1a18d2e9dc9a7258807d8c1bb4fcecf2e922a387fbefbbb43914e9ade6663e6206fac2758f8afc8b7c66e71f56c72ee220323ddcd7a5d3ecd162b2bf72c1a39b836f5a21e9ab6859ceed3cb40fab", 0xef}], 0x7}, 0x8008) mkdirat$cgroup(r9, &(0x7f0000002340)='syz1\x00', 0x1ff) (async) mkdirat$cgroup(r9, &(0x7f0000002340)='syz1\x00', 0x1ff) r14 = gettid() sendmsg$unix(r7, &(0x7f0000002700)={&(0x7f0000002380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002640)=[{&(0x7f0000002400)="86a3b6eb127ffc1ced85556612038fc8fe89c1d4f6418e02f2c8f9b069cc435fedb45bcb23695768a899a4626cefe18132f2619cf9012fd29978c4fa8d1dcbab14585cba70471fce2d92abc99a9731412fcfa9bb0b5163e7125c9179b4cef7908fca937489111324165b542962143eeadaf8b3fa2e206b7b62af9ce30b7b35610b136c322b4d2fce24a07a3e06305538f602364e530ec318c40acea044fe91e233d86f671b451e4d7eb77f46d2906145e5791f65e14e9e19ed7f6186e6d1f5352a3b3c80dd2e14fcda0c8444acd20b663faf10ac6b7195cece59db546ba3df8510296e3415b370f9f7745e56e7f4c5ebc8ca302d1b64f1", 0xf7}, {&(0x7f0000002500)="74f3bcc2c0043bb7c018ffcc318c5479655ef34b9ae52ced9c332843af0a79a3a106db9316c223c3aa3ee6ed9efd7dc804a8c85bcf06891d85dcba5193749c462283ba18f7cb70186892", 0x4a}, {&(0x7f0000002580)="4f67ab5a6d21f5745ffef01f1c2490215bffa97c8f0621b49b744c1abdcc9d8124fe264ec3db90658adb0c4cb9872dd171c991f062af5efaee929f47d3d60604ff0ddf2d7c03b8eaf6710f42d72b293d78fe63b5117d287daee5d338f5e88db4df190b769f476ccd00c2e9d378b441619f6f98ffcea362974f695d415703b4f16750e5f2dc66a3b3018b0746b8621b492ccec3e91fb6045389f25b640c995d5bb771", 0xa2}], 0x3, &(0x7f0000002680)=[@rights={{0x20, 0x1, 0x1, [r13, r7, r13, r11]}}, @rights={{0x2c, 0x1, 0x1, [r7, r6, r3, r0, r11, r11, r7]}}, @cred={{0x1c, 0x1, 0x2, {r14, 0xffffffffffffffff, 0xffffffffffffffff}}}], 0x70, 0x810}, 0x20000000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002900)={r2, 0x58, &(0x7f0000002880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002a00)={{r13}, &(0x7f0000002980), &(0x7f00000029c0)='%pS \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002a00)={{r13, 0xffffffffffffffff}, &(0x7f0000002980), &(0x7f00000029c0)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002a40)={r12}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002a40)={r12, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b80)={0x6, 0xf, &(0x7f0000002740)=@raw=[@call={0x85, 0x0, 0x0, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @map_val={0x18, 0xa, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @generic={0x9, 0x0, 0xd, 0x3, 0xfffffffe}, @alu={0x7, 0x1, 0x1, 0x1, 0xb, 0x2, 0x8}], &(0x7f00000027c0)='GPL\x00', 0x7, 0x5c, &(0x7f0000002800)=""/92, 0x40f00, 0x34, '\x00', r15, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002940)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000002b00)=[r16, r17, r1, r9, r9, 0xffffffffffffffff], &(0x7f0000002b40)=[{0x4, 0x5, 0x1}], 0x10, 0x24}, 0x94) kernel console output (not intermixed with test programs): entered allmulticast mode [ 1478.520773][T24309] syzkaller0: entered promiscuous mode [ 1478.544579][T24309] syzkaller0: entered allmulticast mode [ 1480.989369][T24339] sctp: [Deprecated]: syz.1.5517 (pid 24339) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1480.989369][T24339] Use struct sctp_sack_info instead [ 1482.594489][T24320] netlink: 'syz.4.5510': attribute type 27 has an invalid length. [ 1482.602675][T24320] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5510'. [ 1482.630775][T24341] netlink: 'syz.1.5518': attribute type 10 has an invalid length. [ 1482.694107][T24341] team0: Device wg1 is of different type [ 1482.885818][T24354] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5521'. [ 1482.896752][T24354] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5521'. [ 1482.908249][T24354] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5521'. [ 1483.633037][T24375] netlink: 'syz.0.5529': attribute type 2 has an invalid length. [ 1483.686895][T24375] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.5529'. [ 1484.003915][T24381] syzkaller0: entered promiscuous mode [ 1484.019718][T24381] syzkaller0: entered allmulticast mode [ 1484.309368][T24398] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1484.319573][T24398] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1484.336563][T24398] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1484.365485][T24398] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1484.374105][T24398] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1484.382077][T24398] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1484.585641][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.592521][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.427501][T24398] Bluetooth: hci1: command tx timeout [ 1486.456622][T24405] netlink: 'syz.1.5536': attribute type 9 has an invalid length. [ 1486.467110][T24405] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5536'. [ 1486.781207][T24408] netlink: 'syz.1.5536': attribute type 9 has an invalid length. [ 1486.790426][T24408] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5536'. [ 1486.820032][T22964] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1487.306632][T24404] delete_channel: no stack [ 1487.364350][T22964] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1487.461614][T22964] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1487.577841][T22964] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1487.663395][T24397] chnl_net:caif_netlink_parms(): no params data found [ 1487.834980][T24431] syzkaller0: entered promiscuous mode [ 1487.863876][T24431] syzkaller0: entered allmulticast mode [ 1488.501211][T24398] Bluetooth: hci1: command tx timeout [ 1490.563292][T24442] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1490.585952][T24398] Bluetooth: hci1: command tx timeout [ 1490.692197][T24397] bridge0: port 1(bridge_slave_0) entered blocking state [ 1490.699430][T24397] bridge0: port 1(bridge_slave_0) entered disabled state [ 1490.750937][T24397] bridge_slave_0: entered allmulticast mode [ 1490.758570][T24397] bridge_slave_0: entered promiscuous mode [ 1490.767659][T24397] bridge0: port 2(bridge_slave_1) entered blocking state [ 1490.775089][T24397] bridge0: port 2(bridge_slave_1) entered disabled state [ 1490.782427][T24397] bridge_slave_1: entered allmulticast mode [ 1490.789993][T24397] bridge_slave_1: entered promiscuous mode [ 1490.849155][T22964] tipc: Left network mode [ 1490.863461][T24397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1491.042431][T24397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1491.342901][T24397] team0: Port device team_slave_0 added [ 1491.368629][T24397] team0: Port device team_slave_1 added [ 1491.496573][T24397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1491.504296][T24397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1491.544408][T24397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1491.692117][T24397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1491.716313][T24397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1491.870690][T24397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1491.944947][T24490] netlink: 'syz.0.5555': attribute type 1 has an invalid length. [ 1492.010841][T24490] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.5555'. [ 1492.044439][T24489] netlink: 'syz.0.5555': attribute type 1 has an invalid length. [ 1492.061005][T24489] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.5555'. [ 1492.272693][T22964] erspan0 (unregistering): left allmulticast mode [ 1492.294258][T22964] erspan0 (unregistering): left promiscuous mode [ 1492.311371][T22964] bridge0: port 4(erspan0) entered disabled state [ 1492.399757][T24497] syzkaller0: entered promiscuous mode [ 1492.405475][T24497] syzkaller0: entered allmulticast mode [ 1492.667329][T24398] Bluetooth: hci1: command tx timeout [ 1494.514905][T24397] hsr_slave_0: entered promiscuous mode [ 1494.522156][T24397] hsr_slave_1: entered promiscuous mode [ 1494.528660][T24397] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1494.537430][T24397] Cannot create hsr debugfs directory [ 1494.736016][T24519] netlink: 'syz.2.5558': attribute type 11 has an invalid length. [ 1494.744204][T24519] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.5558'. [ 1496.927861][T24518] netlink: 'syz.2.5558': attribute type 21 has an invalid length. [ 1496.936086][T24518] netlink: 'syz.2.5558': attribute type 6 has an invalid length. [ 1496.949235][T24518] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5558'. [ 1501.565087][T24601] netlink: 'syz.0.5574': attribute type 21 has an invalid length. [ 1501.627373][T24606] netlink: 'syz.2.5573': attribute type 2 has an invalid length. [ 1501.657585][T24606] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5573'. [ 1501.759848][T24397] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1501.817796][T24397] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1501.968951][T24397] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1502.003771][T24397] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1502.121308][T22964] hsr_slave_0: left promiscuous mode [ 1502.176603][T22964] hsr_slave_1: left promiscuous mode [ 1502.263830][T22964] bridge0: port 3(team0) entered disabled state [ 1502.345068][T22964] bridge_slave_1: left allmulticast mode [ 1502.362300][T22964] bridge_slave_1: left promiscuous mode [ 1502.381005][T22964] bridge0: port 2(bridge_slave_1) entered disabled state [ 1502.465973][T22964] bridge0: port 1(bridge_slave_0) entered disabled state [ 1502.514859][T22964] veth1_macvtap: left promiscuous mode [ 1502.524093][T22964] veth0_macvtap: left promiscuous mode [ 1502.529827][T22964] veth1_vlan: left promiscuous mode [ 1502.535883][T22964] veth0_vlan: left promiscuous mode [ 1503.008253][T22964] geneve1 (unregistering): left promiscuous mode [ 1503.016703][T22964] geneve1 (unregistering): left allmulticast mode [ 1503.049460][T22964] team0 (unregistering): Port device geneve1 removed [ 1504.004802][ T787] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 1504.684657][T24661] netlink: 'syz.2.5586': attribute type 1 has an invalid length. [ 1504.710748][T24661] netlink: 'syz.2.5586': attribute type 3 has an invalid length. [ 1504.719112][T24661] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5586'. [ 1507.717113][T22964] team_slave_1 (unregistering): left promiscuous mode [ 1507.727103][T22964] team_slave_1 (unregistering): left allmulticast mode [ 1507.736054][T22964] team0 (unregistering): Port device team_slave_1 removed [ 1507.781072][T22964] team_slave_0 (unregistering): left promiscuous mode [ 1507.787934][T22964] team_slave_0 (unregistering): left allmulticast mode [ 1507.798844][T22964] team0 (unregistering): Port device team_slave_0 removed [ 1507.848308][T22964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1507.902973][T22964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1508.217700][T22964] bond0 (unregistering): Released all slaves [ 1508.354964][T24638] netlink: 'syz.1.5581': attribute type 27 has an invalid length. [ 1508.364725][T24659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5587'. [ 1508.387051][T24659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5587'. [ 1508.410689][T24659] netlink: 33 bytes leftover after parsing attributes in process `syz.0.5587'. [ 1508.420433][T24659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5587'. [ 1508.454724][T24659] netlink: 33 bytes leftover after parsing attributes in process `syz.0.5587'. [ 1508.490677][T24661] netlink: 'syz.2.5586': attribute type 10 has an invalid length. [ 1508.498668][T24661] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5586'. [ 1508.827866][T24397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1509.189307][T24397] 8021q: adding VLAN 0 to HW filter on device team0 [ 1509.258554][T22961] bridge0: port 1(bridge_slave_0) entered blocking state [ 1509.265792][T22961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1509.322684][T22961] bridge0: port 2(bridge_slave_1) entered blocking state [ 1509.329916][T22961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1509.399945][T24687] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5592'. [ 1510.859910][T24397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1510.996805][T24722] netlink: 'syz.2.5597': attribute type 39 has an invalid length. [ 1511.244407][T24722] hsr_slave_1 (unregistering): left promiscuous mode [ 1511.323873][T24737] netlink: 'syz.1.5601': attribute type 9 has an invalid length. [ 1511.337682][T24734] netlink: 'syz.1.5601': attribute type 10 has an invalid length. [ 1511.370665][T24737] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5601'. [ 1511.738579][T24738] netlink: 'syz.1.5601': attribute type 9 has an invalid length. [ 1511.781370][T24738] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5601'. [ 1511.869393][T24753] netlink: 'syz.2.5603': attribute type 4 has an invalid length. [ 1511.906954][T24754] netlink: 'syz.0.5604': attribute type 10 has an invalid length. [ 1511.947305][T24754] team0: Port device dummy0 added [ 1512.029411][T24397] veth0_vlan: entered promiscuous mode [ 1512.071987][T24397] veth1_vlan: entered promiscuous mode [ 1512.197225][T24397] veth0_macvtap: entered promiscuous mode [ 1512.224395][T24397] veth1_macvtap: entered promiscuous mode [ 1512.285180][T24397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1512.309518][T24397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1512.331070][T24397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1512.352285][T24397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1512.380681][T24397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1512.402309][T24397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1512.423794][T24397] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.440780][T24397] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.460752][T24397] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.469530][T24397] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.648714][ T7297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1512.673608][ T7297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1512.728764][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1512.748480][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1513.906059][T24774] netlink: 'syz.0.5609': attribute type 9 has an invalid length. [ 1513.963591][T24774] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.5609'. [ 1515.991892][T24778] netlink: 'syz.1.5610': attribute type 10 has an invalid length. [ 1516.019788][T24778] team0: Device wg1 is of different type [ 1516.084793][T24787] netlink: 'syz.2.5612': attribute type 10 has an invalid length. [ 1516.213762][T24787] team0: Device ipvlan1 failed to register rx_handler [ 1516.600588][T24799] netlink: 'syz.0.5614': attribute type 4 has an invalid length. [ 1517.972538][T24822] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.5621'. [ 1518.417387][T24833] netlink: 'syz.1.5626': attribute type 10 has an invalid length. [ 1518.437812][T24833] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.458076][T24833] bridge0: port 1(bridge_slave_0) entered disabled state [ 1518.892663][T24833] bridge0: port 2(bridge_slave_1) entered blocking state [ 1518.901641][T24833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1518.912380][T24833] bridge0: port 1(bridge_slave_0) entered blocking state [ 1518.921343][T24833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1518.996575][T24833] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1519.265258][T24844] netlink: 'syz.4.5628': attribute type 4 has an invalid length. [ 1520.758258][T24863] netlink: 'syz.1.5634': attribute type 6 has an invalid length. [ 