last executing test programs: 10.981901079s ago: executing program 3 (id=2751): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000140)=""/237, 0x1a, 0xed, 0x1}, 0x28) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0xd, r1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91624fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r4 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x891b, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000050000000300000000000010080000000300000000000011030000000000000000000000010000040400ecb4f50ed002e2a8d6a3f65103000000000000"], 0x0, 0x51}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="0000000a00000000000000000000000000000000b7f7295f2fa42ccd4b5c2cfcc07531d5cd61f465398eb94290bc70742d93357eb80ac8399a4318ba167e32cbf7de1f91e69cf6befb8508b3030000000000000070fac320e9d92e3f754901fc1485b19b5b59da554ed3b5d8a281", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8a10ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040a00000000fe0500002015000600142603600e1209000a00000000000001060000b94dcf5c0468c1d67f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xd8}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e00000004000000080000040700000000000000", @ANYRES32, @ANYBLOB="0600000000000000000002000000000000001a00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x26}, 0x28) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000006100000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc7, &(0x7f0000000140)=""/199}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f80)={r8, 0x0, 0x36, 0x0, &(0x7f0000001000)="7a7f822c2aff88df53ef2a2d86dd5367f5fdfe81b4a31ec9fa80f7d278c24752114f5ac100bd3fe2ab57b5fe31fdec5ab57b8f487e54", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10.127406969s ago: executing program 3 (id=2755): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xca, 0x5, 0x0, 0x0, 0x10, 0xfffe, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85febf0fc9"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xa}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xffbffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9936482d56667001) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000300)="c1dfb080cd", 0x0, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5d31, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x800000000000000, 0x5}, 0x1001ca, 0x0, 0x0, 0x1, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x2a}, 0x28) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0x9, 0x7f, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x31}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) socket$kcm(0x2, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) 8.39234563s ago: executing program 3 (id=2758): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = gettid() socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES64=r2], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580)=0x2, &(0x7f00000000c0)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f0000000040)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x0, 0x0, r3, 0x8, '\x00', r4, r5, 0x2}, 0x50) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/user\x00') bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r2}, 0x8) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) 7.492071202s ago: executing program 0 (id=2769): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={&(0x7f0000000180), &(0x7f00000003c0)=""/119, 0x0, 0x0, 0x9, 0xffffffffffffffff, 0x4}, 0x38) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000300000000000000f7ffffff18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000380)=r5) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 4.511795833s ago: executing program 0 (id=2780): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1002, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c850000002e000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r0}, 0xc) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x107, 0x8, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}, 0x20008840) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) 4.418836405s ago: executing program 3 (id=2781): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x700}, 0x2c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x200000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000080"], 0x48) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socketpair(0x29, 0x80000, 0xffffffff, &(0x7f0000000500)) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) sendmsg$tipc(r3, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0xffffffffffffffff, 0x0, 0x2}}, 0x10, 0x0}, 0x4040000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f0000000680), &(0x7f0000000700)=r7}, 0x20) r8 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_devices(r8, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r9) ioctl$SIOCSIFHWADDR(r9, 0x8b1a, 0x0) sendmsg$kcm(r9, 0x0, 0x20048811) r10 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}, 0x2}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 4.315023808s ago: executing program 4 (id=2783): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x50) close(0x3) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000017000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.120960862s ago: executing program 1 (id=2784): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x3, [@enum64={0xe, 0x2, 0x0, 0x13, 0x1, 0x4, [{0x8, 0x6, 0x8}, {0xa, 0x4, 0x6}]}, @fwd={0x6}, @float={0x8, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x61]}}, &(0x7f0000000100)=""/185, 0x57, 0xb9, 0x1, 0x4}, 0x28) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x7, '\x00', 0x0, r2, 0x4, 0x2, 0x4}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r3, &(0x7f0000000280)="0389693b9a0a0f2b6dc8120c52ef48ffcf86d5b24aa3b35eca03d4e9fea3d73850b1e04a5ae00fa58b59e4789695e636c720040622ecc9682dfd47e14e57750a021140a441726d42db42310d1677ea02380eb57dcb3af7eb6e93373bd7d87c097cbc73921a41a2a78c50f3c495ed30a5695a12d1b682ac72d4", &(0x7f0000000300)=""/16}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001700)={0xffffffffffffffff, 0xe0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001440)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000014c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x64, &(0x7f0000001500)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000001540), &(0x7f0000001580), 0x8, 0xe4, 0x8, 0x8, &(0x7f00000015c0)}}, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000017c0)={0x1b, 0x0, 0x0, 0x2, 0x0, r3, 0x2, '\x00', 0x0, r2, 0x4, 0x1, 0x1}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001880)={0x11, 0xd, &(0x7f0000000380)=@raw=[@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x6, 0x1, 0x0, r3}], &(0x7f0000000400)='GPL\x00', 0x10000, 0x1000, &(0x7f0000000440)=""/4096, 0x41000, 0x89, '\x00', r4, 0x0, r2, 0x8, &(0x7f0000001740)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000001780)={0x1, 0x3, 0x6, 0x1000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001840)=[r5, r3, r3, r3, r3, r3, r3], 0x0, 0x10, 0xbe8dc60f}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001940)=@bloom_filter={0x1e, 0x8001, 0x7ff, 0xfffffffb, 0x21012, 0x1, 0x0, '\x00', r4, r2, 0x1, 0x5, 0x1, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=@bloom_filter={0x1e, 0x10000, 0x4, 0xbf62, 0x2802, 0x1, 0x5, '\x00', r4, r2, 0x2, 0x1, 0x5, 0xb}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001c80)={&(0x7f0000001a40)="aff977c32c3b7e6c2c563f68677566143b9c9b70d867d662f1f9c0787bf9d80fbda6bbe34697c9e8b905c1b26678375908c7acf3d7ef72b2477f68a543e935829967b24cf2296ea93f7cc17b7d5b7df9b30a1586df220133f89135ec", &(0x7f0000001ac0)=""/61, &(0x7f0000001b00)="85f0f57107f522ed1e14728bbbebc1b79bcd7a317ae7fedca3c816d4601c2d4ede342043c887ad8ac7c4c1dbae8981122f37a7c6390b213a7f3e0654de50178fb5e7e169f0f2d4b55450df9a5e28a0b437d68ba68f068c67a6522175fced3df8233cede83be5ebbfea92a6fe0aef77", &(0x7f0000001b80)="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", 0x80, r5}, 0x38) openat$cgroup_subtree(r0, &(0x7f0000001cc0), 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001e80)={&(0x7f0000001d00)="b6868e51b511dff7ecc09644ae8e390aa866290776d0ac296150ef9a89825615f60b7649a421e0a3c9b7a90e237e9cb49733f07963aa84c55d71cb448e06201582a1a2547808d14dd432f757bf35da58648e704939457564bb592d10556be6e69edc59ca9bc3f87891d666493924f7c14497b517626f0b962c8e9af8693cd9f66d073ad127e9e777d1acba42168409cf467aa3979922633b8f2b9a40bbf351e7800c8c9db7108a73", &(0x7f0000001dc0)=""/23, &(0x7f0000001e00), &(0x7f0000001e40)="dff0908f0fd86aa0bc1bf28c9ce17901e96da5cc17683c", 0x7, r3}, 0x38) r8 = openat$cgroup_pressure(r0, &(0x7f0000001ec0)='io.pressure\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001f00)={0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002740)={r6, 0xe0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000002480)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f00000024c0)=[0x0], &(0x7f0000002500)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f0000002540)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000002580), &(0x7f00000025c0), 0x8, 0x2c, 0x8, 0x8, &(0x7f0000002600)}}, 0x10) sendmsg$inet(r9, &(0x7f0000002800)={&(0x7f0000001f40)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f00000023c0)=[{&(0x7f0000001f80)="29afdeb1942ec34c3dd4b51aa0b1fa889f04640ea44c9e3dd7d66f6e15ff88b2745394984b25c51ab653d3dd03b716d9c10a57cbf7b983665d7a11e8e898d7b2f88b88685e308a2a40a8606e1b6f3416889edad899a6ea88b69d7c85478b453ca47701e1c436", 0x66}, {&(0x7f0000002000)="cc1ff0a6e866c074d5c26c529d2321ca61add7127e798c3fb576a64279d576e2444321a761d4cc7927a4423b119cf68d4666316ed4c841f3e6362a9dad1deed0bbd9d063bdb9db4c6088a0f52c304ff4da89497038d83847d09e2e31b09762dc772c095f246b7213b27522e33d344faaa1dd46039dd8efdfb11e460f1eb4b3f7ab2378d9f2f5797040b274", 0x8b}, {&(0x7f00000020c0)="197c51ef97c44a5706dc623544247a95508edad940c555c84dba137227e98395be94da4c35c0dc9dad559aae728d59bf05d99fca6710ae3f2c12b260d4efb7c5", 0x40}, {&(0x7f0000002100)="cb75175de8a065a9a981d915b472855142ba9f6f272967096b7f551fc7cfd9cfe16b1781993c8c594a0339e995851239f3917b53018ee1c558a5ab7ce095e70a69d487d9d8e0241f5a87c9c36868afd081c359b320ce044887c47a75", 0x5c}, {&(0x7f0000002180)="181e9b8635d21d05be9c08fe953eac4bf82d4cd04a2e92dcb7deafbc73136628f4b39a15fa72d03ebb6b1fcc83c628b931b380b77872", 0x36}, {&(0x7f00000021c0)="b81600dd6bd9786081fc50d9c8030b3615b1b10ed8750a9ef3c4c70f2a76a7f03b92544335a421c3e0928fb8e3860880", 0x30}, {&(0x7f0000002200)="b27633a618326898aeb8fdd3f4ca713039bbbcb212", 0x15}, {&(0x7f0000002240)="d59f1f4efabfed0befed2d34c375a2592d2d5dbf3fc3a75f402f7534fc154a2777095b7ffc7180447dcb2d9ba7237c978ebd6d0942a7d760cf141951971bc0b8a6d550d845baffae196b04a38fea821d11093940f167ef50d8276c5b81a70991040576e2755ea3ca719696e8bae86d8c9db39aea7bea51414c2ac6e2c1b96a5b3065195a8db0e5f404a0b0d596", 0x8d}, {&(0x7f0000002300)="bb4b5abbe09635aee81ef4", 0xb}, {&(0x7f0000002340)="75d81587d20ade99a3e643379f3347e45a827bbbe7a60027bdbcf0a5908a6708c5ff3104b25ed7d6fa8fd5534e1ebb82285d24a5412ab07851c24e0465bc71cf61998f511e5cde1ad84071320660fa94445048932fe791210e4946026b0d3062a3a070e6ffce7122fb22c89c9734de1cd1e6f948b2d2c41ca32a403e97cf", 0x7e}], 0xa, &(0x7f0000002780)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7fff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @private=0xa010102, @broadcast}}}], 0x50}, 0x51) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002b00)={r6, 0xe0, &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000002840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000002880)=[0x0, 0x0, 0x0], &(0x7f00000028c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb, &(0x7f0000002900)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000002940), &(0x7f0000002980), 0x8, 0xf, 0x8, 0x8, &(0x7f00000029c0)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002b40)={0x1b, 0x0, 0x0, 0x0, 0x0, r3, 0x5, '\x00', r12, r2, 0x4, 0x0, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002c40)={{r8, 0xffffffffffffffff}, &(0x7f0000002bc0), &(0x7f0000002c00)=r6}, 0x20) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000002c80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r14, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000002cc0)="1a4730868722d98da214f7b5db6daaaefd53e8", 0x13}, {&(0x7f0000002d00)="b103b54935c2d6d1886aa7c5fd4a71da16fbb814ea02ea04a71fa4f8fab44f861a51b83e5fb1f3d7967fec698e9ab1b7060db2d1b565ed65b6b5a1418a2439789470700cc454921ed88c187e9f9797c435788511fc2270112fc12cb0149ac38ecb26bda0181530c78e88e2485aeb6a5d937b0f114733e635feafd33212ddc5bc1f70c176096a391fb0c4de37c91cf634a846b1c8b2d447ebfece5086ddf6054eb6b65cc1da910aa809e7f5465af052ca3eabeb3b171a758693de395997abca90550fb0d720ee7662c4a98afd8b96", 0xce}, {&(0x7f0000002e00)="05f54518dc5f96b5339a2c0c6fde731983f30ca2df6d1625faa9bfd2120f6cde37a0f923a586b04b20c5791e068016f82ddcc0d07ade389150f027036139391cb66872bb05236f61d98803a31723b14c4901190e7f463a4d3a4f8b8a1cc398", 0x5f}], 0x3, &(0x7f0000002ec0)=[{0xf0, 0x110, 0x7, "b096d380a2a4e6b0d237d35efe687306a7c764b8d308401ecfcdd24ff599265d256a5dd8299fa7697110ac2e1f3cc8e386029f13626d3b2a57fef8b62422b287e1b7bc53b21e033c1f14fcb6f13f377e7f8148fff770a066ce1498d96e24b2272d113f448647bdef9c8cffbd30e679c9274360debb274f740a91d41c48ff39d957b4b9c0fd5b036093734f09edab5b1fa5b1cf4d2989308e238c3107bb813f046f671caccc36238372d72870599b338e90b4fe39f2a29da9be4ba17181d9b0c05b049091378c01044e07ffd04b2abf5fba57f015fbb743fd2783"}], 0xf0}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000003100)={@cgroup=r0, 0x37, 0x0, 0xfe, &(0x7f0000003000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000003040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003080)=[0x0, 0x0], &(0x7f00000030c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r17 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r17, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003440)=[{&(0x7f0000003140)="71ce008158913d8aaa5476b7ccd218367d320d1df1cca1cdec1d2e9477a28db04c3898bdc90583d4692a85cab25733c95bb8f716b9700335f4f8ecec24f1edc34abef146b8c99744e05fadbbc0e9e0fb138cb50f869b5b4065a5d21f5cff905a2444b44735cf0fa33646c972fedc1fbe39e461d03f0ea0929bc7423cf6e5f34b5bfaa310635d95e9f7cb5dd5f6c0e0792994de6ab496", 0x96}, {&(0x7f0000003200)="b366558967c733a11225423b7d72a31c7ad59ade09a4c26a2a4badffc6d2d731738a47e5f3d18787ed2438252f5d1e", 0x2f}, {&(0x7f0000003240)="5b03d2b014cd1ea308f2f93146db", 0xe}, {&(0x7f0000003280)="80a726de4ceda7e98d4934fdfe0ed027916cdbe3b6c178cc9c3de3871679c4d132738356b394b6922ecfe0d8432663022fc4fb5dae947f4cca5aaa4c09f18ec3f21b5ea25341cbda3aae920f8f", 0x4d}, {&(0x7f0000003300)="10f65c6761e30c19606eeb34a6a0fde4c91bca3a71221cb0e9c1b12104c1ca3be2bd184ae8b41bc96f587101b5f00cdcdbfcb2c481162bc871f4d78597639d88437fb1173cdc0108fa54d34cc24a437f643d139e3dbb2d61c7b0ae0760af601cab1a971b786c3ae796aa1b858584ca1a06dc39a9a06d", 0x76}, {&(0x7f0000003380)="dce52887c087839d89a0a08b55cce6409780d23790c9df878965c3681bf998d789f760fbbe", 0x25}, {&(0x7f00000033c0)="6733d6", 0x3}, {&(0x7f0000003400)="d0055c52e0917ae37e", 0x9}], 0x8, &(0x7f00000034c0)=[{0x40, 0x108, 0x822, "cf5957e63a507d39201a4b394c060ea073bb2c3a9e0eb18ec75380e1af99b62da52d6373128cb4f0a93596"}, {0xa0, 0x10e, 0x8, "9c0385726e57d7ef32778c2afe553bdd5d96741514081a2f6bb158d8d5a69dc935526d3b170a87bfe68280401c6d25b7e79b831e06ffb316a51707339c538a18e836745bade21b552ba8d8aff33330f68f331c9513c1c3a3c6f7152ad12ffe50d49acb0d7e283c764815f5d797076f5635d1e6d2cbe5a3004d9c840e99dde2d96ab3f2b12eeefbe4333f8b04e7d8"}, {0xf0, 0x1, 0x8000, "e4822de3c5e5409d02b5503ab6180002c8bba7479ea8caec38a6781c92283dfa9b77f7b28ed099fe6d2d9b454aabef50d93f95182ed382ecd173ae11c58e6c7bc593968cf8f96093b9b692bd68b322a0eca9177e9664e9bcb1549a2bb15439e19c2177b5ea6037c4da1f07543af75f44fa6d354bf05832a5f67ea4b43271a980f73350dda128844624bd4a110728ff9343c5b4b95c5e4201efaa1f9f210184b7b4f3c47220ba6d79ca53fede43da79a747cc2efa021e983500cf05f9ec0ce4ef9bf40d968771c2696dcb27235005543c080c873990e15cedfa39f9b2cfdd742c"}, {0x100, 0x0, 0x400, "e965cb897f4226e3c696f534224a222fa4ebf0101a88b7ab5a63621eee702f06b3ad6be1246333451fa1e6489756899cfd015b806606cf468559d52bb3e8557f7d428859a6b50f122bfa0b8194174820cbce760a56b6793fb99cc83e12ad59d7988615ef194e3337184ec646d4503664f5f87d0128750edbe6b25e81933a4bfb266ff9cbe403544dabd96a07ca3672e7e5b5dbdef99a7274ef72750fa08b157eb959aed54f508b3718f2a6be673e08835e0d36a006fef1ef576a0fd1c9422b004ebbb7b15de2573785ad6f5d23ffea3b2f2cd1142d7eef68889e221da76e26dce91e84701999494973e40836"}], 0x2d0}, 0x804) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000003840)=@o_path={&(0x7f0000003800)='./file0\x00', r7, 0x4000, r15}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003880)={@fallback=r13, r6, 0x3, 0x22, r6, @void, @void, @void, @value=r10, r16}, 0x20) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000038c0)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_RESET(r6, 0x2403, 0x4) 4.045102084s ago: executing program 4 (id=2785): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000040000000c0000000b"], 0x50) (async, rerun: 64) close(0x3) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="02000000040000000100000009"], 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x48) (async) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) r4 = socket$kcm(0x11, 0x2, 0x0) (async, rerun: 64) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) (rerun: 64) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000000c0)=r4, 0x8) (async) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21880b00000000", 0x48}], 0x1}, 0x0) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000018100000", @ANYRES32=r2, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r6, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000db, 0x8, 0xa, 0x0}}, 0xd) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="ff0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b00)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000008000000040000000000000c04000000005f2e612e2e7f"], &(0x7f0000001a40)=""/149, 0x2c, 0x95, 0x1}, 0x28) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) (async) close(0x3) (async, rerun: 64) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x50) (rerun: 64) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r8, &(0x7f0000000380), &(0x7f00000000c0)=""/100}, 0x20) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r10}, 0xc) r11 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025641d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 3.961030836s ago: executing program 2 (id=2786): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20098, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x8, 0x0, 0xc2ba, 0x0, 0x4000000, 0xb11, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x2, &(0x7f0000000340)=ANY=[], &(0x7f0000000240)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, 0x0, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x21, &(0x7f0000000100), 0x120) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x41}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x30}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x8, @remote, 0x80080000, 0x4}, 0x80, 0x0}, 0x24044051) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r6 = socket$kcm(0x10, 0x2, 0x4) r7 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4200003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x20e, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x31, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e0}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="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", 0x2bc}], 0x1}, 0x40000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)='%pi6 \x00'}, 0x20) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r10, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r10, &(0x7f0000000780)={&(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000380)="95e5d9589170cab776c29248d6cd30d51cb94a2ead3ec255f2b4bb957d6d48002851c0fa6ccf64bafbdda9bab0d7d2c19ff8123fed77d899c0baeb897eb4529f1ccc9a3e96e3981627f0a4e7c88be2", 0x4f}], 0x1, &(0x7f0000000640)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @rand_addr=0x64010101, @local}}}, @ip_tos_u8={{0x11}}, @ip_retopts={{0xa4, 0x0, 0x7, {[@rr={0x7, 0x7, 0xf3, [@dev={0xac, 0x14, 0x14, 0x3b}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x44, 0xcb, 0x3, 0xc, [{@local, 0x80000000}, {@broadcast, 0xb}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10001}, {@empty, 0x10}, {@empty, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x5}, {@remote, 0x3}]}, @rr={0x7, 0xf, 0xdc, [@empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x2a}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0xbe, 