last executing test programs: 3m31.248469062s ago: executing program 3 (id=2104): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000007f180100002200000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000bf03000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_BTF_INFO(0xa, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0xfffffdcc, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd79, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) (async) r3 = socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f00000003c0), 0x4) recvmsg$kcm(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x808e}, 0x40000100) (async) write$cgroup_devices(r4, &(0x7f00000005c0)=ANY=[], 0xfffffeff) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b1af8ff00000000bda107000000000007010000f8ffffffb702000008000000b70300000000000085000000050000b9690100002020702500000000002020207baaf8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m30.611612159s ago: executing program 3 (id=2106): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b40500003000000079102800000000003e500000000000009500000000000000b6b65a9dbee4b08c613ce8461331f97c9611fbf7e972fa326671"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x9, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x3}, @jmp={0x5, 0x1, 0x9, 0x0, 0xe, 0x1, 0xffffffffffffffff}, @exit, @generic={0x40, 0x0, 0x7, 0x4, 0x4400000}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x9}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf11a7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f00000017c0)}], 0x2}, 0xe900) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r8, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xc0, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110"}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000000100000300000000000000", @ANYRES32, @ANYBLOB="0000dd00000045471660ff2469da3a0000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/18], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r7, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3b, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000003c0), &(0x7f0000000440), 0x8, 0x86, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r10, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x13, 0x9, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xb}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0x1}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xc}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x400}]}, &(0x7f0000000380)='syzkaller\x00', 0x2, 0x65, &(0x7f00000003c0)=""/101, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0xb, 0xa5, 0x37bf}, 0x10, 0x0, r5, 0x5, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000500)=[{0x0, 0x2, 0x4, 0x2}, {0x1, 0x3, 0xf, 0x9}, {0x5, 0x4, 0x10, 0x3}, {0x1, 0x5, 0x3}, {0x3, 0x4, 0xc, 0xb}], 0x10, 0x886d}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0x6, &(0x7f0000000040)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ldst={0x0, 0x1, 0x0, 0x1, 0x8, 0x20, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x2}], &(0x7f0000000080)='GPL\x00', 0xfffffffd, 0xc2, &(0x7f00000001c0)=""/194, 0x41000, 0x4e, '\x00', r6, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, r11, r12, 0x1, 0x0, &(0x7f0000000640)=[{0x3, 0x1, 0xe, 0xa}], 0x10, 0xfffffffe}, 0x94) 3m30.33332809s ago: executing program 3 (id=2108): r0 = socket$kcm(0x10, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = socket$kcm(0x10, 0x3, 0x10) (rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$kcm(0x2, 0x922000000001, 0x106) (async, rerun: 64) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) (rerun: 64) setsockopt$sock_attach_bpf(r5, 0x6, 0x24, &(0x7f0000000000)=r6, 0xff7b) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) (async) sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) (async, rerun: 64) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0xfa, 0x0, 0x0, 0x0, 0x10001, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xa}, 0x8000, 0x0, 0x80000, 0x1, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r9, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async, rerun: 32) r12 = socket$kcm(0xa, 0x2, 0x88) (rerun: 32) socket$kcm(0x29, 0x2, 0x0) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x18) (async, rerun: 32) setsockopt$sock_attach_bpf(r12, 0x1, 0x41, &(0x7f0000000040)=r11, 0x4) (rerun: 32) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000001c0)="2e00000010008188040f46ecdb4cb9cca7480ef40f000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) 3m30.187369164s ago: executing program 3 (id=2112): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0], 0x48) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000231, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r6 = getpid() perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_devices(r7, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="47c2954a1557cdb4fa75f1af6435177d21d42d7c9c559d1f00b5a3c6c25a26d8c18883b5388fc50e3735053524096a34eefc4c6eb1fb378c5a5bf0355ee79b7d26e6829a2b35f476d3edf0431da5ad7fec2666c404fbbbab49775531b25f805e33d81f8a1aca813513afff4dbd", 0x6d}], 0x1, &(0x7f0000000280)=[{0x100, 0x84, 0x7, "fda766ae6140ee41a2412c5912bf16e9bb9fe3127f7e39288385ed6f559c60347c6eb9cfb27ad067b141e0d30b8f6f7fbb8a0ccab42f25599bae4ca34e69ea813e09f5c04b9fa367d36aee55928dd714acc0355fb9e9b2e062612e3c15fcee1573c407929c8db394ebfe1be851414c2e03e488c86c40846dc27b2974c7a44216f397efeda69c7a03a3366c28de40c5f4217c64fc2f51e52bcb729c8b300195caa05aae8b75da1ac1ffae69c099ef7dc691199fd3abe4f1177513c27a1816819fc5f2bbd2420f25da95d9a2c6cff0b09f07e700fecdf51d44c32b3ac179126fdf3dfd7273c79239c8f0c76828d538a6"}, {0x100, 0x1, 0x2, "53778499b09d155c40e128382c950c71564099a0edcd135bb5224b3ca572cddba36974c1387bfdbd8e7c994a7a9f55e4f3290b255338a1a9dbf5a464e498d5099bf2a950ba9fbc15a3fcff4dbc5dcab0a7235d42099145a4124db41e893488cd5738ed082cb0fd944c795b432718afa7820a1ba3a97c580f00d12d9977eac5d27cfac089ac581d2d7d3acc5a2600dc5cc21ccdb74051948d58eb42a26a3cda863db1ab4217871556bf1d3575da41977c4d2044caee1df1351184c0f790e7faccd3e6a8b45b48b830b8b9a4cef2fee3c23ae054ce132df05c02d04169c5a56cd3c54cb5205d288b09e9"}, {0x18, 0x29, 0x4, "757387608ea232"}, {0x10, 0x19, 0xfffffc00}, {0xb8, 0x107, 0x0, "4a80494b5c2729e27a23517725fa48be48b99dbdc9628cf56706d95dea95266b41da34291937a1061ae9eee5b76fcb8ed25b3a760398bdb760236673df646a9f0ad22f34c53f7aaa776cf748d848f88fed0bc0aef50ccbd7cafab14aac1e166c9d775ef9d97d509c3494f25fb704def9c7c8cf84a86adf9c06b24f0550f82b14a83948effc807f9b8aa9666a36a2c2909e831837e246d10f45759244381a2c34d58c1f"}, {0xc8, 0x10c, 0xf4f8, "3ca4214eab25d2f8e7bc38e900894b9cb98026e55260c15eebafa8f9102921884bef77dde4c948a33fee2bf6e55149076ee68d53514083242c64b3080b3d28bb3d2ea8640baa6615ae4db6f4c59c7e64c1795435a818f22bfc9dfb531370ab9606528b5a8201bebb1ce92167d69a50a548b86bb3e6a74f20a1c8527059746369b44efbbb52ff91ce8211c31d5ecaaeddfc3a7a6a981ca70ad7a7ff237d79c6dfebfb67605a4beb00b8069736a65b54450f56fd5468da"}, {0x110, 0x103, 0x5, "1910a87479d2348f5e9f18b3f0a587d4bd6d3468403fe837f95ca0c0efb441b8a43895ab5a4a3043ae06a874c8e766a2eb3836c117cf9e667d629b70e817c0804fe762fe37d7612603c62edfbe111392876a3d983971f74ff3a745e4421db7c8d686db4de52fbc847ab967e84ba5b779738e92e119bf4f8554eb30427dfaa80925a35b6795e9bdd045712ea226fc733a3ffe25384b06763afc5702113c7dcc371e664746348cda2d0c516b0f8004cdad6647bc51ffeed48408d10a7e9061a43a034a24806b983627a3a93ec6f8ba02059c3e3fe422ba441eeb8759990aa9ec54864ef17be7b056c9ed143ad00920c4472936588e893dc60e52302c"}, {0x40, 0x2, 0x4, "4229df157fed1d7e4357877e7f78e30f3371cc26f79f0c9d6c3c042a8ebe14e7d8fdd52604c29c3af7dff06d58d471"}, {0xb0, 0x0, 0x1, "17c70fba8755b437de48c1df4ed30cf619637e32beb7d8dc610b12a877d578aa9ff8f73e1056c6f010c6825bcc81ba65ebe5f009aadc433a92ab71d8b32904c51798234a6eb2d03428fbc2832239e3675b7bb2e7a6b8b3afde604cd15d1efe5df73441029b881985b8444c9aa7f6ebc6ddb44b7c38a28c199ddd25a01a4791147233c7efd0d9691220909e75c1efbd628b56b2490321754033"}], 0x5a8}, 0x804) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r0, &(0x7f0000000180), 0x0}, 0x20) 3m29.911080975s ago: executing program 3 (id=2115): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x1, 0x3fff8000}, 0x0, 0x2, 0x7fffffff, 0x1, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000) sendmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}, 0xc040) recvmsg(0xffffffffffffffff, 0x0, 0x40000000) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f90235fc60", 0x14}], 0x1}, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="5c00000010006bcd9e3fe3dc6e48aa31086b87003000000000000000160af365040014000d0002008bc3a0e640e51753cd60bc24eab556a705251e6182940800000000001282bb2352d1f006baa45e3bbd225a8941b1436e000a84c9", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x42, 0x0, 0x0) 3m29.526748287s ago: executing program 3 (id=2118): perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000080)={0x1, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x40047440, &(0x7f0000000180)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x408) syz_clone(0xc4201100, 0x0, 0x0, &(0x7f0000000740), 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0xfffffffffffffffd, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="d80000001a0081044e81f782db4cb9040a1d0800fe0000000000000008000100fef74b0000000000080005007a010401a80016002000024004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f877514c2e8ae683f5aeb4edbb57a5025ccca9ee5350db798262f", 0xa2}, {&(0x7f00000012c0)="c64481705dfb551309917fe544addfea5b58dd5edce73f18d3b8d92b32aa6f17aca30250b0cbe0095e7e22a2b783f8cf3e7935682285", 0x36}], 0x2}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYBLOB='\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000003f0000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000006e9800000000000056080000020000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m14.394241941s ago: executing program 32 (id=2118): perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000080)={0x1, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x40047440, &(0x7f0000000180)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x408) syz_clone(0xc4201100, 0x0, 0x0, &(0x7f0000000740), 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0xfffffffffffffffd, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="d80000001a0081044e81f782db4cb9040a1d0800fe0000000000000008000100fef74b0000000000080005007a010401a80016002000024004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f877514c2e8ae683f5aeb4edbb57a5025ccca9ee5350db798262f", 0xa2}, {&(0x7f00000012c0)="c64481705dfb551309917fe544addfea5b58dd5edce73f18d3b8d92b32aa6f17aca30250b0cbe0095e7e22a2b783f8cf3e7935682285", 0x36}], 0x2}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYBLOB='\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000003f0000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000006e9800000000000056080000020000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.125120194s ago: executing program 0 (id=3000): perf_event_open(&(0x7f0000000680)={0x2aabf96ecfca5961, 0x80, 0x9, 0x1, 0xe6, 0x1, 0x0, 0x5, 0x81921, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86, 0x1, @perf_config_ext={0xae2, 0xffffffffffffff47}, 0x8800, 0x7fffffff, 0x3, 0x9, 0x8, 0xd, 0x8, 0x0, 0x7, 0x0, 0x1}, 0x0, 0xa, 0xffffffffffffffff, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 14.723654153s ago: executing program 0 (id=3002): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x11200, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x4009, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000380)={0x7, 0x80, 0xff, 0x36, 0x0, 0x0, 0x0, 0x1000000000000, 0x10004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x8, 0xca, 0x0, 0x0, 0x4, 0x400000, 0x0, 0x0, 0x8e, 0x0, 0x8}, 0x0, 0xa, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000063019f000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYRES32=r2], 0x9a) r4 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r4, 0x1, 0x3c, &(0x7f0000000780), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000d40)=ANY=[@ANYBLOB], 0x0, 0xc6, 0x0, 0x1, 0xa72}, 0x28) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0xa}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x7, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x6, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13.716992055s ago: executing program 0 (id=3005): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x6, 0x9}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x323}, 0x94) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000080), &(0x7f00000005c0)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 12.788289631s ago: executing program 0 (id=3015): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x82, 0x0, 0x0) r1 = socket$kcm(0x10, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000100)="020027000000a21f90dcacf4d21bf62cbc694c8310e29ad92b30087f5d582d26116642c47a5f87867cfee3c88e61e526d8", 0x31}], 0x1}, 0x4008001) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d80000002000811f4e81f782db44b90402000000e8", 0x15}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x4, 0x22101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40020000, 0x1, @perf_config_ext={0x1, 0xdbfb}, 0x804, 0x0, 0x0, 0x4, 0x3, 0x0, 0x6722, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b63d25a80648c2594", 0xf}, {&(0x7f0000000580)="3f192725e7", 0x5}], 0x2}, 0x0) r5 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="02", 0x1}, {0x0, 0x500}], 0x2}, 0x400c090) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x21, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73f72cc9f0ba1f848390000005e100602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) sendmsg$sock(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)="12486eba2ac17a0618cc622267f1e9a1077ee5b32a42be3d07ce66c1831940f43ddbd006d1a05f07be34b933488f51fe3a1492293d0406e5781a166d725967fd1bad9a5bf8302e5fc5c5f7ed782a72f84dc1785fe7c787b14ac324878c878d769d2a356ccfb37f6af96042040d7a426cb408c24fbd0f3738b8e12ae57b40371cafe01dc895cfb57143b93588472ce2d3db6a791a182cad0a9f545a2416b1547251545e57570b36ae3bf75909c15f73158c287cbdd04fedcb1c5a8a25d920724b188e07343cd30e31cb13966ffbe878b34cdcd30733d732fed1f88f6fb617b746e4c58f9dda", 0xe5}, {&(0x7f0000000500)="c7c770ba1c21ac0e3c68b7bc2691124a8b138162c8d417944ee6cd1273f69efc256d9bc4de1ce1606a644b8341a4706638094e64aefadf984abc12d5c57ceb08100cdc21270e467b9b7dc9928da0ab", 0x4f}, {&(0x7f0000000200)="5a0a4a057eabbf7a062615958a6c46863d81dd9ee813778bdf45431d4c7ae1656e41bbfa983c8cf487dabe8f801f242cb8fa1f3426fbaed8a16767da40cc30243f8c3e4675602722530224a61510c647a989a7a2158d39f881270e149637c8cd5174255d3fd68999f91b9fe59ee91ad72fcb64ac0153819704add9b412b58153dc090b4d15adde787e4fa8cd9804ae9059c98d544dbd22e7893efbbde3142b5346c01cfdde3991b0e66a90d68d4e1a55307ef6451079959344fca8d090e0b61f6a03004b2e67f5f714f04f23c06a092fee754f718950face", 0xd8}, {&(0x7f0000000300)="0ff3ecaed3a596f6c4168034909de5529a63ac14233868b0663af64b1fdca1590fa58474340abd627428", 0x2a}, {&(0x7f0000000380)="00a672eb17ec71d91e557d01772e680cf8b65cc97d0a373eb24a970460625c39163a418d287f1d0e582f4ca7cb2286493ac9eb68377e6b18e20092ed265f91f6351eb38bc584c26ad45493bb5b992b07f1ec18d4963ebb6331aebb0562b7c3b9ecdaf47d0499e350c4c9240b6f874443c4ba96a5fd6a4b3c3f20b405b47f3935c1476c17bbe11c43d6f64aff8bf07de54a1faeaf8ccdbde2d8e91b8c8f62504b248d45e135fe2b98c69f2819198bd3eda91698f09c524608", 0xb8}], 0x5}, 0x800) 12.635107444s ago: executing program 0 (id=3017): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x7, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000600)='ns/ipc\x00') ioctl$TUNSETIFF(r1, 0xb701, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @empty, 0xffffffff}, 0x80, 0x0, 0x0, 0x0, 0x90}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x8, 0x1, 0x0, 0x0) sendmsg$tipc(r4, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, 0x0, 0x0) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r5, &(0x7f0000000f00)={&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)='f', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000000000008400000008"], 0x20}, 0x0) sendmsg$inet(r5, &(0x7f0000000f00)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)='&', 0x1}], 0x1, &(0x7f0000000000)=ANY=[], 0x20}, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f00000000c0)='cpuacct.stat\x00', 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000c00)=@o_path={&(0x7f0000000bc0)='./file0\x00', r2, 0x4000, r0}, 0x18) r7 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$kcm(r7, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="0f02000039000511d25a80648c63940d0224fc600b003540280009000200002037153e37eb010280060410000a00", 0x33fe0}], 0x1}, 0x0) 11.490335572s ago: executing program 0 (id=3023): socket$kcm(0xa, 0x3, 0x3a) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00f1ee8b45d5482d6ff53d73a27400000000000000082100960d008000000000003f888315daf708188f26e07f94cad4e3486bc3a73f3bcfa93710f7dd64dd0b0e736c4517a8fb83a8fa70fb3af01e8732a4e22d3ab15f81c2c1dd2fdbf107f93763edbbde6539e51a9d0019ff6e6ba1743436be691702d2599949287a0e3b5b7d9535a5ee193cce5ef8ae1000040000e3545a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x0, 0x3ff77fff}, 0x0, 0x32, 0x8, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1af06, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000540), 0x10, 0x8}, 0x94) socket$kcm(0x11, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r3, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, r3, 0x0, 0x0, 0x0}, 0x30) getpid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00'}) socketpair(0x10, 0x800, 0x8, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000040)='P', 0xfe1b}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x719f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000000280)={'wlan0\x00', @multicast}) r6 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @empty}, 0x80, 0x0}, 0x20000001) r7 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) 5.789266213s ago: executing program 2 (id=3045): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000006e40)={&(0x7f0000005980)=@generic={0x1, "7f2a5c186b32b4c3e37e9db0cc4d174988d2a7485e8abf2e0d364ef46996432a3c1f52de9d37bbd65c4381f1e88065069a4c67aeb01cefdda4f74f30b0d0cc3280305951c1a9f9bd942b1080f8fe1f9709a4e70d778a658977ef70f8aa3d710a5f78e96bb6f5530f87548ac4914e4cb5a19987d62bb82525306ab2479ead"}, 0x80, 0x0}, 0x4004010) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x2, 0x2, {0xa, 0x4e24, 0x6, @mcast2, 0x10001}}}, 0xffffffffffffff87, &(0x7f0000000140)=[{&(0x7f0000000040)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001001100040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 5.524783677s ago: executing program 2 (id=3048): r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3, 0x1, 0x4, 0x8, 0x0, 0xffffffffffff7fff, 0x840, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1ff, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x401, 0x9, 0x8, 0x1, 0x7, 0x800, 0x8001, 0x0, 0x4, 0x0, 0x5}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='!