last executing test programs: 5.72143057s ago: executing program 4 (id=5295): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000100002020207b1af8ff00000000bf86a26db800000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000009e0000001801000020646c2500000000002020207b1af8ff00000000bfa1000000"], 0x0, 0x545, 0x0, 0x0, 0x40f00, 0x34}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x1f63, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000d0df00850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r5, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000640)=r4}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000005c0)={r5, &(0x7f0000000380), 0x0}, 0x20) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='devices.list\x00', 0x26e1, 0x0) close(r7) write$cgroup_devices(r7, 0x0, 0xfffffeff) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r8) ioctl$SIOCSIFHWADDR(r8, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8}, &(0x7f0000000100), &(0x7f0000000140)=r7}, 0x20) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r9, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ccb3f8080d6cc84efb6913588946f4a229a88e4d35fae3d4637bdcaf1c7a1a77f988046bcd14b8951accb126c6e22fafcff0b621f2aee0c8fb8713c8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x12, &(0x7f00000002c0)=ANY=[@ANYBLOB="1847000007000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000bb00000085000000060000001800000089000000000000006c18000018470000050000000000000000000000852000000500000085000000ca0000008510000006000000353af4ff00000000"], &(0x7f0000000500)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x2, '\x00', r10, 0x0, r7, 0x8, &(0x7f0000000540)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0xa, 0x8, 0x4}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000005c0)=[r7, r7, r8], &(0x7f0000000640)=[{0x3, 0x5, 0xd, 0x4}, {0x5, 0x5, 0x2, 0x9}, {0x4, 0x4, 0xf, 0x2}, {0x5, 0x4, 0x2, 0x9}, {0x3, 0x1, 0x10}, {0x1, 0x4, 0x4, 0x7}, {0x0, 0x1, 0xb, 0xa}, {0x3, 0x1, 0x1}], 0x10, 0x9}, 0x94) r11 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r7}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r12) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x17, 0xc, &(0x7f0000000040)=ANY=[@ANYRES32=r12], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, @fallback=0x32, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r13) syz_clone(0x8c001000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.296159201s ago: executing program 4 (id=5300): bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x13, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xba}, [@call={0x85, 0x0, 0x0, 0x40027}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0, &(0x7f0000000400)}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@union={0xd, 0x1, 0x0, 0x5, 0x1, 0x70f1, [{0x9, 0x2, 0xf09}]}, @typedef={0x6, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x2e, 0x2e, 0x5f, 0x6f]}}, &(0x7f0000000140)=""/128, 0x42, 0x80, 0x1, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x13, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xba}, [@call={0x85, 0x0, 0x0, 0x40027}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0, &(0x7f0000000400)}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@union={0xd, 0x1, 0x0, 0x5, 0x1, 0x70f1, [{0x9, 0x2, 0xf09}]}, @typedef={0x6, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x2e, 0x2e, 0x5f, 0x6f]}}, &(0x7f0000000140)=""/128, 0x42, 0x80, 0x1, 0x1}, 0x28) (async) 5.176379824s ago: executing program 2 (id=5302): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYBLOB], 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0x0, 0x9, 0x10}, 0xc) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000009000000000000000500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000a00008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x21}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.144120935s ago: executing program 4 (id=5304): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0xb701, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0x1, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000040)='GPL\x00', 0x7, 0xd4, &(0x7f0000000240)=""/212, 0x41100, 0x0, '\x00', r10, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0x9, 0x8, 0xb}, 0x10, 0x23fbf, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000500)=[{0x4, 0x2, 0x2, 0x7}, {0x3, 0x4, 0x7, 0x6}, {0x4, 0x3, 0x4, 0x8}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r0, 0x0, 0x22, 0x0, &(0x7f0000000600)="3d25ff005b19c4cbe601709b080041fe7a8a0479", 0x0, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.952413799s ago: executing program 4 (id=5305): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x62005000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0x9) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x9922, 0x2, 0x0, 0x0, 0xe, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x4, 0x0, &(0x7f0000000180)="00050000", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10b241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000f36100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb911"], 0x3e) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018010000756cff7c00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$cgroup_int(r5, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/2'], 0x6a) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c000000ffff0000ff00000000000000ef560004eaafd146000035"], 0x0, 0x26}, 0x28) 4.947568339s ago: executing program 2 (id=5306): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv_slave_0\x00', 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getpid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x0, 0x7ffffffffffffffc}, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001a00)=ANY=[@ANYBLOB], 0xfe33) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d276bf5cf32fc97, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x53, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) syz_clone(0x40141000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r4, 0x29, 0x10, 0x0, 0x0) socketpair(0x1d, 0x2, 0x0, &(0x7f0000000040)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x2, r5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0xc, &(0x7f0000000680)=ANY=[], 0x0, 0x40000000, 0x0, 0x0, 0x41000, 0x61, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) 4.583934178s ago: executing program 3 (id=5308): r0 = socket$kcm(0x2a, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext={0x101, 0x6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, 0x0, 0x0, 0x0, 0x6b}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000012006b04000000d86e6c1d000a887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$inet(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x2a, 0x0, @broadcast}, 0x10, 0x0}, 0x0) close(r0) 4.49639054s ago: executing program 2 (id=5309): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) (async) sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0) (async) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x6f}, 0x94) (async) ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0x1) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000001440)='GPL\x00'}, 0x94) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220000000000000000000000000000000000000001"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.49600733s ago: executing program 1 (id=5310): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000210081044e810382db44b9040a00007f00000500002015000600142603600e1209000600fe7f00007f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ae5abb3dbe08141a90bffece0b42a9ecbee5de6ccd40df8e4edef3d93c42a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xcb}, {&(0x7f0000000080)="2947ccfbab120bb6a8b56c98e1", 0xd}], 0x2}, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0xd, &(0x7f0000000040), 0x3) sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000004) recvmsg$kcm(r2, &(0x7f0000003200)={0x0, 0x0, 0x0}, 0x10000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/mnt\x00') syz_open_procfs$namespace(0x0, &(0x7f0000001300)='ns/mnt\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4d, 0x5, 0x0, 0x0, 0x0, 0xf, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x5, 0x1ff}, 0x8, 0x1, 0x0, 0x6, 0x3, 0x2, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000210081044e810382db44b9040a00007f00000500002015000600142603600e1209000600fe7f00007f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ae5abb3dbe08141a90bffece0b42a9ecbee5de6ccd40df8e4edef3d93c42a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xcb}, {&(0x7f0000000080)="2947ccfbab120bb6a8b56c98e1", 0xd}], 0x2}, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) socket$kcm(0x2b, 0x1, 0x0) (async) setsockopt$sock_attach_bpf(r2, 0x6, 0xd, &(0x7f0000000040), 0x3) (async) sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000004) (async) recvmsg$kcm(r2, &(0x7f0000003200)={0x0, 0x0, 0x0}, 0x10000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) (async) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/mnt\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000001300)='ns/mnt\x00') (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4d, 0x5, 0x0, 0x0, 0x0, 0xf, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x5, 0x1ff}, 0x8, 0x1, 0x0, 0x6, 0x3, 0x2, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)) (async) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) (async) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) 4.388501063s ago: executing program 0 (id=5311): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000480), 0x2, 0x0) r7 = getpid() r8 = getpid() sendmsg$unix(r4, &(0x7f00000005c0)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)="c3afd12b5ecd427b361688324e5a7f8fa8e8a7c5ba64019b3517b22ab2999b52e0716c02e49936", 0x27}, {&(0x7f0000000180)="efe9af01f2f7f05b86d975a0b4addd25549ec038a17894cc87bd37f849930053ba8d212859fbb7ed9b393ba26bedaeadd627309acff09ccc1c66fc40f5b92fa483c315584587d491e238f34d2c77cbdf0a82a9df198115b0580c2a5daab41bb473297d68114cb579f55ff0ee5624dcb39b3c7105801b7546c5fc18eb27a5857964fbc178c6fce07276d704b14aebd8e3b7acc61c17b7cb4053", 0x99}, {&(0x7f0000000240)="6bef86ef53bfa7f6d531108a9d17c2c14c8796daceded05732653159c14ea9e219c4bec237d88347eb0ecbb83770849532ce36c008f1a20e54bf39cbe382", 0x3e}, {&(0x7f0000000280)="de66ea57577776e87c2b4fb49563f07deb732a3885eebaf49c3dc654b5e5647430d519ac64a71de1971c07b11933a46c317a5b149a91025ff386f4fe", 0x3c}, {&(0x7f00000002c0)="cd1b258f3efc809501d8e8a1ecf722c2af5b3e0ce6621bb21461324c4b30ef4fdfa0e62df25101e5f0a313b7d5497f7a7d8972711a15a8c032485b6bc5f6b71b22cc61a23144785be23632f6fa1058647d431436c97b51cfce45b88c992f797e06ab20628020f844b8372768522ebd7298088bf00ffbaf64043de6eeb49a70a9589a7ed98872599452f76b875c157f0548f65bcfee3cdd8d491eb314a6cf3145ec2ef05407f96239915cde65c84210264d02a9c8050089df8ee246831a113da1698e4b1569bdcd2c2f77cb08c37b74b3bfb70d8e0ee2a72a5bd4a9e0d33d59608c3ea3800ecb8b2679a5be79867f595b19b83245f9b3063fd070dfd8", 0xfc}, {&(0x7f00000003c0)="ee7e85b13048342e9892d31f16f58bbe6c1370add3e67e73a4bcc487bacc4ac5643ee6", 0x23}], 0x6, &(0x7f00000004c0)=[@rights={{0x24, 0x1, 0x1, [r2, r2, r1, r5, r6]}}, @cred={{0x1c, 0x1, 0x2, {r7, 0xee00, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [r2, r1, r2]}}, @rights={{0x38, 0x1, 0x1, [r2, r2, r0, 0xffffffffffffffff, r1, r2, r0, r0, r1, r3]}}, @rights={{0x18, 0x1, 0x1, [r2, r0]}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xffffffffffffffff, 0xffffffffffffffff}}}], 0xd8, 0x20}, 0x4000000) recvmsg$kcm(r5, &(0x7f00000017c0)={&(0x7f0000000600)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/226, 0xe2}], 0x1, &(0x7f00000007c0)=""/4096, 0x1000}, 0x40002021) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001900)={@cgroup=0xffffffffffffffff, 0x8, 0x0, 0xfffffff6, &(0x7f0000001800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000001840)=[0x0], &(0x7f0000001880)=[0x0, 0x0, 0x0], &(0x7f00000018c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000019c0)={r8, 0xffffffffffffffff, 0x0, 0x13, &(0x7f0000001980)='net_prio.ifpriomap\x00', 0x0}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001940)={@fallback=r9, 0xffffffffffffffff, 0x11, 0x28, 0x0, @void, @void, @void, @value=r12, r11}, 0x20) socketpair(0x11, 0x3, 0xd49e, &(0x7f0000001a00)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = perf_event_open(&(0x7f0000001a80)={0x3, 0x80, 0x47, 0x9, 0x80, 0x2, 0x0, 0xffffffff, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xffffffff, 0x4, @perf_bp={&(0x7f0000001a40), 0xe}, 0x10000, 0xdaa, 0x4, 0x3, 0x8, 0x9, 0x2, 0x0, 0x7, 0x0, 0x9}, r8, 0x9, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_PERIOD(r14, 0x40082404, &(0x7f0000001b00)=0x101) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001e00)={r14, 0x20, &(0x7f0000001dc0)={&(0x7f0000001c00)=""/193, 0xc1, 0x0, &(0x7f0000001d00)=""/129, 0x81}}, 0x10) r16 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002100)=@bpf_tracing={0x1a, 0x27, &(0x7f0000001e40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8bb0, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x9, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x2}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @jmp={0x5, 