0x0, 0xb, [0x8]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0xbd, 0x0, 0x7, [0xffff, 0x4c316218, 0x4, 0x8, 0xd6b, 0x65d, 0x3, 0xd8]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x118}, 0x24044c00) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x4, [@enum64={0x3, 0x7, 0x0, 0x13, 0x0, 0x5, [{0x9, 0xf29c, 0x9}, {0xc, 0xf, 0x7ff}, {0xb, 0x8, 0x9}, {0x4, 0xfffffff9, 0xfffffeff}, {0x5, 0x1e}, {0x8, 0x5a, 0xffff}, {0xe, 0x0, 0x2}]}, @typedef={0xd, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x61, 0x5f]}}, &(0x7f0000000580), 0x88, 0x0, 0x1, 0x4}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x17, 0x57ed83d0, 0x7b, 0x2, 0x40020, r9, 0x8, '\x00', r11, r12, 0x2, 0x4, 0x1}, 0x50) 3.959344526s ago: executing program 3 (id=2787): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11200, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 3.818636509s ago: executing program 1 (id=2788): sendmsg$kcm(0xffffffffffffffff, 0x0, 0xfc40) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x10, 0x0, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x29, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8cda, 0x1000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000001980)=""/4096, 0x28, 0x1000, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={r3, 0x20, &(0x7f0000000840)={&(0x7f0000002980)=""/4096, 0x1000, 0x0, 0x0}}, 0x10) r4 = socket$kcm(0x2, 0x1, 0x84) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r1, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000540)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x61, &(0x7f0000000400)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x7b, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_lsm={0x1d, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000040000000000000002000000950000000000000081e65c8ed2d610f60217956da0aa56732411a8c4235b7d8891a5765e05a74920bfcf067053560ea63ac3f81d1d1c86fbe4"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0xc9, &(0x7f00000001c0)=""/201, 0x40f00, 0x40, '\x00', r5, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x5, 0x10, 0x0, 0x3}, 0x10, r6, 0x0, 0x4, 0x0, &(0x7f0000000980)=[{0x2, 0x3, 0xc, 0x6}, {0x5, 0x5, 0x8}, {0x3, 0x1, 0x1, 0x1}, {0x0, 0x3, 0xd, 0xc}], 0x10, 0x3}, 0x94) r7 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}, 0x1000000}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0) recvmsg$kcm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1, &(0x7f0000000080)=""/173, 0xad}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x541b, &(0x7f0000000180)) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1f, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef438000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 3.702815852s ago: executing program 4 (id=2789): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d, 0x22a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xee01, 0xee00}}}], 0x38, 0x4050}, 0x20000800) recvmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40012140) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r3, &(0x7f0000000480)={0x0, 0x13, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0x8ec0}], 0x12}, 0x12) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x8, 0x1, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x149000, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8918, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7fff"}) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_pressure(r7, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r8, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) close(r8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) ioctl$TUNSETDEBUG(r5, 0x400454c9, &(0x7f0000000580)=0x7) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x10101, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0x2a, &(0x7f0000000140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000180), &(0x7f00000002c0), 0x8, 0x56, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) close(0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', r10, 0xffffffffffffffff, 0x2, 0x2}, 0x50) perf_event_open(&(0x7f00000001c0)={0x3, 0xffffffffffffff36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x88, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x6}, 0x40, 0x8, 0x0, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f1, &(0x7f0000000080)) 3.594552104s ago: executing program 3 (id=2790): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={&(0x7f0000000180), &(0x7f00000003c0)=""/119, 0x0, 0x0, 0x9, 0xffffffffffffffff, 0x4}, 0x38) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000300000000000000f7ffffff18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000380)=r5) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 3.086836246s ago: executing program 0 (id=2791): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400048000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="5fd63edbfd8a4a0077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2, r0}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa31086b876c0c0000007ea60264160af3653c001c000d0000008bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2bf2, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) 2.621741697s ago: executing program 1 (id=2792): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x200000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x80e1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x2f86, 0x7}, 0x0, 0x0, 0x51, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000980)=0xffffffffffffffff, 0x4) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xfffffeff) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000400)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x20, 0x16, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5bd}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7040}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, @ldst={0x0, 0x1, 0x4, 0x0, 0x8, 0xffffffffffffffe0, 0x1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @jmp={0x5, 0x0, 0x3, 0x4, 0x3, 0x2, 0x10}]}, &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x22, r2, 0x8, &(0x7f0000000380)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0xe, 0x80000001, 0x5}, 0x10, 0xffffffffffffffff, r3, 0x5, 0x0, &(0x7f0000000500)=[{0x0, 0x5, 0x10}, {0x0, 0x1, 0x10}, {0x1, 0x2, 0x1}, {0x5, 0x2, 0xf, 0x5}, {0x2, 0x2, 0xc, 0x8}], 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x6, 0xf60, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000001c0)='cpu<20\t&&') r6 = socket$kcm(0xa, 0x1, 0x106) recvmsg$kcm(r6, &(0x7f0000001940)={0x0, 0x0, 0x0}, 0x71) syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.595967218s ago: executing program 4 (id=2793): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x7, 0x0, &(0x7f00000000c0)="0500f900000000", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x32, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f0000000040), 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000"], 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000d18b17bde8e053d02ccf6845060dc8794e5412101a91880bf6c49b1f0be162fa6de51a43c5aad616ad9bebc0721982c30e6f62973d6793f56dd1289354de9513ad514e1b7380201a0ec118fd010085148180ca93f6093b25c388e9dde635153fca0c6a31cc39a1740c6b8c4dada06f09eaf2ae75", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="030000000500"/28], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="7a9a65e4ba0eb70780b55eca9239aff04da45aafd1370997561bde3a036f0791639e4be89439572e387006ee197ab8a858b237564bad3a8c2b92a4dad527661382c980d1f205d43c56a11035a40dcba4de40d1ab3322ff0782ea4a42", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRESHEX=r1, @ANYRES8=r0, @ANYBLOB="00000000000000000000000000000000001300"/28], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c00000004000000040000009800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00004000000000000000000000990000000000000000"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r2, @ANYBLOB="000000000000000018100000", @ANYRES32=r3, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r4, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0f000007000000000000000010040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$kcm(0x2, 0x5, 0x84) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48) close(r5) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000740)={r6, &(0x7f0000000340)="bc117ff1d8a1a1348ad0db7482f1100ce1af2a0653", &(0x7f0000000680)=""/146}, 0x20) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d2", 0x9}], 0x1}, 0x600300) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r8 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500), 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e4701ffceaccd874d810a7096b0eb77a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d8a8a9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd58e498149043021c6046838ab76b054f0f2621a9d26b9ac85d11e99a62fb3d7b3f38297e7a0775b1dcbea2db30b9bfa203efb13367879179dd3"], &(0x7f0000000000)='GPL\x00', 0x5, 0xba, &(0x7f000000cf3d)=""/186}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) 2.49888279s ago: executing program 0 (id=2794): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x106080, 0x0, 0x4000000, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x6, 0xe, 0x1000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2c, 0x3, 0x0) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x10, &(0x7f0000001080)=[{0x0}, {&(0x7f00000011c0)="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", 0x129}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x11, 0x29, 0x2}}, @ip_tos_u8={{0x11}}], 0x48}, 0xff00) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x8, "eeb4fe8ba15e"}], 0x18}, 0x41) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000080)={r2}) socket$kcm(0x2c, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014009080c00000000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4000000) 2.434921562s ago: executing program 2 (id=2795): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000015006b03000000d86e6c1d000a117ea6ea6567e71b59", 0xfe86}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x7, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) close(r6) ioctl$SIOCSIFHWADDR(r6, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={&(0x7f00000001c0)="1d45127386f6579f06975cee19db1b10a7fe866526d357f73b5f721de0c2866d4e49632b867cafb57708c2dfb88aedca78ec93fcb3b4e48b996016d0efeff66e581802ee61b67c1cd5a70b5dc21288c952ce1ab15187610c43d078dfae9fc04f9d17567dc32f5d32b78cae81d4ed4fdd4802344e544f0c7d68c511faf769fdc72c1e72944c31a0eefc83a295447c97", &(0x7f0000000540)=""/96, &(0x7f0000000380)="33dbafd919360a6d94b0a119512525f7da492e56e770e366ad0f875133d15eb4104c6a818925580b3eeb05110bf48478bb9e67a37bbe427e15ab1773b5d2fc03474710a07e836b9e1905dea4a09779f76d89fbd77ab8799c4b0ad01532e7dcb65f3759b61fa671166f7d99c0fb31468aa362d274bb9f717761b7bf6002c98ff070b694e4d96b18181c804fc7c4118143b7021042896f57efc17ba31da22c8a9ad50a90b3670e", &(0x7f0000000440)="77429d6720a6aed288efdf338f97a3924072dd94c1a87daabb9103c61c628f81", 0x80, r6}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x101d0) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) 2.187012648s ago: executing program 4 (id=2796): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x7c, &(0x7f0000000000), 0x62) r2 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=@framed, &(0x7f00000001c0)='GPL\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0x105, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) recvmsg$unix(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}, 0x10122) setsockopt$sock_attach_bpf(r2, 0x6, 0x13, &(0x7f0000000200), 0x4) r6 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r6, &(0x7f0000000800)={&(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000000)="b1", 0x34000}], 0x1}, 0xc8d4) sendmsg$inet(r6, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000340)="d9", 0x1}], 0x1}, 0x4000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0xfe33) 2.131486929s ago: executing program 1 (id=2797): r0 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x80, 0x4a, 0xfe, 0x40, 0x2, 0x0, 0x10001, 0x20, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xb, 0x4, @perf_bp={&(0x7f0000000100), 0xe}, 0x8022, 0x1, 0x7fffffff, 0x8, 0x1, 0x0, 0x5, 0x0, 0x5, 0x0, 0x1}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x9) getpid() ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000300)=0x80) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x5, 0x12, 0x0, &(0x7f0000000000)="00a0a8dc9ad42b8995db340008a619444004", 0x0, 0xcfe, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) 891.565179ms ago: executing program 0 (id=2798): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() syz_open_procfs$namespace(r1, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x39, 0x4c, 0x4, 0x4, 0x0, 0x7ff, 0x40008, 0xc, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x753d, 0x2f0c}, 0x0, 0xd7, 0x9, 0x2, 0x5, 0xfff, 0x3, 0x0, 0x4, 0x0, 0x6}, r1, 0x1, r0, 0x3) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) close(r3) socket$kcm(0x2, 0x2, 0x88) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 870.630259ms ago: executing program 1 (id=2799): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2, &(0x7f00000002c0), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x8907, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x12020) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c6394f90424fc602f1a09000a740100053582c137153e370248018000f01700d1bd", 0x2e}], 0x1}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r5 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r7, 0xffffffffffffffff}, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x7, 0x14, &(0x7f0000000900)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xf, 0x12, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000007000000000000000100008018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500f50083000000bf0900000000000055090100000000009500000000000000005f01000b000000182a0000", @ANYRES32=r8, @ANYBLOB="000000001d290000bf91000000000000b7020000010000008500000001000000b7000000000000009500000000000000"], &(0x7f00000005c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x5, 0xb, 0x8000, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000680)=[r4, r4, 0xffffffffffffffff, r8], &(0x7f00000006c0)=[{0x5, 0x1, 0xe, 0xa}, {0x4, 0x2, 0xb, 0x2}, {0x2, 0x2, 0xa}, {0x0, 0x5, 0x2, 0x1}], 0x10, 0xffffff81}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000180)=ANY=[], 0x0}, 0x94) close(r5) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, &(0x7f0000001840)=""/4080, 0xff0}, 0x0) close(r0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYRES32=r4, @ANYRESHEX=r2, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRES32=0x0, @ANYRESHEX=r6], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r9, &(0x7f0000000300), 0x0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r4, 0x0, 0x0}, 0x10) 810.908421ms ago: executing program 2 (id=2800): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11200, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 739.619542ms ago: executing program 4 (id=2801): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1002, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f97e24fc6004030e000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = gettid() syz_open_procfs$namespace(r3, &(0x7f0000000200)='ns/time\x00') bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r1}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000500)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYBLOB="11000000", @ANYRES32=r5, @ANYBLOB="78dfeb21b80c22877596f51b9500af61a152a74c88a3add1a3a24fd2dae4790d251bf90c63da22d85a3f", @ANYRES32=r4, @ANYRES64=0x0], 0x20) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB="180200001000000000000000000000001801000020696c2500000000002020207b2af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000087000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) r7 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r7, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r0}, 0xc) 678.512734ms ago: executing program 0 (id=2802): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0xc2ba, 0x0, 0x64317119, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000001540)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYBLOB="e9bdfc4adf7460fed477a3abb703ff62ce1f9843544c6cf45cdba3fe0dcb57aa633f6c8d0efee3973c283750c9979a6db943158555717ff0185a5706b763b11771e42a9fe97e7be79942482c40f854533c869b5ce14e32d8ad9745bf10448795aef9f6d0002e4af8fd118d7b11395ed2b83611173bf9000ea7d111829032b192d69c30e252219c02663f74df419e79cda9b4e8f5a0d1d577b322bc5f2206b68973467acaccad4d657a4f4b87e8634858988ed2d6008e2c3f2975f12b67a72db4562cff27b3f9082f206379e7c009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x40}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f00000014c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000300)='GPL\x00', 0x5, 0xffd, &(0x7f00000004c0)=""/4093, 0x0, 0x1}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000022c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(r5, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@fallback=r4, 0x0, 0x1, 0x5, &(0x7f00000001c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000140)={0xffff, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@map=r6, r4, 0xf, 0x2024, 0x0, @void, @void, @value=r8, @void, r7}, 0x20) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, r3, 0x7, 0x2000, 0x0, @value=r9, @void, @void, @void, r7}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@fallback=r1, r1, 0x18, 0x0, r1, @void, @value=r1, @void, @void, r7}, 0x20) r10 = socket$kcm(0x2, 0x3, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x890b, &(0x7f0000000100)) 602.678736ms ago: executing program 2 (id=2803): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="365e4e92c32ad880a6d33aaad447788d30188897", 0x14}], 0x1}, 0x40000) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d184925922333211d168ab0f6e1081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad35ef06", 0x53}], 0x1, 0x0, 0x3298}, 0x0) close(r2) recvmsg$unix(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r4 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x25, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x4, 0x282, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x4, 0x3ff, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000340)={r4}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000000f21f61118c000000000085000000ce0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x4, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x25) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r9, &(0x7f0000000700)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="97cafebcb71250cb5d687d010e088fee0f13fd7ddde44c52cc8a5ee41e78cb0a3605521895df02a9c30ff52a2101328f8732eb4680875283fd16a6d00000000000000000635988ffffdb99a5ba5625f9c1ca0937ab32e0f075568b0000000000000000c6ece05d746534ec4a866371ccc5bcc1bdd797d985661769f7c42b5db6746eaf4301f7210fec0e5915c5b894207f73894db7d996610e14d7e4512e22814fc91974b6a95cd5b24a75aef2104dc415a2ee4eaa13fd2e2843c7ca7a86a7c2c6ab59611ed7981df623eee2ae51c716c5834fe56adca7ba7e153ef389b044bc9d5ae5cf9db9825d5f596ae76a83bfdc36d7f7d0791c1124e560904f2114a21174268073ae24e5283c68d82829d99e5be9f972a2fb0000000000000100000099653fa970ea29738db9fa0ef90a37c8cee3654fd4d0d5636e4b013d990501dca77d03008d6be1df1ca68f03c45a34f8a715c8a632", 0x154}, {&(0x7f0000000740)="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", 0x41b}], 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r9], 0x48}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e1, &(0x7f0000000180)={r10}) 456.013379ms ago: executing program 1 (id=2804): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800", 0x1e}], 0x1}, 0x20000004) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0, @ANYRES8=r0, @ANYRESDEC=r0, @ANYBLOB="31b847903116f0308c5d8a973e85d26f093c8784f28d2155059bc0f22a0e290c63a901c07cce804cd4f6"], 0x33fe0) 1.99042ms ago: executing program 2 (id=2805): perf_event_open(&(0x7f0000000380)={0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0x10}, 0x0, 0xc8, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xc, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000480)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="bb", 0x1}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="20000000000000008400000002000000fe80410000000000920000000000000010"], 0x30}, 0x8021) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000070000000003000000000000080100000000000000000000090200000000002e2e5f"], 