\x93)\x00') ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000100)={0x0, 0x80, 0xe, 0xb, 0x5, 0x8e, 0x0, 0x10000, 0x20000, 0x5, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x2, 0x7}, 0x6040, 0x227, 0x1, 0x8, 0x0, 0xb4a, 0x7f, 0x0, 0xa2b, 0x0, 0x800}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], 0x0, 0x27, &(0x7f0000000240)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x6d, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0xa, [@var={0xd, 0x0, 0x0, 0xe, 0x1, 0x2}, @float={0x6, 0x0, 0x0, 0x10, 0x4}, @struct={0xf, 0x3, 0x0, 0x4, 0x0, 0xfffffff3, [{0x2, 0x4, 0x4}, {0xe, 0x2, 0x81}, {0xe, 0x1, 0x8}]}, @const={0x3}, @enum64={0x2, 0x3, 0x0, 0x13, 0x0, 0xe, [{0xc, 0x101, 0x4}, {0x9, 0x1, 0x10}, {0x2, 0x3, 0x3}]}, @func={0x3, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x30, 0x0, 0x61, 0x30, 0x0, 0x30, 0x61, 0x30]}}, &(0x7f0000000540)=""/31, 0xb6, 0x1f, 0x0, 0x10000}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x0, 0xffffffff, 0xd2c, 0x7, 0x2, 0x1, 0x81, '\x00', r1, r3, 0x4, 0x5, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001800)={&(0x7f0000000640)="13409244ff11bb8aaf5df15a4c21d74ad3410a0854bef62a241cfc4c326de4277564f4fc6c7e3bd5949dcd210e92130a2878bb025a2b1fb55329737b52dd9461692db313ea501344469fa2a2b03ca80869f645b061e47bad9a2ba6aeca31490e11c3b58ea379f19dc744cc66ef1c439acf745877826ac434d13e339c9ade37ab34287f64637f65ed8f694c9df8f4e11e4ca8afc6144b6f3036e5321685eac079d6c16b5e4f43d6b0400ddba7dcedb9907be7e599e022241ebb1d", &(0x7f0000000700)=""/52, &(0x7f0000000740)="386a2d51f24b8b3a297452f8b422a1b8b42b032415b92bc685e801f4739c516a79cf19660200cfd96144f5259cfd1b371f1997ab1c711e33b2dd50e8ba764300ab7094addf85244c6b73681cd1e05f205f81a79838d54a41615f7600c06dece25ebddc32f0b78845432640bd37fc0e2486ed7e7065306e5a6a5ebe3f0abc36c1f57c5d46f8ed4b9089fcf084e280aa1849a9143c1f58c38503e574eb3d49bd05c3e648ee44b510c3694bbc293d40ed617db787a38423c3efade70202b8c0b2a73f7186d2faf9c442a8d4892286fd2556a33663f3bca714c48e5859ae13ac0722dc946ff217879980538707792a02f77a959aec787a6c4d015ecff829e232962a1055bf810e2f5db501753dda79c75d385e49e1c9269698cb51a7193553aa9f6ba65f2042ff789f2cff2a1639a6e01e67e49bf0a205d3f736de8c3acfa70994b32662eb3f6c555d7a3ef81eaf877f37b46c4d3771db3393936bbbe97de22075fe3458a1eec2c4259ee4e5648d77663be7e6ea477a603a54b7ec6d34c1f15c9c4a0d0078dc76f59fe07244359ff3f52f3392a165ebe7f9aaba068aec605b523bbe58dcee144ddae372e3f43fc00c14939146cdef9dac3ae035df6597ef96226762c671b3f322c0f9578d7b081194cbcada20fa74e0fe1aae186c1c4fdbff1b5e8f84574a4d44d0eb5a6431fb0aeabbb471182145d0d7933533abfa36d1ab7311093d4a298ff26b0a15462b36e84625cc659e68cc42ecd2632ef43411d8b9b1739260ddad44488b8428359d45122935c9ec135525348d6fa9d61232419b23675af52950f940e5db833744b93316bc6199109b0bfccc629073189773f253b15e176f1e999f2abc676ebc07bdb49ea084d8292a387cb7a8ee8bab87e6d9d82ac9d0b5b60050497a2f13b6fbe293d0bf0d94bb63a5ab954d952951bdc32cef1637f6daa3264f45700b45162d6fa7be41bb729b3fff7426ea981b45d159f4002ef8f7f14e23ffdf54347f235b2022cfeba546ee5045e21823901b63b64bbb13cdca8dbf577e416dcd49ab37145ca1315caa33a73999936aa60756ee40d81c3853a8c17757610f8986e7579e7f6824741298d58fc0c5edaeb3b55bb7fd482deea8f8cd0bd6253bc73bb0150c027e5698d5de0716c8c3d06aeb5d5013818f4c58bf3157a58083483dbc26effc5e19ab6b9e1be1ef9015c874ac33dde2063ce21548528ca9655b8c0afbbf46758ed54d6c1b0f9675b8ff63c6c05533bf6421f207493ff07f884b7b7c2f471b8ad69d2080b94830b550a7a2551d7165f14235b13bd954c1ba1e4fe517ebaa0f6849dc73b46e4deb6228db982b78049eb1d217ec89deb6baa6f3e1ee37eb0f36002a36e76b666adfdddc959d5f19a9eb6c918fe2142c87ef54eec821580ec2708ea7ebebae08fcfe1f61bd6928667704b1c201bdfc8398688b8327ade1458a7939e28099294de739084546febcc3661d37041757ba9679fb9c0174b80f6eac0ce8330659c1ba72d3ed064b0539e1eac88128525956b3336d8c6e1311153bd7b7b4447c99371473a270c7c5541fd0f15a9af794eb57dfb0251f3ab9a5badfb649230d3d24283b14b72b12329d78dd5fee3aa9a0ad061d8ea1f6536644ab52457d685da9331c3d122c03d4ae8009ebd81d2dbc173944e7133e59054ae78831a0a8aaaa754c6e9c73645cc51a1b47a85fc3a6db3c2f251286bc0afcc8055492e6c0a66f86b68c0eb6e0e5df7098962576babee7040e1135371f96dd2cdf188f2d5fe74e2460a121c04353f99a5e6fed37142d51d4db01e5fed7a146b102da34ab8e32206abfffb8f533a88af84e977960cf4b92d780c72144d9872c452653f0438a795727e64360dd684be1e38cdc9f8a10c234ee19278c47322b6b47b8d2838d21dddec983b600e6dba625017db81c91c5f88d61b5eddfd6ebfad1d74fda072790da031b09fdefb540e6e42767586f3a6e476c3a2ccd2108208e504dfad929f26bf1b8003983e525a569ba24d13008a258fef7a902f24d95b8ad871dec3c2fdad57c476882d860c803cf6fcebe94bc0e82afe68d8b94c0291ccab852251607eed4527c28a84a34a8fc75095f8ec6aac5a625c7628effccfe3569305aedc8de4001905b0784c75a65ec703d8081fc89f41fa21dff5f3af5e27a62a2deb1491afd9f5e0ac4884a4fd161ff7cdedc7bded25d604a0df39db5739c2689792f39a7b061fa817a42e7320122b51dc9a53ffddcaf1b09393b12cb50325614033c9b9e0f18b8ad1f9d22238a6793e9d5701e4a873fe4de9bc6074f69725fced3e2c24296caa878268a02d419de3141d0931340245e94f15bd6a077ea51415a9c36d6057c23a24dc5fbe63ff5f626da5686dcc3f27393431257ecb753b1137dcb390d08c0579d7b91e01766f0058073db3cbc2e8a75cc1133bf628985e83d8814899e4b053290ed0bb6c6a978542efd55ca0376f6287df22a2ec5d8d59f4fdc4e0be10b282e03cffa7fcb12f8020a18b063d8a0fc6ebda8954c6bdb99bff2bb2408b39d329ec918696dfcad593f407cbe265aa9dea47b9a39e99bd10bdb5dc882336f629f78cde60099025496587c97211055af616e48fe8f8b781e5297ffe1fde2346c5dc4fe3f69db5cd20fa32bf072732ad3b33d698c89218320fa2bad44ecafa4cad8ba5f4e9e9b7efd8211fd571c6a5c2312e15d7ff9eeac47aea00a7667248456ca9db6bbd89e367edf363325e778d660163f579067ec872d7221626e92280969e4cf515dc7c858d392f9d714fa83569ecdb9e4fe307fbfed52ead757c2b543e4be6579e81a30ae17c96ccc65f06df9d9b94c9eca19d8d8cfc907a57cf72ff3f5e1e7e07e2cad14eb7d3f5974ad7f1484642726acd2edcd60cba5892704ed93b37678b6262a6eac34de682ec17ab8c4c220e28557a3fe2e25ca24f792a2d52d497d3120a343831d43cd81e5bd5648dd3508c43f2f7400650089ff88d684e9ee95b0f2ca508257e6dd0ac3d58063fa6c298bffe1fd9fa3d03f4d71460aa2bc8d277211472e15d3705481faa88b21688e772738046d423b51f29aa99a768756120c840c62d8c2e020ae6963bed41ca6216006e5a7eff6ea6a86b0364a36618217e579ceed762e89101194050a37deb17391a8c9aeed23cf17c145f2c8aaf7bdc6ec6976320b893354d8cc832ba7ead5f568435356d4bebba899680bc7699bc67376fc5c9a64c6ff18cdc5efe1fb02d3f2e669742bf3d51865679c90bc24adbb87d5db01a3b78ce953bd654b186564c01b1e294389e9e58df7321c1cf1434b1903caf4b0d0910d69a8a77af8214d5ca54b2472fb234ad2095cf3e31d5d34c9385306630c943aae40135e029417393a5d8aea036e9a609cee327f9dfd7efa8816979fc855174b6b9b512a7e8dee0430fd656ccbeeab8117b0a47b2fdfc22abe90ca2deff41f05064490e74a1640bc86dc05737bcd0bf2633afe73466945bbb650137e24042510ca53bd792adc27bda98c55cb23e35a7697b1a90b3d424af7e7827b4c4b08174c88a2cc9ad24349e41553e0d9cdc7f52bf9357b0279d6fa92cc6f2cc006f90e2f73f53988cf9c30aee2712789b553ed01514e2d8aef275e74240c3cd7b5bbd2f2bb2decf76173a5b7a80359558ec000d3374cd7a5a83da3da1aa7a5da83a32ca41a94a4c19ee981e1b144f2bd16937be96ae53871ae2075187c509b2c0b53794ff8e6f4da323c910bb3ddbcb82d8ab866277ba0de038cbb1b26cd110163b995c5ce482310e8ccbff9b34dd9b8824eadba4a9ac11b4e761f90d95e46e39dec91ee0435f472fc159c19729cc6d3f22f2494066c4519e6d3edc5a57572b666451e8d494a1809361be9a8b5237a9f7d0602c4b49b920bea70e6c97a37b4c8dc6b11704908062b06e6cd6c5f75f9a38550755988d99467436db9d13a276065e5309fb70b1ae4e56537ab1639edcf32a6ade9051ade7ce9be19d29231fa57a158a2ca1b8a6260c290fa5f3c25989ee5a064a8f5c1d3ef32ea291e9d746fefc3ccc1cb89078b25a429d4e58eb0100fe82dda78ea5fc22d0dcc65531ca825baee1ab1f841e982b3fe61901c77eb6e3604a136464f685d4d906bef603fc63bb397b9d14145507b39062a1cf120dc41ec3b44eca37a52c57a402cd9100a12b717cd6852dfbb24f2413b1470c37c362482b8dec13664f76128d7905a496551c6a329e0866ad2d419ca47aefe0c27223060762501a5ba7c7bcab507b51672bf4dc242f595516e6006c61199d87517c7dfa47fb788ec2921ee83360ac9108cfd2aa2e998a4557c9e19c1df7d842940ad409bdb33f02303f20a8d2a4eabf362674d6cf437cbbeb458d857a7c6e5d77c1e87c57b84b31862cc336e9d04dbf146bfa1e4eaedb8b131988e6ec275330e33f05548bd8ac1ecc4bf828d9f7a2466b1fddcd116e23c09ece0994bfda9fc14368ed0af704207b24a8f160da326bf0440842846ecbf7329027d5555ae0410a7094220914258b9a579922821e143cdf70cc7811c6fde7090bd0ff7871929aebbc14e04742e61e43b49a15d63ef5c898840cdd1508e0b58112f4bec3b5b132265fd420d7ed1b399ec924e74f8ced46a1932f43331c330bac673039f8cb281c6aec9bf98054490a2509c0821211487b8694e760dc2426c4977f15f1560804ba6e28329c3fe9419bc385ce8e332a7b26a4acfb620f70121517e6c4d0a13c4463854a885e1eceafb3990724febe34217acaf51b4d250a2e69523626ad25f7484d24851bbb944693a62123a0b2cf5b22f2f05485b51ba2eee2a79f8dea367f3d6263ba09ecd0f77c3cc4123ca5d830a177c8e4630e67107120d223cacefd99e9d85fc2ad9220de6516868ebd66c883fd822ad1b7832e35e032342ac04b8cc4ab5285ba71cd76a494a565bf0803c04537f7dcb64e609f38edf5a2624cc545bc580780174af03d5f2c552a77a8c997ca64b74612c39f6a538a2f5de3d0d877b22eac58af674e06f75b0d33519397edfb98c91d0c180d6666e966f5d758e495d35844a359f73f9c6a103a3ad6f5287edf0db940b344acdedde1b838f0d75b32be1a6be916cff16961d03c70cfae817bf1a795caa13f54824e17f4da7f07815fc7c1a8cc476315952082ad2bf4450ee08693d945f457b5ea3dd0e90dfb053cc0b73375970b389f62ded1e112d6b026ccdb69ec988a2ed0bc1464281809afb210449f0eef8adcef661f5ba2b70ef701a8ddd798fccbbcbbd0cfb9e029a007a442efd73e6569e71c1f06e1ff0e8012f9257466f1cd95884eded4d8553423c89cb3aae5093b35935967a369691a4b53bd9f7818585b9859cf5f09565ee5424cfe14881b7f27ea44ccb38fdf1476f71652f68beefe2d1517890504de640914410c198096748531fc5f505c852d2b9fed2f239b9bf0d8a0270c487d2f915d2f95b8ee3011341924e42c99ea1770715dd816d81ff4bc0f086a030dac6d8c93b109a75c941e128256aacfa8db484d0e9af129a2a833584db3a84f39bbe51a2c31e5ab06f540f2018890879f3bc9947ecc7948674bddd812826d381f84e3f9d7e7a75163014eff2720e84daf5bc7fd3f4d085df631cf59f40ad7f1f98478bdd8ddac1cf8e11b0c1e088751027475eb03da52d6ff65e2d782fb2f02cefdf9899e8c6a597852e6daabc78259365b119c7770d990cd5512adfdae440a69d8c43b8cd50a51477950681af92a7aadc41feceda2a91582120a4650ef7d730293b2034f4732931791de74b89ee29e3da9aa4413111811515178632ac", &(0x7f0000001740)="84e42278f785532db7b932c0813a0646b64d24a18f5e92d8342e75746dcb44e701409756442364fd906cc5d5b665670fa68a990de3758e792e56d2b1e9a54113692324e14577f970d0afce6a234e344b959e61ff1115a647a14ae91b546356f6570e402954627abf671a7c6fee283c699efb164b9867923531aa7099066856a8bb750926c46de6825b7ea9ba167106d127c31a4b22ddc9ca38cca60f075be618ed36d73d61907239e32db79d2bb8a81d1a0ef0c505eb33734e", 0x9, r4, 0x4}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001840)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x0, 0x7, &(0x7f0000001a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x4}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x400}]}, &(0x7f0000001a40)='GPL\x00', 0x7ff, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x20, r3, 0x8, &(0x7f0000001a80)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001ac0)={0x1, 0xf, 0x409, 0xff}, 0x10, r2, 0xffffffffffffffff, 0x3, &(0x7f0000001b00)=[r4, r4, r4, r4, r4], &(0x7f0000001b40)=[{0x4, 0x3, 0x2, 0x1}, {0x1, 0x1, 0x4, 0xa}, {0x3, 0x4, 0xa, 0x4}], 0x10, 0x200}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x3, 0x14, &(0x7f0000001880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x9}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000001940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000001980)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000019c0)={0x2, 0x7, 0x2, 0xffffffff}, 0x10, r2, r6, 0x3, &(0x7f0000001c40), &(0x7f0000001c80)=[{0x1, 0x3, 0xe, 0xa}, {0x4, 0x4, 0x3, 0x5}, {0x3, 0x5, 0x0, 0xc}], 0x10, 0x1000}, 0x94) write$cgroup_subtree(r4, &(0x7f0000001d80)={[{0x2d, 'io'}, {0x2b, 'blkio'}, {0x2d, 'io'}, {0x2d, 'net_cls'}]}, 0x18) r8 = perf_event_open(&(0x7f0000001dc0)={0x1, 0x80, 0x2, 0x3, 0x6, 0xd2, 0x0, 0x7, 0x204, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x200, 0x4, @perf_config_ext={0x3f}, 0x1000, 0xa6, 0x832, 0x0, 0x6, 0x1, 0xcd6c, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0xf, r0, 0xb) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000001e40), 0x101000, 0x0) ioctl$TUNSETFILTEREBPF(r9, 0x800454e1, &(0x7f0000001e80)=r6) r10 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r10, &(0x7f0000002840)={&(0x7f0000001ec0)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x4, 0x4}}, 0x80, &(0x7f0000002280)=[{&(0x7f0000001f40)="efcdb8bbc1dd94aeed46b838b8fb2a7053ca0f08cb7e557d1acc2259e4237d57e6f7b96fb284ca61b860d30b9beb23bfe16e0b9fcb2199014558a2be0b265d7521433c3aba24fd51b860df14d6ee99e3145bf3f3cd3bcf6304b4b1febec437a79aa099e0bfe49f019501c4a8de10133675cf1de6e5392b66260353a4b79dd9dac8d16f5abfb8bde4a55ec15350ce17d642388f356a267970f572b13f1162ead60b0bb13c27fd5b2003f6bcd6f8e28a64bbca1328bc5eea028d2d6ee08101179a45e9cdca9b5e93da64b47386685e3ea1626434178596269155200286c57064682a65986bb840eb25aaca78aada2f52324e49991c78", 0xf5}, {&(0x7f0000002040)="c7aae6a61e483773fb387cc2c8002b2e3059661e0b", 0x15}, {&(0x7f0000002080)="531b164f1784474a923201aedc8b61ca352e7c51bba9aab99fd8020f5eb15c0d389e1268307a99c6ed2453a9a799fd516132dda00ca3ad3c8943b6a460df29cedd9e71a6f59f0901d9ad864ef86e89a5c823dec1cb1b1f6d60021f69a7b541abd87781c00c20fc3751f8d5c51f923f397d585ef8b71a7801e659a4aabb54fe481adcb86a7216312c4c42419f28025f6a65f5e3dbffa1411871210af6c23bfa173f4ec2957450f5d93f67fefa39fa4960aa83dcf2dae2953fd6f250bb51adb7860323b7afa991cced2760e1e969f8db8b7dde6e18c57cddc5010720b3", 0xdc}, {&(0x7f0000002180)="9af92d9d40b4138d49e598c357e5363a746a9765395500a59ba11f51c40a9c14d32ff3a7e0e57d9ff7ba3c3f4355721f13876f36ddd33b53eada608d5ffc37bfc4684b38198458499023ea13b1ee3d4a8041e430b269031202c4488d82524de24d8acdcead2ee19a65de442e79d948d4199c96593283894df74792e63f4a22dfdc70d72ca94021983a3a825c038c240d27a391e63445d781b597250371b1425220a888f72919501cbd598918afd118c91f8c5617728e7067ea8d2b56178dc1e673c559e9b116cf0446cc231fc9bbfae294b7d92e817a14518bda030fdc0a4c30bf2fc869c22c0548", 0xe8}], 0x4, &(0x7f00000022c0)=[{0x88, 0x10b, 0x0, "676676724be9b331b781cf1dc40d14d93e3fecd337b347321526caf4a6aa6ac53e10339040a26ebc396f9af63f7ec02297400333c80f00d3c5223759bcfcbd433e795703ab2dc2a7a293138278bc87bc74facca80bdde653d0609fea2901b7f15a6f7ef45b9b95ede0407099c9db00a8b5d319daacab"}, {0xa8, 0x84, 0x0, "ad5a10cabf446239fe8e252735b2e571b7cad4e02a4841c2caabec140bed29e753eada38123c92bab4e83245c6b5fa17aedf9d6fdaeaceab0aae94b452862803cdc78da501102d798efbe7a6befdfc0c1198714197137a4e861667ae97a41bb4cc363d6548ec8cc77ffca5ba0c39993aa2764ba383b0c82f6f4986ae178dc021dda4072f15e7d5525b5773a15c0fddf18d9992c2b48c"}, {0x90, 0x116, 0x10001, "575ef442a90a6d103d0a426840de1533e972f73e9ca7b783d045791c709a042d80da2518cb51807ca83b7d73ab66d40b667f638d162c9f7d1f9160e7d44d3852c0ceb02b902247b8fb9917c7416c04e7b9638c1ef37a241bb5db302e1456a95b6ebafafe6ff948df5ef0d12de775144c52ca07fe88b7ab1ea2ad976c8fb8ac0a"}, {0x70, 0x1, 0xffffffff, "4307ae3f9d7bfd2326ed80f8ff687429f668631ac1e162b7676c21f8edfc1f82203357e5672c6bea2f8a07c16315833c18307f965f8fb9d37d53c47166f3d786c34e5bd6657077e8a5ef18ec8c23484cf36dde11242ce2c886227972c26a2e36"}, {0x80, 0x18e, 0x9, "61f48320ee0ba4159d1a8ab18efc59fee37fc62482140b64044fa4f5e371eabaf267bfc475071ba7f4e842ff0de2de9c9f4ce9c305bc1f247c07fcffaefcea13cd4b7eb16817bfcead6e9ae49e75c0138c2525f881f85da64812aca144818c7f7c3778fa06fadb2deabe11"}, {0xe0, 0x29, 0x1, "fad1341b7f391bec8e7026ee6c50fdf7c9a52a4bbfa01a691e2804b379b3c08d270a789e997498571734621ebd91d699b814cec16898324f2a9f1d36339b8d0da61337acb9cb822611b7e1b2f532ebb04d698895e78a4a352289e74a6b3fb90215401d705e7afec5afaba145b09e83b47a5fa4011fd1e9fe460a1bbdaf9306cd97312d280676bdb55f1285a1ff9f6372e5a624a252cb35fcf4809303d3351b34685a2b2c04c92156a9b1263520e40f100fdc8a60aa0ab12e7cab8c313d0a42753d368bf17a96598dce03"}, {0xb8, 0x111, 0x100, "590f8bed77ac600d333ef1f3f3e499a3ae8d86893a93e4841a3a2b02cbb6861cef0a845fa1b365a97039a3a192b0ba048a10c98b55d91787b34e964c51b1c4bab78e97f5453254ebb48b0ef545a76b5001013e6c6156734863ec1e4952319a328c5f99833849d8211df58d3238ea7643c96064814978a4ee958c7ca05b160aa99db00d87cb2d04c039ea380514a6379522b7c5da36f2ff1b8071aa5339a7dfb4db42cc5eea3fc1ae"}, {0x10, 0x102, 0xffffffe7}, {0x108, 0x117, 0x3ff, "edce6a8992fced6887b7d5084d2d7316f3938c0999872dcb9120dc4fe5a404878ca598cdb40028c91684f256a49c5bbdb05d20d2c897b7a84d5ba9cd6845a876b4a207342d41817aa0f2eea0cc91f64f6c2f80fc3ee207910e6f4b31abe7856cb95a08062e468f061a5b7cff60f43e5209732a1f77544a967af2ba116dee662aa2c3db8d706ebac859aec469b379aac390b00654cb4adca3b44250ef76c151f8867b6bca5b4ac49164de3b760dec19ff70c2d22717d1bb1cf6fb6a9cbab11018f606dbb8905db1bcda5025962c203475377e02b8038f6250d44752fe41dfc98eafa5bfa8a77c23f1d21c780bf3762e7ca8d1984879bd70bc"}], 0x560}, 0x4040800) sendmsg$inet(r10, &(0x7f0000003ac0)={&(0x7f0000002880)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000003a80)=[{&(0x7f00000028c0)="0c1fa1ff90464a382a294c4714a529e8e86df09caeb7196d4464ed69fac5dfafc4185f2d7acb4a7554067919d46623cc6b27eb954c24fa22a14bb465980d3395d891a1da5d0dba8d9e6919150bd1f0b0250cab7c0c80709013b59f5daedf3b11114c48e071a9a6d01ec286677fea36b80207d3f4a1f156239ee34445bf3ec13d57f0dd76fffce4dc0a95a5f55d157b1880cd46fa6d8dcd651a320bcab9636bd7fa867b664506ea307eba294eddaf62809507b42d216666ca23328dc6f9d409bc2448543cad411f01f708abc6f0ce558c05a8d8a577af7854c9ee8ed5acf55a320405fc46a7c8fc85470eb99c92dc88708e8357599261f86eae59a453db102cbbe535b9d1050c06bd9cb3be3a72124c7ddee7616e5e7b850be7ebd2ee436c49937be34d5746d395b8808fd2272225df03d5bdf648e472b819e0dd9876073ceddaa27375180963188dafabe43c92649e5372287645dfe49a60256c1e193dd4e874a37bb047d8ca31ceb0e67e3714572d96badeb58d89e75e49d852efc7e8fa8a29a6a3d464ebf05d86a49a22274c504c3088899bc4fb6bb63fe511c4ec846430d694802e3a39c097409039aa60154fde5e910cf36acc6fa8ad0c0b2b9809a6091044feba2ed7e4f617d177fed7a39c884c0c13bf158da5c79b6dc264f58a823333c87bb6c5be77203a27f1065f91c9ec569da0c0ad57c0bf0260009f174e4eb7d89624af788d08997670665c34b52ce4730de376999a93bcac7c455a3b5d64e568f6eadbd89dda2356a32f65905fff2c852e5e09ccdb272c0ee5a08153998809c6aa21c88c124e60d8d4fbb494fb8a8d00ddae9e4c2dc7e54bda3fcabde0308eaa731428078b291dc48a72b433bf67bcd0e194185ffff13875329e5079fcf306f1af1a0b3058d35db34f526cc32d0cc7f55192382089e513ffd15900ba3580e625c12964f8d2b6f955a8fe27cfbd751455e33ffd3abba950aaf53096583f5060efabd9ec65147340c6709273ab823f5e0b1817f35c1f2e0894fa16bdbe1564d9e03cea8abe127282d23013b7c20a069ab4010e7623538bdd3a6d32bbc0c2fca0e7dc190705b441f13dbd8a4e7dc6b0cf4ddf4b52d1def3d3bca9fd2c5509bfe809bc612023daba95b4b5270b4b09b3f0ea11cf8f5288152fed4531051186ba32308b2ba5b195d7ad741c9e3c143021f8984a017a5aed0abd0e31784e90a527457235967fa359348482fe99793dd02dae6d92d4828683113505b05d60f79f08fa38b32feb5f3294aab80405c6739edcf7dcaea662f0a311ed3d90e8c873001be76969c6ab4184a173c3aab695931ed4d3584d386f43dd6d171fc1c71865a4a5e9b8d09487d505ec7800917468abaf6de71bce6067754c72bd19185f595ca50c6905aeec7cde4d7db5ac2f1c3d090e6294616ad8af862ac8b168e4f5ff3c263adc2f342f49b0e4eacb6d731792d00fa15b31f3d083d3755deefd49e8235823cfc1134c9a792ab6d40aa434a7d4d0f2920cf51d7b77aec9a2550276191d96cd3de6b866c7944ec9a85056de4c9197da7210d0d14bd9fc7154da0e74bcb58b63e7fa8ebcf979086386812d748ead04bc8a9b5256ab2f193615e000c759d4d7a1b696a4576dad1f61a668d93516edc0f7cc8e2997bdfcc7865fa28f5886595ffba8a3a2fd7732743f03e9c139457dc3fd8d1bc4180712d80969ec4e02757475c3ac7f466c753ffb6cfb32a19175fbd8cc6176cb4ce9f386c73d62ab9fe1ed649fb65e9635da90c049aa250c6b852387686c02ba97e70d05c3617c87052fd77389f587568bced1813d231e5a670bc4bcb13b90c06e326a04593494c19d0a70d2217091060ae0359747b5235f8fbc93a59881dbda2b3ff69958bf6905baf165ea35cb7348dfa7398a214c7585152edb289c68f1e7c7ddeae7daa6e2bd889a0c53937a59ece9d9518d3d62929898c3397c3b3235d9da0ecb57fc36432a2aa1e3b6c4a59357b477cf0ad4cbca9528d2a4de8a91a1a774e7c035359094ae0b3b28737a29fd1a543c6e919e34d4bf2e959b8981f440eda378d1207ffc121a3a87d523eb4300515a97aa6c0d8debebe87cb245a3721a121beffcc20ca200e2fef26d9ae0c79929fa3848261a71f666b065548b4196930d3d98cb33d137e8b6f534f824a24fd66c80432991a63724263e9ac3f5475d4dd48efa12aeef5442df227f7069629af46154f5076ff1d235263505b51f3f088c5f677256820a04cf3cbee91838b201868ac6a71d43160e6b9922f8fb744cc92ddd218e2d6452d3b4597b146a026379972617108dcfd1a51456d51b6a1bf5efac4dbc6cacc6eb2c60db80bc1b5d4cfd4581745339812c06da78d1ff72d549d09bb0d22c2598ac29ce41ae4568721c704a086e09368add85e772fa9cd203e68af9cf652e38dfe57942487ce420fe717b82fde71d8035a7002987a8e78c92ad869657fd8ab1e182ed8eb245bc5353fc3a167280c80e5d69757b36f9ecb264676ef030e7f6ffcf86bd004eed0ac55033e4389184700d0b37baf821fc73f8f6b2be14ee73931c32fa9385279bb21086a2c7a4ba4acdf57eaa21f6d4551d573dcad866404a487ccead537dd407236a55d69e9fc13af7329f2c30113ac1e27080a5b5bb1e72d3ace1a4929671c9f96b8569d420b8abf2106a88712e1b653fd11b3ef33905588215e7036667b16045ee8c8c86f6b72df203f37c0f8bef971461b3de28d771c06bed9140960c956937e9a7a1bc197a580cb647e522afe36f8a6e04da0d5811e559f01031c0436f0c06ef667e4077e3a8b7bc76427711db0bb6615c30a6555d0cb2757c6bea2a54298c9e513841de4acecd9485ad4c83b685ea9bdde59de18b5a40fe43eefd23867121602c8d6588456c55889e035a7c2fe48894464474d2dc0956908c0749d533a9d296e339b3106f861e0029c0e67f6ea34df8b4f8bcd9c0a946900221ab03f5c6c2b8380463026079936e963fa3ba2e3a5caeaceb6aacdc59052b03d615e6076fba0712d07b213c619b645318c9b9d40c8cefb3e3b7a8aeb3bda1ffbfca50519bd6a934b632548efb60f106b9388d9db716652e9418e65d2984750df84b4b4ad8af4d14b465b29e18deae04a0ac2f2f8d65ab3671ce993a088670091a997c2af7d98dd17d713470217228c2b64516188b7722e5552a8d334f557da7a3a25292972713ad5a7628c9b04534a2834663fc549b62e721d3f2b077f46641af7b8d32fced5cb74e2fa6509490cadcc9d56f1d22432446b68734ee73a5356e1746a2f813048706c2c771b9fa8a8b388d31d17e1b3565436acf0a0df9370082174e98c42af6a1f4ee0f2e5989b8a3f9779ce1fde278261fa6f594ea577862f45340f2a838fface29124fb304d661062becf36e37a67b0b9d0e46a95d07dce5fe79ef055861d13927a8871f37ca83c4b20b59ea56ef314730d1d739fd6772f9f5a360d94c0216b3ccd34da20555b23a13d09860d2d4830f2c970842471c5bf5396361ef929f9eb150a9187442c19f0f87a49b4e16ac9f5ccc4b7778cf237592c291ef7775e7a03ae6b4ce1bb265349fab62e92eaa6f9daf2d532e7e9349ed7753890dccc343e4303a33b4e4abd2d3b4b635e5efcbd6af237c5a7418baa85a0fc9c0d457c2312aaa2872d6bdda62f1c78e52921aeae7461b7ad17247d6b6f06f723b886fa0bb9879d84481ad8db8ebdadce9a051dafc6d48692d09b889987fc92f79a22531e42a4b4842f3a013fe017664ed06fd631cd45f05663010487ddf318ac9402dfb5104bea6ce053f0b3d0a78e45660c94a27ed10c4f53481b390cab5df724ab6568272b19d7107eec32440e6f42156448f16fce57a679113326815ffab62410f5c7345b006eeaace6c0d619d81d500a2a8518acceccb33f3a02cd18b0c3cb9a4fb813fdacfe194573ede43e1365b6bbae8ec3a898c651a90a3f9b61414502796a99f40e8f5888d000c7e3a2772168bf6932e074b4d23c7557d02d3756e4e08956d64a3c70a9f91763fed2485741b326d0f346f7ffcd1461ba3223d7bf1b38bbb9d6c222bb2ed5e1d4c29f118a3d86b4da966da1a87176f991cc41cf6c285ccc010b0c7e22b638212f196463c66767b8449743895b3cb91eaea7754e2eacf1c983dbb8d307b7c81cfb8e1215804a7e131d151a54b5b977ee4d28b452bedcde2b378a4473c01c7eacd1d4dd0622f9d9218ddd8e47d20e6bfad564943962b034bd9d479e515f7ca1aa5e9a36e41ecaed088a5d78ee2be5d8807d638e3501770ea5914899ab26563ea6bbe33f19396562710842cc860bc971b81beb1c839849724b7cd0f9ff76cda172ff66633d9f4acc0fa7b3c9e7d700dcad41c6873739ae4061e8631df57f465a81a270c126b19f98c1f320cb1601272086099a58ff7175382b844bf7f4624bafd0880e7b1e8deead2362b2b1b4f8ee16be167399154a1a1a53e919d97144e3bfc1b6bf088c33cb8759896cfd4343c9f8c3cbb5b96100d3ace3dc5641e61089a796c4dec3ed3458cea077f83c70801fdb45886b950a3938d0791ed79cb8d9fdd44fc9dbe5612158e1fcdbfe5fca0591b7074659d06ffdbd1c2c40d08243cc02496c3ab57bfb8832200bee6a8d8ea8c27da5313c8e4f91b2ccccbe9ba8625b0c39c9344d0b1d7b6884a248101aa5fa7a9f5ae0c88f9c115d11c7d9306ee55d1b475eea60f98cc5aeaeba3deb9e50a5efded49880c55ef4c45bc2d7db0eca55c2acc26d18df605489b96be7010febc133859584708971ea7d39e87a061e77151a6d9374edd96b642830e6b947f490bbb4f5ba0f236fbd648f6718bc56c0400c80be1786f9151137b2da8485c98d8e4481591691e3f65e711354dd2fd3a86dec3ce15bc29efd11a2b4f97dd7224d41b325ea62c9e8b582086c1487763a1af89e5600b008287c2048bfedab0f8c78452a50f6661c0bab528a7d24e307e77c81813db2e720abbd97d6647660c4845add808520f813af03aaa779fba3e6a73e954670df793444520e990fc6eae2d9f05d1cd2fb87f1e8a0c9f95993bc2c8c83dac27926712ebeceb196ea7f9fa5687740f4c9151dc37f995c3cfa6c4c02db3dfecd46993c6fce65e328e1cce51f50ca3ab02e422a26fc4de0d7622f4ab380ac364200d94178c389c2d74cee422b468d294187d3887f907072b5d774acb7b2466a5d5c26f52072610e07309f0ecc863d9840e92e00dd0d314ebf7714c2e7a3be0dd49e02fb87530aa8fd0ad547fefbeaa9950dc3eaf61a9d6f86dadf7ec8ce17b08d62f5737045064271b590763a27ee13e6b5141723a23dc63b6212d7c4e9febc29e912ac252497de1d11d6ad50042abf4b79017e9cda0cbd6a834852b7056a6b66271ce4d6d79c3803761a739c2317beb422b667e4ca4e8b476988e5c17e91ca5bf022c562d74ac121db556fba8b57896c79806dcaff2dcc6fb217bf6f27ac43423e364fd33f7a218e5c055bb78f69e6c04aecca78fd1df696f5ae8a81c7b22647eaf777773119c8485c04775bcd26a7b0e25aba09075f9a20e814c772992ceb4488e5bde9781d36206491b1985503ec593b31be76e6d155d363f376eada51935bedab9b18bd6e86d878e2fbc4f78e80405a33876b10c4f42537f24f4e1c7300c402a137d8cf850198b6c199c5bc5fd265821c0496e0026ad2d8ce4ccdfb68fb94a5cc9b1139b3747915e697a05278433e8200a3901c8208f272ef0681f97217fc2dd5c31c9aebaf7264001f7405471d905189e5cd8b59a5a417fd91adb61bb615b5d3be8f", 0x1000}, {&(0x7f00000038c0)="4a351598723ac3bb1a52573ed00d29d43e46bf5c56370dd9c61e61a11888960431e513db44ca042cc8633649ffd6ea229b8a00ec02f525b057a0c4210eca0cb6055ce090637225cff84271e85f18fa1222dc183104dfa8e820d7538978d8b9f6859f88b930e9da21b45aa5a93d83d559318cb0948cd553d033f278a18ddbcaf9379f4812c6b51502c19d17d198659d45e907c3967c71", 0x96}, {&(0x7f0000003980)="1a9bac4af5d29b4113791e96dc45b488978b20c849413ad80c63794c0c26bc2f8b783d77f7ee0a9b71e79ad30b93a9e4c2a5a9a9428773ec8ed8cd3a5f604ce2417e87f79bc48012c7b9ed026ca20724bf18ccddb909718a52e3c8ee8bb5d48085c4fa2ad3ceca5b358d37b89cca026b2accf760cd2825f95c0cd98270f6eda5", 0x80}, {&(0x7f0000003a00)="6268ec47e615f30f6181f65953c79dfd7b254501877938cae1ae356b53e4480d209b0eed98b6fe9c0f1ab4dad20d07a9eb5d5554208e41a10ff53c81c01a08d4c0a9d91cee774cd3bd5b681462a1441e88a5a429a99c5ff8e0dc2d1d5feaaa78e8b7a563b637e76824f6bc141b1fbdf19eabd160efe52acada79db5d", 0x7c}], 0x4, 0xfffffffffffffffd}, 0x4048000) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000003b00)=0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000003b80)={0x4, 