0x1, 0xb, 0x6, 0x6, 0x18, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001f80)='GPL\x00', 0x4, 0x25, &(0x7f0000001fc0)=""/37, 0x41000, 0x44, '\x00', 0x0, 0x18, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002000)={0x3, 0x2, 0x9, 0x7}, 0x10, 0x2c40f, 0xffffffffffffffff, 0x7, &(0x7f0000002040)=[0x1, 0x1, 0x1], &(0x7f0000002080)=[{0x3, 0x5, 0x7, 0x3}, {0x1, 0x2, 0x9, 0x2}, {0x0, 0x4, 0xf, 0xc}, {0x5, 0x5, 0xd}, {0x3, 0x3, 0x5, 0x2}, {0x1, 0x5, 0x2, 0x9}, {0x0, 0x3, 0x5, 0x5}], 0x10, 0xfff}, 0x94) r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000021c0)={0x3, 0x4, 0x4, 0xa, 0x0, r13, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x50) r18 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002240)={0x0, 0x80000001, 0x10}, 0xc) r19 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000022c0)=@o_path={&(0x7f0000002280)='./file0\x00', 0x0, 0x10}, 0x18) r20 = bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x15, 0x4, &(0x7f0000001b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000001b80)='GPL\x00', 0x720b5911, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @fallback=0x33, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001bc0)={0x0, 0x9, 0x1, 0x10001}, 0x10, r15, r16, 0x1, &(0x7f0000002300)=[r17, r18, 0x1, r19, 0x1], &(0x7f0000002340)=[{0x0, 0x1, 0xe, 0xf3743208dc13134f}], 0x10, 0xffffffff}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002440)={0xffffffffffffffff}) sendmsg(r21, &(0x7f0000004ac0)={&(0x7f0000002480)=@llc={0x1a, 0x300, 0x9, 0xba, 0x6, 0x1, @random="d0d33b583783"}, 0x80, &(0x7f0000004880)=[{&(0x7f0000002500)="363f70a6055b4706e8b4ea95a43e6b432b50ea33b3863d11e4947d6ef7efc7fcab5cb56a35233c29c0dcfe2dfe41ef3678694338e8291e0b3a4238d66f9f288f509c45a37a20b54afba5b02411ccb1a91bc8fa3aead88b9b130bde71878bb8f7e275687b436953b5cdc681dbcbdfffbec568b029be50eac0b9ec2ac3b97ea587a6d67ce2e72c171d240e6901e9536ae446cd470a8aa243c867861d2ff1b5a68308e054109817619abfcd8d91d936ef964cbd3d33e7db46891c4615061b830f3ee4607087431abadd511ce68bb303f4a60979837b", 0xd4}, {&(0x7f0000002600)="0512ba931a9cc087b05a32cda627330489b6cfb79dc3060d1a3e461ce18f205cb08adf1de4b3683c3062fbab68746f9074e9578eb32c5bfc28104fe556cd0a550d9752b9bbb9059573906f029fccb3f377c317a7edc08d1840e0f8889210a01b5f8e3b203e0ebf702b74041f23c1c10e09bb518804eff61d6dc6d1af7b027e82d1680a47f776fcbb4a459ccd1be71b0a8735b023b627f1def5ee657fd8d6db2f7a61817c45ec2be4097e01fca69d845e27c90a4d786da029c21cfe63d62272d08108c543465c0f0a4ff38b7c896d3d5deb8587acef159681ce3a37ffa12bb353f74a609daf69cef9bc7b532fe2cbacbdc4bc40a4c8e0e3cdc512c748536e632359c3b236a2d1d9ebcf3bc110e88f25d5a6e9c1977a31fd7b5e0ec471e2f46ec35e322cd6d0d36ad8851902de0168f8b0d62f0a0399edcb46e0a6b50df8713ca959ce6bd07f6ec0340a9f2f8650daa9f8176bb6d7b70eaca6e924deb8833ad1bc8a0ccd1c1633dc63e9cc8381cc66049821af02d12b337856364a57ef6cf395fd67403ed5d5186bca53ad3677b4d749856a86539feb35e13fe69b30d080a1252cef1cb31f1aa5efee8a52a4cfb5fb1305ef565faf7b86dc615c73c239e5d0bb90986a01e1bd18962f795f62a2def6d7bccc26b8ea55120db82517edc66661f9d970f664f9347bce8e6444a3b2420b7e6821bdcc3b698e698cbe242c7ced33b66c77b1e6045d46856a749c8ea9307f858148682cb41ff53bbe319d82cb9a8ad3ee3c2c06f1882fd780833e63d409fa5609822cbfbdaf06c20125435736c5ddaf81cc1d44101e1cfd0a2b41173c51132b19fb75b4f6838362673e8323aa516535ae0ad2ffd17378965c001cf185dfb63f5b7359c46adf1c40f7a22fe86411ecc2b52301cce6859470a8b932f6c064dc8409e7bfcef202311493dba3938d45be2d571dbd400f58f1cb55cf569ecf9d34959cef06c3a0dfa8bd2fcf82da36e0551772932a769dbd3bf608d66192e5fba7dec54be9f305d0b43604f64b0edda45d78a925d66eb06152ce58fec2e509ae826c810f21191b20265ac37ccac47b891e3af8c9a23a11289473720bbf21d2197191de3681ff5e72fd6f4887730064cca25006890dac73102e008ab2bd190c39d8e8be73c3d9f5061eb1a5bbba3e05ffbc4e4d54e2ca6f277dff7e7c78723a01719a743d0dc10cf002eac21cf38a6aaab43685ddadab57c85d6e32a3ff930b3a763adb98cb69790271f3f56bc48dd4794e7a9e8d9f2f943d4af5c611a50deacc0a9c99e42d0566d450da514f6e40ee32a085ddd7528f4e60c3661e330a2ae468eeb744c3d395f81e0497b579ae0e21096ef11fa8bd22d9d3bc0ba6fc5204a69ce4ee382196fca2d135912d532d51ffd990a545068abfc81d3b7e8ab12dc2c3b4eee2e32f79755ae54291b5f32e9365aad3ae5b9dc24034c01014e415219979769c232a4f2951b69705f6cfe6cef907a2d50229483763bd77082de9a7e915df5ba35e1c2d42f802861ee726a2a083806d32b258b4d8bc0e71d4ac16ea5e6d81107e256f0b201e33fd900abea3a8f45f6db8de122524121e53766d5f5fab9dbaea30357eee0961ca4c031ca0cf26ca2e960d6577089ebcf1a9d9f17633ce9897cecf58fcca4d5ddf9a004b1a0968dbd2c87b8c69b6293e2483d15b069267ab91025dba81538c4913d2c32ba4a257b57c499d9dc116c2a40870b56198d16b33edd748ca64796d2701f614b4aed6e5b615935f99113aee7d823641de4b5f49eeb5db5d9a8c05d57cc2fa32cf5a2d44ba0782e14600a07088ce4bb198610b91fe309a406f9e6161621fdc7e3fe367f0587acf8d0eb755c6c60ff18e0dcc3078b3f4af819b4d133b3c3371ad0c2434b6c6b93dd34d84f39bf259545576e5e987a93202dab4c279cef3dd34cc9829e0aedaf69f4b77ef12453147c87003157dc57b0ed1fe9714942583841cc3bef4d25f10695c3b36bf8c9a7d72f94d8ece5ee83203077ecbd93be294c3105a7eac3171d398531d1cacdf94bc845c9a7fc8937ca2dd4463f0ca7677352f266e9377f91cd1564638e3972ffee3117141f5cea33663eff38479358d7f3ca67964aacd5c5f3fad3c52e65803a902654cecdbc553e3cf831f30f87e3f405451d211922eb99f382055613b71de9424dd8560510364582923f6392609d33668a6d3e366121019b2079f8b5f185b833b36dce8253c366b97f55fbdc6304e5268974583bb60fa81778d8554c7a2d8d2045a6ff037be51f77a7ba720b77dfd68f5d79be60a6a147ded5305b0355284ba02b4ed49b0ad4b7a275092c275c71864fcc94cbf40e9e377cc1ee4d428e04cf7e2fa8d4aac66dde73f6c0dbb586401849c0490e174316ee269a036bad680b1f7f00598bc70690b9ef3e417798d27ccfec8ba146658227188dc1096237515ee899689a593cdf32397d7bc867bb7d2a190c930148de2c5f56e65f9fc58fc81d34a71e57f6bdbdd9bf5f60e7c944eb1a560889c659707e52e2fb698ffac99afa77e64d7222d18259565313a7e0fe28efe28a8f7a0b105f35a19d473c193fa3ccc783ed85b347c387d43078a506aefd9868285324b9096fc21ed812b54f8cf011ecbd49fd823ce1baae93752ea1fe0cc775494fe8c3e4a65030cfffc5dee2058ed85374189344715fc12ae8894754e96b3e7d9de332d2d189ea3f4f7dea17aca8ddf73ee57598c7161976b7c9f7f213b1c882a54a8996ee11ca3a17c3f5a3f4bfff3ddf15907c75eb917146b7aea7c504ea5d524d130e65117e595922f8f689f6dfe45912a187bd5e8ed96ae0f2d38093b710db34c6487a052340033f8bd3b436c1e03c37ea35b41ae27726d77c8313764670d8140fe180c4f6f8e4a2b99402e4661e4e436e4609a61d10cfbfbef761026ddae8b46b6a5124267bb777362a7118de23919389680a92abd09c7f83ac988bc081eb83d0502d898bcf043dc37c2f38288e7d11e2655eadff170a15b4d770f41721ca6b16b5288bbe2098cb42691bf619c321a5fde41afbd2c2ff53683f7f38e552b0a25ef46582fae1a4e13f38daa1aef1db6c759696384369854b4a5d1c81cf676b87113ba86f3d924f1d06721f90d20e39944e057c0d8961e499cf7d83cb4f5cb79d76371dbdba66b1a1caf3c010a505ac36d82de31cb3f362855a45681036ac791506b015f4db40b7a82370e84001d6c9bfdf8ca658892a00dee50213cc8092393a4f2d4ca2317c7a8274e49e32f546da53eb06723ab4353a5c3b8c10d2d0f1bf94b8e07d1223de1a31e7105649abd66541e13a9c9a9192342f32a3448a257124ea61b5b75178fb7051ff4bc9cd22dee9e2318e39dce8ecb6dd72be967530b244d69260b841a9689704df5fd1e8ea64a3fd4ca91e7edec1d879c96b58fe70993d3cb64d19cc8929ff08931c0c36bcc2e873fa128c39c36396bb803cc142ca02169465e558b500561ed4d84a6ef93f0964fdc402f646f2a2c0f10b133994ea21f6fd88f455bccd7937b37bc4fc5c2eb3654ad1f796dee892eff8f6b46f0e9e42f8df19a9b7cd5c03615c9cf6fe46077581febdcdd63f6b930abfaa3722a0d2a7114346cdae7082a0ee0682e9c212fa6fa7c9a6b508de138824192a49f978805793fd624017f0940d582342c582e0b72a04612c764efbeb9ecf0d1567a40d6a770b2b8a6b4fcfea94c1b002e6ea067a51a90f1025c099c89fc2fce512b2004e0ae2e9d3b24330d5cd9f606175a2fc838ef5b31c9c06d5527918560c30624fb3c3190f67adcd34ea96390ea44a742712122cb694b0dfc5ad159972b52b97dcc8a846b8d417ac0808c7916a27af64f9c1472408f9c49357cc1a6bc3bc494e862b09748bb2ec8ea4679b7e036a171943580bc7e4e1a3e0387fccdc9ff2fb0dd1beef55b44f477a81c08d742f31d1561df079af7e65bfe1fb26d14ebba9b988cdad730ca33a563d03c1baa01121c9d804af0c4b6f48c2db27e2773aad7406a5016fb1fd2e00c472c344d529ff1cfa6aae8e2c8e7c1b456cdbf40682b278bad5b98d304f0b11326b1a4c9336e28dfdb7a5e42426eab830b3c8e9eb73b6c226a36aa8b39bf82c6cc7f216332247e17345b747286edde055fcf7661019dafc724873ee4323bea389be3aa37caaff66527a0e162904fa49f4485ed72ec56bb1e8d499a846fc9e7c5c0248b11d7798be7ef8baaba29a88370df484f4bfa51418be24a5ac161db669b2063cb0631f3b238e2228eadf06c124c16b6d764015476eb31599dc85487e320b6079526ed57fbbff21caa4a7534fd6cb713df56739045bf3141010070e1563ce64e24145b6170618b2c7d71260c0a6209d3fb682bbab345b5ec226a609c463ae7fa8a11a3ab6726062c3c4d4fcdf1597a35b6634ce10a37bf8f8f1870ba815c312c8df55632fb976f0dd3f1f2f0cc8f761d6bd5752e129a09e8a5d05677db866a14669d7f206908439adca508d42bd354aeb7a4a5c5c91dafbd60eeb15c12e08469104ce436c907f630fade2a44024e27599c96279b0670a5fd48521549f6589c422f3a8eec852abff4efb41461cc43cf5cae8840a6cab707f46b59e8c6e3a8a4eca4284101699bbbaa834a1c93a52708768b5c8b92b7b85cde5fbf3de6e7ef1f65603bf5eb981e2da27ac094bdd2f01c11d9efbe18aab43cbea72eb50276772d38a0596c160a3c0fcd567441ff7d9f716210cbd197250449eddc15b9e13bd34d504cb349615b24daeb6cdee8aeb6853d6ff658dba3da1704211b32a994c26902963d8da53ffe1f989e962a105715807ce49aa1e110ce93234ae403bb26952f60b33915d6874aaf1b54d86a864b040839e93cda485760d4595a96fc77e8e072ff88fb0a4396946fc898a029d5731168ad44aa79770bc177638f03ffcfdc582900cc23d0054f7be1eb03408bc0c0cc02952be1e775fa0ef060697f2874972899c3f0c0e0acbfbeff127c66f146c7cb43781a4da6c5f1c88e23fa8fb58507cb400bb3ad550c82f7df583e40ef0fe2862b750cd74c91b0092568c827ea8a7b839215a722b06849ff9a40e779d0d7397355bf7c839aaaada2ed86698fb84fa89b9e033c6842be83d00827d89bcc81cc2d528a24b54e07bf4c8d7d78b3c066cbce6d8dd396e3afd663cd34ae6c9067a6007a7ce1edb11eebff30619a9f060b6693fbcfa0f8f503527259bfa0bb0b0fc5889f025b1c64cf89cdff9c3ebe3807cd85ec02c4fbe086af7e670196a7e6ca69425ba7b6eb48eb4dce54ff58b010e357d043953b3900ab72a231853680f6ef9b6bcf466ba199fe17ea84c991d397039b463717fcc86007df03518b3d0f87fc9f6b7c477a9466a576dc6dbc736b184e58a850ad886631dc8ff8bfbe1dd9b9fa8856f39aa84ad5f112f29ddda1905538053b226ea446663917dac91a577c3b4c57be52efc43063573301078eac416297bbe2174164a5c59b13495d9809b4ac4bf5d0a3148e98f4d4763b2ce68697d9b369bb4db7ea5faa39a0de7a2ff839487e38bcea7e66c354fb598b9f8cdbdd2193dd1d2db21d3b59c729270ffeb70ee1068905055edf6bc98d2857bc479cb575ed4b98d5f04f0e65c62baea8ea081da7e6be53c35bf81cd68360c782891cc8507a8cd245f1e5439088ea6c67f29582c068f8d74c272fdd1b107a05c67b6a393b1c85cbcb827f81772149c705d9a1fc5ae207a3802053d610b868b35dac213a8770dd116b044385d7fc3ae5a5055c9d408b5fc156945701de3d9e065c4ec11da89553b156bfbe784f256cf4dea11d", 0x1000}, {&(0x7f0000003600)="0508d14e4f8cbc6148073b329a80f1d374f08143b0a4", 0x16}, {&(0x7f0000003640)="321484f59e882963fe5a328f0a6ab664a26d5827bf", 0x15}, {&(0x7f0000003680)="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", 0x1000}, {&(0x7f0000004680)="45e54692762f5a8bf26bba2e95ed68a71acf3c190b24f919615fd39440eb9630f4c90aada13947586cf29b991ca1b264317e387e9415876ea9966f1bc8", 0x3d}, {&(0x7f00000046c0)="1b4d3953a5a9d699e93639881c685320ac3dc754af1a5b7084bedbf2ba3c08759c26c0476a399aa5a8bbf030ad9bd427cf567f8c6350f3f838c7d18bc696535908f5ee1e6779aa294ab45586eb91649a794abe4e37976f50c599752e0e872b16bb99cb4d5d3e7a4518a3ef1e242c73f06739f3f930351a4b40581949138639613aa8f7fe1100247366a8b29fbbb6a520d1ed3d620494e50c2aa8c2c3be0c3c725e42ce741424431074177275e64c68911bb8ee85ab75a9d206ad351875ad7483b9876f916d0376d131f21b040e9b6695d71b39bd24068acb6c3726b5988a740b5b98aac87daf210a33a175fc202a1732", 0xf0}, {&(0x7f00000047c0)="0ac36fc48745341dabb20df881229af7ae334d7fca91b992f17e2693960456630be46c9b70f9c85d67e43b486122b24dd2d8e140783ce1a6254de714a9b3c3380285bdf6acc904565de282e104debcc76d3165c0daec9fedea81c79d87d76ddc10119da81b5bf3d9dfeecbef4d97922de08f19059b249678534523db97454daa7a8ea240311aaf4c9d804513de2a3efb32f383d8ff6272819a8cdb0e", 0x9c}], 0x8, &(0x7f0000004900)=[{0x28, 0x10a, 0x9, "5d9c4765ffd1ec804c203e6465e52d7fcb836c"}, {0x68, 0x84, 0x3ff, "cba916c3bc496b69199aa75de25f2ffb2a95df06e5480d529e406249cb95d24238448c8c0b57165246d1eb359939c888a14896472083788380a05a54c4adb49664857ced11d73afc5ea363feaac35fcc44"}, {0x70, 0x118, 0x800, "b5a5e258456f63d97c4ae8d93a3ef78ddcb4f6f3554ce263315fcb58f7d2faa1d80f75e711e3180873be71da3bcd16629f649e72fe94e71283163a5b83b8d36a715bbbb6ce35b8b9d411c182bae7369252957bf64841eb9c8a5e"}, {0x48, 0x118, 0x7, "8f4e9877be069514b32848e8ec0adff939556de334a9cb5e83e67c10c733fe4731df351636b976a3a4c2e6638d7babb1a4c2"}, {0x18, 0x29, 0x9, "feda14"}, {0x58, 0x110, 0x3, "8c06166675f81d062af53c64994fb5f29d3b79790eb1ce41408d400c639e64d5af744772feefe9ad5df9947957dbb6f75f41fb8c46ad8509a66252ec98a4e46bc9dc1f"}], 0x1b8}, 0x20044000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000004dc0)={r20, 0xe0, &(0x7f0000004cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000004b00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000004b40)=[0x0], &(0x7f0000004b80)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x1f, &(0x7f0000004bc0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000004c00), &(0x7f0000004c40), 0x8, 0x30, 0x8, 0x8, &(0x7f0000004c80)}}, 0x10) r23 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004f40)={&(0x7f0000004e00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x4, [@typedef={0x8, 0x0, 0x0, 0x8, 0x3}, @float={0x8, 0x0, 0x0, 0x10, 0x8}, @union={0xd, 0x3, 0x0, 0x5, 0x0, 0xfff, [{0x5, 0x4, 0x5462}, {0x3, 0x0, 0x4b9}, {0xd, 0x0, 0xde}]}]}, {0x0, [0x61, 0x61]}}, &(0x7f0000004e80)=""/145, 