0x0, 0x44}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r3, 0x3, 0x1}, 0x50) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xe, &(0x7f0000000000)=[@rights={{0x14}}]}, 0x262) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100032f00fc08000000110200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 0s ago: executing program 2 (id=2806): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000ac0)={r0, &(0x7f0000000880)="d48cf7", &(0x7f00000009c0)=""/245}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1000, '\x00', r3, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x93, 0x93, 0x5, [@decl_tag={0xd, 0x0, 0x0, 0x11, 0x4, 0x7}, @int={0xd, 0x0, 0x0, 0x1, 0x0, 0x14, 0x0, 0x48, 0x2}, @int={0x27, 0x0, 0x0, 0x1, 0x0, 0x4e, 0x0, 0x7c, 0x6}, @datasec={0xb, 0x1, 0x0, 0xf, 0x3, [{0x1, 0x5, 0x80000000}], "ce6b1d"}, @restrict={0x7}, @volatile={0x10}, @union={0x8, 0x3, 0x0, 0x5, 0x0, 0x8, [{0xf, 0x4, 0xf820}, {0x1, 0x3, 0x1ff}, {0x0, 0x5, 0x3}]}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f00000006c0)=""/71, 0xb1, 0x47, 0x0, 0x9d6}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x9, 0x0, r4, 0x9, '\x00', 0x0, r5, 0x0, 0x3}, 0x50) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x4000, r0}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000100)=@raw=[@map_val={0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x6}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}], &(0x7f0000000140)='GPL\x00', 0x0, 0x69, &(0x7f0000000180)=""/105, 0x41100, 0x1, '\x00', r3, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x10, 0x5, 0x7}, 0x10, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000003c0)=[r1, r6, r1, r0], &(0x7f0000000400)=[{0x0, 0x4, 0x8, 0xa}], 0x10, 0x2}, 0x94) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000040)="180000003c000b05d25a806f8c7d94f90324fc602f000000", 0x18}], 0x1}, 0x0) kernel console output (not intermixed with test programs): : 60 bytes leftover after parsing attributes in process `syz.4.601'. [ 186.069533][ T6491] netlink: 'syz.1.598': attribute type 4 has an invalid length. [ 186.103094][ T6491] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.598'. [ 186.374452][ T6502] netlink: 'syz.3.602': attribute type 29 has an invalid length. [ 186.411318][ T6502] netlink: 'syz.3.602': attribute type 29 has an invalid length. [ 186.439878][ T6504] netlink: 'syz.4.603': attribute type 21 has an invalid length. [ 186.467966][ T6504] netlink: 132 bytes leftover after parsing attributes in process `syz.4.603'. [ 186.484419][ T6501] netlink: 'syz.3.602': attribute type 29 has an invalid length. [ 186.691524][ T6515] netlink: 192432 bytes leftover after parsing attributes in process `syz.3.608'. [ 186.722859][ T6515] netlink: get zone limit has 4 unknown bytes [ 186.842998][ T6518] netlink: 'syz.0.607': attribute type 3 has an invalid length. [ 187.089068][ T6532] netlink: 'syz.1.611': attribute type 10 has an invalid length. [ 187.220144][ T6532] team0: Port device virt_wifi0 added [ 187.418699][ T6543] netlink: 'syz.2.613': attribute type 1 has an invalid length. [ 187.468422][ T6543] netlink: 'syz.2.613': attribute type 3 has an invalid length. [ 187.663883][ T6545] netlink: 'syz.2.613': attribute type 12 has an invalid length. [ 187.747248][ T6539] delete_channel: no stack [ 187.872007][ T6559] netlink: 'syz.4.618': attribute type 11 has an invalid length. [ 187.969353][ T6557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.009941][ T6557] bond0 (unregistering): Released all slaves [ 188.146922][ T6556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.420713][ T6580] sock: sock_set_timeout: `syz.2.624' (pid 6580) tries to set negative timeout [ 191.849104][ T6596] validate_nla: 2 callbacks suppressed [ 191.849121][ T6596] netlink: 'syz.4.632': attribute type 3 has an invalid length. [ 191.936529][ T6596] __nla_validate_parse: 71 callbacks suppressed [ 191.936543][ T6596] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.632'. [ 192.114090][ T6611] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.630'. [ 192.241194][ T6611] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 193.224956][ T6633] delete_channel: no stack [ 194.114703][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.121157][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.593934][ T6682] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.654'. [ 194.634402][ T6682] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 194.837665][ T6687] netlink: 'syz.1.658': attribute type 3 has an invalid length. [ 194.846452][ T6687] netlink: 132 bytes leftover after parsing attributes in process `syz.1.658'. [ 195.045547][ T6696] netlink: 68 bytes leftover after parsing attributes in process `syz.4.661'. [ 195.066168][ T4285] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 195.085371][ T4285] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 195.509149][ T6708] netlink: 'syz.2.666': attribute type 3 has an invalid length. [ 195.520667][ T6708] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.666'. [ 196.030915][ T6731] netlink: 'syz.4.672': attribute type 2 has an invalid length. [ 196.069272][ T6731] netlink: 'syz.4.672': attribute type 1 has an invalid length. [ 196.104030][ T6731] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.672'. [ 196.185804][ T4285] Bluetooth: hci0: command 0x0406 tx timeout [ 196.191943][ T4285] Bluetooth: hci1: command 0x0406 tx timeout [ 196.200403][ T4292] Bluetooth: hci3: command 0x0406 tx timeout [ 196.200429][ T49] Bluetooth: hci4: command 0x0406 tx timeout [ 196.211843][ T4288] Bluetooth: hci2: command 0x0406 tx timeout [ 196.862104][ T6766] tap0: tun_chr_ioctl cmd 1074025677 [ 196.868393][ T6766] tap0: linktype set to 769 [ 197.574913][ T6785] netlink: 'syz.4.686': attribute type 1 has an invalid length. [ 197.590873][ T6785] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.686'. [ 198.550447][ T6804] delete_channel: no stack [ 200.369651][ T6822] device syzkaller0 entered promiscuous mode [ 200.385867][ T6834] netlink: 'syz.4.701': attribute type 2 has an invalid length. [ 200.393572][ T6834] netlink: 'syz.4.701': attribute type 8 has an invalid length. [ 200.410849][ T6834] netlink: 132 bytes leftover after parsing attributes in process `syz.4.701'. [ 200.686567][ T6845] raw_sendmsg: syz.4.705 forgot to set AF_INET. Fix it! [ 201.099301][ T6857] netlink: 'syz.1.708': attribute type 29 has an invalid length. [ 202.141363][ T6838] netlink: 15119 bytes leftover after parsing attributes in process `syz.3.702'. [ 202.164449][ T6857] netlink: 'syz.1.708': attribute type 29 has an invalid length. [ 202.542211][ T6873] netlink: 830 bytes leftover after parsing attributes in process `syz.0.713'. [ 202.653436][ T6866] netlink: 14 bytes leftover after parsing attributes in process `syz.1.710'. [ 202.982694][ T6866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.114051][ T6866] bond0 (unregistering): Released all slaves [ 203.614530][ T6905] device lo entered promiscuous mode [ 203.626749][ T6905] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 203.739072][ T6907] netlink: 'syz.1.721': attribute type 25 has an invalid length. [ 203.767306][ T6907] netlink: 'syz.1.721': attribute type 29 has an invalid length. [ 203.839956][ T6907] netlink: 5 bytes leftover after parsing attributes in process `syz.1.721'. [ 204.084220][ T6915] netlink: 'syz.3.724': attribute type 2 has an invalid length. [ 204.104326][ T6915] netlink: 'syz.3.724': attribute type 1 has an invalid length. [ 204.135187][ T6915] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.724'. [ 204.717507][ T6935] netlink: 'syz.4.731': attribute type 15 has an invalid length. [ 204.725327][ T6935] netlink: 'syz.4.731': attribute type 7 has an invalid length. [ 205.453181][ T6964] netlink: 'syz.3.740': attribute type 29 has an invalid length. [ 205.489524][ T6964] netlink: 'syz.3.740': attribute type 29 has an invalid length. [ 206.655174][ T6973] netlink: 'syz.0.744': attribute type 10 has an invalid length. [ 206.700604][ T6973] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.744'. [ 207.252483][ T7001] device pim6reg1 entered promiscuous mode [ 207.351493][ T6997] netlink: 'syz.1.747': attribute type 2 has an invalid length. [ 207.455933][ T6997] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.747'. [ 207.613814][ T7003] device syzkaller0 entered promiscuous mode [ 210.210016][ T7008] validate_nla: 2 callbacks suppressed [ 210.210028][ T7008] netlink: 'syz.2.753': attribute type 29 has an invalid length. [ 210.238624][ T7040] netlink: 'syz.4.761': attribute type 21 has an invalid length. [ 210.392626][ T7050] netlink: 'syz.3.765': attribute type 3 has an invalid length. [ 210.426743][ T7050] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.765'. [ 210.457956][ T7051] netlink: 'syz.2.764': attribute type 2 has an invalid length. [ 210.483534][ T7051] netlink: 'syz.2.764': attribute type 1 has an invalid length. [ 210.501202][ T7051] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.764'. [ 210.539126][ T7053] netlink: 'syz.4.766': attribute type 25 has an invalid length. [ 210.548681][ T7053] netlink: 'syz.4.766': attribute type 29 has an invalid length. [ 210.565544][ T7053] netlink: 5 bytes leftover after parsing attributes in process `syz.4.766'. [ 210.758212][ T7060] netlink: 'syz.3.769': attribute type 3 has an invalid length. [ 210.781867][ T7060] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.769'. [ 211.230461][ T7075] netlink: 'syz.3.773': attribute type 29 has an invalid length. [ 211.269576][ T7075] netlink: 'syz.3.773': attribute type 29 has an invalid length. [ 211.312448][ T7072] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.773'. [ 211.451997][ T7079] device syzkaller0 entered promiscuous mode [ 211.754352][ T7092] device syzkaller0 entered promiscuous mode [ 214.381263][ T7153] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.791'. [ 214.834928][ T7157] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.796'. [ 215.859616][ T7147] validate_nla: 6 callbacks suppressed [ 215.859634][ T7147] netlink: 'syz.0.791': attribute type 29 has an invalid length. [ 215.881755][ T7145] netlink: 60 bytes leftover after parsing attributes in process `syz.2.794'. [ 216.165791][ T7175] netlink: 'syz.1.801': attribute type 49 has an invalid length. [ 216.184484][ T7175] netlink: 'syz.1.801': attribute type 49 has an invalid length. [ 216.645722][ T7184] netlink: 'syz.2.803': attribute type 10 has an invalid length. [ 216.954019][ T7184] device vlan0 entered promiscuous mode [ 216.988030][ T7184] team0: Port device vlan0 added [ 217.383593][ T7204] netlink: 'syz.2.809': attribute type 29 has an invalid length. [ 217.565950][ T7203] device syzkaller0 entered promiscuous mode [ 217.584477][ T7204] netlink: 'syz.2.809': attribute type 29 has an invalid length. [ 217.606004][ T7201] netlink: 'syz.2.809': attribute type 29 has an invalid length. [ 217.619969][ T7205] netlink: 'syz.1.808': attribute type 10 has an invalid length. [ 217.643805][ T7201] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.809'. [ 217.663811][ T7205] netlink: 2 bytes leftover after parsing attributes in process `syz.1.808'. [ 217.684797][ T7205] device hsr0 entered promiscuous mode [ 217.693551][ T7205] bridge0: port 3(hsr0) entered blocking state [ 217.700522][ T7205] bridge0: port 3(hsr0) entered disabled state [ 217.709440][ T7205] bridge0: port 3(hsr0) entered blocking state [ 217.715783][ T7205] bridge0: port 3(hsr0) entered forwarding state [ 217.723736][ T7208] netlink: 'syz.2.809': attribute type 29 has an invalid length. [ 218.729869][ T7236] delete_channel: no stack [ 218.824909][ T7240] netlink: 60 bytes leftover after parsing attributes in process `syz.2.820'. [ 219.832376][ T7240] netlink: 60 bytes leftover after parsing attributes in process `syz.2.820'. [ 219.979018][ T7265] netlink: 'syz.0.836': attribute type 3 has an invalid length. [ 220.035251][ T7265] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.836'. [ 220.088607][ T7268] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.826'. [ 220.504313][ T7283] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.832'. [ 221.087980][ T7278] validate_nla: 5 callbacks suppressed [ 221.087998][ T7278] netlink: 'syz.2.830': attribute type 23 has an invalid length. [ 221.219840][ T7296] netlink: 'syz.1.835': attribute type 29 has an invalid length. [ 221.264092][ T7296] netlink: 'syz.1.835': attribute type 29 has an invalid length. [ 221.276882][ T7295] netlink: 'syz.1.835': attribute type 29 has an invalid length. [ 221.317752][ T7300] netlink: 'syz.1.835': attribute type 29 has an invalid length. [ 221.336155][ T7295] netlink: 'syz.1.835': attribute type 29 has an invalid length. [ 221.347231][ T7295] netlink: 'syz.1.835': attribute type 29 has an invalid length. [ 221.443253][ T7304] netlink: 'syz.0.838': attribute type 10 has an invalid length. [ 222.218750][ T7304] team0: Device gre0 is of different type [ 222.271352][ T7316] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.839'. [ 222.298938][ T7318] netlink: 'syz.2.841': attribute type 10 has an invalid length. [ 222.307518][ T7318] netlink: 2 bytes leftover after parsing attributes in process `syz.2.841'. [ 222.355652][ T7318] device hsr0 entered promiscuous mode [ 222.361409][ T7318] bridge0: port 3(hsr0) entered blocking state [ 222.405760][ T7318] bridge0: port 3(hsr0) entered disabled state [ 222.413939][ T7318] bridge0: port 3(hsr0) entered blocking state [ 222.420271][ T7318] bridge0: port 3(hsr0) entered forwarding state [ 222.532951][ T7324] netlink: 'syz.1.843': attribute type 3 has an invalid length. [ 222.576079][ T7324] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.843'. [ 222.830610][ T7336] netlink: 132 bytes leftover after parsing attributes in process `syz.2.849'. [ 222.952102][ T7338] netlink: 60 bytes leftover after parsing attributes in process `syz.3.850'. [ 223.123131][ T7342] -1: renamed from syzkaller0 [ 223.303382][ T7354] sctp: [Deprecated]: syz.1.854 (pid 7354) Use of int in max_burst socket option deprecated. [ 223.303382][ T7354] Use struct sctp_assoc_value instead [ 223.506206][ T7359] device netdevsim0 left promiscuous mode [ 223.550271][ T7359] team0: Port device netdevsim0 added [ 223.842206][ T7365] netlink: 2 bytes leftover after parsing attributes in process `syz.4.856'. [ 223.926494][ T7365] device hsr0 entered promiscuous mode [ 223.953235][ T7365] bridge0: port 3(hsr0) entered blocking state [ 224.003827][ T7365] bridge0: port 3(hsr0) entered disabled state [ 224.057705][ T7365] bridge0: port 3(hsr0) entered blocking state [ 224.064070][ T7365] bridge0: port 3(hsr0) entered forwarding state [ 224.120308][ T7370] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.859'. [ 224.401395][ T7379] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.861'. [ 224.445977][ T7380] netlink: 152 bytes leftover after parsing attributes in process `syz.3.862'. [ 224.468559][ T7380] erspan0: refused to change device tx_queue_len [ 224.514434][ T7380] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 224.964027][ T7406] bridge0: port 3(hsr0) entered disabled state [ 224.970723][ T7406] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.979384][ T7406] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.384707][ T7428] netlink: 132 bytes leftover after parsing attributes in process `syz.0.877'. [ 225.427038][ T4285] Bluetooth: hci1: ISO packet for unknown connection handle 3 [ 229.903134][ T7512] __nla_validate_parse: 65 callbacks suppressed [ 229.903168][ T7512] netlink: 144 bytes leftover after parsing attributes in process `syz.0.903'. [ 230.700042][ T7527] validate_nla: 74 callbacks suppressed [ 230.700195][ T7527] netlink: 'syz.2.908': attribute type 1 has an invalid length. [ 230.720868][ T7527] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.908'. [ 233.524491][ T7547] netlink: 'syz.1.915': attribute type 5 has an invalid length. [ 233.976427][ T7558] netlink: 144 bytes leftover after parsing attributes in process `syz.1.917'. [ 234.297537][ T7568] netlink: 'syz.0.921': attribute type 1 has an invalid length. [ 234.313715][ T7568] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.921'. [ 234.677768][ T7592] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.932'. [ 234.754466][ T7589] netlink: 'syz.4.929': attribute type 2 has an invalid length. [ 234.772198][ T7589] netlink: 10 bytes leftover after parsing attributes in process `syz.4.929'. [ 234.830902][ T7593] device syzkaller0 entered promiscuous mode [ 234.848481][ T7594] netlink: 'syz.2.932': attribute type 21 has an invalid length. [ 234.866959][ T7594] netlink: 'syz.2.932': attribute type 7 has an invalid length. [ 236.219615][ T7622] netlink: 'syz.4.940': attribute type 1 has an invalid length. [ 236.233636][ T7622] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.940'. [ 237.397657][ T7640] netlink: 'syz.4.944': attribute type 29 has an invalid length. [ 238.008463][ T7592] bridge0: port 4(batadv0) entered blocking state [ 238.014981][ T7592] bridge0: port 4(batadv0) entered disabled state [ 238.022530][ T7592] device batadv0 entered promiscuous mode [ 238.029288][ T7592] bridge0: port 4(batadv0) entered blocking state [ 238.036153][ T7592] bridge0: port 4(batadv0) entered forwarding state [ 238.044222][ T7634] netlink: 'syz.3.942': attribute type 10 has an invalid length. [ 238.113233][ T7640] netlink: 'syz.4.944': attribute type 29 has an invalid length. [ 238.275474][ T7645] device syzkaller0 entered promiscuous mode [ 238.367575][ T4366] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 238.377369][ T4366] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 239.099745][ T7683] netlink: 'syz.4.955': attribute type 3 has an invalid length. [ 239.118369][ T7683] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.955'. [ 241.580684][ T7693] syz.2.957[7693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 241.581767][ T7693] syz.2.957[7693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.832420][ T7685] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.955'. [ 242.853251][ T7685] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 243.308004][ T7727] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.965'. [ 243.388327][ T7721] device syzkaller0 entered promiscuous mode [ 243.607814][ T7740] netlink: 'syz.3.969': attribute type 10 has an invalid length. [ 243.617791][ T7743] netlink: 'syz.2.970': attribute type 3 has an invalid length. [ 243.639115][ T7740] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.646578][ T7740] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.658158][ T7743] netlink: 'syz.2.970': attribute type 1 has an invalid length. [ 243.704038][ T7743] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.970'. [ 244.090391][ T7753] device syzkaller0 entered promiscuous mode [ 246.817322][ T7797] tipc: Started in network mode [ 246.822625][ T7797] tipc: Node identity 9215a268, cluster identity 4711 [ 246.829652][ T7797] tipc: Node number set to 2450891368 [ 246.839320][ T7798] netlink: 'syz.3.981': attribute type 2 has an invalid length. [ 246.848529][ T7798] netlink: 'syz.3.981': attribute type 8 has an invalid length. [ 246.875766][ T7798] netlink: 132 bytes leftover after parsing attributes in process `syz.3.981'. [ 247.059580][ T7808] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.984'. [ 247.097151][ T7808] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 247.135439][ T7808] CPU: 0 PID: 7808 Comm: syz.3.984 Not tainted syzkaller #0 [ 247.142827][ T7808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 247.152941][ T7808] Call Trace: [ 247.156268][ T7808] [ 247.159261][ T7808] dump_stack_lvl+0x188/0x24e [ 247.164104][ T7808] ? show_regs_print_info+0x12/0x12 [ 247.169371][ T7808] ? load_image+0x410/0x410 [ 247.173973][ T7808] sysfs_warn_dup+0x8a/0xa0 [ 247.178544][ T7808] sysfs_do_create_link_sd+0xc0/0x110 [ 247.184027][ T7808] device_add+0x83b/0x1050 [ 247.188552][ T7808] wiphy_register+0x1d8b/0x2aa0 [ 247.193511][ T7808] ? cfg80211_event_work+0x40/0x40 [ 247.198691][ T7808] ? minstrel_ht_alloc+0x894/0xa20 [ 247.203883][ T7808] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 247.210024][ T7808] ieee80211_register_hw+0x2d48/0x39f0 [ 247.215608][ T7808] ? ieee80211_register_hw+0xee1/0x39f0 [ 247.221234][ T7808] ? ieee80211_register_hw+0xee1/0x39f0 [ 247.226855][ T7808] ? ieee80211_tasklet_handler+0x20/0x20 [ 247.232547][ T7808] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 247.238511][ T7808] ? __debug_object_init+0xed/0x440 [ 247.243792][ T7808] ? memset+0x1e/0x40 [ 247.247827][ T7808] ? __hrtimer_init+0x189/0x270 [ 247.252740][ T7808] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 247.258548][ T7808] ? memcpy+0x3c/0x60 [ 247.262627][ T7808] hwsim_new_radio_nl+0xab7/0xc90 [ 247.267748][ T7808] genl_family_rcv_msg_doit+0x22f/0x350 [ 247.273371][ T7808] ? end_current_label_crit_section+0x170/0x170 [ 247.279708][ T7808] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 247.285705][ T7808] ? bpf_lsm_capable+0x5/0x10 [ 247.290441][ T7808] ? security_capable+0x85/0xb0 [ 247.295374][ T7808] genl_rcv_msg+0x601/0x790 [ 247.299973][ T7808] ? genl_bind+0x360/0x360 [ 247.304453][ T7808] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 247.310881][ T7808] netlink_rcv_skb+0x1ef/0x440 [ 247.315713][ T7808] ? genl_bind+0x360/0x360 [ 247.320181][ T7808] ? netlink_ack+0x1160/0x1160 [ 247.325031][ T7808] ? down_read+0x1a8/0x2d0 [ 247.329503][ T7808] genl_rcv+0x24/0x40 [ 247.333558][ T7808] netlink_unicast+0x7ad/0x920 [ 247.338429][ T7808] netlink_sendmsg+0x8ad/0xbd0 [ 247.343266][ T7808] ? netlink_getsockopt+0x550/0x550 [ 247.348513][ T7808] ? apparmor_socket_sendmsg+0x8a/0x330 [ 247.354100][ T7808] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 247.359417][ T7808] ? security_socket_sendmsg+0x7c/0xa0 [ 247.364927][ T7808] ? netlink_getsockopt+0x550/0x550 [ 247.370195][ T7808] ____sys_sendmsg+0x5ed/0x9a0 [ 247.375023][ T7808] ? __sys_sendmsg_sock+0x30/0x30 [ 247.380094][ T7808] ? __import_iovec+0x306/0x510 [ 247.384991][ T7808] ? import_iovec+0x6f/0xa0 [ 247.389550][ T7808] ___sys_sendmsg+0x2a2/0x360 [ 247.394280][ T7808] ? __sys_sendmsg+0x2a0/0x2a0 [ 247.399177][ T7808] __se_sys_sendmsg+0x1c3/0x2b0 [ 247.404083][ T7808] ? __x64_sys_sendmsg+0x80/0x80 [ 247.409096][ T7808] ? lockdep_hardirqs_on+0x94/0x140 [ 247.414334][ T7808] do_syscall_64+0x4c/0xa0 [ 247.418797][ T7808] ? clear_bhb_loop+0x60/0xb0 [ 247.423509][ T7808] ? clear_bhb_loop+0x60/0xb0 [ 247.428226][ T7808] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 247.434156][ T7808] RIP: 0033:0x7f5e6eb9e0d9 [ 247.438609][ T7808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.458248][ T7808] RSP: 002b:00007f5e6fb58028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.466709][ T7808] RAX: ffffffffffffffda RBX: 00007f5e6ee25fa0 RCX: 00007f5e6eb9e0d9 [ 247.474743][ T7808] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 247.482778][ T7808] RBP: 00007f5e6ec35024 R08: 0000000000000000 R09: 0000000000000000 [ 247.490806][ T7808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.498821][ T7808] R13: 00007f5e6ee26038 R14: 00007f5e6ee25fa0 R15: 00007ffed3f56098 [ 247.506863][ T7808] [ 247.718252][ T7813] pimreg: tun_chr_ioctl cmd 2147767511 [ 248.128908][ T4285] Bluetooth: hci0: unexpected event 0x05 length: 151 > 4 [ 248.498170][ T7844] device syzkaller0 entered promiscuous mode [ 248.558843][ T7849] netlink: 10 bytes leftover after parsing attributes in process `syz.4.996'. [ 248.612676][ T7851] can: request_module (can-proto-0) failed. [ 248.890531][ T7851] can: request_module (can-proto-0) failed. [ 249.108834][ T7851] can: request_module (can-proto-0) failed. [ 249.247628][ T7851] can: request_module (can-proto-0) failed. [ 251.185246][ T7877] device sit0 entered promiscuous mode [ 251.668077][ T7904] device syzkaller0 entered promiscuous mode [ 254.874737][ T7934] device syzkaller0 entered promiscuous mode [ 255.549810][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.556225][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.159214][ T7947] netlink: 'syz.3.1019': attribute type 19 has an invalid length. [ 257.167239][ T7947] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1019'. [ 257.176804][ T7949] netlink: 'syz.3.1019': attribute type 10 has an invalid length. [ 257.496515][ T7959] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 257.517942][ T7962] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 257.623098][ T7994] sock: sock_timestamping_bind_phc: sock not bind to device [ 257.719443][ T7994] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1034'. [ 257.886983][ T7992] device syzkaller0 entered promiscuous mode [ 258.123568][ T8013] netlink: 'syz.0.1038': attribute type 3 has an invalid length. [ 258.157704][ T8013] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1038'. [ 258.630100][ T8027] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.1043'. [ 258.911025][ T8041] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 258.978199][ T8041] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 258.987358][ T8041] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 258.996493][ T8041] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 259.005609][ T8041] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 259.014699][ T8041] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 259.023829][ T8041] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 259.032987][ T8041] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 259.042179][ T8041] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 259.051304][ T8041] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 259.837358][ T8072] netlink: 'syz.1.1056': attribute type 3 has an invalid length. [ 259.846512][ T4285] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 259.863440][ T8069] netlink: 'syz.2.1059': attribute type 3 has an invalid length. [ 259.982587][ T8069] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1059'. [ 260.886990][ T8096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.925745][ T8096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.942344][ T8096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.962218][ T8096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.000353][ T8096] bridge0: port 4(batadv0) entered disabled state [ 261.258793][ T8096] device batadv0 left promiscuous mode [ 261.264746][ T8096] bridge0: port 4(batadv0) entered disabled state [ 261.294333][ T8108] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1068'. [ 261.873399][ T8126] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.1074'. [ 262.030852][ T8130] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1073'. [ 264.317864][ T8149] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1079'. [ 264.389154][ T8149] netlink: 'syz.4.1079': attribute type 10 has an invalid length. [ 265.049292][ T8156] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.1081'. [ 268.120575][ T8162] netlink: 'syz.3.1083': attribute type 27 has an invalid length. [ 268.340243][ T8162] bond0: (slave bond_slave_0): Releasing backup interface [ 268.846892][ T8182] device syzkaller0 entered promiscuous mode [ 269.394038][ T8220] netlink: 'syz.3.1099': attribute type 7 has an invalid length. [ 269.409437][ T8220] netlink: 'syz.3.1099': attribute type 7 has an invalid length. [ 269.418478][ T8220] netlink: 198580 bytes leftover after parsing attributes in process `syz.3.1099'. [ 270.839917][ T8222] device syzkaller0 entered promiscuous mode [ 271.263086][ T8235] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.1100'. [ 271.581709][ T8251] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 271.886730][ T8260] can: request_module (can-proto-0) failed. [ 273.461906][ T8281] device syzkaller0 entered promiscuous mode [ 273.887127][ T8288] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 273.899331][ T8288] syzkaller1: linktype set to 516 [ 274.038472][ T8293] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.1116'. [ 274.066981][ T8293] netlink: 'syz.4.1116': attribute type 29 has an invalid length. [ 275.857651][ T8293] netlink: 'syz.4.1116': attribute type 29 has an invalid length. [ 275.866918][ T8296] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1117'. [ 275.885791][ T8296] net_ratelimit: 3256 callbacks suppressed [ 275.885804][ T8296] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 275.916408][ T8304] netlink: 'syz.1.1118': attribute type 21 has an invalid length. [ 276.104227][ T8307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1119'. [ 276.137277][ T8307] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1119'. [ 276.232566][ T8312] syzkaller0: mtu less than device minimum [ 276.940084][ T8335] netlink: 'syz.1.1122': attribute type 1 has an invalid length. [ 276.964624][ T8336] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1122'. [ 276.987036][ T8335] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.1122'. [ 277.030613][ T8336] netlink: 'syz.1.1122': attribute type 10 has an invalid length. [ 277.207778][ T8336] team0 (unregistering): Port device team_slave_0 removed [ 277.261276][ T8336] team0 (unregistering): Port device team_slave_1 removed [ 277.335335][ T8336] team0 (unregistering): Port device virt_wifi0 removed [ 277.435371][ T8335] netlink: 'syz.1.1122': attribute type 25 has an invalid length. [ 277.541561][ T8335] netlink: 'syz.1.1122': attribute type 25 has an invalid length. [ 277.615912][ T8341] netlink: 'syz.3.1130': attribute type 21 has an invalid length. [ 277.624096][ T8341] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1130'. [ 277.732378][ T4285] Bluetooth: hci4: unexpected event 0x30 length: 15 > 3 [ 279.226203][ T8401] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1143'. [ 279.285920][ T8401] tc_dump_action: action bad kind [ 279.898423][ T8421] netlink: 'syz.0.1153': attribute type 10 has an invalid length. [ 279.931086][ T8421] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1153'. [ 279.966841][ T8421] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 280.649824][ T8425] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1155'. [ 280.677624][ T8425] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.1155'. [ 280.990000][ T8460] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1165'. [ 281.032767][ T8460] netlink: 'syz.3.1165': attribute type 3 has an invalid length. [ 281.047483][ T8460] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.1165'. [ 281.119204][ T8463] netlink: 'syz.0.1163': attribute type 1 has an invalid length. [ 281.138281][ T8463] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.1163'. [ 281.180574][ T8467] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1163'. [ 281.239383][ T8463] netlink: 'syz.0.1163': attribute type 10 has an invalid length. [ 281.563621][ T8463] team0 (unregistering): Port device team_slave_0 removed [ 281.727435][ T8463] team0 (unregistering): Port device team_slave_1 removed [ 282.127643][ T8463] team0 (unregistering): Port device geneve1 removed [ 282.251542][ T8467] netlink: 'syz.0.1163': attribute type 25 has an invalid length. [ 282.276773][ T8467] netlink: 'syz.0.1163': attribute type 25 has an invalid length. [ 282.457800][ T8496] netlink: 'syz.0.1174': attribute type 2 has an invalid length. [ 282.486080][ T8496] netlink: 'syz.0.1174': attribute type 1 has an invalid length. [ 282.493903][ T8496] netlink: 'syz.0.1174': attribute type 8 has an invalid length. [ 282.571824][ T8496] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1174'. [ 282.776377][ T8500] netlink: 'syz.1.1176': attribute type 29 has an invalid length. [ 282.796816][ T8491] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1173'. [ 282.855687][ T8494] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.1173'. [ 282.866711][ T8500] netlink: 'syz.1.1176': attribute type 29 has an invalid length. [ 283.008402][ T8519] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1180'. [ 283.110979][ T8523] IPv6: NLM_F_CREATE should be specified when creating new route [ 283.127186][ T8523] IPv6: Can't replace route, no match found [ 283.690571][ T8544] device syzkaller0 entered promiscuous mode [ 284.325286][ T8569] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.1193'. [ 284.852743][ T8558] bridge0: port 4(netdevsim0) entered blocking state [ 284.867952][ T8558] bridge0: port 4(netdevsim0) entered disabled state [ 284.879625][ T8558] device netdevsim0 entered promiscuous mode [ 287.038040][ T8557] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1193'. [ 287.470815][ T8598] syz.3.1206[8598] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 287.471445][ T8598] syz.3.1206[8598] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 287.938643][ T8616] validate_nla: 7 callbacks suppressed [ 287.938660][ T8616] netlink: 'syz.1.1211': attribute type 29 has an invalid length. [ 287.998763][ T8616] netlink: 'syz.1.1211': attribute type 29 has an invalid length. [ 288.019259][ T8618] netlink: 'syz.2.1212': attribute type 21 has an invalid length. [ 288.054063][ T8619] netlink: 'syz.1.1211': attribute type 29 has an invalid length. [ 288.084194][ T8616] netlink: 'syz.1.1211': attribute type 29 has an invalid length. [ 288.112947][ T8625] netlink: 'syz.1.1211': attribute type 29 has an invalid length. [ 288.138435][ T8619] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1211'. [ 288.166260][ T8628] sctp: [Deprecated]: syz.4.1214 (pid 8628) Use of int in max_burst socket option deprecated. [ 288.166260][ T8628] Use struct sctp_assoc_value instead [ 288.183719][ T8619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1211'. [ 288.213587][ T8624] netlink: 'syz.2.1212': attribute type 17 has an invalid length. [ 288.246469][ T8624] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1212'. [ 288.266426][ T8624] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 288.346652][ T8630] netlink: 'syz.0.1207': attribute type 21 has an invalid length. [ 288.367574][ T8630] netlink: 'syz.0.1207': attribute type 1 has an invalid length. [ 288.766859][ T8649] netlink: 'syz.3.1222': attribute type 46 has an invalid length. [ 289.633421][ T8674] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.1228'. [ 289.781485][ T8677] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1230'. [ 289.825440][ T8677] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 290.340499][ T8699] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1237'. [ 290.386034][ T8699] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1237'. [ 290.801883][ T8710] device pim6reg1 entered promiscuous mode [ 294.121538][ T8742] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1250'. [ 294.152260][ T8745] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1250'. [ 294.336596][ T8756] validate_nla: 8 callbacks suppressed [ 294.336611][ T8756] netlink: 'syz.1.1252': attribute type 21 has an invalid length. [ 294.442975][ T8756] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1252'. [ 294.494172][ T8755] netlink: 'syz.1.1252': attribute type 21 has an invalid length. [ 294.544668][ T8755] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1252'. [ 294.565125][ T8759] netlink: 'syz.2.1254': attribute type 39 has an invalid length. [ 294.753665][ T8768] netlink: 'syz.2.1254': attribute type 21 has an invalid length. [ 294.761258][ T8755] delete_channel: no stack [ 294.773756][ T8768] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1254'. [ 294.793496][ T8768] netlink: 'syz.2.1254': attribute type 4 has an invalid length. [ 294.811845][ T8768] netlink: 'syz.2.1254': attribute type 3 has an invalid length. [ 294.848084][ T8768] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1254'. [ 295.139471][ T8780] device syzkaller0 entered promiscuous mode [ 296.853763][ T8827] netlink: 'syz.4.1273': attribute type 2 has an invalid length. [ 297.983953][ T8795] device syzkaller0 entered promiscuous mode [ 298.225853][ T8847] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.1280'. [ 298.281700][ T8848] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1280'. [ 298.298042][ T8848] openvswitch: netlink: Flow key attr not present in new flow. [ 299.605144][ T8827] device 0 entered promiscuous mode [ 299.610742][ T8839] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1277'. [ 299.622258][ T8847] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 299.645694][ T8847] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 299.655306][ T8847] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 300.121699][ T8851] netlink: 'syz.4.1281': attribute type 10 has an invalid length. [ 303.895611][ T8882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1292'. [ 303.916257][ T8886] netlink: 'syz.3.1292': attribute type 10 has an invalid length. [ 304.098144][ T8886] team0 (unregistering): Port device team_slave_0 removed [ 304.140175][ T8886] team0 (unregistering): Port device team_slave_1 removed [ 304.179521][ T8886] team0 (unregistering): Port device bridge0 removed [ 304.234428][ T8916] netlink: 'syz.4.1302': attribute type 16 has an invalid length. [ 304.259569][ T8916] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1302'. [ 304.639478][ T8935] device pim6reg1 entered promiscuous mode [ 305.526217][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1318'. [ 305.546111][ T8969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1318'. [ 305.577989][ T8969] netlink: 33 bytes leftover after parsing attributes in process `syz.3.1318'. [ 305.619722][ T8969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1318'. [ 305.639416][ T8969] netlink: 33 bytes leftover after parsing attributes in process `syz.3.1318'. [ 305.662624][ T8969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1318'. [ 305.676147][ T8969] netlink: 33 bytes leftover after parsing attributes in process `syz.3.1318'. [ 305.691540][ T8975] netlink: 'syz.0.1319': attribute type 6 has an invalid length. [ 306.668601][ T8969] device syzkaller0 entered promiscuous mode [ 308.731937][ T9009] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 308.738410][ T9009] syzkaller1: linktype set to 823 [ 308.774021][ T9025] netlink: 'syz.1.1332': attribute type 10 has an invalid length. [ 309.598424][ T9055] netlink: 'syz.2.1339': attribute type 3 has an invalid length. [ 309.659822][ T9055] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1339'. [ 309.755583][ T9054] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.1341'. [ 310.624609][ T9071] netlink: 'syz.1.1343': attribute type 10 has an invalid length. [ 313.975070][ T9117] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.1353'. [ 314.415519][ T9130] netlink: 'syz.2.1357': attribute type 10 has an invalid length. [ 314.484357][ T9130] bridge0: port 3(hsr0) entered disabled state [ 314.491602][ T9130] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.504242][ T9130] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.629162][ T9130] bridge0: port 3(hsr0) entered blocking state [ 314.636097][ T9130] bridge0: port 3(hsr0) entered forwarding state [ 314.646429][ T9130] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.654315][ T9130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.662726][ T9130] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.671000][ T9130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.774813][ T9130] team0: Port device bridge0 added [ 314.932732][ T9128] netlink: 'syz.3.1356': attribute type 5 has an invalid length. [ 314.965627][ T9128] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1356'. [ 315.207888][ T9154] netlink: 'syz.2.1363': attribute type 10 has an invalid length. [ 315.236942][ T9154] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1363'. [ 315.254745][ T9154] device dummy0 entered promiscuous mode [ 315.283337][ T9154] bridge0: port 4(dummy0) entered blocking state [ 315.365262][ T9154] bridge0: port 4(dummy0) entered disabled state [ 315.398913][ T9154] bridge0: port 4(dummy0) entered blocking state [ 315.405476][ T9154] bridge0: port 4(dummy0) entered forwarding state [ 316.222970][ T9198] netlink: 'syz.3.1374': attribute type 10 has an invalid length. [ 316.420423][ T9214] netlink: 'syz.2.1377': attribute type 29 has an invalid length. [ 316.429294][ T9214] netlink: 'syz.2.1377': attribute type 29 has an invalid length. [ 316.449356][ T9208] netlink: 'syz.2.1377': attribute type 29 has an invalid length. [ 316.468296][ T9214] netlink: 'syz.2.1377': attribute type 29 has an invalid length. [ 316.784401][ T4285] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 316.819293][ T9219] netlink: 'syz.2.1380': attribute type 3 has an invalid length. [ 316.876418][ T9219] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1380'. [ 316.994014][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.000625][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.694482][ T9259] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1391'. [ 318.679211][ T9299] netlink: 'syz.1.1403': attribute type 1 has an invalid length. [ 318.703212][ T9301] netlink: 125520 bytes leftover after parsing attributes in process `syz.3.1404'. [ 318.724830][ T9299] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1403'. [ 319.172788][ T9309] device syzkaller0 entered promiscuous mode [ 319.196712][ T9319] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1410'. [ 319.776190][ T9326] ÿÿÿÿÿÿ: renamed from vlan1 [ 321.996075][ T9376] netlink: 'syz.2.1423': attribute type 10 has an invalid length. [ 322.134828][ T9376] team0: Device wg1 is of different type [ 322.937263][ T9395] netlink: 'syz.0.1428': attribute type 3 has an invalid length. [ 323.010844][ T9386] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1427'. [ 323.030357][ T9395] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1428'. [ 323.069480][ T9397] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1428'. [ 324.167746][ T9415] delete_channel: no stack [ 324.311977][ T9432] device syzkaller0 entered promiscuous mode [ 329.337007][ T9465] device syzkaller0 entered promiscuous mode [ 329.469974][ T9480] netlink: 'syz.1.1447': attribute type 1 has an invalid length. [ 329.510142][ T9480] netlink: 'syz.1.1447': attribute type 3 has an invalid length. [ 329.555312][ T9480] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1447'. [ 331.055487][ T9485] netlink: 'syz.2.1450': attribute type 5 has an invalid length. [ 331.064181][ T9488] netlink: 'syz.2.1450': attribute type 11 has an invalid length. [ 331.072380][ T9488] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1450'. [ 331.087504][ T9491] netlink: 'syz.2.1450': attribute type 11 has an invalid length. [ 331.095499][ T9491] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1450'. [ 331.119547][ T9494] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 331.136362][ T9494] syzkaller1: linktype set to 823 [ 331.364412][ T9508] netlink: 'syz.4.1454': attribute type 21 has an invalid length. [ 331.383107][ T9503] netlink: 'syz.0.1453': attribute type 3 has an invalid length. [ 331.405616][ T9508] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1454'. [ 331.415019][ T9503] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1453'. [ 331.526916][ T9512] netlink: 111 bytes leftover after parsing attributes in process `syz.1.1455'. [ 331.541810][ T9512] netlink: 'syz.1.1455': attribute type 11 has an invalid length. [ 331.551469][ T9512] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1455'. [ 331.644476][ T9512] netlink: 'syz.1.1455': attribute type 10 has an invalid length. [ 331.699659][ T9511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.924014][ T9518] device syzkaller0 entered promiscuous mode [ 333.933423][ T9561] netlink: 'syz.2.1468': attribute type 8 has an invalid length. [ 333.942196][ T9561] netlink: 'syz.2.1468': attribute type 1 has an invalid length. [ 333.950927][ T9561] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.1468'. [ 335.098510][ T9557] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1467'. [ 335.107854][ T9558] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1467'. [ 335.301946][ T9567] netlink: 'syz.3.1470': attribute type 9 has an invalid length. [ 335.321029][ T9569] netlink: 111 bytes leftover after parsing attributes in process `syz.2.1471'. [ 335.330483][ T9567] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1470'. [ 335.346330][ T9569] netlink: 'syz.2.1471': attribute type 11 has an invalid length. [ 335.358739][ T9567] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1470'. [ 335.369368][ T9569] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1471'. [ 335.379679][ T9567] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1470'. [ 335.400676][ T9567] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1470'. [ 335.472072][ T9569] netlink: 'syz.2.1471': attribute type 10 has an invalid length. [ 335.508769][ T9569] bond0: (slave wlan1): Opening slave failed [ 335.530708][ T9568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.492328][ T9597] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1482'. [ 336.656844][ T9594] device syzkaller0 entered promiscuous mode [ 337.269293][ T9615] netlink: 'syz.0.1486': attribute type 11 has an invalid length. [ 337.291088][ T9615] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1486'. [ 338.013433][ T9607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.060426][ T9615] netlink: 'syz.0.1486': attribute type 10 has an invalid length. [ 339.092255][ T9615] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 339.426039][ T9641] device syzkaller0 entered promiscuous mode [ 341.478699][ T9676] netlink: 'syz.4.1502': attribute type 4 has an invalid length. [ 341.697020][ T9681] netlink: 'syz.3.1504': attribute type 21 has an invalid length. [ 343.997568][ T4285] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 344.968467][ T4285] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 345.171995][ T9725] __nla_validate_parse: 1 callbacks suppressed [ 345.172011][ T9725] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.1516'. [ 345.539412][ T9728] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1517'. [ 346.657549][ T9759] sctp: [Deprecated]: syz.0.1526 (pid 9759) Use of int in max_burst socket option deprecated. [ 346.657549][ T9759] Use struct sctp_assoc_value instead [ 347.124066][ T9768] netlink: 65027 bytes leftover after parsing attributes in process `syz.0.1529'. [ 347.152590][ T9770] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1530'. [ 347.164133][ T9772] netlink: 'syz.3.1531': attribute type 10 has an invalid length. [ 347.311266][ T9782] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1532'. [ 347.393468][ T9786] netlink: 'syz.2.1534': attribute type 2 has an invalid length. [ 347.479809][ T9786] device 0 entered promiscuous mode [ 347.713630][ T9802] netlink: 'syz.2.1538': attribute type 49 has an invalid length. [ 347.969490][ T9813] netlink: 'syz.2.1540': attribute type 9 has an invalid length. [ 347.993779][ T9813] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.1540'. [ 348.211419][ T9817] netlink: 'syz.1.1542': attribute type 3 has an invalid length. [ 348.287919][ T9817] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1542'. [ 348.559946][ T9825] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1545'. [ 348.986559][ T9838] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1550'. [ 349.026027][ T9838] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.1550'. [ 349.272641][ T9849] device sit0 left promiscuous mode [ 349.458173][ T9855] device sit0 entered promiscuous mode [ 349.481983][ T9865] netlink: 'syz.4.1556': attribute type 3 has an invalid length. [ 349.890145][ T9882] netlink: 'syz.4.1562': attribute type 22 has an invalid length. [ 350.336882][ T9899] __nla_validate_parse: 3 callbacks suppressed [ 350.336908][ T9899] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1570'. [ 351.849295][ T9918] netlink: 'syz.4.1572': attribute type 3 has an invalid length. [ 351.885890][ T9918] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1572'. [ 351.985325][ T9925] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1575'. [ 352.064330][ T9930] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1576'. [ 353.562618][ T9983] netlink: 'syz.0.1591': attribute type 10 has an invalid length. [ 353.573836][ T9976] netlink: 'syz.2.1588': attribute type 3 has an invalid length. [ 353.615830][ T9976] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1588'. [ 353.922178][ T9999] netlink: 'syz.0.1598': attribute type 27 has an invalid length. [ 353.953271][ T9999] netlink: 'syz.0.1598': attribute type 25 has an invalid length. [ 353.986066][ T9998] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1596'. [ 354.883110][T10016] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1601'. [ 355.280030][T10031] netlink: 'syz.1.1606': attribute type 3 has an invalid length. [ 355.319683][T10031] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1606'. [ 356.603076][T10053] netlink: 'syz.2.1613': attribute type 29 has an invalid length. [ 356.780516][T10053] netlink: 'syz.2.1613': attribute type 29 has an invalid length. [ 356.881787][T10056] netlink: 'syz.3.1612': attribute type 10 has an invalid length. [ 356.901587][T10056] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.909158][T10056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.917211][T10056] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.924558][T10056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.153996][T10056] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 357.249822][T10060] netlink: 36827 bytes leftover after parsing attributes in process `syz.4.1614'. [ 358.361691][T10089] netlink: 'syz.3.1619': attribute type 3 has an invalid length. [ 358.407019][T10089] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1619'. [ 358.809724][T10096] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1622'. [ 359.765085][T10106] device syzkaller0 entered promiscuous mode [ 359.800897][T10115] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1626'. [ 360.351666][T10127] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1629'. [ 364.256217][T10127] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1629'. [ 364.352236][T10154] netlink: 'syz.1.1635': attribute type 3 has an invalid length. [ 364.360336][T10154] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1635'. [ 364.374893][T10130] device syzkaller0 entered promiscuous mode [ 364.398276][T10151] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.1634'. [ 366.004533][T10172] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.1637'. [ 366.299053][T10186] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 366.305395][T10186] syzkaller1: linktype set to 786 [ 366.633838][T10193] netlink: 'syz.4.1646': attribute type 7 has an invalid length. [ 366.661253][T10193] netlink: 208404 bytes leftover after parsing attributes in process `syz.4.1646'. [ 366.970854][T10195] device syzkaller0 entered promiscuous mode [ 367.304023][T10202] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1649'. [ 367.578436][T10218] netlink: 'syz.3.1653': attribute type 3 has an invalid length. [ 367.607514][T10218] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1653'. [ 368.974695][T10220] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.1654'. [ 368.984313][T10225] netlink: 'syz.4.1654': attribute type 10 has an invalid length. [ 369.036917][T10225] team0: Port device geneve1 added [ 369.192457][T10236] netlink: 'syz.1.1657': attribute type 3 has an invalid length. [ 369.219600][T10236] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1657'. [ 369.359403][T10244] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1659'. [ 369.474484][T10244] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1659'. [ 369.507093][ T4285] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15 [ 370.264352][T10268] netlink: 'syz.1.1666': attribute type 3 has an invalid length. [ 370.327278][T10268] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1666'. [ 371.215024][T10275] device syzkaller0 entered promiscuous mode [ 373.952528][T10303] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 373.958698][T10303] syzkaller1: linktype set to 786 [ 374.207158][T10331] netlink: 'syz.2.1681': attribute type 3 has an invalid length. [ 374.265751][T10331] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1681'. [ 374.530084][T10342] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.1687'. [ 376.448721][T10357] device syzkaller0 entered promiscuous mode [ 376.594416][T10372] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 376.613590][T10372] syzkaller1: linktype set to 786 [ 377.104816][T10388] netlink: 'syz.2.1700': attribute type 3 has an invalid length. [ 377.116345][T10388] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1700'. [ 378.439271][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.445771][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.591055][T10377] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1698'. [ 379.080032][T10401] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1703'. [ 380.635607][T10431] device syzkaller0 entered promiscuous mode [ 387.894058][T10486] netlink: 192432 bytes leftover after parsing attributes in process `syz.0.1728'. [ 387.905182][T10486] netlink: get zone limit has 4 unknown bytes [ 388.756906][T10499] device syzkaller0 entered promiscuous mode [ 389.018287][T10505] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1734'. [ 389.122827][T10513] netlink: 'syz.0.1736': attribute type 1 has an invalid length. [ 389.131404][T10513] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.1736'. [ 389.992575][T10542] netlink: 15007 bytes leftover after parsing attributes in process `syz.3.1743'. [ 391.101481][T10524] device syzkaller0 entered promiscuous mode [ 391.120902][T10542] netlink: 'syz.3.1743': attribute type 10 has an invalid length. [ 391.244290][T10550] netlink: 'syz.0.1744': attribute type 3 has an invalid length. [ 391.267224][T10550] netlink: 'syz.0.1744': attribute type 1 has an invalid length. [ 391.354362][T10554] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.1747'. [ 391.569928][T10557] netlink: 'syz.3.1748': attribute type 3 has an invalid length. [ 391.578856][T10557] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1748'. [ 393.536063][T10564] netlink: 'syz.0.1750': attribute type 10 has an invalid length. [ 393.692263][T10564] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 393.944929][T10579] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1752'. [ 394.338250][T10590] netlink: 15007 bytes leftover after parsing attributes in process `syz.1.1758'. [ 394.588425][T10579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.727847][T10579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.754420][T10601] netlink: 'syz.3.1761': attribute type 3 has an invalid length. [ 394.763415][T10601] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1761'. [ 394.819958][T10579] bond0 (unregistering): Released all slaves [ 394.856443][T10594] netlink: 'syz.1.1758': attribute type 10 has an invalid length. [ 394.902055][T10595] device bond_slave_1 entered promiscuous mode [ 395.413297][T10609] device syzkaller0 entered promiscuous mode [ 395.431855][T10615] device syzkaller0 entered promiscuous mode [ 395.447065][T10612] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1766'. [ 395.598407][T10623] netlink: 'syz.0.1767': attribute type 1 has an invalid length. [ 395.613465][T10623] netlink: 'syz.0.1767': attribute type 1 has an invalid length. [ 395.634228][T10623] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.1767'. [ 395.657422][T10626] netlink: 'syz.4.1769': attribute type 3 has an invalid length. [ 395.687379][T10626] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1769'. [ 395.798289][T10620] netlink: 'syz.0.1767': attribute type 10 has an invalid length. [ 396.297523][T10647] netlink: 'syz.0.1776': attribute type 3 has an invalid length. [ 396.306374][T10647] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1776'. [ 397.647853][T10634] netlink: 'syz.4.1771': attribute type 10 has an invalid length. [ 397.707332][T10645] IPv6: Can't replace route, no match found [ 397.872249][T10654] netlink: 'syz.4.1777': attribute type 10 has an invalid length. [ 397.937337][T10654] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.976241][T10654] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.001732][T10654] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.024522][T10658] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1779'. [ 398.034207][T10654] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.093325][T10654] device geneve0 entered promiscuous mode [ 398.225164][T10667] netlink: 'syz.2.1779': attribute type 21 has an invalid length. [ 398.258816][T10667] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1779'. [ 398.321464][T10667] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1779'. [ 399.114541][T10698] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1790'. [ 399.166781][T10696] device syzkaller0 entered promiscuous mode [ 399.353389][T10703] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.1791'. [ 399.368116][T10704] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.1792'. [ 401.109349][T10712] validate_nla: 3 callbacks suppressed [ 401.109365][T10712] netlink: 'syz.0.1794': attribute type 5 has an invalid length. [ 401.124013][T10731] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1798'. [ 401.389679][T10748] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1803'. [ 401.553172][T10761] netlink: 'syz.2.1807': attribute type 10 has an invalid length. [ 401.590593][T10765] netlink: 192432 bytes leftover after parsing attributes in process `syz.1.1808'. [ 401.610451][T10765] netlink: get zone limit has 4 unknown bytes [ 401.623680][T10761] team0: Device wg1 is of different type [ 402.120821][T10784] bridge0: port 4(dummy0) entered disabled state [ 402.127537][T10784] bridge0: port 3(hsr0) entered disabled state [ 402.133919][T10784] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.141305][T10784] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.191297][T10784] bridge0: port 4(dummy0) entered disabled state [ 402.243321][T10784] bridge0: port 3(hsr0) entered disabled state [ 402.251874][T10784] device bridge_slave_1 left promiscuous mode [ 402.259841][T10784] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.270868][T10784] device bridge_slave_0 left promiscuous mode [ 402.279191][T10784] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.358562][T10784] team0: Port device bridge0 removed [ 402.421307][T10786] netlink: 'syz.4.1813': attribute type 5 has an invalid length. [ 402.518040][T10798] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.1816'. [ 403.288250][ T4285] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 403.293618][T10844] netlink: 'syz.3.1829': attribute type 5 has an invalid length. [ 404.283539][T10872] netlink: 'syz.4.1839': attribute type 1 has an invalid length. [ 404.295163][T10872] netlink: 131740 bytes leftover after parsing attributes in process `syz.4.1839'. [ 404.600867][T10884] netlink: 'syz.1.1842': attribute type 28 has an invalid length. [ 404.734119][T10896] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.1844'. [ 404.838047][T10896] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 404.964359][T10874] device syzkaller0 entered promiscuous mode [ 404.984263][T10891] netlink: 'syz.4.1843': attribute type 21 has an invalid length. [ 404.998356][T10898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1845'. [ 409.009805][T10931] IPv6: NLM_F_CREATE should be specified when creating new route [ 409.017687][T10931] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1854'. [ 409.041229][T10941] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.1857'. [ 409.223730][T10945] netlink: 'syz.2.1861': attribute type 3 has an invalid length. [ 409.275837][T10945] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1861'. [ 409.301088][T10946] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.1858'. [ 409.331789][T10952] netlink: 'syz.4.1862': attribute type 29 has an invalid length. [ 409.355891][T10952] netlink: 'syz.4.1862': attribute type 3 has an invalid length. [ 409.374177][T10952] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1862'. [ 409.647846][T10958] netlink: 'syz.2.1875': attribute type 3 has an invalid length. [ 409.668583][T10960] bridge0: port 3(hsr0) entered disabled state [ 409.675049][T10960] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.682638][T10960] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.695021][T10958] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1875'. [ 409.794633][T10960] bridge0: port 3(hsr0) entered disabled state [ 409.826291][T10960] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.836234][T10960] device bridge_slave_0 left promiscuous mode [ 409.842540][T10960] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.352948][T10980] netlink: 'syz.3.1871': attribute type 19 has an invalid length. [ 410.362383][T10980] netlink: 14552 bytes leftover after parsing attributes in process `syz.3.1871'. [ 410.780802][T11008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.928232][T11019] netlink: 'syz.4.1881': attribute type 3 has an invalid length. [ 410.936417][T11019] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1881'. [ 411.185121][T11032] bridge0: port 3(dummy0) entered disabled state [ 411.191775][T11032] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.199134][T11032] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.348079][T11032] bridge0: port 3(dummy0) entered disabled state [ 411.378719][T11032] device bridge_slave_1 left promiscuous mode [ 411.398573][T11032] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.426537][T11032] device bridge_slave_0 left promiscuous mode [ 411.440682][T11032] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.379661][T11046] netlink: 'syz.3.1891': attribute type 21 has an invalid length. [ 412.393049][T11046] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1891'. [ 412.407120][T11046] netlink: 'syz.3.1891': attribute type 5 has an invalid length. [ 412.414967][T11046] netlink: 'syz.3.1891': attribute type 6 has an invalid length. [ 412.438304][T11046] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1891'. [ 412.502740][T11045] netlink: 'syz.0.1889': attribute type 10 has an invalid length. [ 413.005994][T11056] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1894'. [ 413.453380][T11060] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1896'. [ 416.050578][T11075] validate_nla: 4 callbacks suppressed [ 416.050597][T11075] netlink: 'syz.1.1901': attribute type 1 has an invalid length. [ 416.875860][T11079] netlink: 'syz.2.1902': attribute type 12 has an invalid length. [ 416.894570][T11079] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1902'. [ 416.963342][T11080] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 416.992892][T11080] dvmrp1: ignored: set checksum disabled [ 417.662846][T11091] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1907'. [ 418.889379][T11109] netlink: 'syz.0.1910': attribute type 5 has an invalid length. [ 418.899527][T11112] netlink: 'syz.3.1912': attribute type 3 has an invalid length. [ 418.935792][T11112] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1912'. [ 420.243134][T11120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1915'. [ 420.308769][T11124] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.1916'. [ 421.089485][T11140] netlink: 'syz.0.1920': attribute type 46 has an invalid length. [ 421.164426][T11143] netlink: 'syz.0.1920': attribute type 21 has an invalid length. [ 421.195744][T11143] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1920'. [ 421.270599][T11143] netlink: 'syz.0.1920': attribute type 5 has an invalid length. [ 421.306213][T11143] netlink: 'syz.0.1920': attribute type 6 has an invalid length. [ 421.321854][T11143] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1920'. [ 421.360176][T11142] netlink: 'syz.2.1919': attribute type 5 has an invalid length. [ 421.386068][T11147] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1921'. [ 421.748111][ T4285] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 421.757874][T11160] netlink: 'syz.1.1925': attribute type 5 has an invalid length. [ 421.820080][T11161] netlink: 'syz.2.1924': attribute type 3 has an invalid length. [ 421.875713][T11161] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1924'. [ 422.061516][T11174] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 422.068527][T11174] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 422.366074][ T4285] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 422.371763][T11191] netlink: 'syz.1.1935': attribute type 5 has an invalid length. [ 422.476899][T11189] netlink: 'syz.4.1933': attribute type 12 has an invalid length. [ 422.525791][T11189] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1933'. [ 422.618731][T11189] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 422.655731][T11189] dvmrp1: ignored: set checksum disabled [ 422.669977][ T4285] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 422.839598][T11203] netlink: 'syz.1.1938': attribute type 5 has an invalid length. [ 422.856296][T11192] cgroup: fork rejected by pids controller in /syz3 [ 424.770736][T11319] pimreg: tun_chr_ioctl cmd 2147767511 [ 425.880092][T11333] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1943'. [ 426.334902][ T6399] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.436707][ T6399] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.513185][ T6399] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.592922][ T6399] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.679391][T11355] netlink: 74908 bytes leftover after parsing attributes in process `syz.1.1951'. [ 426.834824][ T6399] device 0 left promiscuous mode [ 427.027644][ T6399] tipc: Left network mode [ 427.338658][ T4292] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 427.348865][ T4292] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 427.360081][ T4292] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 427.377557][ T4292] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 427.385914][ T4292] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 427.393399][ T4292] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 427.793509][T11383] validate_nla: 1 callbacks suppressed [ 427.793525][T11383] netlink: 'syz.2.1958': attribute type 3 has an invalid length. [ 427.868077][T11383] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1958'. [ 428.049611][T11389] device syzkaller0 entered promiscuous mode [ 428.276580][T11410] netlink: 'syz.4.1964': attribute type 29 has an invalid length. [ 429.477818][ T4292] Bluetooth: hci3: command 0x0409 tx timeout [ 429.808538][T11410] netlink: 'syz.4.1964': attribute type 29 has an invalid length. [ 430.069317][T11367] chnl_net:caif_netlink_parms(): no params data found [ 430.180315][T11435] netlink: 74908 bytes leftover after parsing attributes in process `syz.0.1967'. [ 430.683249][T11367] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.783274][T11367] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.895943][T11367] device bridge_slave_0 entered promiscuous mode [ 430.982095][T11458] netlink: 'syz.1.1972': attribute type 3 has an invalid length. [ 431.045792][T11458] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1972'. [ 431.142606][T11367] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.154846][T11367] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.193375][T11367] device bridge_slave_1 entered promiscuous mode [ 431.550052][ T4292] Bluetooth: hci3: command 0x041b tx timeout [ 431.571036][T11367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.583366][T11367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.696680][ T6399] device hsr_slave_0 left promiscuous mode [ 431.709389][ T6399] device hsr_slave_1 left promiscuous mode [ 431.749680][ T6399] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.802504][ T6399] device bridge_slave_0 left promiscuous mode [ 431.811886][ T6399] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.883199][ T6399] device veth1_vlan left promiscuous mode [ 431.902928][ T6399] device veth0_vlan left promiscuous mode [ 432.183870][T11501] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 432.767342][ T6399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.994193][ T6399] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 433.003517][ T6399] bond0 (unregistering): Released all slaves [ 433.098711][T11367] team0: Port device team_slave_0 added [ 433.124471][T11505] netlink: 1042 bytes leftover after parsing attributes in process `syz.0.1980'. [ 433.250559][T11515] device syzkaller0 entered promiscuous mode [ 433.288546][T11367] team0: Port device team_slave_1 added [ 433.418057][T11531] netlink: 74908 bytes leftover after parsing attributes in process `syz.4.1983'. [ 433.628728][ T4292] Bluetooth: hci3: command 0x040f tx timeout [ 435.705620][ T4292] Bluetooth: hci3: command 0x0419 tx timeout [ 437.866777][T11367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.873807][T11367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.981075][T11367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.036137][T11367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.050411][T11367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.109334][T11549] netlink: 'syz.2.1987': attribute type 3 has an invalid length. [ 438.141939][T11367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.148040][T11549] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1987'. [ 438.158552][T11555] netlink: 'syz.1.1989': attribute type 6 has an invalid length. [ 438.197131][T11555] netlink: 1034 bytes leftover after parsing attributes in process `syz.1.1989'. [ 438.292336][T11367] device hsr_slave_0 entered promiscuous mode [ 438.315229][T11367] device hsr_slave_1 entered promiscuous mode [ 438.331547][T11367] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 438.351929][T11367] Cannot create hsr debugfs directory [ 438.472330][T11565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1991'. [ 438.899113][T11592] netlink: 'syz.0.1996': attribute type 15 has an invalid length. [ 439.268291][T11603] netlink: 'syz.0.1999': attribute type 10 has an invalid length. [ 439.302217][T11603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1999'. [ 439.552358][T11612] netlink: 63219 bytes leftover after parsing attributes in process `syz.4.2001'. [ 439.598668][T11612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2001'. [ 439.868240][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.874642][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.059436][T11621] netlink: 'syz.2.2003': attribute type 3 has an invalid length. [ 440.104772][T11621] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2003'. [ 440.217921][T11367] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 440.234739][T11367] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 440.381215][T11617] device syzkaller0 entered promiscuous mode [ 440.397886][T11367] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 440.417787][T11367] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 440.707608][T11643] netlink: 'syz.2.2008': attribute type 1 has an invalid length. [ 440.755841][T11643] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.2008'. [ 443.193535][T11367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.244463][T11674] netlink: 63219 bytes leftover after parsing attributes in process `syz.2.2015'. [ 443.265416][T11674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2015'. [ 443.278861][T11678] netlink: 'syz.4.2016': attribute type 3 has an invalid length. [ 443.302434][T11367] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.304009][T11678] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2016'. [ 443.343134][ T6391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 443.366822][ T6391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 443.384165][T11680] netlink: 'syz.1.2017': attribute type 10 has an invalid length. [ 443.405599][T11680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2017'. [ 443.436684][ T6391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 443.450117][ T6391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 443.496213][ T6391] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.503466][ T6391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.532914][ T6391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 443.586464][ T6391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 443.595122][ T6391] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.602325][ T6391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.676830][T11689] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.2019'. [ 443.687216][ T6391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 443.721607][ T6391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 443.767207][ T6391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 443.786536][T11689] netlink: 6955 bytes leftover after parsing attributes in process `syz.0.2019'. [ 443.802459][ T6391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 443.828689][ T6391] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 443.856150][T11692] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2019'. [ 444.180151][ T6391] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 444.199232][ T6391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 444.237531][ T6391] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 444.280318][ T6391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 444.336436][ T6391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 444.410431][T11694] netlink: 'syz.0.2019': attribute type 21 has an invalid length. [ 444.436087][T11694] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2019'. [ 444.491583][T11367] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 444.547807][T11367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 444.591706][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 444.607231][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 444.637142][T11717] netlink: 'syz.2.2025': attribute type 1 has an invalid length. [ 446.141866][T11796] device syzkaller0 entered promiscuous mode [ 446.157439][T11794] netlink: 'syz.2.2027': attribute type 10 has an invalid length. [ 446.427724][T11794] team0: Device veth0_vlan is already a lower device of the team interface [ 446.559305][T11811] netlink: 'syz.4.2031': attribute type 3 has an invalid length. [ 446.575129][T11811] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2031'. [ 448.544749][T11367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.565718][ T6393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 448.573250][ T6393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 448.618896][ T6393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 448.656270][ T6393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 448.729929][ T6393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 448.752908][ T6393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 448.778915][ T6393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 448.789349][T11826] netlink: 'syz.0.2045': attribute type 3 has an invalid length. [ 448.803690][ T6393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 448.815721][T11826] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2045'. [ 448.850370][T11367] device veth0_vlan entered promiscuous mode [ 448.875770][T11824] netlink: 'syz.2.2035': attribute type 10 has an invalid length. [ 448.907590][T11824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2035'. [ 449.053915][T11367] device veth1_vlan entered promiscuous mode [ 449.191172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 449.214220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 449.252998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 449.310212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 449.370382][T11367] device veth0_macvtap entered promiscuous mode [ 449.434721][T11367] device veth1_macvtap entered promiscuous mode [ 449.549118][T11367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.613969][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 449.632668][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 449.686538][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 449.737067][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 449.790624][T11367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.835854][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 449.855180][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 449.926980][T11367] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.984258][T11367] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.993208][T11367] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.005073][T11367] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.496761][T11873] device veth1_macvtap left promiscuous mode [ 450.546227][T11873] device macsec0 left promiscuous mode [ 452.212846][T11922] netlink: 'syz.1.2052': attribute type 3 has an invalid length. [ 452.225165][T11922] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2052'. [ 453.477445][T11775] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.485382][T11775] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.515916][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 453.570195][ T6397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.597510][ T6397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.627917][ T6393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 453.894892][ T4285] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 453.918289][T11934] netlink: 'syz.3.1950': attribute type 5 has an invalid length. [ 454.179030][T11943] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2059'. [ 454.658272][T11943] netlink: 'syz.3.2059': attribute type 25 has an invalid length. [ 454.686170][T11943] netlink: 'syz.3.2059': attribute type 6 has an invalid length. [ 454.918038][T11955] netlink: 'syz.0.2063': attribute type 10 has an invalid length. [ 455.195312][T11960] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 455.368812][T11955] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 455.462659][T11958] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2063'. [ 456.025350][T11973] device syzkaller0 entered promiscuous mode [ 456.302182][ T4285] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 458.138008][T11985] netlink: 'syz.1.2069': attribute type 5 has an invalid length. [ 458.165632][T11983] netlink: 'syz.0.2070': attribute type 19 has an invalid length. [ 458.182412][T11983] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2070'. [ 458.199192][T11990] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2071'. [ 458.575301][T12005] netlink: 'syz.0.2075': attribute type 33 has an invalid length. [ 458.606077][T12005] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2075'. [ 458.794163][T12013] netlink: 'syz.2.2078': attribute type 10 has an invalid length. [ 458.937511][T12015] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2078'. [ 458.947186][ T4285] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3 [ 458.959268][T12019] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2080'. [ 459.000691][T12013] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 459.137523][T12019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.160068][T12019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.197744][T12019] bond0 (unregistering): Released all slaves [ 459.218420][T12023] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2081'. [ 459.239564][T12026] netlink: 'syz.4.2082': attribute type 5 has an invalid length. [ 459.530981][T12029] device syzkaller0 entered promiscuous mode [ 461.159802][T12072] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 462.238563][T12046] netlink: 'syz.3.2089': attribute type 21 has an invalid length. [ 462.247790][T12046] IPv6: NLM_F_CREATE should be specified when creating new route [ 462.256681][T12046] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 462.263975][T12046] IPv6: NLM_F_CREATE should be set when creating new route [ 462.271410][T12046] IPv6: NLM_F_CREATE should be set when creating new route [ 462.278719][T12046] IPv6: NLM_F_CREATE should be set when creating new route [ 462.287815][T12062] netlink: 'syz.1.2093': attribute type 10 has an invalid length. [ 462.366334][T12070] netlink: 'syz.4.2095': attribute type 10 has an invalid length. [ 462.404712][T12071] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2095'. [ 462.495664][T12076] netlink: 'syz.2.2097': attribute type 2 has an invalid length. [ 462.518069][T12076] netlink: 'syz.2.2097': attribute type 8 has an invalid length. [ 462.530052][T12076] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2097'. [ 462.596344][T12075] delete_channel: no stack [ 462.614365][T12082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2096'. [ 463.024661][T12095] netlink: 'syz.2.2103': attribute type 2 has an invalid length. [ 463.045194][T12095] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2103'. [ 463.608040][T12112] device syzkaller0 entered promiscuous mode [ 463.695567][T12111] C: renamed from team_slave_0 [ 463.884287][T12111] netlink: 'syz.2.2106': attribute type 2 has an invalid length. [ 463.894298][T12111] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2106'. [ 463.908171][T12111] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 464.442899][T12132] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2114'. [ 465.665969][T12132] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2114'. [ 465.882141][ T4285] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 466.082444][T12156] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 466.716975][T12178] device syzkaller0 entered promiscuous mode [ 466.888762][ T4285] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 468.571147][T12200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.538093][T12242] device