0x80, 0x7, 0xff, 0x2, 0x80, 0x0, 0x6, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7fff, 0x0, @perf_bp={&(0x7f0000003b40), 0x4}, 0x100080, 0x3d, 0x1, 0x4, 0x7, 0x373, 0x8, 0x0, 0x8001, 0x0, 0xee}, 0xffffffffffffffff, 0x1, r8, 0x3) ioctl$TUNGETFILTER(r9, 0x801054db, &(0x7f0000003c00)=""/135) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003cc0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000004e40)={r7, 0x0, 0x50, 0x1000, &(0x7f0000003d00)="883985fc4c4b81d7f4e967459ce992cd00481d2e3cf45c9d2c6432fcedfd960fa824d2c05684d394bb40ce31642e56bd3624012587f7d0c1be83ec21325048865a52f7515bdac9a255455ebf71f7ec52", &(0x7f0000003d80)=""/4096, 0x1, 0x0, 0x29, 0x67, &(0x7f0000004d80)="12ff8365ff718682788209efa832621d801ab2c90f8eddde6720eedbf925edf2239849b2f204efe803", &(0x7f0000004dc0)="8f5bff4a9cd2f5e8d6b722408d373c4b3061a0839b4e31698b807c2863e81418a13e65a751ebffa0e6cec9aa26d04f3c8ee877bc6f5dda25da1ddb70acda676354097fa4ba403cfe6c879387ae2a02eff1bdfd4ba08aa469fa5d387b04b5610c7f0a4885e91872", 0x3, 0x0, 0x2456}, 0x50) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000004ec0)={r11, r6, 0x0, r7}, 0x10) ioctl$TUNSETTXFILTER(r9, 0x400454d1, &(0x7f0000004f00)) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000004f40)={'batadv0\x00', 0x2}) ioctl$TUNSETSTEERINGEBPF(r9, 0x800454e0, &(0x7f0000004f80)=r7) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000052c0)={0xa, 0x1c, &(0x7f0000004fc0)=@raw=[@ldst={0x2, 0x3, 0x3, 0xb, 0x7, 0x80, 0x1}, @exit, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}}, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x3}, @map_val={0x18, 0x2, 0x2, 0x0, r5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @func], &(0x7f00000050c0)='syzkaller\x00', 0x3, 0xc7, &(0x7f0000005100)=""/199, 0x41100, 0x8, '\x00', r1, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000005200)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000005240)={0x1, 0x10, 0xb}, 0x10, r2, r7, 0x0, &(0x7f0000005280)=[r5, r4, r5], 0x0, 0x10, 0xfffffffd}, 0x94) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000053c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000005380)={@cgroup=r13, r7, 0x29, 0x9, r12, @void, @value=r7}, 0x20) 4.260965003s ago: executing program 2 (id=3051): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100007, 0x4, 0x25, 0x1, 0xffffffffffffffff, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x2000cc0, r2}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRES64=r4], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000003b000b05d25a806c8c6394f90224fc6010000500", 0x18}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x8) 3.723103748s ago: executing program 2 (id=3056): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000100000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) gettid() close(0xffffffffffffffff) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x20811, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x5}, 0x1009b1, 0xc8, 0xfffffff9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7968dd986c6a6700020006aa"], 0xfdef) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0xfdef) sendmsg$unix(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="ed98276b7b308a7f844a1e8f5a9d2cff05118f257d1d787a8d5f320e710175cbac9cfaf3fce951ae488ffc8d7a18cbbfd9d5803a2ab2906cc61707c4c6224c25960ee57349d49e874fd8d75909415905dd1dab043b80ae07beab273652ff99c7fe22", 0x62}, {&(0x7f00000002c0)="ee74a72006dca14b432beb84d703d1e50815bce9bcd4c4152a9031b5208bd179eb2b1ff25a9c57e65ec127fb0bd0c9428e65339498c4f5029144f7829f7997a404ee6bd17f60a3dbbe75ad5717960d70b41988211fa19a4e8e3a0e20821dfb2d442cff8978ee937537eb6d2819824a8ea051e0f22e0e4fbcd2e2987d6b9003628280f6368a1b870e159a231ebf730f0574d9ebae0070a2c06094257b30120c31082b1113a9bee09ec4cf04b859a78fb0274ed2dc952b60e51936282f98396d4bac164eac1ad8e0dc8be0dd6f75ade24f64700a9b1157e44151b57a755b7a619431d6c588564b3c1fe5302da9", 0xec}], 0x2, 0x0, 0x0, 0x4008000}, 0x0) 3.612934298s ago: executing program 1 (id=3057): unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6307ce22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x5d, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1801000411000000000000000000000000000000d2afa84016c28abb52b6025ed5e1ce6f35ebfe3287b726758527c0032368b5b015a8d09d1a4eb9ea7eef3ce001f9e353753aedbac70b24c13a29971963575ba7adb956cb19de551f5f39983c33c35d04dcdf056d7056ec0876e5b47a3f42c57ec9e114ca9c49bca6b0ce368468b9be1d884963a568076137626657f11df9af3ad9aa44", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0xfffffe51) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x400}, [@call={0x85, 0x0, 0x0, 0x27}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a0053"], 0xfe33) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000040)) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040a00000000fe0500002015000600142603600e1209000a00000000000001060000b94dcf5c0468c1d67f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xd8}], 0x1}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8915, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x9) openat$tun(0xffffffffffffff9c, 0x0, 0x440000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, @fallback=0x13, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r8, &(0x7f0000000180), 0x40010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x2160) 2.302598257s ago: executing program 4 (id=3064): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0xe3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x3, &(0x7f0000000640)=@framed, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x45, &(0x7f00000002c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x4b, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400), 0x8) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYRES16=0x0], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f0000000100)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r8}, 0x94) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a80)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r10, &(0x7f0000000000), 0x2a979d) (async) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0xffffffffffffffff, 0x6, 0x10}, 0xc) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000a40)={'netpci0\x00', @multicast}) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@generic={&(0x7f00000007c0)='./file0\x00', 0x0, 0x8}, 0x18) (async) r14 = bpf$ITER_CREATE(0x21, &(0x7f0000000840), 0x8) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r15, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r16, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce813d388800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) (async) r17 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x815, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000480)='syzkaller\x00', 0x41b, 0x16, &(0x7f00000004c0)=""/22, 0x41100, 0x40, '\x00', 0x0, @xdp, r10, 0x8, &(0x7f0000000700)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x5, 0x10, 0x3, 0x3e4f}, 0x10, r8, r9, 0x3, &(0x7f0000000900)=[r11, r12, r13, r14, r16, r17], &(0x7f0000000940)=[{0x1, 0x1}, {0x1, 0x5, 0xa, 0x1}, {0x0, 0x2, 0xb, 0xc}], 0x10, 0x3}, 0x94) (async) ioctl$TUNGETVNETLE(r16, 0x800454dd, &(0x7f0000000ac0)) 2.109207882s ago: executing program 4 (id=3065): perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000640)="d8000000180081054e81f782db4cb904021d0800fe00fe2eb29a39b4d305e8fe55a10a001500060014460d000000000000007f170301a8001600a40002400f000100005c0461c1d6457f01a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee53502bc9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970300000000000000000000000000000000000000fe8899d1b098ed0b00000000e2a609", 0xdb}], 0x1}, 0x20000800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x11, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 1.974508789s ago: executing program 1 (id=3066): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@float={0x5, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x5f, 0x2e, 0x61, 0x2e]}}, 0x0, 0x2a, 0x0, 0x1, 0x3d893e82}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18300000040000000000000003000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xab}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socket$kcm(0xa, 0x6, 0x0) 1.825618962s ago: executing program 1 (id=3067): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], 0x0, 0xa6, &(0x7f0000000140)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x71, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x1, 0x1000, 0x2d27715a, 0x22000, r0, 0x7, '\x00', r1, 0xffffffffffffffff, 0x0, 0x3, 0x5, 0xf}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="180000008f0000000000db030000000000000000", @ANYRES32, @ANYRESDEC=r1], &(0x7f0000000680)='syzkaller\x00', 0xa, 0x101a, &(0x7f0000000840)=""/4122, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 1.723826484s ago: executing program 1 (id=3068): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b87, 0x2, @perf_bp={0x0, 0x3}, 0x8004, 0x2000005, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x34}}, @ip_tos_u8={{0x18, 0x29, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x14}, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f00000011c0), 0x6e, &(0x7f0000001680)=[{&(0x7f0000001240)=""/165, 0xa5}, {&(0x7f0000001300)=""/131, 0x83}, {&(0x7f00000013c0)=""/37, 0x25}, {&(0x7f0000001400)=""/115, 0x73}, {&(0x7f0000001480)=""/26, 0x1a}, {&(0x7f0000003100)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/224, 0xe0}, {&(0x7f00000015c0)=""/104, 0x68}, {&(0x7f0000001640)=""/61, 0x3d}], 0x9, &(0x7f0000001740)=[@cred={{0x1c}}], 0x20}, 0x10060) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x11, 0x4, 0x3000000, 0x1f}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b35d25a806c8c6f94f90c24fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000001b40)={&(0x7f00000017c0)=@sco, 0x80, &(0x7f0000001140)=[{&(0x7f0000004100)=""/4096, 0x1000}, {&(0x7f0000001840)=""/121, 0x79}, {&(0x7f00000018c0)=""/218, 0xda}, {&(0x7f00000019c0)=""/106, 0x6a}], 0x4, &(0x7f0000001a40)=""/224, 0xe0}, 0x40) 159.869888ms ago: executing program 2 (id=3069): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x36000000}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x4e}, 0x28) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) (rerun: 32) r2 = socket$kcm(0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) (async) r3 = openat$cgroup_ro(r1, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r3, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0xc, 0xfff, 0x9d, 0x80, r3, 0x4, '\x00', r4, r0, 0x0, 0x5, 0x1}, 0x50) 63.762381ms ago: executing program 4 (id=3070): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (async) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$kcm(0x2, 0x5, 0x84) (async) socket$kcm(0x2, 0x5, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$tun(0xffffffffffffff9c, 0x0, 0x123001, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x123001, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0x1000000}, 0x50) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0x1000000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000046cb95a850000008200000018110000", @ANYRES32=r6, @ANYBLOB="000000deffffff00b7080000000000007b8af8ff000000004e748ae8b4bca2000000000000a60209000000000000000000330000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000046cb95a850000008200000018110000", @ANYRES32=r6, @ANYBLOB="000000deffffff00b7080000000000007b8af8ff000000004e748ae8b4bca2000000000000a60209000000000000000000330000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000f0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r8, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000051000000000000000800a0018010000756c6c2500000000002020207b1af8ff00000000bfa1000000000000e7010000f8ffffefb702000008000000b70300000000080085000000c80000009500000000ff0000ab"], &(0x7f00000005c0)='GPL\x00', 0x7, 0x78, &(0x7f0000000b80)=""/120, 0x40f00, 0x8}, 0x94) 0s ago: executing program 1 (id=3071): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x17, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x10282, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_clone(0x8201000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x5, 0x0) socketpair(0xa, 0x3, 0x0, &(0x7f0000000180)) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x3}, 0x80, 0x0}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYBLOB="0000002f580b4eda04c53132090000000000", @ANYRES32, @ANYBLOB='\x00'/20], 0x64) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b91c021d080201000000120000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) kernel console output (not intermixed with test programs): ected cc 0x0c38 length: 249 > 2 [ 408.979219][T11709] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1593'. [ 409.052875][T11704] lo: entered allmulticast mode [ 409.212461][T11712] validate_nla: 1 callbacks suppressed [ 409.212480][T11712] netlink: 'syz.0.1593': attribute type 4 has an invalid length. [ 409.252256][T11712] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1593'. [ 409.911488][T11729] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1595'. [ 409.967799][T11729] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 410.047478][ T136] erspan0 (unregistering): left allmulticast mode [ 410.077771][ T136] erspan0 (unregistering): left promiscuous mode [ 410.094394][ T136] bridge0: port 3(erspan0) entered disabled state [ 410.427883][ T5787] Bluetooth: hci1: command tx timeout [ 410.971038][T11743] : renamed from bond_slave_0 (while UP) [ 411.868032][T11751] tap0: tun_chr_ioctl cmd 35108 [ 412.034513][T11684] chnl_net:caif_netlink_parms(): no params data found [ 412.389682][T11770] netlink: 'syz.2.1603': attribute type 3 has an invalid length. [ 412.447792][T11770] netlink: 'syz.2.1603': attribute type 1 has an invalid length. [ 412.465959][T11770] netlink: 130160 bytes leftover after parsing attributes in process `syz.2.1603'. [ 412.507973][ T5787] Bluetooth: hci1: command tx timeout [ 412.756977][T11768] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 413.156584][T11781] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.1604'. [ 413.389178][T11684] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.396490][T11684] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.411704][T11684] bridge_slave_0: entered allmulticast mode [ 413.425170][T11684] bridge_slave_0: entered promiscuous mode [ 413.439383][T11684] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.446612][T11684] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.457968][T11684] bridge_slave_1: entered allmulticast mode [ 413.465454][T11684] bridge_slave_1: entered promiscuous mode [ 413.589397][T11790] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.1606'. [ 413.755196][T11684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.792177][ T136] hsr_slave_0: left promiscuous mode [ 413.823255][ T136] hsr_slave_1: left promiscuous mode [ 413.837961][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.857855][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.866201][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.885588][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.903248][ T136] bond0: left allmulticast mode [ 413.908782][ T136] bond_slave_0: left allmulticast mode [ 413.914343][ T136] bond_slave_1: left allmulticast mode [ 413.939016][ T136] bridge0: port 4(bond0) entered disabled state [ 413.965033][ T136] bridge_slave_1: left allmulticast mode [ 413.977766][ T136] bridge_slave_1: left promiscuous mode [ 413.983611][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.003602][ T136] bridge_slave_0: left allmulticast mode [ 414.022162][ T136] bridge_slave_0: left promiscuous mode [ 414.034847][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.094341][ T136] veth1_macvtap: left promiscuous mode [ 414.329666][ T136] team0 (unregistering): Port device geneve1 removed [ 414.583421][ T5787] Bluetooth: hci1: command tx timeout [ 414.921840][ T136] team0 (unregistering): Port device team_slave_1 removed [ 415.003468][ T136] team0 (unregistering): Port device team_slave_0 removed [ 415.085214][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.101603][ T136] bond_slave_1 (unregistering): left promiscuous mode [ 415.174862][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.190875][ T136] bond_slave_0 (unregistering): left promiscuous mode [ 415.712438][ T136] team0 (unregistering): Port device bridge0 removed [ 415.757243][ T136] bond0 (unregistering): Released all slaves [ 415.867996][T11684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.990894][T11684] team0: Port device team_slave_0 added [ 416.002039][T11684] team0: Port device team_slave_1 added [ 416.085135][T11684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.112950][T11684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.177921][T11684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.196504][T11684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.204484][T11684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.231391][T11684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.272851][T11820] netlink: 'syz.2.1611': attribute type 28 has an invalid length. [ 416.313787][T11820] netlink: 'syz.2.1611': attribute type 4 has an invalid length. [ 416.352599][T11684] hsr_slave_0: entered promiscuous mode [ 416.383322][T11820] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1611'. [ 416.400116][T11684] hsr_slave_1: entered promiscuous mode [ 416.525110][T11822] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1610'. [ 416.657820][ T5787] Bluetooth: hci1: command tx timeout [ 417.613655][T11861] netlink: 'syz.2.1618': attribute type 4 has an invalid length. [ 417.649404][T11861] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1618'. [ 418.844211][T11877] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 419.035225][T11897] netlink: 'syz.1.1626': attribute type 29 has an invalid length. [ 419.116606][T11897] netlink: 'syz.1.1626': attribute type 29 has an invalid length. [ 419.196540][T11684] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 419.221040][T11684] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 419.267785][T11684] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 419.308689][T11684] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 419.716492][T11684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.816089][T11684] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.865490][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.872737][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.947301][ T6261] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.954606][ T6261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.883032][T11684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.085004][T11684] veth0_vlan: entered promiscuous mode [ 421.137329][T11684] veth1_vlan: entered promiscuous mode [ 421.272516][T11684] veth0_macvtap: entered promiscuous mode [ 421.320495][T11684] veth1_macvtap: entered promiscuous mode [ 421.417441][T11957] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1636'. [ 421.442100][T11684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.494221][T11684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.567700][T11684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.584645][T11684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.605625][T11684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.619918][T11684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.640723][T11684] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.681851][T11684] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.701053][T11684] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.738406][T11684] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.242095][ T6272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.284902][ T6272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.394009][ T6281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.427032][ T6281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.651195][T11994] netlink: 'syz.2.1644': attribute type 21 has an invalid length. [ 423.806810][T12022] netlink: 'syz.1.1647': attribute type 4 has an invalid length. [ 423.817456][T12022] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1647'. [ 424.100518][T12030] netlink: 'syz.2.1649': attribute type 29 has an invalid length. [ 424.157450][T12030] netlink: 'syz.2.1649': attribute type 29 has an invalid length. [ 424.359766][T12043] netlink: 'syz.2.1652': attribute type 2 has an invalid length. [ 424.367572][T12043] netlink: 'syz.2.1652': attribute type 9 has an invalid length. [ 424.407783][T12043] netlink: 'syz.2.1652': attribute type 10 has an invalid length. [ 424.436154][T12043] netlink: 'syz.2.1652': attribute type 11 has an invalid length. [ 424.452747][T12043] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1652'. [ 424.472248][T12046] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1654'. [ 424.921260][T12060] __sock_release: fasync list not empty! [ 424.971743][T12064] tap0: tun_chr_ioctl cmd 35108 [ 425.486164][T12071] syzkaller0: entered promiscuous mode [ 425.504016][T12071] syzkaller0: entered allmulticast mode [ 426.215969][T12096] syz.2.1664[12096] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 426.216252][T12096] syz.2.1664[12096] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 429.441629][T12131] mac80211_hwsim hwsim29 »»»»»»: renamed from wlan0 (while UP) [ 429.709287][T12137] aaaaaaaaaaaaaaa: entered promiscuous mode [ 432.352798][T12185] netlink: 'syz.2.1680': attribute type 3 has an invalid length. [ 432.493005][T12183] netlink: 'syz.2.1680': attribute type 3 has an invalid length. [ 432.651298][T12185] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1680'. [ 432.697811][T12183] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1680'. [ 433.026528][T12196] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1681'. [ 433.759832][T12164] netlink: 145544 bytes leftover after parsing attributes in process `syz.3.1677'. [ 433.793998][T12217] netlink: 'syz.2.1686': attribute type 3 has an invalid length. [ 433.807208][T12217] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1686'. [ 433.885233][T12164] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 