0x64, 0x91, 0x1, 0x7fffffff, 0x10000, @value=r20}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000004f80)=@base={0xc, 0x4, 0x3, 0x2, 0x400, r18, 0xfffffff6, '\x00', r22, r23, 0xfffffffb, 0x4, 0x2}, 0x50) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000005040)=@generic={&(0x7f0000005000)='\x00'}, 0x18) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000005780)={0x7, 0x15, &(0x7f0000005080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x0, 0x2, 0x3, 0x1, 0x4, 0x20, 0xfffffffffffffff0}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x8}, @jmp={0x5, 0x1, 0x8, 0x3, 0x0, 0xffffffffffffffc0}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2239}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x763}}, @exit, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffb}, @func={0x85, 0x0, 0x1, 0x0, 0x5}]}, &(0x7f0000005140)='syzkaller\x00', 0x1, 0xf6, &(0x7f0000005180)=""/246, 0x40f00, 0x40, '\x00', r22, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f00000053c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000005400)={0x0, 0xd, 0x0, 0x2}, 0x10, 0x0, r16, 0x0, &(0x7f0000005740)=[r18], 0x0, 0x10, 0x6}, 0x94) 4.327952435s ago: executing program 2 (id=5312): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x6}, 0x21, 0x0, 0x0, 0x7, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000071101200000000009500000700000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2002f00, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) 4.1043273s ago: executing program 3 (id=5313): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) socket$kcm(0x11, 0x6, 0x300) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f00000005c0), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1c00000033000b12c25aa9cb8c2194f90124fc60100c034006000000", 0x1c}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x60) r7 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r7, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) sendmsg$kcm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="d7eab112856b60b6a3e0e2dbde6c3d5e7680491920639d480b6b5b0e6328733b2a118af085970758b35b8eb69a86eb1e67bce340dd99e45bcdcadc", 0x3b}, {&(0x7f0000001b40)="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", 0x448}], 0x2}, 0x8000) sendmsg$kcm(r7, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0}, 0x40000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x4) 4.10400567s ago: executing program 1 (id=5314): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup, 0x3, 0x0, 0x1, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0}, 0x40) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f00000017c0)={&(0x7f0000000040)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000000c0)="83", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000084000000070000007fffffff8d000000b8"], 0xd0}, 0x480c4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000006000000080000000800000040000000", @ANYRES32, @ANYBLOB="000000000000000000000000dd00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4584, 0x80000000}, 0x20a8, 0x8, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86\xae\xa5\xea?\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="0100c3201000"}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x91f, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2b, 0x1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000060000000f0000000800000041000000", @ANYRES32, @ANYBLOB="0000000000000000e62d4afa388871bc00008500", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r8}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r8, &(0x7f0000000580), &(0x7f0000000640)=""/147}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f00000002c0)=ANY=[@ANYBLOB='P'], 0x8) 3.714606519s ago: executing program 3 (id=5316): socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x72, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000003a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414aa"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x2, &(0x7f0000000680)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x6a, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffaf, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.486597655s ago: executing program 3 (id=5317): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7}, 0x94) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x5452, &(0x7f0000000140)) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000000), &(0x7f0000000580)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/117, 0x75}], 0x1}, 0x102) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(r8) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x44b2ac04}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r9, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32=r11, @ANYBLOB="0000000004000000000000000000000000080000000000000000004c96dd8bfb"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400), &(0x7f0000000440)=[0x0, 0x0], 0x0, 0x5a, &(0x7f0000000600)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000100), &(0x7f0000000680), 0x8, 0x10d8, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r13}, 0x94) r14 = openat$cgroup_ro(r6, &(0x7f0000000d00)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0x6, 0x103, 0x8, 0x23c7, 0x42000, r9, 0x3, '\x00', 0x0, r11, 0x3, 0x0, 0x4}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e80)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9}, [@map_fd={0x18, 0xa}, @ldst={0x3, 0x0, 0x2, 0x5, 0xa, 0xfffffffffffffff4, 0x10}]}, &(0x7f0000000bc0)='syzkaller\x00', 0x1000, 0xda, &(0x7f0000000c00)=""/218, 0x40f00, 0x12, '\x00', r13, 0x19, r14, 0x8, &(0x7f0000000d40)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000d80)={0x0, 0x0, 0x4, 0x7}, 0x10, 0x25aba, r3, 0x0, &(0x7f0000000e40)=[r4, r7, r12, r9, r15], 0x0, 0x10, 0x6}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r10, r8}, 0xc) r16 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r16, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="d8000000140081044e81f782db44b9040a87080211000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090002001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b485b2b8b20d852f3eb0d5597076", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x800) 3.403550317s ago: executing program 0 (id=5318): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000890) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x40000000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x100000000000000, 0x80001}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x24040084) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={0x0, 0x0, 0x86}, 0x28) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r5, 0x0, 0x4800) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e4"], 0xffbf) socket$kcm(0x29, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/..\x00\x82q\xee !\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 1.25381244s ago: executing program 1 (id=5319): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24868, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x20008010) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xf0, 0x5f, 0x9f, 0x4, 0x0, 0x6, 0x30531, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800006, 0x2, @perf_config_ext={0x1, 0x8}, 0x10002, 0x9dd, 0x80000020, 0x6, 0x400, 0x0, 0x8, 0x0, 0x100, 0x0, 0x201}, 0x0, 0x8, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000012002f8c35093f974b21b92e0a", 0x11}], 0x1}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="1310000016"], 0xfe33) write$cgroup_type(r0, &(0x7f0000000080), 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x20100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_clone(0x81084000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x7, 0x0, 0x10, 0xfc, 0x0, 0x0, 0x200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x6531aa1a, 0xeb}, 0x0, 0xc8, 0x9, 0x0, 0xffffffffffffffff, 0x5a, 0x0, 0x0, 0x8, 0x0, 0x200000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10020) write$cgroup_subtree(r5, &(0x7f0000000000), 0xfdef) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x5, 0x4, 0x4, 0x12}, 0x50) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20) sendmsg$inet(r6, &(0x7f0000000980)={0x0, 0x6020, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 1.25307992s ago: executing program 2 (id=5320): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x38, 0xb7, 0x7f, 0x8, 0x0, 0x3c, 0x200, 0xe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x403b9499, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x10080, 0x9, 0xfff, 0x10, 0x4, 0x66a1, 0x0, 0x0, 0x101, 0x0, 0xfffffffffffffff7}, 0xffffffffffffffff, 0x9, r0, 0x5) perf_event_open(&(0x7f00000001c0)={0xfda12ae2957f98ca, 0x80, 0x1, 0x3, 0xe, 0xf7, 0x0, 0x5, 0x30000, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x7, 0x41cf}, 0x188, 0xe6, 0xffff, 0x7, 0x93b, 0xba60, 0x1ff, 0x0, 0x31, 0x0, 0x8000000000000000}, 0x0, 0x8, r0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="1400000035000b45d30000000000000001d25a80", 0x14}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1a82, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) 1.180349021s ago: executing program 3 (id=5321): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=0xffffffffffffffff, 0xf, 0x0, 0x10000, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0x0, 0x7, 0x20}, 0xc) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0], 0x0, 0x61, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x7a, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@map=r3, r0, 0x2b, 0x28, 0x0, @void, @void, @void, @value=r4, r2}, 0x20) (async) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000500)={r1, r1}) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000580)=@generic={&(0x7f0000000540)='./file0\x00'}, 0x18) (async) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x9, [@type_tag={0xd, 0x0, 0x0, 0x12, 0x2}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x2}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x3, 0x9}, @typedef={0xc, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x2e, 0x5f, 0x6b8290b2f3d116e2, 0x0, 0x30, 0x5f, 0x61]}}, &(0x7f0000000640)=""/93, 0x55, 0x5d, 0x1, 0xa, 0x10000, @value=r1}, 0x28) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000700)={r1, r1}) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0x12, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ldst={0x0, 0x0, 0x3, 0x9, 0x0, 0x1, 0xfffffffffffffffc}, @map_fd={0x18, 0xcf2b496830ffc942, 0x1, 0x0, r1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000800)='syzkaller\x00', 0x2, 0x10, &(0x7f0000000840)=""/16, 0x41100, 0x10, '\x00', r5, @fallback=0x2f, r8, 0x8, &(0x7f0000000880)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x2, 0x3, 0x1, 0x4}, 0x10, r6, r1, 0x0, 0x0, 0x0, 0x10, 0xa125}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x8, &(0x7f00000009c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x1}, @alu={0x4, 0x0, 0x9, 0xb, 0x1, 0xfffffffffffffffc}], &(0x7f0000000a00)='syzkaller\x00', 0xfc8, 0x0, 0x0, 0x41100, 0x8, '\x00', r5, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000a80)={0x0, 0x8, 0x6c48, 0x2952}, 0x10, r6, r1, 0x0, &(0x7f0000000ac0)=[r1, r1, r1, r1], 0x0, 0x10, 0x2}, 0x94) (async) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000cc0)={&(0x7f0000000bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x7, [@enum={0xe, 0x5, 0x0, 0x6, 0x4, [{0x1, 0x5cd01a8e}, {0xf, 0x5}, {0xb, 0x101}, {0x7, 0x7fff}, {0x2, 0x5}]}, @volatile={0x6, 0x0, 0x0, 0x9, 0x3}, @float={0x6, 0x0, 0x0, 0x10, 0x10}, @struct={0xd, 0x2, 0x0, 0x4, 0x0, 0x1, [{0x10, 0x0, 0x4f}, {0x1, 0x1, 0x3}]}]}, {0x0, [0x61, 0x61, 0x2e, 0x0, 0x2e]}}, &(0x7f0000000c80)=""/23, 0x8f, 0x17, 0x0, 0x8}, 0x28) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d00)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x3, '\x00', r5, r11, 0x5, 0x0, 0x1}, 0x50) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d80)={0xffffffffffffffff}) (async) r14 = getpid() (async) r15 = openat$cgroup_procs(r1, &(0x7f0000001040)='tasks\x00', 0x2, 0x0) (async) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@bloom_filter={0x1e, 0x6, 0x405, 0x1ff, 0xa012, r3, 0x5, '\x00', r5, r11, 0x4, 0x1, 0x2, 0x4, @value=r11}, 0x50) r17 = openat$cgroup_type(r1, &(0x7f0000001100), 0x2, 0x0) (async) r18 = socket$kcm(0x29, 0x0, 0x0) (async) r19 = getpid() (async) r20 = gettid() r21 = openat$cgroup_type(r1, &(0x7f0000001140), 0x2, 0x0) (async) r22 = openat$cgroup_devices(r1, &(0x7f0000001180)='devices.deny\x00', 0x2, 0x0) (async) r23 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001200)=@generic={&(0x7f00000011c0)='./file1\x00'}, 0x18) (async) r24 = syz_clone(0x50000, &(0x7f0000001240)="ca7273dc2cd5bf6db1e49fafa1d22ea892083ab9a57a46a9a477b7822c585d77e660ee7b798ee6", 