1520.791003][T24863] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5634'. [ 1520.952907][T24864] netlink: 'syz.1.5634': attribute type 9 has an invalid length. [ 1520.980807][T24864] netlink: 49779 bytes leftover after parsing attributes in process `syz.1.5634'. [ 1521.089548][T24870] delete_channel: no stack [ 1521.112268][T24870] delete_channel: no stack [ 1525.578846][T24883] netdevsim netdevsim4 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 1525.637908][T24886] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.5641'. [ 1526.074791][T24894] tun0: tun_chr_ioctl cmd 1074025694 [ 1528.739605][T24913] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5645'. [ 1528.763240][T24932] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1528.769345][T24932] syzkaller0: linktype set to 823 [ 1529.429288][T24954] delete_channel: no stack [ 1529.804850][T24976] netlink: 'syz.1.5664': attribute type 6 has an invalid length. [ 1535.332201][T25014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1535.360203][T25014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1535.410094][T25014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1535.577758][T25014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1536.046439][T25057] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.5687'. [ 1536.089367][T25058] netlink: 'syz.4.5685': attribute type 2 has an invalid length. [ 1536.200633][T25058] netlink: 'syz.4.5685': attribute type 8 has an invalid length. [ 1536.208683][T25058] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5685'. [ 1536.223944][T25061] netlink: 'syz.4.5685': attribute type 21 has an invalid length. [ 1536.235457][T25061] netlink: 'syz.4.5685': attribute type 1 has an invalid length. [ 1536.249034][T25061] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5685'. [ 1538.634285][T25098] netlink: 208064 bytes leftover after parsing attributes in process `syz.4.5700'. [ 1538.681688][T25098] netlink: 'syz.4.5700': attribute type 1 has an invalid length. [ 1539.595168][T25112] syzkaller0: entered promiscuous mode [ 1539.613128][T25112] syzkaller0: entered allmulticast mode [ 1540.422823][T25140] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.5712'. [ 1540.986344][T25147] FAULT_INJECTION: forcing a failure. [ 1540.986344][T25147] name failslab, interval 1, probability 0, space 0, times 0 [ 1541.003313][T25147] CPU: 1 PID: 25147 Comm: syz.2.5715 Not tainted syzkaller #0 [ 1541.010870][T25147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1541.020984][T25147] Call Trace: [ 1541.024313][T25147] [ 1541.027379][T25147] dump_stack_lvl+0x18c/0x250 [ 1541.032151][T25147] ? show_regs_print_info+0x20/0x20 [ 1541.037420][T25147] ? load_image+0x400/0x400 [ 1541.042011][T25147] ? __might_sleep+0xe0/0xe0 [ 1541.046750][T25147] ? __lock_acquire+0x7d40/0x7d40 [ 1541.051837][T25147] should_fail_ex+0x39d/0x4d0 [ 1541.056584][T25147] should_failslab+0x9/0x20 [ 1541.061177][T25147] slab_pre_alloc_hook+0x59/0x310 [ 1541.066266][T25147] ? vfs_write+0x7dd/0x990 [ 1541.070748][T25147] kmem_cache_alloc+0x5a/0x2d0 [ 1541.075579][T25147] ? getname_flags+0xbb/0x500 [ 1541.080342][T25147] getname_flags+0xbb/0x500 [ 1541.084912][T25147] do_sys_openat2+0xda/0x1d0 [ 1541.089579][T25147] ? do_sys_open+0xe0/0xe0 [ 1541.094068][T25147] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1541.100115][T25147] ? lock_chain_count+0x20/0x20 [ 1541.105027][T25147] __x64_sys_openat+0x139/0x160 [ 1541.109942][T25147] do_syscall_64+0x55/0xa0 [ 1541.114418][T25147] ? clear_bhb_loop+0x40/0x90 [ 1541.119152][T25147] ? clear_bhb_loop+0x40/0x90 [ 1541.123970][T25147] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1541.129926][T25147] RIP: 0033:0x7f50cc59c799 [ 1541.134394][T25147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1541.154055][T25147] RSP: 002b:00007f50cd466028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1541.162529][T25147] RAX: ffffffffffffffda RBX: 00007f50cc816090 RCX: 00007f50cc59c799 [ 1541.170556][T25147] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 1541.178631][T25147] RBP: 00007f50cd466090 R08: 0000000000000000 R09: 0000000000000000 [ 1541.186649][T25147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1541.194665][T25147] R13: 00007f50cc816128 R14: 00007f50cc816090 R15: 00007ffcf376fe28 [ 1541.202685][T25147] [ 1544.451558][T25142] hsr0: entered promiscuous mode [ 1544.457580][T25142] hsr0: entered allmulticast mode [ 1544.462969][T25142] hsr_slave_0: entered allmulticast mode [ 1544.469763][T25142] hsr_slave_1: entered allmulticast mode [ 1544.665720][T25168] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5723'. [ 1544.678943][T25168] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5723'. [ 1545.409923][T25175] FAULT_INJECTION: forcing a failure. [ 1545.409923][T25175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1545.428830][T25175] CPU: 1 PID: 25175 Comm: syz.4.5724 Not tainted syzkaller #0 [ 1545.436372][T25175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1545.446458][T25175] Call Trace: [ 1545.449766][T25175] [ 1545.452720][T25175] dump_stack_lvl+0x18c/0x250 [ 1545.457444][T25175] ? show_regs_print_info+0x20/0x20 [ 1545.462682][T25175] ? load_image+0x400/0x400 [ 1545.467218][T25175] ? __might_fault+0xaa/0x120 [ 1545.471924][T25175] ? __lock_acquire+0x7d40/0x7d40 [ 1545.476974][T25175] ? slab_post_alloc_hook+0x72/0x4b0 [ 1545.482367][T25175] should_fail_ex+0x39d/0x4d0 [ 1545.487083][T25175] strncpy_from_user+0x36/0x2d0 [ 1545.491973][T25175] getname_flags+0xf6/0x500 [ 1545.496525][T25175] do_sys_openat2+0xda/0x1d0 [ 1545.501157][T25175] ? do_sys_open+0xe0/0xe0 [ 1545.505606][T25175] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1545.511621][T25175] ? lock_chain_count+0x20/0x20 [ 1545.516697][T25175] __x64_sys_openat+0x139/0x160 [ 1545.521616][T25175] do_syscall_64+0x55/0xa0 [ 1545.526072][T25175] ? clear_bhb_loop+0x40/0x90 [ 1545.530782][T25175] ? clear_bhb_loop+0x40/0x90 [ 1545.535511][T25175] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1545.541468][T25175] RIP: 0033:0x7f8db259c799 [ 1545.545915][T25175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1545.565562][T25175] RSP: 002b:00007f8db338d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1545.574010][T25175] RAX: ffffffffffffffda RBX: 00007f8db2815fa0 RCX: 00007f8db259c799 [ 1545.582006][T25175] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 1545.590006][T25175] RBP: 00007f8db338d090 R08: 0000000000000000 R09: 0000000000000000 [ 1545.598006][T25175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1545.606009][T25175] R13: 00007f8db2816038 R14: 00007f8db2815fa0 R15: 00007ffd4bedeaf8 [ 1545.614026][T25175] [ 1546.061439][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.068043][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1548.066719][T25216] FAULT_INJECTION: forcing a failure. [ 1548.066719][T25216] name failslab, interval 1, probability 0, space 0, times 0 [ 1548.099270][T25216] CPU: 0 PID: 25216 Comm: syz.0.5735 Not tainted syzkaller #0 [ 1548.106833][T25216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1548.116952][T25216] Call Trace: [ 1548.120288][T25216] [ 1548.123281][T25216] dump_stack_lvl+0x18c/0x250 [ 1548.128031][T25216] ? show_regs_print_info+0x20/0x20 [ 1548.133288][T25216] ? load_image+0x400/0x400 [ 1548.137858][T25216] ? __lock_acquire+0x7d40/0x7d40 [ 1548.142947][T25216] should_fail_ex+0x39d/0x4d0 [ 1548.147690][T25216] should_failslab+0x9/0x20 [ 1548.152259][T25216] slab_pre_alloc_hook+0x59/0x310 [ 1548.157355][T25216] ? mark_lock+0x94/0x320 [ 1548.161738][T25216] kmem_cache_alloc+0x5a/0x2d0 [ 1548.166553][T25216] ? alloc_empty_file+0x9e/0x1d0 [ 1548.171552][T25216] alloc_empty_file+0x9e/0x1d0 [ 1548.176549][T25216] path_openat+0x113/0x3230 [ 1548.181143][T25216] ? perf_trace_lock+0xfc/0x3b0 [ 1548.186064][T25216] ? __x64_sys_openat+0x139/0x160 [ 1548.191159][T25216] ? verify_lock_unused+0x140/0x140 [ 1548.196418][T25216] ? do_filp_open+0x430/0x430 [ 1548.201199][T25216] ? perf_trace_lock+0xfc/0x3b0 [ 1548.206115][T25216] ? trace_event_raw_event_lock+0x250/0x250 [ 1548.212080][T25216] do_filp_open+0x1f5/0x430 [ 1548.216630][T25216] ? alloc_fd+0x58f/0x630 [ 1548.221026][T25216] ? vfs_tmpfile+0x490/0x490 [ 1548.225691][T25216] ? _raw_spin_unlock+0x28/0x40 [ 1548.230598][T25216] ? alloc_fd+0x58f/0x630 [ 1548.234983][T25216] do_sys_openat2+0x134/0x1d0 [ 1548.239687][T25216] ? do_sys_open+0xe0/0xe0 [ 1548.244121][T25216] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1548.250120][T25216] ? lock_chain_count+0x20/0x20 [ 1548.255009][T25216] __x64_sys_openat+0x139/0x160 [ 1548.259907][T25216] do_syscall_64+0x55/0xa0 [ 1548.264454][T25216] ? clear_bhb_loop+0x40/0x90 [ 1548.269268][T25216] ? clear_bhb_loop+0x40/0x90 [ 1548.273983][T25216] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1548.279946][T25216] RIP: 0033:0x7f635ab9c799 [ 1548.284420][T25216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1548.304172][T25216] RSP: 002b:00007f635ba44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1548.312654][T25216] RAX: ffffffffffffffda RBX: 00007f635ae16090 RCX: 00007f635ab9c799 [ 1548.320683][T25216] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 1548.328699][T25216] RBP: 00007f635ba44090 R08: 0000000000000000 R09: 0000000000000000 [ 1548.336739][T25216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1548.344753][T25216] R13: 00007f635ae16128 R14: 00007f635ae16090 R15: 00007ffc78a7e8f8 [ 1548.352802][T25216] [ 1548.446828][T25199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1548.459624][T25199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1548.493723][T25199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1548.519921][T25199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1550.085200][T25235] veth1_to_bond: entered allmulticast mode [ 1550.270004][T25247] FAULT_INJECTION: forcing a failure. [ 1550.270004][T25247] name failslab, interval 1, probability 0, space 0, times 0 [ 1550.308909][T25247] CPU: 0 PID: 25247 Comm: syz.0.5746 Not tainted syzkaller #0 [ 1550.316513][T25247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1550.326651][T25247] Call Trace: [ 1550.330005][T25247] [ 1550.333027][T25247] dump_stack_lvl+0x18c/0x250 [ 1550.337806][T25247] ? show_regs_print_info+0x20/0x20 [ 1550.343101][T25247] ? load_image+0x400/0x400 [ 1550.347720][T25247] ? __might_sleep+0xe0/0xe0 [ 1550.352421][T25247] ? __lock_acquire+0x7d40/0x7d40 [ 1550.357536][T25247] should_fail_ex+0x39d/0x4d0 [ 1550.362307][T25247] should_failslab+0x9/0x20 [ 1550.366902][T25247] slab_pre_alloc_hook+0x59/0x310 [ 1550.372020][T25247] ? __lock_acquire+0x7d40/0x7d40 [ 1550.377144][T25247] kmem_cache_alloc+0x5a/0x2d0 [ 1550.382004][T25247] ? security_file_alloc+0x34/0x120 [ 1550.387314][T25247] security_file_alloc+0x34/0x120 [ 1550.392442][T25247] init_file+0x94/0x1f0 [ 1550.396706][T25247] alloc_empty_file+0xb7/0x1d0 [ 1550.401579][T25247] path_openat+0x113/0x3230 [ 1550.406268][T25247] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 1550.412161][T25247] ? verify_lock_unused+0x140/0x140 [ 1550.417424][T25247] ? do_filp_open+0x430/0x430 [ 1550.422160][T25247] ? perf_trace_lock+0xfc/0x3b0 [ 1550.427094][T25247] ? trace_event_raw_event_lock+0x250/0x250 [ 1550.433071][T25247] do_filp_open+0x1f5/0x430 [ 1550.437623][T25247] ? alloc_fd+0x58f/0x630 [ 1550.442023][T25247] ? vfs_tmpfile+0x490/0x490 [ 1550.446736][T25247] ? _raw_spin_unlock+0x28/0x40 [ 1550.451645][T25247] ? alloc_fd+0x58f/0x630 [ 1550.456058][T25247] do_sys_openat2+0x134/0x1d0 [ 1550.460815][T25247] ? do_sys_open+0xe0/0xe0 [ 1550.465295][T25247] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1550.471345][T25247] ? lock_chain_count+0x20/0x20 [ 1550.476272][T25247] __x64_sys_openat+0x139/0x160 [ 1550.481201][T25247] do_syscall_64+0x55/0xa0 [ 1550.485675][T25247] ? clear_bhb_loop+0x40/0x90 [ 1550.490404][T25247] ? clear_bhb_loop+0x40/0x90 [ 1550.495139][T25247] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1550.501102][T25247] RIP: 0033:0x7f635ab9c799 [ 1550.505587][T25247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1550.525332][T25247] RSP: 002b:00007f635ba44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1550.533808][T25247] RAX: ffffffffffffffda RBX: 00007f635ae16090 RCX: 00007f635ab9c799 [ 1550.541832][T25247] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 1550.549856][T25247] RBP: 00007f635ba44090 R08: 0000000000000000 R09: 0000000000000000 [ 1550.557875][T25247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1550.565899][T25247] R13: 00007f635ae16128 R14: 00007f635ae16090 R15: 00007ffc78a7e8f8 [ 1550.574100][T25247] [ 1550.615760][T25249] netlink: 'syz.2.5745': attribute type 10 has an invalid length. [ 1550.689190][T25249] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1552.042413][T25272] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5753'. [ 1552.566471][T25287] FAULT_INJECTION: forcing a failure. [ 1552.566471][T25287] name failslab, interval 1, probability 0, space 0, times 0 [ 1552.613808][T25287] CPU: 1 PID: 25287 Comm: syz.1.5757 Not tainted syzkaller #0 [ 1552.621365][T25287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1552.631479][T25287] Call Trace: [ 1552.634807][T25287] [ 1552.637787][T25287] dump_stack_lvl+0x18c/0x250 [ 1552.642535][T25287] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1552.648775][T25287] ? show_regs_print_info+0x20/0x20 [ 1552.654031][T25287] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1552.660251][T25287] should_fail_ex+0x39d/0x4d0 [ 1552.664998][T25287] should_failslab+0x9/0x20 [ 1552.669557][T25287] slab_pre_alloc_hook+0x59/0x310 [ 1552.674650][T25287] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1552.680430][T25287] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1552.686203][T25287] __kmem_cache_alloc_node+0x53/0x250 [ 1552.691645][T25287] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1552.697424][T25287] __kmalloc+0xa4/0x230 [ 1552.701676][T25287] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1552.707302][T25287] tomoyo_check_open_permission+0x224/0x460 [ 1552.713302][T25287] ? tomoyo_check_open_permission+0x1cf/0x460 [ 1552.719434][T25287] ? tomoyo_check_path_number_acl+0x280/0x280 [ 1552.725587][T25287] ? __asan_memset+0x22/0x40 [ 1552.730267][T25287] ? __rwlock_init+0x150/0x150 [ 1552.735097][T25287] ? tomoyo_file_open+0xed/0x180 [ 1552.740095][T25287] security_file_open+0x62/0xa0 [ 1552.745011][T25287] do_dentry_open+0x380/0x1500 [ 1552.749845][T25287] path_openat+0x27f1/0x3230 [ 1552.754520][T25287] ? verify_lock_unused+0x140/0x140 [ 1552.759788][T25287] ? do_filp_open+0x430/0x430 [ 1552.764534][T25287] ? __virt_addr_valid+0x18c/0x540 [ 1552.769717][T25287] do_filp_open+0x1f5/0x430 [ 1552.774287][T25287] ? vfs_tmpfile+0x490/0x490 [ 1552.778947][T25287] ? _raw_spin_unlock+0x28/0x40 [ 1552.783854][T25287] ? alloc_fd+0x58f/0x630 [ 1552.788244][T25287] do_sys_openat2+0x134/0x1d0 [ 1552.792982][T25287] ? do_sys_open+0xe0/0xe0 [ 1552.797459][T25287] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1552.803498][T25287] ? lock_chain_count+0x20/0x20 [ 1552.808405][T25287] __x64_sys_openat+0x139/0x160 [ 1552.813319][T25287] do_syscall_64+0x55/0xa0 [ 1552.817790][T25287] ? clear_bhb_loop+0x40/0x90 [ 1552.822518][T25287] ? clear_bhb_loop+0x40/0x90 [ 1552.827257][T25287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1552.833203][T25287] RIP: 0033:0x7f59f899c799 [ 1552.837756][T25287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1552.857422][T25287] RSP: 002b:00007f59f98ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1552.865989][T25287] RAX: ffffffffffffffda RBX: 00007f59f8c16090 RCX: 00007f59f899c799 [ 