433.981765][T12218] netlink: 'syz.0.1687': attribute type 21 has an invalid length. [ 434.028471][T12218] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1687'. [ 434.056748][T12218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1687'. [ 434.114822][T12221] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1687'. [ 434.272638][T12226] netlink: 'syz.2.1688': attribute type 4 has an invalid length. [ 434.300251][T12226] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1688'. [ 434.397016][T12226] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 434.522466][T12232] veth1_vlan: entered allmulticast mode [ 436.598372][T12293] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1709'. [ 437.907140][ T6281] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 439.433947][T12326] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1716'. [ 440.184726][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.198158][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.535321][T12364] netlink: 'syz.1.1726': attribute type 10 has an invalid length. [ 440.646205][T12372] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1728'. [ 440.822568][T12378] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1730'. [ 440.844565][T12378] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 440.876697][T12378] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 441.276817][T12388] syzkaller0: entered promiscuous mode [ 441.306032][T12388] syzkaller0: entered allmulticast mode [ 445.152035][T12405] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.1737'. [ 445.337433][T12424] netlink: 'syz.0.1740': attribute type 21 has an invalid length. [ 445.361068][T12424] netlink: 'syz.0.1740': attribute type 1 has an invalid length. [ 445.394487][T12424] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1740'. [ 445.424320][T12426] netlink: 'syz.2.1742': attribute type 10 has an invalid length. [ 445.625713][T12426] ` (unregistering): Port device team_slave_0 removed [ 445.665912][T12426] ` (unregistering): Port device team_slave_1 removed [ 445.722327][T12426] ` (unregistering): Port device dummy0 removed [ 445.951998][T12440] syzkaller0: entered promiscuous mode [ 445.968085][T12440] syzkaller0: entered allmulticast mode [ 446.014823][T12448] pim6reg0: tun_chr_ioctl cmd 1074025692 [ 446.979371][T12457] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1751'. [ 448.822810][T12451] netlink: 'syz.2.1749': attribute type 16 has an invalid length. [ 448.831054][T12451] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1749'. [ 448.857874][T12457] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1751'. [ 449.020977][T12463] netlink: 'syz.1.1754': attribute type 33 has an invalid length. [ 449.042369][T12463] netlink: 'syz.1.1754': attribute type 3 has an invalid length. [ 449.067883][T12463] netlink: 153952 bytes leftover after parsing attributes in process `syz.1.1754'. [ 449.355693][T12474] netlink: 'syz.1.1757': attribute type 21 has an invalid length. [ 450.515698][T12476] syzkaller0: entered promiscuous mode [ 450.577328][T12476] syzkaller0: entered allmulticast mode [ 451.523060][T12497] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1763'. [ 452.570533][T12510] netlink: 'syz.2.1767': attribute type 29 has an invalid length. [ 454.053438][T12495] netlink: 'syz.3.1763': attribute type 21 has an invalid length. [ 454.061919][T12495] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1763'. [ 454.072613][T12497] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1763'. [ 454.086104][T12510] netlink: 'syz.2.1767': attribute type 29 has an invalid length. [ 454.102065][T12511] netlink: 'syz.2.1767': attribute type 10 has an invalid length. [ 454.110854][T12511] batman_adv: batadv0: Adding interface: dummy0 [ 454.117152][T12511] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.146390][T12511] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 454.715461][T12532] netlink: 'syz.1.1773': attribute type 27 has an invalid length. [ 454.724413][T12532] netlink: 'syz.1.1773': attribute type 4 has an invalid length. [ 454.762306][T12532] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1773'. [ 454.927851][T12547] netlink: 'syz.0.1777': attribute type 3 has an invalid length. [ 454.963691][T12547] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1777'. [ 455.143290][T12552] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.1778'. [ 455.487752][T12560] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1781'. [ 456.059189][T12570] netlink: 'syz.0.1784': attribute type 5 has an invalid length. [ 456.613859][T12580] macsec0: entered promiscuous mode [ 456.627614][T12580] macsec0: entered allmulticast mode [ 456.650290][T12580] veth1_macvtap: entered allmulticast mode [ 456.687540][T12586] netlink: 'syz.0.1788': attribute type 2 has an invalid length. [ 456.703750][T12586] netlink: 'syz.0.1788': attribute type 8 has an invalid length. [ 456.730577][T12586] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1788'. [ 457.828742][T12620] netlink: 'syz.0.1797': attribute type 3 has an invalid length. [ 457.847516][T12620] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1797'. [ 458.083288][T12642] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1803'. [ 458.195740][T12642] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1803'. [ 458.207016][T12646] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1803'. [ 460.402268][T12642] validate_nla: 1 callbacks suppressed [ 460.402285][T12642] netlink: 'syz.3.1803': attribute type 5 has an invalid length. [ 460.427051][T12646] Ÿë: port 1(gretap0) entered blocking state [ 460.435655][T12646] Ÿë: port 1(gretap0) entered disabled state [ 460.449124][T12646] gretap0: entered allmulticast mode [ 460.456210][T12646] gretap0: entered promiscuous mode [ 460.621235][T12674] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1811'. [ 460.636496][T12671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 460.694174][T12675] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1811'. [ 460.700329][T12674] openvswitch: netlink: Flow key attribute not present in set flow. [ 460.724694][ T5787] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 461.368663][T12709] syz.0.1820: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 461.388356][T12709] CPU: 1 PID: 12709 Comm: syz.0.1820 Not tainted syzkaller #0 [ 461.395890][T12709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 461.406015][T12709] Call Trace: [ 461.409344][T12709] [ 461.412312][T12709] dump_stack_lvl+0x18c/0x250 [ 461.417056][T12709] ? show_regs_print_info+0x20/0x20 [ 461.422325][T12709] ? load_image+0x400/0x400 [ 461.426892][T12709] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 461.433353][T12709] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 461.439913][T12709] warn_alloc+0x246/0x340 [ 461.444313][T12709] ? stack_trace_save+0xaa/0x100 [ 461.449305][T12709] ? zone_watermark_ok_safe+0x230/0x230 [ 461.454920][T12709] ? kasan_set_track+0x5f/0x70 [ 461.459747][T12709] ? kasan_set_track+0x4e/0x70 [ 461.464558][T12709] ? __kasan_kmalloc+0x8f/0xa0 [ 461.469372][T12709] ? xsk_init_queue+0xad/0x100 [ 461.474194][T12709] ? xsk_setsockopt+0x4e5/0x760 [ 461.479105][T12709] ? do_sock_setsockopt+0x175/0x1a0 [ 461.484350][T12709] ? __x64_sys_setsockopt+0x182/0x200 [ 461.489780][T12709] __vmalloc_node_range+0x126/0x1330 [ 461.495148][T12709] ? free_vm_area+0x50/0x50 [ 461.499716][T12709] vmalloc_user+0x74/0x80 [ 461.504110][T12709] ? xskq_create+0xbf/0x170 [ 461.508698][T12709] xskq_create+0xbf/0x170 [ 461.513092][T12709] xsk_init_queue+0xad/0x100 [ 461.517742][T12709] xsk_setsockopt+0x4e5/0x760 [ 461.522484][T12709] ? xsk_poll+0x680/0x680 [ 461.526885][T12709] ? __fget_files+0x28/0x4b0 [ 461.531531][T12709] ? __fget_files+0x28/0x4b0 [ 461.536177][T12709] ? aa_sock_opt_perm+0x74/0x100 [ 461.541169][T12709] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 461.546771][T12709] ? security_socket_setsockopt+0x7e/0xa0 [ 461.552548][T12709] ? xsk_poll+0x680/0x680 [ 461.556939][T12709] do_sock_setsockopt+0x175/0x1a0 [ 461.562011][T12709] ? __fdget+0x180/0x210 [ 461.566320][T12709] __x64_sys_setsockopt+0x182/0x200 [ 461.571577][T12709] do_syscall_64+0x55/0xa0 [ 461.576053][T12709] ? clear_bhb_loop+0x40/0x90 [ 461.580784][T12709] ? clear_bhb_loop+0x40/0x90 [ 461.585512][T12709] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 461.591540][T12709] RIP: 0033:0x7f2b5eb9c799 [ 461.595999][T12709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.615673][T12709] RSP: 002b:00007f2b5fad5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 461.624149][T12709] RAX: ffffffffffffffda RBX: 00007f2b5ee15fa0 RCX: 00007f2b5eb9c799 [ 461.632159][T12709] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 461.640170][T12709] RBP: 00007f2b5ec32bd9 R08: 0000000000000004 R09: 0000000000000000 [ 461.648189][T12709] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 461.656192][T12709] R13: 00007f2b5ee16038 R14: 00007f2b5ee15fa0 R15: 00007ffe5eaa7ea8 [ 461.664285][T12709] [ 461.684811][T12709] Mem-Info: [ 461.689235][T12709] active_anon:8512 inactive_anon:0 isolated_anon:0 [ 461.689235][T12709] active_file:17067 inactive_file:40077 isolated_file:0 [ 461.689235][T12709] unevictable:768 dirty:34 writeback:0 [ 461.689235][T12709] slab_reclaimable:10528 slab_unreclaimable:95787 [ 461.689235][T12709] mapped:24304 shmem:1361 pagetables:509 [ 461.689235][T12709] sec_pagetables:0 bounce:0 [ 461.689235][T12709] kernel_misc_reclaimable:0 [ 461.689235][T12709] free:1336395 free_pcp:11132 free_cma:0 [ 461.761380][T12709] Node 0 active_anon:34048kB inactive_anon:0kB active_file:68268kB inactive_file:160108kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97216kB dirty:132kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10712kB pagetables:2036kB sec_pagetables:0kB all_unreclaimable? no [ 461.813932][T12709] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 461.925899][T12709] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 461.957195][T12724] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1822'. [ 461.969012][T12724] netlink: 'syz.1.1822': attribute type 28 has an invalid length. [ 461.985285][T12724] netlink: 'syz.1.1822': attribute type 29 has an invalid length. [ 461.993342][T12709] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 462.007730][T12724] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1822'. [ 462.017012][T12709] Node 0 DMA32 free:1426904kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:34208kB inactive_anon:0kB active_file:68268kB inactive_file:159284kB unevictable:1536kB writepending:132kB present:3129332kB managed:2586964kB mlocked:0kB bounce:0kB free_pcp:30232kB local_pcp:20156kB free_cma:0kB [ 462.052858][T12727] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1822'. [ 462.067251][T12709] lowmem_reserve[]: 0 0 0 0 0 [ 462.073228][T12709] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 462.100852][T12709] lowmem_reserve[]: 0 0 0 0 0 [ 462.106322][T12709] Node 1 Normal free:3902992kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:14528kB local_pcp:8576kB free_cma:0kB [ 462.209243][T12709] lowmem_reserve[]: 0 0 0 0 0 [ 462.214183][T12709] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 462.253794][T12709] Node 0 DMA32: 458*4kB (UM) 782*8kB (UME) 806*16kB (UME) 361*32kB (UME) 487*64kB (UME) 336*128kB (UME) 128*256kB (UM) 53*512kB (UME) 15*1024kB (UME) 6*2048kB (UM) 301*4096kB (UM) = 1427160kB [ 462.287211][T12709] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 462.303721][T12709] Node 1 Normal: 228*4kB (UME) 52*8kB (UME) 44*16kB (UME) 149*32kB (UME) 34*64kB (UME) 10*128kB (UE) 0*256kB 1*512kB (M) 1*1024kB (E) 2*2048kB (UE) 949*4096kB (M) = 3902992kB [ 462.330780][T12709] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 462.381389][T12709] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 462.396604][T12709] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 462.426803][T12709] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 462.447905][T12709] 58505 total pagecache pages [ 462.462552][T12709] 0 pages in swap cache [ 462.472734][T12709] Free swap = 124996kB [ 462.476944][T12709] Total swap = 124996kB [ 462.498046][T12709] 2097051 pages RAM [ 462.502310][T12709] 0 pages HighMem/MovableOnly [ 462.517780][T12709] 416924 pages reserved [ 462.522026][T12709] 0 pages cma reserved [ 463.261755][T12755] netlink: 'syz.2.1834': attribute type 21 has an invalid length. [ 466.283008][T12774] netlink: 'syz.1.1840': attribute type 1 has an invalid length. [ 466.297852][T12774] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1840'. [ 466.473873][T12787] netlink: 'syz.0.1842': attribute type 10 has an invalid length. [ 466.523265][T12787] veth1_vlan: left allmulticast mode [ 466.588259][T12787] `: Device veth1_vlan failed to register rx_handler [ 466.816245][T12793] netlink: 'syz.1.1844': attribute type 10 has an invalid length. [ 466.838383][T12793] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.845833][T12793] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.214492][T12813] netlink: 'syz.1.1851': attribute type 3 has an invalid length. [ 467.246912][T12813] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1851'. [ 467.572230][T12828] netlink: 'syz.1.1855': attribute type 28 has an invalid length. [ 467.621157][T12828] netlink: 'syz.1.1855': attribute type 3 has an invalid length. [ 467.650794][T12828] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1855'. [ 467.894751][T12843] netlink: 'syz.1.1858': attribute type 41 has an invalid length. [ 467.904514][T12843] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1858'. [ 468.057404][T12849] netlink: 'syz.2.1860': attribute type 1 has an invalid length. [ 468.082041][T12849] netlink: 'syz.2.1860': attribute type 3 has an invalid length. [ 468.121702][T12849] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1860'. [ 468.544112][T12870] netlink: 'syz.0.1867': attribute type 9 has an invalid length. [ 468.552377][T12870] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1867'. [ 468.789947][T12869] delete_channel: no stack [ 469.045215][ T136] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 469.400429][T12896] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1875'. [ 469.781539][T12898] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 469.974963][T12912] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.1880'. [ 469.994923][T12912] netlink: zone id is out of range [ 470.007749][T12912] netlink: zone id is out of range [ 470.012942][T12912] netlink: zone id is out of range [ 470.024054][T12912] netlink: zone id is out of range [ 470.037209][T12920] veth1_vlan: entered allmulticast mode [ 470.063478][T12912] netlink: zone id is out of range [ 470.069872][T12912] netlink: zone id is out of range [ 470.089007][T12912] netlink: zone id is out of range [ 470.105475][T12912] netlink: zone id is out of range [ 470.122541][T12912] netlink: zone id is out of range [ 470.136319][T12912] netlink: zone id is out of range [ 470.161390][T12925] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1884'. [ 471.346624][T12939] sit0: left promiscuous mode [ 471.526118][T12936] validate_nla: 4 callbacks suppressed [ 471.526138][T12936] netlink: 'syz.1.1887': attribute type 10 has an invalid length. [ 471.655038][T12959] ªªªªª»: renamed from vlan0 (while UP) [ 471.945820][T12971] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1896'. [ 472.425302][T12984] netlink: 'syz.3.1901': attribute type 1 has an invalid length. [ 472.442258][T12984] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.1901'. [ 474.807876][T12984] netlink: 'syz.3.1901': attribute type 4 has an invalid length. [ 474.815873][T12984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1901'. [ 474.846449][T13001] netlink: 'syz.0.1905': attribute type 39 has an invalid length. [ 474.950537][T13001] hsr_slave_1 (unregistering): left promiscuous mode [ 475.163092][T13014] netlink: 'syz.0.1910': attribute type 16 has an invalid length. [ 475.187778][T13014] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1910'. [ 475.273290][T13019] IPv6: NLM_F_CREATE should be specified when creating new route [ 475.610753][T13031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 476.131654][T13044] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1918'. [ 476.707407][T13071] netlink: 'syz.1.1926': attribute type 21 has an invalid length. [ 476.859099][T13081] netlink: 'syz.1.1928': attribute type 6 has an invalid length. [ 477.478107][T13098] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1933'. [ 477.548208][T13093] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1932'. [ 478.234481][T13121] netlink: 'syz.2.1939': attribute type 10 has an invalid length. [ 478.253958][T13122] netlink: 'syz.2.1939': attribute type 10 has an invalid length. [ 478.312996][T13131] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1942'. [ 478.428936][T13132] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1941'. [ 479.059498][T13150] ref_ctr_offset mismatch. inode: 0x1a8 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 479.515784][T13165] netlink: 'syz.1.1949': attribute type 10 has an invalid length. [ 480.833477][T13194] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1958'. [ 481.265351][T13208] netlink: 'syz.3.1962': attribute type 10 has an invalid length. [ 481.281759][T13208] netlink: 209216 bytes leftover after parsing attributes in process `syz.3.1962'. [ 481.304089][T13208] net_ratelimit: 330 callbacks suppressed [ 481.304106][T13208] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 481.682727][T13215] netlink: 'syz.0.1963': attribute type 1 has an invalid length. [ 481.697321][T13215] netlink: 'syz.0.1963': attribute type 3 has an invalid length. [ 481.717918][T13215] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1963'. [ 482.846277][T13245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1973'. [ 482.959691][T13237] aaaaaaaaaaaaaaa: entered promiscuous mode [ 483.310440][T13253] netlink: 'syz.0.1975': attribute type 1 has an invalid length. [ 483.327695][T13253] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1975'. [ 484.220880][T13258] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1976'. [ 484.270838][T13263] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1978'. [ 484.572241][T13270] netlink: 'syz.0.1979': attribute type 4 has an invalid length. [ 484.590747][T13270] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1979'. [ 484.739836][T13270] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 486.487265][T13293] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1987'. [ 488.946390][T13312] netlink: 'syz.1.1994': attribute type 4 has an invalid length. [ 488.956267][T13312] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1994'. [ 488.986323][T13312] wlan1: mtu less than device minimum [ 493.376273][T13398] netlink: 'syz.0.2019': attribute type 9 has an invalid length. [ 493.410410][T13398] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2019'. [ 493.683688][T13404] netlink: 'syz.0.2019': attribute type 9 has an invalid length. [ 493.693141][T13404] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2019'. [ 494.007023][T13417] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2025'. [ 494.658374][T13432] netlink: 209032 bytes leftover after parsing attributes in process `syz.3.2029'. [ 495.153144][T13449] netlink: 'syz.3.2034': attribute type 2 has an invalid length. [ 495.161297][T13449] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2034'. [ 495.373608][T13439] syzkaller0: entered promiscuous mode [ 495.387774][T13439] syzkaller0: entered allmulticast mode [ 495.425226][T13437] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 495.486283][T13453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.512068][T13451] delete_channel: no stack [ 496.288091][T13479] netlink: 199816 bytes leftover after parsing attributes in process `syz.3.2042'. [ 496.663341][T13484] netlink: 'syz.2.2043': attribute type 3 has an invalid length. [ 496.692404][T13484] netlink: 'syz.2.2043': attribute type 1 has an invalid length. [ 496.710002][T13484] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.2043'. [ 498.147478][T13478] netlink: 'syz.3.2042': attribute type 39 has an invalid length. [ 498.457751][T13495] netlink: 'syz.0.2047': attribute type 49 has an invalid length. [ 498.495535][T13495] netlink: set zone limit has 8 unknown bytes [ 499.170901][T13532] netlink: 'syz.3.2057': attribute type 3 has an invalid length. [ 499.187863][T13532] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2057'. [ 499.665748][T13552] netlink: 'syz.2.2063': attribute type 10 has an invalid length. [ 499.707313][T13552] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2063'. [ 499.739992][T13552] bond_slave_1: entered promiscuous mode [ 499.754743][T13552] bond0: entered promiscuous mode [ 499.783407][T13552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.994584][T13564] netlink: 'syz.2.2068': attribute type 10 has an invalid length. [ 500.004063][T13564] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.2068'. [ 500.061932][T13564] mac80211_hwsim hwsim6 »»»»»»: renamed from wlan0 [ 500.156990][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 500.833590][ T5787] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 501.467978][T13601] netlink: 'syz.1.2077': attribute type 2 has an invalid length. [ 501.478913][T13601] netlink: 51 bytes leftover after parsing attributes in process `syz.1.2077'. [ 501.593339][T13605] netlink: 'syz.0.2078': attribute type 21 has an invalid length. [ 501.622806][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.629978][T13605] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2078'. [ 501.637739][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.853614][T13615] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2082'. [ 501.934698][T13609] netlink: 'syz.2.2080': attribute type 2 has an invalid length. [ 501.958059][T13609] netlink: 'syz.2.2080': attribute type 8 has an invalid length. [ 501.974092][T13609] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2080'. [ 501.993630][T13621] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2080'. [ 502.199538][T13623] netlink: 