syzkaller0 entered promiscuous mode [ 469.565317][T12249] netlink: 'syz.2.2149': attribute type 3 has an invalid length. [ 469.589654][T12249] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2149'. [ 469.710258][T12245] netlink: 'syz.1.2151': attribute type 4 has an invalid length. [ 471.643619][T12271] tap0: tun_chr_ioctl cmd 1074025677 [ 471.649318][T12271] tap0: linktype set to 804 [ 471.940008][T12282] netlink: 'syz.3.2158': attribute type 11 has an invalid length. [ 471.960213][T12282] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2158'. [ 472.145421][T12297] netlink: 'syz.4.2162': attribute type 3 has an invalid length. [ 472.177542][T12297] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2162'. [ 472.682989][T12319] netlink: 'syz.2.2166': attribute type 2 has an invalid length. [ 472.724912][T12314] netlink: 'syz.2.2166': attribute type 2 has an invalid length. [ 472.750656][T12319] netlink: 'syz.2.2166': attribute type 8 has an invalid length. [ 472.768386][T12314] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2166'. [ 472.776539][T12319] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2166'. [ 472.891087][T12322] netlink: 'syz.0.2169': attribute type 10 has an invalid length. [ 472.903832][T12322] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2169'. [ 472.928913][T12322] device ipvlan1 entered promiscuous mode [ 473.044845][T12322] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 473.088195][T12332] netlink: 'syz.4.2171': attribute type 21 has an invalid length. [ 473.106724][T12332] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2171'. [ 473.145763][T12332] netlink: 'syz.4.2171': attribute type 4 has an invalid length. [ 473.307920][T12327] device syzkaller0 entered promiscuous mode [ 475.393396][T12368] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 475.413146][T12368] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 475.444542][T12368] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 476.852769][T12405] device syzkaller0 entered promiscuous mode [ 480.119500][T12437] tap0: tun_chr_ioctl cmd 2147767521 [ 480.309374][T12443] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.2200'. [ 480.632210][T12462] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2207'. [ 480.734632][T12467] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2209'. [ 481.546485][T12487] device syzkaller0 entered promiscuous mode [ 484.725606][T12517] netlink: 'syz.4.2225': attribute type 10 has an invalid length. [ 484.866006][T12545] netlink: 'syz.1.2232': attribute type 27 has an invalid length. [ 485.263007][T12568] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2238'. [ 485.278041][T12568] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 485.549929][T12581] netlink: 'syz.1.2244': attribute type 3 has an invalid length. [ 485.656646][T12581] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2244'. [ 485.839317][T12588] device syzkaller0 entered promiscuous mode [ 485.877846][T12594] tipc: Started in network mode [ 485.895266][T12594] tipc: Node identity 9215a268, cluster identity 4711 [ 485.902956][T12594] tipc: Node number set to 2450891368 [ 485.999625][T12594] netlink: 'syz.3.2247': attribute type 2 has an invalid length. [ 486.012206][T12594] netlink: 'syz.3.2247': attribute type 8 has an invalid length. [ 486.039162][T12594] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2247'. [ 486.067808][T12603] netlink: 'syz.1.2248': attribute type 3 has an invalid length. [ 486.114013][T12603] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2248'. [ 486.521678][T12610] netlink: 'syz.3.2250': attribute type 3 has an invalid length. [ 486.601738][T12610] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2250'. [ 488.845294][T12613] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2251'. [ 488.854789][T12613] device bridge_slave_1 entered promiscuous mode [ 488.864075][T12616] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2252'. [ 488.875586][T12616] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 489.022904][T12619] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2254'. [ 489.278747][ T4285] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 489.346962][T12637] device lo entered promiscuous mode [ 489.407872][T12637] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 489.871959][T12656] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2264'. [ 490.031808][T12658] device syzkaller0 entered promiscuous mode [ 490.109680][T12664] netlink: 'syz.0.2267': attribute type 3 has an invalid length. [ 490.143414][T12664] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2267'. [ 490.617370][ T4285] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 492.688768][T12712] netlink: 'syz.4.2279': attribute type 29 has an invalid length. [ 492.714878][T12712] netlink: 'syz.4.2279': attribute type 29 has an invalid length. [ 493.148258][T12731] netlink: 'syz.0.2284': attribute type 10 has an invalid length. [ 493.167869][T12731] device syz_tun entered promiscuous mode [ 493.233133][T12731] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 493.555524][T12740] device syzkaller0 entered promiscuous mode [ 493.888050][T12765] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2295'. [ 493.990304][T12768] netlink: 'syz.4.2296': attribute type 3 has an invalid length. [ 494.037789][T12768] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2296'. [ 496.184497][T12794] netlink: 'syz.0.2304': attribute type 39 has an invalid length. [ 496.446858][T12813] netlink: 'syz.1.2309': attribute type 3 has an invalid length. [ 496.451988][T12810] netlink: 'syz.3.2308': attribute type 1 has an invalid length. [ 496.458057][T12813] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2309'. [ 496.497143][T12810] netlink: 'syz.3.2308': attribute type 4 has an invalid length. [ 496.581366][T12810] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2308'. [ 496.608780][T12818] netlink: 'syz.1.2309': attribute type 22 has an invalid length. [ 496.617510][T12818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2309'. [ 496.902906][T12824] netlink: 'syz.3.2313': attribute type 3 has an invalid length. [ 496.921337][T12824] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2313'. [ 497.286664][T12844] device syzkaller0 entered promiscuous mode [ 498.210214][T12882] netlink: 'syz.0.2328': attribute type 3 has an invalid length. [ 498.218539][T12882] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2328'. [ 499.578012][T12873] netlink: 'syz.4.2325': attribute type 21 has an invalid length. [ 500.133579][T12910] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.2337'. [ 500.456649][T12918] netlink: 'syz.0.2340': attribute type 10 has an invalid length. [ 500.495140][T12921] netlink: 'syz.1.2341': attribute type 3 has an invalid length. [ 500.538021][T12921] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2341'. [ 500.851353][T12932] device syzkaller0 entered promiscuous mode [ 501.009576][T12950] tun0: tun_chr_ioctl cmd 1074025675 [ 501.015036][T12950] tun0: persist enabled [ 501.044649][T12952] tun0: tun_chr_ioctl cmd 1074025675 [ 501.079613][T12952] tun0: persist enabled [ 501.317685][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.324226][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.615934][T12966] netlink: 'syz.3.2349': attribute type 29 has an invalid length. [ 501.658202][T12962] netlink: 'syz.3.2349': attribute type 1 has an invalid length. [ 501.696490][T12962] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.2349'. [ 501.806002][T12966] netlink: 'syz.3.2349': attribute type 29 has an invalid length. [ 505.053950][T12994] netlink: 'syz.3.2357': attribute type 10 has an invalid length. [ 505.062428][T12994] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2357'. [ 505.080163][T12994] bridge0: port 3(veth0_vlan) entered blocking state [ 505.090579][T12994] bridge0: port 3(veth0_vlan) entered disabled state [ 505.114507][T12994] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 506.566382][T13017] netlink: 'syz.0.2363': attribute type 1 has an invalid length. [ 506.574360][T13017] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.2363'. [ 506.641127][T13026] netlink: 'syz.0.2363': attribute type 29 has an invalid length. [ 506.700176][T13026] netlink: 'syz.0.2363': attribute type 29 has an invalid length. [ 506.829264][T13031] device syzkaller0 entered promiscuous mode [ 507.223950][T13042] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2371'. [ 507.404743][ T4285] Bluetooth: hci4: ISO packet for unknown connection handle 44 [ 507.413908][T13049] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.2373'. [ 508.734279][T13077] netlink: 'syz.4.2381': attribute type 11 has an invalid length. [ 508.756702][T13077] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2381'. [ 508.790756][T13077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 511.219094][T13102] delete_channel: no stack [ 511.266847][T13120] netlink: 'syz.4.2391': attribute type 10 has an invalid length. [ 511.274933][T13120] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2391'. [ 511.321070][T13120] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 512.919446][T13170] netlink: 'syz.3.2407': attribute type 3 has an invalid length. [ 512.955702][T13170] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2407'. [ 513.016543][T13172] netlink: 'syz.2.2406': attribute type 21 has an invalid length. [ 513.036175][T13172] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2406'. [ 513.211710][ T4285] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 513.734821][T13209] netlink: 'syz.0.2417': attribute type 19 has an invalid length. [ 513.755828][T13209] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2417'. [ 514.021237][T13225] netlink: 'syz.3.2421': attribute type 3 has an invalid length. [ 514.040603][T13225] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2421'. [ 514.335551][ T4285] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 515.253137][T13258] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.2431'. [ 515.297330][T13258] netlink: 'syz.2.2431': attribute type 1 has an invalid length. [ 515.322194][T13258] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2431'. [ 515.602847][T13266] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2433'. [ 515.649055][T13270] netlink: 'syz.4.2435': attribute type 3 has an invalid length. [ 515.675879][T13270] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2435'. [ 516.073374][ T4285] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 516.917795][T13317] netlink: 'syz.2.2449': attribute type 3 has an invalid length. [ 516.975626][T13317] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2449'. [ 517.156862][T13320] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.2450'. [ 517.900646][ T9] tipc: Subscription rejected, illegal request [ 517.918885][T13345] device vlan0 entered promiscuous mode [ 518.043959][T13344] device syzkaller0 entered promiscuous mode [ 518.220013][T13349] cgroup: fork rejected by pids controller in /syz4 [ 518.349077][T13356] netlink: 'syz.3.2459': attribute type 10 has an invalid length. [ 518.363874][T13356] device netdevsim0 entered promiscuous mode [ 519.477630][T13477] __nla_validate_parse: 1 callbacks suppressed [ 519.477652][T13477] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.2470'. [ 521.360031][T13502] netlink: 'syz.2.2480': attribute type 11 has an invalid length. [ 521.369708][T13502] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2480'. [ 521.864995][ T4292] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 521.876271][ T4292] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 521.884997][ T4292] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 521.895100][ T4292] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 521.907643][ T4292] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 521.915217][ T4292] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 522.012514][T13523] device syzkaller0 entered promiscuous mode [ 522.049727][T13528] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2486'. [ 522.078781][T13528] device caif0 entered promiscuous mode [ 522.091842][T13528] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 523.946477][ T4292] Bluetooth: hci4: command 0x0409 tx timeout [ 524.840706][T13568] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2497'. [ 524.852450][T13571] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2498'. [ 525.222012][T13577] netlink: 'syz.1.2500': attribute type 21 has an invalid length. [ 525.242740][T13587] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2502'. [ 525.258270][T13521] chnl_net:caif_netlink_parms(): no params data found [ 525.459640][T13521] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.475121][T13521] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.494197][T13521] device bridge_slave_0 entered promiscuous mode [ 525.539798][T13521] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.568822][T13521] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.591112][T13521] device bridge_slave_1 entered promiscuous mode [ 525.656561][T13521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.684154][T13521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.751749][T13521] team0: Port device team_slave_0 added [ 525.771548][T13521] team0: Port device team_slave_1 added [ 525.830812][T13521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.844639][T13521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.894422][T13521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.025579][ T4292] Bluetooth: hci4: command 0x041b tx timeout [ 526.294748][T13521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.304510][T13521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.367807][T13521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.417957][T13599] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 526.424467][T13599] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 526.497217][T13521] device hsr_slave_0 entered promiscuous mode [ 526.525922][T13521] device hsr_slave_1 entered promiscuous mode [ 526.532615][T13521] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 526.552008][T13521] Cannot create hsr debugfs directory [ 526.564048][T13606] IPv6: pim6reg1: Disabled Multicast RS [ 526.906678][T13617] device syzkaller0 entered promiscuous mode [ 527.790353][T13634] netlink: 'syz.1.2516': attribute type 3 has an invalid length. [ 527.820936][T13634] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2516'. [ 528.106258][ T4292] Bluetooth: hci4: command 0x040f tx timeout [ 529.678661][T13668] netlink: 'syz.2.2524': attribute type 10 has an invalid length. [ 529.736631][T13670] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2525'. [ 529.751058][T13670] device caif0 entered promiscuous mode [ 529.758710][T13670] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 529.784735][T13668] netlink: 'syz.2.2524': attribute type 4 has an invalid length. [ 529.820899][T13668] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2524'. [ 529.912135][T13521] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 530.046298][T13521] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 530.103944][T13521] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 530.144796][T13521] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 530.186214][ T4292] Bluetooth: hci4: command 0x0419 tx timeout [ 530.205212][T13684] sctp: [Deprecated]: syz.3.2528 (pid 13684) Use of struct sctp_assoc_value in delayed_ack socket option. [ 530.205212][T13684] Use struct sctp_sack_info instead [ 530.478502][T13521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.513353][ T6393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 530.538902][ T6393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 530.577088][T13521] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.612428][ T6393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 530.626515][ T6393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 530.651849][ T6393] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.659071][ T6393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.736115][ T6393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 530.772305][ T6393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 530.804327][T13701] netlink: 'syz.3.2534': attribute type 2 has an invalid length. [ 530.821252][T13701] netlink: 'syz.3.2534': attribute type 1 has an invalid length. [ 530.830058][ T6393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 530.835134][T13701] netlink: 'syz.3.2534': attribute type 4 has an invalid length. [ 530.849910][T13701] netlink: 'syz.3.2534': attribute type 6 has an invalid length. [ 530.852397][ T6393] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.864907][ T6393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.870169][T13701] netlink: 'syz.3.2534': attribute type 7 has an invalid length. [ 530.886606][T13701] netlink: 'syz.3.2534': attribute type 5 has an invalid length. [ 530.893193][T13706] netlink: 'syz.2.2536': attribute type 3 has an invalid length. [ 530.895081][T13701] netlink: 206468 bytes leftover after parsing attributes in process `syz.3.2534'. [ 530.929620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 530.961701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 530.971174][T13706] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2536'. [ 530.998118][T11769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 531.038840][T11769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 531.090077][T11769] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 531.147894][ T6389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 531.176963][ T6389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 531.204201][T13521] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 531.234530][T13521] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 531.257095][ T6389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 531.290853][ T6389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 531.318594][ T6389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 531.347023][ T6389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 531.366125][ T6389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 531.391505][T13719] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2540'. [ 531.407589][T13719] device caif0 entered promiscuous mode [ 531.419720][T13719] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 531.920051][T13711] device syzkaller0 entered promiscuous mode [ 532.464550][ T6398] device 0 left promiscuous mode [ 534.904745][T13753] netlink: 'syz.3.2549': attribute type 21 has an invalid length. [ 534.914944][T13753] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2549'. [ 535.016679][T13521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 535.073259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 535.085210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 535.103561][T13759] netlink: 'syz.1.2551': attribute type 3 has an invalid length. [ 535.168388][T13759] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2551'. [ 535.285518][T13762] netlink: 'syz.2.2552': attribute type 29 has an invalid length. [ 535.536297][T13764] pimreg: tun_chr_ioctl cmd 2147767511 [ 535.597074][T13762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2552'. [ 535.617218][T13762] tc_dump_action: action bad kind [ 535.667953][T13764] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.2552'. [ 535.880816][T13778] validate_nla: 1 callbacks suppressed [ 535.880838][T13778] netlink: 'syz.3.2555': attribute type 10 has an invalid length. [ 536.232187][T13781] netlink: 'syz.1.2557': attribute type 10 has an invalid length. [ 536.437327][T13790] device ipvlan0 entered promiscuous mode [ 536.707307][T13796] netlink: 'syz.3.2560': attribute type 1 has an invalid length. [ 536.771949][ T6393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 536.783542][ T6393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 536.881310][T13801] device syzkaller0 entered promiscuous mode [ 536.901113][T11775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 536.911116][T11775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 536.924971][T13521] device veth0_vlan entered promiscuous mode [ 536.963088][T11775] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 537.001249][T11775] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 537.147285][T13521] device