1552.874007][T25287] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 1552.882028][T25287] RBP: 00007f59f98ed090 R08: 0000000000000000 R09: 0000000000000000 [ 1552.890051][T25287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1552.898077][T25287] R13: 00007f59f8c16128 R14: 00007f59f8c16090 R15: 00007fff88991b48 [ 1552.906138][T25287] [ 1553.014537][T25287] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1553.099972][T25291] netlink: 'syz.4.5759': attribute type 10 has an invalid length. [ 1553.125828][T25291] netlink: 212412 bytes leftover after parsing attributes in process `syz.4.5759'. [ 1553.165437][T25291] openvswitch: netlink: Flow key attr not present in new flow. [ 1553.450774][T25303] netlink: 'syz.4.5763': attribute type 3 has an invalid length. [ 1553.458651][T25303] netlink: 'syz.4.5763': attribute type 7 has an invalid length. [ 1553.459672][T25300] netlink: 'syz.0.5762': attribute type 10 has an invalid length. [ 1553.487621][T25303] netlink: 'syz.4.5763': attribute type 8 has an invalid length. [ 1553.507639][T25303] netlink: 'syz.4.5763': attribute type 7 has an invalid length. [ 1553.529426][T25303] netlink: 165256 bytes leftover after parsing attributes in process `syz.4.5763'. [ 1553.553437][T25300] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5762'. [ 1553.781500][T25300] team0: Port device virt_wifi0 added [ 1553.852621][T25305] netlink: 'syz.0.5762': attribute type 10 has an invalid length. [ 1554.115091][T25305] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5762'. [ 1554.281094][T25305] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1554.364546][T25305] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1554.747553][T25328] netlink: 207496 bytes leftover after parsing attributes in process `syz.1.5772'. [ 1554.931209][T25334] netlink: zone id is out of range [ 1554.968163][T25334] netlink: set zone limit has 8 unknown bytes [ 1556.658531][T25361] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5780'. [ 1556.807325][T25368] netlink: 'syz.0.5783': attribute type 3 has an invalid length. [ 1556.870143][T25368] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5783'. [ 1556.945300][T25370] netlink: 'syz.0.5783': attribute type 3 has an invalid length. [ 1557.000100][T25370] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5783'. [ 1559.293145][T25410] netlink: 6 bytes leftover after parsing attributes in process `syz.1.5797'. [ 1559.338297][T25410] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1559.948513][T25433] netlink: 'syz.4.5803': attribute type 1 has an invalid length. [ 1559.958248][T25433] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.5803'. [ 1559.986545][T25433] netlink: 'syz.4.5803': attribute type 3 has an invalid length. [ 1560.000286][T25433] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.5803'. [ 1560.186717][T25435] netlink: 'syz.0.5801': attribute type 29 has an invalid length. [ 1560.245998][T25435] netlink: 'syz.0.5801': attribute type 29 has an invalid length. [ 1563.408445][T25473] netlink: 'syz.0.5814': attribute type 15 has an invalid length. [ 1563.500233][T25473] netlink: 11254 bytes leftover after parsing attributes in process `syz.0.5814'. [ 1563.981672][T25487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5816'. [ 1564.144295][T25487] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.5816'. [ 1564.675143][T25508] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1564.681688][T25508] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1568.043451][T25523] netlink: 'syz.1.5830': attribute type 8 has an invalid length. [ 1568.072479][T25523] netlink: 'syz.1.5830': attribute type 8 has an invalid length. [ 1569.182572][T25549] netlink: 'syz.2.5826': attribute type 21 has an invalid length. [ 1569.190806][T25549] netlink: 176 bytes leftover after parsing attributes in process `syz.2.5826'. [ 1570.708978][T25580] netlink: 'syz.2.5843': attribute type 25 has an invalid length. [ 1571.253098][T25590] netlink: 'syz.1.5849': attribute type 10 has an invalid length. [ 1571.313870][T25584] cgroup: fork rejected by pids controller in /syz4 [ 1571.365979][T25590] 8021q: adding VLAN 0 to HW filter on device team0 [ 1571.433494][T25590] bond0: (slave team0): Enslaving as an active interface with an up link [ 1571.530638][T25591] netlink: 'syz.1.5849': attribute type 10 has an invalid length. [ 1571.841041][T25695] netlink: 'syz.0.5850': attribute type 33 has an invalid length. [ 1571.862670][T25695] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5850'. [ 1572.840660][T25728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5859'. [ 1573.048113][ T7297] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.183791][ T7297] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.394521][ T7297] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.589149][T25742] netlink: 'syz.1.5863': attribute type 8 has an invalid length. [ 1573.660748][T25742] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5863'. [ 1573.910142][ T7297] netdevsim netdevsim4 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.215367][T24398] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 1574.348697][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1574.368073][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1574.381216][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1574.401040][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1574.422612][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1574.440798][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1574.482650][T20405] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 1574.739662][T25774] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.5870'. [ 1574.759815][T25774] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.5870'. [ 1574.845732][T25782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5873'. [ 1575.120374][T25769] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.5870'. [ 1575.180784][T25781] syzkaller0: entered promiscuous mode [ 1575.186637][T25781] syzkaller0: entered allmulticast mode [ 1575.195263][T25782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5873'. [ 1575.210100][T25774] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.5870'. [ 1576.513224][T24398] Bluetooth: hci1: command tx timeout [ 1577.569650][T25805] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5876'. [ 1577.597589][T25805] netlink: 'syz.0.5876': attribute type 10 has an invalid length. [ 1577.635768][T25805] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1578.031811][T25753] chnl_net:caif_netlink_parms(): no params data found [ 1578.075774][T25818] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.5879'. [ 1578.258934][T25753] bridge0: port 1(bridge_slave_0) entered blocking state [ 1578.280163][T25753] bridge0: port 1(bridge_slave_0) entered disabled state [ 1578.296823][T25753] bridge_slave_0: entered allmulticast mode [ 1578.317012][T25753] bridge_slave_0: entered promiscuous mode [ 1578.342443][T25753] bridge0: port 2(bridge_slave_1) entered blocking state [ 1578.357817][T25753] bridge0: port 2(bridge_slave_1) entered disabled state [ 1578.384700][T25753] bridge_slave_1: entered allmulticast mode [ 1578.410709][T25753] bridge_slave_1: entered promiscuous mode [ 1578.497410][T25753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1578.580806][T24398] Bluetooth: hci1: command tx timeout [ 1579.333327][T25753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1579.558566][T25753] team0: Port device team_slave_0 added [ 1579.591694][T25753] team0: Port device team_slave_1 added [ 1579.691391][T25753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1579.704424][T25753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1579.732034][T25753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1579.745534][T25753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1579.754351][T25753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1579.781138][T25753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1579.937908][T25753] hsr_slave_0: entered promiscuous mode [ 1579.949036][T25753] hsr_slave_1: entered promiscuous mode [ 1580.026755][ T7297] hsr_slave_0: left promiscuous mode [ 1580.045071][ T7297] hsr_slave_1: left promiscuous mode [ 1580.058582][ T7297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1580.069777][ T7297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1580.085620][ T7297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1580.093484][ T7297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1580.106068][ T7297] bridge_slave_1: left allmulticast mode [ 1580.114359][ T7297] bridge_slave_1: left promiscuous mode [ 1580.124764][ T7297] bridge0: port 2(bridge_slave_1) entered disabled state [ 1580.139545][ T7297] bridge_slave_0: left allmulticast mode [ 1580.146688][ T7297] bridge_slave_0: left promiscuous mode [ 1580.155367][ T7297] bridge0: port 1(bridge_slave_0) entered disabled state [ 1580.248115][ T7297] veth1_macvtap: left promiscuous mode [ 1580.256853][ T7297] veth0_macvtap: left promiscuous mode [ 1580.265314][ T7297] veth1_vlan: left promiscuous mode [ 1580.275722][ T7297] veth0_vlan: left promiscuous mode [ 1580.663003][T24398] Bluetooth: hci1: command tx timeout [ 1581.886927][ T7297] team0 (unregistering): Port device team_slave_1 removed [ 1581.964091][ T7297] team0 (unregistering): Port device team_slave_0 removed [ 1582.031762][ T7297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1582.101089][ T7297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1582.578770][ T7297] bond0 (unregistering): Released all slaves [ 1582.769347][T24398] Bluetooth: hci1: command tx timeout [ 1583.273539][T25904] netlink: 'syz.2.5892': attribute type 39 has an invalid length. [ 1583.739033][T25915] netlink: 'syz.0.5894': attribute type 41 has an invalid length. [ 1583.752150][T25915] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5894'. [ 1587.268387][T25965] syzkaller0: entered promiscuous mode [ 1587.285355][T25965] syzkaller0: entered allmulticast mode [ 1587.368491][T25753] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1590.136264][T25753] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1590.171762][T25753] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1590.194140][T25753] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1590.437649][T25753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1590.482325][T25753] 8021q: adding VLAN 0 to HW filter on device team0 [ 1590.543848][T22963] bridge0: port 1(bridge_slave_0) entered blocking state [ 1590.551180][T22963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1590.653587][T22959] bridge0: port 2(bridge_slave_1) entered blocking state [ 1590.660876][T22959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1590.727636][T26019] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5907'. [ 1590.823519][T26025] mac80211_hwsim hwsim48 wlan0: entered promiscuous mode [ 1590.852599][T26025] mac80211_hwsim hwsim48 wlan0: entered allmulticast mode [ 1590.867277][T26028] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5909'. [ 1591.414089][T25753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1591.688888][T26056] mac80211_hwsim hwsim53 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1591.802329][T26056] netlink: 'syz.2.5913': attribute type 3 has an invalid length. [ 1591.831853][T26056] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.5913'. [ 1592.062980][T26056] netlink: 'syz.2.5913': attribute type 12 has an invalid length. [ 1592.122924][T26056] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5913'. [ 1592.688449][T25753] veth0_vlan: entered promiscuous mode [ 1592.723593][T25753] veth1_vlan: entered promiscuous mode [ 1592.832442][T25753] veth0_macvtap: entered promiscuous mode [ 1592.969583][T26084] syzkaller0: entered promiscuous mode [ 1592.999675][T26084] syzkaller0: entered allmulticast mode [ 1593.034028][T25753] veth1_macvtap: entered promiscuous mode [ 1593.255900][T26097] netlink: 'syz.0.5917': attribute type 10 has an invalid length. [ 1593.379020][T26095] netlink: 4943 bytes leftover after parsing attributes in process `syz.2.5918'. [ 1593.501349][T26097] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1593.942550][T22963] wlan1: Trigger new scan to find an IBSS to join [ 1597.797526][T25753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1597.834340][T25753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1597.876038][T25753] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.895734][T25753] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.915215][T25753] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.941713][T25753] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1598.200460][T26171] syzkaller0: entered promiscuous mode [ 1598.210807][T26171] syzkaller0: entered allmulticast mode [ 1598.498756][T22959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1598.642843][T22959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1598.902652][T22962] wlan1: Trigger new scan to find an IBSS to join [ 1599.874229][T22962] wlan1: Creating new IBSS network, BSSID 56:4b:b1:91:37:0f [ 1599.898009][T26224] netlink: 'syz.0.5936': attribute type 9 has an invalid length. [ 1599.917387][T26224] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5936'. [ 1601.519497][T22959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1601.527589][T26221] netlink: 'syz.0.5936': attribute type 10 has an invalid length. [ 1601.535661][T22959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1601.714281][T26225] netlink: 'syz.0.5936': attribute type 9 has an invalid length. [ 1601.730167][T26225] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5936'. [ 1601.863191][T26233] netlink: 'syz.4.5860': attribute type 6 has an invalid length. [ 1601.882960][T26236] netlink: 4943 bytes leftover after parsing attributes in process `syz.1.5937'. [ 1601.893759][T26233] netlink: 'syz.4.5860': attribute type 1 has an invalid length. [ 1601.954104][T26233] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.5860'. [ 1604.086500][T26268] netlink: 'syz.1.5946': attribute type 153 has an invalid length. [ 1604.134480][T26268] netlink: 'syz.1.5946': attribute type 1 has an invalid length. [ 1604.185760][T26268] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.5946'. [ 1605.851747][T26285] netlink: 4943 bytes leftover after parsing attributes in process `syz.4.5950'. [ 1606.274464][T26296] bridge_slave_1: left allmulticast mode [ 1606.283837][T26296] bridge_slave_1: left promiscuous mode [ 1606.298491][T26296] bridge0: port 2(bridge_slave_1) entered disabled state [ 1606.640202][T26296] bridge_slave_0: left allmulticast mode [ 1606.656440][T26296] bridge_slave_0: left promiscuous mode [ 1606.676888][T26296] bridge0: port 1(bridge_slave_0) entered disabled state [ 1606.952024][T26299] netlink: 'syz.2.5953': attribute type 21 has an invalid length. [ 1606.960005][T26299] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5953'. [ 1607.769540][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.778015][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1611.918707][T26353] netlink: 'syz.1.5971': attribute type 2 has an invalid length. [ 1611.930732][T26351] netlink: 'syz.4.5972': attribute type 10 has an invalid length. [ 1611.938631][T26351] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5972'. [ 1611.961216][T26353] netlink: 'syz.1.5971': attribute type 8 has an invalid length. [ 1611.969016][T26353] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5971'. [ 1612.140079][T26360] syzkaller0: entered promiscuous mode [ 1612.151036][T26360] syzkaller0: entered allmulticast mode [ 