last executing test programs: 1m42.107617276s ago: executing program 2 (id=456): r0 = perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x1, 0x1, 0x5, 0x10, 0x0, 0x200000, 0x820a4, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0xa}, 0xc07e, 0x200000000000c8, 0x2, 0x9, 0xfffffffffffffff8, 0x811, 0xfffb, 0x0, 0xfffffffb, 0x0, 0x5}, 0x0, 0xb, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000700400009", @ANYRES64=r0], 0x50) (rerun: 64) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x24040014) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x844, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x5, 0x3, 0x0, 0x8, 0x201, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffefffd, 0x0, 0x0, 0x5ff, 0x0, 0x9}, 0x0, 0x10, 0xffffffffffffffff, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) (async, rerun: 32) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) (rerun: 32) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000004) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (rerun: 32) r6 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x11, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r1], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180), 0x3, r7}, 0x38) (async, rerun: 64) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz1\x00', 0x200002, 0x0) (rerun: 64) openat$cgroup(r8, 0x0, 0x200002, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9febf9ff1700000000230000140000001400000008000000000000000100000604000000080000000000000000000000302e1400"], 0x0, 0x34}, 0x28) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r7, &(0x7f0000001940), &(0x7f00000002c0)=""/187}, 0x20) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x10) close(0x3) 1m41.792027783s ago: executing program 2 (id=459): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={r0, 0xffffffffffffffff}, 0x4) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r4 = getpid() perf_event_open(0x0, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x2) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x3}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r6) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000035000b0fd25a806c8c6f94f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x2c80000, 0x0, 0x0, 0x0, 0x93, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000001c0)={r3}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair(0x18, 0x0, 0x1, &(0x7f0000001780)) r8 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x60) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', r5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b4007bb2199917ff5c7b710000020000ce000000000000009500000000000000c857fd215ed390bc4530"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 1m41.364614751s ago: executing program 2 (id=462): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'ip6gretap0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[], 0x50) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x62}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x8}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7}, 0x39) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x3, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000003d000000000000000000158500000029"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000011c0)="b9ffddc1ddcccdf175537d53888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r1) socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000001280)="41b3e5c6a9146bda4738918a8e85cd0702d731004f23e692f9f4710536ff1db1a41ece2390678e13c17a2c549cf568791aba2df837a5c2070e8e2c4d7fe71a21af47ed68dfb11bb66b937d71e9920202a289aa52ee3a1e85dfac43eeee31191d03acc4212e8b9e7644130f3982e1126039d5492112c79dce74c84ea9ee68971c07360360036900af60e468423b3e4a94c2742094761f506cf5614f4ac86b386a205cc51ba3ef1cf53dd0017e2e3c985330d750f8ef7458ca690b96638d222395e3b4accf6bfaaea8674081d5f5156ffa"}, {&(0x7f0000001380)="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"}], 0x100000000000011e, 0x0, 0x43, 0x1f00c00e}, 0x20048881) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="2e0000bd000000000000010000000000000ea3136b000a000f00000002800240cd1f00"/49, 0x31}], 0x1}, 0x20048004) r6 = socket$kcm(0x23, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8}, 0x102200, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000940)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f00000001c0)={'syzkaller0\x00', @random="0000aa6a45b4"}) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001200)=ANY=[@ANYRES16, @ANYRESOCT=r2, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES64=r5, @ANYRESDEC], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000006c0)={&(0x7f0000000340)="0869957ec4902774b809f1d24927431576ec9a90817aa4bf6297caedd91fa3cdd92bff7a460c028f36f8e4d34aede400a2651b2558cfd90b1767e4259cba8dfcc123b6ce6cc681a0a06e096214fef3b275a6a6d78eb29975f0c9e988ec14eb8f1149a5393e671834ec1c5a4b9bad345877029e133b5230e118b0250b66049767486299a123a19d6babf5f2af2f0eb01cc0965f0b6fd37eb23fc9cace0034e1513fcc47ea283157c405ad84d0dbbc70fbc0b5f1f176fcd1ee593060c1f04d41d48e29584262d3d8b9", &(0x7f0000000440)=""/180, &(0x7f0000000500)="db287edee2e73eaf4975a239a5f36a6ca328847f24b76eabaa0a5c26ce222a037cc6309274d98b5b0b8a4cc6e979f3c5e7dd790ea011ded6dd02bb67af3aec132a74ea783bc3c2fae92384dbe0be8f2ac18a5d7c8680d335ec3d5122443f33b92622e22763c5e54748f0d08e6c407d72dcea2430bfed7f2027102914d90730499b58064d3268870ace4165daadc205d12f5f595aa11e31b55ef9cd4bb79dd2fa02530b78953a1c07e9776b88", &(0x7f00000005c0), 0xf2, r7}, 0x38) 1m39.388127463s ago: executing program 2 (id=472): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x890c, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89f1, &(0x7f0000000900)={'tunl0\x00', @random="2000230c1100"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6e8, 0xa}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) r6 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0xffffffbd, 0x0, 0x80000000, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='cpu~20\t&&') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r1, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x11, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x7, 0x0, 0xc, 0x3, 0x3, 0xffffffffffffffe0, 0x1}, @generic={0x4e, 0x2, 0x5, 0x100}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x1, 0x53, &(0x7f0000000380)=""/83, 0x40f00, 0x10, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x1, 0xc, 0xfea5}, 0x10, 0x202f0, r2, 0x3, 0x0, &(0x7f0000000600)=[{0x4, 0x2, 0x9, 0xc}, {0x3, 0x2, 0x7, 0xb}, {0x1, 0x3, 0x7, 0xc}], 0x10, 0x8bf}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x2, @perf_config_ext={0x3}, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x9) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) 1m23.542796791s ago: executing program 32 (id=480): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x50c91c04, 0x7df}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89f1, &(0x7f0000000900)={'tunl0\x00', @random="2000230c1100"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6e8, 0xa}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) r6 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0xffffffbd, 0x0, 0x80000000, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='cpu~20\t&&') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r1, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x11, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x7, 0x0, 0xc, 0x3, 0x3, 0xffffffffffffffe0, 0x1}, @generic={0x4e, 0x2, 0x5, 0x100}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x1, 0x53, &(0x7f0000000380)=""/83, 0x40f00, 0x10, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x1, 0xc, 0xfea5}, 0x10, 0x202f0, r2, 0x3, 0x0, &(0x7f0000000600)=[{0x4, 0x2, 0x9, 0xc}, {0x3, 0x2, 0x7, 0xb}, {0x1, 0x3, 0x7, 0xc}], 0x10, 0x8bf}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x2, @perf_config_ext={0x3}, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x9) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) 3.620233733s ago: executing program 1 (id=1207): bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000050000000000000000000000850000000e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'ip6erspan0\x00', 0x2}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000040)={0x0, 0x3, [@empty, @multicast, @remote]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000000)=0x401) 3.452860166s ago: executing program 4 (id=1211): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071119200000000008510010002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pK \x00'}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000872000000000000000000000f3cae2754a4b"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180)="ff5fb99772024dca4128654351fb3280df659b977f16d875fc", 0x800, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r5}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r4, 0xffffffffffffffff}, 0x4) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000d45e730e6aaef78f0884d9dd9a3ee78b04a7e14514ad6aa812", @ANYRES32=0x1, @ANYBLOB="e500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000000000000100"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x19, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000003000000000000000400000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000006000000bf0900000000000055090100000000009500000000000000185500000d000000000000000200000018460000f9ffffff0000000000000000183b0000050000000000000000000000db4a5000040000007d5008001000000018370000020000000000000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000ec0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000e40)={0x3, 0x80, 0x0, 0x46, 0xaa, 0xf8, 0x0, 0x1, 0x3f40e, 0x6, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000e00), 0xc}, 0x0, 0x0, 0x7, 0x6, 0x200, 0x357, 0x7f, 0x0, 0xfffffffa}, r8, 0xb, r1, 0x9) getpid() r9 = bpf$ITER_CREATE(0x21, &(0x7f00000005c0), 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0x20, &(0x7f0000000900)={0x0, 0x0, 0x0, &(0x7f0000000840)=""/191, 0xbf}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=r10, 0x4) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@o_path={&(0x7f0000000640)='./file0\x00', 0x0, 0x601c, r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1c, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x34}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0xd3, &(0x7f0000000480)=""/211, 0x41100, 0x8, '\x00', 0x0, @fallback=0x21, r9, 0x8, &(0x7f0000000600)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, r10, 0xffffffffffffffff, 0xa, &(0x7f00000006c0)=[r11, r4, r3, r3, r3, r6, r7, r7, r6, r6], &(0x7f0000000700)=[{0x1, 0x5, 0xf, 0x6}, {0x5, 0x5, 0xb, 0xc}, {0x3, 0x5, 0xf}, {0x4, 0x3, 0x4, 0x7}, {0x5, 0x5, 0xa}, {0x4, 0x1, 0xa}, {0x2, 0x3, 0x2, 0x6}, {0x5, 0x6, 0x9, 0x6}, {0x4, 0x1, 0xd, 0x3}, {0x5, 0x2, 0x8, 0x1}], 0x10, 0x3}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x6c}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r9}, &(0x7f00000001c0), &(0x7f0000000980)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r9}, &(0x7f0000000c00), &(0x7f0000000c40)=r9}, 0x20) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b100b4ab50a", @ANYRES32, @ANYRES8=r0], 0xfe33) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r13, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0xffffffffffffffbd, 0x0, 0x0, 0x0, 0xfe9a, 0xaa, 0x8, 0x0, 0x0}}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r14, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x100000}, @call]}, 0x0, 0x4}, 0x94) socket$kcm(0x10, 0x2, 0x0) 3.323886389s ago: executing program 1 (id=1213): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000340)=0x1) r0 = socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000020000721d430a", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000005609010000000000270000000007000018010000696c6c2500000000002020207b1af8ff00000000bda100000000000037010000f8ffffffb702000008000000b70300004000000025000000060000009c23000000000000b5030000010000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x57, 0x0, 0x8000000000009, 0x82a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x8903, &(0x7f00000005c0)) r2 = perf_event_open$cgroup(&(0x7f0000000700)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000000, 0x8}, 0xa4a0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x5) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001900)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xbcaa}, 0x50) setsockopt$sock_attach_bpf(r0, 0x1, 0x25, &(0x7f00000002c0), 0x8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r4) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xdf, 0x0, 0xfd, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, @perf_config_ext={0x9}, 0x7, 0x2, 0xfffffffd, 0x1, 0x0, 0xfffffffc, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x3) r5 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x18}, 0x48000) sendmsg$inet(r5, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x56}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB="0d000000130000000400000007000000010000009f96be10b728faaf96018b03aa1d1376e96a67520ed40514c0b052843f92fd600d4c298628b1d1913e76de1eeca26a28e88dec0b55f922a0ae548e5f52e5cc1bfb68ca0de3801b8c77f6b307ee32bb9ca26f4a196c509f6a217e2cc13fb374b3972284c984196597299fffe5941ecdae815b2d54b1491ac586dc646fd2d4a9a4715845b143f0e53dc833d39b6853d04152d7b7d8b6183bf3312a0315a9fa5cc949cdc89109127f061bccdbf0cecd0ed45437279f2c235695aec184a1e5ae", @ANYRES32=r6, @ANYBLOB="b41500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x5, 0x0, 0x80, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x9, 0xffffffffffffffff, 0x8) sendmsg$inet(r5, &(0x7f0000000ec0)={&(0x7f0000000240)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000d40)=[{0xfffffffffffffffe}, {&(0x7f00000006c0)="428d08c733bde6fb6fa71876104fa1d3004d9a53e1f8265d725e60bc2f86fcbd342ddce8361c22a22dc7381a46c2aaaa088b557993ed6cbcfcbca6a97d22e15292645134c76b15c1de69e465ceac24bc562e05c0bacc886747b91d4f88658027355350e63c1460ae0c9b95b3f917d7620e2d4c438c8dac228c420793934832dd3767239e64b281bb17ac39806303cf52fef32dd18c2861e638370b", 0x9b}, {&(0x7f00000009c0)="516c47907d27dca972aa4cd2fd1b8fc66a79211f7981ad716dc2b07cbe4dfd1c79fa8618a3c4fd6d19d0369a7e90b30bf1bdefdd02a200d0b8b3f18211979b095b6dca09b35dfb4760457ea6ab68d0f0cbb5bb9141a6a1e9b01901e4949914a59b2301014f10ec9d806a1d9c59ae47aa5f249ee9857fc308df7b9db1ea4f751b74422f090d74eb4ffd1113557b0192cf1f2cd9bd49eca9daca1c0853a477cdaf565ad1a4f129c744ece131c5dff4d06ca62880c942122f31c9b5ec55bc7c7e9dcb0708f9fbf49ac20025f4de06d20bb2da8f2d25cb65ece01147f8722d1c819596b06aa071415a972d4490ff2d80cb2f40c2ccda35bb", 0xf6}, {&(0x7f0000000ac0)="27df5d7b2ccc5452bbfd448f15c324b3510ea218235d5c77f2b59cd718136eeb6a530fd8cb24a4c470316ce4bcbc24f0bde12725d9c06e8bcb58d9615fc8f3", 0x3f}, {&(0x7f0000000b40)="b53c2a", 0x3}, {0x0}, {&(0x7f0000000c80)="62193cdf3739b25cdcd0d6b54224aa2a", 0x10}, {0x0}], 0x8, &(0x7f0000000e00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xb}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0xc0}, 0x10) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x9, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) 3.111571673s ago: executing program 0 (id=1215): socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x242, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x10000}, 0x4c1, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x65) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x1000000, 0x8, 0x7ffd, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'vcan0\x00', 0x4000}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) ioctl$TUNSETLINK(r9, 0x400454cd, 0x321) openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) 3.015918335s ago: executing program 4 (id=1216): bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x16, 0x13, &(0x7f0000000c00)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000000020202b631af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007100000018010000202070250000000000202020631af8ff00000000bfa100000000000007010000f8ffffffb70200000200"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000040)="b90103600033f0000000000081001fffffe1", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x9e, 0x0, 0x0, 0xfc, 0x0, 0x1, 0xe0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x800000, &(0x7f00000005c0)="777cbc65ab2bb325e24247c63dd60587ea68ccf4081dda120e0e13261f2adb668e26c061e5d3581f61ca20cdf212a969708db5b6da90dcefc3696ae79b98dffc2c70713c28c81d4f778c47c75a6e2d66c820b7d6d586512c9393a6fa8487", 0x5e, &(0x7f0000000640), &(0x7f0000000680), &(0x7f0000000740)="a269d39a6b5f60a243a87b43c784505b449445b7dcf42f7ab19c8dcaf331bebc4c83a9ca32763dcdb709b44e6b6fd80865beff") perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x0, 0x0, 0xe, 0x0, 0x8, 0xd0e6, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x2, @perf_bp={0x0, 0xb}, 0x19183, 0x1, 0x8, 0xb, 0x8, 0x904813a5, 0x6, 0x0, 0x0, 0x0, 0xffffffffffff0000}, r0, 0x8, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000012006bcd9e3fe3dc6e48aa310b6b87033c00a6001f03000000000000040012000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000, 0xbe, 0x0, 0xffffbffe, 0x0, 0xfffffffffffffff1}, 0x0, 0x20000000000, 0xffffffffffffffff, 0x1) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r5, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000700), 0x0, &(0x7f00000007c0)=""/150, 0x96}, 0x40) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="120000000b000000080000000200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000ac44e19fdf0502f0e29c13727c439b1b56ccb75001cac81c20b3e3fe1ee348769de8a78228412d04eebb94dfbbbef5fabe5a1f69d658f061aff354c408b250ed9f84e13a9209dca55235306b70657ceea7b524bf04d4ff4e8ffa91e7c93991038356962d72adc1df6ee6e0c4078d062d5bbcf77e7e343b59551484faf8da808e106c1b02d6924d49e97543bda237ed44e54cd5006e0687ac978ec637f27b101e0ef9ed0933c0cd630551bf49a49f9fb9795d35045fc204f0907d63c0b1c0da1c46", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r8, &(0x7f0000000300), 0x0}, 0x20) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0xfdef) write$cgroup_subtree(r7, &(0x7f0000000240)={[{0x2b, 'memory'}, {0x2d, 'cpu'}, {0x2b, 'rdma'}, {0x2b, 'io'}, {0x2d, 'net'}, {0x2b, 'rlimit'}, {0x2b, 'memory'}, {0x2b, 'hugetlb'}, {0x2b, 'perf_event'}, {0x2b, 'blkio'}]}, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 2.944076927s ago: executing program 3 (id=1218): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x5, [@restrict={0x6, 0x0, 0x0, 0xb, 0x2}, @volatile={0x3, 0x0, 0x0, 0x9, 0x1}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x80, [{0x1, 0x5, 0x4}]}]}, {0x0, [0x5f, 0x30, 0x30]}}, &(0x7f0000000180)=""/122, 0x4d, 0x7a, 0x0, 0x9}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, r2, 0x4}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x8ed9e90c1d4f2726, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x3, 0x6, 0x6, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x33, 0x1, 0x0, 0x0, 0x0, 0x0, 0x14110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x429, 0x1}, 0x100040, 0x0, 0x10000, 0x1, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000180)={0x4, &(0x7f0000000040)=[{0x15, 0x0, 0x2, 0xfffffffd}, {0x3, 0x4, 0x9}, {0x2c, 0x2, 0x0, 0x9}, {0x6, 0x4, 0x0, 0x2}]}) socket$kcm(0x10, 0x2, 0x10) 2.725284292s ago: executing program 0 (id=1219): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x632, 0x0, @perf_config_ext={0x1, 0xffffffffffffffff}, 0x10f380, 0x25d16793, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x16, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x28) socket$kcm(0x29, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000020005fb0a0002000a0ada1b40d803000003000000ff", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 2.635277393s