0x27, &(0x7f0000001280), &(0x7f00000012c0), &(0x7f0000001300)="4833d4dc14fe3ead2dfed41cab8e14ba8b6387651a0cc6c7c988f5a7d9ef12edfdb77751327cc344f8d9b6127f5a9e63e2c7633165444db79392319d46f9f769fa46b9acfbb1a142e7026bacb8f9e41c27f58f9e58302a385f0b801323d1b573906162c81acfc5c93d80a6936382b0f9b62f25f85b54046f06d3ccc833c86dee94407cab1ee64a9c84184444700aa985af8f0ec7f6d11eed2e4e9d73d3e434b7a462f7b984ae7acf3215e89ca1fa9e8df1e75b14ee0e0f4d3c0256cd67") sendmsg$unix(r13, &(0x7f0000001540)={&(0x7f0000000dc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000e40)="af1bae47be2b594d6acbce693dfc2408806c381e2e847ed9af29b05d1ee1ead83d975d9c50312a29b6887d7f3191abc7997c9449b940ae6a8ec4a9c848c39126ec4dbefa4b9a6a8c9a622074312e7aba4f94620e59e176832732fe11b9aaf03ea0152ae3184a6335e8fcbd66dd4b4d6011cf226e517a8a988b5e7493ffa596d21acb481eb61e2544069c918fcbdaa4323335ff76ae9bff33e76180d9ce8c0162d53f5339", 0xa4}, {&(0x7f0000000f00)="bf2323de3652044776af6a0320004db66688c8b95b2ae4cbd316ca01b8cfa8b05f79fd5177091acc23da4b0209a4a9bcc6efcf3dcd58f0a4017da55da94b38fe5b97", 0x42}, {&(0x7f0000000f80)="6419bfb51400400927408286d9094f72e95b129d0a737cf1c1062f958ba4a6b09af125c5a330f0226ea24623d0adcab370fa93f0bc29d877f9787d5c8283b637515fb008242bba3de291dd49244353b5968a65f878a71ce4953324074970ee86675c33f98d10b6785c82d1513bbe8baab89399c9540f2270987ff9", 0x7b}], 0x3, &(0x7f00000013c0)=[@cred={{0x1c, 0x1, 0x2, {r14, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r11, r11, r15, r12, r7]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r3, r11, r1, r0, r10, r7, r8, r1, r8]}}, @rights={{0x30, 0x1, 0x1, [r0, r16, r9, r11, r3, r9, r17, r18]}}, @cred={{0x1c, 0x1, 0x2, {r19, 0xee01, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r20, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [r8, r21, r1, r3]}}, @rights={{0x24, 0x1, 0x1, [r11, r10, r11, r1, r22]}}, @rights={{0x18, 0x1, 0x1, [r10, r23]}}, @cred={{0x1c, 0x1, 0x2, {r24, 0xee00}}}], 0x170, 0x10}, 0x48000) (async) perf_event_open(&(0x7f00000015c0)={0x5, 0x80, 0x0, 0x4, 0x4, 0x0, 0x0, 0x350, 0x2000, 0x6, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000001580), 0xc981fc249dfb9ad2}, 0x4408, 0xe, 0x100, 0x7, 0xfc9a, 0x1, 0x9, 0x0, 0x23ed, 0x0, 0x9}, r24, 0x4, r1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001640)='./cgroup.net/syz1\x00', 0x1ff) (async) r25 = bpf$MAP_CREATE(0x0, &(0x7f0000001680)=@base={0x9, 0xa28, 0x0, 0x4, 0xc058, r16, 0x1a9f, '\x00', r5, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0x0, @value=r1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001800)={r25, &(0x7f0000001700)="de38f4d0d2ce5ace9ebcb057aec4de370a695795508a682f098a0c99b2d8d3d14e978a531ca55f4d12676d96e235fc3e6ff23ae926e5ad", &(0x7f0000001740)=""/186, 0x4}, 0x20) 1.180028992s ago: executing program 4 (id=5322): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async, rerun: 32) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, @perf_config_ext, 0x11d042, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x1) (async, rerun: 32) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={0xffffffffffffffff, 0x0, 0x0, 0x4c, 0x0, &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x21, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2", 0x1, 0x0, 0x13}, 0x50) (async) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0) (async) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) (async, rerun: 32) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async, rerun: 32) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000a0000000400000002000000c5000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000010000000000000c300e4ff000000009500"/40], &(0x7f0000000100)='GPL\x00', 0x1, 0xd8, &(0x7f0000000300)=""/216}, 0x94) close(0x3) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e020000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0xec, 0x7, 0x40, 0x17, 0x0, 0x1, 0x2005f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x11808b, 0x6, 0x3, 0x0, 0x81, 0x2, 0x5, 0x0, 0x7, 0x0, 0x2}, 0x0, 0xf, 0xffffffffffffffff, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="2e000000380005ffd25a80698c63940d0300fc602f0000000b000200001ec0003715de60cfd9a1af05d81d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4080) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x404f60, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x337) (async, rerun: 32) r8 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 1.163878202s ago: executing program 0 (id=5323): r0 = socket$kcm(0x2a, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext={0x101, 0x6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, 0x0, 0x0, 0x0, 0x6b}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000012006b04000000d86e6c1d000a887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$inet(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x2a, 0x0, @broadcast}, 0x10, 0x0}, 0x0) close(r0) 1.027207955s ago: executing program 4 (id=5324): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0309004d8871ef2885634a8270e71111"], 0xee8a) 872.303249ms ago: executing program 3 (id=5325): r0 = syz_clone(0x1000, &(0x7f0000000080)="63fc8afa500bb2", 0x7, &(0x7f0000000100), &(0x7f0000000340), &(0x7f0000000440)="378e3828cb02177921b39c47166df240565bc8c16061e2c7989709253c7552ca95518af43bec2a76f6af1d033f604bb4b79f42a26eaffcc923a29417d2e5d994d811fb229e93bfef4c198a57675e9b973962e8a22a296f6952940ebee7eaf53089862f931c5348dfaeebe82f1f50205848b2") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x9, 0x100, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x4b15}, r0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x89d, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x10000, 0x1}, 0x7402, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00'}, 0xb4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 506.478228ms ago: executing program 0 (id=5326): r0 = socket$kcm(0x10, 0x2, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0f0000000400000004000000020000000000000090d9db4bd3057f43eb09b91e1cd1687ad1ebceada79a38c1c07b16a970fa249b6315e1c4c9926f0fba0067fa45d5e616f65930df2e0046c1047f202fcf782949cfdbafe4df3dc9bbd3d682442419", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r1) (async) sendmsg$unix(r1, 0x0, 0x10044001) (async, rerun: 32) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, 0x0, 0x51}, 0x0) (async) r4 = socket$kcm(0x10, 0x5, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001880)="5c00000012006b1e003de3d86e6c1dff05137e0300000000000000b68675f8001d000a00a0e69ee517d34442bc24eab556a7e60f1e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) close(r3) (async) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000440)={'netpci0', 0x32, 0x33}, 0xa) (async) close(0xffffffffffffffff) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 371.685931ms ago: executing program 0 (id=5327): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002e0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000005c0)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f0000000600)='syz0\x00', 0x200002, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r3, &(0x7f0000000400)={&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x298}, 0xc004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x0, 0x28, &(0x7f0000000240)=[{}, {}], 0x10, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x30, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r7 = perf_event_open$cgroup(&(0x7f0000000740)={0x3, 0x80, 0x9, 0x4, 0x1, 0x3, 0x0, 0x3, 0x800, 0x14, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf58, 0x1, @perf_config_ext={0x5, 0x3}, 0x41, 0x8, 0x8, 0x5, 0x1, 0x4a59, 0xa1c, 0x0, 0x5, 0x0, 0x8000000000000000}, r2, 0xe, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000007c0)='GPL\x00') r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32, @ANYBLOB='u\x00'/20, @ANYRES32=r6, @ANYRES32=r8, @ANYBLOB="1fff000000000000030000000000000000d01695d400000049000000"], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg(r5, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x4000) 215.122515ms ago: executing program 0 (id=5328): bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='*\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="53528418920af84fbf24b2d795fbf1fd30abca8a1ed90a34", @ANYRES32=r0, @ANYBLOB, @ANYRES64=0x0], 0x20) recvmsg$unix(0xffffffffffffffff, &(0x7f0000003500)={&(0x7f0000000040), 0x6e, 0x0, 0x0, &(0x7f00000034c0)=[@cred={{0x1c}}], 0x20}, 0x11e2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) socket$kcm(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x400000002, 0x0) (async) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44a904020000000000000000000005100013", 0x1f}], 0x1}, 0x4090) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44a904020000000000000000000005100013", 0x1f}], 0x1}, 0x4090) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) perf_event_open(&(0x7f0000001700)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x8806, 0x3, 0x634e, 0x0, 0x0, 0x1, 0xfff6, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f0000000680), &(0x7f0000000700)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) 213.587605ms ago: executing program 1 (id=5329): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) socketpair(0x35, 0x80000, 0x5, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x2a3600, 0x0) (async) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x8001) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x7, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x40}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r4}, &(0x7f0000000700), &(0x7f0000000740)=r3}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r4, &(0x7f0000000180), &(0x7f0000000000), 0x2}, 0x20) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000500)={&(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000280)="d91e4dca8b94b18f44ebd47533d1a35fed3d7206c7b8a5b9848bccaae8ce5c77d3bcf966af03617c25796330504bde4ac2d53ee7f001d5be5b43d8c6d53d2542797accba109b31224865d785d7bbd6cccda9686a96d59d01a5d681dfa15304d5873057e901ef1a304378363b3b80a86396af8147915077a226b8937074878cf53c913e2249e44eee5ad5aa6d51254e132815577c7b37cf46a72daf0be3050eda6af1745a21", 0xa5}, {&(0x7f0000000340)="2cd838fe6869502e4e06dc8741045dc6b68a057df7298b6a9e2ce4b4a95c03a94f1e35876958fab1e4f5c4164f9e5dad78c046207574ab402db3884060597c8878a96593f839fde526de5a35e9dcdda94d664d03a2920bceb7f2354f568bff119a702e89851112582fbd967470e3a2c14ab864da316b5aae01d44d11deeb400437b1a87b77eaaced1fafd4f214c15cb90540121c688de5659ee80dbe070ea13f", 0xa0}], 0x2, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES32=r2, @ANYRES32=r5], 0x18, 0x20000000}, 0x4) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000028000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(r1, &(0x7f0000000b40)={&(0x7f0000000540)=@in6={0xa, 0x4e22, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x80, &(0x7f0000000880)=[{&(0x7f00000005c0)="e0fdb763c3bfe8ba93f5d5e4586c0a7fa9968cfb2d341409c959407cfadec7caf84d732c56788d7386d9560899612919979234dd039c4b305bd201386d26d686a1140113cf", 0x45}, {&(0x7f0000000640)="faeccd7b1b36cc72eb927a0678f55e0c6524e996f13bee90a48d93169f0e1a96b036c8bddf196d18faf7b15e4ba6", 0x2e}, {&(0x7f00000006c0)="c397e8ed6eff807bbd9b22d2b14f1a1b42172b458d437c4f120b0976668d9040", 0x20}, {&(0x7f00000007c0)="8d1765100063720b6deab5823de9ac393d9568da74089d7343fb536faef3f840c35ca7d3b772e7cd678ecde445719e51ac129f7ac0da36921b184a2530b42e334002104867a125b2aa547c9f12ab13360a51201f1f6e50193cae9f844c0d715ee1c417b38a6683e27d933483bd41f0802a0fa878a876ad38ab540f605db9ad6954cdf49775e527ca1e761962f7242febea4c0315dd2163cba8d2b05cba2d0606137c6737f40184a93725ad09", 0xac}], 0x4, &(0x7f0000000a00)=[{0xb0, 0x102, 0x5, "1134caf4b076d3f8126057dd8abe5ebb225161b5b4431f1d5b93e8418883582ceead774429f60fdd548d195928aa399facfff8d1996cfd7be5a8fd65a29bf558bb8e2dc468a9642ee71f4e4a07044058ccf18da2da6db335132878693021097fdece584487a211146e00c28975ddeb8522e69374e5a4a0bc3b4654c0d621bcc07c50299e4ab1b16e159f85e05ec243502326ec65c26142a5775d"}, {0x70, 0x108, 0x8, "777275cd42653c8020ab84b406a30ef1c126e6375705b5de5e6762ac005b80a9abbdb2d4c684c0dafcaad481fbc7694ab734da3c77f21c415bd66cac8c667b1156a9a950339fa5bc8ef37a95901d18f7962f2ac9c131468b7f9516eea1b2ab82"}], 0x120}, 0x8000) 60.470569ms ago: executing program 1 (id=5330): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x50) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x7, '\x00', 0x0, r1, 0x4, 0x4, 0x3}, 0x50) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140)=r1, 0x4) r3 = socket$kcm(0x29, 0x7, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000180)={0x1, 0x0, [0x0]}) write$cgroup_subtree(r1, &(0x7f00000001c0)={[{0x2b, 'cpuset'}, {0x2d, 'net'}, {0x2b, 'hugetlb'}, {0x2d, 'net_prio'}, {0x2b, 'cpuacct'}, {0x2b, 'cpu'}, {0x2d, 'pids'}]}, 0x34) openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000240)='FROZEN\x00', 0x7) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r1, 0x37, 0x1, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)={@cgroup=r1, r1, 0x2b, 0xa, r1, @void, @value=r1, @void, @void, r4}, 0x20) sendmsg$inet(r1, &(0x7f00000008c0)={&(0x7f0000000400)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000440)="a59433c0fb740427dc61d1eebb23981a85d994c464f190054c0cf578cecf84882d14f9b2646314944ae3141427b5c0a983df12c9aa0596fd1edea03d48a4284c3a16fda2b0b09d12ab0c22bb9728847119f2008c9237f6c39cc8eb870cebecd38f2b00565d3dbd325fa56a810be5201d23a99e41f249bb2b4f4e95cba4d8457b1e94e7311d480ef27b5b93f35ed7b413c407d3c9d428ee5803eb2207b2806d4c8ea2a1a3c22cc933686691c6bb6839337a2f30f9747887601ab31923e0be01fd193c0542b4ec1f55ec68d55cde769ea34c72f00b0f0c27fce39625a6191e512c99ca3caaa7ee3e5f9f40", 