1612.223052][T26360] netlink: 13951 bytes leftover after parsing attributes in process `syz.2.5974'. [ 1615.215453][T26392] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1615.222748][T26392] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1616.121833][T26375] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5978'. [ 1616.166993][T26394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1616.283784][T26398] netlink: 'syz.0.5985': attribute type 4 has an invalid length. [ 1616.307478][T26398] netlink: 'syz.0.5985': attribute type 3 has an invalid length. [ 1616.322291][T26398] netlink: 153952 bytes leftover after parsing attributes in process `syz.0.5985'. [ 1616.356911][T26401] netlink: 'syz.4.5986': attribute type 11 has an invalid length. [ 1616.370990][T26401] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5986'. [ 1616.941172][T26423] netlink: 'syz.1.5994': attribute type 10 has an invalid length. [ 1616.987310][T26423] team0: Device wg1 is of different type [ 1617.561626][T26434] netlink: 4943 bytes leftover after parsing attributes in process `syz.1.5997'. [ 1617.709936][T26440] netlink: 4943 bytes leftover after parsing attributes in process `syz.0.5998'. [ 1618.919244][T26461] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6003'. [ 1621.974182][T26475] pim6reg1: entered promiscuous mode [ 1621.979569][T26475] pim6reg1: entered allmulticast mode [ 1622.443633][T26488] netlink: 4943 bytes leftover after parsing attributes in process `syz.1.6010'. [ 1623.513370][T26500] netlink: 4943 bytes leftover after parsing attributes in process `syz.2.6012'. [ 1624.588828][T26507] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.6016'. [ 1624.851846][T26522] netlink: 'syz.0.6018': attribute type 29 has an invalid length. [ 1624.885443][T26522] netlink: 'syz.0.6018': attribute type 29 has an invalid length. [ 1625.825411][T26527] syzkaller0: entered promiscuous mode [ 1625.831215][T26527] syzkaller0: entered allmulticast mode [ 1629.870708][ T7297] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1630.475784][T26549] netlink: 4943 bytes leftover after parsing attributes in process `syz.4.6024'. [ 1630.814769][T26548] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.6026'. [ 1632.091368][T26564] netlink: 'syz.4.6029': attribute type 6 has an invalid length. [ 1632.110642][T26564] netlink: 164 bytes leftover after parsing attributes in process `syz.4.6029'. [ 1632.620054][T26576] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6033'. [ 1633.648050][T26591] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.6036'. [ 1633.836608][T26603] netlink: 'syz.4.6039': attribute type 10 has an invalid length. [ 1633.844818][T26603] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6039'. [ 1633.854404][T26603] ipvlan1: entered promiscuous mode [ 1633.861423][T26603] ipvlan1: entered allmulticast mode [ 1633.867889][T26603] veth0_vlan: entered allmulticast mode [ 1633.877636][T26603] bridge0: port 3(ipvlan1) entered blocking state [ 1633.895961][T26603] bridge0: port 3(ipvlan1) entered disabled state [ 1633.908787][T26603] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1634.155261][T26607] netlink: 'syz.0.6040': attribute type 23 has an invalid length. [ 1634.163335][T26607] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6040'. [ 1634.609962][T26620] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6046'. [ 1634.690843][T26620] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1634.750842][T26620] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1635.029616][T26623] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6045'. [ 1635.954322][T26638] netlink: 'syz.2.6051': attribute type 10 has an invalid length. [ 1636.379780][T26645] netlink: 4943 bytes leftover after parsing attributes in process `syz.0.6050'. [ 1637.173599][T26668] netlink: 'syz.1.6058': attribute type 6 has an invalid length. [ 1637.838324][T26680] mac80211_hwsim hwsim53 wlan1: entered promiscuous mode [ 1637.868943][T26680] mac80211_hwsim hwsim53 wlan1: entered allmulticast mode [ 1638.112573][T26684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1638.844524][T26692] netlink: 4943 bytes leftover after parsing attributes in process `syz.0.6064'. [ 1640.627928][T26731] netlink: 'syz.2.6076': attribute type 2 has an invalid length. [ 1640.686166][T26731] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6076'. [ 1641.062164][T26736] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.6077'. [ 1641.457766][T26742] netlink: 'syz.2.6079': attribute type 1 has an invalid length. [ 1641.530904][T26742] netlink: 176 bytes leftover after parsing attributes in process `syz.2.6079'. [ 1641.672280][T26742] netlink: 'syz.2.6079': attribute type 4 has an invalid length. [ 1641.774361][T26742] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6079'. [ 1641.908228][T26749] netlink: 4943 bytes leftover after parsing attributes in process `syz.0.6078'. [ 1641.982980][T26742] wlan1: mtu less than device minimum [ 1642.817378][T26760] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6082'. [ 1642.860443][T26760] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1644.171834][T26786] netlink: 4943 bytes leftover after parsing attributes in process `syz.4.6089'. [ 1644.626864][T26787] netlink: 'syz.2.6090': attribute type 10 has an invalid length. [ 1644.679626][T26787] team0: Port device dummy0 added [ 1646.778658][T26822] netlink: 4943 bytes leftover after parsing attributes in process `syz.1.6100'. [ 1647.651566][T26851] mac80211_hwsim hwsim45 wlan1: entered promiscuous mode [ 1647.674047][T26851] mac80211_hwsim hwsim45 wlan1: entered allmulticast mode [ 1648.254135][T26873] netlink: 4943 bytes leftover after parsing attributes in process `syz.1.6113'. [ 1649.600733][T26886] mac80211_hwsim hwsim62 wlan0: entered allmulticast mode [ 1649.644455][T26886] mac80211_hwsim hwsim62 wlan0: entered promiscuous mode [ 1649.972308][T26888] netlink: 'syz.0.6119': attribute type 13 has an invalid length. [ 1650.007745][T26888] netlink: 160 bytes leftover after parsing attributes in process `syz.0.6119'. [ 1650.307463][T26888] erspan0: refused to change device tx_queue_len [ 1650.336056][T26888] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1650.367449][T26890] delete_channel: no stack [ 1650.476335][T26896] pim6reg1: entered promiscuous mode [ 1650.487523][T26896] pim6reg1: entered allmulticast mode [ 1650.502568][T26896] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1650.798097][T26909] netlink: 4943 bytes leftover after parsing attributes in process `syz.0.6124'. [ 1651.254671][T26917] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.6126'. [ 1651.282084][T26913] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.6126'. [ 1651.691514][T26922] syzkaller0: entered promiscuous mode [ 1651.697339][T26922] syzkaller0: entered allmulticast mode [ 1651.937882][T26934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6131'. [ 1654.802869][T26951] netlink: 'syz.0.6135': attribute type 33 has an invalid length. [ 1654.818666][T26951] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6135'. [ 1654.830134][T26951] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1655.022900][T26969] netlink: 4943 bytes leftover after parsing attributes in process `syz.1.6140'. [ 1656.682451][T26998] syzkaller0: entered promiscuous mode [ 1656.730934][T26998] syzkaller0: entered allmulticast mode [ 1659.541866][T27026] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.6153'. [ 1661.056331][T27017] sit0: entered allmulticast mode [ 1661.080618][T27002] netlink: 'syz.1.6149': attribute type 4 has an invalid length. [ 1661.089670][T27002] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6149'. [ 1661.112491][T27002] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1661.505932][T27045] netlink: 4943 bytes leftover after parsing attributes in process `syz.2.6158'. [ 1661.650093][T27044] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1661.690332][T27044] syzkaller0: linktype set to 804 [ 1662.417000][T27055] mac80211_hwsim hwsim48 wlan0: left promiscuous mode [ 1662.469368][T27055] mac80211_hwsim hwsim48 wlan0: left allmulticast mode [ 1662.608397][T27063] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.6164'. [ 1662.706200][T27050] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.6160'. [ 1662.732829][T27056] syzkaller0: entered promiscuous mode [ 1662.745794][T27056] syzkaller0: entered allmulticast mode [ 1664.121555][T27090] netlink: 4943 bytes leftover after parsing attributes in process `syz.2.6169'. [ 1665.797452][T27103] netlink: 'syz.4.6174': attribute type 2 has an invalid length. [ 1665.806051][T27102] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6174'. [ 1665.975965][T27103] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6174'. [ 1666.477679][T27118] netlink: 4943 bytes leftover after parsing attributes in process `syz.1.6178'. [ 1667.203727][T27124] syzkaller0: entered promiscuous mode [ 1667.209654][T27124] syzkaller0: entered allmulticast mode [ 1667.713486][T27139] netlink: 'syz.1.6184': attribute type 2 has an invalid length. [ 1667.727230][T27139] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6184'. [ 1668.780333][T27164] netlink: 4943 bytes leftover after parsing attributes in process `syz.4.6190'. [ 1668.911743][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.918354][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.781878][T27155] netlink: 'syz.0.6188': attribute type 2 has an invalid length. [ 1673.267206][T27198] netlink: 4943 bytes leftover after parsing attributes in process `syz.0.6200'. [ 1673.562878][T27203] syzkaller0: entered promiscuous mode [ 1673.590931][T27203] syzkaller0: entered allmulticast mode [ 1676.973051][T27252] netlink: 4943 bytes leftover after parsing attributes in process `syz.1.6213'. [ 1678.979075][T27264] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.6218'. [ 1679.033715][T27258] delete_channel: no stack [ 1680.124066][T27289] netlink: 'syz.1.6224': attribute type 3 has an invalid length. [ 1680.142852][T27289] netlink: 'syz.1.6224': attribute type 8 has an invalid length. [ 1680.162900][T27289] netlink: 'syz.1.6224': attribute type 6 has an invalid length. [ 1680.201773][T27289] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.6224'. [ 1680.969024][T27287] syzkaller0: entered promiscuous mode [ 1680.980700][T27287] syzkaller0: entered allmulticast mode [ 1681.102628][T27304] netlink: 4943 bytes leftover after parsing attributes in process `syz.0.6226'. [ 1684.599555][T27327] netlink: set zone limit has 8 unknown bytes [ 1685.569289][T27339] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.6238'. [ 1685.878923][T27345] syzkaller0: entered promiscuous mode [ 1685.890443][T27345] syzkaller0: entered allmulticast mode [ 1688.802180][T27382] netlink: 4943 bytes leftover after parsing attributes in process `syz.1.6247'. [ 1689.658387][T27394] netlink: 'syz.2.6250': attribute type 21 has an invalid length. [ 1689.692157][T27394] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6250'. [ 1689.742594][T27391] syzkaller0: entered promiscuous mode [ 1689.748360][T27391] syzkaller0: entered allmulticast mode [ 1692.277314][T27410] netlink: 22 bytes leftover after parsing attributes in process `syz.2.6254'. [ 1692.534019][T27435] netlink: 4943 bytes leftover after parsing attributes in process `syz.2.6260'. [ 1692.962311][T27454] sit0: entered promiscuous mode [ 1693.215550][T27460] syzkaller0: entered promiscuous mode [ 1693.223649][T27460] syzkaller0: entered allmulticast mode [ 1693.386128][T27482] netlink: 4943 bytes leftover after parsing attributes in process `syz.2.6272'. [ 1693.599330][T27489] netlink: 207496 bytes leftover after parsing attributes in process `syz.0.6276'. [ 1693.833114][T27490] netlink: 4943 bytes leftover after parsing attributes in process `syz.4.6275'. [ 1695.940643][T27494] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6277'. [ 1695.962868][T27494] bridge0: port 1(bridge_slave_0) entered disabled state [ 1696.063712][T27494] bridge_slave_0 (unregistering): left promiscuous mode [ 1696.088492][T27494] bridge0: port 1(bridge_slave_0) entered disabled state [ 1696.590926][T24398] Bluetooth: hci1: command 0x0406 tx timeout [ 1696.723788][T27503] netlink: 'syz.0.6281': attribute type 10 has an invalid length. [ 1696.759054][T27503] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1696.780341][T27503] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1696.806813][T27509] netlink: 201660 bytes leftover after parsing attributes in process `syz.0.6281'. [ 1696.822948][T27503] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1696.842817][T27509] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 1696.943135][T27503] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1696.973035][T27503] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1696.986429][T27503] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1697.038045][T27503] team0: Port device geneve1 added [ 1697.260725][T27526] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6285'. [ 1697.300114][T27526] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6285'. [ 1697.337080][T27524] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6285'. [ 1697.360703][T27527] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6285'. [ 1697.910403][T27534] syzkaller0: entered promiscuous mode [ 1697.928584][T27534] syzkaller0: entered allmulticast mode [ 1699.453203][T27551] delete_channel: no stack [ 1701.815964][T27552] netlink: 'syz.2.6293': attribute type 4 has an invalid length. [ 1701.824744][T27553] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.6293'. [ 1702.436724][T27598] netlink: 'syz.4.6302': attribute type 4 has an invalid length. [ 1702.470661][T27598] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6302'. [ 1702.850805][T27608] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 1703.474975][T27605] syzkaller0: entered promiscuous mode [ 1703.485727][T27605] syzkaller0: entered allmulticast mode [ 1703.755467][T27621] netlink: 'syz.0.6308': attribute type 2 has an invalid length. [ 1703.768985][T27621] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6308'. [ 1707.675726][T27645] netlink: 'syz.1.6314': attribute type 10 has an invalid length. [ 1707.822724][T27645] team0: Device ipvlan1 failed to register rx_handler [ 1708.157796][T27659] netlink: 'syz.4.6318': attribute type 1 has an invalid length. [ 1708.346450][T27645] syz.1.6314 (27645) used greatest stack depth: 17256 bytes left [ 1709.523922][T27676] syzkaller0: entered promiscuous mode [ 1709.529813][T27676] syzkaller0: entered allmulticast mode [ 1713.765614][T27715] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1714.542967][T27744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6337'. [ 1715.365481][T27756] netlink: 'syz.1.6342': attribute type 11 has an invalid length. [ 1716.993829][T27792] netlink: 'syz.0.6353': attribute type 21 has an invalid length. [ 1717.029080][T27792] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6353'. [ 1717.154729][T27795] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6353'. [ 1717.259915][T27795] syzkaller0: entered promiscuous mode [ 1717.274480][T27795] syzkaller0: entered allmulticast mode [ 1719.120679][T27844] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1720.093964][T27863] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.6375'. [ 1720.469227][T27874] bridge0: port 2(bridge_slave_1) entered disabled state [ 1720.528925][T27874] bridge0: entered allmulticast mode [ 1720.676163][T27881] netlink: 'syz.2.6379': attribute type 21 has an invalid length. [ 