ago: executing program 3 (id=1220): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0xfffffffd}, 0x10}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000280), &(0x7f00000002c0)='%pK \x00'}, 0x20) openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x5a4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r3) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c23003b) write$cgroup_devices(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd"], 0xa) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @remote, 0xa}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000240)="f400110002329cf2875d1ec79eef4fe60314e86c412b2c25a6d5b02f33c6a2510700000000000000", 0x28}], 0x1}, 0x0) 2.472111087s ago: executing program 1 (id=1222): perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x5, 0xfe, 0x0, 0x0, 0x0, 0x2, 0x51100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe8, 0x401}, 0x0, 0x40000006, 0xffffffff, 0x0, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x14, &(0x7f0000000000)=r3, 0x8) r4 = getpid() perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x1c842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r4, 0x0, 0xffffffffffffffff, 0x2) r5 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000140)=""/88, 0x58}, {&(0x7f00000012c0)=""/244, 0xf4}, {&(0x7f0000000580)=""/11, 0xb}, {&(0x7f0000000400)=""/34, 0x22}, {&(0x7f00000013c0)=""/233, 0xe9}, {&(0x7f0000001000)=""/211, 0xd3}, {&(0x7f00000011c0)=""/174, 0xae}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f0000000440)=""/44, 0x2c}], 0x9}, 0x40012100) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20000000, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0xfffffffe, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(0x3) 2.418017578s ago: executing program 3 (id=1224): perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8140, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xe}, 0x13c1, 0x0, 0x0, 0x0, 0x46fa, 0x401, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfe, 0xbd, 0x5, 0x0, 0x0, 0xfd, 0x4401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0xfe8a}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8100058700fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) r7 = getpid() perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x40, 0x0, 0x0, 0x0, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x5f84, 0xffffffff, 0x2, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r8 = socket$kcm(0x10, 0x3, 0x10) r9 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r9, 0x84, 0x6e, 0x0, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000035000b63717a3c4a01d8985b0808aa78", 0x14}], 0x1}, 0x0) write$cgroup_pid(r1, &(0x7f0000000340)=r7, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a118001500060014", 0x23}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b90402", 0x11}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) 2.32413541s ago: executing program 0 (id=1225): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x6, 0x5, 0xa, 0x8001, 0x0, 0x0, 0x0, 0x4713}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@map=r0, 0xffffffffffffffff, 0x1, 0x5, 0xffffffffffffffff, @void, @value=r1}, 0x20) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008804) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x100) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720af0fff8ffffff71a4f0ff0000000071108600000000007d400500000000002604000001ed00000f030000000000007c440000000000006b0a00fe000000007203000000000006b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f18564a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c26fc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccc99069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad24b89b6a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c87852730a3bd7ac923fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca4856ff03b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec860cde7c79f7b4d4e24c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b450100000001000000393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00400000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd599c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb80610eb37bd2d40ebdfed687f0b093e68f10b72146a0b749ee2105e2da94a288146abbbaf7c0b24fe0000000000000000f1a4f4de6a8d12dc9e71a20cbd412898586843b534d36e21379a8a06133c1babde9e5bd5b6afc5f684aada43ee560e800f58cb33b8483f6518abde7c86bd5d389c1b3c40fdd4bebe4adf87b1025ff57eb50984cc5bad9ea1c15484ea627c3c1501d612ed65939266e7332966f03e0376076e7c5dfe25f367dda7f69db89829b360dd2f59cbaad10f13e269eca792725bbacb96aa0a5c426ca76f84322661"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc1}, 0xffa3}, 0x48) 2.046551386s ago: executing program 4 (id=1226): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRESDEC, @ANYBLOB="0000000000000000b703000018000010850000000d000000b700000000ed000095"], &(0x7f00000000c0)='GPL\x00', 0xffdffffe, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6880806", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0x3, &(0x7f0000001340)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d000a117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0xa, 0x1, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc", 0x29}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x8000, 0x1, 0x4, 0x7}, {0x0, 0x5}, {}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000011400000000000018000000000208000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c06", 0xfffffffffffffea7}], 0x1}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) r7 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=r7], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)={r7}) 1.952939128s ago: executing program 5 (id=1227): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.636048405s ago: executing program 5 (id=1228): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) (async) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x4, @perf_config_ext={0x8000}, 0x0, 0x400001, 0x8f54, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0x10, 0x400000002, 0x0) (async) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="10000000000000002900000039"], 0x10}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520000a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1, 0x0, 0x0, 0x6}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) (async) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000040)=""/10) (async, rerun: 32) r4 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80^\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\xf9_\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') (async) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r6, 0x27, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x15, 0x1, 0x0, 0x41, 0x0, 0x20000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_bp={0x0}, 0x101048, 0x0, 0x40000000, 0x3, 0x0, 0x4, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) close(r9) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8923, &(0x7f0000001340)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0, 0x0}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(r5) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r7 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2040) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r8, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0), 0x8) 1.503351187s ago: executing program 4 (id=1230): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x5, [@restrict={0x6, 0x0, 0x0, 0xb, 0x2}, @volatile={0x3, 0x0, 0x0, 0x9, 0x1}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x80, [{0x1, 0x5, 0x4}]}]}, {0x0, [0x5f, 0x30, 0x30]}}, &(0x7f0000000180)=""/122, 0x4d, 0x7a, 0x0, 0x9}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, r2, 0x4}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x8ed9e90c1d4f2726, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x3, 0x6, 0x6, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x33, 0x1, 0x0, 0x0, 0x0, 0x0, 0x14110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x429, 0x1}, 0x100040, 0x0, 0x10000, 0x1, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000180)={0x4, &(0x7f0000000040)=[{0x15, 0x0, 0x2, 0xfffffffd}, {0x3, 0x4, 0x9}, {0x2c, 0x2, 0x0, 0x9}, {0x6, 0x4, 0x0, 0x2}]}) socket$kcm(0x10, 0x2, 0x10) 1.39205318s ago: executing program 1 (id=1231): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0, 0x5}, 0x10, 0x0, 0x0, 0x3, 0xfe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x2, 0xffffffffffffffff, 0x8) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x29, 0x4, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x8, 0x5, 0x5, 0x4, 0x0, 0x800000000000000, 0xc21bc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8000000c, 0x1, @perf_bp={0x0, 0xa}, 0x902, 0x2, 0x6, 0x7, 0x81, 0xff, 0x103, 0x0, 0x9, 0x0, 0x40000000000d}, 0x0, 0x4, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89fa, &(0x7f0000000080)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{}, &(0x7f0000000040), &(0x7f00000002c0)='%+9llu \x00'}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r2) recvmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1, 0x0, 0x18}, 0x100) write$cgroup_devices(r2, &(0x7f00000005c0)=ANY=[], 0xfffffeff) sendmsg$tipc(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000040)="e6", 0x1}], 0x1, 0x0, 0x0, 0x20000000}, 0x61) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='io.stat\x00', 0x26e1, 0x0) close(r3) write$cgroup_devices(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd"], 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0xc, &(0x7f0000001480)=@framed={{}, [@ringbuf_output={{}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES32, @ANYBLOB="440cfa", @ANYRES32=0x0], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="d8000000180081054e81f782db4cb904021d480406037c09e8fe55a10a0015400400142603600e122f00160004000500a8000600200006400461c1d67f6f94007134cf6efb8000a007a290457f0189b31627287ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a15a8b16f14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f211c0d56573209d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941c6a0501148", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x24080000) 1.257117673s ago: executing program 3 (id=1232): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000002000000f6ff000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = perf_event_open(&(0x7f0000001200)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x108, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='{:&\xb2U//\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32], 0x0, 0x3}, 0x94) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="24000000660091ef"], 0xfe33) 1.086695386s ago: executing program 4 (id=1233): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) socket$kcm(0x2, 0x200000000000006, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006b00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x84082, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x4, @perf_bp={0x0}, 0x112c0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x1000000000000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f97e24fc6004030e001c740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) close(0x3) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$kcm(r3, &(0x7f0000002480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000e00)="e6aa", 0x2}], 0x1}, 0x10) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="b6", 0x18}], 0x1, 0x0, 0x0, 0x10000000}, 0x12cd) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007d00000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1d, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0xfffffd7e, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x8, 0x0, 0x40, 0x40, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_config_ext={0x6, 0x6}, 0xc634, 0x0, 0x0, 0x9, 0x7, 0xac, 0xffff, 0x0, 0xfffffffd}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) 936.52761ms ago: executing program 5 (id=1234): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0x101, 0x18}, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0000000000000010000000000000000000"], 0x48) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x2, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x10}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 871.168661ms ago: executing program 1 (id=1235): r0 = socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x5}, 0x100066, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1747], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNGETVNETLE(r1, 0x8953, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @remote, 0xa}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000240)="f400110002329cf2875d1ec79eef4fe60314e86c412b2c25a6d5b02f33c6a2510700000000000000", 0x28}], 0x1}, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={r0}) 866.616831ms ago: executing program 3 (id=1236): socketpair(0x1, 0x5, 0x0, 0x0) getpid() (async) r0 = getpid() perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x5, 0x9, 0x7f, 0x0, 0x200, 0x4000, 0x9, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xd6f, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0x20004, 0x9, 0xffff4161, 0x3, 0x9, 0x5, 0x2000, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) (async) r1 = perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x5, 0x9, 0x7f, 0x0, 0x200, 0x4000, 0x9, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xd6f, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0x20004, 0x9, 0xffff4161, 0x3, 0x9, 0x5, 0x2000, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000005d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x10000, 0x8, 0x0, 0x3}, r0, 0xffffffffffffffff, r1, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f4001100032b2c25fe8007000000007a2c08000000090000ff110000000000000000fffffff500", 0x27}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, 0x0) socket$kcm(0x11, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x40000040) (async) recvmsg$kcm(r2, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x40000040) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) 706.276645ms ago: executing program 0 (id=1237): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000140)={r0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r3 = perf_event_open$cgroup(&(0x7f0000000080)={0x4, 0x80, 0xb, 0x41, 0x7f, 0x77, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffff7, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x70, 0x3, 0x8, 0x0, 0x9b13, 0x4, 0x0, 0x7, 0x0, 0xffff}, r1, 0xc, r1, 0xa) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x934) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x41, &(0x7f0000000100)=r4, 0x8) setsockopt$sock_attach_bpf(r2, 0x1, 0x25, &(0x7f0000000100)=r1, 0x4) 704.499875ms ago: executing program 5 (id=1239): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x6, 0x5, 0xa, 0x8001, 0x0, 0x0, 0x0, 0x4713}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@map=r0, 0xffffffffffffffff, 0x1, 0x5, 0xffffffffffffffff, @void, @value=r1}, 0x20) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008804) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x100) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720af0fff8ffffff71a4f0ff0000000071108600000000007d400500000000002604000001ed00000f030000000000007c440000000000006b0a00fe000000007203000000000006b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f18564a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c26fc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccc99069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad24b89b6a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c87852730a3bd7ac923fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca4856ff03b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec860cde7c79f7b4d4e24c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b450100000001000000393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00400000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd599c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb80610eb37bd2d40ebdfed687f0b093e68f10b72146a0b749ee2105e2da94a288146abbbaf7c0b24fe0000000000000000f1a4f4de6a8d12dc9e71a20cbd412898586843b534d36e21379a8a06133c1babde9e5bd5b6afc5f684aada43ee560e800f58cb33b8483f6518abde7c86bd5d389c1b3c40fdd4bebe4adf87b1025ff57eb50984cc5bad9ea1c15484ea627c3c1501d612ed65939266e7332966f03e0376076e7c5dfe25f367dda7f69db89829b360dd2f59cbaad10f13e269eca792725bbacb96aa0a5c426ca76f84322661"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xf1}, 0xffa3}, 0x48) 108.145937ms ago: executing program 0 (id=1240): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x7}, 0x10c002, 0xac61, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x19, &(0x7f0000000000), 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[], 0x50) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, 0x0, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a0, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) 107.852477ms ago: executing program 1 (id=1241): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000dce9100000000000000000000029201804168f54e8325986b759adb2e4fc8aa72ea2c2874383fcc22757ec625f7090acb667dbab88487c61191dce5591f9a65025d88e4b347a37c5401b4aa535783bf13a7cdbc8c872e28570c4e12e6262479764d77823226b1cf04e10c06dfee606ad2b2cd181c668596270de5c5f27a637fcdfb8bb2774", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x8, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000}, 0x50) 94.861177ms ago: executing program 4 (id=1242): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x8100, 0x0, 0x0, 0x0, 0x0, 0xadf4, 0x21, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x4, 0x12, 0x2}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40305828, &(0x7f0000000040)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r4}, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r6) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0) r8 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x2e, &(0x7f0000000640)=r7, 0x4) recvmsg$kcm(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0) r9 = socket$kcm(0x1e, 0x4, 0x0) r10 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(r9, 0x1, 0x21, &(0x7f00000000c0), 0x4) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[], 0xfdef) setsockopt$sock_attach_bpf(r0, 0x6, 0xe, &(0x7f0000000080), 0x4) r11 = perf_event_open$cgroup(&(0x7f0000000000)={0x4, 0x80, 0x8, 0x6, 0x8, 0x4, 0x0, 0x159, 0x28688, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x6, 0x6}, 0x109080, 0x7, 0x6, 0x2, 0x9, 0x100, 0x2, 0x0, 0xad, 0x0, 0x1e52}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x6) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r0) 61.212388ms ago: executing program 5 (id=1243): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x16, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088ca1bff430500001100", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe7d}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x6500, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000808500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xb, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x28108, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfc, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x36) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, 0x0}, 0x3000c005) 0s ago: executing program 3 (id=1244): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x5, [@restrict={0x6, 0x0, 0x0, 0xb, 0x2}, @volatile={0x3, 0x0, 0x0, 0x9, 0x1}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x80, [{0x1, 0x5, 0x4}]}]}, {0x0, [0x5f, 0x30, 0x30]}}, &(0x7f0000000180)=""/122, 0x4d, 0x7a, 