last executing test programs: 9.604946792s ago: executing program 3 (id=3048): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x101, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x14, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c202, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r4, 0x0, 0x31) socketpair(0xa, 0x3, 0xff, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x200000000000003, 0x300) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r6, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) 8.87250175s ago: executing program 3 (id=3051): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000ac0), 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000b00)=0xffffffc000000000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60284c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x84800) recvmsg$kcm(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001bc0)=""/270, 0x10e}, {&(0x7f0000000bc0)=""/4068, 0xfe4}, {&(0x7f0000001d00)=""/229, 0xe5}, {&(0x7f0000000940)=""/164, 0xa4}, {&(0x7f0000000740)=""/192, 0xc0}, {&(0x7f0000000340)=""/202, 0xca}, {&(0x7f0000000140)=""/196, 0xc4}], 0x7}, 0x10000) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x3, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x3}}]}, {0x0, [0x61]}}, 0x0, 0x5b}, 0x28) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000013000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r6, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001f00)=0xffffffffffffffff, 0x4) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001f80)={0x1b, 0x0, 0x0, 0x1ff, 0x0, r6, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x5}, 0x50) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000040)=0x1, 0x12) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000020c0)=@bpf_ext={0x1c, 0x1e, &(0x7f0000001e00)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, @generic={0x0, 0x5, 0x3, 0xb37, 0x1}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @generic={0x9, 0x7, 0x9, 0x3, 0xfffffff7}, @ldst={0x3, 0x0, 0x0, 0x4, 0x2, 0x10, 0xfffffffffffffffc}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @call={0x85, 0x0, 0x0, 0x45}, @ldst={0x2, 0x3, 0x6, 0x5, 0x4, 0x8, 0xfffffffffffffff0}], &(0x7f0000000b40)='GPL\x00', 0x0, 0x32, &(0x7f0000000b80)=""/50, 0x41000, 0x0, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001f40)={0x1, 0xa, 0x7, 0x9}, 0x10, 0xefae, 0xffffffffffffffff, 0x8, &(0x7f0000002000)=[r6, r0, r3, r7, r9, r3, r7, r11], &(0x7f0000002040)=[{0x3, 0x4, 0x9, 0xa}, {0x2, 0x3, 0x6, 0x2}, {0x0, 0x1, 0xf, 0x3}, {0x2, 0x4, 0xe, 0x6}, {0x0, 0x4, 0x5, 0x1}, {0x2, 0x1, 0x5, 0x8}, {0x3, 0x3, 0x2, 0xa}, {0x2, 0x5, 0xc, 0x8}], 0x10, 0x200}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7020000006a000085000000860000008500000007000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r13, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1f, 0x6, 0xa1, 0x3, 0x108, r3, 0xffffff66, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x2}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_tracing={0x1a, 0x12, &(0x7f0000000680)=@raw=[@ldst={0x3, 0x2, 0x0, 0x4, 0x3, 0x2, 0x4}, @map_fd={0x18, 0x1, 0x1, 0x0, r14}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x6}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000240)='GPL\x00', 0x8e7, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, 0x18, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x4, 0x5, 0xff, 0x3}, 0x10, 0x2861f, r5, 0x9, &(0x7f0000000500)=[r5, r14, r3, 0x1, r4, r1, r1, r4, r3, r4], &(0x7f0000000880)=[{0x1, 0x4, 0xb, 0x2}, {0x4, 0x3, 0x4, 0x5}, {0x2, 0x2, 0xc}, {0x3, 0x2, 0x4, 0xb}, {0x3, 0x2, 0x10, 0x7}, {0x3, 0x2, 0x9, 0x1}, {0x2, 0x5, 0xe, 0x6}, {0x2, 0x4, 0xf, 0x9}, {0x5, 0x1, 0x9, 0x5}], 0x10, 0x8000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.501417367s ago: executing program 3 (id=3054): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0xfffffffffffffed4, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES8, @ANYRESOCT=r3], 0x128}, 0x40000) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.500023937s ago: executing program 1 (id=3056): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa1, 0xa1, 0xa, [@datasec={0xe, 0x2, 0x0, 0xf, 0x1, [{0x4, 0x3, 0x9}, {0x4, 0x40c0, 0xa8}], "96"}, @func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{0x1, 0x3}, {0x7, 0x1}, {0xf, 0x4}, {0x8, 0x9}, {0x6, 0x5}, {0x3, 0x3}, {0xa, 0x4}, {0xe, 0x2}, {0x7, 0x2}, {0x3, 0x3}]}, @enum={0x5, 0x1, 0x0, 0x6, 0x4, [{0x8, 0x7}]}, @const={0xd, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x2e, 0x61, 0x61, 0x30, 0x30, 0x0, 0x5f, 0x0]}}, &(0x7f00000006c0)=""/4096, 0xc6, 0x1000, 0x1, 0x1c7, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x10020, 0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x10000, 0x400, 0x0, 0xfffffffe, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 7.499734427s ago: executing program 4 (id=3014): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{}, &(0x7f0000004000), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x24021004, 0x0, 0xfffffffffffffe75, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x8608, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'macsec0\x00'}) socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0xca58c30f81b6079f}) socketpair(0x27, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) 6.747244627s ago: executing program 1 (id=3058): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000690400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x30}, 0x94) 6.742249337s ago: executing program 2 (id=2874): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x1, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000c000009b82abc45233040000000018114b54", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000570000009500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00a31ebff3f2b02b07b0e3d9373d000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x11, &(0x7f0000000b00)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000", @ANYRES32, @ANYBLOB="00007fffffffffffffff00"/20, @ANYRES32=0x0, @ANYBLOB], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000200850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x17) (rerun: 32) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3ff, 0x22a0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000580)={&(0x7f0000000280)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000600)=[{&(0x7f00000002c0)="8546ceaa3dc7de8819716bd6e7524f2cd3dd4250bdf6bd8b6e5dfa8ea37ce6e96dd1cfa2c42b56cca10d378456e5ce3a537c6549ec599d5b7d70625d7cddbad1caa6837b596223b2fc2765fe7d64", 0x4e}, {&(0x7f0000000340)="1b594b3f49b8fa76bbde53888aba1607d9c5eb8231e836d520dbccdb390f6e5d2d1600937760ee3dc23f25c43173d4d0702b7bf744df076e8a312a4c6580cb8fc546cd291206dabbf57a1e9138080bccc726c8bb5e2d4006ba070d78ffc1e0119e2d4e7166b10ca2057aa060739560f218eec2005d0bf7f49d612c1ba1779e8a6bd23c198af018bf6fce90a0f2fe39beecec64da16966970f5c2fb0decea6ba6b9a8935afc3aee44b06134e9937c4143790a0e3a060877dabb7f74d1b30122ef3a3d2b00b73133579fc751f47fcbc3dc101e041af3856e1d1737835f2c7e24e80470c1187d905a2e608e", 0xea}], 0x2, &(0x7f0000000480)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x100}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x60}, 0x800) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (rerun: 32) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) (async, rerun: 64) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) (async, rerun: 64) close(r5) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x9, 0x3, 0x9, 0x1, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0xc}, 0x48) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r6) (async, rerun: 64) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x127) (async, rerun: 64) close(r7) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x13, 0x4, 0xb, 0x1, 0x1488, 0xffffffffffffffff, 0x8, '\x00', r8, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x50) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x40305829, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000400)={0x0, r9}, 0x10) 6.17185098s ago: executing program 0 (id=3059): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) (async) socket$kcm(0x2, 0x3, 0x2) (async) r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, &(0x7f0000000000)=[{0x0, 0x34000}], 0x1}, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\t\x00\x00'], 0x50) (async) close(0x3) (async) syz_clone(0x20000000, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0x0, 0xb6d1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='net_prio.prioidx\x00', 0x26e1, 0x0) close(r2) write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000086dd"], 0xcfa4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x11, &(0x7f0000000b00)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfd, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x1000, r5}, 0x38) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd"], 0xfdef) r6 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="02", 0x1}], 0x1}, 0x0) 6.17113081s ago: executing program 1 (id=3060): r0 = socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%+9llu \x00'}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r9, 0x58, &(0x7f00000000c0)}, 0x10) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x2005, 0x0, 0x51, 0x1, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xd}, 0x10, 0x2, 0x80000, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x101002, 0x0) ioctl$TUNSETSTEERINGEBPF(r11, 0x800454e0, &(0x7f0000000240)=r10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018010000756cff7c00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$kcm(0x2, 0x2, 0x73) (async) syz_clone(0x40000400, 0x0, 0x0, 0x0, 0x0, 0x0) 6.17034372s ago: executing program 3 (id=3061): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, 0x0, &(0x7f0000000140)='syzkaller\x00'}, 0x94) (async, rerun: 64) socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) socket$kcm(0x2, 0x200000000000001, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x70}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, 0x0}, 0x0) (async, rerun: 64) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) bpf$OBJ_GET_PROG(0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) socket$kcm(0xa, 0x2, 0x88) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x8, 0x4, 0x0, 0xfffffffe}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2340, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x720}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x2, 0x2, 0x0) r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r1) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x6c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) (rerun: 32) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848390000005e140602000000000e0027", 0x23}], 0x1}, 0x480c1) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) 6.16893528s ago: executing program 4 (id=3014): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{}, &(0x7f0000004000), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x24021004, 0x0, 0xfffffffffffffe75, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x8608, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'macsec0\x00'}) socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0xca58c30f81b6079f}) socketpair(0x27, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) 5.489395613s ago: executing program 0 (id=3062): socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x11, 0x200000000000003, 0x300) (async) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000002c00)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000300000000020000000200000000000000000000000000000105da73a2400000000000000000000009"], 0x0, 0x4e}, 0x20) close(0xffffffffffffffff) (async) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000080)="b5fa4fc50811204300ff970386780d376e4e7719b506a0977b00000000000000", 0x20}, {0x0}], 0x2}, 0x0) (async) socket$kcm(0x2, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) (async) socket$kcm(0x22, 0x0, 0x21) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0xfffffffffffffd45) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a3f000000a3f500950004000000010045"], 0x0}, 0x94) (async) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) perf_event_open(0x0, 0x0, 0x0, r3, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, 0x0) (async) r4 = socket$kcm(0x23, 0x2, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x4) (async) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet, 0x80, 0x0}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) 5.440652818s ago: executing program 1 (id=3063): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32) setsockopt$sock_attach_bpf(r1, 0x10e, 0xc, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="0000e60000ff7f00000000000000eb7f347d0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000002, 0xffffffffffffffde, 0x0, &(0x7f0000000200)="63eced8e46dc3f01000000f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='\x00') 5.440055678s ago: executing program 2 (id=2874): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x1, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000c000009b82abc45233040000000018114b54", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000570000009500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00a31ebff3f2b02b07b0e3d9373d000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x11, &(0x7f0000000b00)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000", @ANYRES32, @ANYBLOB="00007fffffffffffffff00"/20, @ANYRES32=0x0, @ANYBLOB], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000200850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x17) (rerun: 32) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3ff, 0x22a0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000580)={&(0x7f0000000280)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000600)=[{&(0x7f00000002c0)="8546ceaa3dc7de8819716bd6e7524f2cd3dd4250bdf6bd8b6e5dfa8ea37ce6e96dd1cfa2c42b56cca10d378456e5ce3a537c6549ec599d5b7d70625d7cddbad1caa6837b596223b2fc2765fe7d64", 0x4e}, {&(0x7f0000000340)="1b594b3f49b8fa76bbde53888aba1607d9c5eb8231e836d520dbccdb390f6e5d2d1600937760ee3dc23f25c43173d4d0702b7bf744df076e8a312a4c6580cb8fc546cd291206dabbf57a1e9138080bccc726c8bb5e2d4006ba070d78ffc1e0119e2d4e7166b10ca2057aa060739560f218eec2005d0bf7f49d612c1ba1779e8a6bd23c198af018bf6fce90a0f2fe39beecec64da16966970f5c2fb0decea6ba6b9a8935afc3aee44b06134e9937c4143790a0e3a060877dabb7f74d1b30122ef3a3d2b00b73133579fc751f47fcbc3dc101e041af3856e1d1737835f2c7e24e80470c1187d905a2e608e", 0xea}], 0x2, &(0x7f0000000480)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x100}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x60}, 0x800) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (rerun: 32) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) (async, rerun: 64) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) (async, rerun: 64) close(r5) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x9, 0x3, 0x9, 0x1, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0xc}, 0x48) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r6) (async, rerun: 64) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x127) (async, rerun: 64) close(r7) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x13, 0x4, 0xb, 0x1, 0x1488, 0xffffffffffffffff, 0x8, '\x00', r8, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x50) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x40305829, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000400)={0x0, r9}, 0x10) 4.779040278s ago: executing program 3 (id=3064): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x5}, 0x0, 0x1, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1, 0x12) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r1, &(0x7f0000000080)="021aa52d92f180dad1783e1440d68b475b0b1bc27fc225c1cae64fea010c3608428aa28a42128e540a131d9d59113656f99e8a5a492256f915e466f862939106ad07537c5c939f5db851c1f173778ddafcdfd6a52c399f913f57f4732768956ad7525016fe237d886ea7404deceb1dc3ec679a783790013af330", &(0x7f0000000280)=""/197, 0x4}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r1, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000740)={0x4, 0x0}, 0x8) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@generic={&(0x7f0000000780)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000500)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @jmp={0x5, 0x0, 0x3, 0x4, 0x9, 0xfffffffffffffff0, 0xfffffffffffffff0}, @generic={0x21, 0x3, 0x8, 0x3}, @map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7ff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @generic={0x9, 0x8, 0xe, 0xe000, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x9}], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x1, '\x00', r2, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0xe, 0x44e}, 0x10, r3, 0x0, 0x5, &(0x7f0000000800)=[r1, r1, r1, r1, r1, r1, r1, r4], &(0x7f0000000840)=[{0x1, 0x2, 0xf, 0x3}, {0x4, 0x5, 0x1, 0x6}, {0x3, 0x3, 0x7, 0xc}, {0x0, 0x2, 0xe, 0xb}, {0x5, 0x4, 0x6, 0x1}], 0x10, 0x7}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.778712989s ago: executing program 4 (id=3014): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{}, &(0x7f0000004000), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x24021004, 0x0, 0xfffffffffffffe75, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x8608, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'macsec0\x00'}) socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0xca58c30f81b6079f}) socketpair(0x27, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) 3.986493692s ago: executing program 0 (id=3065): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa1}, [@call]}, &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111b200000000008510000002000000850000000700000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x61}, 0x70) 3.972975813s ago: executing program 2 (id=2874): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x1, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000c000009b82abc45233040000000018114b54", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000570000009500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00a31ebff3f2b02b07b0e3d9373d000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x11, &(0x7f0000000b00)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000", @ANYRES32, @ANYBLOB="00007fffffffffffffff00"/20, @ANYRES32=0x0, @ANYBLOB], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000200850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x17) (rerun: 32) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3ff, 0x22a0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000580)={&(0x7f0000000280)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000600)=[{&(0x7f00000002c0)="8546ceaa3dc7de8819716bd6e7524f2cd3dd4250bdf6bd8b6e5dfa8ea37ce6e96dd1cfa2c42b56cca10d378456e5ce3a537c6549ec599d5b7d70625d7cddbad1caa6837b596223b2fc2765fe7d64", 0x4e}, {&(0x7f0000000340)="1b594b3f49b8fa76bbde53888aba1607d9c5eb8231e836d520dbccdb390f6e5d2d1600937760ee3dc23f25c43173d4d0702b7bf744df076e8a312a4c6580cb8fc546cd291206dabbf57a1e9138080bccc726c8bb5e2d4006ba070d78ffc1e0119e2d4e7166b10ca2057aa060739560f218eec2005d0bf7f49d612c1ba1779e8a6bd23c198af018bf6fce90a0f2fe39beecec64da16966970f5c2fb0decea6ba6b9a8935afc3aee44b06134e9937c4143790a0e3a060877dabb7f74d1b30122ef3a3d2b00b73133579fc751f47fcbc3dc101e041af3856e1d1737835f2c7e24e80470c1187d905a2e608e", 0xea}], 0x2, &(0x7f0000000480)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x100}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x60}, 0x800) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (rerun: 32) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) (async, rerun: 64) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) (async, rerun: 64) close(r5) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x9, 