0xea}, {&(0x7f0000000540)="e9e79d757ccc9b0973ea9547e6ed5f61305830a3f9017487870dbd027f1e3a5b3f5ad5e01990e1a16967912a6daa90cd82e26b65611db49aab9b24889422289b9c911a07f5c775a8e5a27a72d222edc7b28316c2ccb374dddd21edf75e2b45bce7bb34d486c77864dbb7843cd481912368fe0f4f9028398a4ec0ce39c94b2f4935fe991a36f82fbc0cac07bc561bb5e2f2afb852edc56cd0a6ba41c07f141da73e6702a1946c5b32c4d39eb00d4c27bf5f9f0f5ca79a91086af48c1444698651a73390f86771b9344d80016907bff5f3d692c1ca6b7b7008bf3c1e1bb53f858e4b7fe0f301", 0xe5}, {&(0x7f0000000640)="6d63e9e4789d7f503cd82605e878a6c1c2b7ee32cea8562a1bfed9d4e503c69abd2964e78b9b06f131743991e2c53a8f1036a410aa3de7e9b722272be13d5d6bfd65ac81a6d714fdfc4d1d3a93489bed0a51222ce0cea9a8", 0x58}, {&(0x7f00000006c0)="c3", 0x1}, {&(0x7f0000000700)="39b654a6233ba0b59d313f731378ab4aceb2fdcfd37fecb62891c42b156eb7127377dafcff4dfa15169fd160c90846c2ec680294e60ec33cb4bc8384e8e3558d2a1b530cdb2e4219fecebe2bae13e85d", 0x50}, {&(0x7f0000000780)="f7ebd06b426ba39c329864b76f7167a3d81f61bc5cc1cf8aa2199f361d0cd0d77fabd2c9e35044d1b8025c342cc9ff2e9055ffcb75723d7ac3bbf9becef7f280dfa7d388cadb13f3b56a69ac6eb9c4eb8c6cb180e45dd3c69e75db335bb96660df44786bfb56044f9c2ed9b24ccfaf1bbbd954d65bd697688d7b7689c5f364f191ca7951576f2a64ef69c1db3ab2167051572ace1ea6eab53b633024f24a8a52", 0xa0}], 0x6}, 0x40049c1) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000900)={r1}) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000940), 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000980)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f0000000c00)=[{&(0x7f00000009c0)="76889142354b13c90dbd32f4eeb95eff4bd9944d92549b374ba678437d045e28e0", 0x21}, {&(0x7f0000000a00)="c35413542c64ed4c4e5320482b96bf7b8ace675aa02e15ab70d795f9b4287adaa3fa3c35c2896bbc8acc45a32fd57d147405ac0b80ce2822c5d66833e23665208d0410ec919f2b5bf513ac43c86bbbb7c33c2fff42db27030a2761f5ed2fbe1373655b98896f442d01eb2f5ae432e4faef348c0696af5c6925caa83ca1a27c5fad7437c9b2d552f163c3a58307d2601a5f03390361a7b004c7d3e29fcfc6e56f68dcfd7f8230d9b714bf6097b41aa2c5f35d57eff3a9c80509a7ed4962744f3bff2eb68353338552a38daf46c3f5d7f27d77260dd0394772df98eb89f055d2a68c6d631840b2f50ff503fb3dcdc0574340051f92b6c4e6c4", 0xf8}, {&(0x7f0000000b00)="cdb65e4d0b288e54e83161bd1815ddce666ea30403fa573b22176918a9cfd23b039eb8c1dace96a9969cba2de3699c85a8e211bb4b7b9be50da105f40e58bd64aa5a9f47e4b84d250dc7dd8ff8ac67ef0769ff4236f70dafe3b575ef6f2cae160978f434bae554912ecbb84e657dcde35ab3bb26b093530d2f21534a5821b656980752eca8e57ba13d877b0c3030c43f846ffc5ce2c08cb9af35ae2c5641fff17e3654a110351bdd8edabd7e476c544f582894ba4961f9a776d0da9f031c03282273eecdb93644b481be114fb2bb", 0xce}], 0x3}, 0x40000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000d80)={r1, 0x58, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e40)={0x2, 0x0}, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000e80)={r1, 0xffffffffffffffff}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x3, 0x8, &(0x7f0000000c80)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x101}, @call={0x85, 0x0, 0x0, 0x97}], &(0x7f0000000cc0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x8e, '\x00', r6, @fallback=0x13, r1, 0x8, &(0x7f0000000dc0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000e00)={0x4, 0x0, 0x6, 0x7ff}, 0x10, r7, r1, 0x1, &(0x7f0000000ec0)=[r0, r8, r0], &(0x7f0000000f00)=[{0x1, 0x4, 0xd, 0x2}], 0x10, 0x7fff}, 0x94) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001300)={&(0x7f0000001000)="4b301a7b757d6481acc1eab46c4ec51af5e2d8fb22e597c125ad4635fcf033b6922044bcc915633833b2ba11fc28b9ffd7bdd97d663b3e42a7f7f448716de375af8a390bb50e746aa059ff", &(0x7f0000001080)=""/253, &(0x7f0000001180)="a5f6d959bb3c0e1b1e27484cd024342905071b0848bd42a8966e337cf67dc37859e38966c0c76d8bbc88b794f7b5211bb7b198b3fc9784730ed1fa15698d3cb6d1725836eacb72fe732408f35ec62d7946604c9110fe5095f961113e5532", &(0x7f0000001200)="89c4ce5bc2bba9a83f79116690de2ad5ad9b69938911b425b56920aed3a04eff9ca94a39f69f6121fe0b14f797b52ec03ed036d080f7bbae1eacf1b9dd93e6d8b8673e565329fdf8af973b81bcecb383306d295845e365604101ce389000d3c63d4bab39bde8f0a91dcc75f8087450a30e2f3d21d616f77a4e566a17cec1904f9e8c291d64bb60c86c0472f5cf30d0b15ddd996a6361b696c4ae7eb6226433c1d9ecc6fa1993d7f518d9bf4840030e686419cb97d916f436bb1442fe019cc8e107499ca1aca8184a2bb9effd4a0ac43fac5f6811b3a4be0e3a98431ab396932063171fd43a7c356806a03b1a", 0x96, r2, 0x4}, 0x38) socket$kcm(0x29, 0x0, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000014c0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x7f, '\x00', r6, r1, 0x4, 0x3, 0x2}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x12, 0xf, &(0x7f0000001340)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], &(0x7f00000013c0)='syzkaller\x00', 0x3, 0x56, &(0x7f0000001400)=""/86, 0x41000, 0x0, '\x00', r6, @fallback=0x10, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001480)={0x1, 0x1, 0x8000000, 0xfffffffa}, 0x10, r7, r9, 0x7, &(0x7f0000001540)=[r8, r0, r8, r0, r2, r1, r0, r8, 0xffffffffffffffff, r10], &(0x7f0000001580)=[{0x2, 0x5, 0xf, 0xb}, {0x2, 0x4, 0x1, 0xa}, {0x0, 0x5, 0x5, 0xc}, {0x3, 0x1, 0x7, 0xa}, {0x2, 0x5, 0x5, 0xc}, {0x5, 0x3, 0xc, 0x5}, {0x4, 0x3, 0x7, 0xc}], 0x10, 0xf}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002840)=@bpf_lsm={0x1d, 0x1, &(0x7f00000016c0)=@raw=[@generic={0x7f, 0x0, 0x3, 0xa, 0x6}], &(0x7f0000001700)='GPL\x00', 0x8, 0x1000, &(0x7f0000001740)=""/4096, 0x41100, 0x54, '\x00', r6, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000002740)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000002780)={0x1, 0x7, 0x0, 0xca}, 0x10, 0xffffffffffffffff, 0x0, 0x2, &(0x7f00000027c0)=[r8, r10], &(0x7f0000002800)=[{0x5, 0x4, 0xa, 0x5}, {0x2, 0x1, 0x0, 0xa}], 0x10, 0x7}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002d00)={r11, 0xe0, &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000002a40)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000002a80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc2, &(0x7f0000002b00)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000002b40), &(0x7f0000002b80), 0x8, 0xc5, 0x8, 0x8, &(0x7f0000002bc0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002dc0)={0x20, 0xa, &(0x7f0000002900)=@raw=[@generic={0x13, 0x5, 0x0, 0xaaeb, 0xb1}, @jmp={0x5, 0x0, 0x7, 0xa, 0x9, 0x18, 0xffffffffffffffff}, @generic={0x59, 0x0, 0x8, 0x5, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x400}, @generic={0x9, 0x5, 0xa, 0x1, 0xdf02}, @exit, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}], &(0x7f0000002980)='syzkaller\x00', 0x1, 0x9, &(0x7f00000029c0)=""/9, 0x41100, 0x20, '\x00', r6, @netfilter=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002a00)={0x0, 0xa, 0x2, 0xd}, 0x10, r12, r10, 0x0, &(0x7f0000002d40)=[r8, r0], &(0x7f0000002d80), 0x10, 0xfff}, 0x94) socket$kcm(0x29, 0x7, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002e80)={r1}, 0x4) perf_event_open(&(0x7f0000002ec0)={0x3, 0x80, 0x7, 0xa, 0x8, 0x6, 0x0, 0x9, 0x8020, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x4, @perf_config_ext={0x8, 0x7}, 0xb810, 0xd69, 0x1, 0x2, 0x99a, 0x7, 0x9, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) 0s ago: executing program 1 (id=5331): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x18, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f088a847e0ffff00124000632f", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff0016e0", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xffffffffffffff4e) kernel console output (not intermixed with test programs): team0 [ 629.384907][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 629.398547][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 629.516302][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 629.577811][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 629.637723][ T4738] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.644878][ T4738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.693655][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 629.763440][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 629.777900][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 629.816018][T12714] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.823240][T12714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 629.887731][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 629.908933][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 629.938145][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 629.969270][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 630.077844][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 630.088248][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 630.091117][T16718] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3275'. [ 630.129317][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 630.161044][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 630.215080][T16726] netlink: 'syz.2.3277': attribute type 3 has an invalid length. [ 630.221276][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 630.248504][T16727] netlink: 'syz.2.3277': attribute type 3 has an invalid length. [ 630.256293][T16727] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3277'. [ 630.258330][T16726] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3277'. [ 630.278565][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 630.301308][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 630.335538][T16416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 633.188021][T16721] device syzkaller0 entered promiscuous mode [ 633.515032][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 633.540948][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 633.580306][T16416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.504873][T16803] netlink: 'syz.2.3291': attribute type 1 has an invalid length. [ 634.786287][T16811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3291'. [ 634.796622][T16815] netlink: 'syz.1.3292': attribute type 10 has an invalid length. [ 634.867661][T16815] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.3292'. [ 635.155561][T16824] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3294'. [ 635.313725][T16825] netlink: 'syz.0.3295': attribute type 21 has an invalid length. [ 635.391371][T16825] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3295'. [ 635.476987][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 635.486477][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 635.591626][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 635.618443][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 635.659918][T16416] device veth0_vlan entered promiscuous mode [ 635.677196][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 635.718178][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 635.744060][T16832] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3296'. [ 635.764782][T16416] device veth1_vlan entered promiscuous mode [ 635.961061][T16416] device veth0_macvtap entered promiscuous mode [ 636.089393][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 636.125620][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 636.144476][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 636.188458][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 636.221789][T16416] device veth1_macvtap entered promiscuous mode [ 636.356965][T16852] device sit0 entered promiscuous mode [ 636.487228][T16853] tap0: tun_chr_ioctl cmd 1074025694 [ 636.503720][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 636.522451][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 636.683522][T16416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.714858][T16416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.747913][T16416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.786925][T16416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.819437][T16416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.877176][T16416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.910052][T16416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 637.047534][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 637.083038][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 637.117013][T16416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.159895][T16416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.201335][T16416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.208032][T16870] netlink: 'syz.3.3305': attribute type 1 has an invalid length. [ 637.257309][T16416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.279805][T16870] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.3305'. [ 637.311469][T16416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.360719][T16416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.399447][T16416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 637.526886][T16879] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3306'. [ 637.547444][T16879] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 637.588101][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 637.627907][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 