0x0, 0x9}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, r2, 0x4}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x8ed9e90c1d4f2726, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x3, 0x6, 0x6, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x33, 0x1, 0x0, 0x0, 0x0, 0x0, 0x14110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x429, 0x1}, 0x100040, 0x0, 0x10000, 0x1, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000180)={0x4, &(0x7f0000000040)=[{0x15, 0x0, 0x2, 0xfffffffd}, {0x3, 0x4, 0x9}, {0x2c, 0x2, 0x0, 0x9}, {0x6, 0x4, 0x0, 0x2}]}) socket$kcm(0x10, 0x2, 0x10) kernel console output (not intermixed with test programs): DRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.270248][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.278476][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.286956][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.295344][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.304863][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.310122][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 57.316914][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.330899][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.338347][ T4232] Bluetooth: hci0: command 0x041b tx timeout [ 57.344692][ T4232] Bluetooth: hci3: command 0x041b tx timeout [ 57.346168][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.351056][ T4232] Bluetooth: hci2: command 0x041b tx timeout [ 57.377733][ T4188] device veth0_vlan entered promiscuous mode [ 57.384148][ T4232] Bluetooth: hci4: command 0x041b tx timeout [ 57.395504][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.403872][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.413512][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.421944][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.430387][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.438570][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.446295][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.454481][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.463016][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.477901][ T4190] device veth0_vlan entered promiscuous mode [ 57.494497][ T4188] device veth1_vlan entered promiscuous mode [ 57.507375][ T4202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.524737][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.536063][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.548031][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.563130][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.574236][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.589582][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.597261][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.611059][ T4190] device veth1_vlan entered promiscuous mode [ 57.670850][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.685362][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.694920][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.722167][ T4196] device veth0_vlan entered promiscuous mode [ 57.737404][ T4190] device veth0_macvtap entered promiscuous mode [ 57.746625][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.758060][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.767022][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.775288][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.784133][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.792841][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.801399][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.810157][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.817712][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.826629][ T4188] device veth0_macvtap entered promiscuous mode [ 57.836893][ T4190] device veth1_macvtap entered promiscuous mode [ 57.853033][ T4196] device veth1_vlan entered promiscuous mode [ 57.870418][ T4188] device veth1_macvtap entered promiscuous mode [ 57.880020][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.888044][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.897703][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.905803][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.913889][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.922279][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.930061][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.947458][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.975867][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.985341][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.994094][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.004051][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.013008][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.023661][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.039723][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.047843][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.061020][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.071718][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.085369][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.097538][ T4196] device veth0_macvtap entered promiscuous mode [ 58.105924][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.113954][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.123190][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.131833][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.140770][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.152152][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.161351][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.170191][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.179145][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.196012][ T4202] device veth0_vlan entered promiscuous mode [ 58.206285][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.218053][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.230410][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.240130][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.248302][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.257360][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.266067][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.275364][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.283404][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.304956][ T4196] device veth1_macvtap entered promiscuous mode [ 58.317440][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.326286][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.336108][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.345195][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.381394][ T4202] device veth1_vlan entered promiscuous mode [ 58.391752][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.400340][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.410215][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.419933][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.431228][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.441824][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.452143][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.462659][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.473777][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.500026][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.515670][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.524630][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.535049][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.547341][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.557225][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.567868][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.579459][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.609472][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.619209][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.627681][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.636431][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.647010][ T4196] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.656020][ T4196] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.667152][ T4196] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.676083][ T4196] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.696552][ T4189] device veth0_vlan entered promiscuous mode [ 58.724044][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.732713][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.753465][ T4202] device veth0_macvtap entered promiscuous mode [ 58.767275][ T4202] device veth1_macvtap entered promiscuous mode [ 58.781038][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.790129][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.798412][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.806745][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.818188][ T4189] device veth1_vlan entered promiscuous mode [ 58.830275][ T1221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.838211][ T1221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.862295][ T387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.868215][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.873267][ T387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.892197][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.924510][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.936140][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.946241][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.957054][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.966972][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.977642][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.988794][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.009183][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.017686][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.021789][ T4242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.034116][ T4242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.047026][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.057824][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.071048][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.082768][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.092657][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.104019][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.117580][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.134036][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.142129][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.151739][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.160498][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.169112][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.179978][ T4189] device veth0_macvtap entered promiscuous mode [ 59.194081][ T4189] device veth1_macvtap entered promiscuous mode [ 59.210966][ T4202] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.225658][ T4202] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.237304][ T4202] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.246598][ T4202] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.266924][ T4248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.285940][ T4248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.311608][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.332900][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.350909][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.390091][ T4233] Bluetooth: hci3: command 0x040f tx timeout [ 59.397636][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.398945][ T4242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.419601][ T4233] Bluetooth: hci0: command 0x040f tx timeout [ 59.428343][ T4233] Bluetooth: hci1: command 0x040f tx timeout [ 59.437746][ T4242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.445728][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.457922][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.469290][ T26] Bluetooth: hci4: command 0x040f tx timeout [ 59.480590][ T26] Bluetooth: hci2: command 0x040f tx timeout [ 59.486685][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.499205][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.510204][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.520344][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.528873][ C0] hrtimer: interrupt took 63817 ns [ 59.531530][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.548645][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.605460][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.623216][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.633647][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.653303][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.665089][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.677564][ T4275] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.4'. [ 59.678608][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.699931][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.710058][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.720739][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.732182][ T4277] netlink: 'syz.3.4': attribute type 27 has an invalid length. [ 59.733374][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.745820][ T4277] netlink: 'syz.3.4': attribute type 3 has an invalid length. [ 59.751526][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.769552][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.804624][ T1221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.824517][ T1221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.872927][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.885550][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.895577][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.912171][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.921725][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.930606][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.940484][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.005987][ T4276] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6'. [ 60.033540][ T4242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.062277][ T4242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.096753][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.256644][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.272333][ T4281] netlink: 'syz.3.7': attribute type 1 has an invalid length. [ 60.297599][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.303233][ T4281] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.7'. [ 60.333923][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.358566][ T4242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.371594][ T4242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.379579][ T4283] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8'. [ 60.418632][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.437672][ T4242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.447494][ T4242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.507875][ T4288] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9'. [ 60.550486][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.729512][ T4298] netlink: 'syz.3.12': attribute type 21 has an invalid length. [ 60.803822][ T4294] netlink: 'syz.1.11': attribute type 10 has an invalid length. [ 60.858299][ T4294] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.868145][ T4294] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.928472][ T4294] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.935907][ T4294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.944613][ T4294] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.952026][ T4294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.046590][ T4294] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 61.084710][ T4300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 61.297036][ T1326] cfg80211: failed to load regulatory.db [ 61.637195][ T26] Bluetooth: hci1: command 0x0419 tx timeout [ 61.654808][ T26] Bluetooth: hci0: command 0x0419 tx timeout [ 61.715796][ T26] Bluetooth: hci3: command 0x0419 tx timeout [ 61.899125][ T26] Bluetooth: hci2: command 0x0419 tx timeout [ 61.981780][ T26] Bluetooth: hci4: command 0x0419 tx timeout [ 62.122453][ T4310] netlink: 'syz.0.16': attribute type 21 has an invalid length. [ 62.184518][ T4310] netlink: 'syz.0.16': attribute type 1 has an invalid length. [ 62.222811][ T4294] syz.1.11 (4294) used greatest stack depth: 20144 bytes left [ 62.633940][ T4325] netlink: 'syz.3.13': attribute type 3 has an invalid length. [ 62.642877][ T4325] netlink: 'syz.3.13': attribute type 153 has an invalid length. [ 62.660574][ T4325] netlink: 85736 bytes leftover after parsing attributes in process `syz.3.13'. [ 62.769381][ T4310] device syzkaller0 entered promiscuous mode [ 62.821166][ T4326] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.18'. [ 62.823599][ T4328] netlink: 152 bytes leftover after parsing attributes in process `syz.4.20'. [ 62.924097][ T4326] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 62.994868][ T4333] netlink: 152 bytes leftover after parsing attributes in process `syz.2.21'. [ 63.277630][ T4340] netlink: 'syz.2.23': attribute type 21 has an invalid length. [ 63.409832][ T4342] netlink: 132 bytes leftover after parsing attributes in process `syz.3.25'. [ 63.983272][ T4345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 63.997189][ T4352] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.005259][ T4352] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.077020][ T4352] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.084337][ T4352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.092879][ T4352] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.100170][ T4352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.136886][ T4352] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 64.163098][ T4344] syz.0.26 (4344) used greatest stack depth: 18392 bytes left [ 64.864670][ T4400] validate_nla: 5 callbacks suppressed [ 64.864689][ T4400] netlink: 'syz.4.37': attribute type 27 has an invalid length. [ 64.945656][ T4399] netlink: 'syz.1.42': attribute type 12 has an invalid length. [ 64.955991][ T4400] netlink: 'syz.4.37': attribute type 3 has an invalid length. [ 64.984490][ T4399] __nla_validate_parse: 8 callbacks suppressed [ 64.984506][ T4399] netlink: 132 bytes leftover after parsing attributes in process `syz.1.42'. [ 65.094877][ T4391] netlink: 'syz.0.38': attribute type 21 has an invalid length. [ 65.097514][ T4404] netlink: 'syz.1.42': attribute type 3 has an invalid length. [ 65.110757][ T4404] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.42'. [ 65.118258][ T4395] netlink: 14 bytes leftover after parsing attributes in process `syz.2.40'. [ 65.154745][ T4403] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.42'. [ 65.178475][ T4401] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.42'. [ 65.200902][ T4395] netlink: 14 bytes leftover after parsing attributes in process `syz.2.40'. [ 65.237899][ T4395] netlink: 14 bytes leftover after parsing attributes in process `syz.2.40'. [ 65.274536][ T4399] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.42'. [ 65.319018][ T4395] netlink: 14 bytes leftover after parsing attributes in process `syz.2.40'. [ 65.350969][ T4395] netlink: 14 bytes leftover after parsing attributes in process `syz.2.40'. [ 65.384002][ T4409] netlink: 'syz.0.54': attribute type 3 has an invalid