'syz.0.2084': attribute type 10 has an invalid length. [ 503.411265][T13623] bond0: (slave 10): Releasing backup interface [ 503.444123][T13623] : left promiscuous mode [ 503.449679][T13623] : left allmulticast mode [ 503.468652][T13634] netlink: 'syz.2.2088': attribute type 21 has an invalid length. [ 503.476648][T13634] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2088'. [ 503.671436][T13638] netlink: 'syz.1.2090': attribute type 4 has an invalid length. [ 503.703043][T13638] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2090'. [ 503.752463][T13638] wlan1: mtu less than device minimum [ 503.899134][T13644] netlink: 'syz.0.2092': attribute type 1 has an invalid length. [ 504.196427][T13648] netlink: 'syz.1.2093': attribute type 29 has an invalid length. [ 504.220870][T13648] netlink: 'syz.1.2093': attribute type 29 has an invalid length. [ 506.832471][T13723] __nla_validate_parse: 1 callbacks suppressed [ 506.832489][T13723] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2114'. [ 506.863019][T13725] netlink: set zone limit has 8 unknown bytes [ 507.084748][T13732] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2115'. [ 508.187829][T13755] validate_nla: 2 callbacks suppressed [ 508.187847][T13755] netlink: 'syz.1.2121': attribute type 7 has an invalid length. [ 509.360657][T13739] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2118'. [ 509.531061][T13769] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2126'. [ 510.034852][T13774] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2127'. [ 510.045618][T13774] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2127'. [ 510.223075][T13779] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2127'. [ 510.237490][T13774] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2127'. [ 510.252030][T13779] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2127'. [ 511.563081][T13805] delete_channel: no stack [ 512.396626][T13813] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2137'. [ 512.943695][T13813] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2137'. [ 512.958160][T13817] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 513.226838][T13827] netlink: 'syz.0.2141': attribute type 10 has an invalid length. [ 513.291814][T13828] netlink: 'syz.0.2141': attribute type 9 has an invalid length. [ 513.311143][T13828] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2141'. [ 513.430820][T13834] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2143'. [ 513.582745][T13834] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2143'. [ 513.677108][T13831] netlink: 'syz.0.2141': attribute type 9 has an invalid length. [ 513.714112][T13831] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2141'. [ 513.818295][T13842] bridge_slave_1: left allmulticast mode [ 513.824031][T13842] bridge_slave_1: left promiscuous mode [ 513.853321][T13842] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.881272][T13842] bridge_slave_0: left allmulticast mode [ 513.887047][T13842] bridge_slave_0: left promiscuous mode [ 513.894033][T13842] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.005457][T13842] bond0: (slave bridge0): Releasing backup interface [ 514.126233][T13849] netlink: 'syz.2.2147': attribute type 21 has an invalid length. [ 514.146377][T13849] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2147'. [ 516.880971][T13874] netlink: 18187 bytes leftover after parsing attributes in process `syz.1.2154'. [ 517.711696][T13872] syzkaller0: entered promiscuous mode [ 517.717498][T13872] syzkaller0: entered allmulticast mode [ 517.734964][T13878] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 522.342098][T13898] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.2161'. [ 522.949134][T13913] pim6reg1: entered allmulticast mode [ 523.142248][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 523.153091][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 523.188160][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 523.204875][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 523.224683][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 523.233119][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 523.859307][ T8885] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.983010][ T8885] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.023233][T13917] chnl_net:caif_netlink_parms(): no params data found [ 524.098973][ T8885] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.293743][ T8885] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.439723][T13917] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.447236][T13917] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.455185][T13917] bridge_slave_0: entered allmulticast mode [ 524.464837][T13917] bridge_slave_0: entered promiscuous mode [ 524.485749][T13917] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.522413][T13917] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.531754][T13917] bridge_slave_1: entered allmulticast mode [ 524.549212][T13917] bridge_slave_1: entered promiscuous mode [ 524.595758][T13946] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2173'. [ 524.636556][T13917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.651561][T13917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.695448][T13917] team0: Port device team_slave_0 added [ 524.705284][T13917] team0: Port device team_slave_1 added [ 524.765119][T13917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.783297][T13917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.811976][T13917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.849261][T13917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.860953][T13917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.888250][T13917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.120918][T13952] netlink: 'syz.2.2175': attribute type 1 has an invalid length. [ 525.141370][T13952] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2175'. [ 525.159735][T13917] hsr_slave_0: entered promiscuous mode [ 525.167481][T13917] hsr_slave_1: entered promiscuous mode [ 525.182176][T13917] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 525.190279][T13917] Cannot create hsr debugfs directory [ 525.298341][ T51] Bluetooth: hci4: command tx timeout [ 525.624253][T13968] netlink: 'syz.0.2177': attribute type 3 has an invalid length. [ 525.647282][T13968] netlink: 'syz.0.2177': attribute type 1 has an invalid length. [ 525.691652][T13968] netlink: 130160 bytes leftover after parsing attributes in process `syz.0.2177'. [ 526.445311][ T8885] gretap0 (unregistering): left allmulticast mode [ 526.453792][ T8885] gretap0 (unregistering): left promiscuous mode [ 526.467125][ T8885] Ÿë: port 1(gretap0) entered disabled state [ 526.793574][T13993] netlink: 'syz.1.2181': attribute type 10 has an invalid length. [ 526.815994][T13993] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2181'. [ 526.962633][T13993] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 526.988946][T13917] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 527.072407][T13917] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 527.180326][T13917] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 527.271739][T13917] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 527.377776][ T51] Bluetooth: hci4: command tx timeout [ 527.733135][T14026] netlink: 'syz.1.2188': attribute type 27 has an invalid length. [ 527.845655][ T8885] hsr_slave_0: left promiscuous mode [ 527.888274][ T8885] hsr_slave_1: left promiscuous mode [ 527.899734][ T8885] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.921453][ T8885] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.944495][ T8885] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.973570][T14026] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2188'. [ 527.993940][ T8885] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.015473][ T8885] bridge_slave_1: left allmulticast mode [ 528.034460][ T8885] bridge_slave_1: left promiscuous mode [ 528.040664][ T8885] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.060942][ T8885] bridge_slave_0: left allmulticast mode [ 528.066772][ T8885] bridge_slave_0: left promiscuous mode [ 528.093481][ T8885] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.146449][ T8885] veth1_macvtap: left promiscuous mode [ 528.152996][ T8885] veth0_macvtap: left promiscuous mode [ 528.159267][ T8885] veth0_vlan: left promiscuous mode [ 528.884683][ T8885] team0 (unregistering): Port device team_slave_1 removed [ 528.934660][ T8885] team0 (unregistering): Port device team_slave_0 removed [ 528.984393][ T8885] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 529.035224][ T8885] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 529.425492][ T8885] bond0 (unregistering): Released all slaves [ 529.469436][ T51] Bluetooth: hci4: command tx timeout [ 529.853151][T13917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.949563][T13917] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.004338][ T8883] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.011628][ T8883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.093240][ T8883] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.100498][ T8883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.238433][T14048] pim6reg1: entered promiscuous mode [ 530.243817][T14048] pim6reg1: entered allmulticast mode [ 530.600560][T13917] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 531.080420][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 531.344117][T13917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.539318][ T51] Bluetooth: hci4: command tx timeout [ 532.073744][T13917] veth0_vlan: entered promiscuous mode [ 532.120103][T13917] veth1_vlan: entered promiscuous mode [ 532.275318][T14113] syzkaller0: entered promiscuous mode [ 532.282900][T14113] syzkaller0: entered allmulticast mode [ 534.933069][T13917] veth0_macvtap: entered promiscuous mode [ 534.990337][T13917] veth1_macvtap: entered promiscuous mode [ 535.066956][T13917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.105410][T13917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.138240][T13917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.159003][T13917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.192185][T13917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.203380][T14146] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2207'. [ 535.229042][T13917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.313008][T13917] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.346284][T13917] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.368839][T13917] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.387857][T13917] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.607751][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.611089][T14152] netlink: 'syz.1.2209': attribute type 1 has an invalid length. [ 535.615624][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.671068][T14152] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.2209'. [ 535.756326][ T8880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.768919][ T8880] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.063611][T14164] sit0: entered allmulticast mode [ 536.143317][T14165] veth1_vlan: entered allmulticast mode [ 536.680078][T14189] netlink: 'syz.2.2214': attribute type 1 has an invalid length. [ 536.722309][T14193] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2215'. [ 537.226977][T14207] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2220'. [ 537.310036][T14210] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 538.401241][T14245] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2228'. [ 540.688604][T14300] netlink: 'syz.4.2238': attribute type 33 has an invalid length. [ 540.696510][T14300] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2238'. [ 540.767175][T14300] `: renamed from team0 (while UP) [ 540.797111][T14307] netlink: 'syz.0.2240': attribute type 39 has an invalid length. [ 540.852974][T14312] netlink: 'syz.2.2241': attribute type 9 has an invalid length. [ 540.882524][T14312] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2241'. [ 541.352221][T14325] netlink: 'syz.1.2243': attribute type 1 has an invalid length. [ 541.429024][T14325] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.2243'. [ 541.642764][T14336] sctp: [Deprecated]: syz.1.2243 (pid 14336) Use of struct sctp_assoc_value in delayed_ack socket option. [ 541.642764][T14336] Use struct sctp_sack_info instead [ 542.449850][T14362] netlink: 'syz.1.2251': attribute type 21 has an invalid length. [ 542.474438][T14362] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2251'. [ 543.394756][T14375] netlink: 'syz.4.2254': attribute type 153 has an invalid length. [ 543.421796][T14375] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.2254'. [ 543.666893][T14397] netlink: 'syz.1.2258': attribute type 21 has an invalid length. [ 544.672732][T14426] netlink: 208092 bytes leftover after parsing attributes in process `syz.2.2265'. [ 544.706635][T14426] netlink: 'syz.2.2265': attribute type 1 has an invalid length. [ 544.733165][T14426] netlink: 'syz.2.2265': attribute type 2 has an invalid length. [ 544.742087][T14426] netlink: 'syz.2.2265': attribute type 3 has an invalid length. [ 544.998996][T14438] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2266'. [ 545.547056][T14452] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2273'. [ 545.914579][T14461] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2275'. [ 546.219897][T14461] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 546.594152][T14470] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 547.625149][T14482] validate_nla: 2 callbacks suppressed [ 547.625188][T14482] netlink: 'syz.2.2280': attribute type 10 has an invalid length. [ 547.672701][T14482] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2280'. [ 547.752892][T14482] veth0_vlan: left promiscuous mode [ 547.767867][T14482] veth0_vlan: left allmulticast mode [ 547.810640][T14482] veth0_vlan: entered promiscuous mode [ 547.906710][T14482] batman_adv: batadv0: Adding interface: veth0_vlan [ 547.919870][T14482] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.998105][T14482] batman_adv: batadv0: Interface activated: veth0_vlan [ 548.082197][T14491] netlink: 'syz.4.2281': attribute type 25 has an invalid length. [ 549.169298][T14511] netlink: 'syz.1.2284': attribute type 12 has an invalid length. [ 549.177372][T14511] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.2284'. [ 551.023799][T14554] syzkaller0: entered promiscuous mode [ 551.037885][T14554] syzkaller0: entered allmulticast mode [ 551.216643][T14558] @0Ù: renamed from bond_slave_1 (while UP) [ 551.240753][T14559] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2294'. [ 551.419828][T14559] `: Port device team_slave_0 removed [ 551.425954][T14559] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 551.523419][T14561] netlink: 'syz.1.2295': attribute type 10 has an invalid length. [ 551.547783][T14561] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2295'. [ 551.592245][T14561] team0: entered promiscuous mode [ 551.602968][T14561] team_slave_0: entered promiscuous mode [ 551.613889][T14561] team_slave_1: entered promiscuous mode [ 551.633101][T14561] team0: entered allmulticast mode [ 551.641880][T14561] team_slave_0: entered allmulticast mode [ 551.691815][T14561] team_slave_1: entered allmulticast mode [ 551.802740][T14561] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 551.835275][T14564] syzkaller0: entered promiscuous mode [ 551.841575][T14564] syzkaller0: entered allmulticast mode [ 551.979299][T14578] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2298'. [ 552.796928][T14578] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2298'. [ 553.122138][T14590] netlink: 'syz.1.2300': attribute type 2 has an invalid length. [ 553.198063][T14590] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2300'. [ 553.224356][T14597] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.2303'. [ 553.288300][T14593] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2301'. [ 553.316781][T14593] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 553.569459][T14608] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2306'. [ 553.607919][T14608] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2306'. [ 553.872309][T14621] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2308'. [ 554.377779][T14635] netlink: 'syz.4.2314': attribute type 17 has an invalid length. [ 554.412323][T14635] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 554.654775][T14636] wg2: entered allmulticast mode [ 554.775505][T14640] wg2: entered promiscuous mode [ 554.917417][T14656] netlink: 'syz.2.2317': attribute type 21 has an invalid length. [ 556.302644][T14683] netlink: 'syz.4.2325': attribute type 6 has an invalid length. [ 556.312612][T14683] __nla_validate_parse: 1 callbacks suppressed [ 556.312630][T14683] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2325'. [ 557.696439][T14727] netlink: 595 bytes leftover after parsing attributes in process `syz.0.2336'. [ 557.829087][T14731] netlink: 'syz.4.2337': attribute type 2 has an invalid length. [ 557.866034][T14731] netlink: 'syz.4.2337': attribute type 8 has an invalid length. [ 557.907715][T14731] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2337'. [ 558.588522][T14754] netlink: 'syz.2.2343': attribute type 27 has an invalid length. [ 558.596435][T14754] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.2343'. [ 558.728843][T14760] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.2345'. [ 560.432682][T14810] netlink: 'syz.0.2355': attribute type 10 has an invalid length. [ 560.817087][T14827] bond0: left allmulticast mode [ 560.851639][T14827] bond_slave_1: left allmulticast mode [ 560.878883][T14827] netdevsim netdevsim0 ªªªªªª: left allmulticast mode [ 560.914241][T14827] batadv0: left allmulticast mode [ 560.945501][T14827] bridge0: port 1(bond0) entered disabled state [ 561.065971][T14827] bridge_slave_1: left allmulticast mode [ 561.093081][T14827] bridge_slave_1: left promiscuous mode [ 561.115284][T14827] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.115934][ T8880] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 562.148399][ T5787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 562.162624][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 562.191935][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 562.202675][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 562.212765][ T5787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 562.220347][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 562.887420][ T6285] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.062693][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.069233][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.199860][ T6285] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.442095][ T6285] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.521579][T14848] chnl_net:caif_netlink_parms(): no params data found [ 563.618324][ T6285] bond0: (slave netdevsim0): Releasing backup interface [ 563.651150][ T6285] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.970967][T14848] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.006946][T14848] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.056564][T14848] bridge_slave_0: entered allmulticast mode [ 564.079639][T14848] bridge_slave_0: entered promiscuous mode [ 564.143022][T14848] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.159815][T14848] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.167117][T14848] bridge_slave_1: entered allmulticast mode [ 564.200446][T14848] bridge_slave_1: entered promiscuous mode [ 564.258902][ T5787] Bluetooth: hci1: command tx timeout [ 564.380432][T14922] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2377'. [ 564.499369][T14848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.536024][T14848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.621435][ T6285] tipc: Left network mode [ 564.695446][T14848] team0: Port device team_slave_0 added [ 564.724250][T14848] team0: Port device team_slave_1 added [ 565.357073][T14848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.364785][T14848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 565.395660][T14848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 565.437423][T14848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 565.457112][T14848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 565.528512][T14848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 565.636182][T14955] netlink: 'syz.4.2384': attribute type 2 has an invalid length. [ 565.703112][T14959] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2384'. [ 565.973100][T14955] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2384'. [ 566.294703][T14848] hsr_slave_0: entered promiscuous mode [ 566.324590][T14848] hsr_slave_1: entered promiscuous mode [ 566.338367][ T5787] Bluetooth: hci1: command tx timeout [ 568.420617][ T5787] Bluetooth: hci1: command tx timeout [ 570.179545][T15025] netlink: 'syz.2.2394': attribute type 153 has an invalid length. [ 570.377791][T15025] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.2394'. [ 570.587877][ T5787] Bluetooth: hci1: command tx timeout [ 571.812584][ T6285] bond0: (slave wlan1): Releasing backup interface [ 572.297087][T15039] netlink: 'syz.2.2395': attribute type 21 has an invalid length. [ 572.305163][T15039] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2395'. [ 572.327670][T15039] netlink: 'syz.2.2395': attribute type 4 has an invalid length. [ 572.444449][T15057] netlink: 'syz.4.2397': attribute type 39 has an invalid length. [ 572.534346][ T6285] veth0_to_team: left allmulticast mode [ 572.557745][ T6285] veth0_to_team: left promiscuous mode [ 572.563487][ T6285] Ÿë: port 1(veth0_to_team) entered disabled state [ 572.784310][ T6285] hsr_slave_0: left promiscuous mode [ 572.818900][ T6285] hsr_slave_1: left promiscuous mode [ 572.880844][ T6285] veth1_macvtap: left promiscuous mode [ 572.886404][ T6285] veth0_macvtap: left promiscuous mode [ 572.892609][ T6285] veth0_vlan: left promiscuous