637.666499][T16416] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.684493][T16416] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.727205][T16416] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.781755][T16416] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.236784][ T4322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.279155][ T4322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.382808][T16897] netlink: 'syz.1.3311': attribute type 4 has an invalid length. [ 638.431968][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 638.445546][ T4737] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.478195][ T4737] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.572089][ T4737] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 638.655166][T16901] netlink: 'syz.0.3310': attribute type 10 has an invalid length. [ 638.685809][T16901] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.3310'. [ 638.844956][T16905] device veth1_macvtap left promiscuous mode [ 640.290978][T16922] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3315'. [ 640.733754][T16922] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 640.888677][ T4279] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 640.898465][ T4279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 640.907811][ T4279] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 640.916008][ T4279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 640.925129][ T4279] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 640.932672][ T4279] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 640.939322][T16935] netlink: 763 bytes leftover after parsing attributes in process `syz.4.3320'. [ 641.356020][ T5338] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.427567][T16947] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3323'. [ 641.531037][ T5338] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.670586][T16953] netlink: 'syz.3.3324': attribute type 21 has an invalid length. [ 641.866771][ T5338] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.970999][T16959] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3324'. [ 642.140175][ T5338] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.253127][T16975] netlink: 'syz.3.3331': attribute type 7 has an invalid length. [ 642.261263][T16975] netlink: 'syz.3.3331': attribute type 6 has an invalid length. [ 642.714921][ T5338] device 0 left promiscuous mode [ 642.756668][ T4731] tipc: Subscription rejected, illegal request [ 642.808663][T16937] chnl_net:caif_netlink_parms(): no params data found [ 642.887283][T16986] netlink: 'syz.2.3327': attribute type 10 has an invalid length. [ 642.912828][T16986] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.3327'. [ 643.027817][T15411] Bluetooth: hci2: command 0x0409 tx timeout [ 643.038085][ T5338] device 1 left promiscuous mode [ 643.238476][ T5338] tipc: Left network mode [ 643.316157][T16937] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.377513][T16937] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.447362][T16937] device bridge_slave_0 entered promiscuous mode [ 644.012385][T16937] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.037480][T16937] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.046502][T16937] device bridge_slave_1 entered promiscuous mode [ 644.725200][T16937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 644.809460][T17032] netlink: 'syz.4.3343': attribute type 9 has an invalid length. [ 644.848790][T17032] netlink: 399 bytes leftover after parsing attributes in process `syz.4.3343'. [ 644.891178][T16937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 645.107501][T15411] Bluetooth: hci2: command 0x041b tx timeout [ 645.114436][T17037] netlink: 'syz.3.3344': attribute type 17 has an invalid length. [ 645.146660][T17037] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3344'. [ 645.227904][T17037] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 645.532442][T16937] team0: Port device team_slave_0 added [ 645.753278][T16937] team0: Port device team_slave_1 added [ 646.610034][T16937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 646.657168][T16937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 646.750613][T16937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 646.821697][T17063] syzkaller1: tun_chr_ioctl cmd 35108 [ 646.857336][T17064] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.3350'. [ 646.891407][T17072] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 646.898393][T17072] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 647.101138][T16937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 647.134903][T16937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.187512][T15411] Bluetooth: hci2: command 0x040f tx timeout [ 647.219638][T16937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 647.722041][T16937] device hsr_slave_0 entered promiscuous mode [ 647.808903][T16937] device hsr_slave_1 entered promiscuous mode [ 647.821920][T16937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 647.887270][T16937] Cannot create hsr debugfs directory [ 648.004873][T17088] sock: sock_set_timeout: `syz.3.3355' (pid 17088) tries to set negative timeout [ 648.325302][T17097] netlink: 'syz.4.3357': attribute type 29 has an invalid length. [ 648.680935][T17097] netlink: 'syz.4.3357': attribute type 29 has an invalid length. [ 648.745159][T17099] netlink: 'syz.4.3357': attribute type 29 has an invalid length. [ 649.020437][T17106] netlink: 'syz.0.3358': attribute type 21 has an invalid length. [ 649.047531][T17106] netlink: 'syz.0.3358': attribute type 6 has an invalid length. [ 649.077437][T17106] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3358'. [ 649.267416][T15411] Bluetooth: hci2: command 0x0419 tx timeout [ 649.519614][T17118] netlink: 'syz.2.3360': attribute type 16 has an invalid length. [ 649.609840][T17118] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3360'. [ 649.735702][ T5338] device bridge_slave_1 left promiscuous mode [ 649.763050][ T5338] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.824558][ T5338] device bridge_slave_0 left promiscuous mode [ 649.847505][ T5338] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.071435][ T5338] device veth1_macvtap left promiscuous mode [ 650.079880][ T5338] device veth0_macvtap left promiscuous mode [ 650.107471][ T5338] device veth1_vlan left promiscuous mode [ 650.115777][ T5338] device veth0_vlan left promiscuous mode [ 650.230422][T17111] delete_channel: no stack [ 651.395870][ T5338] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 652.202646][ T5338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 652.254296][ T5338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 652.461651][ T5338] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 652.471297][ T5338] bond0 (unregistering): Released all slaves [ 652.591302][T17133] netlink: 'syz.4.3363': attribute type 10 has an invalid length. [ 652.652734][T17133] team0: Port device geneve1 added [ 653.035937][T17159] netlink: 'syz.0.3366': attribute type 9 has an invalid length. [ 653.095993][T17151] can: request_module (can-proto-0) failed. [ 653.127442][T17159] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.3366'. [ 653.276389][T17151] netlink: 'syz.0.3366': attribute type 3 has an invalid length. [ 653.292464][T17151] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3366'. [ 653.823856][T17195] device syzkaller0 entered promiscuous mode [ 654.043663][T17200] netlink: 763 bytes leftover after parsing attributes in process `syz.2.3378'. [ 654.292295][T17209] netlink: 'syz.3.3379': attribute type 21 has an invalid length. [ 654.304416][T17209] netlink: 'syz.3.3379': attribute type 6 has an invalid length. [ 654.313496][T17209] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3379'. [ 654.343916][T17210] netlink: 'syz.2.3380': attribute type 10 has an invalid length. [ 654.356351][T17210] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3380'. [ 654.369700][T17210] bridge0: port 3(veth0_vlan) entered blocking state [ 654.376617][T17210] bridge0: port 3(veth0_vlan) entered disabled state [ 654.392952][T17210] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 654.451270][T16937] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 654.463414][T16937] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 654.474596][T16937] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 654.485410][T16937] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 654.723751][T17215] netlink: 'syz.2.3381': attribute type 10 has an invalid length. [ 654.742450][T17215] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3381'. [ 654.763534][T17215] device dummy0 entered promiscuous mode [ 654.783835][T17215] bridge0: port 3(dummy0) entered blocking state [ 654.808518][T17215] bridge0: port 3(dummy0) entered disabled state [ 654.838594][T17215] bridge0: port 3(dummy0) entered blocking state [ 654.845372][T17215] bridge0: port 3(dummy0) entered forwarding state [ 654.916155][T16937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.997197][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 655.006004][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 655.050229][T16937] 8021q: adding VLAN 0 to HW filter on device team0 [ 655.087722][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 655.106001][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 655.160777][ T5338] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.167991][ T5338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.196766][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 655.224432][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 655.252295][ T5338] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.259519][ T5338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.338191][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 655.365211][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 655.385685][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 655.417674][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 655.477444][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 655.528240][T17238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3386'. [ 655.569759][T17238] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3386'. [ 655.617554][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 655.629597][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 655.675883][T17239] netlink: 'syz.0.3388': attribute type 3 has an invalid length. [ 655.682968][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 655.734463][T17239] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.3388'. [ 655.739947][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 655.790832][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 655.867456][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 655.912794][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 655.956794][T16937] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 656.895415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 656.929268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 656.943118][T16937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 657.046110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 657.073296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 657.163540][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 657.183556][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 657.219001][T16937] device veth0_vlan entered promiscuous mode [ 657.235672][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 657.251821][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 657.278668][T16937] device veth1_vlan entered promiscuous mode [ 657.341950][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 657.368581][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 657.396286][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 657.436067][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 657.486925][T16937] device veth0_macvtap entered promiscuous mode [ 657.516696][T16937] device veth1_macvtap entered promiscuous mode [ 657.608472][T16937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.634165][T16937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.654618][T16937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.678442][T16937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.695004][T16937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.711790][T16937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.736859][T16937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.776025][T16937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.812145][T17297] netlink: 'syz.4.3401': attribute type 29 has an invalid length. [ 657.828585][T16937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.856349][T17292] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.3399'. [ 658.007351][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 658.031880][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 658.065606][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 