length. [ 65.746364][ T4409] netlink: 'syz.0.54': attribute type 21 has an invalid length. [ 65.777794][ T4405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 66.138419][ T4424] netlink: 'syz.0.48': attribute type 10 has an invalid length. [ 66.194330][ T4424] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.202791][ T4424] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.327059][ T4424] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.334384][ T4424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.342409][ T4424] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.349818][ T4424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.400567][ T4424] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 66.627524][ T4452] syz.1.56 uses obsolete (PF_INET,SOCK_PACKET) [ 66.826765][ T4457] netlink: 'syz.0.57': attribute type 12 has an invalid length. [ 66.935655][ T4457] netlink: 'syz.0.57': attribute type 3 has an invalid length. [ 68.965556][ T4491] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.972992][ T4491] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.012786][ T4491] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.019919][ T4491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.027814][ T4491] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.034942][ T4491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.064681][ T4491] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 69.148940][ T4511] Zero length message leads to an empty skb [ 70.391885][ T4550] __nla_validate_parse: 16 callbacks suppressed [ 70.391901][ T4550] netlink: 208188 bytes leftover after parsing attributes in process `syz.1.86'. [ 70.456965][ T4543] netlink: 10 bytes leftover after parsing attributes in process `syz.4.85'. [ 70.481179][ T4544] validate_nla: 7 callbacks suppressed [ 70.481192][ T4544] netlink: 'syz.3.84': attribute type 49 has an invalid length. [ 70.927709][ T4562] netlink: 'syz.4.91': attribute type 29 has an invalid length. [ 70.990088][ T4562] netlink: 'syz.4.91': attribute type 29 has an invalid length. [ 71.029244][ T4568] netlink: 'syz.4.91': attribute type 29 has an invalid length. [ 71.156816][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.163359][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.185323][ T4557] netlink: 'syz.4.91': attribute type 4 has an invalid length. [ 71.219263][ T4557] netlink: 205184 bytes leftover after parsing attributes in process `syz.4.91'. [ 71.313215][ T4573] sctp: [Deprecated]: syz.2.93 (pid 4573) Use of int in max_burst socket option deprecated. [ 71.313215][ T4573] Use struct sctp_assoc_value instead [ 71.661358][ T4585] netlink: 'syz.3.98': attribute type 13 has an invalid length. [ 71.848904][ T4585] netlink: 24643 bytes leftover after parsing attributes in process `syz.3.98'. [ 71.988738][ T4591] netlink: 'syz.2.99': attribute type 2 has an invalid length. [ 72.033333][ T4591] netlink: 'syz.2.99': attribute type 1 has an invalid length. [ 72.052845][ T4591] netlink: 'syz.2.99': attribute type 1 has an invalid length. [ 72.061707][ T4591] netlink: 'syz.2.99': attribute type 11 has an invalid length. [ 72.089068][ T4591] netlink: 198172 bytes leftover after parsing attributes in process `syz.2.99'. [ 72.145912][ T4588] syz.4.96 (4588) used obsolete PPPIOCDETACH ioctl [ 72.544013][ T4607] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.104'. [ 73.952291][ T4645] netlink: 144 bytes leftover after parsing attributes in process `syz.3.117'. [ 74.043762][ T4649] netlink: 152 bytes leftover after parsing attributes in process `syz.1.116'. [ 74.162826][ T4660] netlink: 132 bytes leftover after parsing attributes in process `syz.0.120'. [ 74.446656][ T4679] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.125'. [ 75.526884][ T4707] validate_nla: 8 callbacks suppressed [ 75.526893][ T4707] netlink: 'syz.0.133': attribute type 49 has an invalid length. [ 75.554358][ T4714] netlink: 'syz.3.135': attribute type 21 has an invalid length. [ 76.407889][ T4711] device sit0 entered promiscuous mode [ 76.494855][ T4730] __nla_validate_parse: 1 callbacks suppressed [ 76.494869][ T4730] netlink: 207508 bytes leftover after parsing attributes in process `syz.0.139'. [ 76.724593][ T4714] netlink: 'syz.3.135': attribute type 21 has an invalid length. [ 76.737183][ T4714] netlink: 'syz.3.135': attribute type 6 has an invalid length. [ 77.261016][ T4763] netlink: 'syz.0.149': attribute type 1 has an invalid length. [ 77.294859][ T4763] netlink: 'syz.0.149': attribute type 3 has an invalid length. [ 77.308454][ T4763] netlink: 132 bytes leftover after parsing attributes in process `syz.0.149'. [ 77.498343][ T4780] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.692190][ T4794] pim6reg0: tun_chr_ioctl cmd 21531 [ 77.824945][ T4803] netlink: 'syz.1.156': attribute type 10 has an invalid length. [ 77.835779][ T4803] device geneve0 entered promiscuous mode [ 77.859764][ T4803] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 78.125831][ T4818] netlink: 199556 bytes leftover after parsing attributes in process `syz.2.162'. [ 78.302299][ T4810] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 78.362943][ T4816] netlink: 132 bytes leftover after parsing attributes in process `syz.4.161'. [ 78.481757][ T4828] netlink: 'syz.3.165': attribute type 2 has an invalid length. [ 78.575112][ T4835] netlink: 40 bytes leftover after parsing attributes in process `syz.0.166'. [ 78.651980][ T4832] netlink: 830 bytes leftover after parsing attributes in process `syz.0.166'. [ 78.690557][ T4835] netlink: 40 bytes leftover after parsing attributes in process `syz.0.166'. [ 78.705521][ T4835] netlink: 13 bytes leftover after parsing attributes in process `syz.0.166'. [ 78.831731][ T4850] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.171'. [ 78.964812][ T4856] netlink: 199556 bytes leftover after parsing attributes in process `syz.1.174'. [ 79.305831][ T4875] netlink: 'syz.4.188': attribute type 39 has an invalid length. [ 80.235006][ T4895] cgroup: fork rejected by pids controller in /syz0 [ 80.448344][ T4896] netlink: 'syz.4.181': attribute type 10 has an invalid length. [ 80.659576][ T387] wlan1: Trigger new scan to find an IBSS to join [ 81.003521][ T4910] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 81.095321][ T4910] CPU: 1 PID: 4910 Comm: syz.2.185 Not tainted syzkaller #0 [ 81.102659][ T4910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 81.112745][ T4910] Call Trace: [ 81.116036][ T4910] [ 81.118983][ T4910] dump_stack_lvl+0x188/0x250 [ 81.123706][ T4910] ? show_regs_print_info+0x20/0x20 [ 81.128935][ T4910] ? load_image+0x410/0x410 [ 81.133509][ T4910] sysfs_warn_dup+0x8a/0xa0 [ 81.138037][ T4910] sysfs_do_create_link_sd+0xc0/0x110 [ 81.143437][ T4910] device_add+0x83b/0x1050 [ 81.147903][ T4910] wiphy_register+0x1e74/0x2c40 [ 81.152834][ T4910] ? cfg80211_event_work+0x40/0x40 [ 81.157973][ T4910] ? minstrel_ht_alloc+0x807/0x980 [ 81.163138][ T4910] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 81.169245][ T4910] ieee80211_register_hw+0x2a03/0x3a60 [ 81.174763][ T4910] ? ieee80211_register_hw+0xa91/0x3a60 [ 81.180373][ T4910] ? ieee80211_tasklet_handler+0x20/0x20 [ 81.186060][ T4910] ? rcu_is_watching+0x11/0xa0 [ 81.190984][ T4910] ? hrtimer_init+0x10c/0x220 [ 81.195698][ T4910] mac80211_hwsim_new_radio+0x209d/0x4050 [ 81.201501][ T4910] hwsim_new_radio_nl+0xa7d/0xc50 [ 81.206604][ T4910] genl_rcv_msg+0xd0b/0xfa0 [ 81.211178][ T4910] ? genl_bind+0x370/0x370 [ 81.215655][ T4910] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 81.221495][ T4910] ? verify_lock_unused+0x140/0x140 [ 81.226719][ T4910] ? perf_trace_lock_acquire+0x341/0x3f0 [ 81.232398][ T4910] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 81.239004][ T4910] ? perf_trace_lock+0xe4/0x390 [ 81.243894][ T4910] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 81.250300][ T4910] netlink_rcv_skb+0x1e9/0x430 [ 81.255090][ T4910] ? genl_bind+0x370/0x370 [ 81.259542][ T4910] ? netlink_ack+0xb10/0xb10 [ 81.264193][ T4910] ? down_read+0x1aa/0x2e0 [ 81.268648][ T4910] genl_rcv+0x24/0x40 [ 81.272654][ T4910] netlink_unicast+0x78f/0x940 [ 81.277473][ T4910] netlink_sendmsg+0x8ba/0xbe0 [ 81.282288][ T4910] ? netlink_getsockopt+0x570/0x570 [ 81.287519][ T4910] ? aa_sock_msg_perm+0x94/0x150 [ 81.292501][ T4910] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 81.297807][ T4910] ? security_socket_sendmsg+0x7c/0xa0 [ 81.303286][ T4910] ? netlink_getsockopt+0x570/0x570 [ 81.308521][ T4910] ____sys_sendmsg+0x5be/0x8f0 [ 81.313346][ T4910] ? __sys_sendmsg_sock+0x30/0x30 [ 81.318441][ T4910] ? import_iovec+0x6f/0xa0 [ 81.322992][ T4910] ___sys_sendmsg+0x236/0x2e0 [ 81.327722][ T4910] ? __sys_sendmsg+0x290/0x290 [ 81.332550][ T4910] ? trace_event_raw_event_lock+0x250/0x250 [ 81.338559][ T4910] __se_sys_sendmsg+0x1b7/0x2a0 [ 81.343452][ T4910] ? __x64_sys_sendmsg+0x80/0x80 [ 81.348410][ T4910] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 81.354456][ T4910] ? lockdep_hardirqs_on+0x94/0x140 [ 81.359694][ T4910] do_syscall_64+0x4c/0xa0 [ 81.364135][ T4910] ? clear_bhb_loop+0x30/0x80 [ 81.368836][ T4910] ? clear_bhb_loop+0x30/0x80 [ 81.373541][ T4910] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.379463][ T4910] RIP: 0033:0x7fcb490c0e59 [ 81.383898][ T4910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.403522][ T4910] RSP: 002b:00007fcb472f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.411965][ T4910] RAX: ffffffffffffffda RBX: 00007fcb4933a090 RCX: 00007fcb490c0e59 [ 81.419960][ T4910] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 81.427946][ T4910] RBP: 00007fcb49156e6f R08: 0000000000000000 R09: 0000000000000000 [ 81.435937][ T4910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.443926][ T4910] R13: 00007fcb4933a128 R14: 00007fcb4933a090 R15: 00007fff4bf01a08 [ 81.451963][ T4910] [ 82.674669][ T4935] chnl_net:caif_netlink_parms(): no params data found [ 82.886995][ T4958] __nla_validate_parse: 4 callbacks suppressed [ 82.887009][ T4958] netlink: 60 bytes leftover after parsing attributes in process `syz.3.200'. [ 83.231072][ T4935] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.301112][ T4935] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.367568][ T4935] device bridge_slave_0 entered promiscuous mode [ 83.469198][ T4935] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.476290][ T4935] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.520250][ T4935] device bridge_slave_1 entered promiscuous mode [ 83.539445][ T4973] netlink: 'syz.3.203': attribute type 21 has an invalid length. [ 83.593566][ T4986] netlink: 'syz.3.203': attribute type 13 has an invalid length. [ 83.620612][ T144] wlan1: Trigger new scan to find an IBSS to join [ 83.631914][ T4986] netlink: 152 bytes leftover after parsing attributes in process `syz.3.203'. [ 83.729140][ T4986] erspan0: refused to change device tx_queue_len [ 83.744499][ T4986] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 83.830830][ T4935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.967604][ T4996] netlink: 'syz.3.208': attribute type 1 has an invalid length. [ 83.997712][ T4935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.009097][ T4996] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.208'. [ 84.099080][ T4234] Bluetooth: hci2: command 0x0409 tx timeout [ 84.106285][ T4988] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.206'. [ 84.161976][ T4935] team0: Port device team_slave_0 added [ 84.210460][ T4935] team0: Port device team_slave_1 added [ 84.231320][ T5005] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.210'. [ 84.295785][ T4935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.308242][ T4935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.398040][ T4935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.424346][ T4935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.437983][ T4935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.508336][ T4935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.533781][ T5021] netlink: 'syz.4.215': attribute type 1 has an invalid length. [ 84.552145][ T5014] netlink: 'syz.1.212': attribute type 39 has an invalid length. [ 84.560441][ T5021] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.215'. [ 84.609773][ T5021] netlink: 9 bytes leftover after parsing attributes in process `syz.4.215'. [ 84.815329][ T4935] device hsr_slave_0 entered promiscuous mode [ 84.856193][ T4935] device hsr_slave_1 entered promiscuous mode [ 84.866262][ T4935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.879706][ T4935] Cannot create hsr debugfs directory [ 84.997877][ T5033] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.218'. [ 85.175670][ T5034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.225096][ T5042] netlink: 76 bytes leftover after parsing attributes in process `syz.3.220'. [ 85.284325][ T4935] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.441378][ T4935] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.871015][ T4935] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.885821][ T5067] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.226'. [ 85.959751][ T5067] netlink: del zone limit has 8 unknown bytes [ 86.021370][ T4935] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.179501][ T4229] Bluetooth: hci2: command 0x041b tx timeout [ 86.498211][ T5081] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 86.659497][ T387] wlan1: Trigger new scan to find an IBSS to join [ 86.856870][ T4935] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.905246][ T4935] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.980173][ T4935] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.011094][ T4935] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.261876][ T5105] netlink: 'syz.3.237': attribute type 29 has an invalid length. [ 87.306142][ T5103] netlink: 'syz.2.239': attribute type 3 has an invalid length. [ 87.378508][ T5107] netlink: zone id is out of range [ 87.416770][ T5107] netlink: zone id is out of range [ 87.470378][ T5107] netlink: get zone limit has 8 unknown bytes [ 87.630755][ T4242] wlan1: Creating new IBSS network, BSSID 2a:3d:09:8a:b6:6e [ 87.803698][ T4935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.936246][ T4935] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.958825][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.978826][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.040451][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.064538][ T5119] netlink: 'syz.1.242': attribute type 9 has an invalid length. [ 88.081843][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.099727][ T5119] __nla_validate_parse: 3 callbacks suppressed [ 88.099779][ T5119] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.242'. [ 88.122293][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.129430][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.188562][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.217726][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.239813][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.246917][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.269139][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 88.303639][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.322090][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.353207][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.411540][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.430562][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.468032][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.505526][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.542049][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.581058][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.624617][ T4935] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.658645][ T4935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.809531][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.825582][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.850057][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.097985][ T5143] netlink: 'syz.1.248': attribute type 11 has an invalid length. [ 89.159837][ T5143] netlink: 'syz.1.248': attribute type 1 has an invalid length. [ 89.167510][ T5143] netlink: 'syz.1.248': attribute type 1 has an invalid length. [ 89.192726][ T5143] netlink: 'syz.1.248': attribute type 2 has an invalid length. [ 89.216948][ T5143] netlink: 198236 bytes leftover after parsing attributes in process `syz.1.248'. [ 89.232172][ T5151] netlink: 'syz.2.251': attribute type 10 has an invalid length. [ 89.241897][ T5151] netlink: 40 bytes leftover after parsing attributes in process `syz.2.251'. [ 89.271152][ T5151] batman_adv: batadv0: Adding interface: veth1_vlan [ 89.277784][ T5151] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.537466][ T5151] batman_adv: batadv0: Interface activated: veth1_vlan [ 90.340237][ T4229] Bluetooth: hci2: command 0x0419 tx timeout [ 92.362074][ T5155] netlink: 'syz.3.252': attribute type 10 has an invalid length. [ 92.401495][ T5155] netlink: 40 bytes leftover after parsing attributes in process `syz.3.252'. [ 92.438600][ T5155] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 92.464049][ T5155] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.537989][ T5155] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 92.630827][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.642841][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.778312][ T4935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.886952][ T5122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 92.899827][ T5122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.943301][ T4248] device hsr_slave_0 left promiscuous mode [ 92.969239][ T4248] device hsr_slave_1 left promiscuous mode [ 92.977307][ T4248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.995559][ T4248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.009977][ T4248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.017486][ T4248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.038357][ T4248] device bridge_slave_1 left promiscuous mode [ 93.046903][ T4248] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.087975][ T4248] device bridge_slave_0 left promiscuous mode [ 93.114813][ T4248] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.168517][ T4248] device veth1_macvtap left promiscuous mode [ 93.175062][ T4248] device veth0_macvtap left promiscuous mode [ 93.182475][ T4248] device veth1_vlan left promiscuous mode [ 93.188368][ T4248] device veth0_vlan left promiscuous mode [ 93.440139][ T4248] team0 (unregistering): Port device team_slave_1 removed [ 93.457829][ T4248] team0 (unregistering): Port device team_slave_0 removed [ 93.495452][ T4248] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.513902][ T4248] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.582932][ T5211] netlink: 196 bytes leftover after parsing attributes in process `syz.1.264'. [ 93.593843][ T4248] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 93.604415][ T4248] bond0 (unregistering): Released all slaves [ 93.655309][ T5122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 93.663884][ T5122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.672529][ T5122] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.680604][ T5122] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.688385][ T4935] device veth0_vlan entered promiscuous mode [ 93.716028][ T5194] device syzkaller0 entered promiscuous mode [ 93.761036][ T4935] device veth1_vlan entered promiscuous mode [ 