mode [ 573.206706][ T6285] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 573.683504][ T6285] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 573.734966][ T6285] team_slave_1 (unregistering): left promiscuous mode [ 573.742166][ T6285] team_slave_1 (unregistering): left allmulticast mode [ 573.755073][ T6285] team0 (unregistering): Port device team_slave_1 removed [ 573.802834][ T6285] team_slave_0 (unregistering): left promiscuous mode [ 573.813509][ T6285] team_slave_0 (unregistering): left allmulticast mode [ 573.821962][ T6285] team0 (unregistering): Port device team_slave_0 removed [ 573.870523][ T6285] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 573.923620][ T6285] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 574.304351][ T6285] bond0 (unregistering): Released all slaves [ 574.355257][T15045] netlink: 'syz.0.2396': attribute type 4 has an invalid length. [ 574.384387][T15045] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2396'. [ 574.541041][T14848] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 574.633022][T14848] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 574.710411][T14848] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 574.764411][T14848] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 575.326857][T14848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.480834][T14848] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.543221][ T8880] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.550564][ T8880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.624608][ T8883] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.631938][ T8883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.765518][T15119] netlink: 'syz.2.2409': attribute type 7 has an invalid length. [ 576.822625][T14848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.924514][T14848] veth0_vlan: entered promiscuous mode [ 576.976622][T14848] veth1_vlan: entered promiscuous mode [ 577.008570][T15124] netlink: 'syz.0.2411': attribute type 22 has an invalid length. [ 577.016776][T15124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2411'. [ 577.166326][T14848] veth0_macvtap: entered promiscuous mode [ 577.221591][T14848] veth1_macvtap: entered promiscuous mode [ 577.326308][T14848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.355116][T14848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.404240][T14848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 577.433562][T14848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.449815][T14848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.464619][T14848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.514393][T14848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.538186][T14848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.569132][T14848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.615649][T14848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 577.677500][T15158] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2418'. [ 577.763156][T14848] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.783663][T14848] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.794261][T14848] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.807097][T14848] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.830760][T15158] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2418'. [ 577.894842][T15165] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2418'. [ 577.905272][T15164] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2418'. [ 577.960194][T15158] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.2418'. [ 578.221445][ T6275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.268180][ T6275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.309426][T15170] C: renamed from team_slave_0 [ 578.367037][T15170] netlink: 'syz.4.2419': attribute type 4 has an invalid length. [ 578.384210][T15170] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2419'. [ 578.400885][T15170] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 578.650281][ T6285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.679858][ T6285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.794700][T15184] netlink: 703 bytes leftover after parsing attributes in process `syz.4.2424'. [ 579.627403][T15194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 579.668083][T15194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 579.731718][T15194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 579.756846][T15194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 580.022871][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 580.032992][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 580.050783][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 580.059392][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 580.067262][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 580.100901][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 580.473434][ T8880] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.714362][ T8880] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.814298][T15208] syzkaller0: entered promiscuous mode [ 580.822127][T15208] syzkaller0: entered allmulticast mode [ 580.961069][ T8880] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.179581][ T51] Bluetooth: hci3: command tx timeout [ 583.873324][ T8880] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.887083][T15229] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2435'. [ 583.897120][T15229] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 584.259035][ T51] Bluetooth: hci3: command tx timeout [ 584.381578][T15204] chnl_net:caif_netlink_parms(): no params data found [ 585.498584][T15204] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.541904][T15204] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.580659][T15204] bridge_slave_0: entered allmulticast mode [ 585.601916][T15204] bridge_slave_0: entered promiscuous mode [ 585.634991][T15204] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.652891][T15204] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.673399][T15204] bridge_slave_1: entered allmulticast mode [ 585.719150][T15204] bridge_slave_1: entered promiscuous mode [ 586.120211][T15204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 586.182018][T15204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.337973][ T51] Bluetooth: hci3: command tx timeout [ 586.461978][T15292] netlink: 'syz.1.2447': attribute type 17 has an invalid length. [ 586.655668][T15204] team0: Port device team_slave_0 added [ 586.916615][T15204] team0: Port device team_slave_1 added [ 586.986523][T15204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.013912][T15204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 587.075909][T15204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 587.100136][T15204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 587.113435][T15204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 587.169011][T15204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.728252][T15302] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 588.115892][T15204] hsr_slave_0: entered promiscuous mode [ 588.141238][T15204] hsr_slave_1: entered promiscuous mode [ 588.158430][T15204] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 588.172542][T15204] Cannot create hsr debugfs directory [ 588.218583][T15325] Â: renamed from vlan0 (while UP) [ 588.336907][T15333] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2453'. [ 588.377412][T15332] syzkaller0: entered promiscuous mode [ 588.389931][T15332] syzkaller0: entered allmulticast mode [ 588.417864][ T51] Bluetooth: hci3: command tx timeout [ 588.666787][T15338] netlink: 'syz.0.2455': attribute type 1 has an invalid length. [ 588.774132][T15338] netlink: 'syz.0.2455': attribute type 1 has an invalid length. [ 589.596261][T15361] netlink: 'syz.1.2459': attribute type 4 has an invalid length. [ 589.607687][T15361] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2459'. [ 589.681261][T15361] .`: renamed from bond0 (while UP) [ 590.326854][ T8880] hsr_slave_0: left promiscuous mode [ 590.341424][ T8880] hsr_slave_1: left promiscuous mode [ 590.362947][ T8880] batman_adv: batadv0: Removing interface: dummy0 [ 590.384790][ T8880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 590.402500][ T8880] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 590.439337][ T8880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 590.446928][ T8880] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 590.507596][ T8880] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 590.514762][ T8880] batman_adv: batadv0: Removing interface: veth0_vlan [ 590.696991][ T8880] veth1_macvtap: left allmulticast mode [ 590.718057][ T8880] veth1_macvtap: left promiscuous mode [ 590.723713][ T8880] veth0_macvtap: left promiscuous mode [ 590.758217][ T8880] veth0_vlan: left promiscuous mode [ 592.131463][T15396] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2468'. [ 592.652174][ T8880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 592.997442][ T8880] bond0 (unregistering): Released all slaves [ 593.115820][T15396] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 593.307357][T15204] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 593.346244][T15204] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 593.413672][T15404] netlink: 'syz.0.2470': attribute type 10 has an invalid length. [ 593.436644][T15404] bridge_slave_1: entered promiscuous mode [ 593.491245][T15404] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 593.527064][T15204] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 593.554990][T15204] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 594.092651][T15204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 594.195985][T15204] 8021q: adding VLAN 0 to HW filter on device team0 [ 594.236152][ T8882] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.243444][ T8882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 594.631792][ T8880] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.639128][ T8880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 595.093589][T15426] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 596.334543][T15204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 596.466464][T15204] veth0_vlan: entered promiscuous mode [ 596.507189][T15204] veth1_vlan: entered promiscuous mode [ 596.600560][T15204] veth0_macvtap: entered promiscuous mode [ 596.615844][T15204] veth1_macvtap: entered promiscuous mode [ 596.653653][T15204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 596.667871][T15204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.689645][T15204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 596.730841][T15204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 596.766647][T15204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.790496][T15204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 596.812095][T15204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.830555][T15204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 596.871838][T15204] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.891811][T15204] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.909297][T15204] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.924844][T15204] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.179933][T15481] FAULT_INJECTION: forcing a failure. [ 597.179933][T15481] name failslab, interval 1, probability 0, space 0, times 0 [ 597.209241][ T8882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.217154][ T8882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.243588][T15481] CPU: 1 PID: 15481 Comm: syz.1.2486 Not tainted syzkaller #0 [ 597.251128][T15481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 597.261225][T15481] Call Trace: [ 597.264552][T15481] [ 597.267525][T15481] dump_stack_lvl+0x18c/0x250 [ 597.272266][T15481] ? show_regs_print_info+0x20/0x20 [ 597.277569][T15481] ? load_image+0x400/0x400 [ 597.282142][T15481] ? __might_sleep+0xe0/0xe0 [ 597.286783][T15481] ? __lock_acquire+0x7d40/0x7d40 [ 597.291876][T15481] should_fail_ex+0x39d/0x4d0 [ 597.296617][T15481] should_failslab+0x9/0x20 [ 597.301178][T15481] slab_pre_alloc_hook+0x59/0x310 [ 597.306274][T15481] ? tomoyo_encode+0x28b/0x540 [ 597.311117][T15481] ? tomoyo_encode+0x28b/0x540 [ 597.316010][T15481] __kmem_cache_alloc_node+0x53/0x250 [ 597.321517][T15481] ? tomoyo_encode+0x28b/0x540 [ 597.326310][T15481] __kmalloc+0xa4/0x230 [ 597.330530][T15481] tomoyo_encode+0x28b/0x540 [ 597.335180][T15481] tomoyo_realpath_from_path+0x592/0x5d0 [ 597.340865][T15481] tomoyo_path_number_perm+0x248/0x620 [ 597.346375][T15481] ? tomoyo_path_number_perm+0x217/0x620 [ 597.352091][T15481] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 597.357600][T15481] ? ksys_write+0x1c4/0x260 [ 597.362193][T15481] ? __fget_files+0x28/0x4b0 [ 597.366813][T15481] ? __fget_files+0x28/0x4b0 [ 597.371444][T15481] security_file_ioctl+0x70/0xa0 [ 597.376419][T15481] __se_sys_ioctl+0x48/0x170 [ 597.381052][T15481] do_syscall_64+0x55/0xa0 [ 597.385506][T15481] ? clear_bhb_loop+0x40/0x90 [ 597.390209][T15481] ? clear_bhb_loop+0x40/0x90 [ 597.394923][T15481] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 597.400843][T15481] RIP: 0033:0x7f6d0bb9c799 [ 597.405371][T15481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.425005][T15481] RSP: 002b:00007f6d0ca46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 597.433453][T15481] RAX: ffffffffffffffda RBX: 00007f6d0be15fa0 RCX: 00007f6d0bb9c799 [ 597.441458][T15481] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 0000000000000008 [ 597.449457][T15481] RBP: 00007f6d0ca46090 R08: 0000000000000000 R09: 0000000000000000 [ 597.457542][T15481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 597.467217][T15481] R13: 00007f6d0be16038 R14: 00007f6d0be15fa0 R15: 00007ffeffbfcbe8 [ 597.475341][T15481] [ 597.494296][ T8880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.502368][ T8880] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.510822][T15481] ERROR: Out of memory at tomoyo_realpath_from_path. [ 597.527757][T15481] veth1_vlan: entered allmulticast mode [ 597.758450][T15493] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2425'. [ 597.827825][T15493] netlink: get zone limit has 4 unknown bytes [ 597.906576][T15501] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2490'. [ 598.036084][T15501] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2490'. [ 598.048712][T15501] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2490'. [ 598.370369][T15506] netlink: 'syz.0.2491': attribute type 3 has an invalid length. [ 598.402327][T15506] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2491'. [ 598.960574][T15520] FAULT_INJECTION: forcing a failure. [ 598.960574][T15520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 598.984735][T15520] CPU: 0 PID: 15520 Comm: syz.0.2495 Not tainted syzkaller #0 [ 598.992280][T15520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 599.002388][T15520] Call Trace: [ 599.005715][T15520] [ 599.008869][T15520] dump_stack_lvl+0x18c/0x250 [ 599.013624][T15520] ? show_regs_print_info+0x20/0x20 [ 599.018882][T15520] ? load_image+0x400/0x400 [ 599.023445][T15520] ? __might_fault+0xaa/0x120 [ 599.028184][T15520] ? __lock_acquire+0x7d40/0x7d40 [ 599.033278][T15520] ? unix_ioctl+0x261/0x670 [ 599.037856][T15520] should_fail_ex+0x39d/0x4d0 [ 599.042611][T15520] _copy_from_user+0x2f/0xe0 [ 599.047260][T15520] sock_do_ioctl+0x190/0x310 [ 599.051919][T15520] ? sock_show_fdinfo+0xb0/0xb0 [ 599.056842][T15520] sock_ioctl+0x5ba/0x7e0 [ 599.061232][T15520] ? sock_poll+0x3e0/0x3e0 [ 599.065720][T15520] ? bpf_lsm_file_ioctl+0x9/0x10 [ 599.070708][T15520] ? security_file_ioctl+0x80/0xa0 [ 599.076005][T15520] ? sock_poll+0x3e0/0x3e0 [ 599.080484][T15520] __se_sys_ioctl+0xfd/0x170 [ 599.085149][T15520] do_syscall_64+0x55/0xa0 [ 599.089629][T15520] ? clear_bhb_loop+0x40/0x90 [ 599.094355][T15520] ? clear_bhb_loop+0x40/0x90 [ 599.099095][T15520] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 599.105048][T15520] RIP: 0033:0x7f2b5eb9c799 [ 599.109513][T15520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.129176][T15520] RSP: 002b:00007f2b5fad5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 599.137766][T15520] RAX: ffffffffffffffda RBX: 00007f2b5ee15fa0 RCX: 00007f2b5eb9c799 [ 599.145905][T15520] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 0000000000000008 [ 599.153929][T15520] RBP: 00007f2b5fad5090 R08: 0000000000000000 R09: 0000000000000000 [ 599.161967][T15520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 599.169991][T15520] R13: 00007f2b5ee16038 R14: 00007f2b5ee15fa0 R15: 00007ffe5eaa7ea8 [ 599.178030][T15520] [ 599.596541][T15534] dvmrp0: tun_chr_ioctl cmd 2147767511 [ 599.898769][T15542] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2500'. [ 599.937766][T15542] netlink: get zone limit has 4 unknown bytes [ 601.127999][T15558] netlink: 'syz.0.2497': attribute type 7 has an invalid length. [ 601.349651][T15557] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2502'. [ 601.389340][T15557] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2502'. [ 601.473125][T15561] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2502'. [ 601.570962][T15572] FAULT_INJECTION: forcing a failure. [ 601.570962][T15572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 601.604710][T15567] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2502'. [ 601.618272][T15572] CPU: 0 PID: 15572 Comm: syz.4.2505 Not tainted syzkaller #0 [ 601.625825][T15572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 601.636023][T15572] Call Trace: [ 601.639347][T15572] [ 601.642316][T15572] dump_stack_lvl+0x18c/0x250 [ 601.647055][T15572] ? show_regs_print_info+0x20/0x20 [ 601.652314][T15572] ? load_image+0x400/0x400 [ 601.656875][T15572] ? __lock_acquire+0x7d40/0x7d40 [ 601.661977][T15572] ? snprintf+0xe9/0x140 [ 601.666366][T15572] should_fail_ex+0x39d/0x4d0 [ 601.671189][T15572] _copy_to_user+0x2f/0xa0 [ 601.675660][T15572] simple_read_from_buffer+0xe7/0x150 [ 601.681102][T15572] proc_fail_nth_read+0x1e8/0x260 [ 601.686202][T15572] ? proc_fault_inject_write+0x360/0x360 [ 601.691908][T15572] ? fsnotify_perm+0x271/0x5e0 [ 601.696740][T15572] ? proc_fault_inject_write+0x360/0x360 [ 601.702442][T15572] vfs_read+0x28b/0x970 [ 601.706685][T15572] ? kernel_read+0x1e0/0x1e0 [ 601.711422][T15572] ? __fget_files+0x28/0x4b0 [ 601.716087][T15572] ? __fget_files+0x28/0x4b0 [ 601.720759][T15572] ? __fget_files+0x43d/0x4b0 [ 601.725511][T15572] ? __fdget_pos+0x2a3/0x330 [ 601.730156][T15572] ? ksys_read+0x75/0x260 [ 601.734565][T15572] ksys_read+0x150/0x260 [ 601.738870][T15572] ? vfs_write+0x990/0x990 [ 601.743344][T15572] ? lockdep_hardirqs_on+0x98/0x150 [ 601.748599][T15572] do_syscall_64+0x55/0xa0 [ 601.753081][T15572] ? clear_bhb_loop+0x40/0x90 [ 601.757828][T15572] ? clear_bhb_loop+0x40/0x90 [ 601.762602][T15572] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 601.768546][T15572] RIP: 0033:0x7f50e6d5cfce [ 601.773097][T15572] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 601.792762][T15572] RSP: 002b:00007f50e7ccffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 601.801274][T15572] RAX: ffffffffffffffda RBX: 00007f50e7cd06c0 RCX: 00007f50e6d5cfce [ 601.809303][T15572] RDX: 000000000000000f RSI: 00007f50e7cd00a0 RDI: 0000000000000009 [ 601.817320][T15572] RBP: 00007f50e7cd0090 R08: 0000000000000000 R09: 0000000000000000 [ 601.825365][T15572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.833393][T15572] R13: 00007f50e7016038 R14: 00007f50e7015fa0 R15: 00007ffe389cd008 [ 601.841432][T15572] [ 602.252110][T15584] netlink: 'syz.2.2507': attribute type 10 has an invalid length. [ 602.455328][T15584] team0: Port device dummy0 added [ 603.034324][T15601] syzkaller0: entered promiscuous mode [ 603.055362][T15601] syzkaller0: entered allmulticast mode [ 603.506517][T15616] netlink: 135856 bytes leftover after parsing attributes in process `syz.2.2513'. [ 606.644101][T15653] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 606.961919][T15662] netlink: 'syz.0.2526': attribute type 3 has an invalid length. [ 606.987747][T15662] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2526'. [ 607.009090][T15665] sit0: entered promiscuous mode [ 607.014127][T15665] sit0: entered allmulticast mode [ 609.457769][T15700] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2535'. [ 610.138483][T15715] netlink: 'syz.0.2540': attribute type 1 has an invalid length. [ 610.641341][T15738] netlink: 'syz.0.2549': attribute type 1 has an invalid length. [ 610.698872][T15738] netlink: 146340 bytes leftover after parsing attributes in process `syz.0.2549'. [ 610.828159][T15744] IPv6: Can't replace route, no match found [ 611.309832][T15750] netlink: 'syz.1.2551': attribute type 2 has an invalid length. [ 611.338071][T15750] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2551'. [ 612.291952][T15766] netlink: 123072 bytes leftover after parsing attributes in process `syz.4.2556'. [ 612.912517][T15786] syzkaller0: entered promiscuous mode [ 612.920433][T15786] syzkaller0: entered allmulticast mode [ 613.767296][T15796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 618.105080][T15835] netlink: 703 bytes leftover after parsing attributes in process `syz.4.2574'. [ 618.592910][T15851] netlink: 'syz.2.2580': attribute type 10 has an invalid length. [ 618.787650][T15851] team0 (unregistering): Port device team_slave_0 removed [ 618.836010][T15851] team0 (unregistering): Port device team_slave_1 removed [ 618.943464][T15851] team0 (unregistering): Port device dummy0 removed [ 621.320705][T15919] netlink: 'syz.2.2599': attribute type 17 has an invalid length. [ 621.334640][T15919] netlink: 'syz.2.2599': attribute type 41 has an invalid length. [ 621.364539][T15919] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2599'. [ 621.546874][T15919] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2599'. [ 621.567836][T15919] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 621.806197][T15929] netlink: 'syz.1.2602': attribute type 19 has an invalid length. [ 621.993469][T15931] netlink: 'syz.2.2603': attribute type 10 has an invalid length. [ 