0x3, 0x9, 0x1, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0xc}, 0x48) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r6) (async, rerun: 64) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x127) (async, rerun: 64) close(r7) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x13, 0x4, 0xb, 0x1, 0x1488, 0xffffffffffffffff, 0x8, '\x00', r8, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x50) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x40305829, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000400)={0x0, r9}, 0x10) 3.398648106s ago: executing program 1 (id=3066): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x14, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10a}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x14, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10a}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) socketpair(0x2c, 0x3, 0x0, &(0x7f0000000740)) 3.398241226s ago: executing program 4 (id=3014): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{}, &(0x7f0000004000), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x24021004, 0x0, 0xfffffffffffffe75, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x8608, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'macsec0\x00'}) socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0xca58c30f81b6079f}) socketpair(0x27, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) 2.761356475s ago: executing program 0 (id=3067): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000013c0)="b9ff03316844268cb89e14f086dd", 0x0, 0x51, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r1 = socket$kcm(0x10, 0x3, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000027c0)=""/4047, 0xfcf}, {&(0x7f00000037c0)=""/4064, 0xfe0}, {&(0x7f00000002c0)=""/244, 0xf4}, {&(0x7f00000025c0)=""/28, 0x1c}, {&(0x7f00000012c0)=""/148, 0x94}], 0x5}, 0x40000100) (async) recvmsg$kcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000047c0)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/116, 0x74}], 0x2, &(0x7f0000000840)=""/86, 0x56}, 0x10160) socket$kcm(0x29, 0xbda7c6c382fdc19c, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x10, 0x0, 0x6, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) (async) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x17, 0x0, 0x4, 0x0, 0x0, 0xfffffffc}, 0x0, 0x4000000000000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xb3e, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x19, 0x0, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r3}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, r3, 0x4}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="2008020022003507d25a806f8c6394f90524fc600d001141090005000400000037153e370248038011000000d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000080)=@in={0x2, 0x4e23, @rand_addr=0x64010101}, 0x80, &(0x7f0000000100)=[{&(0x7f0000001380)="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", 0x1000}, {&(0x7f0000000000)="b1022404d6d45339ffe1cffc5261cd4318416d47145575e77e6130745aa36085d885716d3c61208b4ed7aaf55d5796bdf7d9916bb98e7dc74167ee309659c3", 0x3f}, {&(0x7f0000000500)="f6b3a7bf23de7f2527a9c117d4ce021372f0f16a12f9bb889b90221fa7e91fcf84c22da72e8bb0216a72fd287d67076f39b106b15d894ddc33adbd0b45e419ea0a5b95f9abc4c8edfab6e6bd09b9c606d5e9954c40d1fcfe4199c07b7478162dedaee4651ec22475bc2083d71e0ba8d0c5a6cd471837f6b16e3c2f390e8ae7ac100872d4187eb39284df08f77589b46024eb1ea41c783c06a545b8f276d6f8c2cf071ef0ae673a3ba1ada353faaf65e0972228e7514ec2e1e98b3c9c36628e4a1cba58de2821ccb65cd19360184256ed7d61ccbef0a476666f8474abf4b9d2", 0xdf}], 0x3, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x1b0}, 0xc0c0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') syz_open_procfs$namespace(0x0, &(0x7f0000000080)) (async) r6 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1, 0x0, 0x0, 0x400300}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYRESHEX=r6], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.757757105s ago: executing program 2 (id=2874): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x1, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000c000009b82abc45233040000000018114b54", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000570000009500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00a31ebff3f2b02b07b0e3d9373d000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x11, &(0x7f0000000b00)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000", @ANYRES32, @ANYBLOB="00007fffffffffffffff00"/20, @ANYRES32=0x0, @ANYBLOB], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000200850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x17) (rerun: 32) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3ff, 0x22a0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000580)={&(0x7f0000000280)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000600)=[{&(0x7f00000002c0)="8546ceaa3dc7de8819716bd6e7524f2cd3dd4250bdf6bd8b6e5dfa8ea37ce6e96dd1cfa2c42b56cca10d378456e5ce3a537c6549ec599d5b7d70625d7cddbad1caa6837b596223b2fc2765fe7d64", 0x4e}, {&(0x7f0000000340)="1b594b3f49b8fa76bbde53888aba1607d9c5eb8231e836d520dbccdb390f6e5d2d1600937760ee3dc23f25c43173d4d0702b7bf744df076e8a312a4c6580cb8fc546cd291206dabbf57a1e9138080bccc726c8bb5e2d4006ba070d78ffc1e0119e2d4e7166b10ca2057aa060739560f218eec2005d0bf7f49d612c1ba1779e8a6bd23c198af018bf6fce90a0f2fe39beecec64da16966970f5c2fb0decea6ba6b9a8935afc3aee44b06134e9937c4143790a0e3a060877dabb7f74d1b30122ef3a3d2b00b73133579fc751f47fcbc3dc101e041af3856e1d1737835f2c7e24e80470c1187d905a2e608e", 0xea}], 0x2, &(0x7f0000000480)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x100}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x60}, 0x800) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (rerun: 32) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) (async, rerun: 64) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) (async, rerun: 64) close(r5) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x9, 0x3, 0x9, 0x1, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0xc}, 0x48) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r6) (async, rerun: 64) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x127) (async, rerun: 64) close(r7) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x13, 0x4, 0xb, 0x1, 0x1488, 0xffffffffffffffff, 0x8, '\x00', r8, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x50) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x40305829, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000400)={0x0, r9}, 0x10) 2.161295411s ago: executing program 1 (id=3068): bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYRESOCT=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x8, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018120010", @ANYRESOCT, @ANYBLOB="000000000000000000000000000000682900850000001b000000b7000000000000009500000000000000dd744ec422a4a5fb42afb750ede3b0346d88ccfde1b1c33e7d99fb79bd824b0c19c70f4f0ec702c977a3aab218a18e1ce73b36d29f28b47a5871b7acedab24f8d24ffc96790864f2443a9e8ce8410ff3a5e5629322f012ca1e5ccb87e10d9b0cad6e1592e54ea45151ad19306d3eefa5b190b11832bf567a286c56fffac6ec1125959fd3a0638c1fab6e237a379881b7fc4668d81b"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001900599c6d"], 0xfe33) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='-net_cls %rdma '], 0xf) perf_event_open(&(0x7f0000000a80)={0x1, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xe, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x80001, 0x1, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r7 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x101088, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x62) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) write$cgroup_subtree(r6, &(0x7f0000000580)=ANY=[@ANYBLOB], 0xfdef) sendmsg$kcm(r4, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x6, @mcast1}, 0x80, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='rss_stat\x00', r0}, 0x18) 2.160798751s ago: executing program 4 (id=3014): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{}, &(0x7f0000004000), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x24021004, 0x0, 0xfffffffffffffe75, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x8608, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'macsec0\x00'}) socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0xca58c30f81b6079f}) socketpair(0x27, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) 1.482141413s ago: executing program 0 (id=3069): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_clone(0xc510c080, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0) socketpair(0xa, 0x3, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000280), 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x25, 0x1, 0x0) recvmsg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40010040) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4001c, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r5, 0x0, 0x27, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r0, r4, 0x0, 0xfffffffffffffecd, &(0x7f0000000040)='cor\x98up\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x67}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) openat$cgroup_subtree(r6, &(0x7f0000000140), 0x2, 0x0) close(0xffffffffffffffff) write$cgroup_type(r2, &(0x7f00000000c0), 0x9) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r9, 0xfffff000, 0xe, 0x0, &(0x7f0000000180)="61df7100c80400d572e12423b680", 0x0, 0x38000000, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xb4, &(0x7f000000cf3d)=""/180, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r6}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 1.472557784s ago: executing program 2 (id=2874): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x1, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000c000009b82abc45233040000000018114b54", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000570000009500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00a31ebff3f2b02b07b0e3d9373d000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x11, &(0x7f0000000b00)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000", @ANYRES32, @ANYBLOB="00007fffffffffffffff00"/20, @ANYRES32=0x0, @ANYBLOB], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000200850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x17) (rerun: 32) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3ff, 0x22a0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000580)={&(0x7f0000000280)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000600)=[{&(0x7f00000002c0)="8546ceaa3dc7de8819716bd6e7524f2cd3dd4250bdf6bd8b6e5dfa8ea37ce6e96dd1cfa2c42b56cca10d378456e5ce3a537c6549ec599d5b7d70625d7cddbad1caa6837b596223b2fc2765fe7d64", 0x4e}, {&(0x7f0000000340)="1b594b3f49b8fa76bbde53888aba1607d9c5eb8231e836d520dbccdb390f6e5d2d1600937760ee3dc23f25c43173d4d0702b7bf744df076e8a312a4c6580cb8fc546cd291206dabbf57a1e9138080bccc726c8bb5e2d4006ba070d78ffc1e0119e2d4e7166b10ca2057aa060739560f218eec2005d0bf7f49d612c1ba1779e8a6bd23c198af018bf6fce90a0f2fe39beecec64da16966970f5c2fb0decea6ba6b9a8935afc3aee44b06134e9937c4143790a0e3a060877dabb7f74d1b30122ef3a3d2b00b73133579fc751f47fcbc3dc101e041af3856e1d1737835f2c7e24e80470c1187d905a2e608e", 0xea}], 0x2, &(0x7f0000000480)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x100}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x60}, 0x800) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (rerun: 32) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) (async, rerun: 64) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) (async, rerun: 64) close(r5) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x9, 0x3, 0x9, 0x1, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0xc}, 0x48) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r6) (async, rerun: 64) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x127) (async, rerun: 64) close(r7) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x13, 0x4, 0xb, 0x1, 0x1488, 0xffffffffffffffff, 0x8, '\x00', r8, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x50) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x40305829, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000400)={0x0, r9}, 0x10) 521.210672ms ago: executing program 3 (id=3070): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x10005d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0}, 0x4402, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xfffffffffffdffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001640), 0x8}, 0x0, 0x0, 0x2575, 0x1, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='sched_kthread_stop\x00', r1}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_devices(r2, 0x0, 0x2, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) close(r3) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000500)=r5, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000480)={0x0, 0x13, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0x8ec0}], 0x12}, 0x12) setsockopt$sock_attach_bpf(r6, 0x1, 0x19, 0x0, 0x0) r8 = openat$cgroup_devices(r4, 0x0, 0x2, 0x0) write$cgroup_devices(r8, 0x0, 0xa) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x7d}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001600)={r5, 0x58, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0x71, 0x0, 0x1, 0x4c, 0x800}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, 0x2}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0x20, &(0x7f0000001400)={&(0x7f0000000340)=""/4096, 0x1000, 0x0, &(0x7f0000001340)=""/183, 0xb7}}, 0x10) 510.171413ms ago: executing program 4 (id=3014): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{}, &(0x7f0000004000), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x24021004, 0x0, 0xfffffffffffffe75, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x8608, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'macsec0\x00'}) socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0xca58c30f81b6079f}) socketpair(0x27, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) 3.01841ms ago: executing program 0 (id=3071): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="1307", 0x2}], 0x1}, 0x4051) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) setsockopt$sock_attach_bpf(r4, 0x1, 0x10, &(0x7f0000001280), 0x4) recvmsg$unix(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x8, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xf, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r7}, 0x10) perf_event_open(0x0, 0x0, 0x10, r8, 0x1b) 0s ago: executing program 2 (id=2874): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x1, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000c000009b82abc45233040000000018114b54", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000570000009500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00a31ebff3f2b02b07b0e3d9373d000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x11, &(0x7f0000000b00)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000", @ANYRES32, @ANYBLOB="00007fffffffffffffff00"/20, @ANYRES32=0x0, @ANYBLOB], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000200850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x17) (rerun: 32) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3ff, 0x22a0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000580)={&(0x7f0000000280)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000600)=[{&(0x7f00000002c0)="8546ceaa3dc7de8819716bd6e7524f2cd3dd4250bdf6bd8b6e5dfa8ea37ce6e96dd1cfa2c42b56cca10d378456e5ce3a537c6549ec599d5b7d70625d7cddbad1caa6837b596223b2fc2765fe7d64", 0x4e}, {&(0x7f0000000340)="1b594b3f49b8fa76bbde53888aba1607d9c5eb8231e836d520dbccdb390f6e5d2d1600937760ee3dc23f25c43173d4d0702b7bf744df076e8a312a4c6580cb8fc546cd291206dabbf57a1e9138080bccc726c8bb5e2d4006ba070d78ffc1e0119e2d4e7166b10ca2057aa060739560f218eec2005d0bf7f49d612c1ba1779e8a6bd23c198af018bf6fce90a0f2fe39beecec64da16966970f5c2fb0decea6ba6b9a8935afc3aee44b06134e9937c4143790a0e3a060877dabb7f74d1b30122ef3a3d2b00b73133579fc751f47fcbc3dc101e041af3856e1d1737835f2c7e24e80470c1187d905a2e608e", 0xea}], 0x2, &(0x7f0000000480)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x100}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x60}, 0x800) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (rerun: 32) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) (async, rerun: 64) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) (async, rerun: 64) close(r5) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x9, 0x3, 0x9, 0x1, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0xc}, 0x48) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r6) (async, rerun: 64) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x127) (async, rerun: 64) close(r7) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x13, 0x4, 0xb, 0x1, 0x1488, 0xffffffffffffffff, 0x8, '\x00', r8, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x50) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x40305829, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000400)={0x0, r9}, 0x10) kernel console output (not intermixed with test programs): 600][ T6497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.907643][ T6523] netlink: 'syz.1.591': attribute type 29 has an invalid length. [ 147.946437][ T6523] netlink: 'syz.1.591': attribute type 29 has an invalid length. [ 147.994117][ T6525] netlink: 'syz.1.591': attribute type 29 has an invalid length. [ 148.512194][ T6531] netlink: 'syz.4.594': attribute type 10 has an invalid length. [ 148.653577][ T6531] team0: Device hsr_slave_0 failed to register rx_handler [ 148.694739][ T4282] Bluetooth: hci4: ISO packet for unknown connection handle 2622 [ 148.808397][ T6551] netlink: 180 bytes leftover after parsing attributes in process `syz.2.601'. [ 148.968915][ T6553] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.602'. [ 149.279983][ T6558] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.603'. [ 149.553799][ T6572] netlink: 132 bytes leftover after parsing attributes in process `syz.4.608'. [ 149.780126][ T6581] netlink: 132 bytes leftover after parsing attributes in process `syz.3.611'. [ 150.757108][ T6606] netlink: 'syz.1.610': attribute type 21 has an invalid length. [ 150.781001][ T6606] netlink: 128 bytes leftover after parsing attributes in process `syz.1.610'. [ 150.821313][ T6606] netlink: 'syz.1.610': attribute type 4 has an invalid length. [ 150.840650][ T6606] netlink: 'syz.1.610': attribute type 5 has an invalid length. [ 150.914386][ T6606] netlink: 3 bytes leftover after parsing attributes in process `syz.1.610'. [ 150.974959][ T6614] device sit0 left promiscuous mode [ 151.160015][ T6617] device sit0 entered promiscuous mode [ 152.840324][ T6654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.630'. [ 153.303316][ T6671] netlink: 'syz.4.635': attribute type 39 has an invalid length. [ 154.445553][ T6699] netlink: 'syz.3.639': attribute type 10 has an invalid length. [ 154.785823][ T6699] team0: Cannot enslave team device to itself [ 155.368335][ T6713] netlink: 60583 bytes leftover after parsing attributes in process `syz.3.647'. [ 155.416586][ T6713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.647'. [ 155.595119][ T6722] netlink: 'syz.2.649': attribute type 4 has an invalid length. [ 155.602829][ T6722] netlink: 14345 bytes leftover after parsing attributes in process `syz.2.649'. [ 155.821873][ T6731] netlink: 'syz.0.652': attribute type 2 has an invalid length. [ 155.852302][ T6731] netlink: 'syz.0.652': attribute type 1 has an invalid length. [ 155.881330][ T6731] netlink: 152 bytes leftover after parsing attributes in process `syz.0.652'. [ 155.942684][ T6739] netlink: 3 bytes leftover after parsing attributes in process `syz.1.655'. [ 156.729257][ T6759] netlink: 'syz.4.660': attribute type 1 has an invalid length. [ 156.793106][ T6759] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.660'. [ 157.175610][ T6767] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.662'. [ 157.287200][ T6767] netlink: 'syz.3.662': attribute type 3 has an invalid length. [ 157.349220][ T6767] netlink: 'syz.3.662': attribute type 1 has an invalid length. [ 159.422118][ T6827] netlink: 184 bytes leftover after parsing attributes in process `syz.1.675'. [ 160.669412][ T6863] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.684'. [ 160.807003][ T6871] netlink: 'syz.2.686': attribute type 10 has an invalid length. [ 160.955044][ T6871] bridge0: port 3(dummy0) entered disabled state [ 161.001137][ T6871] device dummy0 left promiscuous mode [ 161.034935][ T6871] bridge0: port 3(dummy0) entered disabled state [ 161.190538][ T6871] team0: Port device dummy0 added [ 161.211924][ T6872] netlink: 'syz.2.686': attribute type 10 has an invalid length. [ 161.318018][ T6872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.349587][ T6872] team0: Port device bond0 added [ 161.375085][ T6874] netlink: 'syz.2.686': attribute type 21 has an invalid length. [ 161.399361][ T6874] netlink: 156 bytes leftover after parsing attributes in process `syz.2.686'. [ 161.912221][ T6894] delete_channel: no stack [ 161.957698][ T6899] netlink: 'syz.0.693': attribute type 2 has an invalid length. [ 162.095724][ T6899] netlink: 10 bytes leftover after parsing attributes in process `syz.0.693'. [ 163.593584][ T6917] netlink: 60 bytes leftover after parsing attributes in process `syz.1.696'. [ 163.695851][ T6917] device caif0 entered promiscuous mode [ 164.100422][ T6941] netlink: 132 bytes leftover after parsing attributes in process `syz.4.701'. [ 164.315599][ T6952] netlink: 'syz.0.705': attribute type 21 has an invalid length. [ 164.363328][ T6952] netlink: 128 bytes leftover after parsing attributes in process `syz.0.705'. [ 164.440809][ T6952] netlink: 'syz.0.705': attribute type 4 has an invalid length. [ 164.491640][ T6952] netlink: 'syz.0.705': attribute type 5 has an invalid length. [ 164.493606][ T6956] netlink: 'syz.3.706': attribute type 2 has an invalid length. [ 164.524776][ T6952] netlink: 3 bytes leftover after parsing attributes in process `syz.0.705'. [ 164.620566][ T6956] device .d entered promiscuous mode [ 165.109733][ T6966] netlink: 'syz.4.709': attribute type 10 has an invalid length. [ 165.308212][ T6966] device gretap0 entered promiscuous mode [ 165.340172][ T6966] bond0: (slave gretap0): Enslaving as an active interface with an up link [ 165.753361][ T6987] netlink: 'syz.2.715': attribute type 1 has an invalid length. [ 165.812197][ T6987] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.715'. [ 165.861164][ T6989] netlink: 'syz.2.715': attribute type 1 has an invalid length. [ 165.885709][ T6989] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.715'. [ 166.467290][ T7007] device sit0 entered promiscuous mode [ 167.608374][ T7036] netlink: 172 bytes leftover after parsing attributes in process `syz.2.729'. [ 167.807440][ T7051] IPv6: pim6reg1: Disabled Multicast RS [ 168.355768][ T7063] sctp: [Deprecated]: syz.2.736 (pid 7063) Use of struct sctp_assoc_value in delayed_ack socket option. [ 168.355768][ T7063] Use struct sctp_sack_info instead [ 168.441543][ T7062] delete_channel: no stack [ 168.707142][ T7078] netlink: 'syz.1.739': attribute type 4 has an invalid length. [ 168.739665][ T7078] netlink: 152 bytes leftover after parsing attributes in process `syz.1.739'. [ 168.840907][ T7078] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 168.895069][ T7080] IPv6: NLM_F_REPLACE set, but no existing node found! [ 168.985866][ T7082] netlink: 'syz.2.742': attribute type 10 has an invalid length. [ 169.047009][ T7082] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.057514][ T7082] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.263515][ T7082] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.271252][ T7082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.279600][ T7082] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.287163][ T7082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.396344][ T7082] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 169.751130][ T7105] netlink: 'syz.0.747': attribute type 10 has an invalid length. [ 169.803038][ T7111] netlink: 'syz.1.748': attribute type 1 has an invalid length. [ 169.823442][ T7111] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.748'. [ 170.061100][ T7116] netlink: 60 bytes leftover after parsing attributes in process `syz.2.751'. [ 170.102688][ T7116] netlink: 60 bytes leftover after parsing attributes in process `syz.2.751'. [ 170.132367][ T7117] netlink: 60 bytes leftover after parsing attributes in process `syz.2.751'. [ 170.360604][ T7117] netlink: 60 bytes leftover after parsing attributes in process `syz.2.751'. [ 170.614690][ T7130] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 170.621986][ T7130] IPv6: NLM_F_CREATE should be set when creating new route [ 170.629318][ T7130] IPv6: NLM_F_CREATE should be set when creating new route [ 170.964040][ T7151] netlink: 'syz.0.757': attribute type 10 has an invalid length. [ 171.019648][ T7151] team0: Port device syz_tun added [ 171.115647][ T7153] netlink: 'syz.2.758': attribute type 10 has an invalid length. [ 171.143826][ T7153] netlink: 40 bytes leftover after parsing attributes in process `syz.2.758'. [ 171.217709][ T7153] device dummy0 entered promiscuous mode [ 171.282530][ T7153] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 171.403000][ T7153] team0: Port device dummy0 removed [ 171.450976][ T7153] bridge0: port 3(dummy0) entered blocking state [ 171.562240][ T7153] bridge0: port 3(dummy0) entered disabled state [ 171.672796][ T7164] netlink: 'syz.4.762': attribute type 10 has an invalid length. [ 173.240958][ T7215] netlink: 126632 bytes leftover after parsing attributes in process `syz.2.779'. [ 173.246082][ T7213] netlink: 'syz.3.778': attribute type 3 has an invalid length. [ 173.271574][ T7213] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.778'. [ 173.328905][ T7218] netlink: 72 bytes leftover after parsing attributes in process `syz.1.780'. [ 173.622262][ T7227] netlink: 'syz.3.782': attribute type 6 has an invalid length. [ 174.141067][ T7238] netlink: 'syz.3.786': attribute type 21 has an invalid length. [ 174.174142][ T7249] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.788'. [ 175.036701][ T7280] netlink: 'syz.4.800': attribute type 2 has an invalid length. [ 175.360988][ T7290] device ipvlan0 entered promiscuous mode [ 175.382914][ T7290] netlink: 'syz.4.804': attribute type 10 has an invalid length. [ 175.393130][ T7290] team0: Device hsr_slave_0 failed to register rx_handler [ 175.774972][ T7304] netlink: 'syz.4.807': attribute type 16 has an invalid length. [ 175.782762][ T7304] __nla_validate_parse: 2 callbacks suppressed [ 175.782779][ T7304] netlink: 48 bytes leftover after parsing attributes in process `syz.4.807'. [ 175.990125][ T7315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.811'. [ 176.073209][ T7316] netlink: 'syz.3.812': attribute type 10 has an invalid length. [ 176.538147][ T7321] netlink: 'syz.2.813': attribute type 21 has an invalid length. [ 176.564404][ T7321] netlink: 'syz.2.813': attribute type 1 has an invalid length. [ 176.967296][ T7334] netlink: 60 bytes leftover after parsing attributes in process `syz.2.817'. [ 177.494816][ T7355] device sit0 entered promiscuous mode [ 178.817529][ T7386] netlink: 'syz.0.828': attribute type 3 has an invalid length. [ 178.936788][ T7386] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.828'. [ 179.152418][ T7396] Dead loop on virtual device ip6_vti0, fix it urgently! [ 179.308754][ T7402] netlink: 'syz.3.833': attribute type 28 has an invalid length. [ 179.317569][ T7402] netlink: 'syz.3.833': attribute type 4 has an invalid length. [ 179.354073][ T7402] netlink: 136 bytes leftover after parsing attributes in process `syz.3.833'. [ 179.700606][ T7420] netlink: 'syz.0.837': attribute type 10 has an invalid length. [ 179.714942][ T7416] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.840'. [ 180.348888][ T7447] netlink: 'syz.2.846': attribute type 2 has an invalid length. [ 180.414774][ T7447] netlink: 180668 bytes leftover after parsing attributes in process `syz.2.846'. [ 180.467948][ T7453] IPv6: Can't replace route, no match found [ 180.488431][ T7453] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 180.632322][ T7455] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.848'. [ 180.654748][ T7453] netlink: 'syz.4.847': attribute type 10 has an invalid length. [ 180.863909][ T7453] wlan1: mtu less than device minimum [ 180.887364][ T7453] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 180.938663][ T7459] netlink: 'syz.3.849': attribute type 1 has an invalid length. [ 180.957729][ T7459] netlink: 132 bytes leftover after parsing attributes in process `syz.3.849'. [ 181.448322][ T7482] validate_nla: 1 callbacks suppressed [ 181.448337][ T7482] netlink: 'syz.0.856': attribute type 10 has an invalid length. [ 181.508678][ T7482] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.856'. [ 182.491185][ T7524] netlink: 'syz.4.867': attribute type 3 has an invalid length. [ 182.509899][ T7524] netlink: 132 bytes leftover after parsing attributes in process `syz.4.867'. [ 182.965224][ T7524] netlink: 'syz.4.867': attribute type 27 has an invalid length. [ 183.448472][ T7554] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.877'. [ 183.479848][ T7524] bond0: (slave bond_slave_0): Releasing backup interface [ 183.490006][ T7524] device bond_slave_0 left promiscuous mode [ 185.934512][ T4281] Bluetooth: hci2: command 0x0406 tx timeout [ 185.952046][ T4275] Bluetooth: hci3: command 0x0406 tx timeout [ 185.952066][ T4281] Bluetooth: hci4: command 0x0406 tx timeout [ 185.958104][ T4275] Bluetooth: hci1: command 0x0406 tx timeout [ 185.958133][ T4275] Bluetooth: hci0: command 0x0406 tx timeout [ 187.289971][ T7583] delete_channel: no stack [ 191.646561][ T7630] netlink: 'syz.2.898': attribute type 10 has an invalid length. [ 191.665859][ T7630] netlink: 2 bytes leftover after parsing attributes in process `syz.2.898'. [ 191.701244][ T7630] device team0 entered promiscuous mode [ 191.744547][ T7630] device team_slave_0 entered promiscuous mode [ 191.772706][ T7630] device team_slave_1 entered promiscuous mode [ 191.829341][ T7630] device bond0 entered promiscuous mode [ 191.863602][ T7630] device bond_slave_0 entered promiscuous mode [ 191.903892][ T7630] device bond_slave_1 entered promiscuous mode [ 191.928421][ T7630] device bridge0 entered promiscuous mode [ 191.952575][ T7630] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.972088][ T7630] bridge0: port 4(team0) entered blocking state [ 192.002393][ T7630] bridge0: port 4(team0) entered disabled state [ 192.045775][ T7639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.899'. [ 192.285411][ T7648] IPv6: NLM_F_REPLACE set, but no existing node found! [ 192.992966][ T7668] : renamed from veth0_vlan [ 193.203566][ T7677] syz.0.911[7677] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 193.203666][ T7677] syz.0.911[7677] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 193.510181][ T7684] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.914'. [ 193.892527][ T7698] netlink: 'syz.0.919': attribute type 21 has an invalid length. [ 193.920917][ T7698] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.919'. [ 194.123167][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.141036][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.220547][ T7705] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 194.228065][ T7705] IPv6: NLM_F_CREATE should be set when creating new route [ 194.235602][ T7705] IPv6: NLM_F_CREATE should be set when creating new route [ 194.242941][ T7705] IPv6: NLM_F_CREATE should be set when creating new route [ 194.393008][ T7721] netlink: 'syz.1.923': attribute type 10 has an invalid length. [ 194.881197][ T7719] netlink: 'syz.1.923': attribute type 10 has an invalid length. [ 194.963974][ T7724] device sit0 left promiscuous mode [ 195.105472][ T7726] device sit0 entered promiscuous mode [ 195.882424][ T7699] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.917'. [ 195.970607][ T7758] netlink: 166 bytes leftover after parsing attributes in process `syz.2.933'. [ 196.604057][ T7780] IPv6: Can't replace route, no match found [ 196.622294][ T7780] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 196.866149][ T7780] netlink: 'syz.1.938': attribute type 10 has an invalid length. [ 197.111513][ T7780] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 197.499616][ T7806] device sit0 left promiscuous mode [ 197.620417][ T7807] device sit0 entered promiscuous mode [ 198.227510][ T7813] netlink: 'syz.4.947': attribute type 21 has an invalid length. [ 198.245808][ T7814] netlink: 'syz.4.947': attribute type 21 has an invalid length. [ 199.559745][ T7873] netlink: 'syz.1.965': attribute type 21 has an invalid length. [ 199.618026][ T7873] netlink: 128 bytes leftover after parsing attributes in process `syz.1.965'. [ 199.664525][ T7873] netlink: 'syz.1.965': attribute type 5 has an invalid length. [ 199.682561][ T7873] netlink: 'syz.1.965': attribute type 6 has an invalid length. [ 199.763093][ T7873] netlink: 3 bytes leftover after parsing attributes in process `syz.1.965'. [ 199.845306][ T7876] device lo entered promiscuous mode [ 199.871579][ T7876] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 199.935520][ T7887] netlink: 'syz.2.970': attribute type 10 has an invalid length. [ 200.759498][ T7924] netlink: 'syz.2.981': attribute type 1 has an invalid length. [ 200.784638][ T7924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.981'. [ 200.825562][ T7924] netlink: 'syz.2.981': attribute type 5 has an invalid length. [ 200.983341][ T7930] netlink: 750 bytes leftover after parsing attributes in process `syz.4.982'. [ 201.697462][ T4351] wlan1: Trigger new scan to find an IBSS to join [ 202.629585][ T7965] netlink: 'syz.2.991': attribute type 10 has an invalid length. [ 202.655862][ T7965] netlink: 40 bytes leftover after parsing attributes in process `syz.2.991'. [ 204.056335][ T7974] netlink: 'syz.1.994': attribute type 39 has an invalid length. [ 205.268366][ T8001] bond0: (slave team0): Error: Slave device does not support XDP [ 205.355835][ T8006] netlink: 'syz.1.1002': attribute type 2 has an invalid length. [ 205.393212][ T8006] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1002'. [ 205.703475][ T4351] wlan1: Trigger new scan to find an IBSS to join [ 206.032459][ T8021] netlink: 'syz.4.1007': attribute type 7 has an invalid length. [ 206.479887][ T8033] netlink: 'syz.2.1011': attribute type 5 has an invalid length. [ 207.137269][ T4406] wlan1: Creating new IBSS network, BSSID 72:ed:30:35:e7:f8 [ 207.784603][ T8046] raw_sendmsg: syz.4.1016 forgot to set AF_INET. Fix it! [ 207.920573][ T8054] netlink: 'syz.1.1018': attribute type 9 has an invalid length. [ 207.969334][ T8054] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1018'. [ 208.727779][ T8065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1020'. [ 208.786571][ T8065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1020'. [ 208.797538][ T8065] netlink: 33 bytes leftover after parsing attributes in process `syz.4.1020'. [ 208.807931][ T8065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1020'. [ 208.853005][ T8065] netlink: 33 bytes leftover after parsing attributes in process `syz.4.1020'. [ 208.969968][ T8065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1020'. [ 208.989210][ T8065] netlink: 33 bytes leftover after parsing attributes in process `syz.4.1020'. [ 209.852448][ T8116] netlink: 'syz.3.1033': attribute type 2 has an invalid length. [ 209.893486][ T8116] netlink: 'syz.3.1033': attribute type 3 has an invalid length. [ 209.935254][ T8116] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1033'. [ 219.238953][ T8177] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1051'. [ 219.288680][ T8184] netlink: 'syz.4.1052': attribute type 29 has an invalid length. [ 219.361748][ T8184] netlink: 'syz.4.1052': attribute type 29 has an invalid length. [ 219.362920][ T8188] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.1052'. [ 221.841589][ T8235] netlink: 'syz.4.1065': attribute type 27 has an invalid length. [ 222.283460][ T8251] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 222.331506][ T8251] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 225.080816][ T8331] device bridge_slave_1 left promiscuous mode [ 225.162881][ T8331] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.228943][ T8331] device bridge_slave_0 left promiscuous mode [ 225.251021][ T8331] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.759852][ T8364] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1100'. [ 227.504634][ T8395] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1110'. [ 227.853188][ T8419] netlink: 'syz.2.1115': attribute type 10 has an invalid length. [ 227.908987][ T8419] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1115'. [ 227.973421][ T8419] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 228.117811][ T8419] bridge0: port 4(team0) entered blocking state [ 228.161210][ T8419] bridge0: port 4(team0) entered disabled state [ 228.233132][ T8419] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 228.278252][ T8419] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 228.331184][ T8428] netlink: 'syz.0.1119': attribute type 13 has an invalid length. [ 228.380604][ T8428] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.1119'. [ 228.417951][ T8440] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.1121'. [ 228.480248][ T8440] netlink: 6955 bytes leftover after parsing attributes in process `syz.4.1121'. [ 228.969549][ T8459] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.1127'. [ 229.660430][ T8501] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1139'. [ 230.251848][ T8528] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1149'. [ 230.605499][ T8545] netlink: 'syz.3.1153': attribute type 4 has an invalid length. [ 230.613762][ T8545] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1153'. [ 230.972587][ T8555] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1156'. [ 231.523737][ T8567] bond0: (slave team0): Error: Slave device does not support XDP [ 231.684495][ T8568] netlink: 'syz.0.1160': attribute type 10 has an invalid length. [ 231.761176][ T8568] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 232.611784][ T8598] netlink: 'syz.4.1169': attribute type 21 has an invalid length. [ 232.707453][ T8598] netlink: 'syz.4.1169': attribute type 12 has an invalid length. [ 232.740001][ T8598] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1169'. [ 234.294861][ T8628] device ipvlan0 entered promiscuous mode [ 234.512906][ T8629] netlink: 'syz.1.1176': attribute type 28 has an invalid length. [ 234.746923][ T8629] netlink: 'syz.1.1176': attribute type 4 has an invalid length. [ 234.816460][ T8636] netlink: 'syz.0.1177': attribute type 10 has an invalid length. [ 234.890288][ T8629] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1176'. [ 234.901439][ T8636] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1177'. [ 234.941192][ T8636] device team0 entered promiscuous mode [ 234.974915][ T8636] device team_slave_0 entered promiscuous mode [ 235.024860][ T8636] device team_slave_1 entered promiscuous mode [ 235.047999][ T8636] device wlan1 entered promiscuous mode [ 235.090246][ T8636] device syz_tun entered promiscuous mode [ 235.135754][ T8636] bond0: (slave team0): Releasing backup interface [ 235.190730][ T8636] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 236.105899][ T8652] netlink: 'syz.2.1183': attribute type 