93.929553][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 93.951916][ T5217] netlink: 'syz.4.267': attribute type 4 has an invalid length. [ 93.957171][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.965498][ T5217] netlink: 'syz.4.267': attribute type 3 has an invalid length. [ 93.980957][ T4935] device veth0_macvtap entered promiscuous mode [ 93.991459][ T5217] netlink: 132 bytes leftover after parsing attributes in process `syz.4.267'. [ 94.016268][ T4935] device veth1_macvtap entered promiscuous mode [ 94.073930][ T4935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.085597][ T4935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.096424][ T4935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.107512][ T4935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.117605][ T4935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.135309][ T4935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.146108][ T4935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.156768][ T4935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.168685][ T4935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.238702][ T5220] netlink: 'syz.4.267': attribute type 22 has an invalid length. [ 94.254647][ T5220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.267'. [ 94.298474][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 94.322817][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 94.337192][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 94.357753][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.372620][ T4935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.386454][ T4935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.396638][ T4935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.407433][ T4935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.418045][ T4935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.429607][ T4935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.439659][ T4935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.450358][ T4935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.462363][ T4935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.482728][ T5122] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.507665][ T5122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.528250][ T4935] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.537848][ T4935] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.552870][ T4935] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.563524][ T4935] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.753082][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.771865][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.797442][ T5122] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.820738][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.834280][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.839064][ T5242] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.274'. [ 94.887360][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 94.927065][ T5245] netlink: 10 bytes leftover after parsing attributes in process `syz.3.275'. [ 95.007436][ T5248] netlink: 199816 bytes leftover after parsing attributes in process `syz.0.187'. [ 95.067229][ T5251] netlink: 'syz.3.276': attribute type 2 has an invalid length. [ 95.116213][ T5251] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.276'. [ 95.513857][ T5266] netlink: 'syz.4.281': attribute type 21 has an invalid length. [ 95.545844][ T5266] netlink: 'syz.4.281': attribute type 1 has an invalid length. [ 95.580601][ T5266] netlink: 'syz.4.281': attribute type 2 has an invalid length. [ 95.615014][ T5266] netlink: 9062 bytes leftover after parsing attributes in process `syz.4.281'. [ 95.884437][ T5281] netlink: 132 bytes leftover after parsing attributes in process `syz.4.285'. [ 96.298204][ T5292] netlink: 'syz.1.287': attribute type 20 has an invalid length. [ 96.685544][ T5313] delete_channel: no stack [ 96.700383][ T5313] delete_channel: no stack [ 96.772698][ T5315] pim6reg: tun_chr_ioctl cmd 1074025677 [ 96.778403][ T5315] pim6reg: linktype set to 823 [ 96.878518][ T5315] netlink: 14538 bytes leftover after parsing attributes in process `syz.1.294'. [ 98.153650][ T5383] netlink: 'syz.0.313': attribute type 10 has an invalid length. [ 98.216640][ T5383] team0: Device nlmon0 is of different type [ 98.357547][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 98.406771][ T5394] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.849108][ T5407] __nla_validate_parse: 3 callbacks suppressed [ 98.849124][ T5407] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.321'. [ 99.076898][ T5415] IPv6: Can't replace route, no match found [ 99.146850][ T5415] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.324'. [ 99.413723][ T5431] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.330'. [ 99.771354][ T5442] netlink: 'syz.0.332': attribute type 29 has an invalid length. [ 99.958674][ T5442] netlink: 'syz.0.332': attribute type 29 has an invalid length. [ 100.226360][ T5442] netlink: 'syz.0.332': attribute type 29 has an invalid length. [ 100.447442][ T5442] netlink: 'syz.0.332': attribute type 4 has an invalid length. [ 100.495985][ T5442] netlink: 205184 bytes leftover after parsing attributes in process `syz.0.332'. [ 100.791788][ T5455] device syzkaller0 entered promiscuous mode [ 101.617334][ T5494] netlink: 'syz.1.348': attribute type 10 has an invalid length. [ 101.820859][ T5494] team0: Device wg1 is of different type [ 102.377527][ T5492] delete_channel: no stack [ 102.689494][ T5514] netlink: 152 bytes leftover after parsing attributes in process `syz.4.355'. [ 103.059382][ T5502] netlink: 'syz.0.351': attribute type 29 has an invalid length. [ 103.073608][ T5515] netlink: 'syz.1.354': attribute type 39 has an invalid length. [ 103.103394][ T5524] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.358'. [ 103.148398][ T5522] netlink: 'syz.3.357': attribute type 10 has an invalid length. [ 103.163925][ T5522] netlink: 55 bytes leftover after parsing attributes in process `syz.3.357'. [ 103.238065][ T5501] delete_channel: no stack [ 103.330031][ T5530] netlink: 'syz.1.360': attribute type 3 has an invalid length. [ 103.370702][ T5530] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.360'. [ 103.829242][ T5502] netlink: 'syz.0.351': attribute type 29 has an invalid length. [ 105.495844][ T5587] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.378'. [ 106.970523][ T5624] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.393'. [ 107.677400][ T5654] netlink: 14 bytes leftover after parsing attributes in process `syz.1.403'. [ 107.749775][ T5656] validate_nla: 2 callbacks suppressed [ 107.749790][ T5656] netlink: 'syz.2.400': attribute type 29 has an invalid length. [ 107.767690][ T5655] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.403'. [ 107.891266][ T5654] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.975826][ T5654] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.036226][ T5654] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 108.106992][ T5654] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.114697][ T5654] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.158919][ T5654] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 108.210087][ T5654] bond0 (unregistering): Released all slaves [ 108.249281][ T5656] netlink: 'syz.2.400': attribute type 29 has an invalid length. [ 108.278009][ T5644] netlink: 'syz.2.400': attribute type 29 has an invalid length. [ 108.322396][ T5642] delete_channel: no stack [ 109.213001][ T5693] netlink: 199816 bytes leftover after parsing attributes in process `syz.1.414'. [ 109.387916][ T5697] netlink: 'syz.1.416': attribute type 4 has an invalid length. [ 109.413650][ T5697] netlink: 'syz.1.416': attribute type 3 has an invalid length. [ 109.437972][ T5697] netlink: 153952 bytes leftover after parsing attributes in process `syz.1.416'. [ 110.347831][ T5736] netlink: 199816 bytes leftover after parsing attributes in process `syz.1.426'. [ 110.827197][ T5732] delete_channel: no stack [ 111.012166][ T5748] netlink: 'syz.1.430': attribute type 3 has an invalid length. [ 111.029222][ T5748] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.430'. [ 111.133921][ T5748] netlink: 'syz.1.430': attribute type 3 has an invalid length. [ 111.219657][ T5748] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.430'. [ 111.525832][ T5770] netlink: 199816 bytes leftover after parsing attributes in process `syz.2.437'. [ 111.561539][ T5767] device syzkaller0 entered promiscuous mode [ 111.588641][ T5768] netlink: 'syz.1.436': attribute type 10 has an invalid length. [ 111.603563][ T5768] netlink: 2 bytes leftover after parsing attributes in process `syz.1.436'. [ 111.629204][ T5768] device hsr0 entered promiscuous mode [ 111.648620][ T5768] bridge0: port 3(hsr0) entered blocking state [ 111.655974][ T5768] bridge0: port 3(hsr0) entered disabled state [ 111.987670][ T5790] netlink: 143108 bytes leftover after parsing attributes in process `syz.2.443'. [ 112.089675][ T5789] netlink: 'syz.1.442': attribute type 25 has an invalid length. [ 112.120099][ T5789] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.442'. [ 112.600778][ T5815] netlink: 199816 bytes leftover after parsing attributes in process `syz.2.449'. [ 112.909161][ T5824] device syzkaller0 entered promiscuous mode [ 113.357788][ T5848] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 113.381816][ T5852] netlink: 'syz.3.460': attribute type 9 has an invalid length. [ 113.398510][ T5852] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.460'. [ 113.436741][ T5848] device syzkaller0 entered promiscuous mode [ 113.689018][ T5853] netlink: 'syz.3.460': attribute type 9 has an invalid length. [ 113.696687][ T5853] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.460'. [ 113.939328][ T5864] netlink: 199816 bytes leftover after parsing attributes in process `syz.3.463'. [ 115.062586][ T5871] netlink: 'syz.4.465': attribute type 10 has an invalid length. [ 115.192416][ T5871] device hsr0 entered promiscuous mode [ 115.217209][ T5871] bridge0: port 3(hsr0) entered blocking state [ 115.263722][ T5871] bridge0: port 3(hsr0) entered disabled state [ 115.334348][ T5871] bridge0: port 3(hsr0) entered blocking state [ 115.340699][ T5871] bridge0: port 3(hsr0) entered forwarding state [ 115.586225][ T5891] netlink: 'syz.1.471': attribute type 33 has an invalid length. [ 115.922311][ T5900] netlink: 'syz.1.474': attribute type 10 has an invalid length. [ 116.254035][ T5914] __nla_validate_parse: 4 callbacks suppressed [ 116.254053][ T5914] netlink: 143108 bytes leftover after parsing attributes in process `syz.3.479'. [ 116.454725][ T5920] netlink: 'syz.0.481': attribute type 10 has an invalid length. [ 116.472351][ T5920] netlink: 2 bytes leftover after parsing attributes in process `syz.0.481'. [ 116.483887][ T5920] device hsr0 entered promiscuous mode [ 116.490672][ T5920] bridge0: port 3(hsr0) entered blocking state [ 116.497426][ T5920] bridge0: port 3(hsr0) entered disabled state [ 116.535376][ T5920] bridge0: port 3(hsr0) entered blocking state [ 116.541855][ T5920] bridge0: port 3(hsr0) entered forwarding state [ 116.744650][ T5936] netlink: 184 bytes leftover after parsing attributes in process `syz.1.487'. [ 116.814131][ T5937] netlink: 'syz.4.486': attribute type 25 has an invalid length. [ 116.814794][ T5940] netlink: 'syz.1.487': attribute type 3 has an invalid length. [ 116.838364][ T5937] netlink: 'syz.4.486': attribute type 9 has an invalid length. [ 116.865179][ T5940] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.487'. [ 116.866653][ T5934] netlink: 'syz.4.486': attribute type 25 has an invalid length. [ 116.963463][ T5944] tap0: tun_chr_ioctl cmd 2148553947 [ 117.138244][ T5951] netlink: 199816 bytes leftover after parsing attributes in process `syz.1.490'. [ 117.242105][ T5960] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.493'. [ 117.269186][ T5960] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 117.322045][ T5958] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.494'. [ 117.364821][ T5963] netlink: 40 bytes leftover after parsing attributes in process `syz.3.495'. [ 117.470110][ T5971] sctp: [Deprecated]: syz.3.495 (pid 5971) Use of struct sctp_assoc_value in delayed_ack socket option. [ 117.470110][ T5971] Use struct sctp_sack_info instead [ 117.596669][ T5958] device syzkaller0 entered promiscuous mode [ 117.623201][ T5963] netlink: 40 bytes leftover after parsing attributes in process `syz.3.495'. [ 117.632274][ T5963] netlink: 13 bytes leftover after parsing attributes in process `syz.3.495'. [ 120.969198][ T5979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.997770][ T5979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.846690][ T5979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.423642][ T5979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.958670][ T5979] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 122.970464][ T5979] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 125.798510][ T5996] __nla_validate_parse: 1 callbacks suppressed [ 125.798525][ T5996] netlink: 132 bytes leftover after parsing attributes in process `syz.1.505'. [ 125.950182][ T6018] bridge0: port 3(hsr0) entered disabled state [ 125.956520][ T6018] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.116183][ T6032] netlink: 199816 bytes leftover after parsing attributes in process `syz.1.515'. [ 126.439591][ T6036] validate_nla: 2 callbacks suppressed [ 126.439606][ T6036] netlink: 'syz.4.516': attribute type 2 has an invalid length. [ 126.746980][ T6051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.520'. [ 127.147133][ T6063] netlink: 48 bytes leftover after parsing attributes in process `syz.4.524'. [ 127.251316][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.524'. [ 127.916981][ T6084] netlink: 199556 bytes leftover after parsing attributes in process `syz.3.530'. [ 128.137844][ T6092] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.533'. [ 128.161177][ T6098] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.533'. [ 128.578785][ T6103] netlink: 'syz.0.537': attribute type 2 has an invalid length. [ 128.666485][ T6103] netlink: 51 bytes leftover after parsing attributes in process `syz.0.537'. [ 128.838095][ T6107] netlink: 60 bytes leftover after parsing attributes in process `syz.4.538'. [ 129.977811][ T6130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.001999][ T6130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.669362][ T6130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.774616][ T6130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.933796][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.944313][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.075609][ T6166] __nla_validate_parse: 1 callbacks suppressed [ 134.075648][ T6166] netlink: 199556 bytes leftover after parsing attributes in process `syz.0.557'. [ 134.979104][ T4234] Bluetooth: hci5: command 0x0409 tx timeout [ 137.059256][ T4234] Bluetooth: hci5: command 0x041b tx timeout [ 137.539103][ T6156] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.554'. [ 137.567312][ T6172] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.559'. [ 137.707063][ T6175] netlink: 40 bytes leftover after parsing attributes in process `syz.1.560'. [ 137.757319][ T6177] netlink: 'syz.0.561': attribute type 29 has an invalid length. [ 137.862716][ T6177] netlink: 'syz.0.561': attribute type 29 has an invalid length. [ 138.220524][ T6199] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 138.331924][ T6200] netlink: 199816 bytes leftover after parsing attributes in process `syz.4.567'. [ 138.369506][ T6153] chnl_net:caif_netlink_parms(): no params data found [ 138.399258][ T6202] netlink: 132 bytes leftover after parsing attributes in process `syz.0.569'. [ 138.623496][ T6207] netlink: 14 bytes leftover after parsing attributes in process `syz.1.570'. [ 138.662255][ T6207] device hsr_slave_0 left promiscuous mode [ 138.715299][ T6207] device hsr_slave_1 left promiscuous mode [ 138.839888][ T6207] bridge0: port 3(hsr0) entered disabled state [ 139.066242][ T6209] netlink: 40 bytes leftover after parsing attributes in process `syz.0.572'. [ 139.148920][ T13] Bluetooth: hci5: command 0x040f tx timeout [ 139.241398][ T6153] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.248550][ T6153] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.262656][ T6153] device bridge_slave_0 entered promiscuous mode [ 139.271656][ T6153] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.283034][ T6153] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.291444][ T6153] device bridge_slave_1 entered promiscuous mode [ 139.326817][ T6153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.338455][ T6153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.363788][ T6222] device wlan1 entered promiscuous mode [ 139.414368][ T6222] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.574'. [ 139.485629][ T6153] team0: Port device team_slave_0 added [ 139.497133][ T6153] team0: Port device team_slave_1 added [ 139.523829][ T6153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.530889][ T6153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.622790][ T6237] netlink: 199816 bytes leftover after parsing attributes in process `syz.4.580'. [ 139.631436][ T6153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.660535][ T6229] netlink: 'syz.0.577': attribute type 2 has an invalid length. [ 139.668187][ T6229] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.577'. [ 139.715397][ T6153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.735274][ T6153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.766239][ T6153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.877258][ T6153] device hsr_slave_0 entered promiscuous mode [ 139.884323][ T6153] device hsr_slave_1 entered promiscuous mode [ 139.891058][ T6153] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.898686][ T6153] Cannot create hsr debugfs directory [ 140.037081][ T6153] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 140.047529][ T6153] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 140.056818][ T6153] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 140.066437][ T6153] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 140.115328][ T6153] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.122422][ T6153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.129786][ T6153] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.136828][ T6153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.177206][ T6153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.193563][ T6153] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.201836][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.211598][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.220225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 140.232519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 140.240214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 140.256127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 140.264953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.273623][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.280710][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.293003][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 140.302188][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.310669][ T4248] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.317708][ T4248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.345137][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 