622.215280][T15933] netlink: 'syz.1.2604': attribute type 27 has an invalid length. [ 622.252867][T15933] netlink: 'syz.1.2604': attribute type 4 has an invalid length. [ 622.345141][T15933] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2604'. [ 622.682318][T15930] netlink: 'syz.4.2601': attribute type 4 has an invalid length. [ 622.712405][T15930] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2601'. [ 623.151650][T15947] delete_channel: no stack [ 623.170324][T15948] netlink: 'syz.4.2608': attribute type 2 has an invalid length. [ 623.193479][T15948] netlink: 'syz.4.2608': attribute type 1 has an invalid length. [ 623.206759][T15947] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2607'. [ 623.225426][T15948] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2608'. [ 624.054738][T15968] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2614'. [ 624.086719][T15971] netlink: 'syz.1.2615': attribute type 10 has an invalid length. [ 624.107919][T15971] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2615'. [ 624.116997][T15971] team0: entered promiscuous mode [ 624.122342][T15971] team_slave_0: entered promiscuous mode [ 624.128822][T15971] team_slave_1: entered promiscuous mode [ 624.156076][T15971] team0: entered allmulticast mode [ 624.209633][T15971] team_slave_0: entered allmulticast mode [ 624.243391][T15971] team_slave_1: entered allmulticast mode [ 624.291351][T15971] bridge0: port 3(team0) entered blocking state [ 624.307867][T15971] bridge0: port 3(team0) entered disabled state [ 624.331735][T15971] bridge0: port 3(team0) entered blocking state [ 624.338286][T15971] bridge0: port 3(team0) entered forwarding state [ 624.505136][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.530922][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.903087][T15979] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2616'. [ 626.575521][T16023] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2627'. [ 626.620227][T16023] bridge_slave_1: default FDB implementation only supports local addresses [ 630.765843][T16057] netlink: 'syz.1.2637': attribute type 2 has an invalid length. [ 630.803820][T16057] netlink: 119 bytes leftover after parsing attributes in process `syz.1.2637'. [ 631.794944][T16081] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 632.577190][T16110] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2649'. [ 634.506408][T16131] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2655'. [ 636.325393][T16166] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2665'. [ 636.646523][T16186] delete_channel: no stack [ 636.652426][T16186] delete_channel: no stack [ 637.450244][T16201] netlink: 'syz.2.2674': attribute type 6 has an invalid length. [ 637.467920][T16201] netlink: 'syz.2.2674': attribute type 1 has an invalid length. [ 637.475723][T16201] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.2674'. [ 637.956293][T16210] netlink: 'syz.4.2678': attribute type 1 has an invalid length. [ 637.987720][T16210] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.2678'. [ 638.008217][T16216] netlink: 'syz.4.2678': attribute type 2 has an invalid length. [ 638.018388][T16216] netlink: 'syz.4.2678': attribute type 8 has an invalid length. [ 638.026207][T16216] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2678'. [ 638.239449][T16219] syzkaller0: entered promiscuous mode [ 638.245193][T16219] syzkaller0: entered allmulticast mode [ 644.512064][T16245] netlink: 'syz.4.2686': attribute type 27 has an invalid length. [ 644.521063][T16244] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.2686'. [ 644.525431][T16245] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.2686'. [ 645.524504][T16273] netlink: 'syz.0.2695': attribute type 10 has an invalid length. [ 645.569067][T16273] netlink: 174716 bytes leftover after parsing attributes in process `syz.0.2695'. [ 645.596904][T16273] openvswitch: netlink: Flow key attr not present in new flow. [ 646.004108][T16289] netlink: 61959 bytes leftover after parsing attributes in process `syz.4.2699'. [ 646.036930][T16289] tc_dump_action: action bad kind [ 646.267215][T16295] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2701'. [ 646.308223][T16295] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2701'. [ 646.358827][T16301] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2701'. [ 646.449450][T16303] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 646.466865][T16303] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 646.481839][T16303] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 646.495237][T16305] mac80211_hwsim hwsim36 »»»»»»: renamed from wlan0 (while UP) [ 646.504015][T16303] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 646.523874][T16303] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 646.537129][T16303] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 646.553948][T16303] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 646.591898][T16303] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 646.660643][T16303] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 647.058710][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 649.383071][T16309] Ÿë: port 1(gretap0) entered blocking state [ 649.397799][T16309] Ÿë: port 1(gretap0) entered disabled state [ 649.404126][T16309] gretap0: entered allmulticast mode [ 649.439644][T16309] gretap0: entered promiscuous mode [ 651.075716][T16345] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2716'. [ 651.576130][T16361] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2717'. [ 652.054277][T16371] veth1_vlan: entered allmulticast mode [ 652.269249][T16377] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2722'. [ 652.346654][T16376] netlink: 208064 bytes leftover after parsing attributes in process `syz.4.2722'. [ 652.396570][T16374] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2721'. [ 652.969678][T16385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2724'. [ 652.990500][T16386] netlink: 'syz.4.2724': attribute type 8 has an invalid length. [ 652.998539][T16386] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.2724'. [ 653.838409][ T6275] tipc: Subscription rejected, illegal request [ 654.082810][T16406] netlink: 'syz.2.2730': attribute type 3 has an invalid length. [ 654.108199][T16406] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2730'. [ 654.971777][T16420] netlink: 'syz.1.2734': attribute type 10 has an invalid length. [ 656.042725][T16420] wg1: entered promiscuous mode [ 656.049908][T16420] wg1: entered allmulticast mode [ 656.054925][T16420] team0: Device wg1 is of different type [ 656.310563][T16439] netlink: 'syz.1.2737': attribute type 3 has an invalid length. [ 656.319805][T16439] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2737'. [ 656.491553][T16448] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2739'. [ 656.557699][T16448] net_ratelimit: 6079 callbacks suppressed [ 656.557717][T16448] openvswitch: netlink: Flow actions attr not present in new flow. [ 657.044415][T16464] netlink: 'syz.1.2745': attribute type 4 has an invalid length. [ 657.085387][T16464] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2745'. [ 657.144256][T16467] netlink: 'syz.0.2746': attribute type 2 has an invalid length. [ 657.176488][T16466] netlink: 'syz.1.2745': attribute type 4 has an invalid length. [ 657.206689][T16466] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2745'. [ 657.267921][T16471] nr0: port 1(hsr0) entered blocking state [ 657.283334][T16471] nr0: port 1(hsr0) entered disabled state [ 657.301374][T16471] hsr0: entered allmulticast mode [ 657.306487][T16471] hsr_slave_0: entered allmulticast mode [ 657.337598][T16471] hsr_slave_1: entered allmulticast mode [ 657.344539][T16471] hsr0: entered promiscuous mode [ 657.590904][T16480] netlink: 'syz.1.2752': attribute type 29 has an invalid length. [ 657.608029][T16480] netlink: 'syz.1.2752': attribute type 29 has an invalid length. [ 657.616482][T16482] netlink: 'syz.1.2752': attribute type 29 has an invalid length. [ 658.740900][T16512] netlink: 'syz.4.2763': attribute type 10 has an invalid length. [ 658.788192][T16512] netlink: 210880 bytes leftover after parsing attributes in process `syz.4.2763'. [ 659.029464][T16520] netlink: 'syz.0.2766': attribute type 21 has an invalid length. [ 659.166165][T16520] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2766'. [ 659.208729][T16525] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2766'. [ 659.237678][T16525] bridge_slave_1: default FDB implementation only supports local addresses [ 659.258571][T16527] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2767'. [ 659.294593][T16522] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2767'. [ 659.401952][T16526] netlink: 'syz.4.2768': attribute type 21 has an invalid length. [ 659.430159][T16528] netlink: 'syz.4.2768': attribute type 21 has an invalid length. [ 659.493526][T16524] netlink: 'syz.4.2768': attribute type 5 has an invalid length. [ 659.545682][T16524] netlink: 'syz.4.2768': attribute type 1 has an invalid length. [ 659.556489][T16524] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.2768'. [ 659.744177][T16531] mac80211_hwsim hwsim42 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 659.815756][T16538] netlink: 'syz.1.2769': attribute type 3 has an invalid length. [ 660.629631][T16566] syzkaller0: entered promiscuous mode [ 660.647824][T16566] syzkaller0: entered allmulticast mode [ 662.021319][ T49] wlan1: Trigger new scan to find an IBSS to join [ 663.654979][T16598] __nla_validate_parse: 1 callbacks suppressed [ 663.654996][T16598] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.2787'. [ 663.712511][T16598] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.2787'. [ 663.734455][T16598] netlink: 8446 bytes leftover after parsing attributes in process `syz.2.2787'. [ 663.915274][T16613] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 663.926933][T16613] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 664.131924][T16617] netlink: 'syz.1.2793': attribute type 29 has an invalid length. [ 664.152891][T16617] netlink: 'syz.1.2793': attribute type 29 has an invalid length. [ 664.166356][T16618] netlink: 'syz.1.2793': attribute type 29 has an invalid length. [ 664.193575][T16617] netlink: 'syz.1.2793': attribute type 29 has an invalid length. [ 664.249389][T16617] netlink: 'syz.1.2793': attribute type 29 has an invalid length. [ 664.615442][T16620] netlink: 'syz.0.2794': attribute type 10 has an invalid length. [ 664.678031][T16620] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2794'. [ 664.723716][T16620] batadv_slave_1: entered promiscuous mode [ 664.739528][T16620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 664.752637][T16620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 664.917464][T16631] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2796'. [ 664.927589][T16631] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 664.980612][ T6285] wlan1: Trigger new scan to find an IBSS to join [ 665.545275][T16627] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2796'. [ 665.556268][T16629] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2795'. [ 665.567890][T16630] mac80211_hwsim hwsim41 wlan0: entered promiscuous mode [ 665.575127][T16630] mac80211_hwsim hwsim41 wlan0: entered allmulticast mode [ 666.061938][T16666] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2807'. [ 666.150468][T16666] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2807'. [ 666.179509][T16667] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2807'. [ 666.641442][ T5787] Bluetooth: hci4: unexpected event 0x1d length: 15 > 5 [ 667.759801][T16688] delete_channel: no stack [ 668.018191][ T8885] wlan1: Creating new IBSS network, BSSID 6a:78:0a:21:a9:e7 [ 669.618471][T16764] syzkaller0: entered promiscuous mode [ 669.652451][T16764] syzkaller0: entered allmulticast mode [ 670.028017][T16776] __nla_validate_parse: 2 callbacks suppressed [ 670.028036][T16776] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2838'. [ 670.733605][T16795] veth1_macvtap: left promiscuous mode [ 670.750203][T16795] macsec0: entered allmulticast mode [ 670.843157][T16795] netlink: 'syz.4.2842': attribute type 2 has an invalid length. [ 670.897786][T16795] netlink: 51 bytes leftover after parsing attributes in process `syz.4.2842'. [ 670.945728][T16803] netlink: 'syz.1.2845': attribute type 10 has an invalid length. [ 671.030107][T16803] vxcan1: entered promiscuous mode [ 671.043102][T16803] vxcan1: entered allmulticast mode [ 671.058788][T16803] team0: Device vxcan1 is of different type [ 671.121333][T16798] netlink: 'syz.4.2842': attribute type 4 has an invalid length. [ 671.139950][T16798] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2842'. [ 671.185883][T16798] .`: renamed from bond0 (while UP) [ 671.249206][T16806] netlink: 'syz.2.2846': attribute type 10 has an invalid length. [ 671.298330][T16806] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2846'. [ 671.515376][T16808] delete_channel: no stack [ 671.818706][T16814] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.2849'. [ 671.893026][T16816] netlink: 'syz.2.2850': attribute type 3 has an invalid length. [ 671.910921][T16816] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2850'. [ 672.141798][T16828] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2853'. [ 672.164960][T16829] netlink: 'syz.1.2854': attribute type 1 has an invalid length. [ 672.178447][T16826] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2853'. [ 672.214117][T16829] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.2854'. [ 672.241394][T16834] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.2855'. [ 672.986810][T16854] netlink: 'syz.1.2860': attribute type 3 has an invalid length. [ 673.388921][T16857] netlink: 'syz.2.2861': attribute type 2 has an invalid length. [ 675.401905][T16905] netlink: 'syz.0.2873': attribute type 2 has an invalid length. [ 675.477630][T16905] netlink: 'syz.0.2873': attribute type 8 has an invalid length. [ 675.511726][T16905] __nla_validate_parse: 8 callbacks suppressed [ 675.511743][T16905] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2873'. [ 677.242471][T16945] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2883'. [ 677.283057][T16945] netlink: 'syz.4.2883': attribute type 19 has an invalid length. [ 677.797330][T16952] netlink: 'syz.0.2885': attribute type 2 has an invalid length. [ 678.471039][T16961] syzkaller0: entered promiscuous mode [ 678.476731][T16961] syzkaller0: entered allmulticast mode [ 679.859316][T16993] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2895'. [ 680.231759][T16991] netlink: 'syz.4.2894': attribute type 1 has an invalid length. [ 680.301018][T16991] netlink: 154788 bytes leftover after parsing attributes in process `syz.4.2894'. [ 681.266812][T17006] netlink: 'syz.4.2897': attribute type 1 has an invalid length. [ 681.288368][T17006] netlink: 209592 bytes leftover after parsing attributes in process `syz.4.2897'. [ 681.832946][T17009] netlink: 209592 bytes leftover after parsing attributes in process `syz.4.2898'. [ 685.949766][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.956283][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.327288][T16993] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2895'. [ 687.804988][T17058] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2911'. [ 687.830652][T17060] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2910'. [ 687.914594][T17060] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2910'. [ 687.988597][T17054] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2909'. [ 687.998462][T17054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2909'. [ 688.008400][T17061] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2910'. [ 688.017688][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 688.429737][T17075] netlink: 'syz.1.2915': attribute type 25 has an invalid length. [ 688.464310][T17075] netlink: 'syz.1.2915': attribute type 9 has an invalid length. [ 688.485766][T17075] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2915'. [ 689.656989][T17097] bridge0: port 3(team0) entered disabled state [ 689.675387][T17097] bridge_slave_1: left allmulticast mode [ 689.684974][T17097] bridge_slave_1: left promiscuous mode [ 689.735270][T17097] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.750801][T17097] bridge_slave_0: left allmulticast mode [ 689.756718][T17097] bridge_slave_0: left promiscuous mode [ 689.764891][T17097] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.985852][T17099] netlink: 'syz.4.2923': attribute type 10 has an invalid length. [ 690.005602][T17099] veth0_macvtap: left promiscuous mode [ 690.351232][T17108] netlink: 209592 bytes leftover after parsing attributes in process `syz.4.2926'. [ 690.392339][T17106] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2925'. [ 692.435702][T17134] netlink: 'syz.1.2930': attribute type 10 has an invalid length. [ 692.660923][T17134] team_slave_0: left promiscuous mode [ 692.677013][T17134] team_slave_0: left allmulticast mode [ 692.773373][T17146] __nla_validate_parse: 2 callbacks suppressed [ 692.773392][T17146] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2935'. [ 692.887258][T17134] team0 (unregistering): Port device team_slave_0 removed [ 692.897412][T17134] team_slave_1: left promiscuous mode [ 692.905441][T17134] team_slave_1: left allmulticast mode [ 692.933078][T17134] team0 (unregistering): Port device team_slave_1 removed [ 693.072219][T17148] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 693.362973][T17152] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2938'. [ 693.376604][T17154] netlink: 'syz.2.2939': attribute type 21 has an invalid length. [ 693.393709][T17154] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2939'. [ 693.855884][ T5787] Bluetooth: hci4: ISO packet for unknown connection handle 2622 [ 694.536569][T17190] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2948'. [ 694.577457][T17190] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2948'. [ 695.468657][T17197] lo: entered allmulticast mode [ 695.537773][T17204] lo: entered promiscuous mode [ 695.542641][T17204] lo: left allmulticast mode [ 695.811209][T17224] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2956'. [ 695.843437][T17219] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2955'. [ 695.858123][T17224] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2956'. [ 695.887996][T17225] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2956'. [ 695.900905][T17224] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2956'. [ 695.963681][T17219] netlink: 'syz.2.2955': attribute type 4 has an invalid length. [ 697.158842][T17263] netlink: 'syz.0.2967': attribute type 29 has an invalid length. [ 697.181950][T17263] netlink: 'syz.0.2967': attribute type 29 has an invalid length. [ 697.901758][T17296] netlink: 'syz.4.2974': attribute type 11 has an invalid length. [ 697.922127][T17296] __nla_validate_parse: 4 callbacks suppressed [ 697.922144][T17296] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2974'. [ 698.030126][T17297] veth1_to_bond: entered allmulticast mode [ 698.096101][T17302] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2976'. [ 698.152471][T17300] netlink: 'syz.2.2977': attribute type 39 has an invalid length. [ 698.306797][T17307] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.2977'. [ 699.147833][T17315] netlink: 'syz.0.2981': attribute type 4 has an invalid length. [ 699.186385][T17315] netlink: 'syz.0.2981': attribute type 16 has an invalid length. [ 699.261089][T17315] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2981'. [ 699.689868][T17321] netlink: 194488 bytes leftover after parsing attributes in process `syz.0.2984'. [ 699.734861][T17321] netlink: 'syz.0.2984': attribute type 19 has an invalid length. [ 699.747214][T17321] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2984'. [ 700.027412][ T6285] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 700.984451][T17336] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2988'. [ 701.012024][T17336] veth0_to_bond: entered promiscuous mode [ 701.295588][T17362] netlink: 'syz.1.2994': attribute type 21 has an invalid length. [ 701.322197][T17362] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2994'. [ 701.713787][T17375] netlink: 'syz.1.2998': attribute type 10 has an invalid length. [ 701.759150][T17375] netlink: 9279 bytes leftover after parsing attributes in process `syz.1.2998'. [ 702.190955][ T51] Bluetooth: hci2: unexpected event 0x05 length: 151 > 4 [ 702.432409][T17392] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 702.449496][T17392] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 702.458979][T17392] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 702.468474][T17392] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 702.472931][T17391] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3003'. [ 702.477889][T17392] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 702.478084][T17392] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 702.478245][T17392] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 702.478410][T17392] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 702.478571][T17392] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 702.478731][T17392] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 703.377685][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 704.205427][T17435] netlink: 763 bytes leftover after parsing attributes in process `syz.1.3016'. [ 704.568557][T17441] netlink: 'syz.0.3017': attribute type 9 has an invalid length. [ 704.603525][T17441] netlink: 399 bytes leftover after parsing attributes in process `syz.0.3017'. [ 705.196985][T17451] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3020'. [ 705.266583][T17451] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3020'. [ 705.317965][T17451] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3020'. [ 705.395650][T17451] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3020'. [ 705.426095][T17451] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3020'. [ 705.448477][T17451] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3020'. [ 