1720.708488][T27881] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6379'. [ 1720.790205][T27883] netlink: 'syz.2.6379': attribute type 21 has an invalid length. [ 1720.833385][T27883] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6379'. [ 1721.337352][T27892] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1721.699055][T27906] netlink: 'syz.0.6386': attribute type 4 has an invalid length. [ 1721.708426][T27906] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6386'. [ 1721.922176][T27910] netlink: 'syz.0.6387': attribute type 3 has an invalid length. [ 1721.966252][T27910] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6387'. [ 1722.134345][T27916] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.6388'. [ 1722.162861][T27916] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 1724.761461][T27942] IPv6: Can't replace route, no match found [ 1725.073824][T27952] netlink: 'syz.4.6399': attribute type 1 has an invalid length. [ 1726.746623][T27977] netlink: 'syz.0.6406': attribute type 41 has an invalid length. [ 1727.982165][T27988] : port 1(ip6gretap0) entered blocking state [ 1727.988615][T27988] : port 1(ip6gretap0) entered disabled state [ 1727.997716][T27988] ip6gretap0: entered allmulticast mode [ 1728.008777][T27988] ip6gretap0: entered promiscuous mode [ 1728.042956][T27993] netlink: 'syz.0.6410': attribute type 11 has an invalid length. [ 1728.060312][T27993] netlink: 176 bytes leftover after parsing attributes in process `syz.0.6410'. [ 1728.353242][T28004] netlink: 'syz.0.6413': attribute type 7 has an invalid length. [ 1729.005804][T28012] netlink: 'syz.0.6416': attribute type 10 has an invalid length. [ 1729.055924][T28012] netlink: 55 bytes leftover after parsing attributes in process `syz.0.6416'. [ 1729.761379][T28017] netlink: 'syz.2.6420': attribute type 21 has an invalid length. [ 1729.777787][T28017] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6420'. [ 1729.807500][T28023] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6419'. [ 1729.839310][T28025] netlink: 'syz.4.6421': attribute type 21 has an invalid length. [ 1729.865800][T28025] netlink: 'syz.4.6421': attribute type 20 has an invalid length. [ 1729.981858][T28032] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6423'. [ 1730.368937][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.376846][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.616298][T28068] tap0: tun_chr_ioctl cmd 1074025675 [ 1731.642160][T28068] tap0: persist enabled [ 1731.814480][T28070] mac80211_hwsim hwsim49 wlan1: entered allmulticast mode [ 1731.869351][T28058] tap0: tun_chr_ioctl cmd 21731 [ 1731.876709][T28058] tap0: tun_chr_ioctl cmd 1074025675 [ 1731.882592][T28058] tap0: persist enabled [ 1732.245031][T28089] netlink: 4943 bytes leftover after parsing attributes in process `syz.4.6435'. [ 1732.769753][T28096] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1733.067631][T28108] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1734.034766][T28125] netlink: 4943 bytes leftover after parsing attributes in process `syz.4.6447'. [ 1734.658154][T28137] sit0: entered promiscuous mode [ 1734.920147][T28146] netlink: 'syz.4.6454': attribute type 9 has an invalid length. [ 1734.928258][T28146] netlink: 49779 bytes leftover after parsing attributes in process `syz.4.6454'. [ 1735.106429][T28154] netlink: 'syz.4.6455': attribute type 10 has an invalid length. [ 1735.118110][T28154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1735.323295][T28154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1735.490478][T28154] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1735.962594][T28175] netlink: 4943 bytes leftover after parsing attributes in process `syz.0.6459'. [ 1737.722111][T28214] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1738.923183][T28245] C: renamed from team_slave_0 (while UP) [ 1738.944589][T28245] netlink: 'syz.1.6481': attribute type 3 has an invalid length. [ 1738.960609][T28245] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6481'. [ 1739.916806][T28265] netlink: 209340 bytes leftover after parsing attributes in process `syz.2.6488'. [ 1740.197213][T28269] netlink: 164 bytes leftover after parsing attributes in process `syz.4.6489'. [ 1740.979783][T28290] netlink: 'syz.0.6494': attribute type 2 has an invalid length. [ 1741.000608][T28290] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6494'. [ 1741.991976][T28319] netlink: 'syz.2.6506': attribute type 10 has an invalid length. [ 1743.571188][T28342] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1743.891864][T28357] netlink: 4943 bytes leftover after parsing attributes in process `syz.2.6514'. [ 1744.401321][T28368] syzkaller0: entered promiscuous mode [ 1744.407379][T28368] syzkaller0: entered allmulticast mode [ 1747.495259][T28386] netlink: 'syz.4.6523': attribute type 2 has an invalid length. [ 1747.504510][T28386] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6523'. [ 1747.514902][T28395] netlink: 'syz.2.6525': attribute type 2 has an invalid length. [ 1747.522814][T28395] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6525'. [ 1747.889951][T28405] netlink: 4943 bytes leftover after parsing attributes in process `syz.4.6527'. [ 1748.004538][T28409] delete_channel: no stack [ 1748.232537][T28407] netlink: 'syz.1.6530': attribute type 10 has an invalid length. [ 1748.431145][T28407] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1749.298250][T28435] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.6537'. [ 1749.362691][T28435] netlink: 'syz.0.6537': attribute type 6 has an invalid length. [ 1749.403855][T28435] netlink: 'syz.0.6537': attribute type 36 has an invalid length. [ 1749.424035][T28435] netlink: 'syz.0.6537': attribute type 37 has an invalid length. [ 1749.975931][T28454] netlink: 4943 bytes leftover after parsing attributes in process `syz.0.6542'. [ 1751.003730][T28480] netlink: 'syz.0.6551': attribute type 1 has an invalid length. [ 1751.818217][T28499] netlink: 4943 bytes leftover after parsing attributes in process `syz.2.6557'. [ 1752.295486][T28503] delete_channel: no stack [ 1753.680317][T28544] netlink: 4943 bytes leftover after parsing attributes in process `syz.0.6569'. [ 1754.446912][T28560] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6576'. [ 1754.493089][T28560] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1754.502335][T28560] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1754.969913][T28569] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6579'. [ 1755.135499][T28569] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6579'. [ 1755.260093][T28571] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6579'. [ 1755.622062][T28566] delete_channel: no stack [ 1755.879541][T28587] netlink: 209592 bytes leftover after parsing attributes in process `syz.4.6581'. [ 1756.131681][T28587] netlink: zone id is out of range [ 1756.535043][T28597] netlink: 'syz.2.6586': attribute type 10 has an invalid length. [ 1756.547330][T28597] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6586'. [ 1756.563749][T28597] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1756.987178][T28605] netlink: 4943 bytes leftover after parsing attributes in process `syz.1.6589'. [ 1757.061718][T28600] netlink: 'syz.0.6587': attribute type 10 has an invalid length. [ 1758.556977][T28637] netlink: 4943 bytes leftover after parsing attributes in process `syz.2.6596'. [ 1758.664480][T28643] syzkaller0: entered promiscuous mode [ 1758.675641][T28643] syzkaller0: entered allmulticast mode [ 1762.304104][T28670] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6605'. [ 1762.366063][T28668] netlink: 'syz.0.6606': attribute type 1 has an invalid length. [ 1762.403050][T28668] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.6606'. [ 1763.399056][T28705] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6616'. [ 1763.411509][T28701] netlink: 'syz.4.6613': attribute type 2 has an invalid length. [ 1763.510667][T28701] netlink: 'syz.4.6613': attribute type 8 has an invalid length. [ 1763.539480][T28701] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6613'. [ 1763.706972][T28714] netlink: 'syz.0.6617': attribute type 9 has an invalid length. [ 1763.742796][T28714] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.6617'. [ 1764.421519][T28719] netlink: 'syz.4.6619': attribute type 9 has an invalid length. [ 1764.429584][T28719] netlink: 45207 bytes leftover after parsing attributes in process `syz.4.6619'. [ 1764.658696][T28730] netlink: 'syz.4.6623': attribute type 10 has an invalid length. [ 1764.693206][T28730] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.6623'. [ 1764.740333][T28732] netlink: 'syz.0.6622': attribute type 11 has an invalid length. [ 1764.775287][T28732] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6622'. [ 1765.633651][T28758] netlink: 'syz.0.6631': attribute type 21 has an invalid length. [ 1766.298880][T28763] syzkaller0: entered promiscuous mode [ 1766.311144][T28763] syzkaller0: entered allmulticast mode [ 1766.923746][T28779] bridge_slave_1: left allmulticast mode [ 1766.929488][T28779] bridge_slave_1: left promiscuous mode [ 1766.940841][T28779] bridge0: port 2(bridge_slave_1) entered disabled state [ 1775.277938][T28810] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6645'. [ 1776.488259][T28818] syzkaller0: entered promiscuous mode [ 1776.495848][T28818] syzkaller0: entered allmulticast mode [ 1776.634724][T28829] lo: entered allmulticast mode [ 1776.649598][T28815] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6643'. [ 1776.660756][T28826] lo: entered promiscuous mode [ 1776.666341][T28826] lo: left allmulticast mode [ 1779.277581][T28840] netlink: 'syz.0.6651': attribute type 2 has an invalid length. [ 1779.286064][T28840] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6651'. [ 1779.295663][T28841] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6651'. [ 1779.432593][T28851] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.6654'. [ 1779.444725][T28851] netlink: zone id is out of range [ 1779.450932][T28851] netlink: zone id is out of range [ 1779.456890][T28851] netlink: zone id is out of range [ 1779.463020][T28851] netlink: zone id is out of range [ 1779.468503][T28851] netlink: zone id is out of range [ 1779.474694][T28851] netlink: zone id is out of range [ 1779.480330][T28851] netlink: zone id is out of range [ 1779.486150][T28851] netlink: zone id is out of range [ 1779.492091][T28851] netlink: zone id is out of range [ 1779.497429][T28851] netlink: zone id is out of range [ 1779.929994][T28866] syzkaller0: entered promiscuous mode [ 1779.935862][T28866] syzkaller0: entered allmulticast mode [ 1782.814826][T28881] netlink: 'syz.1.6662': attribute type 6 has an invalid length. [ 1782.824439][T28890] netlink: 'syz.4.6664': attribute type 3 has an invalid length. [ 1782.996251][T28895] syzkaller0: entered promiscuous mode [ 1783.007620][T28895] syzkaller0: entered allmulticast mode [ 1786.433434][T28925] syzkaller0: entered promiscuous mode [ 1786.439706][T28925] syzkaller0: entered allmulticast mode [ 1786.520099][T28923] syzkaller0: entered promiscuous mode [ 1786.526203][T28923] syzkaller0: entered allmulticast mode [ 1789.447947][T28946] netlink: 'syz.0.6676': attribute type 10 has an invalid length. [ 1789.481302][T28946] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1789.762253][T28966] netlink: 196 bytes leftover after parsing attributes in process `syz.4.6680'. [ 1790.208233][T20405] Bluetooth: hci1: unexpected event 0x0f length: 15 > 4 [ 1790.208299][T20405] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 1791.790325][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.796992][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.785957][T28974] netdevsim netdevsim0 ªªªªªª: renamed from netdevsim0 (while UP) [ 1793.830194][T28984] syzkaller0: entered promiscuous mode [ 1793.856622][T28984] syzkaller0: entered allmulticast mode [ 1799.086973][T29003] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6690'. [ 1799.175331][T29006] netlink: 'syz.0.6692': attribute type 21 has an invalid length. [ 1799.191145][T29006] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6692'. [ 1799.383059][T29013] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6693'. [ 1799.395098][T29013] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6693'. [ 1799.424596][T29014] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6693'. [ 1799.455356][T29013] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6693'. [ 1800.545080][T20405] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4 [ 1800.545149][T20405] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 1801.926514][T29040] netlink: 'syz.1.6709': attribute type 10 has an invalid length. [ 1801.957431][T29040] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6709'. [ 1801.974347][T29040] net_ratelimit: 80 callbacks suppressed [ 1801.974367][T29040] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1802.077946][T29041] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6701'. [ 1802.399267][T29052] delete_channel: no stack [ 1802.605410][T29048] syzkaller0: entered promiscuous mode [ 1802.680578][T29048] syzkaller0: entered allmulticast mode [ 1803.477657][T29073] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.6708'. [ 1803.492865][T29076] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.6708'. [ 1806.789471][T29100] netlink: 668 bytes leftover after parsing attributes in process `syz.1.6716'. [ 1806.800727][T29100] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1806.809549][T29100] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1807.132025][T29062] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.6706'. [ 1807.234883][T29109] tap0: tun_chr_ioctl cmd 1074025673 [ 1807.240383][T29109] tap0: tun_chr_ioctl cmd 1074025673 [ 1807.248496][T29110] tap0: tun_chr_ioctl cmd 1074025680 [ 1807.348409][T29114] netlink: 'syz.2.6721': attribute type 10 has an invalid length. [ 1807.631671][T29126] netlink: 'syz.1.6726': attribute type 8 has an invalid length. [ 1807.652155][T29126] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6726'. [ 1808.069917][T29138] netlink: 830 bytes leftover after parsing attributes in process `syz.2.6729'. [ 1808.105315][T29138] veth0_to_bond: entered promiscuous mode [ 1808.458244][T29134] syzkaller0: entered promiscuous mode [ 1808.482680][T29134] syzkaller0: entered allmulticast mode [ 1808.954405][T29162] netlink: 'syz.2.6736': attribute type 8 has an invalid length. [ 1808.978434][T29162] netlink: 'syz.2.6736': attribute type 6 has an invalid length. [ 1808.988844][T29162] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.6736'. [ 1811.443849][T29166] netlink: 4943 bytes leftover after parsing attributes in process `syz.1.6737'. [ 1812.165721][T29186] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.6743'. [ 1812.438016][T29197] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6745'. [ 1813.326841][T29217] netlink: 4943 bytes leftover after parsing attributes in process `syz.1.6749'. [ 1813.852753][T29235] pimreg0: tun_chr_ioctl cmd 1074812118 [ 1813.891312][T29235] pimreg0: tun_chr_ioctl cmd 35111 [ 1814.361814][T29250] netlink: 'syz.4.6759': attribute type 10 has an invalid length. [ 1814.391777][T29250] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6759'. [ 1814.401553][T29250] batadv0: entered promiscuous mode [ 1814.407118][T29250] batadv0: entered allmulticast mode [ 1814.429584][T29250] bridge0: port 3(batadv0) entered blocking state [ 1814.438077][T29250] bridge0: port 3(batadv0) entered disabled state [ 1814.509438][T29253] netlink: 'syz.2.6760': attribute type 