10 has an invalid length. [ 236.331448][ T8652] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 237.926490][ T8676] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1189'. [ 238.020306][ T8673] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1189'. [ 238.666553][ T8684] netlink: 'syz.2.1192': attribute type 3 has an invalid length. [ 238.783450][ T8684] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1192'. [ 239.820395][ T8690] netlink: 'syz.4.1194': attribute type 29 has an invalid length. [ 240.178546][ T4426] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 241.733214][ T8698] netlink: 'syz.4.1194': attribute type 6 has an invalid length. [ 241.770905][ T8690] netlink: 'syz.4.1194': attribute type 29 has an invalid length. [ 242.368378][ T8723] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1202'. [ 242.481317][ T8721] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1201'. [ 242.503208][ T8727] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1204'. [ 243.053316][ T8744] netlink: 'syz.3.1211': attribute type 21 has an invalid length. [ 243.074773][ T8744] netlink: 'syz.3.1211': attribute type 11 has an invalid length. [ 243.093577][ T8748] netlink: 'syz.3.1211': attribute type 21 has an invalid length. [ 243.132283][ T8750] netlink: 'syz.2.1210': attribute type 2 has an invalid length. [ 243.140494][ T8748] netlink: 'syz.3.1211': attribute type 11 has an invalid length. [ 243.167498][ T8750] device .d entered promiscuous mode [ 243.191242][ T8750] netlink: 'syz.2.1210': attribute type 10 has an invalid length. [ 243.199485][ T8750] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1210'. [ 243.233011][ T8753] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1213'. [ 243.245281][ T8750] bridge0: port 4(team0) entered blocking state [ 243.262982][ T8750] bridge0: port 4(team0) entered disabled state [ 243.338531][ T8750] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 243.405516][ T8750] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 243.503325][ T8753] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1213'. [ 243.545505][ T8752] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1213'. [ 243.595240][ T8768] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1213'. [ 243.847327][ T8779] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1218'. [ 243.871848][ T8781] netlink: 'syz.0.1219': attribute type 10 has an invalid length. [ 243.989918][ T8781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.077684][ T8781] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 244.102070][ T8785] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 244.194738][ T8785] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.460774][ T8797] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1223'. [ 245.020636][ T8820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1226'. [ 245.813352][ T8826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1230'. [ 245.849015][ T8826] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1230'. [ 245.955420][ T8837] validate_nla: 2 callbacks suppressed [ 245.955462][ T8837] netlink: 'syz.1.1233': attribute type 21 has an invalid length. [ 246.054750][ T8837] netlink: 'syz.1.1233': attribute type 5 has an invalid length. [ 246.080190][ T8837] netlink: 'syz.1.1233': attribute type 6 has an invalid length. [ 246.319705][ T8850] netlink: 'syz.3.1235': attribute type 29 has an invalid length. [ 246.373995][ T8850] netlink: 'syz.3.1235': attribute type 29 has an invalid length. [ 246.393920][ T8853] netlink: 'syz.3.1235': attribute type 29 has an invalid length. [ 246.445593][ T8850] netlink: 'syz.3.1235': attribute type 29 has an invalid length. [ 246.477220][ T8853] netlink: 'syz.3.1235': attribute type 29 has an invalid length. [ 246.515896][ T8850] netlink: 'syz.3.1235': attribute type 29 has an invalid length. [ 246.596154][ T8870] netlink: 'syz.0.1242': attribute type 21 has an invalid length. [ 246.616839][ T8868] device team0 entered promiscuous mode [ 246.622619][ T8868] device team_slave_0 entered promiscuous mode [ 246.640193][ T8868] device team_slave_1 entered promiscuous mode [ 246.675926][ T8868] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.726566][ T8868] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 247.612416][ T8912] device geneve1 entered promiscuous mode [ 247.633985][ T8912] team0: Port device geneve1 added [ 248.735676][ T8946] __nla_validate_parse: 8 callbacks suppressed [ 248.735691][ T8946] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1263'. [ 248.861349][ T8946] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1263'. [ 249.180737][ T8960] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1266'. [ 249.712124][ T8972] IPv6: Can't replace route, no match found [ 249.736139][ T8972] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 250.148962][ T8989] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1275'. [ 250.816906][ T9006] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.1278'. [ 250.999527][ T9010] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1280'. [ 251.093153][ T9012] validate_nla: 11 callbacks suppressed [ 251.093185][ T9012] netlink: 'syz.1.1282': attribute type 10 has an invalid length. [ 251.190618][ T9020] device sit0 left promiscuous mode [ 251.540025][ T9022] device sit0 entered promiscuous mode [ 253.272453][ T9076] netlink: 'syz.3.1302': attribute type 21 has an invalid length. [ 253.295314][ T9076] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1302'. [ 253.346409][ T9078] bond0: (slave gretap0): Error: Slave device does not support XDP [ 253.448652][ T9081] netlink: 'syz.4.1301': attribute type 39 has an invalid length. [ 254.306426][ T9113] device hsr0 entered promiscuous mode [ 255.546627][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.552999][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.281604][ T9174] netlink: 'syz.2.1325': attribute type 29 has an invalid length. [ 256.332075][ T9174] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1325'. [ 256.484582][ T9174] netlink: 'syz.2.1325': attribute type 29 has an invalid length. [ 256.492696][ T9174] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1325'. [ 256.510505][ T9169] netlink: 'syz.2.1325': attribute type 29 has an invalid length. [ 256.534476][ T9169] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1325'. [ 256.595032][ T9175] mac80211_hwsim hwsim6 »»»»»»: renamed from wlan0 [ 257.117994][ T9200] netlink: 'syz.2.1333': attribute type 25 has an invalid length. [ 257.502443][ T9227] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.1341'. [ 257.976949][ T9240] netlink: 'syz.0.1345': attribute type 1 has an invalid length. [ 258.010117][ T9240] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.1345'. [ 258.105553][ T9247] netlink: 'syz.4.1347': attribute type 10 has an invalid length. [ 258.133561][ T9247] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1347'. [ 258.214833][ T9254] netlink: 'syz.2.1349': attribute type 10 has an invalid length. [ 258.222702][ T9254] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1349'. [ 258.278137][ T9254] bridge0: port 4(team0) entered blocking state [ 258.299767][ T9254] bridge0: port 4(team0) entered disabled state [ 258.353991][ T9254] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 258.372084][ T9254] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 258.476904][ T9274] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1354'. [ 258.719316][ T9283] netlink: 'syz.2.1356': attribute type 3 has an invalid length. [ 258.761424][ T9283] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1356'. [ 259.616374][ T9309] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.1364'. [ 260.080205][ T9327] netlink: 'syz.1.1370': attribute type 10 has an invalid length. [ 260.098463][ T9325] netlink: 'syz.3.1371': attribute type 3 has an invalid length. [ 260.138578][ T9327] team0: Device bond0 is already an upper device of the team interface [ 260.468662][ T9339] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 261.169630][ T9360] device ipvlan1 entered promiscuous mode [ 262.966362][ T9415] __nla_validate_parse: 5 callbacks suppressed [ 262.966376][ T9415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1396'. [ 262.991264][ T9421] validate_nla: 6 callbacks suppressed [ 262.991279][ T9421] netlink: 'syz.3.1395': attribute type 2 has an invalid length. [ 263.227921][ T9437] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1398'. [ 263.453101][ T9437] ë: port 1(ip6gretap0) entered blocking state [ 263.534814][ T9437] ë: port 1(ip6gretap0) entered disabled state [ 263.590408][ T9449] netlink: 'syz.0.1405': attribute type 9 has an invalid length. [ 263.610557][ T9437] device ip6gretap0 entered promiscuous mode [ 263.621822][ T9449] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1405'. [ 264.312670][ T9468] device veth1_macvtap left promiscuous mode [ 264.326979][ T9468] device macsec0 left promiscuous mode [ 264.391580][ T9472] device veth1_macvtap entered promiscuous mode [ 264.404995][ T9472] device macsec0 entered promiscuous mode [ 264.427916][ T9483] netlink: 'syz.3.1412': attribute type 1 has an invalid length. [ 264.458003][ T9483] netlink: 'syz.3.1412': attribute type 3 has an invalid length. [ 264.467427][ T9483] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1412'. [ 264.803923][ T9492] netlink: 183964 bytes leftover after parsing attributes in process `syz.4.1414'. [ 265.021266][ T9492] netlink: zone id is out of range [ 265.051596][ T9492] netlink: zone id is out of range [ 265.074985][ T9492] netlink: zone id is out of range [ 265.080157][ T9492] netlink: zone id is out of range [ 265.171549][ T9492] netlink: zone id is out of range [ 265.228347][ T9492] netlink: zone id is out of range [ 265.287379][ T9492] netlink: zone id is out of range [ 265.315784][ T9492] netlink: zone id is out of range [ 265.321033][ T9492] netlink: zone id is out of range [ 265.341516][ T9504] netlink: 'syz.2.1417': attribute type 10 has an invalid length. [ 265.353654][ T9492] netlink: zone id is out of range [ 265.397920][ T9504] team0: Device hsr_slave_0 failed to register rx_handler [ 265.718697][ T9518] netlink: 'syz.4.1421': attribute type 39 has an invalid length. [ 266.363124][ T9549] netlink: 'syz.2.1429': attribute type 1 has an invalid length. [ 266.385440][ T9549] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1429'. [ 266.459663][ T9553] netlink: 'syz.0.1428': attribute type 5 has an invalid length. [ 268.016663][ T9592] delete_channel: no stack [ 268.140096][ T9608] netlink: 'syz.2.1445': attribute type 10 has an invalid length. [ 268.199569][ T9608] device wlan1 entered promiscuous mode [ 268.227766][ T9608] team0: Port device wlan1 added [ 268.281328][ T9611] delete_channel: no stack [ 271.592869][ T9637] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1453'. [ 271.615553][ T9643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.623072][ T9643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.650011][ T9643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.684926][ T9643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.761394][ T9644] netlink: 'syz.0.1454': attribute type 10 has an invalid length. [ 271.771716][ T9644] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1454'. [ 272.176768][ T4407] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 272.191560][ T9666] netlink: 'syz.3.1462': attribute type 21 has an invalid length. [ 272.320269][ T9666] netlink: 'syz.3.1462': attribute type 10 has an invalid length. [ 272.353909][ T9666] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1462'. [ 272.383649][ T9666] device bond0 entered promiscuous mode [ 272.484964][ T9666] team0: Port device bond0 removed [ 272.596605][ T9681] device sit0 left promiscuous mode [ 273.365618][ T9693] netlink: 'syz.3.1468': attribute type 1 has an invalid length. [ 273.516163][ T9693] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.1468'. [ 274.297975][ T9720] netlink: 126632 bytes leftover after parsing attributes in process `syz.1.1476'. [ 274.460685][ T9726] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.1478'. [ 278.077467][ T9750] netlink: 'syz.2.1487': attribute type 29 has an invalid length. [ 278.139892][ T9758] IPv6: Can't replace route, no match found [ 278.145928][ T9750] netlink: 'syz.2.1487': attribute type 3 has an invalid length. [ 278.147568][ T9759] syz.4.1488[9759] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 278.175669][ T9760] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 278.206056][ T9750] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1487'. [ 278.209169][ T9759] syz.4.1488[9759] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 278.431250][ T9771] netlink: 'syz.0.1491': attribute type 21 has an invalid length. [ 278.537146][ T9771] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1491'. [ 279.833577][ T9816] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1503'. [ 280.497626][ T9844] netlink: 'syz.0.1510': attribute type 29 has an invalid length. [ 280.603370][ T9844] netlink: 'syz.0.1510': attribute type 29 has an invalid length. [ 280.735534][ T4419] wlan1: Trigger new scan to find an IBSS to join [ 280.758049][ T9851] netlink: 'syz.4.1514': attribute type 1 has an invalid length. [ 280.810221][ T9851] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.1514'. [ 281.680017][ T9874] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1520'. [ 283.353949][ T9907] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1529'. [ 283.412554][ T9907] netlink: 'syz.1.1529': attribute type 4 has an invalid length. [ 283.499982][ T9907] netlink: 'syz.1.1529': attribute type 3 has an invalid length. [ 283.507558][ T9910] bond0: (slave team0): Error: Slave device does not support XDP [ 283.575943][ T9907] netlink: 153952 bytes leftover after parsing attributes in process `syz.1.1529'. [ 283.695285][ T4407] wlan1: Trigger new scan to find an IBSS to join [ 283.761635][ T9914] netlink: 'syz.0.1531': attribute type 2 has an invalid length. [ 283.819140][ T9914] netlink: 'syz.0.1531': attribute type 8 has an invalid length. [ 283.907589][ T9914] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1531'. [ 285.089957][ T9931] mac80211_hwsim hwsim10 »»»»»»: renamed from wlan0 [ 286.270012][ T9944] netlink: 'syz.3.1538': attribute type 23 has an invalid length. [ 286.338066][ T9944] netlink: 'syz.3.1538': attribute type 6 has an invalid length. [ 286.799080][ T9965] netlink: 'syz.2.1543': attribute type 1 has an invalid length. [ 286.829213][ T9965] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1543'. [ 286.873840][ T9967] netlink: 'syz.4.1547': attribute type 29 has an invalid length. [ 286.910371][ T9967] netlink: 'syz.4.1547': attribute type 29 has an invalid length. [ 287.696774][ T4421] wlan1: Trigger new scan to find an IBSS to join [ 288.326672][T10028] netlink: 'syz.3.1563': attribute type 3 has an invalid length. [ 288.344818][T10028] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1563'. [ 288.366381][T10028] syz.3.1563[10028] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 288.366522][T10028] syz.3.1563[10028] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 288.638996][ T4408] wlan1: Creating new IBSS network, BSSID a6:05:ee:5c:f3:97 [ 288.661861][T10038] netlink: 'syz.0.1566': attribute type 27 has an invalid length. [ 288.673415][T10038] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.1566'. [ 288.752281][ T4275] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 289.029731][T10053] netlink: 'syz.3.1573': attribute type 3 has an invalid length. [ 289.052724][T10053] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1573'. [ 289.079465][T10056] netlink: 814 bytes leftover after parsing attributes in process `syz.0.1574'. [ 289.139196][T10053] netlink: 'syz.3.1573': attribute type 27 has an invalid length. [ 289.335931][T10075] netlink: 'syz.4.1577': attribute type 27 has an invalid length. [ 289.343902][T10071] netlink: 'syz.4.1577': attribute type 27 has an invalid length. [ 289.377374][T10075] netlink: 'syz.4.1577': attribute type 10 has an invalid length. [ 289.417974][T10075] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1577'. [ 289.892367][T10096] netlink: 'syz.0.1584': attribute type 10 has an invalid length. [ 290.009764][T10096] device  left promiscuous mode [ 290.062319][T10096] device  entered promiscuous mode [ 290.098353][T10096] team0: Device  failed to register rx_handler [ 290.425491][T10118] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1589'. [ 290.515776][T10127] netlink: 'syz.0.1589': attribute type 3 has an invalid length. [ 290.588322][T10127] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1589'. [ 290.951149][T10146] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1596'. [ 291.000753][T10149] netlink: 'syz.4.1598': attribute type 10 has an invalid length. [ 291.034328][T10149] device netdevsim0 entered promiscuous mode [ 291.082917][T10149] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 291.131384][T10152] netlink: 15302 bytes leftover after parsing attributes in process `syz.1.1599'. [ 291.597071][T10164] netlink: 'syz.4.1603': attribute type 3 has an invalid length. [ 291.748408][T10164] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.1603'. [ 292.064753][T10172] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.1605'. [ 292.721679][T10185] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 293.807609][T10235] validate_nla: 4 callbacks suppressed [ 293.807625][T10235] netlink: 'syz.2.1624': attribute type 21 has an invalid length. [ 294.037287][T10253] netlink: 'syz.0.1627': attribute type 10 has an invalid length. [ 295.373168][T10300] netlink: 'syz.0.1643': attribute type 3 has an invalid length. [ 295.390319][T10300] __nla_validate_parse: 1 callbacks suppressed [ 295.390334][T10300] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1643'. [ 295.904930][T10311] device ip6gre0 entered promiscuous mode [ 296.054038][T10322] bridge0: port 3(dummy0) entered disabled state [ 296.072218][T10322] device bridge_slave_1 left promiscuous mode [ 296.088214][T10322] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.116394][T10322] device bridge_slave_0 left promiscuous mode [ 296.134754][T10322] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.176693][T10322] bond0: (slave bridge0): Releasing backup interface [ 296.209725][T10322] device bridge0 left promiscuous mode [ 296.467955][T10342] netlink: 'syz.3.1654': attribute type 29 has an invalid length. [ 296.505161][T10342] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1654'. [ 296.528587][T10342] netlink: 'syz.3.1654': attribute type 29 has an invalid length. [ 296.545093][T10342] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1654'. [ 296.588944][T10344] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.1655'. [ 296.598797][T10340] netlink: 'syz.3.1654': attribute type 29 has an invalid length. [ 296.608962][T10340] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1654'. [ 298.125635][T10399] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1672'. [ 298.378317][T10412] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1676'. [ 298.624710][T10412] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1676'. [ 298.744956][T10424] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.1680'. [ 298.804559][T10424] netlink: 6955 bytes leftover after parsing attributes in process `syz.2.1680'. [ 299.537372][T10433] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 299.778525][T10448] netlink: 'syz.4.1685': attribute type 4 has an invalid length. [ 299.849863][T10448] net_ratelimit: 20 callbacks suppressed [ 299.849898][T10448] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 300.054619][T10443] ë: port 1(ip6gretap0) entered blocking state [ 300.061083][T10443] ë: port 1(ip6gretap0) entered disabled state [ 300.136038][T10443] device ip6gretap0 entered promiscuous mode [ 300.192251][T10454] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 300.199632][T10454] IPv6: NLM_F_CREATE should be set when creating new route [ 300.806081][T10469] __nla_validate_parse: 1 callbacks suppressed [ 300.806098][T10469] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1693'. [ 301.730690][T10480] netlink: 'syz.2.1697': attribute type 5 has an invalid length. [ 302.048639][T10496] netlink: 'syz.2.1701': attribute type 3 has an invalid length. [ 302.098694][T10496] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1701'. [ 302.281366][T10508] netlink: 'syz.4.1702': attribute type 22 has an invalid length. [ 302.310728][T10505] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1701'. [ 302.334175][T10508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1702'. [ 302.643810][T10524] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1707'. [ 302.716269][T10524] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 302.833564][T10531] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1707'. [ 302.900525][T10534] netlink: 'syz.1.1709': attribute type 9 has an invalid length. [ 302.934458][T10534] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1709'. [ 304.211745][T10571] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1717'. [ 304.243962][T10571] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1717'. [ 304.339465][T10573] netlink: 'syz.2.1718': attribute type 10 has an invalid length. [ 304.366032][T10573] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1718'. [ 304.378092][T10573] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 305.261298][T10603] netlink: 'syz.3.1727': attribute type 29 has an invalid length. [ 305.320341][T10603] netlink: 'syz.3.1727': attribute type 29 has an invalid length. [ 305.373642][T10603] netlink: 'syz.3.1727': attribute type 29 has an invalid length. [ 305.737262][T10618] netlink: 'syz.2.1730': attribute type 3 has an invalid length. [ 306.389669][T10632] netlink: 'syz.0.1733': attribute type 7 has an invalid length. [ 306.401094][ T4275] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 307.185054][T10657] __nla_validate_parse: 3 callbacks suppressed [ 307.185071][T10657] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1742'. [ 307.884455][T10682] netlink: 'syz.0.1749': attribute type 10 has an invalid length. [ 307.908652][T10682] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1749'. [ 308.351762][T10700] netlink: 'syz.4.1756': attribute type 10 has an invalid length. [ 308.365567][T10700] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1756'. [ 308.384518][T10700] device batadv0 entered promiscuous mode [ 308.395943][T10700] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 309.270927][ T4275] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 310.195056][T10753] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.1772'. [ 311.294501][ T4275] Bluetooth: hci3: command 0x2016 tx timeout [ 313.797144][T10853] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 313.862991][T10853] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 314.295307][T10883] netlink: 'syz.3.1808': attribute type 10 has an invalid length. [ 314.352512][T10883] netlink: 'syz.3.1808': attribute type 10 has an invalid length. [ 314.402223][T10887] netlink: 'syz.3.1808': attribute type 10 has an invalid length. [ 314.657054][T10892] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1811'. [ 314.746644][T10896] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1812'. [ 316.983277][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.989899][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.664610][T10994] netlink: 'syz.1.1839': attribute type 21 has an invalid length. [ 317.672490][T10994] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1839'. [ 317.853194][T11002] syz.0.1843[11002] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 317.853310][T11002] syz.0.1843[11002] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 319.679965][T11078] netlink: 'syz.0.1859': attribute type 10 has an invalid length. [ 319.797984][T11078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.836035][T11078] device bond0 entered promiscuous mode [ 319.854486][T11078] device bond_slave_0 entered promiscuous mode [ 319.874673][T11078] device bond_slave_1 entered promiscuous mode [ 319.901447][T11078] device dummy0 entered promiscuous mode [ 319.914774][T11078] device batadv0 entered promiscuous mode [ 319.926910][T11078] device netdevsim0 entered promiscuous mode [ 319.965175][T11078] team0: Port device bond0 added [ 320.527317][T11100] netlink: 'syz.1.1866': attribute type 29 has an invalid length. [ 320.551021][T11100] netlink: 'syz.1.1866': attribute type 29 has an invalid length. [ 320.586857][T11104] netlink: 'syz.1.1866': attribute type 29 has an invalid length. [ 320.711857][T11105] netlink: 'syz.2.1867': attribute type 3 has an invalid length. [ 320.767008][T11105] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1867'. [ 320.988474][T11115] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1869'. [ 321.148464][T11115] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1869'. [ 321.254134][T11109] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1869'. [ 321.342571][T11116] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1869'. [ 321.414308][T11124] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1871'. [ 321.423608][T11124] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1871'. [ 321.513395][T11129] netlink: 'syz.2.1871': attribute type 10 has an invalid length. [ 321.538416][T11129] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1871'. [ 321.565681][T11115] netlink: 'syz.4.1869': attribute type 2 has an invalid length. [ 321.673529][T11115] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1869'. [ 321.774583][T11131] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1874'. [ 322.306969][T11126] delete_channel: no stack [ 322.739355][T11155] netlink: 'syz.3.1879': attribute type 27 has an invalid length. [ 326.135417][T11221] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1896'. [ 326.215213][T11221] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 326.361906][T11232] syz.3.1900[11232] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 326.362019][T11232] syz.3.1900[11232] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 326.471357][T11235] netlink: 'syz.3.1900': attribute type 6 has an invalid length. [ 326.617455][T11243] netlink: 'syz.2.1902': attribute type 21 has an invalid length. [ 326.644547][T11243] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1902'. [ 326.987311][T11257] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1906'. [ 327.196986][T11270] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1908'. [ 327.426382][T11277] netlink: 'syz.2.1910': attribute type 10 has an invalid length. [ 327.478625][T11277] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1910'. [ 327.529447][T11277] device batadv0 entered promiscuous mode [ 327.559136][T11277] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 328.391443][T11289] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.1913'. [ 328.442809][T11289] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 328.485570][T11289] CPU: 0 PID: 11289 Comm: syz.4.1913 Not tainted syzkaller #0 [ 328.493095][T11289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 328.503198][T11289] Call Trace: [ 328.506509][T11289] [ 328.509463][T11289] dump_stack_lvl+0x168/0x22e [ 328.514195][T11289] ? show_regs_print_info+0x12/0x12 [ 328.519436][T11289] ? load_image+0x3b0/0x3b0 [ 328.523987][T11289] sysfs_warn_dup+0x8a/0xa0 [ 328.528523][T11289] sysfs_do_create_link_sd+0xc0/0x110 [ 328.533941][T11289] device_add+0x7ed/0xfb0 [ 328.538412][T11289] wiphy_register+0x1e68/0x2bd0 [ 328.543326][T11289] ? cfg80211_event_work+0x40/0x40 [ 328.548516][T11289] ? minstrel_ht_alloc+0x894/0xa20 [ 328.553660][T11289] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 328.559749][T11289] ieee80211_register_hw+0x2d16/0x39e0 [ 328.565263][T11289] ? ieee80211_register_hw+0xf01/0x39e0 [ 328.570819][T11289] ? ieee80211_register_hw+0xf01/0x39e0 [ 328.576468][T11289] ? ieee80211_tasklet_handler+0x20/0x20 [ 328.582118][T11289] ? memset+0x1e/0x40 [ 328.586098][T11289] ? __hrtimer_init+0x186/0x270 [ 328.590953][T11289] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 328.596703][T11289] hwsim_new_radio_nl+0xafa/0xce0 [ 328.601757][T11289] genl_family_rcv_msg_doit+0x22e/0x320 [ 328.607309][T11289] ? end_current_label_crit_section+0x170/0x170 [ 328.613566][T11289] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 328.619471][T11289] ? bpf_lsm_capable+0x5/0x10 [ 328.624150][T11289] ? security_capable+0x85/0xb0 [ 328.629018][T11289] genl_rcv_msg+0x5f2/0x780 [ 328.633552][T11289] ? genl_bind+0x350/0x350 [ 328.637966][T11289] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 328.644310][T11289] netlink_rcv_skb+0x1de/0x420 [ 328.649078][T11289] ? genl_bind+0x350/0x350 [ 328.653497][T11289] ? netlink_ack+0x1100/0x1100 [ 328.658310][T11289] ? down_read+0x1a8/0x2d0 [ 328.662739][T11289] genl_rcv+0x24/0x40 [ 328.666721][T11289] netlink_unicast+0x74d/0x8d0 [ 328.671501][T11289] netlink_sendmsg+0x89e/0xbc0 [ 328.676279][T11289] ? netlink_getsockopt+0x540/0x540 [ 328.681478][T11289] ? aa_sock_msg_perm+0x94/0x150 [ 328.686426][T11289] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 328.691715][T11289] ? security_socket_sendmsg+0x7c/0xa0 [ 328.697186][T11289] ? netlink_getsockopt+0x540/0x540 [ 328.702432][T11289] ____sys_sendmsg+0x59b/0x970 [ 328.707227][T11289] ? __sys_sendmsg_sock+0x30/0x30 [ 328.712275][T11289] ? __import_iovec+0x315/0x500 [ 328.717147][T11289] ? import_iovec+0x6f/0xa0 [ 328.721666][T11289] ___sys_sendmsg+0x21c/0x290 [ 328.726353][T11289] ? __sys_sendmsg+0x270/0x270 [ 328.731187][T11289] ? __fdget+0x17c/0x200 [ 328.735463][T11289] __se_sys_sendmsg+0x19e/0x270 [ 328.740357][T11289] ? __se_sys_futex+0x14a/0x440 [ 328.745217][T11289] ? __x64_sys_sendmsg+0x80/0x80 [ 328.750172][T11289] ? lockdep_hardirqs_on+0x94/0x140 [ 328.755380][T11289] do_syscall_64+0x4c/0xa0 [ 328.759799][T11289] ? clear_bhb_loop+0x60/0xb0 [ 328.764478][T11289] ? clear_bhb_loop+0x60/0xb0 [ 328.769164][T11289] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 328.775081][T11289] RIP: 0033:0x7fbdfcf8f749 [ 328.779510][T11289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.799122][T11289] RSP: 002b:00007fbdfddeb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.807537][T11289] RAX: ffffffffffffffda RBX: 00007fbdfd1e5fa0 RCX: 00007fbdfcf8f749 [ 328.815506][T11289] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 328.823485][T11289] RBP: 00007fbdfd013f91 R08: 0000000000000000 R09: 0000000000000000 [ 328.831454][T11289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 328.839424][T11289] R13: 00007fbdfd1e6038 R14: 00007fbdfd1e5fa0 R15: 00007ffcfa526ee8 [ 328.847672][T11289] [ 329.271972][T11305] netlink: 'syz.1.1917': attribute type 10 has an invalid length. [ 329.324236][T11305] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 329.478334][T11322] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.1919'. [ 329.562616][T11322] netlink: zone id is out of range [ 329.599212][T11322] netlink: zone id is out of range [ 329.637029][T11322] netlink: zone id is out of range [ 329.677558][T11334] netlink: 'syz.3.1924': attribute type 1 has an invalid length. [ 329.695946][T11322] netlink: zone id is out of range [ 329.720405][T11334] netlink: 'syz.3.1924': attribute type 3 has an invalid length. [ 329.744010][T11322] netlink: zone id is out of range [ 329.821398][T11334] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1924'. [ 329.849380][T11322] netlink: zone id is out of range [ 329.943025][T11322] netlink: zone id is out of range [ 330.013883][T11322] netlink: zone id is out of range [ 330.024333][T11351] sctp: [Deprecated]: syz.4.1929 (pid 11351) Use of struct sctp_assoc_value in delayed_ack socket option. [ 330.024333][T11351] Use struct sctp_sack_info instead [ 330.155020][T11351] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1929'. [ 330.356699][T11358] netlink: 'syz.3.1930': attribute type 29 has an invalid length. [ 330.384882][T11358] netlink: 'syz.3.1930': attribute type 29 has an invalid length. [ 331.522675][T11372] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1936'. [ 331.532177][T11372] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1936'. [ 331.564160][T11372] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1936'. [ 331.682189][T11379] netlink: 1042 bytes leftover after parsing attributes in process `syz.3.1937'. [ 331.789030][T11384] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1939'. [ 331.847308][T11384] device caif0 entered promiscuous mode [ 332.150346][ T4275] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 332.160311][T11397] netlink: 126632 bytes leftover after parsing attributes in process `syz.4.1943'. [ 332.357689][T11402] IPv6: Can't replace route, no match found [ 332.476672][T11408] netlink: 'syz.4.1947': attribute type 28 has an invalid length. [ 332.504659][T11408] netlink: 'syz.4.1947': attribute type 4 has an invalid length. [ 332.518081][T11408] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1947'. [ 333.328372][T11445] netlink: 'syz.0.1957': attribute type 1 has an invalid length. [ 333.495069][T11445] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1957'. [ 338.248888][T11512] netlink: 'syz.1.1975': attribute type 29 has an invalid length. [ 338.319850][T11512] netlink: 'syz.1.1975': attribute type 29 has an invalid length. [ 339.346559][T11530] netlink: 'syz.2.1980': attribute type 39 has an invalid length. [ 341.320769][T11534] netlink: 'syz.4.1981': attribute type 10 has an invalid length. [ 341.339589][T11534] device batadv0 left promiscuous mode [ 341.398674][T11534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.427090][T11534] device batadv0 entered promiscuous mode [ 341.436765][T11534] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 341.512611][T11535] netlink: 'syz.4.1981': attribute type 10 has an invalid length. [ 341.546883][T11535] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1981'. [ 341.753114][T11535] bond0: (slave batadv0): Releasing backup interface [ 341.793178][T11535] net_ratelimit: 14 callbacks suppressed [ 341.793197][T11535] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 342.409567][T11570] netlink: 'syz.1.1989': attribute type 10 has an invalid length. [ 342.533928][T11570] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1989'. [ 342.592600][T11570] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 342.997067][T11589] netlink: 'syz.2.1993': attribute type 4 has an invalid length. [ 343.036282][T11589] netlink: 14345 bytes leftover after parsing attributes in process `syz.2.1993'. [ 343.055479][T11588] netlink: 'syz.2.1993': attribute type 21 has an invalid length. [ 343.103870][T11588] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1993'. [ 343.154545][T11588] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1993'. [ 343.358680][T11594] netlink: 65043 bytes leftover after parsing attributes in process `syz.4.1994'. [ 344.540075][T11665] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.2001'. [ 346.408399][T11724] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2020'. [ 346.520237][T11724] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.2020'. [ 347.921104][T11767] netlink: 'syz.4.2026': attribute type 2 has an invalid length. [ 349.159937][T11802] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.2038'. [ 349.193183][T11801] delete_channel: no stack [ 349.257553][T11801] delete_channel: no stack [ 349.925386][T11795] delete_channel: no stack [ 350.091271][T11811] delete_channel: no stack [ 350.529846][T11817] IPv6: Can't replace route, no match found [ 350.568887][T11818] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 350.589412][T11819] netlink: 'syz.3.2042': attribute type 10 has an invalid length. [ 350.647885][T11819] device wlan1 entered promiscuous mode [ 350.653988][T11819] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 350.955519][T11826] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2044'. [ 351.445941][T11820] netlink: 'syz.4.2036': attribute type 29 has an invalid length. [ 351.720466][T11820] netlink: 'syz.4.2036': attribute type 29 has an invalid length. [ 351.921060][T11836] netlink: 'syz.3.2047': attribute type 10 has an invalid length. [ 351.966511][T11836] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 352.147932][T11839] netlink: 'syz.1.2048': attribute type 21 has an invalid length. [ 352.183324][T11839] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2048'. [ 352.748052][T11853] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2052'. [ 352.825187][T11853] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2052'. [ 352.844656][T11854] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2052'. [ 352.879836][T11857] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2052'. [ 354.147202][T11873] device netdevsim0 entered promiscuous mode [ 355.645592][T11918] netlink: 'syz.4.2065': attribute type 3 has an invalid length. [ 357.070694][T11965] netlink: 'syz.1.2078': attribute type 3 has an invalid length. [ 357.112862][T11965] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2078'. [ 357.445008][T11980] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 357.553939][T11981] netlink: 'syz.4.2080': attribute type 10 has an invalid length. [ 357.698021][T11999] netlink: 'syz.3.2087': attribute type 28 has an invalid length. [ 357.721946][T11999] netlink: 'syz.3.2087': attribute type 29 has an invalid length. [ 357.761104][T11999] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2087'. [ 358.714761][T12011] netlink: 'syz.2.2088': attribute type 10 has an invalid length. [ 359.062185][T12011] device wlan1 left promiscuous mode [ 359.119766][T12011] team0: Port device wlan1 removed [ 359.169946][T12011] device wlan1 entered promiscuous mode [ 359.238006][T12011] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 360.436727][T12053] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2102'. [ 360.478083][T12051] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2101'. [ 360.592571][T12053] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2102'. [ 361.590867][T12069] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2106'. [ 361.815658][T12075] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2109'. [ 361.863124][T12069] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 362.167617][T12082] netlink: 'syz.3.2111': attribute type 8 has an invalid length. [ 362.187851][T12082] netlink: 'syz.3.2111': attribute type 1 has an invalid length. [ 362.251358][T12082] netlink: 104088 bytes leftover after parsing attributes in process `syz.3.2111'. [ 362.932156][T12109] delete_channel: no stack [ 364.131633][T12147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2130'. [ 364.502055][T12147] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2130'. [ 364.568094][T12147] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2130'. [ 364.652823][T12156] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2130'. [ 364.770394][T12147] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2130'. [ 365.218445][T12188] netlink: 'syz.4.2141': attribute type 21 has an invalid length. [ 365.244728][T12188] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2141'. [ 365.270450][T12188] netlink: 'syz.4.2141': attribute type 4 has an invalid length. [ 365.306088][T12188] netlink: 'syz.4.2141': attribute type 5 has an invalid length. [ 365.330912][T12188] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2141'. [ 365.728743][T12213] netlink: 126632 bytes leftover after parsing attributes in process `syz.3.2146'. [ 365.823858][T12215] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.2148'. [ 365.986458][T12226] netlink: 'syz.4.2151': attribute type 1 has an invalid length. [ 366.185121][T12239] netlink: 'syz.0.2155': attribute type 1 has an invalid length. [ 366.427291][T12249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.464812][T12249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.498708][T12255] netlink: 'syz.3.2158': attribute type 2 has an invalid length. [ 366.817591][T12249] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.826668][T12249] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.945591][T12251] netlink: 'syz.1.2157': attribute type 11 has an invalid length. [ 367.102338][T12255] device .