658.105887][T12714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 658.131487][T17297] netlink: 'syz.4.3401': attribute type 29 has an invalid length. [ 658.209900][T16937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.226629][T16937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.253733][T16937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.277192][T16937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.288352][T16937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.299188][T16937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.311411][T16937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.322310][T16937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.336911][T16937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 658.351662][T17318] netlink: 'syz.4.3401': attribute type 25 has an invalid length. [ 658.368320][T17318] netlink: 'syz.4.3401': attribute type 29 has an invalid length. [ 658.376667][T17306] netlink: 'syz.4.3401': attribute type 29 has an invalid length. [ 658.432147][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 658.448056][ T5338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 658.469799][T16937] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.484137][T16937] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.516916][T16937] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.530302][T16937] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.595214][T17335] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3406'. [ 658.858276][T17328] device sit0 left promiscuous mode [ 659.008780][T17334] device sit0 entered promiscuous mode [ 659.390512][T12714] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.408752][T12714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.535869][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 659.582671][T17359] validate_nla: 2 callbacks suppressed [ 659.582689][T17359] netlink: 'syz.3.3409': attribute type 10 has an invalid length. [ 659.613499][T17359] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3409'. [ 659.859274][T17357] netlink: 'syz.3.3409': attribute type 10 has an invalid length. [ 659.870726][T17357] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3409'. [ 659.881036][T17360] netlink: 'syz.2.3408': attribute type 10 has an invalid length. [ 659.891660][T17360] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3408'. [ 659.909302][T17360] batman_adv: batadv0: Adding interface: virt_wifi0 [ 659.917582][T17360] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.948120][T17360] batman_adv: batadv0: Interface activated: virt_wifi0 [ 660.280368][ T5338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.296627][ T5338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.373945][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 660.740041][T17375] bridge0: port 3(dummy0) entered disabled state [ 660.746701][T17375] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.754314][T17375] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.877662][T17377] bridge0: port 3(dummy0) entered disabled state [ 661.007576][T17377] device bridge_slave_1 left promiscuous mode [ 661.014002][T17377] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.252593][T17377] device bridge_slave_0 left promiscuous mode [ 661.265193][T17377] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.601717][T17375] netlink: 'syz.2.3412': attribute type 17 has an invalid length. [ 661.623599][T17375] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3412'. [ 661.674756][T17398] netlink: 'syz.1.3416': attribute type 2 has an invalid length. [ 661.707886][T17398] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3416'. [ 662.249751][T17411] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3419'. [ 662.269907][T17418] netlink: 'syz.0.3421': attribute type 13 has an invalid length. [ 662.286290][T17418] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3421'. [ 662.671105][T17430] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3425'. [ 662.716335][T17437] netlink: 'syz.3.3428': attribute type 21 has an invalid length. [ 662.735946][T17430] netlink: 'syz.1.3425': attribute type 1 has an invalid length. [ 662.753826][T17437] IPv6: NLM_F_CREATE should be specified when creating new route [ 662.761461][T17430] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3425'. [ 662.782744][T17437] IPv6: Can't replace route, no match found [ 663.640507][T17477] netlink: 174904 bytes leftover after parsing attributes in process `syz.4.3435'. [ 664.138811][T17496] netlink: 'syz.0.3439': attribute type 29 has an invalid length. [ 664.154557][T17496] netlink: 'syz.0.3439': attribute type 29 has an invalid length. [ 665.613150][T17512] netlink: 'syz.2.3444': attribute type 11 has an invalid length. [ 665.658781][T17512] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3444'. [ 665.712257][ T4279] Bluetooth: hci1: Dropping invalid advertising data [ 665.719705][ T4279] Bluetooth: hci1: unknown advertising packet type: 0xdc [ 665.719737][ T4279] Bluetooth: hci1: Malformed LE Event: 0x02 [ 665.744565][ T4279] Bluetooth: hci1: Dropping invalid advertising data [ 665.751532][ T4279] Bluetooth: hci1: unknown advertising packet type: 0xdc [ 665.751557][ T4279] Bluetooth: hci1: Malformed LE Event: 0x02 [ 665.832080][T17522] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.3446'. [ 666.314926][T17533] validate_nla: 1 callbacks suppressed [ 666.314964][T17533] netlink: 'syz.1.3450': attribute type 1 has an invalid length. [ 666.347266][T17533] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3450'. [ 666.695882][T17535] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.3449'. [ 666.698240][T17507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 666.917975][T17539] IPv6: Can't replace route, no match found [ 668.624682][T17583] device syzkaller0 entered promiscuous mode [ 672.359833][T17617] netlink: 'syz.2.3473': attribute type 6 has an invalid length. [ 672.367751][T17617] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3473'. [ 672.388612][T17638] netlink: 'syz.1.3478': attribute type 21 has an invalid length. [ 672.407277][T17638] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3478'. [ 672.657981][T17651] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.3482'. [ 673.895036][T17685] netlink: 'syz.4.3487': attribute type 2 has an invalid length. [ 674.046527][T17685] netlink: 'syz.4.3487': attribute type 8 has an invalid length. [ 674.124088][T17685] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3487'. [ 676.082071][T17688] netlink: 'syz.0.3490': attribute type 21 has an invalid length. [ 676.111489][T17688] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3490'. [ 676.140412][T17685] netlink: 'syz.4.3487': attribute type 10 has an invalid length. [ 676.164616][T17685] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.183171][T17685] device bridge_slave_1 left promiscuous mode [ 676.247256][T17685] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.773865][T17708] device syzkaller0 entered promiscuous mode [ 677.180245][T17728] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.3501'. [ 678.937652][T17727] netlink: 'syz.3.3499': attribute type 10 has an invalid length. [ 678.954727][T17727] device hsr0 entered promiscuous mode [ 678.975502][T17727] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 679.009006][T17727] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 679.025034][T17727] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 679.064696][T17727] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 681.387465][T17745] netlink: 'syz.0.3507': attribute type 21 has an invalid length. [ 681.465301][T17759] tap0: tun_chr_ioctl cmd 2147767521 [ 681.555207][T17764] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3511'. [ 681.840623][T17771] -1: renamed from syzkaller0 [ 681.862349][T17766] : port 1(team0) entered blocking state [ 681.892730][T17766] : port 1(team0) entered disabled state [ 681.921043][T17783] netlink: 'syz.0.3514': attribute type 3 has an invalid length. [ 681.974360][T17766] device team0 entered promiscuous mode [ 681.986483][T17783] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3514'. [ 681.989884][T17766] device team_slave_0 entered promiscuous mode [ 682.051910][T17766] device team_slave_1 entered promiscuous mode [ 682.059076][T17766] device geneve1 entered promiscuous mode [ 682.092508][T17776] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3515'. [ 682.117185][T17782] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3515'. [ 682.147919][T17782] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 683.238056][T17809] netlink: 'syz.0.3526': attribute type 3 has an invalid length. [ 683.309557][T17809] netlink: 'syz.0.3526': attribute type 1 has an invalid length. [ 683.363506][T17809] netlink: 198452 bytes leftover after parsing attributes in process `syz.0.3526'. [ 683.871683][T17823] netlink: 'syz.0.3530': attribute type 3 has an invalid length. [ 683.918788][T17823] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3530'. [ 684.322612][T17838] netlink: 'syz.0.3535': attribute type 29 has an invalid length. [ 684.370172][T17838] netlink: 'syz.0.3535': attribute type 29 has an invalid length. [ 684.435644][T17837] netlink: 'syz.0.3535': attribute type 29 has an invalid length. [ 684.758767][T17849] netlink: 'syz.1.3537': attribute type 10 has an invalid length. [ 684.910530][T17854] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.3539'. [ 685.062325][T17856] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.3540'. [ 685.073208][T17857] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.3540'. [ 685.830459][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.836867][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.401613][T17894] netlink: 'syz.0.3549': attribute type 10 has an invalid length. [ 686.417259][T17894] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3549'. [ 686.426461][T17894] device team0 entered promiscuous mode [ 686.467181][T17894] device team_slave_0 entered promiscuous mode [ 686.507774][T17894] device team_slave_1 entered promiscuous mode [ 686.543916][T17894] bridge0: port 3(team0) entered blocking state [ 686.550699][T17894] bridge0: port 3(team0) entered disabled state [ 686.586303][T17894] bridge0: port 3(team0) entered blocking state [ 686.592934][T17894] bridge0: port 3(team0) entered forwarding state [ 687.856347][T17932] bridge0: port 2(veth0_to_bond) entered blocking state [ 687.865489][T17934] __nla_validate_parse: 1 callbacks suppressed [ 687.865505][T17934] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3559'. [ 687.891562][T17932] bridge0: port 2(veth0_to_bond) entered disabled state [ 687.901399][T17932] device veth0_to_bond entered promiscuous mode [ 687.916933][T17932] bridge0: port 2(veth0_to_bond) entered blocking state [ 687.924094][T17932] bridge0: port 2(veth0_to_bond) entered forwarding state [ 688.562542][T17948] netlink: 'syz.1.3561': attribute type 2 has an invalid length. [ 688.600252][T17948] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.3561'. [ 688.790804][T17955] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3564'. [ 688.932957][T17959] bridge0: port 3(batadv0) entered blocking state [ 688.961273][T17959] bridge0: port 3(batadv0) entered disabled state [ 688.999619][T17959] device batadv0 entered promiscuous mode [ 689.017204][T17959] bridge0: port 3(batadv0) entered blocking state [ 689.023782][T17959] bridge0: port 3(batadv0) entered forwarding state [ 689.309022][T17966] netlink: 'syz.3.3568': attribute type 10 has an invalid length. [ 689.330093][T17966] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.337742][T17966] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.420306][T17966] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.427552][T17966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.435074][T17966] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.442295][T17966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.470289][ T9] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 689.479967][ T9] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 689.599285][T17966] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 689.617562][T17970] netlink: 'syz.2.3569': attribute type 21 has an invalid length. [ 689.652933][T17970] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3569'. [ 690.275076][T17993] netlink: 'syz.2.3575': attribute type 10 has an invalid length. [ 690.383362][T17993] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 690.492863][T17997] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.3576'. [ 691.013303][T18009] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.3578'. [ 691.085972][T18012] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3582'. [ 691.277235][T18022] netlink: 'syz.3.3584': attribute type 10 has an invalid length. [ 691.438020][T18022] team0: Device hsr_slave_0 failed to register rx_handler [ 691.653849][T18027] netlink: 'syz.3.3584': attribute type 3 has an invalid length. [ 691.664692][T18027] netlink: 'syz.3.3584': attribute type 1 has an invalid