9 has an invalid length. [ 1814.530674][T22958] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1814.540611][T22958] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1814.555724][T29253] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6760'. [ 1814.650178][T29258] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.6761'. [ 1814.651359][T29256] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.6761'. [ 1814.678161][T29258] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6761'. [ 1814.899562][T29266] netlink: 4943 bytes leftover after parsing attributes in process `syz.2.6763'. [ 1814.914998][T20405] Bluetooth: hci0: unexpected event 0x10 length: 15 > 1 [ 1814.916040][T24398] Bluetooth: hci0: hardware error 0x0f [ 1815.275690][T29274] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6767'. [ 1815.480012][T29279] netlink: 'syz.2.6769': attribute type 9 has an invalid length. [ 1815.555748][T29280] syz.4.6768: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 1815.594001][T29280] CPU: 1 PID: 29280 Comm: syz.4.6768 Not tainted syzkaller #0 [ 1815.601834][T29280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1815.612344][T29280] Call Trace: [ 1815.615681][T29280] [ 1815.618850][T29280] dump_stack_lvl+0x18c/0x250 [ 1815.623741][T29280] ? show_regs_print_info+0x20/0x20 [ 1815.629097][T29280] ? load_image+0x400/0x400 [ 1815.633776][T29280] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1815.640402][T29280] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1815.647111][T29280] warn_alloc+0x246/0x340 [ 1815.651545][T29280] ? stack_trace_save+0xaa/0x100 [ 1815.657091][T29280] ? zone_watermark_ok_safe+0x230/0x230 [ 1815.663313][T29280] ? kasan_set_track+0x5f/0x70 [ 1815.668259][T29280] ? kasan_set_track+0x4e/0x70 [ 1815.673442][T29280] ? __kasan_kmalloc+0x8f/0xa0 [ 1815.678459][T29280] ? xsk_init_queue+0xad/0x100 [ 1815.683299][T29280] ? xsk_setsockopt+0x4e5/0x760 [ 1815.688310][T29280] ? do_sock_setsockopt+0x175/0x1a0 [ 1815.693855][T29280] ? __x64_sys_setsockopt+0x182/0x200 [ 1815.699320][T29280] __vmalloc_node_range+0x126/0x1330 [ 1815.704823][T29280] ? free_vm_area+0x50/0x50 [ 1815.709435][T29280] vmalloc_user+0x74/0x80 [ 1815.713837][T29280] ? xskq_create+0xbf/0x170 [ 1815.718771][T29280] xskq_create+0xbf/0x170 [ 1815.723278][T29280] xsk_init_queue+0xad/0x100 [ 1815.728131][T29280] xsk_setsockopt+0x4e5/0x760 [ 1815.732893][T29280] ? xsk_poll+0x680/0x680 [ 1815.737337][T29280] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1815.743674][T29280] ? xsk_poll+0x680/0x680 [ 1815.748197][T29280] ? do_sock_setsockopt+0x15e/0x1a0 [ 1815.753487][T29280] ? xsk_poll+0x680/0x680 [ 1815.757991][T29280] do_sock_setsockopt+0x175/0x1a0 [ 1815.763192][T29280] ? __fdget+0x180/0x210 [ 1815.768045][T29280] __x64_sys_setsockopt+0x182/0x200 [ 1815.773412][T29280] do_syscall_64+0x55/0xa0 [ 1815.777891][T29280] ? clear_bhb_loop+0x40/0x90 [ 1815.782677][T29280] ? clear_bhb_loop+0x40/0x90 [ 1815.787795][T29280] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1815.793749][T29280] RIP: 0033:0x7fef2179c799 [ 1815.798372][T29280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1815.818776][T29280] RSP: 002b:00007fef226c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1815.827484][T29280] RAX: ffffffffffffffda RBX: 00007fef21a15fa0 RCX: 00007fef2179c799 [ 1815.835623][T29280] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 1815.844098][T29280] RBP: 00007fef21832bd9 R08: 0000000000000004 R09: 0000000000000000 [ 1815.852208][T29280] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1815.860408][T29280] R13: 00007fef21a16038 R14: 00007fef21a15fa0 R15: 00007fff48951a48 [ 1815.868708][T29280] [ 1815.958871][T29280] Mem-Info: [ 1816.082239][T29280] active_anon:13007 inactive_anon:0 isolated_anon:0 [ 1816.082239][T29280] active_file:21238 inactive_file:40586 isolated_file:0 [ 1816.082239][T29280] unevictable:768 dirty:118 writeback:0 [ 1816.082239][T29280] slab_reclaimable:10749 slab_unreclaimable:95414 [ 1816.082239][T29280] mapped:24880 shmem:1373 pagetables:601 [ 1816.082239][T29280] sec_pagetables:0 bounce:0 [ 1816.082239][T29280] kernel_misc_reclaimable:0 [ 1816.082239][T29280] free:1325766 free_pcp:9244 free_cma:0 [ 1816.129109][T29280] Node 0 active_anon:52028kB inactive_anon:0kB active_file:84952kB inactive_file:162140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99520kB dirty:472kB writeback:0kB shmem:3956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10604kB pagetables:2404kB sec_pagetables:0kB all_unreclaimable? no [ 1816.234219][T29280] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1816.302481][T29280] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1816.341267][T29280] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1816.349626][T29280] Node 0 DMA32 free:1387084kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:51988kB inactive_anon:0kB active_file:84952kB inactive_file:161316kB unevictable:1536kB writepending:472kB present:3129332kB managed:2586964kB mlocked:0kB bounce:0kB free_pcp:25604kB local_pcp:11344kB free_cma:0kB [ 1816.442313][T29280] lowmem_reserve[]: 0 0 0 0 0 [ 1816.452348][T29280] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1816.513114][T29280] lowmem_reserve[]: 0 0 0 0 0 [ 1816.517965][T29280] Node 1 Normal free:3900620kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:11044kB local_pcp:11044kB free_cma:0kB [ 1816.589649][T29280] lowmem_reserve[]: 0 0 0 0 0 [ 1816.598172][T29280] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1816.614014][T29280] Node 0 DMA32: 1*4kB (U) 1261*8kB (UME) 1188*16kB (UME) 1644*32kB (UME) 721*64kB (UME) 548*128kB (UME) 335*256kB (UME) 172*512kB (UME) 77*1024kB (UM) 27*2048kB (ME) 215*4096kB (UM) = 1386604kB [ 1816.637539][T29280] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1816.665152][T29280] Node 1 Normal: 253*4kB (UME) 57*8kB (UME) 29*16kB (UME) 252*32kB (UME) 95*64kB (UME) 14*128kB (UME) 1*256kB (M) 1*512kB (E) 1*1024kB (U) 1*2048kB (E) 947*4096kB (M) = 3900620kB [ 1816.720809][T29280] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1816.750620][T29280] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1816.760044][T29280] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1816.806401][T29280] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1816.833086][T29280] 63197 total pagecache pages [ 1816.848379][T29280] 0 pages in swap cache [ 1816.870101][T29280] Free swap = 124472kB [ 1816.884242][T29280] Total swap = 124996kB [ 1816.899615][T29280] 2097051 pages RAM [ 1816.916687][T29280] 0 pages HighMem/MovableOnly [ 1816.932453][T29280] 416924 pages reserved [ 1816.951087][T29280] 0 pages cma reserved [ 1816.988379][T24398] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1817.507694][T29296] __nla_validate_parse: 4 callbacks suppressed [ 1817.507717][T29296] netlink: 4943 bytes leftover after parsing attributes in process `syz.1.6773'. [ 1817.700693][T29301] sit0: left promiscuous mode [ 1817.708439][T29301] sit0: left allmulticast mode [ 1817.916284][T29304] delete_channel: no stack [ 1818.188477][T29319] netlink: 'syz.0.6779': attribute type 1 has an invalid length. [ 1818.244587][T29319] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.6779'. [ 1818.372883][T29328] netlink: 'syz.1.6782': attribute type 21 has an invalid length. [ 1818.424833][T29328] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6782'. [ 1819.654555][T29360] netlink: 4943 bytes leftover after parsing attributes in process `syz.1.6790'. [ 1819.784524][T29362] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6792'. [ 1819.796777][T29362] veth0_to_bond: entered promiscuous mode [ 1820.216090][T29375] netlink: 'syz.1.6796': attribute type 21 has an invalid length. [ 1821.155200][T29394] netlink: 4943 bytes leftover after parsing attributes in process `syz.2.6802'. [ 1822.752312][T29436] netlink: 4943 bytes leftover after parsing attributes in process `syz.1.6814'. [ 1824.862302][T29491] netlink: 'syz.1.6828': attribute type 10 has an invalid length. [ 1824.884138][T29491] netlink: 55 bytes leftover after parsing attributes in process `syz.1.6828'. [ 1825.411831][T29504] netlink: 4943 bytes leftover after parsing attributes in process `syz.4.6826'. [ 1826.106043][T29498] netlink: 'syz.0.6829': attribute type 10 has an invalid length. [ 1826.123085][T29498] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6829'. [ 1826.147590][T29510] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6831'. [ 1826.723579][T29536] netlink: 'syz.0.6838': attribute type 3 has an invalid length. [ 1826.775801][T29536] netlink: 'syz.0.6838': attribute type 1 has an invalid length. [ 1826.800581][T29536] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.6838'. [ 1827.830287][T29559] netlink: 4943 bytes leftover after parsing attributes in process `syz.1.6844'. [ 1827.969767][T29563] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6843'. [ 1827.981132][T29563] openvswitch: netlink: Key type 29 is not supported [ 1828.676604][T29561] delete_channel: no stack [ 1828.975347][T29595] @0Ù: renamed from bond_slave_1 (while UP) [ 1829.192569][T29606] netlink: 4943 bytes leftover after parsing attributes in process `syz.0.6856'. [ 1830.526511][T29625] netlink: 'syz.1.6864': attribute type 10 has an invalid length. [ 1831.518918][T29641] netlink: 4943 bytes leftover after parsing attributes in process `syz.2.6869'. [ 1832.000803][T29646] netlink: 'syz.1.6871': attribute type 1 has an invalid length. [ 1832.009322][T29646] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.6871'. [ 1832.046341][T29647] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6870'. [ 1835.381426][T29647] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6870'. [ 1835.391430][T29649] netlink: 'syz.1.6871': attribute type 10 has an invalid length. [ 1835.404546][T29649] mac80211_hwsim hwsim45 wlan1: left promiscuous mode [ 1835.429262][T29649] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1835.451774][T29644] netlink: 'syz.4.6870': attribute type 33 has an invalid length. [ 1835.459685][T29644] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6870'. [ 1836.511571][T29699] netlink: 'syz.0.6882': attribute type 10 has an invalid length. [ 1836.545496][T29699] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6882'. [ 1836.599352][T29699] team0: entered promiscuous mode [ 1836.612694][T29699] team_slave_1: entered promiscuous mode [ 1836.694650][T29699] dummy0: entered promiscuous mode [ 1836.728654][T29699] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1836.742542][T29699] geneve1: entered promiscuous mode [ 1836.751964][T29699] team0: entered allmulticast mode [ 1836.760423][T29699] team_slave_1: entered allmulticast mode [ 1836.797039][T29699] dummy0: entered allmulticast mode [ 1836.809948][T29699] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1836.818353][T29699] geneve1: entered allmulticast mode [ 1836.930528][T29699] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1838.027488][T29744] IPv6: NLM_F_CREATE should be specified when creating new route [ 1838.560546][T29749] cgroup: fork rejected by pids controller in /syz0 [ 1839.454564][T29775] netlink: 'syz.2.6905': attribute type 8 has an invalid length. [ 1839.484648][T29775] netlink: 'syz.2.6905': attribute type 1 has an invalid length. [ 1839.515728][T29775] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6905'. [ 1840.218843][T21373] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1840.516805][T21373] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1840.804782][T21373] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1841.150746][T21373] bond0: (slave ªªªªªª): Releasing backup interface [ 1841.558663][T29807] netlink: 'syz.4.6915': attribute type 3 has an invalid length. [ 1841.594167][T29807] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.6915'. [ 1841.624797][T21373] tipc: Left network mode [ 1841.752259][T20405] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1841.765152][T20405] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1841.771057][T29807] netlink: 'syz.4.6915': attribute type 10 has an invalid length. [ 1841.822008][T20405] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1841.829590][T29807] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6915'. [ 1841.850812][T20405] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1841.860847][T20405] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1841.868632][T20405] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1841.878643][T29807] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1842.923806][T29846] netlink: 4943 bytes leftover after parsing attributes in process `syz.4.6919'. [ 1843.399601][T29857] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6922'. [ 1843.423346][T29813] chnl_net:caif_netlink_parms(): no params data found [ 1843.495169][T29859] netlink: 'syz.4.6923': attribute type 10 has an invalid length. [ 1843.512113][T29859] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6923'. [ 1843.531844][T29859] vcan0: entered promiscuous mode [ 1843.544644][T29859] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 1843.767198][T29857] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 1843.941407][T20405] Bluetooth: hci2: command tx timeout [ 1844.056131][T29813] bridge0: port 1(bridge_slave_0) entered blocking state [ 1844.063683][T29813] bridge0: port 1(bridge_slave_0) entered disabled state [ 1844.072085][T29813] bridge_slave_0: entered allmulticast mode [ 1844.080094][T29813] bridge_slave_0: entered promiscuous mode [ 1844.090546][T29813] bridge0: port 2(bridge_slave_1) entered blocking state [ 1844.097756][T29813] bridge0: port 2(bridge_slave_1) entered disabled state [ 1844.105665][T29813] bridge_slave_1: entered allmulticast mode [ 1844.113578][T29813] bridge_slave_1: entered promiscuous mode [ 1844.177998][T29867] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6925'. [ 1844.322827][T29871] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1844.330716][T29871] IPv6: NLM_F_CREATE should be set when creating new route [ 1844.575856][T29813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1844.651175][T29813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1844.893468][T29881] -1: renamed from syzkaller0 [ 1845.015010][T29813] team0: Port device team_slave_0 added [ 1845.187251][T29901] netlink: 212912 bytes leftover after parsing attributes in process `syz.4.6932'. [ 1845.212265][T29813] team0: Port device team_slave_1 added [ 1845.220797][T29901] openvswitch: netlink: IP tunnel dst address not specified [ 1845.273414][T29902] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1845.603938][T21373] hsr_slave_0: left promiscuous mode [ 1845.624157][T21373] hsr_slave_1: left promiscuous mode [ 1846.013237][T21373] geneve1 (unregistering): left promiscuous mode [ 1846.020782][T20405] Bluetooth: hci2: command tx timeout [ 1846.028033][T21373] geneve1 (unregistering): left allmulticast mode [ 1846.042424][T21373] team0 (unregistering): Port device geneve1 removed [ 1846.083884][T21373] net veth1_virt_wifi virt_wifi0 (unregistering): left promiscuous mode [ 1846.095210][T21373] net veth1_virt_wifi virt_wifi0 (unregistering): left allmulticast mode [ 1846.106851][T21373] team0 (unregistering): Port device virt_wifi0 removed [ 1846.465731][T21373] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1846.543592][T21373] team_slave_1 (unregistering): left promiscuous mode [ 1846.551011][T21373] team_slave_1 (unregistering): left allmulticast mode [ 1846.559406][T21373] team0 (unregistering): Port device team_slave_1 removed [ 