*! entered promiscuous mode [ 367.370081][T12315] __nla_validate_parse: 3 callbacks suppressed [ 367.370097][T12315] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2163'. [ 367.920516][T12331] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2167'. [ 368.357743][T12347] netlink: 'syz.2.2172': attribute type 17 has an invalid length. [ 368.367529][T12347] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2172'. [ 369.310929][ T4275] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 369.605957][T12377] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2180'. [ 370.364123][T12413] netlink: 122704 bytes leftover after parsing attributes in process `syz.3.2191'. [ 370.426335][T12418] device lo left promiscuous mode [ 370.522964][T12418] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 370.957630][T12437] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2198'. [ 371.374745][ T4275] Bluetooth: hci0: command 0x2016 tx timeout [ 372.000571][T12500] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2214'. [ 372.090805][T12502] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2216'. [ 372.120061][T12502] netlink: 'syz.2.2216': attribute type 39 has an invalid length. [ 372.552614][T12513] netlink: 'syz.0.2220': attribute type 10 has an invalid length. [ 372.896494][T12525] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.2224'. [ 372.939248][T12525] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 373.163613][T12537] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2228'. [ 373.190191][T12540] netlink: 'syz.0.2229': attribute type 21 has an invalid length. [ 373.235395][T12539] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2227'. [ 373.455734][T12549] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2230'. [ 374.577623][T12594] netlink: 'syz.1.2243': attribute type 10 has an invalid length. [ 374.976344][T12616] netlink: 'syz.3.2249': attribute type 13 has an invalid length. [ 374.992275][T12616] netlink: 'syz.3.2249': attribute type 58 has an invalid length. [ 375.011805][T12616] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2249'. [ 375.351138][T12633] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.2256'. [ 375.356117][T12637] netlink: 4079 bytes leftover after parsing attributes in process `syz.1.2257'. [ 375.381005][T12633] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 375.725567][T12655] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2262'. [ 375.784609][T12656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2261'. [ 376.100334][T12662] netlink: 'syz.0.2266': attribute type 10 has an invalid length. [ 376.217192][T12662] device bond0 left promiscuous mode [ 376.222782][T12662] device bond_slave_0 left promiscuous mode [ 376.233154][T12662] device bond_slave_1 left promiscuous mode [ 376.247602][T12662] device dummy0 left promiscuous mode [ 376.268562][T12662] device batadv0 left promiscuous mode [ 376.287095][T12666] netlink: 198388 bytes leftover after parsing attributes in process `syz.4.2264'. [ 376.289387][T12662] device netdevsim0 left promiscuous mode [ 376.333314][T12662] team0: Port device bond0 removed [ 376.982270][T12690] netlink: 'syz.0.2272': attribute type 3 has an invalid length. [ 377.004608][T12690] netlink: 'syz.0.2272': attribute type 4 has an invalid length. [ 377.490566][T12710] netlink: 'syz.4.2278': attribute type 11 has an invalid length. [ 377.543883][T12708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.668021][T12715] netlink: 'syz.2.2279': attribute type 7 has an invalid length. [ 377.709000][T12715] netlink: 'syz.2.2279': attribute type 6 has an invalid length. [ 378.050504][T12730] __nla_validate_parse: 68 callbacks suppressed [ 378.050520][T12730] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2284'. [ 378.212002][T12730] device hsr_slave_1 left promiscuous mode [ 378.222195][T12736] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2285'. [ 378.234492][T12738] netlink: 'syz.1.2285': attribute type 10 has an invalid length. [ 378.244611][T12738] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2285'. [ 378.257519][T12738] device team0 entered promiscuous mode [ 378.263169][T12738] device team_slave_0 entered promiscuous mode [ 378.281413][T12738] device team_slave_1 entered promiscuous mode [ 378.297834][T12738] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.320191][T12738] bond0: (slave team0): Releasing backup interface [ 378.348627][T12738] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 378.416795][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.423170][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.505685][T12754] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2288'. [ 378.584835][T12758] netlink: 'syz.1.2289': attribute type 10 has an invalid length. [ 380.280858][T12789] validate_nla: 1 callbacks suppressed [ 380.280902][T12789] netlink: 'syz.1.2296': attribute type 39 has an invalid length. [ 380.318088][T12790] bond0: (slave wlan1): Error: Slave device does not support XDP [ 381.871719][T12791] netlink: 'syz.1.2296': attribute type 10 has an invalid length. [ 383.830303][T12859] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2316'. [ 384.972908][T12892] IPv6: NLM_F_CREATE should be specified when creating new route [ 385.004191][T12892] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2326'. [ 385.312529][T12908] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2331'. [ 385.330945][T12908] netlink: zone id is out of range [ 385.341735][T12908] netlink: zone id is out of range [ 385.350503][T12908] netlink: zone id is out of range [ 385.373988][T12908] netlink: del zone limit has 4 unknown bytes [ 385.696473][T12920] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2336'. [ 386.405814][T12958] netlink: 'syz.1.2345': attribute type 29 has an invalid length. [ 386.435081][T12958] netlink: 'syz.1.2345': attribute type 29 has an invalid length. [ 386.465519][T12958] netlink: 'syz.1.2345': attribute type 29 has an invalid length. [ 386.503566][T12958] netlink: 'syz.1.2345': attribute type 29 has an invalid length. [ 387.294551][T12993] netlink: 'syz.3.2356': attribute type 2 has an invalid length. [ 387.408333][T13000] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 387.410124][T12993] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2356'. [ 388.286969][T13031] netlink: 'syz.2.2362': attribute type 29 has an invalid length. [ 388.311811][T13031] netlink: 'syz.2.2362': attribute type 29 has an invalid length. [ 388.351557][T13045] netlink: 'syz.2.2362': attribute type 29 has an invalid length. [ 388.460759][T13031] netlink: 'syz.2.2362': attribute type 29 has an invalid length. [ 388.552079][T13063] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2365'. [ 388.729772][T13069] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.2368'. [ 388.785746][T13069] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 388.833272][T13071] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.2368'. [ 388.861052][T13071] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 388.881205][T13071] CPU: 1 PID: 13071 Comm: syz.0.2368 Not tainted syzkaller #0 [ 388.888728][T13071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 388.898809][T13071] Call Trace: [ 388.902112][T13071] [ 388.905062][T13071] dump_stack_lvl+0x168/0x22e [ 388.909782][T13071] ? show_regs_print_info+0x12/0x12 [ 388.915017][T13071] ? load_image+0x3b0/0x3b0 [ 388.919570][T13071] sysfs_warn_dup+0x8a/0xa0 [ 388.924200][T13071] sysfs_do_create_link_sd+0xc0/0x110 [ 388.929609][T13071] device_add+0x7ed/0xfb0 [ 388.933994][T13071] wiphy_register+0x1e68/0x2bd0 [ 388.938902][T13071] ? cfg80211_event_work+0x40/0x40 [ 388.944047][T13071] ? minstrel_ht_alloc+0x894/0xa20 [ 388.949213][T13071] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 388.955321][T13071] ieee80211_register_hw+0x2d16/0x39e0 [ 388.960831][T13071] ? ieee80211_register_hw+0xf01/0x39e0 [ 388.966401][T13071] ? ieee80211_register_hw+0xf01/0x39e0 [ 388.971977][T13071] ? ieee80211_tasklet_handler+0x20/0x20 [ 388.977647][T13071] ? memset+0x1e/0x40 [ 388.981736][T13071] ? __hrtimer_init+0x186/0x270 [ 388.986606][T13071] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 388.992359][T13071] hwsim_new_radio_nl+0xafa/0xce0 [ 388.997590][T13071] genl_family_rcv_msg_doit+0x22e/0x320 [ 389.003149][T13071] ? end_current_label_crit_section+0x170/0x170 [ 389.009444][T13071] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 389.015366][T13071] ? bpf_lsm_capable+0x5/0x10 [ 389.020054][T13071] ? security_capable+0x85/0xb0 [ 389.024925][T13071] genl_rcv_msg+0x5f2/0x780 [ 389.029799][T13071] ? genl_bind+0x350/0x350 [ 389.034223][T13071] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 389.040665][T13071] netlink_rcv_skb+0x1de/0x420 [ 389.045450][T13071] ? genl_bind+0x350/0x350 [ 389.049877][T13071] ? netlink_ack+0x1100/0x1100 [ 389.054666][T13071] ? down_read+0x1a8/0x2d0 [ 389.059100][T13071] genl_rcv+0x24/0x40 [ 389.063089][T13071] netlink_unicast+0x74d/0x8d0 [ 389.067885][T13071] netlink_sendmsg+0x89e/0xbc0 [ 389.072670][T13071] ? netlink_getsockopt+0x540/0x540 [ 389.077881][T13071] ? aa_sock_msg_perm+0x94/0x150 [ 389.082839][T13071] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 389.088132][T13071] ? security_socket_sendmsg+0x7c/0xa0 [ 389.093607][T13071] ? netlink_getsockopt+0x540/0x540 [ 389.098812][T13071] ____sys_sendmsg+0x59b/0x970 [ 389.103594][T13071] ? __sys_sendmsg_sock+0x30/0x30 [ 389.108626][T13071] ? __import_iovec+0x315/0x500 [ 389.113498][T13071] ? import_iovec+0x6f/0xa0 [ 389.118019][T13071] ___sys_sendmsg+0x21c/0x290 [ 389.122708][T13071] ? __sys_sendmsg+0x270/0x270 [ 389.127533][T13071] ? __fdget+0x17c/0x200 [ 389.131790][T13071] __se_sys_sendmsg+0x19e/0x270 [ 389.136666][T13071] ? __x64_sys_sendmsg+0x80/0x80 [ 389.141657][T13071] ? lockdep_hardirqs_on+0x94/0x140 [ 389.146880][T13071] do_syscall_64+0x4c/0xa0 [ 389.151314][T13071] ? clear_bhb_loop+0x60/0xb0 [ 389.156006][T13071] ? clear_bhb_loop+0x60/0xb0 [ 389.160695][T13071] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 389.166600][T13071] RIP: 0033:0x7fbae538f749 [ 389.171031][T13071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.190651][T13071] RSP: 002b:00007fbae62db038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 389.199090][T13071] RAX: ffffffffffffffda RBX: 00007fbae55e6180 RCX: 00007fbae538f749 [ 389.207081][T13071] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 389.215065][T13071] RBP: 00007fbae5413f91 R08: 0000000000000000 R09: 0000000000000000 [ 389.223046][T13071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 389.231024][T13071] R13: 00007fbae55e6218 R14: 00007fbae55e6180 R15: 00007ffed9756438 [ 389.239026][T13071] [ 389.448971][T13082] netlink: 'syz.1.2372': attribute type 21 has an invalid length. [ 389.476045][T13082] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2372'. [ 390.642501][T13107] device sit0 left promiscuous mode [ 390.762381][T13114] device sit0 entered promiscuous mode [ 392.678051][T13193] netlink: 'syz.3.2404': attribute type 29 has an invalid length. [ 392.718218][T13193] netlink: 'syz.3.2404': attribute type 29 has an invalid length. [ 392.771180][T13195] netlink: 'syz.3.2404': attribute type 29 has an invalid length. [ 392.810644][T13193] netlink: 'syz.3.2404': attribute type 29 has an invalid length. [ 392.906039][T13195] netlink: 'syz.3.2404': attribute type 29 has an invalid length. [ 393.052923][T13193] netlink: 'syz.3.2404': attribute type 29 has an invalid length. [ 393.781901][T13215] netlink: 'syz.1.2408': attribute type 3 has an invalid length. [ 393.811923][T13215] netlink: 'syz.1.2408': attribute type 2 has an invalid length. [ 393.825358][T13215] netlink: 'syz.1.2408': attribute type 9 has an invalid length. [ 393.859579][T13215] netlink: 201336 bytes leftover after parsing attributes in process `syz.1.2408'. [ 394.242921][T13237] netlink: 'syz.0.2415': attribute type 4 has an invalid length. [ 394.284999][T13237] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2415'. [ 394.377233][T13237] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 394.514822][T13235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2414'. [ 396.372688][T13320] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2440'. [ 396.525187][T13323] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2440'. [ 397.118878][T13358] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2449'. [ 397.179483][T13362] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2448'. [ 397.839915][T13384] validate_nla: 7 callbacks suppressed [ 397.839934][T13384] netlink: 'syz.1.2456': attribute type 10 has an invalid length. [ 398.248339][T13396] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2460'. [ 399.699062][T13425] netlink: 'syz.2.2470': attribute type 21 has an invalid length. [ 399.745382][T13425] netlink: 'syz.2.2470': attribute type 22 has an invalid length. [ 399.757316][T13425] netlink: 14380 bytes leftover after parsing attributes in process `syz.2.2470'. [ 400.010029][T13444] netlink: 'syz.2.2474': attribute type 3 has an invalid length. [ 400.032622][T13444] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2474'. [ 401.010563][ T4275] Bluetooth: hci4: unexpected event 0x12 length: 15 > 8 [ 401.733349][T13507] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2489'. [ 401.823240][T13507] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2489'. [ 402.487123][T13512] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2489'. [ 402.517016][T13513] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2489'. [ 402.529235][T13507] netlink: 'syz.4.2489': attribute type 1 has an invalid length. [ 402.685536][T13523] netlink: 'syz.1.2492': attribute type 6 has an invalid length. [ 402.992416][T13538] netlink: 'syz.1.2497': attribute type 10 has an invalid length. [ 403.080825][T13538] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 403.124054][T13539] netlink: 'syz.2.2498': attribute type 10 has an invalid length. [ 403.143116][T13539] device veth1_vlan left promiscuous mode [ 403.180501][T13539] device veth1_vlan entered promiscuous mode [ 403.208912][T13539] device macvlan1 entered promiscuous mode [ 403.228879][T13539] team0: Port device macvlan1 added [ 403.252964][T13534] netlink: 'syz.1.2497': attribute type 10 has an invalid length. [ 403.301594][T13534] team0: Device ipvlan1 failed to register rx_handler [ 403.352401][T13547] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.2500'. [ 403.387125][T13550] netlink: 'syz.0.2502': attribute type 2 has an invalid length. [ 403.419094][T13553] netlink: 'syz.4.2503': attribute type 11 has an invalid length. [ 403.424566][T13550] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2502'. [ 403.439538][T13553] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2503'. [ 403.695651][T13560] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2505'. [ 403.881805][T13559] delete_channel: no stack [ 404.330146][T13594] netlink: 'syz.4.2515': attribute type 1 has an invalid length. [ 404.379108][T13594] netlink: 'syz.4.2515': attribute type 1 has an invalid length. [ 405.145939][T13620] netlink: 'syz.3.2522': attribute type 4 has an invalid length. [ 405.206005][ T4275] Bluetooth: hci2: ISO packet for unknown connection handle 30 [ 405.512913][T13638] netlink: 'syz.1.2529': attribute type 10 has an invalid length. [ 405.542851][T13638] __nla_validate_parse: 2 callbacks suppressed [ 405.542868][T13638] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2529'. [ 405.586016][T13638] device bond0 entered promiscuous mode [ 405.600773][T13638] device bond_slave_0 entered promiscuous mode [ 405.618120][T13638] device bond_slave_1 entered promiscuous mode [ 405.648410][T13638] device wlan1 entered promiscuous mode [ 405.668714][T13638] device batadv_slave_0 entered promiscuous mode [ 405.696924][T13638] device netdevsim0 entered promiscuous mode [ 405.735364][T13638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.816570][T13681] netlink: 'syz.1.2543': attribute type 10 has an invalid length. [ 408.885144][T13681] device vlan0 entered promiscuous mode [ 408.903935][T13681] team0: Port device vlan0 added [ 408.987478][T13691] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2546'. [ 409.419459][T13722] tc_dump_action: action bad kind [ 409.621486][T13735] device syzkaller0 entered promiscuous mode [ 409.847362][T13744] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.2558'. [ 410.603809][T13777] Ÿë: port 1(gretap0) entered blocking state [ 410.619320][T13777] Ÿë: port 1(gretap0) entered disabled state [ 410.638139][T13777] device gretap0 entered promiscuous mode [ 411.009392][T13792] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2575'. [ 411.064879][T13792] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.2575'. [ 411.105576][T13792] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2575'. [ 411.138887][T13792] tc_dump_action: action bad kind [ 411.415342][T13813] netlink: 'syz.1.2582': attribute type 11 has an invalid length. [ 411.514440][T13813] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2582'. [ 411.538398][T13817] netlink: 'syz.1.2582': attribute type 11 has an invalid length. [ 411.548877][T13821] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2584'. [ 411.572425][T13817] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2582'. [ 411.609098][T13807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.860739][T13827] IPv6: Can't replace route, no match found [ 411.883050][T13827] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 411.917809][T13827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2586'. [ 412.460950][T13849] netlink: 'syz.3.2594': attribute type 3 has an invalid length. [ 412.477858][T13849] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.2594'. [ 412.548141][T13855] netlink: 'syz.2.2595': attribute type 21 has an invalid length. [ 412.558891][T13855] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2595'. [ 412.859698][T13870] netlink: 'syz.1.2599': attribute type 21 has an invalid length. [ 412.897472][T13870] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2599'. [ 415.701939][T13917] netlink: 'syz.0.2611': attribute type 3 has an invalid length. [ 415.740350][T13917] netlink: 'syz.0.2611': attribute type 3 has an invalid length. [ 415.767012][T13917] netlink: 'syz.0.2611': attribute type 3 has an invalid length. [ 415.799920][T13917] netlink: 'syz.0.2611': attribute type 3 has an invalid length. [ 415.821436][T13917] netlink: 'syz.0.2611': attribute type 3 has an invalid length. [ 415.848483][T13917] netlink: 'syz.0.2611': attribute type 3 has an invalid length. [ 415.866714][T13917] netlink: 'syz.0.2611': attribute type 3 has an invalid length. [ 415.895515][T13917] netlink: 'syz.0.2611': attribute type 3 has an invalid length. [ 415.905881][T13917] netlink: 'syz.0.2611': attribute type 3 has an invalid length. [ 415.926239][T13917] netlink: 'syz.0.2611': attribute type 3 has an invalid length. [ 415.999905][T13927] device syzkaller0 