140.355222][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 140.377522][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 140.414224][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 140.444355][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 140.458103][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 140.503392][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 140.553994][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 140.597921][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 140.643564][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 140.687953][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 140.711612][ T6153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 140.727394][ T6263] netlink: 40 bytes leftover after parsing attributes in process `syz.4.584'. [ 140.791164][ T6269] netlink: 14 bytes leftover after parsing attributes in process `syz.3.588'. [ 140.833572][ T6269] device hsr_slave_0 left promiscuous mode [ 140.838123][ T6274] netlink: 'syz.0.589': attribute type 9 has an invalid length. [ 140.863546][ T6269] device hsr_slave_1 left promiscuous mode [ 140.885520][ T6274] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.589'. [ 141.088092][ T6278] netlink: 14 bytes leftover after parsing attributes in process `syz.4.590'. [ 141.134140][ T6284] netlink: 199816 bytes leftover after parsing attributes in process `syz.3.592'. [ 141.186152][ T6278] device hsr_slave_0 left promiscuous mode [ 141.219017][ T4234] Bluetooth: hci5: command 0x0419 tx timeout [ 141.226713][ T6278] device hsr_slave_1 left promiscuous mode [ 141.367412][ T6278] bridge0: port 3(hsr0) entered disabled state [ 141.394999][ T6291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.467321][ T6282] netlink: 15119 bytes leftover after parsing attributes in process `syz.1.591'. [ 141.509597][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 141.521701][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 141.538100][ T6153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.628163][ T6299] netlink: 'syz.0.597': attribute type 10 has an invalid length. [ 141.677061][ T6299] team0: Device vxcan1 is of different type [ 141.791593][ T6314] netlink: 'syz.1.600': attribute type 1 has an invalid length. [ 141.820122][ T6314] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.600'. [ 142.022439][ T6324] syz.4.603[6324] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.022749][ T6324] syz.4.603[6324] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.101366][ T6325] syz.4.603[6325] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.144922][ T6325] syz.4.603[6325] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.401335][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 142.510137][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 142.571197][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 142.608650][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 142.646653][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 142.666983][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 142.708509][ T6153] device veth0_vlan entered promiscuous mode [ 142.726912][ T6358] netlink: 'syz.4.612': attribute type 9 has an invalid length. [ 142.777212][ T6153] device veth1_vlan entered promiscuous mode [ 142.788420][ T6348] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 142.816840][ T6348] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 142.880554][ T6348] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 142.932878][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 142.958890][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 142.993631][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 143.012971][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 143.043322][ T6153] device veth0_macvtap entered promiscuous mode [ 143.084245][ T6153] device veth1_macvtap entered promiscuous mode [ 143.177654][ T6153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.221787][ T6153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.251559][ T6153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.297490][ T6153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.325988][ T6153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.345966][ T6153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.377893][ T6153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.398730][ T6153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.448924][ T6153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.470306][ T6153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.491341][ T6153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.531218][ T6153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.558609][ T6153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.590701][ T6153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.646891][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 143.668521][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 143.681211][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 143.694357][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 143.717015][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 143.740450][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 143.810938][ T6153] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.834668][ T6153] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.868791][ T6153] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.888427][ T6153] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.404584][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.457384][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.536297][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 144.573773][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.618938][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.765401][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 146.285542][ T6466] netlink: 'syz.4.638': attribute type 3 has an invalid length. [ 146.408040][ T6470] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.532405][ T6487] ÿÿÿÿÿÿ: renamed from bridge_slave_0 [ 146.725858][ T6489] netlink: 'syz.0.646': attribute type 2 has an invalid length. [ 146.762343][ T6489] __nla_validate_parse: 4 callbacks suppressed [ 146.762359][ T6489] netlink: 51 bytes leftover after parsing attributes in process `syz.0.646'. [ 146.862539][ T6501] netlink: 'syz.1.648': attribute type 3 has an invalid length. [ 146.909510][ T6501] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.648'. [ 147.014223][ T6495] netlink: 'syz.1.648': attribute type 3 has an invalid length. [ 147.038197][ T6495] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.648'. [ 147.329109][ T6507] netlink: 'syz.3.652': attribute type 39 has an invalid length. [ 147.384821][ T6513] netlink: 65023 bytes leftover after parsing attributes in process `syz.1.654'. [ 147.640203][ T6518] netlink: 'syz.3.657': attribute type 33 has an invalid length. [ 147.736947][ T6518] netlink: 152 bytes leftover after parsing attributes in process `syz.3.657'. [ 147.880250][ T6518] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 148.090942][ T6518] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 148.177784][ T6525] netlink: 'syz.3.657': attribute type 12 has an invalid length. [ 148.198305][ T6525] netlink: 132 bytes leftover after parsing attributes in process `syz.3.657'. [ 148.207608][ T6523] netlink: 'syz.1.656': attribute type 8 has an invalid length. [ 148.216252][ T6523] netlink: 156 bytes leftover after parsing attributes in process `syz.1.656'. [ 148.247494][ T6536] netlink: 'syz.4.660': attribute type 39 has an invalid length. [ 148.374920][ T6531] device sit0 entered promiscuous mode [ 148.395269][ T6543] netlink: 'syz.5.663': attribute type 29 has an invalid length. [ 148.797860][ T6565] netlink: 212912 bytes leftover after parsing attributes in process `syz.5.671'. [ 148.828252][ T6565] openvswitch: netlink: Key type 4112 is out of range max 29 [ 148.864197][ T6570] device syzkaller0 entered promiscuous mode [ 148.877498][ T6572] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.674'. [ 148.972386][ T6570] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.673'. [ 152.046350][ T6643] __nla_validate_parse: 70 callbacks suppressed [ 152.046365][ T6643] netlink: 48 bytes leftover after parsing attributes in process `syz.4.699'. [ 152.395701][ T6657] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.702'. [ 152.659705][ T6660] validate_nla: 1 callbacks suppressed [ 152.659735][ T6660] netlink: 'syz.4.703': attribute type 10 has an invalid length. [ 152.765788][ T6660] team0: Port device virt_wifi0 added [ 152.839116][ T6663] netlink: 'syz.4.703': attribute type 12 has an invalid length. [ 152.846982][ T6663] netlink: 132 bytes leftover after parsing attributes in process `syz.4.703'. [ 152.913184][ T6662] netlink: 'syz.4.703': attribute type 9 has an invalid length. [ 152.957296][ T6662] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.703'. [ 153.427731][ T6679] netlink: 132 bytes leftover after parsing attributes in process `syz.5.707'. [ 155.226107][ T6682] netlink: 'syz.0.709': attribute type 10 has an invalid length. [ 155.271805][ T6682] bridge0: port 3(hsr0) entered disabled state [ 155.278085][ T6682] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.285490][ T6682] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.319634][ T6682] bridge0: port 3(hsr0) entered blocking state [ 155.326021][ T6682] bridge0: port 3(hsr0) entered forwarding state [ 155.333533][ T6682] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.340641][ T6682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.347986][ T6682] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.355119][ T6682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.392199][ T6682] team0: Port device bridge0 added [ 156.771650][ T6721] netlink: 'syz.4.720': attribute type 10 has an invalid length. [ 156.793684][ T6721] netlink: 40 bytes leftover after parsing attributes in process `syz.4.720'. [ 156.814206][ T6728] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.723'. [ 156.989706][ T6742] netlink: 'syz.4.726': attribute type 27 has an invalid length. [ 157.013256][ T6742] netlink: 'syz.4.726': attribute type 4 has an invalid length. [ 157.045774][ T6742] netlink: 152 bytes leftover after parsing attributes in process `syz.4.726'. [ 158.058832][ T6767] netlink: 'syz.5.734': attribute type 21 has an invalid length. [ 158.153453][ T6767] netlink: 168 bytes leftover after parsing attributes in process `syz.5.734'. [ 158.710189][ T6799] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.745'. [ 159.270148][ T6826] netlink: 'syz.0.752': attribute type 10 has an invalid length. [ 159.293390][ T6826] netlink: 40 bytes leftover after parsing attributes in process `syz.0.752'. [ 159.308475][ T6826] batman_adv: batadv0: Adding interface: virt_wifi0 [ 159.318464][ T6826] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.349172][ T6826] batman_adv: batadv0: Interface activated: virt_wifi0 [ 159.693753][ T6842] netlink: 'syz.1.758': attribute type 10 has an invalid length. [ 159.724324][ T6842] netlink: 2 bytes leftover after parsing attributes in process `syz.1.758'. [ 159.783615][ T6847] netlink: 'syz.1.759': attribute type 10 has an invalid length. [ 159.855092][ T6847] team0: Port device macvlan0 added [ 159.937682][ T6856] netlink: 76 bytes leftover after parsing attributes in process `syz.4.760'. [ 160.006127][ T6853] netlink: 6 bytes leftover after parsing attributes in process `syz.3.761'. [ 160.016851][ T6853] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 160.036634][ T6853] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 160.901154][ T6868] netlink: 164 bytes leftover after parsing attributes in process `syz.3.765'. [ 161.093065][ T6884] netlink: 199816 bytes leftover after parsing attributes in process `syz.3.769'. [ 161.445918][ T6900] device syzkaller0 left promiscuous mode [ 161.510381][ T6905] netlink: 'syz.3.777': attribute type 10 has an invalid length. [ 161.591540][ T6905] team0: Port device macvlan0 added [ 161.597286][ T6908] netlink: 60 bytes leftover after parsing attributes in process `syz.1.778'. [ 161.943100][ T6916] syz.4.780[6916] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.943304][ T6916] syz.4.780[6916] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.967821][ T6927] netlink: 199816 bytes leftover after parsing attributes in process `syz.0.783'. [ 163.028692][ T6931] netlink: 'syz.3.785': attribute type 21 has an invalid length. [ 163.069253][ T6929] netlink: 'syz.1.784': attribute type 1 has an invalid length. [ 163.215607][ T6945] netlink: 10 bytes leftover after parsing attributes in process `syz.4.789'. [ 163.435973][ T6950] netlink: 'syz.4.791': attribute type 2 has an invalid length. [ 164.048899][ T6987] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.800'. [ 164.105965][ T6989] netlink: 'syz.4.801': attribute type 21 has an invalid length. [ 164.121116][ T6989] netlink: 128 bytes leftover after parsing attributes in process `syz.4.801'. [ 164.145801][ T6989] netlink: 'syz.4.801': attribute type 5 has an invalid length. [ 164.438223][ T7003] sock: sock_set_timeout: `syz.1.804' (pid 7003) tries to set negative timeout [ 165.942812][ T7038] netlink: 199816 bytes leftover after parsing attributes in process `syz.3.814'. [ 166.617634][ T7048] netlink: 'syz.5.816': attribute type 10 has an invalid length. [ 166.641403][ T7048] netlink: 5385 bytes leftover after parsing attributes in process `syz.5.816'. [ 167.732316][ T7102] netlink: 'syz.4.834': attribute type 1 has an invalid length. [ 167.783106][ T7102] netlink: 126632 bytes leftover after parsing attributes in process `syz.4.834'. [ 168.085149][ T7113] netlink: 'syz.5.837': attribute type 10 has an invalid length. [ 168.109547][ T7113] netlink: 65015 bytes leftover after parsing attributes in process `syz.5.837'. [ 168.609811][ T7132] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.840'. [ 168.630655][ T7133] netlink: 132 bytes leftover after parsing attributes in process `syz.4.841'. [ 168.817758][ T7143] netlink: 'syz.0.844': attribute type 8 has an invalid length. [ 168.877524][ T7143] netlink: 'syz.0.844': attribute type 6 has an invalid length. [ 168.920322][ T7143] netlink: 'syz.0.844': attribute type 8 has an invalid length. [ 168.954934][ T7143] netlink: 'syz.0.844': attribute type 10 has an invalid length. [ 168.986162][ T7143] netlink: 'syz.0.844': attribute type 11 has an invalid length. [ 168.999797][ T7143] netlink: 198884 bytes leftover after parsing attributes in process `syz.0.844'. [ 169.022004][ T7148] netlink: 199816 bytes leftover after parsing attributes in process `syz.4.845'. [ 169.243136][ T7156] netlink: 'syz.0.849': attribute type 21 has an invalid length. [ 169.304375][ T7156] netlink: 128 bytes leftover after parsing attributes in process `syz.0.849'. [ 169.356576][ T7156] netlink: 'syz.0.849': attribute type 5 has an invalid length. [ 170.397123][ T7180] netlink: 'syz.3.854': attribute type 39 has an invalid length. [ 170.495569][ T7174] netlink: 'syz.0.853': attribute type 12 has an invalid length. [ 170.536938][ T7174] netlink: 132 bytes leftover after parsing attributes in process `syz.0.853'. [ 170.676647][ T7183] device bridge_slave_1 left promiscuous mode [ 170.699826][ T7183] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.777585][ T7183] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 171.099665][ T7190] netlink: 199816 bytes leftover after parsing attributes in process `syz.4.858'. [ 173.270050][ T7211] validate_nla: 3 callbacks suppressed [ 173.270064][ T7211] netlink: 'syz.1.864': attribute type 33 has an invalid length. [ 173.316067][ T7211] netlink: 96 bytes leftover after parsing attributes in process `syz.1.864'. [ 173.360508][ T7213] netlink: 164 bytes leftover after parsing attributes in process `syz.1.864'. [ 173.557037][ T7220] FAULT_INJECTION: forcing a failure. [ 173.557037][ T7220] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 173.578614][ T7222] netlink: 132 bytes leftover after parsing attributes in process `syz.1.868'. [ 173.588593][ T7219] syz.3.867[7219] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.588859][ T7219] syz.3.867[7219] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.671679][ T7220] CPU: 0 PID: 7220 Comm: syz.4.866 Not tainted syzkaller #0 [ 173.690147][ T7220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 173.700189][ T7220] Call Trace: [ 173.703454][ T7220] [ 173.706365][ T7220] dump_stack_lvl+0x188/0x250 [ 173.711026][ T7220] ? show_regs_print_info+0x20/0x20 [ 173.716206][ T7220] ? load_image+0x410/0x410 [ 173.720692][ T7220] ? __lock_acquire+0x7b50/0x7b50 [ 173.725705][ T7220] should_fail+0x383/0x4b0 [ 173.730106][ T7220] _copy_from_user+0x2e/0x170 [ 173.734766][ T7220] __copy_msghdr_from_user+0xc9/0x630 [ 173.740122][ T7220] ? verify_lock_unused+0x140/0x140 [ 173.745302][ T7220] ? mark_lock+0x94/0x320 [ 173.749610][ T7220] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 173.754884][ T7220] ___sys_sendmsg+0x19a/0x2e0 [ 173.759551][ T7220] ? __sys_sendmsg+0x290/0x290 [ 173.764304][ T7220] ? trace_event_raw_event_lock+0x250/0x250 [ 173.770190][ T7220] __se_sys_sendmsg+0x1b7/0x2a0 [ 173.775023][ T7220] ? __x64_sys_sendmsg+0x80/0x80 [ 173.779942][ T7220] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 173.785910][ T7220] ? lockdep_hardirqs_on+0x94/0x140 [ 173.791093][ T7220] do_syscall_64+0x4c/0xa0 [ 173.795488][ T7220] ? clear_bhb_loop+0x30/0x80 [ 173.800143][ T7220] ? clear_bhb_loop+0x30/0x80 [ 173.804800][ T7220] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 173.810670][ T7220] RIP: 0033:0x7f3e1ef77e59 [ 173.815066][ T7220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.834647][ T7220] RSP: 002b:00007f3e1d1d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.843040][ T7220] RAX: ffffffffffffffda RBX: 00007f3e1f1f0fa0 RCX: 00007f3e1ef77e59 [ 173.850992][ T7220] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 173.858940][ T7220] RBP: 00007f3e1d1d1090 R08: 0000000000000000 R09: 0000000000000000 [ 173.866895][ T7220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.874857][ T7220] R13: 00007f3e1f1f1038 R14: 00007f3e1f1f0fa0 R15: 00007ffeb84e0e28 [ 173.882827][ T7220] [ 175.078559][ T7233] netlink: 184 bytes leftover after parsing attributes in process `syz.4.869'. [ 175.583347][ T7258] netlink: 'syz.1.876': attribute type 21 has an invalid length. [ 175.619114][ T4234] Bluetooth: hci0: command 0x0406 tx timeout [ 175.625413][ T4234] Bluetooth: hci3: command 0x0406 tx timeout [ 175.631256][ T7258] netlink: 'syz.1.876': attribute type 12 has an invalid length. [ 175.655581][ T4234] Bluetooth: hci4: command 0x0406 tx timeout [ 175.668844][ T7258] netlink: 'syz.1.876': attribute type 13 has an invalid length. [ 175.676579][ T7258] netlink: 'syz.1.876': attribute type 14 has an invalid length. [ 175.748961][ T7258] netlink: 'syz.1.876': attribute type 15 has an invalid length. [ 175.757218][ T7258] netlink: 'syz.1.876': attribute type 16 has an invalid length. [ 175.817424][ T7258] netlink: 12926 bytes leftover after parsing attributes in process `syz.1.876'. [ 175.866593][ T7255] netlink: 112 bytes leftover after parsing attributes in process `syz.1.876'. [ 175.999940][ T7270] FAULT_INJECTION: forcing a failure. [ 175.999940][ T7270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.114083][ T7270] CPU: 1 PID: 7270 Comm: syz.4.880 Not tainted syzkaller #0 [ 176.121404][ T7270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 