1846.711022][T21373] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1846.801547][T21373] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1847.178470][T21373] dummy0 (unregistering): left promiscuous mode [ 1847.187928][T21373] dummy0 (unregistering): left allmulticast mode [ 1847.198041][T21373] team0 (unregistering): Port device dummy0 removed [ 1847.288264][T21373] bond0 (unregistering): Released all slaves [ 1847.336019][T29813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1847.343475][T29813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1847.370133][T29813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1847.390373][T29920] netlink: 'syz.2.6937': attribute type 10 has an invalid length. [ 1847.434964][T29920] team0: Port device macvlan0 added [ 1847.452458][T29813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1847.459636][T29813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1847.487242][T29813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1847.693522][T29813] hsr_slave_0: entered promiscuous mode [ 1847.711648][T29813] hsr_slave_1: entered promiscuous mode [ 1847.728908][T29813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1847.750491][T29813] Cannot create hsr debugfs directory [ 1847.823677][T29929] pim6reg1: entered promiscuous mode [ 1847.829087][T29929] pim6reg1: entered allmulticast mode [ 1847.837234][T29925] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.6941'. [ 1848.110527][T20405] Bluetooth: hci2: command tx timeout [ 1849.859776][T29964] netlink: 'syz.2.6946': attribute type 10 has an invalid length. [ 1849.892515][T29964] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1850.128986][T29967] netlink: 3403 bytes leftover after parsing attributes in process `syz.4.6947'. [ 1850.161438][T29813] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1850.179650][T29813] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1850.181929][T20405] Bluetooth: hci2: command tx timeout [ 1850.242095][T29813] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1850.276782][T29973] netlink: 3403 bytes leftover after parsing attributes in process `syz.1.6948'. [ 1850.312423][T29813] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1850.655480][T29983] netlink: 'syz.4.6950': attribute type 3 has an invalid length. [ 1850.672480][T29813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1850.694052][T29983] netlink: 'syz.4.6950': attribute type 1 has an invalid length. [ 1850.717072][T29983] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.6950'. [ 1850.733799][T29813] 8021q: adding VLAN 0 to HW filter on device team0 [ 1850.784077][T21373] bridge0: port 1(bridge_slave_0) entered blocking state [ 1850.791400][T21373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1850.861269][T21373] bridge0: port 2(bridge_slave_1) entered blocking state [ 1850.868507][T21373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1851.023499][T29813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1851.364870][T30011] netlink: 'syz.4.6957': attribute type 3 has an invalid length. [ 1851.381577][T30011] netlink: 'syz.4.6957': attribute type 1 has an invalid length. [ 1851.400946][T30011] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.6957'. [ 1851.714802][T29813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1852.146123][T29813] veth0_vlan: entered promiscuous mode [ 1852.246001][T29813] veth1_vlan: entered promiscuous mode [ 1852.254143][T30025] netlink: 3403 bytes leftover after parsing attributes in process `syz.4.6960'. [ 1852.614812][T30028] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1852.721821][T29813] veth0_macvtap: entered promiscuous mode [ 1852.774172][T29813] veth1_macvtap: entered promiscuous mode [ 1852.918534][T29813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1853.013383][T29813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1853.052734][T29813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1853.114479][T29813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1853.189752][T29813] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1853.250353][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.258117][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.280484][T29813] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1853.289547][T29813] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1853.391319][T29813] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1856.180105][T30055] ref_ctr_offset mismatch. inode: 0x55b offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 1856.343171][T22959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1856.360615][T22959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1856.513117][T22959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1856.541597][T22959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1856.769984][T30073] pimreg0: tun_chr_ioctl cmd 1074025681 [ 1856.842202][T30080] netlink: 'syz.2.6968': attribute type 2 has an invalid length. [ 1856.863404][T30080] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.6968'. [ 1856.934002][T30080] netlink: 'syz.2.6968': attribute type 27 has an invalid length. [ 1857.588514][T30104] netlink: 'syz.1.6972': attribute type 7 has an invalid length. [ 1857.622118][T30104] netlink: 16174 bytes leftover after parsing attributes in process `syz.1.6972'. [ 1858.997868][T30154] netlink: 'syz.1.6984': attribute type 29 has an invalid length. [ 1859.024911][T30154] netlink: 'syz.1.6984': attribute type 29 has an invalid length. [ 1859.049528][T30157] netlink: 'syz.1.6984': attribute type 29 has an invalid length. [ 1859.080003][T30155] netlink: 'syz.1.6984': attribute type 29 has an invalid length. [ 1859.098874][T30154] netlink: 'syz.1.6984': attribute type 29 has an invalid length. [ 1859.191146][T30155] netlink: 'syz.1.6984': attribute type 29 has an invalid length. [ 1859.401078][T30164] netlink: 'syz.0.6987': attribute type 33 has an invalid length. [ 1859.409286][T30164] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6987'. [ 1859.844472][T30180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1859.909880][T30185] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6994'. [ 1860.059879][T30191] syzkaller0: entered promiscuous mode [ 1860.066690][T30191] syzkaller0: entered allmulticast mode [ 1860.082106][T30195] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.6996'. [ 1860.114072][T30198] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.6997'. [ 1860.169046][T30199] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.6997'. [ 1860.345984][T30205] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7000'. [ 1860.412744][T30206] netlink: 4943 bytes leftover after parsing attributes in process `syz.0.6999'. [ 1862.857157][T30198] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.6997'. [ 1862.867855][T30205] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7000'. [ 1863.604174][T30239] validate_nla: 3 callbacks suppressed [ 1863.604193][T30239] netlink: 'syz.4.7009': attribute type 33 has an invalid length. [ 1863.632024][T30239] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7009'. [ 1863.676341][T30245] netlink: 'syz.2.7010': attribute type 39 has an invalid length. [ 1863.737515][T30252] netlink: 21 bytes leftover after parsing attributes in process `syz.1.7013'. [ 1863.749692][T30252] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1863.787744][T30253] netlink: 4943 bytes leftover after parsing attributes in process `syz.0.7012'. [ 1865.198927][T30275] netlink: 'syz.0.7020': attribute type 2 has an invalid length. [ 1865.230688][T30275] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7020'. [ 1865.547755][T30271] €Â0: renamed from batadv_slave_1 (while UP) [ 1865.900497][T30288] netlink: 'syz.4.7023': attribute type 2 has an invalid length. [ 1865.908692][T30292] netlink: 'syz.4.7023': attribute type 6 has an invalid length. [ 1865.930577][T30292] netlink: 168 bytes leftover after parsing attributes in process `syz.4.7023'. [ 1865.942811][T30275] netlink: 'syz.0.7020': attribute type 21 has an invalid length. [ 1866.313450][T30302] netlink: 'syz.1.7026': attribute type 33 has an invalid length. [ 1866.332201][T30302] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7026'. [ 1866.459857][T30309] netlink: 'syz.0.7029': attribute type 10 has an invalid length. [ 1866.502598][T30309] veth1_macvtap: left promiscuous mode [ 1866.547320][T30311] netlink: 209592 bytes leftover after parsing attributes in process `syz.4.7030'. [ 1866.567634][T30313] hsr0: VLAN not yet supported [ 1866.722565][T30313] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1866.754806][T30311] netlink: 'syz.4.7030': attribute type 6 has an invalid length. [ 1866.767647][T30311] netlink: 164 bytes leftover after parsing attributes in process `syz.4.7030'. [ 1866.971105][T30321] netlink: 'syz.2.7033': attribute type 10 has an invalid length. [ 1867.064469][T30321] team0: Device wg1 is of different type [ 1867.107850][T30324] team0: Device wg1 is of different type [ 1867.797283][T30351] bridge0: port 3(batadv0) entered disabled state [ 1867.834426][T30351] bridge_slave_1: left allmulticast mode [ 1867.840363][T30351] bridge_slave_1: left promiscuous mode [ 1867.874846][T30351] bridge0: port 2(bridge_slave_1) entered disabled state [ 1867.896502][T30351] bridge_slave_0: left allmulticast mode [ 1867.905962][T30351] bridge_slave_0: left promiscuous mode [ 1867.914076][T30351] bridge0: port 1(bridge_slave_0) entered disabled state [ 1868.260128][T30362] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1870.522101][T30406] netlink: 56843 bytes leftover after parsing attributes in process `syz.4.7052'. [ 1871.112028][T30417] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.7055'. [ 1871.322729][T30420] mac80211_hwsim hwsim53 wlan1: left promiscuous mode [ 1872.896465][T30452] validate_nla: 3 callbacks suppressed [ 1872.896506][T30452] netlink: 'syz.1.7064': attribute type 16 has an invalid length. [ 1872.934817][T30452] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7064'. [ 1872.945400][T30452] veth1_macvtap: entered allmulticast mode [ 1873.707373][T30469] netlink: 'syz.0.7065': attribute type 6 has an invalid length. [ 1873.823310][T30469] netlink: 'syz.0.7065': attribute type 21 has an invalid length. [ 1874.257029][T30478] netlink: 'syz.2.7071': attribute type 10 has an invalid length. [ 1874.290883][T30478] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7071'. [ 1874.331080][T30478] €Â0: entered promiscuous mode [ 1874.412045][T30478] netlink: 'syz.2.7071': attribute type 39 has an invalid length. [ 1874.747437][T30491] netlink: 4943 bytes leftover after parsing attributes in process `syz.1.7076'. [ 1875.215720][T30503] netlink: 4943 bytes leftover after parsing attributes in process `syz.0.7077'. [ 1875.743175][T30512] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7081'. [ 1875.765237][T30512] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7081'. [ 1875.797201][T30512] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7081'. [ 1876.818082][T30536] netlink: 4943 bytes leftover after parsing attributes in process `syz.1.7088'. [ 1878.108003][T30562] netlink: 'syz.0.7101': attribute type 1 has an invalid length. [ 1878.141123][T30562] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.7101'. [ 1878.298220][T30566] netlink: 4943 bytes leftover after parsing attributes in process `syz.4.7093'. [ 1878.416459][T30562] netlink: 'syz.0.7101': attribute type 2 has an invalid length. [ 1878.430728][T30562] netlink: 'syz.0.7101': attribute type 8 has an invalid length. [ 1878.442390][T30568] netlink: 'syz.1.7094': attribute type 29 has an invalid length. [ 1878.459575][T30562] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7101'. [ 1879.039749][T30568] netlink: 'syz.1.7094': attribute type 29 has an invalid length. [ 1879.063810][T30570] netlink: 'syz.1.7094': attribute type 29 has an invalid length. [ 1879.173525][T30573] netlink: 'syz.1.7094': attribute type 29 has an invalid length. [ 1880.353598][T30598] delete_channel: no stack [ 1880.393704][T30600] netlink: 4943 bytes leftover after parsing attributes in process `syz.1.7100'. [ 1880.991175][T30604] netlink: 'syz.4.7103': attribute type 2 has an invalid length. [ 1881.058056][T30604] netlink: 'syz.4.7103': attribute type 1 has an invalid length. [ 1881.117654][T30604] netlink: 'syz.4.7103': attribute type 8 has an invalid length. [ 1881.170511][T30604] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7103'. [ 1881.924191][T24398] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1881.936893][T24398] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1881.950542][T24398] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1881.965147][T24398] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1881.990666][T24398] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1881.998450][T24398] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1882.426460][ T1096] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1882.545509][T30623] netlink: 4943 bytes leftover after parsing attributes in process `syz.2.7106'. [ 1882.597135][ T1096] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1882.821263][ T5758] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 1882.895270][ T1096] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1882.987016][ T1096] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1883.184986][T30609] chnl_net:caif_netlink_parms(): no params data found [ 1883.240740][T30641] netlink: 'syz.2.7113': attribute type 1 has an invalid length. [ 1883.260610][T30641] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.7113'. [ 1883.392971][T30639] netlink: 4943 bytes leftover after parsing attributes in process `syz.0.7112'. [ 1883.484057][T30641] netlink: 'syz.2.7113': attribute type 2 has an invalid length. [ 1883.513128][T30641] netlink: 'syz.2.7113': attribute type 8 has an invalid length. [ 1883.541026][T30641] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7113'. [ 1883.714974][T30609] bridge0: port 1(bridge_slave_0) entered blocking state [ 1883.724479][T30609] bridge0: port 1(bridge_slave_0) entered disabled state [ 1883.735599][T30609] bridge_slave_0: entered allmulticast mode [ 1883.745718][T30609] bridge_slave_0: entered promiscuous mode [ 1883.787360][T30609] bridge0: port 2(bridge_slave_1) entered blocking state [ 1883.805062][T30609] bridge0: port 2(bridge_slave_1) entered disabled state [ 1883.813954][T30609] bridge_slave_1: entered allmulticast mode [ 1883.829208][T30609] bridge_slave_1: entered promiscuous mode [ 1883.837359][ T1096] tipc: Left network mode [ 1884.100825][T24398] Bluetooth: hci0: command tx timeout [ 1884.554975][T30609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1884.592819][T30609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1884.758118][T30609] team0: Port device team_slave_0 added [ 1885.144705][T30609] team0: Port device team_slave_1 added [ 1886.040116][T30609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1886.050579][T30609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1886.087316][T30609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1886.186357][T24398] Bluetooth: hci0: command tx timeout [ 1886.228910][T30609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1886.250659][T30609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1886.310252][T30609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1887.643680][T30609] hsr_slave_0: entered promiscuous mode [ 1887.693485][T30609] hsr_slave_1: entered promiscuous mode [ 1887.709553][T30609] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1887.723054][T30609] Cannot create hsr debugfs directory [ 1888.260605][T24398] Bluetooth: hci0: command tx timeout [ 1889.283142][T30732] netlink: 'syz.2.7124': attribute type 4 has an invalid length. [ 1889.381969][T30732] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7124'. [ 1890.340709][T24398] Bluetooth: hci0: command tx timeout [ 1890.575046][ T1096] bond0: (slave wlan1): Releasing backup interface [ 1891.314208][ T1096] hsr_slave_0: left promiscuous mode [ 1891.328615][ T1096] hsr_slave_1: left promiscuous mode [ 1891.346692][ T1096] bridge_slave_1: left allmulticast mode [ 1891.365999][ T1096] bridge_slave_1: left promiscuous mode [ 1891.384507][ T1096] bridge0: port 2(bridge_slave_1) entered disabled state [ 1891.415693][ T1096] bridge_slave_0: left allmulticast mode [ 1891.443739][ T1096] bridge_slave_0: left promiscuous mode [ 1891.465157][ T1096] bridge0: port 1(bridge_slave_0) entered disabled state [ 1891.568776][ T1096] veth0_macvtap: left promiscuous mode [ 1892.573738][ T1096] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1892.639711][ T1096] team0 (unregistering): Port device team_slave_1 removed [ 1892.699336][ T1096] team0 (unregistering): Port device C removed [ 1892.755019][ T1096] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 1892.815478][ T1096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1893.154613][ T1096] bond0 (unregistering): (slave team0): Releasing backup interface [ 1893.200653][ T1096] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1893.210598][ T1096] bond0 (unregistering): Released all slaves [ 1893.330215][T30763] netlink: 'syz.0.7134': attribute type 10 has an invalid length. [ 1893.338305][T30763] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7134'. [ 1893.349253][T30763] batman_adv: batadv0: Adding interface: veth0_vlan [ 1893.355992][T30763] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1893.384545][T30763] batman_adv: batadv0: Interface activated: veth0_vlan [ 1894.369758][T30778] netdevsim netdevsim2: Direct firmware load for Ö failed with error -2 [ 1894.390437][T30778] netdevsim netdevsim2: Falling back to sysfs fallback for: Ö [ 1895.243266][T30609] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1895.267006][T30609] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1895.306518][T30609] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1895.434153][T30609] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1896.555633][T30609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1896.759584][T30609] 8021q: adding VLAN 0 to HW filter on device team0 [ 1896.788954][T21373] bridge0: port 1(bridge_slave_0) entered blocking state [ 1896.796256][T21373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1896.808172][T21373] bridge0: port 2(bridge_slave_1) entered blocking state [ 1896.815561][T21373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1898.430223][T30609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1898.735803][T30609] veth0_vlan: entered promiscuous mode [ 1898.809436][T30609] veth1_vlan: entered promiscuous mode [ 1898.952443][T30609] veth0_macvtap: entered promiscuous mode [ 1898.995202][T30609] veth1_macvtap: entered promiscuous mode [ 1899.149028][T30609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1899.200898][T30609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1899.232931][T30609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1899.283091][T30609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1899.320721][T30609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1899.334111][T30609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1899.345812][T30609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1899.366652][T30609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1899.528384][T30609] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1899.557972][T30609] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1899.578605][T30609] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1899.593453][T30609] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1899.985579][T30861] netlink: 4943 bytes leftover after parsing attributes in process `syz.0.7144'. [ 1900.083270][T22959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1900.121708][T22959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1900.229508][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1900.251398][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1900.489876][T30877] netlink: 'syz.1.7105': attribute type 21 has an invalid length. [ 1900.507924][T30877] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7105'. [ 1900.862004][T30893] €Â0: renamed from batadv_slave_1 (while UP) [ 1901.207560][T30904] netdevsim netdevsim4: Direct firmware load for Ö failed with error -2 [ 1901.263610][T30904] netdevsim netdevsim4: Falling back to sysfs fallback for: Ö [ 1901.893590][T24398] Bluetooth: hci0: ISO packet for unknown connection handle 3846 [ 1909.037002][T31045] syzkaller0: entered promiscuous mode [ 1909.058405][T31045] syzkaller0: entered allmulticast mode [ 1913.028658][T31090] netlink: 'syz.4.7197': attribute type 29 has an invalid length. [ 1913.048950][T31090] netlink: 'syz.4.7197': attribute type 29 has an invalid length. [ 1913.069129][T31091] netlink: 'syz.4.7197': attribute type 29 has an invalid length. [ 1914.668844][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.683844][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1916.857685][T31133] netlink: 4079 bytes leftover after parsing attributes in process `syz.1.7210'. [ 1917.305486][T31127] netlink: 'syz.4.7209': attribute type 21 has an invalid length. [ 1917.373494][T31127] netlink: 'syz.4.7209': attribute type 1 has an invalid length. [ 1917.403112][T31127] netlink: 144 bytes leftover after parsing attributes in process `syz.4.7209'. [ 1917.433409][T31129] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.7209'. [ 1917.453266][T31129] bridge_slave_1: default FDB implementation only supports local addresses [ 1920.167114][T31149] netlink: 'syz.4.7214': attribute type 10 has an invalid length. [ 1920.184866][T31149] 8021q: adding VLAN 0 to HW filter on device team0 [ 1920.202925][T31149] bond0: (slave team0): Enslaving as an active interface with an up link [ 1920.239678][T31153] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7213'. [ 1920.260896][T31155] netlink: 188 bytes leftover after parsing attributes in process `syz.2.7212'. [ 1920.642440][T31169] netlink: 'syz.1.7218': attribute type 2 has an invalid length. [ 1921.458154][T31193] netlink: 'syz.4.7223': attribute type 2 has an invalid length. [ 1921.580588][T31193] netlink: 'syz.4.7223': attribute type 4 has an invalid length. [ 1921.588734][T31193] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7223'. [ 1921.960748][T31198] netlink: 11254 bytes leftover after parsing attributes in process `syz.0.7226'. [ 1922.639943][T31222] netlink: 'syz.1.7235': attribute type 2 has an invalid length. [ 1922.694812][T31222] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7235'. [ 1922.790125][T31221] netlink: 4079 bytes leftover after parsing attributes in process `syz.2.7234'. [ 1924.950307][T31266] netlink: 'syz.1.7246': attribute type 17 has an invalid length. [ 1924.973806][T31266] netlink: 148 bytes leftover after parsing attributes in process `syz.1.7246'. [ 1925.122939][T31269] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.7247'. [ 1926.309299][T31279] netlink: 'syz.1.7251': attribute type 1 has an invalid length. [ 1926.319694][T31279] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.7251'. [ 1926.378261][T31276] netlink: 4079 bytes leftover after parsing attributes in process `syz.4.7249'. [ 1927.347373][T31302] netlink: 'syz.0.7256': attribute type 39 has an invalid length. [ 1928.846774][T31333] netlink: 668 bytes leftover after parsing attributes in process `syz.4.7266'. [ 1928.868045][T31333] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1928.972594][T31333] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1929.164729][T31349] netlink: 'syz.4.7271': attribute type 21 has an invalid length. [ 1929.993867][T31360] lo: entered promiscuous mode [ 1930.152379][T31360] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.7273'. [ 1930.844521][T31387] netlink: 'syz.2.7280': attribute type 10 has an invalid length. [ 1930.855418][T31387] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7280'. [ 1930.874453][T31387] bond0: entered promiscuous mode [ 1930.888991][T31387] bond_slave_0: entered promiscuous mode [ 1930.910171][T31387] bond_slave_1: entered promiscuous mode [ 1930.945959][T31387] mac80211_hwsim hwsim53 wlan1: entered promiscuous mode [ 1930.962094][T31387] bridge_slave_1: entered promiscuous mode [ 1931.136675][T31395] netlink: 'syz.4.7282': attribute type 1 has an invalid length. [ 1931.194029][T31395] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.7282'. [ 1931.572757][ C0] [ 1931.572770][ C0] ================================ [ 1931.572777][ C0] WARNING: inconsistent lock state [ 1931.572795][ C0] syzkaller #0 Not tainted [ 1931.572807][ C0] -------------------------------- [ 1931.572813][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 1931.572823][ C0] syz.0.7286/31407 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 1931.572846][ C0] ffff888066403620 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300 [ 1931.572904][ C0] {INITIAL USE} state was registered at: [ 1931.572912][ C0] lock_acquire+0x19e/0x420 [ 1931.572935][ C0] _raw_spin_lock+0x2e/0x40 [ 1931.572963][ C0] htab_lock_bucket+0x17d/0x300 [ 1931.572983][ C0] htab_lru_map_delete_elem+0x1a4/0x650 [ 1931.573004][ C0] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 1931.573024][ C0] bpf_overflow_handler+0x1fc/0x510 [ 1931.573051][ C0] __perf_event_overflow+0x447/0x630 [ 1931.573072][ C0] perf_swevent_event+0x324/0x630 [ 1931.573092][ C0] perf_bp_event+0x2a7/0x380 [ 1931.573112][ C0] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 1931.573141][ C0] notifier_call_chain+0x197/0x380 [ 1931.573165][ C0] atomic_notifier_call_chain+0xda/0x180 [ 1931.573189][ C0] notify_die+0x145/0x1a0 [ 1931.573211][ C0] notify_debug+0x2e/0x50 [ 1931.573227][ C0] noist_exc_debug+0x77/0x120 [ 1931.573244][ C0] asm_exc_debug+0x33/0x40 [ 1931.573264][ C0] irq event stamp: 2576 [ 1931.573271][ C0] hardirqs last enabled at (2575): [] syscall_enter_from_user_mode+0x25/0x80 [ 1931.573301][ C0] hardirqs last disabled at (2576): [] exc_debug+0x73/0x140 [ 1931.573324][ C0] softirqs last enabled at (2520): [] do_ipv6_setsockopt+0x302e/0x3e20 [ 1931.573362][ C0] softirqs last disabled at (2518): [] release_sock+0x2f/0x1c0 [ 1931.573389][ C0] [ 1931.573389][ C0] other info that might help us debug this: [ 1931.573396][ C0] Possible unsafe locking scenario: [ 1931.573396][ C0] [ 1931.573402][ C0] CPU0 [ 1931.573405][ C0] ---- [ 1931.573410][ C0] lock(&htab->lockdep_key); [ 1931.573424][ C0] [ 1931.573428][ C0] lock(&htab->lockdep_key); [ 1931.573440][ C0] [ 1931.573440][ C0] *** DEADLOCK *** [ 1931.573440][ C0] [ 1931.573445][ C0] no locks held by syz.0.7286/31407. [ 1931.573454][ C0] [ 1931.573454][ C0] stack backtrace: [ 1931.573461][ C0] CPU: 0 PID: 31407 Comm: syz.0.7286 Not tainted syzkaller #0 [ 1931.573481][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1931.573494][ C0] Call Trace: [ 1931.573503][ C0] <#DB> [ 1931.573512][ C0] dump_stack_lvl+0x18c/0x250 [ 1931.573549][ C0] ? show_regs_print_info+0x20/0x20 [ 1931.573590][ C0] ? print_usage_bug+0x475/0x690 [ 1931.573615][ C0] ? verify_lock_unused+0x18/0x140 [ 1931.573646][ C0] lock_acquire+0x2c2/0x420 [ 1931.573668][ C0] ? look_up_lock_class+0x75/0x140 [ 1931.573696][ C0] ? htab_lock_bucket+0x17d/0x300 [ 1931.573724][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1931.573769][ C0] _raw_spin_lock+0x2e/0x40 [ 1931.573791][ C0] ? htab_lock_bucket+0x17d/0x300 [ 1931.573813][ C0] htab_lock_bucket+0x17d/0x300 [ 1931.573842][ C0] ? htab_lru_map_delete_node+0x760/0x760 [ 1931.573872][ C0] ? verify_lock_unused+0x18/0x140 [ 1931.573900][ C0] ? jhash+0x34e/0x740 [ 1931.573926][ C0] htab_lru_map_delete_elem+0x1a4/0x650 [ 1931.573965][ C0] ? htab_lru_map_update_elem+0x990/0x990 [ 1931.573989][ C0] ? perf_callchain+0x220/0x220 [ 1931.574012][ C0] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1931.574053][ C0] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 1931.574078][ C0] bpf_overflow_handler+0x1fc/0x510 [ 1931.574114][ C0] ? bpf_overflow_handler+0xde/0x510 [ 1931.574143][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 1931.574169][ C0] ? lock_release+0xb5/0x8c0 [ 1931.574198][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 1931.574227][ C0] __perf_event_overflow+0x447/0x630 [ 1931.574260][ C0] perf_swevent_event+0x324/0x630 [ 1931.574288][ C0] ? trace_call_bpf+0x5e9/0x6c0 [ 1931.574318][ C0] ? perf_tp_event+0x1450/0x1450 [ 1931.574340][ C0] ? perf_trace_lock+0x198/0x3b0 [ 1931.574385][ C0] perf_bp_event+0x2a7/0x380 [ 1931.574418][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 1931.574484][ C0] ? lock_acquire+0x2c2/0x420 [ 1931.574519][ C0] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 1931.574552][ C0] notifier_call_chain+0x197/0x380 [ 1931.574582][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 1931.574612][ C0] atomic_notifier_call_chain+0xda/0x180 [ 1931.574642][ C0] notify_die+0x145/0x1a0 [ 1931.574672][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 1931.574708][ C0] ? rcu_is_watching+0x15/0xb0 [ 1931.574740][ C0] notify_debug+0x2e/0x50 [ 1931.574758][ C0] exc_debug+0xde/0x140 [ 1931.574780][ C0] asm_exc_debug+0x1e/0x40 [ 1931.574802][ C0] RIP: 0010:iovec_from_user+0x102/0x240 [ 1931.574835][ C0] Code: 01 e3 0f 88 2a 01 00 00 4c 39 e3 0f 82 21 01 00 00 0f 01 cb 0f ae e8 49 ff cf 48 8b 1c 24 49 89 dd 49 8b 6c 24 08 4d 8b 34 24 <31> ff 48 89 ee e8 f4 dd 5e fd 48 85 ed 0f 88 ce 00 00 00 4c 89 e8 [ 1931.574853][ C0] RSP: 0018:ffffc90005957a58 EFLAGS: 00040202 [ 1931.574871][ C0] RAX: ffffffff84284277 RBX: ffffc90005957cc0 RCX: ffff88802fe89e00 [ 1931.574887][ C0] RDX: 0000000000000002 RSI: 0000200000000300 RDI: 0000200000000320 [ 1931.574902][ C0] RBP: 0000000000000002 R08: 0000000000000000 R09: ffffc90005957e30 [ 1931.574916][ C0] R10: ffffc90005957e70 R11: fffff52000b2afd0 R12: 0000200000000300 [ 1931.574930][ C0] R13: ffffc90005957cc0 R14: 0000200000000180 R15: 0000000000000001 [ 1931.574964][ C0] ? iovec_from_user+0xd7/0x240 [ 1931.575005][ C0] [ 1931.575012][ C0] [ 1931.575026][ C0] __import_iovec+0x13d/0x850 [ 1931.575057][ C0] ? __might_fault+0xc6/0x120 [ 1931.575087][ C0] import_iovec+0x73/0xa0 [ 1931.575112][ C0] ___sys_sendmsg+0x256/0x360 [ 1931.575142][ C0] ? __sys_sendmsg+0x2a0/0x2a0 [ 1931.575192][ C0] ? debug_mutex_init+0x38/0x70 [ 1931.575246][ C0] __se_sys_sendmsg+0x1c2/0x2b0 [ 1931.575271][ C0] ? __x64_sys_sendmsg+0x80/0x80 [ 1931.575312][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1931.575342][ C0] do_syscall_64+0x55/0xa0 [ 1931.575368][ C0] ? clear_bhb_loop+0x40/0x90 [ 1931.575390][ C0] ? clear_bhb_loop+0x40/0x90 [ 1931.575414][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1931.575435][ C0] RIP: 0033:0x7fb3cc39c799 [ 1931.575450][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1931.575465][ C0] RSP: 002b:00007fb3cd282028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1931.575485][ C0] RAX: ffffffffffffffda RBX: 00007fb3cc615fa0 RCX: 00007fb3cc39c799 [ 1931.575500][ C0] RDX: 0000000000040810 RSI: 0000200000000580 RDI: 0000000000000008 [ 1931.575514][ C0] RBP: 00007fb3cc432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1931.575526][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1931.575539][ C0] R13: 00007fb3cc616038 R14: 00007fb3cc615fa0 R15: 00007fffee647548 [ 1931.575575][ C0]