left promiscuous mode [ 416.014863][T13917] __nla_validate_parse: 22 callbacks suppressed [ 416.014878][T13917] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2611'. [ 416.072255][T13917] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2611'. [ 416.101550][T13917] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2611'. [ 416.126536][T13917] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2611'. [ 416.177357][T13917] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2611'. [ 416.198822][T13917] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2611'. [ 416.211055][T13917] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2611'. [ 416.223265][T13917] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2611'. [ 416.250766][T13917] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2611'. [ 416.269362][T13917] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2611'. [ 421.329882][T14109] __nla_validate_parse: 44 callbacks suppressed [ 421.329901][T14109] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2663'. [ 423.919628][T14159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2677'. [ 424.165342][T14167] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2680'. [ 424.174081][T14165] validate_nla: 59 callbacks suppressed [ 424.174098][T14165] netlink: 'syz.1.2679': attribute type 4 has an invalid length. [ 424.184379][T14167] ksmbd: Unknown IPC event: 10, ignore. [ 424.275562][T14165] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2679'. [ 424.367248][T14165] wlan1: mtu less than device minimum [ 424.760851][T14181] netlink: 121052 bytes leftover after parsing attributes in process `syz.2.2683'. [ 425.038144][T14193] netlink: 'syz.4.2686': attribute type 1 has an invalid length. [ 425.052067][T14192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2687'. [ 425.085621][T14192] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2687'. [ 425.105591][T14193] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2686'. [ 426.435227][T14249] netlink: 'syz.1.2702': attribute type 39 has an invalid length. [ 427.077381][T14259] netlink: 'syz.2.2706': attribute type 21 has an invalid length. [ 427.104424][T14259] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2706'. [ 428.062766][T14272] netlink: 'syz.4.2709': attribute type 10 has an invalid length. [ 428.187239][T14279] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2711'. [ 429.064786][T14291] device veth0_vlan left promiscuous mode [ 429.071359][T14291] device veth0_vlan entered promiscuous mode [ 429.147353][T11059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 429.170613][T11059] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 429.193873][T11059] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 429.221660][T14302] netlink: 'syz.0.2718': attribute type 21 has an invalid length. [ 429.236061][T14302] netlink: 'syz.0.2718': attribute type 1 has an invalid length. [ 429.257692][T14302] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2718'. [ 429.287837][T14308] netlink: 'syz.0.2718': attribute type 40 has an invalid length. [ 429.329285][T14310] netlink: 'syz.3.2720': attribute type 21 has an invalid length. [ 429.339743][T14310] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2720'. [ 429.363699][T11059] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 429.519010][T14322] bond0: (slave wlan1): Error: Slave device does not support XDP [ 429.808340][T14337] netlink: 'syz.2.2728': attribute type 1 has an invalid length. [ 429.854575][T14337] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2728'. [ 429.894312][T14326] netlink: 183964 bytes leftover after parsing attributes in process `syz.3.2725'. [ 429.911473][T14326] netlink: zone id is out of range [ 429.920434][T14326] netlink: zone id is out of range [ 429.926471][T14326] netlink: zone id is out of range [ 429.943560][T14326] netlink: zone id is out of range [ 429.950672][T14326] netlink: zone id is out of range [ 429.963191][T14326] netlink: zone id is out of range [ 429.973862][T14326] netlink: zone id is out of range [ 430.005861][T14326] netlink: zone id is out of range [ 430.020916][T14326] netlink: zone id is out of range [ 430.038936][T14326] netlink: zone id is out of range [ 430.192215][T14353] netlink: 'syz.0.2733': attribute type 11 has an invalid length. [ 430.203625][T14353] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2733'. [ 430.218387][T14354] device syzkaller0 entered promiscuous mode [ 430.334063][T14359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.475391][T14386] netlink: 166 bytes leftover after parsing attributes in process `syz.1.2740'. [ 431.591878][T14403] netlink: 48513 bytes leftover after parsing attributes in process `syz.4.2744'. [ 431.761512][T14403] netlink: 'syz.4.2744': attribute type 17 has an invalid length. [ 431.788960][T14403] netlink: 'syz.4.2744': attribute type 16 has an invalid length. [ 431.812838][T14403] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2744'. [ 431.862910][T14406] netlink: 'syz.0.2745': attribute type 28 has an invalid length. [ 432.523215][T14425] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2751'. [ 435.159981][T14472] netlink: 'syz.4.2762': attribute type 10 has an invalid length. [ 435.895076][T14472] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 435.950075][T14477] netlink: 'syz.4.2762': attribute type 10 has an invalid length. [ 435.997161][T14477] team0: Device ipvlan1 failed to register rx_handler [ 436.513198][T14499] netlink: 'syz.1.2770': attribute type 16 has an invalid length. [ 436.553177][T14499] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2770'. [ 437.081140][T14528] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2776'. [ 437.230346][T14545] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.2783'. [ 437.490154][T14551] netlink: 'syz.4.2785': attribute type 29 has an invalid length. [ 437.541247][T14555] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2784'. [ 438.145823][T14567] netlink: 'syz.1.2789': attribute type 1 has an invalid length. [ 438.240879][T14567] netlink: 'syz.1.2789': attribute type 1 has an invalid length. [ 438.719230][T14592] netlink: 'syz.2.2796': attribute type 37 has an invalid length. [ 438.865575][T14601] netlink: 'syz.2.2796': attribute type 2 has an invalid length. [ 438.902262][T14601] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2796'. [ 438.936830][T14605] netlink: 'syz.4.2799': attribute type 21 has an invalid length. [ 439.316845][T14613] net_ratelimit: 23 callbacks suppressed [ 439.316866][T14613] sock: sock_set_timeout: `syz.3.2802' (pid 14613) tries to set negative timeout [ 439.876199][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.882687][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.011455][T14628] netlink: 'syz.4.2805': attribute type 10 has an invalid length. [ 441.442676][T14655] device veth0_vlan left promiscuous mode [ 441.479216][T14655] device veth0_vlan entered promiscuous mode [ 441.492422][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 441.742420][T14669] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2819'. [ 441.841477][T14669] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2819'. [ 443.028822][T14708] netlink: 'syz.3.2831': attribute type 2 has an invalid length. [ 443.557794][T14731] netlink: 'syz.4.2836': attribute type 16 has an invalid length. [ 443.597154][T14731] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2836'. [ 443.998884][T14739] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.2837'. [ 444.028669][T14739] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 446.583696][T14749] netlink: 'syz.3.2839': attribute type 7 has an invalid length. [ 446.645876][T14749] netlink: 'syz.3.2839': attribute type 1 has an invalid length. [ 446.676525][T14749] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2839'. [ 446.720095][T14755] netlink: 'syz.1.2840': attribute type 10 has an invalid length. [ 446.778638][T14755] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2840'. [ 446.822705][T14749] device wlan0 entered promiscuous mode [ 449.040619][T14770] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2847'. [ 449.113744][T14776] netlink: 'syz.2.2847': attribute type 10 has an invalid length. [ 449.660204][T14798] netlink: 'syz.2.2852': attribute type 3 has an invalid length. [ 449.675118][T14798] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.2852'. [ 449.710883][T14798] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2852'. [ 449.821757][T14802] netlink: 'syz.1.2855': attribute type 29 has an invalid length. [ 449.847992][T14802] netlink: 'syz.1.2855': attribute type 29 has an invalid length. [ 451.123283][ T4275] Bluetooth: hci2: ISO packet for unknown connection handle 62 [ 451.171877][T14849] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2867'. [ 451.455701][T14855] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.2869'. [ 451.576209][T14861] delete_channel: no stack [ 451.588015][T14855] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 452.383254][ T4279] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 452.392622][ T4279] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 452.403974][ T4279] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 452.412708][ T4279] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 452.424366][ T4279] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 452.432103][ T4279] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 452.745939][T14893] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2876'. [ 452.785630][T14893] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2876'. [ 452.915578][T14888] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2876'. [ 453.001254][T14901] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2876'. [ 453.592799][T14913] netlink: 16278 bytes leftover after parsing attributes in process `syz.3.2883'. [ 453.683968][T14914] device sit0 entered promiscuous mode [ 453.840604][T14927] netlink: 'syz.3.2886': attribute type 11 has an invalid length. [ 453.930082][T14924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.057320][T11068] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.354006][T11068] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.374140][ T4275] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 454.383882][ T4275] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 454.405377][ T4281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 454.425232][ T4281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 454.432925][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 454.442025][ T4281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 454.636215][T11068] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.860353][T11068] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.222648][T14970] netlink: 'syz.3.2897': attribute type 13 has an invalid length. [ 455.304505][T14970] __nla_validate_parse: 1 callbacks suppressed [ 455.304523][T14970] netlink: 24643 bytes leftover after parsing attributes in process `syz.3.2897'. [ 455.550554][T11068] device .d left promiscuous mode [ 455.683134][T14975] netlink: 'syz.1.2898': attribute type 1 has an invalid length. [ 455.755857][T14975] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2898'. [ 456.818855][ T4279] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 456.830494][ T4279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 456.840008][ T4279] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 456.848023][ T4279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 456.858463][ T4279] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 456.866124][ T4279] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 458.894578][ T4279] Bluetooth: hci2: command 0x0409 tx timeout [ 460.267982][T15086] netlink: 'syz.3.2917': attribute type 10 has an invalid length. [ 460.315022][T15086] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2917'. [ 460.394926][T15086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.510012][ T4281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 460.521423][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 460.565409][ T4281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 460.575131][ T4281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 460.582764][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 460.590633][ T4281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 460.968834][T15122] device team_slave_0 left promiscuous mode [ 461.256553][T15122] team0: Port device team_slave_0 removed [ 461.262784][T15122] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 461.590645][T11068] bond0: (slave wlan1): Releasing backup interface [ 461.605484][T11068] device wlan1 left promiscuous mode [ 461.827440][T11068] device hsr_slave_0 left promiscuous mode [ 461.834144][T11068] device hsr_slave_1 left promiscuous mode [ 461.842248][T11068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.852166][T11068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.861596][T11068] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.871421][T11068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.890882][T11068] device veth1_vlan left promiscuous mode [ 461.897321][T11068] device veth0_vlan left promiscuous mode [ 462.021343][T15150] netlink: 'syz.1.2924': attribute type 29 has an invalid length. [ 462.983330][T11068] device macvlan1 left promiscuous mode [ 463.050246][T11068] team0 (unregistering): Port device macvlan1 removed [ 463.183520][ T4281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 463.198661][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 463.208933][ T4281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 463.219900][ T4281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 463.227641][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 463.246197][ T4281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 463.603974][T11068] device team_slave_1 left promiscuous mode [ 463.613816][T11068] team0 (unregistering): Port device team_slave_1 removed [ 463.669636][T11068] device team_slave_0 left promiscuous mode [ 463.678003][T11068] team0 (unregistering): Port device team_slave_0 removed [ 463.726939][T11068] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.736193][T11068] device bond_slave_1 left promiscuous mode [ 463.783430][T11068] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.793452][T11068] device bond_slave_0 left promiscuous mode [ 464.139167][T11068] device bond0 left promiscuous mode [ 464.146612][T11068] team0 (unregistering): Port device bond0 removed [ 464.310507][T11068] bond0 (unregistering): Released all slaves [ 464.354437][T15150] netlink: 'syz.1.2924': attribute type 29 has an invalid length. [ 464.367016][T15169] device vcan0 entered promiscuous mode [ 464.372765][T15169] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 464.869579][T15197] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 464.909425][T15197] netlink: 'syz.3.2938': attribute type 17 has an invalid length. [ 464.930420][T15197] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2938'. [ 465.642587][T15229] netlink: 'syz.4.2943': attribute type 9 has an invalid length. [ 465.666250][T15230] netlink: 212940 bytes leftover after parsing attributes in process `syz.0.2940'. [ 465.722196][T15232] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.2942'. [ 465.780698][T15232] netlink: zone id is out of range [ 465.818215][T15232] netlink: zone id is out of range [ 465.846989][T15232] netlink: get zone limit has 8 unknown bytes [ 466.400786][ T4279] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 466.411188][ T4279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 466.426644][ T4279] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 466.435102][ T4279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 466.442898][ T4279] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 466.451447][ T4279] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 466.669325][T15271] netlink: 'syz.3.2949': attribute type 25 has an invalid length. [ 466.687140][T15271] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.2949'. [ 466.893124][T15282] netlink: 'syz.1.2951': attribute type 37 has an invalid length. [ 467.081947][T15295] netlink: 'syz.0.2952': attribute type 10 has an invalid length. [ 467.177039][T15298] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.2953'. [ 467.202989][T15298] netlink: 'syz.1.2953': attribute type 2 has an invalid length. [ 467.225466][T15298] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.2953'. [ 468.125893][T15324] device wlan0 entered promiscuous mode [ 468.148040][T15329] netlink: 'syz.3.2957': attribute type 11 has an invalid length. [ 468.161876][T15329] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2957'. [ 468.342606][T15328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.802412][ T4279] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 468.826266][ T4279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 468.836092][ T4279] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 468.847241][ T4279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 468.855053][ T4279] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 468.862715][ T4279] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 471.534248][T15385] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2968'. [ 471.576611][T15385] device caif0 left promiscuous mode [ 471.588548][T15385] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 471.655843][T15397] bond0: (slave wlan1): Error: Slave device does not support XDP [ 472.963222][ T4281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 472.974095][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 472.987831][ T4281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 472.999108][ T4281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 473.006986][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 473.010558][T15426] netlink: 'syz.0.2976': attribute type 3 has an invalid length. [ 473.023240][ T4275] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 473.071222][T15429] netlink: 'syz.4.2978': attribute type 1 has an invalid length. [ 473.095814][T15426] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2976'. [ 473.122332][T15429] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2978'. [ 473.187221][T15426] netlink: 'syz.0.2976': attribute type 27 has an invalid length. [ 473.361942][T15435] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2980'. [ 473.405934][T15426] bond0: (slave bond_slave_0): Releasing backup interface [ 473.494624][T15432] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2979'. [ 474.409407][T15449] netlink: 'syz.1.2982': attribute type 19 has an invalid length. [ 474.451886][T15455] netlink: 'syz.0.2981': attribute type 29 has an invalid length. [ 474.483979][T15454] netlink: 'syz.4.2984': attribute type 2 has an invalid length. [ 474.513181][T15455] netlink: 'syz.0.2981': attribute type 29 has an invalid length. [ 474.538796][T15454] netlink: 'syz.4.2984': attribute type 1 has an invalid length. [ 474.557284][T15457] netlink: 'syz.0.2981': attribute type 29 has an invalid length. [ 474.576940][T15454] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.2984'. [ 474.607631][T15455] netlink: 'syz.0.2981': attribute type 29 has an invalid length. [ 474.637227][T15455] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2981'. [ 475.044012][ T4279] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 475.053230][ T4279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 475.061446][ T4279] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 475.078138][ T4279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 475.087007][ T4279] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 475.094358][ T4279] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 475.353373][T15491] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2994'. [ 477.083346][T15522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3004'. [ 477.424863][ T4275] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 477.434601][ T4275] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 477.450046][ T4275] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 477.458056][ T4275] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 477.465728][ T4275] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 477.480410][ T4281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 477.605826][T15546] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3010'. [ 477.654424][T15546] team0: default FDB implementation only supports local addresses [ 478.994545][ T4279] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 479.003478][ T4279] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 479.011490][ T4279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 479.019309][ T4279] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 479.026845][ T4279] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 479.035363][ T4279] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 479.362256][T11058] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.468343][T11058] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.485522][T15584] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3018'. [ 479.698253][T11058] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.726830][T15590] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3016'. [ 479.890930][T11058] bond0: (slave netdevsim0): Releasing backup interface [ 479.923889][T11058] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.211484][T15607] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3021'. [ 480.368022][ T4275] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 480.376825][ T4275] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 480.389503][ T4275] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 480.408169][ T4275] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 480.418268][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 480.426084][T15615] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 480.435316][T15615] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 480.459720][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 480.469997][ T4281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 480.479081][ T4281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 480.486675][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 480.494003][ T4281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 481.174661][T11058] bond0: (slave gretap0): Releasing backup interface [ 481.398739][T15640] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3025'. [ 481.842307][ T4281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 481.851884][ T4281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 481.860204][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 481.869275][ T4281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 481.889591][ T4281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 481.901812][ T4281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 481.922307][ T4281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 481.939000][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 481.947734][ T4281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 481.964148][ T4281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 481.978031][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 481.994075][ T4281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 483.306330][T15682] validate_nla: 3 callbacks suppressed [ 483.306347][T15682] netlink: 'syz.0.3033': attribute type 4 has an invalid length. [ 483.341263][T15682] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3033'. [ 483.379270][T15682] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 483.444416][T15686] netlink: 'syz.1.3034': attribute type 2 has an invalid length. [ 483.479295][T15686] netlink: 'syz.1.3034': attribute type 8 has an invalid length. [ 483.523969][T15686] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3034'. [ 483.873199][T11058] device hsr_slave_0 left promiscuous mode [ 483.887935][T11058] device hsr_slave_1 left promiscuous mode [ 483.916102][T11058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 483.934177][T11058] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 483.954181][T11058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 483.985017][T11058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.994673][ T4281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 484.007260][ T4281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 484.021361][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 484.030795][ T4281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 484.038928][ T4281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 484.046424][ T4281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 484.115173][ T4281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 484.124629][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 484.133788][ T4281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 484.142077][ T4281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 484.150075][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 484.157713][ T4281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 486.094583][ T4281] Bluetooth: hci1: command 0x0409 tx timeout [ 486.174474][ T4282] Bluetooth: hci2: command 0x0409 tx timeout [ 487.600049][T11058] device veth1_vlan left promiscuous mode [ 487.609112][T11058] device veth0_vlan left promiscuous mode [ 488.048033][T11058] device team_slave_1 left promiscuous mode [ 488.057456][T11058] team0 (unregistering): Port device team_slave_1 removed [ 488.122877][T11058] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.174577][ T4282] Bluetooth: hci1: command 0x041b tx timeout [ 488.264538][ T4282] Bluetooth: hci2: command 0x041b tx timeout [ 488.499652][T11058] bond0 (unregistering): Released all slaves [ 488.730852][T15719] netlink: 'syz.1.3040': attribute type 4 has an invalid length. [ 488.770070][T15719] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3040'. [ 488.840154][T15723] netlink: 'syz.0.3039': attribute type 10 has an invalid length. [ 488.915090][T15724] netlink: 'syz.1.3040': attribute type 10 has an invalid length. [ 488.945702][T15724] bond0: (slave netdevsim0): Releasing backup interface [ 488.976503][T15724] device netdevsim0 left promiscuous mode [ 489.032492][T15724] device netdevsim0 entered promiscuous mode [ 489.048627][T15724] team0: Port device netdevsim0 added [ 489.066318][T15728] netlink: 'syz.1.3040': attribute type 10 has an invalid length. [ 489.098782][T15728] device netdevsim0 left promiscuous mode [ 489.162512][T15728] team0: Port device netdevsim0 removed [ 489.173647][T15728] device netdevsim0 entered promiscuous mode [ 489.181672][T15728] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 489.643954][ T4281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 489.654005][ T4281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 489.663762][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 489.672675][ T4281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 489.680967][ T4281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 489.689294][ T4281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 490.340431][ T4281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 490.364602][ T4281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 490.374109][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 490.381882][ T4281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 490.390076][ T4281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 490.397509][ T4281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 492.212631][ T4282] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 492.222261][ T4282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 492.231724][ T4282] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 492.242545][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 492.252032][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 492.260529][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 492.625260][T15819] netlink: 'syz.1.3050': attribute type 28 has an invalid length. [ 492.634146][T15819] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3050'. [ 492.656697][T15821] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3051'. [ 492.679453][T15821] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3051'. [ 492.695985][T15821] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3051'. [ 492.725666][T15821] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3051'. [ 492.997147][ T4282] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 493.006505][ T4282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 493.015071][ T4282] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 493.023798][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 493.033700][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 493.042208][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 493.649624][ T4281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 493.659558][ T4281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 493.668137][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 493.677231][ T4281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 493.686442][ T4281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 493.697371][ T4281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 494.345916][ T4281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 494.355351][ T4281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 494.363131][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 494.374356][ T4281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 494.382749][ T4281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 494.390250][ T4281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 494.996658][ T4281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 495.006133][ T4281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 495.015559][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 495.024120][ T4281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 495.031842][ T4281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 495.039773][ T4281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 495.640197][ T4282] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 495.648833][ T4282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 495.659356][ T4282] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 495.667333][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 495.676164][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 495.683486][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 496.362447][ T4282] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 496.372284][ T4282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 496.381825][ T4282] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 496.389985][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 496.400043][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 496.407349][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 496.959991][ T4281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 496.972305][ T4281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 496.983083][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 497.001073][ T4281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 497.013908][ T4281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 497.023344][ T4281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 497.762435][ T4281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 497.770826][ T4281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 497.785225][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 497.793426][ T4281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 497.802192][ T4281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 497.809526][ T4281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 498.411084][ T4281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 498.420221][ T4281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 498.429747][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 498.439456][ T4281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 498.447185][ T4281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 498.454473][ T4281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 498.992881][ T4281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 499.001959][ T4281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 499.010748][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 499.019560][ T4281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 499.027095][ T4281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 499.036660][ T4281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 499.450102][T16028] netlink: 'syz.1.3068': attribute type 1 has an invalid length. [ 499.474409][T16028] netlink: 'syz.1.3068': attribute type 4 has an invalid length. [ 499.482183][T16028] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3068'. [ 499.640433][ T4281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 499.649897][ T4281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 499.659540][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 499.668483][ T4281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 499.677648][ T4281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 499.685039][ T4281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 500.414210][ T4282] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 500.424771][ T4282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 500.434177][ T4282] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 500.443169][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 500.451116][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 500.458520][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 501.180490][ T4281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 501.197861][ T4281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 501.206399][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 501.215794][ T4281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 501.223360][ T4281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 501.231142][ T4281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 501.296493][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.302861][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 25: Inappropriate ioctl for device) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=2 req=2874 state=3 status=67 (errno 32: Broken pipe) [ 501.784685][ T4282] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 501.793831][ T4282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 501.812182][ T4282] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 501.837138][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 501.847201][ T4279] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 501.865987][ T4279] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 502.717128][T16075] device syz_tun left promiscuous mode [ 502.727186][T16075] team0: Port device syz_tun removed [ 503.146110][T11058] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.231409][T11058] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.277763][T11058] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.336634][T11058] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.461337][T11058] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.526174][T11058] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.594086][T11058] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.650141][T11058] bond0: (slave netdevsim0): Releasing backup interface [ 503.657839][T11058] device netdevsim0 left promiscuous mode [ 503.668213][T11058] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.798193][T11058] device .d left promiscuous mode [ 503.826500][T11058] device .*! left promiscuous mode [ 503.875072][T11058] device 0 left promiscuous mode [ 504.173484][T11058] device ip6gretap0 left promiscuous mode [ 504.181795][T11058] ë: port 1(ip6gretap0) entered disabled state [ 504.693360][T11058] device gretap0 left promiscuous mode [ 504.699185][T11058] Ÿë: port 1(gretap0) entered disabled state [ 505.284178][T11058] bond0: (slave wlan1): Releasing backup interface [ 505.557527][T11058] bond0: (slave wlan1): Releasing backup interface [ 505.566533][T11058] device wlan1 left promiscuous mode [ 505.760570][T11058] device hsr_slave_0 left promiscuous mode [ 505.776350][T11058] device hsr_slave_1 left promiscuous mode [ 505.799205][T11058] device veth1_vlan left promiscuous mode [ 506.228215][T11058] team0 (unregistering): Port device team_slave_1 removed [ 506.262298][T11058] team0 (unregistering): Port device team_slave_0 removed [ 506.297859][T11058] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.740165][T11058] bond0 (unregistering): Released all slaves [ 506.912409][T11058] device vlan0 left promiscuous mode [ 506.918505][T11058] device veth0_vlan left promiscuous mode [ 506.926282][T11058] team0 (unregistering): Port device vlan0 removed [ 507.094785][T11058] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 507.103678][T11058] device batadv_slave_0 left promiscuous mode [ 507.137531][T11058] device team_slave_1 left promiscuous mode [ 507.144104][T11058] team0 (unregistering): Port device team_slave_1 removed [ 507.178307][T11058] device team_slave_0 left promiscuous mode [ 507.186664][T11058] team0 (unregistering): Port device team_slave_0 removed [ 507.225215][T11058] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.233947][T11058] device bond_slave_1 left promiscuous mode [ 507.267953][T11058] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.277010][T11058] device bond_slave_0 left promiscuous mode [ 507.603427][T11058] bond0 (unregistering): Released all slaves [ 508.225177][T11058] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.297452][T11058] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.362993][T11058] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.421196][T11058] bond0: (slave netdevsim0): Releasing backup interface [ 508.431566][T11058] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.677318][T11058] device ip6gretap0 left promiscuous mode [ 508.683141][T11058] ë: port 1(ip6gretap0) entered disabled state [ 509.391791][T11058] device wlan1 left promiscuous mode [ 509.401231][T11058] team0: Port device wlan1 removed [ 509.553059][T11058] device hsr_slave_0 left promiscuous mode [ 509.560134][T11058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.567956][T11058] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.576043][T11058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.583550][T11058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.599102][T11058] device veth1_vlan left promiscuous mode [ 509.843330][T11058] device geneve1 left promiscuous mode [ 509.849591][T11058] team0 (unregistering): Port device geneve1 removed [ 510.047952][T11058] device team_slave_1 left promiscuous mode [ 510.054681][T11058] team0 (unregistering): Port device team_slave_1 removed [ 510.088985][T11058] device team_slave_0 left promiscuous mode [ 510.095655][T11058] team0 (unregistering): Port device team_slave_0 removed [ 510.132589][T11058] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.274668][T11058] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 510.302729][T11058] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 510.498288][T11058] bond0 (unregistering): Released all slaves