veth1_vlan entered promiscuous mode [ 537.154644][T13808] netlink: 65027 bytes leftover after parsing attributes in process `syz.2.2563'. [ 537.211737][T13810] netlink: 'syz.2.2563': attribute type 153 has an invalid length. [ 537.226480][T13810] netlink: 69544 bytes leftover after parsing attributes in process `syz.2.2563'. [ 539.211735][T11775] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 539.224149][T11775] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 539.268409][T13521] device veth0_macvtap entered promiscuous mode [ 539.287691][T11775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 539.308322][T11775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 539.432381][T13521] device veth1_macvtap entered promiscuous mode [ 539.442538][T13813] netlink: 'syz.1.2565': attribute type 3 has an invalid length. [ 539.455160][T11775] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 539.460740][T13813] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2565'. [ 539.476206][T11775] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 539.567344][ T6398] device hsr_slave_0 left promiscuous mode [ 539.598469][ T6398] device hsr_slave_1 left promiscuous mode [ 539.628571][ T6398] device veth1_macvtap left promiscuous mode [ 539.635126][ T6398] device veth0_macvtap left promiscuous mode [ 539.642093][ T6398] device veth1_vlan left promiscuous mode [ 539.844893][ T6398] team0 (unregistering): Port device geneve1 removed [ 541.003738][ T6398] team0 (unregistering): Port device team_slave_1 removed [ 541.058861][ T6398] team0 (unregistering): Port device team_slave_0 removed [ 541.458252][T13818] netlink: 'syz.2.2566': attribute type 1 has an invalid length. [ 541.475538][T13818] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2566'. [ 541.513433][T13521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.535720][T13521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.573568][T13521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 541.582203][T11775] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 541.613556][T11775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 541.648635][T13521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.687526][T13521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.716862][T13521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 541.724548][T11772] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 541.738400][T11772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 541.804988][T13521] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.837942][T13521] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.861947][T13521] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.903432][T13521] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.270631][T11772] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.278623][T11772] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.298888][ T6393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 542.389741][T13835] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2570'. [ 542.399370][T11769] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.409883][T11769] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.422062][ T6393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 543.052852][T13853] device syzkaller0 entered promiscuous mode [ 543.125256][T13859] netlink: 'syz.1.2576': attribute type 3 has an invalid length. [ 543.140677][T13859] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2576'. [ 543.300335][T13863] netlink: 'syz.2.2577': attribute type 3 has an invalid length. [ 543.328289][T13863] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2577'. [ 545.579488][T13869] netlink: 'syz.1.2579': attribute type 2 has an invalid length. [ 545.892417][T13886] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2581'. [ 545.933463][T13886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2581'. [ 545.957263][T13885] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2582'. [ 546.070855][T13885] device hsr_slave_0 left promiscuous mode [ 546.114319][T13885] device hsr_slave_1 left promiscuous mode [ 547.323894][T13915] FAULT_INJECTION: forcing a failure. [ 547.323894][T13915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.423689][T13915] CPU: 1 PID: 13915 Comm: syz.1.2588 Not tainted syzkaller #0 [ 547.431254][T13915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 547.441356][T13915] Call Trace: [ 547.444667][T13915] [ 547.447637][T13915] dump_stack_lvl+0x188/0x24e [ 547.452400][T13915] ? show_regs_print_info+0x12/0x12 [ 547.457654][T13915] ? load_image+0x410/0x410 [ 547.462238][T13915] ? __lock_acquire+0x7c40/0x7c40 [ 547.467334][T13915] should_fail_ex+0x390/0x4c0 [ 547.472145][T13915] _copy_from_user+0x2c/0x170 [ 547.476899][T13915] __sys_bpf+0x2ea/0x780 [ 547.481236][T13915] ? bpf_link_show_fdinfo+0x380/0x380 [ 547.486664][T13915] ? lock_chain_count+0x20/0x20 [ 547.491589][T13915] __x64_sys_bpf+0x78/0x90 [ 547.496076][T13915] do_syscall_64+0x4c/0xa0 [ 547.500560][T13915] ? clear_bhb_loop+0x60/0xb0 [ 547.505465][T13915] ? clear_bhb_loop+0x60/0xb0 [ 547.510193][T13915] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 547.516127][T13915] RIP: 0033:0x7f76a839e0d9 [ 547.520575][T13915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.540204][T13915] RSP: 002b:00007f76a9325028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 547.548770][T13915] RAX: ffffffffffffffda RBX: 00007f76a8626090 RCX: 00007f76a839e0d9 [ 547.556805][T13915] RDX: 000000000000000c RSI: 0000200000000000 RDI: 000000000000000a [ 547.564829][T13915] RBP: 00007f76a9325090 R08: 0000000000000000 R09: 0000000000000000 [ 547.572824][T13915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.580818][T13915] R13: 00007f76a8626128 R14: 00007f76a8626090 R15: 00007ffdce913958 [ 547.588829][T13915] [ 548.273745][T13924] netlink: 'syz.1.2590': attribute type 3 has an invalid length. [ 548.343923][T13924] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2590'. [ 548.780296][T13935] device syzkaller0 entered promiscuous mode [ 549.298398][T13953] netlink: 17861 bytes leftover after parsing attributes in process `syz.2.2600'. [ 550.834091][T13951] netlink: 'syz.1.2599': attribute type 46 has an invalid length. [ 550.842025][T13951] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2599'. [ 550.909313][T13966] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2602'. [ 551.148680][T13957] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2602'. [ 551.225762][T13957] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 551.383345][T13981] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2607'. [ 551.985240][ T4285] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 552.291121][T14007] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.2613'. [ 552.431297][T14009] device syzkaller0 entered promiscuous mode [ 552.575590][T14014] netlink: 'syz.3.2613': attribute type 21 has an invalid length. [ 553.354630][ T4285] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 554.591748][ T4285] Bluetooth: hci3: command 0x0406 tx timeout [ 556.121962][T14066] netlink: 'syz.2.2641': attribute type 3 has an invalid length. [ 556.225554][T14066] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2641'. [ 558.793073][T14082] netlink: 'syz.0.2635': attribute type 21 has an invalid length. [ 558.879873][T14085] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.2636'. [ 559.137525][T14088] device syzkaller0 entered promiscuous mode [ 559.210762][T14091] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.2637'. [ 559.450817][T14097] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2640'. [ 559.944131][T14112] netlink: 'syz.3.2645': attribute type 3 has an invalid length. [ 559.969590][T14112] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2645'. [ 561.768740][T14127] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.2650'. [ 561.828672][T14132] netlink: 'syz.2.2650': attribute type 21 has an invalid length. [ 561.919395][T14127] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 562.174321][T14142] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2653'. [ 562.602283][T14151] netlink: 'syz.2.2656': attribute type 22 has an invalid length. [ 562.610886][T14151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2656'. [ 562.768250][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.774649][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.939837][T14158] netlink: 'syz.2.2659': attribute type 3 has an invalid length. [ 562.961596][T14158] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2659'. [ 563.379236][T14166] device syzkaller0 entered promiscuous mode [ 563.391941][T14168] netlink: 'syz.3.2663': attribute type 22 has an invalid length. [ 566.573189][T14175] netlink: 'syz.1.2664': attribute type 10 has an invalid length. [ 566.844889][T14187] netlink: 'syz.4.2668': attribute type 28 has an invalid length. [ 566.853042][T14187] netlink: 'syz.4.2668': attribute type 3 has an invalid length. [ 566.865042][T14187] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2668'. [ 567.069143][T14199] netlink: 'syz.2.2671': attribute type 3 has an invalid length. [ 567.103103][T14199] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2671'. [ 568.725938][T14204] netlink: 'syz.1.2673': attribute type 10 has an invalid length. [ 568.734031][T14204] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2673'. [ 568.743688][T14204] device ipvlan1 entered promiscuous mode [ 568.768078][T14204] bridge0: port 5(ipvlan1) entered blocking state [ 568.774626][T14204] bridge0: port 5(ipvlan1) entered disabled state [ 568.816489][T14204] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 568.888626][T14200] device syzkaller0 entered promiscuous mode [ 568.949447][T14215] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2675'. [ 570.853508][T14223] device bond_slave_1 entered promiscuous mode [ 570.866100][T14239] netlink: 'syz.0.2680': attribute type 10 has an invalid length. [ 570.895366][ T6398] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 571.008938][ T4292] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 571.200054][T14251] netlink: 'syz.3.2686': attribute type 3 has an invalid length. [ 571.254268][T14251] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2686'. [ 571.415057][T14254] device syzkaller0 entered promiscuous mode [ 575.771325][T14296] netlink: 'syz.0.2700': attribute type 3 has an invalid length. [ 575.799302][T14296] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2700'. [ 577.248841][T14284] netlink: 'syz.4.2695': attribute type 10 has an invalid length. [ 581.184319][ T4292] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 581.305933][T14375] netlink: 'syz.1.2719': attribute type 10 has an invalid length. [ 581.408085][T14388] netlink: 'syz.0.2722': attribute type 10 has an invalid length. [ 582.188981][T14407] netlink: 'syz.1.2740': attribute type 1 has an invalid length. [ 582.237761][T14407] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.2740'. [ 582.368440][ T4292] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 582.580688][T14420] device syzkaller0 entered promiscuous mode [ 586.461644][T14430] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2735'. [ 586.775964][T14445] netlink: 'syz.4.2738': attribute type 13 has an invalid length. [ 586.793850][T14445] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2738'. [ 586.813244][T14447] netlink: 'syz.3.2741': attribute type 3 has an invalid length. [ 586.816378][T14445] syz_tun: refused to change device tx_queue_len [ 586.833877][T14445] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 586.844679][T14447] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2741'. [ 586.890154][T14448] netlink: 'syz.3.2741': attribute type 3 has an invalid length. [ 586.910266][T14448] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2741'. [ 587.187674][T14460] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2745'. [ 587.420177][ T4285] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 587.536388][T14471] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2748'. [ 587.651144][T14477] netlink: 'syz.3.2751': attribute type 3 has an invalid length. [ 587.682188][T14477] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2751'. [ 587.913981][T14479] device syzkaller0 entered promiscuous mode [ 588.000665][T14486] netlink: 'syz.3.2751': attribute type 10 has an invalid length. [ 588.020783][T14486] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2751'. [ 588.054795][T14489] netlink: 'syz.3.2751': attribute type 10 has an invalid length. [ 588.146907][T14489] team0: Port device wlan1 added [ 588.486738][ T4285] Bluetooth: hci3: ISO packet for unknown connection handle 3847 [ 590.029729][T14510] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2754'. [ 590.040278][T14510] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 590.297703][T14516] netlink: 'syz.1.2757': attribute type 17 has an invalid length. [ 590.691013][T14537] netlink: 2639 bytes leftover after parsing attributes in process `syz.4.2765'. [ 591.020908][T14552] device syzkaller0 entered promiscuous mode [ 591.677246][T14566] netlink: 'syz.2.2773': attribute type 2 has an invalid length. [ 591.688720][T14566] netlink: 'syz.2.2773': attribute type 3 has an invalid length. [ 591.697158][T14566] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2773'. [ 592.435963][T14576] netlink: 'syz.2.2777': attribute type 29 has an invalid length. [ 593.856343][T14576] netlink: 'syz.2.2777': attribute type 29 has an invalid length. [ 594.919001][T14613] netlink: 'syz.1.2788': attribute type 10 has an invalid length. [ 594.986755][T14613] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2788'. [ 595.699284][T14617] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2786'. [ 595.831687][T14630] netlink: 'syz.0.2791': attribute type 28 has an invalid length. [ 596.180315][T14626] device syzkaller0 entered promiscuous mode [ 598.205110][T14658] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.2801'. [ 624.189432][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.195876][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.825808][T13911] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2660 jiffies s: 117281 root: 0x2/. [ 624.861576][T13911] rcu: blocking rcu_node structures (internal RCU debug): [ 624.875068][T13911] Sending NMI from CPU 0 to CPUs 1: [ 624.880465][ C1] NMI backtrace for cpu 1 [ 624.880475][ C1] CPU: 1 PID: 14668 Comm: syz.1.2804 Not tainted syzkaller #0 [ 624.880492][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 624.880502][ C1] RIP: 0010:lock_release+0x126/0x920 [ 624.880532][ C1] Code: 65 8b 05 0d fe 9d 7e 85 c0 0f 85 97 04 00 00 65 4c 8b 35 7d f3 9d 7e 49 8d 9e dc 0a 00 00 48 89 d8 48 c1 e8 03 42 0f b6 04 28 <84> c0 0f 85 5b 05 00 00 83 3b 00 0f 85 6b 04 00 00 4c 89 74 24 08 [ 624.880546][ C1] RSP: 0018:ffffc90003716e80 EFLAGS: 00000803 [ 624.880561][ C1] RAX: 0000000000000000 RBX: ffff888027ce8adc RCX: b273270722b1f400 [ 624.880574][ C1] RDX: 0000000000000000 RSI: ffffffff8adf5dc0 RDI: ffffffff8adf5d80 [ 624.880586][ C1] RBP: ffffc90003716f90 R08: ffffffff8e210aef R09: 1ffffffff1c4215d [ 624.880598][ C1] R10: dffffc0000000000 R11: fffffbfff1c4215e R12: 0000000000120000 [ 624.880611][ C1] R13: dffffc0000000000 R14: ffff888027ce8000 R15: 1ffff920006e2ddc [ 624.880623][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 624.880637][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 624.880649][ C1] CR2: 00007f70647eb7c0 CR3: 0000000057957000 CR4: 00000000003506e0 [ 624.880664][ C1] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000200000000300 [ 624.880676][ C1] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 624.880687][ C1] Call Trace: [ 624.880692][ C1] [ 624.880700][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 624.880832][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 624.880861][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 624.880885][ C1] trace_call_bpf+0x5ca/0x6b0 [ 624.880908][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 624.880935][ C1] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 624.880958][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 624.880981][ C1] ? trace_call_bpf+0x5d6/0x6b0 [ 624.881003][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 624.881029][ C1] perf_trace_run_bpf_submit+0x79/0x1c0 [ 624.881101][ C1] perf_trace_preemptirq_template+0x268/0x320 [ 624.881126][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 624.881150][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 624.881174][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 624.881200][ C1] ? lock_chain_count+0x20/0x20 [ 624.881225][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 624.881247][ C1] trace_irq_enable_rcuidle+0xd3/0x140 [ 624.881273][ C1] trace_hardirqs_on+0x24/0x40 [ 624.881293][ C1] asm_sysvec_irq_work+0x16/0x20 [ 624.881315][ C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 624.881362][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 a2 7c 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 624.881375][ C1] RSP: 0018:ffffc900037172c0 EFLAGS: 00000206 [ 624.881400][ C1] RAX: b273270722b1f400 RBX: 1ffff920006e2e60 RCX: b273270722b1f400 [ 624.881411][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf5de0 [ 624.881423][ C1] RBP: ffffc900037173b0 R08: ffffffff90b10247 R09: 1ffffffff2162048 [ 624.881434][ C1] R10: dffffc0000000000 R11: fffffbfff2162049 R12: 0000000000000246 [ 624.881444][ C1] R13: dffffc0000000000 R14: ffff8880b8f3bb00 R15: 0000000000000002 [ 624.881468][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 624.881484][ C1] ? folio_memcg_lock+0xf2/0x320 [ 624.881542][ C1] ? folio_memcg_lock+0x7d/0x320 [ 624.881560][ C1] ? mem_cgroup_get_oom_group+0x350/0x350 [ 624.881581][ C1] __rcu_read_unlock+0x78/0xd0 [ 624.881597][ C1] __folio_memcg_unlock+0xea/0x110 [ 624.881617][ C1] page_remove_rmap+0x7f5/0xef0 [ 624.881656][ C1] unmap_page_range+0x10db/0x25b0 [ 624.881734][ C1] unmap_vmas+0x260/0x390 [ 624.881756][ C1] ? unmap_vmas+0x1bd/0x390 [ 624.881786][ C1] ? unmap_page_range+0x25b0/0x25b0 [ 624.881810][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 624.881841][ C1] exit_mmap+0x20d/0x970 [ 624.881863][ C1] ? vm_brk+0x20/0x20 [ 624.881880][ C1] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 624.881910][ C1] ? exit_mm+0x23d/0x350 [ 624.881957][ C1] ? uprobe_clear_state+0x274/0x290 [ 624.882027][ C1] __mmput+0x118/0x3a0 [ 624.882043][ C1] exit_mm+0x24d/0x350 [ 624.882066][ C1] ? do_exit+0x2570/0x2570 [ 624.882087][ C1] ? taskstats_exit+0x355/0x9e0 [ 624.882140][ C1] do_exit+0x958/0x2570 [ 624.882168][ C1] ? put_task_struct+0x80/0x80 [ 624.882189][ C1] ? ct_nmi_exit+0x145/0x1c0 [ 624.882206][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 624.882229][ C1] ? lock_chain_count+0x20/0x20 [ 624.882253][ C1] do_group_exit+0x229/0x2e0 [ 624.882295][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 624.882311][ C1] get_signal+0x1259/0x1340 [ 624.882340][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 624.882365][ C1] arch_do_signal_or_restart+0xc4/0x1310 [ 624.882427][ C1] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 624.882451][ C1] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 624.882475][ C1] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 624.882500][ C1] ? get_sigframe_size+0x10/0x10 [ 624.882519][ C1] ? perf_trace_preemptirq_template+0x268/0x320 [ 624.882552][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 624.882596][ C1] exit_to_user_mode_loop+0x70/0x110 [ 624.882619][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 624.882642][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 624.882658][ C1] do_syscall_64+0x58/0xa0 [ 624.882678][ C1] ? clear_bhb_loop+0x60/0xb0 [ 624.882697][ C1] ? clear_bhb_loop+0x60/0xb0 [ 624.882718][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 624.882738][ C1] RIP: 0033:0x7f76a839e0d9 [ 624.882749][ C1] Code: Unable to access opcode bytes at 0x7f76a839e0af. [ 624.882757][ C1] RSP: 002b:00007f76a93460e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 624.882777][ C1] RAX: 0000000000000001 RBX: 00007f76a8625fa8 RCX: 00007f76a839e0d9 [ 624.882787][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f76a8625fac [ 624.882797][ C1] RBP: 00007f76a8625fa0 R08: 0008eabc3e0c2e56 R09: 0000000000000000 [ 624.882807][ C1] R10: 0000000000033fe0 R11: 0000000000000246 R12: 0000000000000000 [ 624.882816][ C1] R13: 00007f76a8626038 R14: 00007ffdce913870 R15: 00007ffdce913958 [ 624.882835][ C1]