176.131466][ T7270] Call Trace: [ 176.134746][ T7270] [ 176.137682][ T7270] dump_stack_lvl+0x188/0x250 [ 176.142369][ T7270] ? show_regs_print_info+0x20/0x20 [ 176.147575][ T7270] ? load_image+0x410/0x410 [ 176.152083][ T7270] ? __lock_acquire+0x7b50/0x7b50 [ 176.157118][ T7270] should_fail+0x383/0x4b0 [ 176.161544][ T7270] _copy_from_user+0x2e/0x170 [ 176.163781][ T7273] netlink: 199816 bytes leftover after parsing attributes in process `syz.3.881'. [ 176.166223][ T7270] __copy_msghdr_from_user+0x48a/0x630 [ 176.166248][ T7270] ? verify_lock_unused+0x140/0x140 [ 176.166271][ T7270] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 176.166288][ T7270] ? __lock_acquire+0x13dc/0x7b50 [ 176.196353][ T7270] ___sys_sendmsg+0x19a/0x2e0 [ 176.201041][ T7270] ? __sys_sendmsg+0x290/0x290 [ 176.205844][ T7270] __se_sys_sendmsg+0x1b7/0x2a0 [ 176.210702][ T7270] ? __x64_sys_sendmsg+0x80/0x80 [ 176.215637][ T7270] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 176.221628][ T7270] ? lockdep_hardirqs_on+0x94/0x140 [ 176.226833][ T7270] do_syscall_64+0x4c/0xa0 [ 176.231250][ T7270] ? clear_bhb_loop+0x30/0x80 [ 176.235927][ T7270] ? clear_bhb_loop+0x30/0x80 [ 176.240599][ T7270] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 176.246489][ T7270] RIP: 0033:0x7f3e1ef77e59 [ 176.250909][ T7270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.270516][ T7270] RSP: 002b:00007f3e1d1d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.278931][ T7270] RAX: ffffffffffffffda RBX: 00007f3e1f1f0fa0 RCX: 00007f3e1ef77e59 [ 176.286899][ T7270] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 176.294867][ T7270] RBP: 00007f3e1d1d1090 R08: 0000000000000000 R09: 0000000000000000 [ 176.302834][ T7270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.310800][ T7270] R13: 00007f3e1f1f1038 R14: 00007f3e1f1f0fa0 R15: 00007ffeb84e0e28 [ 176.318783][ T7270] [ 177.094147][ T7291] netlink: 36 bytes leftover after parsing attributes in process `syz.3.888'. [ 177.128948][ T7291] : renamed from caif0 [ 177.219398][ T7291] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 177.405697][ T7304] netlink: 'syz.4.891': attribute type 10 has an invalid length. [ 177.587297][ T7313] FAULT_INJECTION: forcing a failure. [ 177.587297][ T7313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.598517][ T7311] netlink: 199816 bytes leftover after parsing attributes in process `syz.1.893'. [ 177.660125][ T7308] netlink: 'syz.4.891': attribute type 10 has an invalid length. [ 177.698895][ T7313] CPU: 1 PID: 7313 Comm: syz.3.894 Not tainted syzkaller #0 [ 177.706197][ T7313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 177.716260][ T7313] Call Trace: [ 177.719536][ T7313] [ 177.722465][ T7313] dump_stack_lvl+0x188/0x250 [ 177.727163][ T7313] ? show_regs_print_info+0x20/0x20 [ 177.732356][ T7313] ? load_image+0x410/0x410 [ 177.736857][ T7313] ? __lock_acquire+0x7b50/0x7b50 [ 177.741886][ T7313] should_fail+0x383/0x4b0 [ 177.746310][ T7313] _copy_from_user+0x2e/0x170 [ 177.750992][ T7313] iovec_from_user+0x142/0x370 [ 177.755761][ T7313] __import_iovec+0x70/0x490 [ 177.760365][ T7313] import_iovec+0x6f/0xa0 [ 177.764700][ T7313] ___sys_sendmsg+0x1fd/0x2e0 [ 177.769388][ T7313] ? __sys_sendmsg+0x290/0x290 [ 177.774190][ T7313] __se_sys_sendmsg+0x1b7/0x2a0 [ 177.779040][ T7313] ? __x64_sys_sendmsg+0x80/0x80 [ 177.783978][ T7313] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 177.789973][ T7313] ? lockdep_hardirqs_on+0x94/0x140 [ 177.795175][ T7313] do_syscall_64+0x4c/0xa0 [ 177.799673][ T7313] ? clear_bhb_loop+0x30/0x80 [ 177.804352][ T7313] ? clear_bhb_loop+0x30/0x80 [ 177.809031][ T7313] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 177.814923][ T7313] RIP: 0033:0x7fbbf346ce59 [ 177.819338][ T7313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.838954][ T7313] RSP: 002b:00007fbbf16c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.847386][ T7313] RAX: ffffffffffffffda RBX: 00007fbbf36e5fa0 RCX: 00007fbbf346ce59 [ 177.855355][ T7313] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 177.863325][ T7313] RBP: 00007fbbf16c6090 R08: 0000000000000000 R09: 0000000000000000 [ 177.871299][ T7313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.879271][ T7313] R13: 00007fbbf36e6038 R14: 00007fbbf36e5fa0 R15: 00007fffd5f3c718 [ 177.887256][ T7313] [ 178.689069][ T7329] netlink: 60 bytes leftover after parsing attributes in process `syz.4.900'. [ 179.204935][ T7341] netlink: 72 bytes leftover after parsing attributes in process `syz.3.903'. [ 179.391326][ T7345] netlink: 199816 bytes leftover after parsing attributes in process `syz.3.905'. [ 179.609080][ T7355] FAULT_INJECTION: forcing a failure. [ 179.609080][ T7355] name failslab, interval 1, probability 0, space 0, times 1 [ 179.690927][ T7355] CPU: 1 PID: 7355 Comm: syz.3.908 Not tainted syzkaller #0 [ 179.698246][ T7355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 179.708301][ T7355] Call Trace: [ 179.711575][ T7355] [ 179.714502][ T7355] dump_stack_lvl+0x188/0x250 [ 179.719181][ T7355] ? show_regs_print_info+0x20/0x20 [ 179.724376][ T7355] ? load_image+0x410/0x410 [ 179.728883][ T7355] ? rt6_remove_exception+0x270/0x270 [ 179.734257][ T7355] ? fib6_repair_tree+0xf10/0xf10 [ 179.739290][ T7355] should_fail+0x383/0x4b0 [ 179.743716][ T7355] should_failslab+0x5/0x20 [ 179.748214][ T7355] slab_pre_alloc_hook+0x51/0xc0 [ 179.753147][ T7355] ? dst_alloc+0x101/0x160 [ 179.757562][ T7355] kmem_cache_alloc+0x3d/0x280 [ 179.762325][ T7355] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 179.767954][ T7355] dst_alloc+0x101/0x160 [ 179.772208][ T7355] ip6_rt_cache_alloc+0x384/0xa70 [ 179.777249][ T7355] ? rt6_find_cached_rt+0x270/0x270 [ 179.782458][ T7355] ip6_pol_route+0xfca/0x12d0 [ 179.787146][ T7355] ? trace_fib6_table_lookup+0x1b0/0x1b0 [ 179.792796][ T7355] fib6_rule_lookup+0x35c/0x5e0 [ 179.797645][ T7355] ? ip6_route_output_flags_noref+0x390/0x390 [ 179.803710][ T7355] ? fib6_lookup+0x2d0/0x2d0 [ 179.808303][ T7355] ? dev_get_by_index_rcu+0xea/0x100 [ 179.813589][ T7355] ? __ipv6_addr_type+0xff/0x2e0 [ 179.818527][ T7355] ? ip6_route_output_flags_noref+0x230/0x390 [ 179.824596][ T7355] ip6_route_output_flags+0xbf/0x300 [ 179.829883][ T7355] ip6_dst_lookup_tail+0x1ac/0x1340 [ 179.835091][ T7355] ? ip6_dst_lookup+0x60/0x60 [ 179.839774][ T7355] ? txopt_get+0x303/0x3c0 [ 179.844189][ T7355] ? fl6_sock_lookup+0xc0/0xc0 [ 179.848947][ T7355] ? aa_label_sk_perm+0x3e6/0x540 [ 179.853979][ T7355] ip6_dst_lookup_flow+0x44/0xd0 [ 179.858923][ T7355] rawv6_sendmsg+0xcb2/0x1710 [ 179.863612][ T7355] ? compat_rawv6_ioctl+0x60/0x60 [ 179.868659][ T7355] ? aa_af_perm+0x340/0x340 [ 179.873156][ T7355] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 179.879574][ T7355] ? sock_rps_record_flow+0x17/0x3b0 [ 179.884862][ T7355] ? inet_sendmsg+0x7a/0x2a0 [ 179.889450][ T7355] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 179.894736][ T7355] ? inet_send_prepare+0x250/0x250 [ 179.899848][ T7355] ____sys_sendmsg+0x5be/0x8f0 [ 179.904625][ T7355] ? __sys_sendmsg_sock+0x30/0x30 [ 179.909657][ T7355] ? import_iovec+0x6f/0xa0 [ 179.914165][ T7355] ___sys_sendmsg+0x236/0x2e0 [ 179.918850][ T7355] ? __sys_sendmsg+0x290/0x290 [ 179.923628][ T7355] ? trace_event_raw_event_lock+0x250/0x250 [ 179.929546][ T7355] __se_sys_sendmsg+0x1b7/0x2a0 [ 179.934398][ T7355] ? __x64_sys_sendmsg+0x80/0x80 [ 179.939334][ T7355] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 179.945326][ T7355] ? lockdep_hardirqs_on+0x94/0x140 [ 179.950526][ T7355] do_syscall_64+0x4c/0xa0 [ 179.954939][ T7355] ? clear_bhb_loop+0x30/0x80 [ 179.959614][ T7355] ? clear_bhb_loop+0x30/0x80 [ 179.964288][ T7355] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 179.970177][ T7355] RIP: 0033:0x7fbbf346ce59 [ 179.974590][ T7355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.994199][ T7355] RSP: 002b:00007fbbf16c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.002614][ T7355] RAX: ffffffffffffffda RBX: 00007fbbf36e5fa0 RCX: 00007fbbf346ce59 [ 180.010583][ T7355] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 180.018555][ T7355] RBP: 00007fbbf16c6090 R08: 0000000000000000 R09: 0000000000000000 [ 180.026520][ T7355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.034487][ T7355] R13: 00007fbbf36e6038 R14: 00007fbbf36e5fa0 R15: 00007fffd5f3c718 [ 180.042474][ T7355] [ 181.287621][ T7369] netlink: 60 bytes leftover after parsing attributes in process `syz.3.911'. [ 181.328983][ T7369] netlink: 60 bytes leftover after parsing attributes in process `syz.3.911'. [ 181.460010][ T7371] netlink: 60 bytes leftover after parsing attributes in process `syz.3.911'. [ 182.523722][ T7373] netlink: 'syz.4.913': attribute type 10 has an invalid length. [ 182.639652][ T7373] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.686120][ T7382] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.913'. [ 182.734402][ T7373] bond0: (slave team0): Enslaving as an active interface with an up link [ 182.763660][ T7378] netlink: 'syz.4.913': attribute type 10 has an invalid length. [ 182.791939][ T7378] netlink: 40 bytes leftover after parsing attributes in process `syz.4.913'. [ 182.851772][ T7378] device team0 entered promiscuous mode [ 182.857362][ T7378] device team_slave_0 entered promiscuous mode [ 182.953657][ T7378] device team_slave_1 entered promiscuous mode [ 182.973859][ T7378] device virt_wifi0 entered promiscuous mode [ 182.995994][ T7378] bond0: (slave team0): Releasing backup interface [ 183.043473][ T7378] bridge0: port 2(team0) entered blocking state [ 183.058677][ T7378] bridge0: port 2(team0) entered disabled state [ 183.064683][ T7397] netlink: 199816 bytes leftover after parsing attributes in process `syz.5.918'. [ 183.084089][ T7384] netlink: 14 bytes leftover after parsing attributes in process `syz.1.916'. [ 183.320684][ T7408] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.920'. [ 183.333879][ T387] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.457278][ T7405] netlink: 60 bytes leftover after parsing attributes in process `syz.1.921'. [ 183.597510][ T387] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.758004][ T387] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.926365][ T387] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.430089][ T7429] netlink: 'syz.4.928': attribute type 15 has an invalid length. [ 184.480615][ T7429] netlink: 'syz.4.928': attribute type 7 has an invalid length. [ 184.522633][ T7429] netlink: 52 bytes leftover after parsing attributes in process `syz.4.928'. [ 184.675808][ T7440] netlink: 'syz.5.931': attribute type 39 has an invalid length. [ 184.895482][ T7451] netlink: 'syz.4.932': attribute type 2 has an invalid length. [ 184.900376][ T7450] netlink: 'syz.1.935': attribute type 10 has an invalid length. [ 184.945196][ T7450] team0: Device wg1 is of different type [ 185.228003][ T7475] sock: sock_set_timeout: `syz.3.940' (pid 7475) tries to set negative timeout [ 186.325594][ T7517] __nla_validate_parse: 5 callbacks suppressed [ 186.325670][ T7517] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.949'. [ 186.635683][ T7519] netlink: 6 bytes leftover after parsing attributes in process `syz.3.951'. [ 186.710767][ T7519] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 186.833488][ T7519] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 187.117954][ T7541] netlink: 132 bytes leftover after parsing attributes in process `syz.1.957'. [ 187.202178][ T7542] netlink: 199816 bytes leftover after parsing attributes in process `syz.0.956'. [ 187.517266][ T387] device hsr_slave_0 left promiscuous mode [ 187.530148][ T387] device hsr_slave_1 left promiscuous mode [ 187.556558][ T387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.575240][ T387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.575240][ T7565] netlink: 208188 bytes leftover after parsing attributes in process `syz.5.962'. [ 187.594737][ T387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.664221][ T387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.666315][ T7569] syz.1.963[7569] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.673630][ T7569] syz.1.963[7569] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.704551][ T387] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 187.755029][ T387] batman_adv: batadv0: Removing interface: veth1_vlan [ 187.765310][ T387] device bridge_slave_1 left promiscuous mode [ 187.774526][ T387] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.787606][ T387] device bridge_slave_0 left promiscuous mode [ 187.802550][ T387] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.818121][ T387] device veth1_macvtap left promiscuous mode [ 187.828562][ T387] device veth0_macvtap left promiscuous mode [ 187.837838][ T387] device veth1_vlan left promiscuous mode [ 187.851031][ T387] device veth0_vlan left promiscuous mode [ 187.937137][ T7575] netlink: 134056 bytes leftover after parsing attributes in process `syz.5.974'. [ 188.078180][ T387] team0 (unregistering): Port device team_slave_1 removed [ 188.096635][ T387] team0 (unregistering): Port device team_slave_0 removed [ 188.114424][ T387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.134163][ T387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.197484][ T387] bond0 (unregistering): Released all slaves [ 188.301042][ T7575] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 188.341819][ T7575] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 188.366318][ T7582] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.965'. [ 188.391924][ T7575] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 188.810188][ T7605] netlink: 199556 bytes leftover after parsing attributes in process `syz.1.971'. [ 189.788431][ T7630] syz.5.979[7630] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.788626][ T7630] syz.5.979[7630] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.800198][ T7627] netlink: 156 bytes leftover after parsing attributes in process `syz.3.978'. [ 190.614741][ T7662] netlink: 199556 bytes leftover after parsing attributes in process `syz.1.987'. [ 190.914356][ T7669] netlink: 'syz.1.990': attribute type 21 has an invalid length. [ 190.934862][ T7669] netlink: 'syz.1.990': attribute type 5 has an invalid length. [ 191.206546][ T7683] syz.1.993[7683] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.206736][ T7683] syz.1.993[7683] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.186718][ T7697] device syzkaller0 entered promiscuous mode [ 192.331012][ T7710] __nla_validate_parse: 2 callbacks suppressed [ 192.331065][ T7710] netlink: 199556 bytes leftover after parsing attributes in process `syz.1.1000'. [ 193.160293][ T7727] bridge0: port 4(syz_tun) entered blocking state [ 193.177354][ T7727] bridge0: port 4(syz_tun) entered disabled state [ 193.194365][ T7727] device syz_tun entered promiscuous mode [ 193.295225][ T7727] bridge0: port 4(syz_tun) entered blocking state [ 193.302048][ T7727] bridge0: port 4(syz_tun) entered forwarding state [ 193.322841][ T7731] syz.5.1006[7731] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 193.323062][ T7731] syz.5.1006[7731] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 193.845747][ T7751] syz.0.1020[7751] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 193.869093][ T7751] syz.0.1020[7751] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.022972][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.041095][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.598286][ T7775] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1017'. [ 194.610061][ T7776] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1017'. [ 194.642621][ T7775] netlink: del zone limit has 8 unknown bytes [ 194.744524][ T7776] netlink: del zone limit has 8 unknown bytes [ 194.966408][ T7794] netlink: 'syz.1.1031': attribute type 29 has an invalid length. [ 194.990380][ T7795] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.1021'. [ 195.008180][ T7794] netlink: 'syz.1.1031': attribute type 29 has an invalid length. [ 195.040434][ T7801] netlink: 'syz.1.1031': attribute type 29 has an invalid length. [ 195.081316][ T7794] netlink: 'syz.1.1031': attribute type 29 has an invalid length. [ 195.114143][ T7794] netlink: 'syz.1.1031': attribute type 29 has an invalid length. [ 195.129061][ T7804] netlink: 'syz.0.1023': attribute type 10 has an invalid length. [ 195.165791][ T7806] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1023'. [ 195.179473][ T7794] netlink: 'syz.1.1031': attribute type 2 has an invalid length. [ 195.217701][ T7794] netlink: 'syz.1.1031': attribute type 3 has an invalid length. [ 195.339329][ T7794] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1031'. [ 195.372128][ T7804] bond0: (slave team0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 195.785999][ T7804] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.836290][ T7804] bond0: (slave team0): Enslaving as an active interface with an up link [ 195.865822][ T7809] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1023'. [ 195.883685][ T7809] device team0 entered promiscuous mode [ 195.898204][ T7809] device team_slave_0 entered promiscuous mode [ 195.912707][ T7809] device team_slave_1 entered promiscuous mode [ 195.943483][ T7809] device bridge0 entered promiscuous mode [ 195.981270][ T7809] bond0: (slave team0): Releasing backup interface [ 196.004108][ T7809] bond0: (slave team0): last VLAN challenged slave left bond - VLAN blocking is removed [ 197.086638][ T7809] bridge0: port 5(team0) entered blocking state [ 197.093071][ T7809] bridge0: port 5(team0) entered disabled state [ 197.100905][ T7809] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 197.129764][ T7836] validate_nla: 1 callbacks suppressed [ 197.129778][ T7836] netlink: 'syz.4.1029': attribute type 21 has an invalid length. [ 197.198928][ T7836] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1029'. [ 197.233892][ T7836] netlink: 'syz.4.1029': attribute type 5 has an invalid length. [ 197.486597][ T7847] netlink: 'syz.4.1034': attribute type 21 has an invalid length. [ 197.529177][ T7847] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1034'. [ 198.550023][ T7889] syz.1.1041[7889] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.550212][ T7889] syz.1.1041[7889] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.645760][ T7893] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.1042'. [ 198.795022][ T7899] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1043'. [ 198.816371][ T7898] netlink: 'syz.3.1044': attribute type 21 has an invalid length. [ 198.825426][ T7898] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1044'. [ 198.841063][ T7898] netlink: 'syz.3.1044': attribute type 5 has an invalid length. [ 199.341394][ T7927] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1051'. [ 199.354752][ T7931] netlink: 56863 bytes leftover after parsing attributes in process `syz.0.1054'. [ 199.447557][ T7927] netlink: 3064 bytes leftover after parsing attributes in process `syz.3.1051'. [ 200.062767][ T7967] netlink: 'syz.1.1061': attribute type 21 has an invalid length. [ 200.083320][ T7972] syz.3.1062[7972] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.083523][ T7972] syz.3.1062[7972] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.100106][ T7967] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1061'. [ 200.169140][ T7967] netlink: 'syz.1.1061': attribute type 5 has an invalid length. [ 200.248989][ T7977] syz.4.1064[7977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.249177][ T7977] syz.4.1064[7977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.454768][ T7988] netlink: 