705.459613][T17451] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3020'. [ 705.474009][T17451] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3020'. [ 705.546503][T17457] mac80211_hwsim hwsim11 »»»»»»: renamed from wlan0 [ 705.829030][T17477] netlink: 'syz.4.3028': attribute type 29 has an invalid length. [ 705.841640][T17477] netlink: 'syz.4.3028': attribute type 29 has an invalid length. [ 706.048330][T17482] netlink: 'syz.4.3028': attribute type 29 has an invalid length. [ 706.148091][T17485] sctp: [Deprecated]: syz.1.3029 (pid 17485) Use of int in max_burst socket option deprecated. [ 706.148091][T17485] Use struct sctp_assoc_value instead [ 707.184089][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 707.193107][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 707.218511][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 707.242738][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 707.251060][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 707.266847][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 709.056108][ T8882] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.192255][T17527] syz.1.3038: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 709.233997][T17527] CPU: 1 PID: 17527 Comm: syz.1.3038 Not tainted syzkaller #0 [ 709.241587][T17527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 709.251725][T17527] Call Trace: [ 709.255069][T17527] [ 709.258174][T17527] dump_stack_lvl+0x18c/0x250 [ 709.263047][T17527] ? show_regs_print_info+0x20/0x20 [ 709.268362][T17527] ? load_image+0x400/0x400 [ 709.272967][T17527] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 709.279476][T17527] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 709.286077][T17527] warn_alloc+0x246/0x340 [ 709.290508][T17527] ? stack_trace_save+0xaa/0x100 [ 709.295543][T17527] ? zone_watermark_ok_safe+0x230/0x230 [ 709.298717][ T51] Bluetooth: hci0: command tx timeout [ 709.301270][T17527] ? kasan_set_track+0x5f/0x70 [ 709.311741][T17527] ? kasan_set_track+0x4e/0x70 [ 709.316576][T17527] ? __kasan_kmalloc+0x8f/0xa0 [ 709.321424][T17527] ? xsk_init_queue+0xad/0x100 [ 709.326269][T17527] ? xsk_setsockopt+0x4e5/0x760 [ 709.331206][T17527] ? do_sock_setsockopt+0x175/0x1a0 [ 709.336489][T17527] ? __x64_sys_setsockopt+0x182/0x200 [ 709.341960][T17527] __vmalloc_node_range+0x126/0x1330 [ 709.347450][T17527] ? free_vm_area+0x50/0x50 [ 709.352093][T17527] vmalloc_user+0x74/0x80 [ 709.356510][T17527] ? xskq_create+0xbf/0x170 [ 709.361120][T17527] xskq_create+0xbf/0x170 [ 709.365543][T17527] xsk_init_queue+0xad/0x100 [ 709.370229][T17527] xsk_setsockopt+0x4e5/0x760 [ 709.375003][T17527] ? xsk_poll+0x680/0x680 [ 709.379431][T17527] ? __fget_files+0x28/0x4b0 [ 709.384104][T17527] ? __fget_files+0x28/0x4b0 [ 709.388783][T17527] ? aa_sock_opt_perm+0x74/0x100 [ 709.393816][T17527] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 709.399443][T17527] ? security_socket_setsockopt+0x7e/0xa0 [ 709.405248][T17527] ? xsk_poll+0x680/0x680 [ 709.409678][T17527] do_sock_setsockopt+0x175/0x1a0 [ 709.414770][T17527] ? __fdget+0x180/0x210 [ 709.419120][T17527] __x64_sys_setsockopt+0x182/0x200 [ 709.424412][T17527] do_syscall_64+0x55/0xa0 [ 709.428914][T17527] ? clear_bhb_loop+0x40/0x90 [ 709.433686][T17527] ? clear_bhb_loop+0x40/0x90 [ 709.438458][T17527] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 709.444432][T17527] RIP: 0033:0x7f6d0bb9c799 [ 709.447424][T17530] __nla_validate_parse: 26 callbacks suppressed [ 709.455251][T17527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 709.475024][T17527] RSP: 002b:00007f6d0ca46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 709.483525][T17527] RAX: ffffffffffffffda RBX: 00007f6d0be15fa0 RCX: 00007f6d0bb9c799 [ 709.491658][T17527] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008 [ 709.498679][T17530] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.3040'. [ 709.499673][T17527] RBP: 00007f6d0bc32bd9 R08: 0000000000000004 R09: 0000000000000000 [ 709.499696][T17527] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 709.499715][T17527] R13: 00007f6d0be16038 R14: 00007f6d0be15fa0 R15: 00007ffeffbfcbe8 [ 709.499798][T17527] [ 709.583495][ T8882] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.600214][T17530] net_ratelimit: 3319 callbacks suppressed [ 709.600232][T17530] netlink: zone id is out of range [ 709.637960][T17530] netlink: zone id is out of range [ 709.643626][T17530] netlink: zone id is out of range [ 709.684753][T17527] Mem-Info: [ 709.689454][T17530] netlink: zone id is out of range [ 709.707879][T17527] active_anon:9695 inactive_anon:0 isolated_anon:0 [ 709.707879][T17527] active_file:17084 inactive_file:40177 isolated_file:0 [ 709.707879][T17527] unevictable:768 dirty:32 writeback:0 [ 709.707879][T17527] slab_reclaimable:10934 slab_unreclaimable:94673 [ 709.707879][T17527] mapped:25206 shmem:1390 pagetables:652 [ 709.707879][T17527] sec_pagetables:0 bounce:0 [ 709.707879][T17527] kernel_misc_reclaimable:0 [ 709.707879][T17527] free:1332509 free_pcp:11723 free_cma:0 [ 709.756571][T17530] netlink: zone id is out of range [ 709.785189][T17530] netlink: zone id is out of range [ 709.808390][T17530] netlink: zone id is out of range [ 709.819524][T17530] netlink: zone id is out of range [ 709.834544][T17530] netlink: zone id is out of range [ 709.850206][T17530] netlink: zone id is out of range [ 709.867361][T17527] Node 0 active_anon:38780kB inactive_anon:0kB active_file:68336kB inactive_file:160508kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97324kB dirty:124kB writeback:0kB shmem:4024kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11212kB pagetables:2608kB sec_pagetables:0kB all_unreclaimable? no [ 710.021918][ T8882] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.036139][T17527] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 710.127432][T17527] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 710.169772][T17527] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 710.175779][T17527] Node 0 DMA32 free:1409404kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:38516kB inactive_anon:0kB active_file:68336kB inactive_file:159684kB unevictable:1536kB writepending:120kB present:3129332kB managed:2586964kB mlocked:0kB bounce:0kB free_pcp:34916kB local_pcp:14208kB free_cma:0kB [ 710.210137][T17527] lowmem_reserve[]: 0 0 0 0 0 [ 710.214982][T17527] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 710.242162][T17527] lowmem_reserve[]: 0 0 0 0 0 [ 710.247024][T17527] Node 1 Normal free:3905040kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:12512kB local_pcp:4672kB free_cma:0kB [ 710.266061][ T8882] bond0: (slave ªªªªªª): Releasing backup interface [ 710.286971][T17527] lowmem_reserve[]: 0 0 0 0 0 [ 710.292350][T17527] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 710.306841][ T8882] netdevsim netdevsim0 ªªªªªª (unregistering): left promiscuous mode [ 710.315852][T17527] Node 0 DMA32: 409*4kB (M) 163*8kB (UM) 923*16kB (UM) 675*32kB (UM) 534*64kB (UM) 381*128kB (UME) 171*256kB (UME) 52*512kB (UM) 28*1024kB (UM) 6*2048kB (UM) 287*4096kB (M) = 1409164kB [ 710.328299][ T8882] netdevsim netdevsim0 ªªªªªª (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.350919][T17527] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 710.365806][T17527] Node 1 Normal: 228*4kB (UME) 52*8kB (UME) 44*16kB (UME) 187*32kB (UME) 45*64kB (UME) 11*128kB (UE) 0*256kB 1*512kB (M) 1*1024kB (E) 2*2048kB (UE) 949*4096kB (M) = 3905040kB [ 710.392679][T17527] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 710.404305][T17527] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 710.459876][T17527] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 710.547573][T17527] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 710.556947][T17527] 58634 total pagecache pages [ 710.615790][T17527] 0 pages in swap cache [ 710.643038][T17527] Free swap = 124996kB [ 710.659498][T17527] Total swap = 124996kB [ 710.663731][T17527] 2097051 pages RAM [ 710.684396][T17512] chnl_net:caif_netlink_parms(): no params data found [ 710.716216][T17527] 0 pages HighMem/MovableOnly [ 710.749886][T17527] 416924 pages reserved [ 710.754134][T17527] 0 pages cma reserved [ 711.380871][ T51] Bluetooth: hci0: command tx timeout [ 711.480481][T17512] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.504970][T17512] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.529494][T17578] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3049'. [ 711.538741][T17512] bridge_slave_0: entered allmulticast mode [ 711.541354][T17512] bridge_slave_0: entered promiscuous mode [ 711.558884][T17512] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.578230][T17512] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.585549][T17512] bridge_slave_1: entered allmulticast mode [ 711.608720][T17512] bridge_slave_1: entered promiscuous mode [ 711.739166][T17578] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3049'. [ 712.335352][T17581] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3049'. [ 712.550844][T17512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 712.574466][T17512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 712.889347][T17512] team0: Port device team_slave_0 added [ 712.911549][T17512] team0: Port device team_slave_1 added [ 713.099746][T17512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 713.123520][T17512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.186154][T17512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 713.241097][T17512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 713.255407][T17512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.317626][T17512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 713.457601][ T51] Bluetooth: hci0: command tx timeout [ 713.615498][T17512] hsr_slave_0: entered promiscuous mode [ 713.666415][T17512] hsr_slave_1: entered promiscuous mode [ 713.698004][T17512] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 713.705739][T17512] Cannot create hsr debugfs directory [ 713.755357][T17612] netlink: 64915 bytes leftover after parsing attributes in process `syz.1.3057'. [ 713.801043][T17627] netlink: 'syz.1.3057': attribute type 10 has an invalid length. [ 713.831411][T17627] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3057'. [ 714.102866][T17642] netlink: 'syz.4.3061': attribute type 7 has an invalid length. [ 714.121258][T17642] netlink: 'syz.4.3061': attribute type 6 has an invalid length. [ 715.240190][T17666] netlink: 'syz.1.3068': attribute type 29 has an invalid length. [ 715.542926][ T51] Bluetooth: hci0: command tx timeout [ 716.567959][T17658] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3065'. [ 716.583136][T17661] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.590869][T17661] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.600694][T17661] bridge0: entered allmulticast mode [ 716.621356][T17662] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.628659][T17662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 716.636211][T17662] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.643437][T17662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 716.671615][T17662] bridge0: entered promiscuous mode [ 716.682228][T17666] netlink: 'syz.1.3068': attribute type 29 has an invalid length. [ 717.031744][ T8882] [ 717.034151][ T8882] ====================================================== [ 717.041210][ T8882] WARNING: possible circular locking dependency detected [ 717.048266][ T8882] syzkaller #0 Not tainted [ 717.052708][ T8882] ------------------------------------------------------ [ 717.059758][ T8882] kworker/u4:26/8882 is trying to acquire lock: [ 717.066024][ T8882] ffff88805e0acd00 (team->team_lock_key#5){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 717.075772][ T8882] [ 717.075772][ T8882] but task is already holding lock: [ 717.083165][ T8882] ffff88802e238768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 717.093581][ T8882] [ 717.093581][ T8882] which lock already depends on the new lock. [ 717.093581][ T8882] [ 717.104026][ T8882] [ 717.104026][ T8882] the existing dependency chain (in reverse order) is: [ 717.113088][ T8882] [ 717.113088][ T8882] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 717.120870][ T8882] __mutex_lock+0x136/0xcc0 [ 717.125950][ T8882] ieee80211_open+0x144/0x200 [ 717.131188][ T8882] __dev_open+0x2cb/0x430 [ 717.136069][ T8882] dev_open+0xab/0x190 [ 717.140683][ T8882] team_add_slave+0x75f/0x29a0 [ 717.146005][ T8882] do_setlink+0xdfe/0x4130 [ 717.151142][ T8882] rtnl_newlink+0x17da/0x20a0 [ 717.156390][ T8882] rtnetlink_rcv_msg+0x869/0xfa0 [ 717.161962][ T8882] netlink_rcv_skb+0x241/0x4d0 [ 717.167275][ T8882] netlink_unicast+0x751/0x8d0 [ 717.172756][ T8882] netlink_sendmsg+0x8d0/0xbf0 [ 717.178089][ T8882] ____sys_sendmsg+0x5ba/0x960 [ 717.183394][ T8882] ___sys_sendmsg+0x2a6/0x360 [ 717.188613][ T8882] __se_sys_sendmsg+0x1c2/0x2b0 [ 717.193998][ T8882] do_syscall_64+0x55/0xa0 [ 717.198961][ T8882] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 717.205396][ T8882] [ 717.205396][ T8882] -> #0 (team->team_lock_key#5){+.+.}-{3:3}: [ 717.213682][ T8882] __lock_acquire+0x2df1/0x7d40 [ 717.219085][ T8882] lock_acquire+0x19e/0x420 [ 717.224137][ T8882] __mutex_lock+0x136/0xcc0 [ 717.229188][ T8882] team_del_slave+0x32/0x1c0 [ 717.234319][ T8882] team_device_event+0x28d/0xa20 [ 717.239791][ T8882] notifier_call_chain+0x197/0x380 [ 717.245444][ T8882] unregister_netdevice_many_notify+0x100d/0x1900 [ 717.252406][ T8882] unregister_netdevice_queue+0x32c/0x370 [ 717.258684][ T8882] _cfg80211_unregister_wdev+0x16b/0x580 [ 717.264868][ T8882] ieee80211_remove_interfaces+0x49e/0x690 [ 717.271225][ T8882] ieee80211_unregister_hw+0x5d/0x2a0 [ 717.277329][ T8882] mac80211_hwsim_del_radio+0x289/0x480 [ 717.283414][ T8882] hwsim_exit_net+0x58d/0x650 [ 717.288686][ T8882] cleanup_net+0x70a/0xbb0 [ 717.293719][ T8882] process_scheduled_works+0xa5d/0x15d0 [ 717.299810][ T8882] worker_thread+0xa55/0xfc0 [ 717.304972][ T8882] kthread+0x2fa/0x390 [ 717.309592][ T8882] ret_from_fork+0x48/0x80 [ 717.314605][ T8882] ret_from_fork_asm+0x11/0x20 [ 717.320099][ T8882] [ 717.320099][ T8882] other info that might help us debug this: [ 717.320099][ T8882] [ 717.330373][ T8882] Possible unsafe locking scenario: [ 717.330373][ T8882] [ 717.337920][ T8882] CPU0 CPU1 [ 717.343300][ T8882] ---- ---- [ 717.348678][ T8882] lock(&rdev->wiphy.mtx); [ 717.353204][ T8882] lock(team->team_lock_key#5); [ 717.360690][ T8882] lock(&rdev->wiphy.mtx); [ 717.367744][ T8882] lock(team->team_lock_key#5); [ 717.372709][ T8882] [ 717.372709][ T8882] *** DEADLOCK *** [ 717.372709][ T8882] [ 717.380871][ T8882] 5 locks held by kworker/u4:26/8882: [ 717.386260][ T8882] #0: ffff88801a254938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 717.397167][ T8882] #1: ffffc9000b917d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 717.407732][ T8882] #2: ffffffff8e3b3d10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 717.417337][ T8882] #3: ffffffff8e3c0d48 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 717.427292][ T8882] #4: ffff88802e238768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 717.438101][ T8882] [ 717.438101][ T8882] stack backtrace: [ 717.444011][ T8882] CPU: 1 PID: 8882 Comm: kworker/u4:26 Not tainted syzkaller #0 [ 717.452090][ T8882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 717.462168][ T8882] Workqueue: netns cleanup_net [ 717.466967][ T8882] Call Trace: [ 717.470266][ T8882] [ 717.473219][ T8882] dump_stack_lvl+0x18c/0x250 [ 717.478005][ T8882] ? load_image+0x400/0x400 [ 717.482572][ T8882] ? show_regs_print_info+0x20/0x20 [ 717.487812][ T8882] ? print_circular_bug+0x12b/0x1a0 [ 717.493035][ T8882] check_noncircular+0x2fc/0x400 [ 717.498033][ T8882] ? print_deadlock_bug+0x5d0/0x5d0 [ 717.503259][ T8882] ? lockdep_lock+0xf5/0x230 [ 717.507874][ T8882] ? __lock_acquire+0x1273/0x7d40 [ 717.512925][ T8882] ? _find_first_zero_bit+0xd3/0x100 [ 717.518230][ T8882] __lock_acquire+0x2df1/0x7d40 [ 717.523182][ T8882] ? verify_lock_unused+0x140/0x140 [ 717.528414][ T8882] ? verify_lock_unused+0x140/0x140 [ 717.533652][ T8882] lock_acquire+0x19e/0x420 [ 717.538180][ T8882] ? team_del_slave+0x32/0x1c0 [ 717.542979][ T8882] ? __might_sleep+0xe0/0xe0 [ 717.547603][ T8882] ? read_lock_is_recursive+0x20/0x20 [ 717.553017][ T8882] __mutex_lock+0x136/0xcc0 [ 717.557549][ T8882] ? team_del_slave+0x32/0x1c0 [ 717.562355][ T8882] ? __lock_acquire+0x7d40/0x7d40 [ 717.567404][ T8882] ? rcu_is_watching+0x15/0xb0 [ 717.572206][ T8882] ? trace_contention_end+0x39/0xe0 [ 717.577421][ T8882] ? __mutex_lock+0x315/0xcc0 [ 717.582128][ T8882] ? team_del_slave+0x32/0x1c0 [ 717.586919][ T8882] ? mutex_lock_nested+0x20/0x20 [ 717.591883][ T8882] ? bond_netdev_event+0xeb/0xf20 [ 717.596941][ T8882] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 717.602614][ T8882] team_del_slave+0x32/0x1c0 [ 717.607241][ T8882] team_device_event+0x28d/0xa20 [ 717.612200][ T8882] notifier_call_chain+0x197/0x380 [ 717.617340][ T8882] unregister_netdevice_many_notify+0x100d/0x1900 [ 717.623773][ T8882] ? lock_chain_count+0x20/0x20 [ 717.628704][ T8882] ? unregister_netdevice_many+0x20/0x20 [ 717.634367][ T8882] ? kernfs_remove_by_name_ns+0x117/0x150 [ 717.640120][ T8882] ? __lock_acquire+0x7d40/0x7d40 [ 717.645210][ T8882] unregister_netdevice_queue+0x32c/0x370 [ 717.650965][ T8882] ? list_netdevice+0x730/0x730 [ 717.655846][ T8882] ? kernfs_remove_by_name_ns+0x117/0x150 [ 717.661598][ T8882] _cfg80211_unregister_wdev+0x16b/0x580 [ 717.667263][ T8882] ieee80211_remove_interfaces+0x49e/0x690 [ 717.673107][ T8882] ? ieee80211_do_stop+0x1e20/0x1e20 [ 717.678417][ T8882] ? rcu_is_watching+0x15/0xb0 [ 717.683211][ T8882] ieee80211_unregister_hw+0x5d/0x2a0 [ 717.688642][ T8882] mac80211_hwsim_del_radio+0x289/0x480 [ 717.694215][ T8882] ? rhashtable_remove_fast+0xc00/0xc00 [ 717.699789][ T8882] hwsim_exit_net+0x58d/0x650 [ 717.704509][ T8882] ? hwsim_init_net+0x90/0x90 [ 717.709211][ T8882] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 717.715043][ T8882] cleanup_net+0x70a/0xbb0 [ 717.719517][ T8882] ? ops_free_list+0x3b0/0x3b0 [ 717.724313][ T8882] ? _raw_spin_unlock_irq+0x23/0x50 [ 717.729536][ T8882] ? process_scheduled_works+0x96f/0x15d0 [ 717.735329][ T8882] ? process_scheduled_works+0x96f/0x15d0 [ 717.741077][ T8882] process_scheduled_works+0xa5d/0x15d0 [ 717.746665][ T8882] ? worker_attach_to_pool+0x380/0x380 [ 717.752160][ T8882] ? assign_work+0x3d2/0x5d0 [ 717.756798][ T8882] worker_thread+0xa55/0xfc0 [ 717.761430][ T8882] kthread+0x2fa/0x390 [ 717.765517][ T8882] ? pr_cont_work+0x560/0x560 [ 717.770229][ T8882] ? kthread_blkcg+0xd0/0xd0 [ 717.774853][ T8882] ret_from_fork+0x48/0x80 [ 717.779346][ T8882] ? kthread_blkcg+0xd0/0xd0 [ 717.783960][ T8882] ret_from_fork_asm+0x11/0x20 [ 717.788850][ T8882] [ 717.895975][ T8882] `: Port device wlan1 removed [ 718.334868][ T8882] hsr_slave_0: left promiscuous mode [ 718.455490][ T8882] veth0_vlan: left promiscuous mode [ 719.011671][ T8882] ` (unregistering): Port device team_slave_1 removed [ 719.041430][ T8882] ` (unregistering): Port device C removed [ 719.066457][ T8882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 719.086128][ T8882] bond_slave_1 (unregistering): left promiscuous mode [ 719.146224][ T8882] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 719.157263][ T8882] bridge_slave_1 (unregistering): left promiscuous mode [ 719.233679][ T8882] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 719.244490][ T8882] batadv0 (unregistering): left promiscuous mode [ 719.278434][ T8882] ` (unregistering): Port device dummy0 removed [ 719.315330][ T8882] bond0 (unregistering): Released all slaves [ 719.330087][T17697] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3071'. [ 719.602468][T17512] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 719.624119][T17512] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 719.642670][T17512] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 719.662716][T17512] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 719.763900][T17512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 719.789582][T17512] 8021q: adding VLAN 0 to HW filter on device team0 [ 719.804245][ T6275] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.811449][ T6275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 719.842438][ T6275] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.849665][ T6275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 720.090801][T17512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.139284][T17512] veth0_vlan: entered promiscuous mode [ 720.153330][T17512] veth1_vlan: entered promiscuous mode [ 720.189151][T17512] veth0_macvtap: entered promiscuous mode [ 720.200633][T17512] veth1_macvtap: entered promiscuous mode [ 720.223840][T17512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 720.236360][T17512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.246496][T17512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 720.257748][T17512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.269310][T17512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 720.284592][T17512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 720.296111][T17512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.311760][T17512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 720.322643][T17512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.335380][T17512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 720.351395][T17512] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.360660][T17512] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.374409][T17512] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.384230][T17512] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.437151][T17512] ieee80211 phy49: Selected rate control algorithm 'minstrel_ht' [ 720.471963][ T8882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.482136][T17512] ieee80211 phy50: Selected rate control algorithm 'minstrel_ht' [ 720.490222][ T8882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.527411][ T6275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.539317][ T6275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50