'syz.1.1066': attribute type 21 has an invalid length. [ 200.549232][ T7988] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1066'. [ 200.757876][ T7988] netlink: 'syz.1.1066': attribute type 4 has an invalid length. [ 200.816746][ T7988] netlink: 156812 bytes leftover after parsing attributes in process `syz.1.1066'. [ 201.310911][ T8031] syz.5.1079[8031] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.311099][ T8031] syz.5.1079[8031] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.354446][ T8028] netlink: 'syz.0.1076': attribute type 21 has an invalid length. [ 201.367284][ T8032] syz.4.1078[8032] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.375291][ T8032] syz.4.1078[8032] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.463312][ T8083] validate_nla: 5 callbacks suppressed [ 202.463326][ T8083] netlink: 'syz.5.1094': attribute type 29 has an invalid length. [ 202.501429][ T8083] netlink: 'syz.5.1094': attribute type 29 has an invalid length. [ 202.511571][ T8083] netlink: 'syz.5.1094': attribute type 29 has an invalid length. [ 202.521047][ T8083] netlink: 'syz.5.1094': attribute type 29 has an invalid length. [ 203.031339][ T8102] netlink: 'syz.3.1098': attribute type 10 has an invalid length. [ 203.034314][ T8106] __nla_validate_parse: 5 callbacks suppressed [ 203.034327][ T8106] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.1101'. [ 203.128691][ T8113] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.1101'. [ 203.307737][ T8116] netlink: 'syz.3.1104': attribute type 10 has an invalid length. [ 203.359588][ T8116] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1104'. [ 203.593892][ T8129] bpf_get_probe_write_proto: 2 callbacks suppressed [ 203.593907][ T8129] syz.5.1108[8129] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.628046][ T8136] syz.0.1111[8136] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.643544][ T8129] syz.5.1108[8129] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.665701][ T8136] syz.0.1111[8136] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.693774][ T8140] netlink: 'syz.1.1113': attribute type 2 has an invalid length. [ 203.731323][ T8140] netlink: 'syz.1.1113': attribute type 1 has an invalid length. [ 203.739370][ T8140] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.1113'. [ 203.773380][ T8140] netlink: 'syz.1.1113': attribute type 4 has an invalid length. [ 203.939469][ T8157] netlink: 'syz.1.1118': attribute type 10 has an invalid length. [ 203.993827][ T8157] team0: Device wg1 is of different type [ 204.145299][ T8173] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1122'. [ 204.155203][ T8171] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.1120'. [ 204.156100][ T8171] netlink: del zone limit has 8 unknown bytes [ 204.167268][ T8173] netlink: 6 bytes leftover after parsing attributes in process `syz.5.1122'. [ 204.436079][ T8178] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1125'. [ 204.521123][ T8182] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.528583][ T8182] device bridge0 entered promiscuous mode [ 204.658311][ T8184] syz.3.1127[8184] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.658539][ T8184] syz.3.1127[8184] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.742563][ T8186] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1137'. [ 204.807972][ T8189] syz.1.1129[8189] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 204.808206][ T8189] syz.1.1129[8189] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.192030][ T8209] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1132'. [ 205.275080][ T8209] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 205.318330][ T8209] batman_adv: batadv0: Removing interface: virt_wifi0 [ 205.600668][ T8230] device sit0 left promiscuous mode [ 205.844915][ T8243] syz.1.1145[8243] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.845112][ T8243] syz.1.1145[8243] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.909890][ T8239] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.984345][ T8246] syzkaller0: tun_chr_ioctl cmd 1074025672 [ 205.991214][ T8246] syzkaller0: ignored: set checksum enabled [ 206.339090][ T4234] Bluetooth: hci2: command 0x0406 tx timeout [ 207.039634][ T8313] bridge0: port 2(team0) entered disabled state [ 207.239209][ T8313] device bridge_slave_0 left promiscuous mode [ 207.246245][ T8313] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.283901][ T8313] bond0: (slave bridge0): Releasing backup interface [ 207.376765][ T8320] batman_adv: batadv0: Adding interface: virt_wifi0 [ 207.397827][ T8320] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.497858][ T8320] batman_adv: batadv0: Interface activated: virt_wifi0 [ 207.547112][ T8333] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 207.646789][ T8337] validate_nla: 17 callbacks suppressed [ 207.646803][ T8337] netlink: 'syz.0.1167': attribute type 21 has an invalid length. [ 209.550550][ T8408] netlink: 'syz.4.1183': attribute type 21 has an invalid length. [ 209.567034][ T8408] __nla_validate_parse: 4 callbacks suppressed [ 209.567048][ T8408] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1183'. [ 209.623838][ T8408] netlink: 'syz.4.1183': attribute type 5 has an invalid length. [ 209.636805][ T8413] bpf_get_probe_write_proto: 4 callbacks suppressed [ 209.636819][ T8413] syz.3.1187[8413] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.651220][ T8413] syz.3.1187[8413] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.826199][ T8428] syz.5.1190[8428] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.858213][ T8411] device syzkaller0 entered promiscuous mode [ 209.879306][ T8428] syz.5.1190[8428] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.214460][ T8456] netlink: 'syz.4.1194': attribute type 21 has an invalid length. [ 210.338055][ T8454] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1195'. [ 210.916974][ T8471] netlink: 'syz.0.1199': attribute type 3 has an invalid length. [ 210.948908][ T8471] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1199'. [ 211.093263][ T8482] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.1203'. [ 211.140939][ T8478] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.1203'. [ 211.170874][ T8481] syz.4.1202[8481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.174869][ T8481] syz.4.1202[8481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.215352][ T8479] netlink: 'syz.5.1201': attribute type 21 has an invalid length. [ 211.236055][ T8479] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1201'. [ 211.255504][ T8479] netlink: 'syz.5.1201': attribute type 5 has an invalid length. [ 211.862131][ T8507] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.1211'. [ 211.983163][ T8510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.050310][ T8510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.087753][ T8528] netlink: 'syz.4.1216': attribute type 10 has an invalid length. [ 212.102591][ T8510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.117785][ T8510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.128623][ T8528] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1216'. [ 212.157802][ T8510] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 212.158621][ T8533] syz.3.1218[8533] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.165388][ T8533] syz.3.1218[8533] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.179509][ T8510] batman_adv: batadv0: Removing interface: virt_wifi0 [ 212.321075][ T8528] netlink: 'syz.4.1216': attribute type 10 has an invalid length. [ 212.341992][ T8528] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1216'. [ 212.355390][ T8534] netlink: 'syz.5.1217': attribute type 21 has an invalid length. [ 212.366895][ T8534] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1217'. [ 212.498356][ T8541] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.520582][ T8541] bridge0: port 5(team0) entered blocking state [ 212.537568][ T8541] bridge0: port 5(team0) entered disabled state [ 212.592601][ T8541] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 213.659668][ T8594] syz.4.1230[8594] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 213.659853][ T8594] syz.4.1230[8594] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 213.907965][ T8599] validate_nla: 2 callbacks suppressed [ 213.908010][ T8599] netlink: 'syz.1.1231': attribute type 21 has an invalid length. [ 214.029943][ T8599] netlink: 'syz.1.1231': attribute type 5 has an invalid length. [ 214.465237][ T8618] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 214.569031][ T8618] CPU: 1 PID: 8618 Comm: syz.3.1236 Not tainted syzkaller #0 [ 214.576438][ T8618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 214.586504][ T8618] Call Trace: [ 214.589784][ T8618] [ 214.592714][ T8618] dump_stack_lvl+0x188/0x250 [ 214.597398][ T8618] ? show_regs_print_info+0x20/0x20 [ 214.602600][ T8618] ? load_image+0x410/0x410 [ 214.607124][ T8618] sysfs_warn_dup+0x8a/0xa0 [ 214.611634][ T8618] sysfs_do_create_link_sd+0xc0/0x110 [ 214.617011][ T8618] device_add+0x83b/0x1050 [ 214.621438][ T8618] wiphy_register+0x1e74/0x2c40 [ 214.626319][ T8618] ? cfg80211_event_work+0x40/0x40 [ 214.631436][ T8618] ? minstrel_ht_alloc+0x807/0x980 [ 214.636563][ T8618] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 214.642641][ T8618] ieee80211_register_hw+0x2a03/0x3a60 [ 214.648106][ T8618] ? ieee80211_register_hw+0xa91/0x3a60 [ 214.653660][ T8618] ? ieee80211_tasklet_handler+0x20/0x20 [ 214.659296][ T8618] ? rcu_is_watching+0x11/0xa0 [ 214.664060][ T8618] ? hrtimer_init+0x10c/0x220 [ 214.668743][ T8618] mac80211_hwsim_new_radio+0x209d/0x4050 [ 214.674486][ T8618] hwsim_new_radio_nl+0xa7d/0xc50 [ 214.679527][ T8618] genl_rcv_msg+0xd0b/0xfa0 [ 214.684040][ T8618] ? genl_bind+0x370/0x370 [ 214.688463][ T8618] ? __dev_queue_xmit+0x1b64/0x2e50 [ 214.693675][ T8618] ? verify_lock_unused+0x140/0x140 [ 214.698892][ T8618] ? dev_queue_xmit+0x20/0x20 [ 214.703564][ T8618] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 214.709909][ T8618] netlink_rcv_skb+0x1e9/0x430 [ 214.714683][ T8618] ? genl_bind+0x370/0x370 [ 214.719104][ T8618] ? netlink_ack+0xb10/0xb10 [ 214.723704][ T8618] ? down_read+0x1aa/0x2e0 [ 214.728120][ T8618] genl_rcv+0x24/0x40 [ 214.732100][ T8618] netlink_unicast+0x78f/0x940 [ 214.736880][ T8618] netlink_sendmsg+0x8ba/0xbe0 [ 214.741659][ T8618] ? netlink_getsockopt+0x570/0x570 [ 214.746859][ T8618] ? aa_sock_msg_perm+0x94/0x150 [ 214.751803][ T8618] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 214.757087][ T8618] ? security_socket_sendmsg+0x7c/0xa0 [ 214.762541][ T8618] ? netlink_getsockopt+0x570/0x570 [ 214.767748][ T8618] ____sys_sendmsg+0x5be/0x8f0 [ 214.772522][ T8618] ? __sys_sendmsg_sock+0x30/0x30 [ 214.777569][ T8618] ? import_iovec+0x6f/0xa0 [ 214.782077][ T8618] ___sys_sendmsg+0x236/0x2e0 [ 214.786762][ T8618] ? __sys_sendmsg+0x290/0x290 [ 214.791573][ T8618] __se_sys_sendmsg+0x1b7/0x2a0 [ 214.796431][ T8618] ? __x64_sys_sendmsg+0x80/0x80 [ 214.801369][ T8618] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 214.807363][ T8618] ? lockdep_hardirqs_on+0x94/0x140 [ 214.812568][ T8618] do_syscall_64+0x4c/0xa0 [ 214.816983][ T8618] ? clear_bhb_loop+0x30/0x80 [ 214.821658][ T8618] ? clear_bhb_loop+0x30/0x80 [ 214.826336][ T8618] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 214.832225][ T8618] RIP: 0033:0x7fbbf346ce59 [ 214.836640][ T8618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.856242][ T8618] RSP: 002b:00007fbbf16c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.864656][ T8618] RAX: ffffffffffffffda RBX: 00007fbbf36e5fa0 RCX: 00007fbbf346ce59 [ 214.872624][ T8618] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 214.880588][ T8618] RBP: 00007fbbf3502e6f R08: 0000000000000000 R09: 0000000000000000 [ 214.888569][ T8618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.896535][ T8618] R13: 00007fbbf36e6038 R14: 00007fbbf36e5fa0 R15: 00007fffd5f3c718 [ 214.904525][ T8618] [ 215.123039][ T8632] device aaaaaaaaaaaaaaa entered promiscuous mode [ 215.143604][ C0] [ 215.143611][ C0] ================================ [ 215.143616][ C0] WARNING: inconsistent lock state [ 215.143633][ C0] syzkaller #0 Not tainted [ 215.143641][ C0] -------------------------------- [ 215.143645][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 215.143652][ C0] syz.4.1242/8634 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 215.143668][ C0] ffff88807b1f63c8 (&htab->lockdep_key){....}-{2:2}, at: htab_lru_map_delete_elem+0x1ae/0x650 [ 215.143710][ C0] {INITIAL USE} state was registered at: [ 215.143715][ C0] lock_acquire+0x19e/0x400 [ 215.143732][ C0] _raw_spin_lock_irqsave+0xb0/0x100 [ 215.143747][ C0] __htab_lru_percpu_map_update_elem+0x27b/0x8b0 [ 215.143761][ C0] bpf_percpu_hash_update+0xf5/0x1d0 [ 215.143774][ C0] bpf_map_update_value+0x25d/0x650 [ 215.143789][ C0] map_update_elem+0x603/0x760 [ 215.143802][ C0] __sys_bpf+0x46b/0x6f0 [ 215.143816][ C0] __x64_sys_bpf+0x78/0x90 [ 215.143829][ C0] do_syscall_64+0x4c/0xa0 [ 215.143843][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 215.143858][ C0] irq event stamp: 2122 [ 215.143864][ C0] hardirqs last enabled at (2121): [] put_cpu_partial+0xff/0x190 [ 215.143883][ C0] hardirqs last disabled at (2122): [] exc_debug+0x6e/0x130 [ 215.143901][ C0] softirqs last enabled at (1722): [] tipc_sendmsg+0x43/0x70 [ 215.143927][ C0] softirqs last disabled at (1720): [] lock_sock_nested+0x68/0x100 [ 215.143947][ C0] [ 215.143947][ C0] other info that might help us debug this: [ 215.143952][ C0] Possible unsafe locking scenario: [ 215.143952][ C0] [ 215.143955][ C0] CPU0 [ 215.143958][ C0] ---- [ 215.143960][ C0] lock(&htab->lockdep_key); [ 215.143970][ C0] [ 215.143973][ C0] lock(&htab->lockdep_key); [ 215.143981][ C0] [ 215.143981][ C0] *** DEADLOCK *** [ 215.143981][ C0] [ 215.143985][ C0] 1 lock held by syz.4.1242/8634: [ 215.143993][ C0] #0: ffff88807c75c020 (sk_lock-AF_TIPC){+.+.}-{0:0}, at: tipc_sendmsg+0x43/0x70 [ 215.144028][ C0] [ 215.144028][ C0] stack backtrace: [ 215.144032][ C0] CPU: 0 PID: 8634 Comm: syz.4.1242 Not tainted syzkaller #0 [ 215.144046][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 215.144055][ C0] Call Trace: [ 215.144059][ C0] <#DB> [ 215.144066][ C0] dump_stack_lvl+0x188/0x250 [ 215.144083][ C0] ? show_regs_print_info+0x20/0x20 [ 215.144101][ C0] ? print_usage_bug+0x42a/0x690 [ 215.144115][ C0] ? verify_lock_unused+0x15/0x140 [ 215.144133][ C0] lock_acquire+0x2c3/0x400 [ 215.144149][ C0] ? perf_trace_lock+0x301/0x390 [ 215.144166][ C0] ? htab_lru_map_delete_elem+0x1ae/0x650 [ 215.144181][ C0] ? read_lock_is_recursive+0x10/0x10 [ 215.144198][ C0] ? perf_trace_buf_update+0xa8/0x230 [ 215.144212][ C0] ? look_up_lock_class+0x71/0x110 [ 215.144229][ C0] ? look_up_lock_class+0x71/0x110 [ 215.144246][ C0] ? verify_lock_unused+0x15/0x140 [ 215.144264][ C0] _raw_spin_lock_irqsave+0xb0/0x100 [ 215.144279][ C0] ? htab_lru_map_delete_elem+0x1ae/0x650 [ 215.144293][ C0] ? _raw_spin_lock+0x40/0x40 [ 215.144309][ C0] ? htab_map_hash+0x2ed/0x6d0 [ 215.144323][ C0] htab_lru_map_delete_elem+0x1ae/0x650 [ 215.144342][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x168 [ 215.144356][ C0] bpf_overflow_handler+0x3fd/0x4a0 [ 215.144376][ C0] ? perf_event_switch_output+0x730/0x730 [ 215.144396][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 215.144413][ C0] __perf_event_overflow+0x35f/0x550 [ 215.144430][ C0] perf_bp_event+0x276/0x320 [ 215.144446][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 215.144460][ C0] ? perf_trace_lock+0xe4/0x390 [ 215.144486][ C0] ? rcu_lock_acquire+0x9/0x30 [ 215.144503][ C0] ? read_lock_is_recursive+0x10/0x10 [ 215.144522][ C0] hw_breakpoint_exceptions_notify+0x14d/0x470 [ 215.144541][ C0] atomic_notifier_call_chain+0x15d/0x280 [ 215.144559][ C0] notify_die+0x141/0x1a0 [ 215.144575][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 215.144593][ C0] ? exc_debug+0x6e/0x130 [ 215.144608][ C0] ? trace_hardirqs_off_finish+0x57/0x1f0 [ 215.144626][ C0] notify_debug+0x20/0x30 [ 215.144643][ C0] exc_debug+0xcf/0x130 [ 215.144659][ C0] asm_exc_debug+0x1a/0x40 [ 215.144673][ C0] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 215.144692][ C0] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 89 d1 83 f8 [ 215.144705][ C0] RSP: 0018:ffffc9000350f2b8 EFLAGS: 00050206 [ 215.144718][ C0] RAX: ffffffff83e0c601 RBX: 0000000000000d24 RCX: 0000000000000a44 [ 215.144728][ C0] RDX: 0000000000000d24 RSI: 0000200000000320 RDI: ffff888076db2404 [ 215.144739][ C0] RBP: ffffc9000350f418 R08: ffff888076db2e47 R09: 1ffff1100edb65c8 [ 215.144751][ C0] R10: dffffc0000000000 R11: ffffed100edb65c9 R12: ffff888076db2124 [ 215.144762][ C0] R13: 0000000000000dff R14: 0000200000000040 R15: 0000000000000000 [ 215.144775][ C0] ? _copy_from_iter+0x291/0x1160 [ 215.144795][ C0] [ 215.144800][ C0] [ 215.144804][ C0] _copy_from_iter+0x322/0x1160 [ 215.144825][ C0] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 215.144843][ C0] ? __virt_addr_valid+0x3c6/0x470 [ 215.144858][ C0] ? __phys_addr_symbol+0x2b/0x70 [ 215.144872][ C0] ? __check_object_size+0x30c/0x410 [ 215.144890][ C0] tipc_msg_build+0x7f4/0xde0 [ 215.144913][ C0] tipc_send_group_bcast+0x7d4/0xad0 [ 215.144941][ C0] ? tipc_wait_for_connect+0x600/0x600 [ 215.144961][ C0] ? wait_woken+0x1b0/0x1b0 [ 215.144978][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 215.144999][ C0] __tipc_sendmsg+0x313/0x2b60 [ 215.145013][ C0] ? mark_lock+0x94/0x320 [ 215.145031][ C0] ? local_bh_enable+0x20/0x20 [ 215.145047][ C0] ? verify_lock_unused+0x140/0x140 [ 215.145066][ C0] ? verify_lock_unused+0x140/0x140 [ 215.145083][ C0] ? verify_lock_unused+0x140/0x140 [ 215.145100][ C0] ? aa_sk_perm+0x910/0x910 [ 215.145120][ C0] ? mark_lock+0x94/0x320 [ 215.145134][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 215.145152][ C0] ? lock_chain_count+0x20/0x20 [ 215.145171][ C0] ? __local_bh_enable_ip+0x136/0x1c0 [ 215.145186][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 215.145203][ C0] ? __local_bh_enable_ip+0x136/0x1c0 [ 215.145218][ C0] ? _local_bh_enable+0xa0/0xa0 [ 215.145235][ C0] tipc_sendmsg+0x51/0x70 [ 215.145250][ C0] sock_write_iter+0x2a6/0x3a0 [ 215.145265][ C0] ? sock_read_iter+0x380/0x380 [ 215.145282][ C0] ? memset+0x1e/0x40 [ 215.145298][ C0] ? iov_iter_init+0xb4/0x170 [ 215.145314][ C0] vfs_write+0x748/0xd70 [ 215.145331][ C0] ? file_end_write+0x250/0x250 [ 215.145348][ C0] ? __fget_files+0x402/0x470 [ 215.145365][ C0] ? __fdget_pos+0x1e2/0x370 [ 215.145378][ C0] ? ksys_write+0x70/0x260 [ 215.145393][ C0] ksys_write+0x153/0x260 [ 215.145407][ C0] ? __ia32_sys_read+0x80/0x80 [ 215.145423][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 215.145440][ C0] do_syscall_64+0x4c/0xa0 [ 215.145455][ C0] ? clear_bhb_loop+0x30/0x80 [ 215.145469][ C0] ? clear_bhb_loop+0x30/0x80 [ 215.145485][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 215.145501][ C0] RIP: 0033:0x7f3e1ef77e59 [ 215.145513][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.145525][ C0] RSP: 002b:00007f3e1d1d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 215.145540][ C0] RAX: ffffffffffffffda RBX: 00007f3e1f1f0fa0 RCX: 00007f3e1ef77e59 [ 215.145551][ C0] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 000000000000000d [ 215.145561][ C0] RBP: 00007f3e1f00de6f R08: 0000000000000000 R09: 0000000000000000 [ 215.145570][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.145579][ C0] R13: 00007f3e1f1f1038 R14: 00007f3e1f1f0fa0 R15: 00007ffeb84e0e28 [ 215.145596][ C0] [ 216.067116][ T8640] syz.3.1244[8640] is installing a program with bpf_probe_write_user helper that may corrupt user memory!