length. [ 691.679033][T18027] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.3584'. [ 692.112075][T18074] netlink: 'syz.0.3593': attribute type 1 has an invalid length. [ 692.228853][T18074] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3593'. [ 692.874570][T18104] netlink: 'syz.0.3601': attribute type 29 has an invalid length. [ 692.887509][T18104] netlink: 'syz.0.3601': attribute type 29 has an invalid length. [ 692.900880][T18104] netlink: 'syz.0.3601': attribute type 29 has an invalid length. [ 693.004241][T18112] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3600'. [ 693.021424][T18112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3600'. [ 693.030888][ T4279] Bluetooth: hci5: command 0x0406 tx timeout [ 693.122739][T18114] netlink: 'syz.0.3603': attribute type 3 has an invalid length. [ 693.162579][T18114] netlink: 85736 bytes leftover after parsing attributes in process `syz.0.3603'. [ 693.460757][T18124] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3606'. [ 693.873544][T18141] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3610'. [ 693.906112][T18141] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 693.963044][T18141] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 694.232283][T18160] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3615'. [ 695.380337][T18205] validate_nla: 3 callbacks suppressed [ 695.380372][T18205] netlink: 'syz.3.3628': attribute type 10 has an invalid length. [ 696.026272][T18205] team0: Device vxcan1 is of different type [ 696.123388][T18215] netlink: 'syz.1.3631': attribute type 1 has an invalid length. [ 696.147223][T18215] netlink: 'syz.1.3631': attribute type 1 has an invalid length. [ 696.166490][T18215] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.3631'. [ 699.044063][T18216] netlink: 'syz.4.3630': attribute type 2 has an invalid length. [ 699.055042][T18216] netlink: 'syz.4.3630': attribute type 4 has an invalid length. [ 699.074204][T18216] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3630'. [ 699.112580][T18222] netlink: 'syz.2.3632': attribute type 5 has an invalid length. [ 699.288669][T18228] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3633'. [ 699.326761][T18229] netlink: 'syz.1.3634': attribute type 10 has an invalid length. [ 699.357668][T18229] device netdevsim0 entered promiscuous mode [ 699.372412][T18230] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3633'. [ 699.445244][T18232] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3633'. [ 699.799439][T18244] IPv6: NLM_F_CREATE should be specified when creating new route [ 699.827174][T18244] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 699.834532][T18244] IPv6: NLM_F_CREATE should be set when creating new route [ 699.841983][T18244] IPv6: NLM_F_CREATE should be set when creating new route [ 699.849284][T18244] IPv6: NLM_F_CREATE should be set when creating new route [ 703.582497][T18306] : port 1(ip6gretap0) entered blocking state [ 703.623417][T18306] : port 1(ip6gretap0) entered disabled state [ 703.659185][T18306] device ip6gretap0 entered promiscuous mode [ 703.703967][T18320] device ip6gretap0 left promiscuous mode [ 703.767956][T18320] : port 1(ip6gretap0) entered disabled state [ 703.973738][T18333] netlink: 'syz.2.3660': attribute type 21 has an invalid length. [ 704.507616][T18355] netlink: 'syz.0.3667': attribute type 10 has an invalid length. [ 704.515503][T18355] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3667'. [ 704.611765][T18358] netlink: 'syz.3.3668': attribute type 21 has an invalid length. [ 704.621055][T18358] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3668'. [ 704.768477][T18371] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3671'. [ 704.799445][T18371] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 704.814205][T18371] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 705.008505][T18378] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.3672'. [ 706.044269][T18395] netlink: 'syz.2.3679': attribute type 10 has an invalid length. [ 706.077363][T18395] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3679'. [ 706.122356][T18395] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 706.410248][T18408] netlink: 'syz.3.3683': attribute type 10 has an invalid length. [ 706.476178][T18408] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3683'. [ 706.865954][T18416] device syzkaller0 entered promiscuous mode [ 706.907456][T18418] sctp: [Deprecated]: syz.3.3685 (pid 18418) Use of struct sctp_assoc_value in delayed_ack socket option. [ 706.907456][T18418] Use struct sctp_sack_info instead [ 707.198213][T18425] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3687'. [ 708.039667][T18434] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3690'. [ 708.070911][T18434] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3690'. [ 708.101994][T18437] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3690'. [ 708.280500][T18435] IPv6: pim6reg1: Disabled Multicast RS [ 708.387363][ T4279] Bluetooth: hci0: command 0x0406 tx timeout [ 710.720085][T18473] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3700'. [ 710.771898][T18473] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 710.800898][T18473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 710.828664][T18477] netlink: 'syz.4.3700': attribute type 3 has an invalid length. [ 710.869895][T18477] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3700'. [ 711.001602][T18479] device syzkaller0 entered promiscuous mode [ 711.078700][T18483] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3703'. [ 711.118374][T18483] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3703'. [ 713.347764][T18485] netlink: 'syz.2.3704': attribute type 10 has an invalid length. [ 713.357848][T18485] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3704'. [ 713.383083][T18485] batman_adv: batadv0: Interface deactivated: vlan1 [ 713.543901][T18485] batman_adv: batadv0: Removing interface: vlan1 [ 713.731071][T18501] netlink: 763 bytes leftover after parsing attributes in process `syz.1.3707'. [ 714.127405][T18513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3709'. [ 714.143450][T18513] tc_dump_action: action bad kind [ 714.822874][T18531] mac80211_hwsim hwsim48 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 714.920670][T18533] netlink: 'syz.0.3717': attribute type 3 has an invalid length. [ 714.943407][T18533] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3717'. [ 715.250963][T18547] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.3722'. [ 715.312845][T18554] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3722'. [ 716.378578][T18575] netlink: 16054 bytes leftover after parsing attributes in process `syz.0.3729'. [ 717.544488][T18607] netlink: 'syz.2.3737': attribute type 5 has an invalid length. [ 717.661511][T18607] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3737'. [ 717.870040][T18622] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3741'. [ 717.920492][T18625] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3741'. [ 718.104879][T18628] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3744'. [ 718.231604][T18637] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3745'. [ 718.409128][T18641] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3748'. [ 718.440188][T18641] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.3748'. [ 718.564960][T18645] netlink: 'syz.3.3749': attribute type 39 has an invalid length. [ 718.744483][T18645] device hsr_slave_1 left promiscuous mode [ 718.872741][T18651] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.3752'. [ 718.982222][T18655] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3753'. [ 718.991706][T18655] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 719.006722][T18655] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 719.043639][T18655] netlink: 'syz.0.3753': attribute type 3 has an invalid length. [ 719.302011][T18663] device syzkaller0 entered promiscuous mode [ 719.615341][T18670] netlink: 'syz.1.3757': attribute type 22 has an invalid length. [ 719.658769][T18676] netlink: 'syz.3.3760': attribute type 2 has an invalid length. [ 722.617449][T18719] device wlan1 entered promiscuous mode [ 722.907381][T18729] __nla_validate_parse: 4 callbacks suppressed [ 722.907400][T18729] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3770'. [ 722.978790][T18735] netlink: 'syz.1.3770': attribute type 3 has an invalid length. [ 722.986605][T18735] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3770'. [ 723.094955][T18729] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 723.196020][T18744] netlink: 'syz.0.3774': attribute type 153 has an invalid length. [ 723.231724][T18729] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 723.258976][T18744] netlink: 69544 bytes leftover after parsing attributes in process `syz.0.3774'. [ 723.314103][T18737] netlink: 'syz.3.3773': attribute type 10 has an invalid length. [ 723.584578][T18737] team0 (unregistering): Port device team_slave_0 removed [ 723.661230][T18737] team0 (unregistering): Port device team_slave_1 removed [ 723.757579][T15411] Bluetooth: hci3: command 0x0406 tx timeout [ 724.187054][T18771] netlink: 'syz.2.3782': attribute type 1 has an invalid length. [ 724.205233][T18771] netlink: 'syz.2.3782': attribute type 4 has an invalid length. [ 724.262784][T18771] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3782'. [ 727.143207][T18800] device wlan1 entered promiscuous mode [ 727.252544][T18805] netlink: 'syz.4.3791': attribute type 2 has an invalid length. [ 727.340877][T18808] netlink: 'syz.4.3791': attribute type 2 has an invalid length. [ 727.442942][T12723] tipc: Subscription rejected, illegal request [ 727.448881][T18814] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3793'. [ 727.728704][T18835] netlink: 134268 bytes leftover after parsing attributes in process `syz.2.3797'. [ 728.019689][T18845] device syzkaller0 entered promiscuous mode [ 732.527608][T18930] device syzkaller0 entered promiscuous mode [ 733.987243][ T4279] Bluetooth: hci1: command 0x0406 tx timeout [ 736.619152][T18993] netlink: 'syz.2.3835': attribute type 11 has an invalid length. [ 736.632509][T18993] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3835'. [ 736.669670][T18993] netlink: 'syz.2.3835': attribute type 10 has an invalid length. [ 736.721584][T18993] device wlan1 left promiscuous mode [ 736.773576][T18993] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 736.811658][T18992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 736.913970][T19008] netlink: 'syz.0.3838': attribute type 3 has an invalid length. [ 736.937830][T19008] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3838'. [ 737.135118][T19013] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.3839'. [ 737.278199][T19013] netlink: 'syz.4.3839': attribute type 10 has an invalid length. [ 737.398736][T19013] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 737.484986][T19014] can: request_module (can-proto-0) failed. [ 737.603878][T19022] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.3842'. [ 737.928499][T19040] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.3846'. [ 738.593305][T19068] IPv6: NLM_F_CREATE should be specified when creating new route [ 738.641840][T19061] delete_channel: no stack [ 738.800815][T19072] netlink: 'syz.4.3857': attribute type 10 has an invalid length. [ 738.815527][T19072] bridge0: port 2(veth0_to_bond) entered disabled state [ 738.823383][T19072] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.848121][T19072] bridge0: port 2(veth0_to_bond) entered blocking state [ 738.855909][T19072] bridge0: port 2(veth0_to_bond) entered forwarding state [ 738.865134][T19072] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.873723][T19072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 739.092578][T19072] device bridge0 entered promiscuous mode [ 739.109780][T19072] team0: Port device bridge0 added [ 739.355080][T19110] netlink: 'syz.0.3864': attribute type 29 has an invalid length. [ 739.456788][T19110] netlink: 'syz.0.3864': attribute type 29 has an invalid length. [ 739.478827][T19118] netlink: 'syz.0.3864': attribute type 29 has an invalid length. [ 739.514474][T19121] netlink: 'syz.0.3864': attribute type 29 has an invalid length. [ 739.623338][T19124] IPv6: NLM_F_CREATE should be specified when creating new route [ 739.660609][T19124] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3870'. [ 740.911342][T19178] can: request_module (can-proto-0) failed. [ 741.404791][T19195] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3889'. [ 741.578977][T19198] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 741.586564][T19198] IPv6: NLM_F_CREATE should be set when creating new route [ 741.594246][T19198] IPv6: NLM_F_CREATE should be set when creating new route [ 741.601999][T19198] IPv6: NLM_F_CREATE should be set when creating new route [ 741.669747][T19206] netlink: 'syz.1.3894': attribute type 11 has an invalid length. [ 741.715083][T19206] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3894'. [ 742.633716][T19239] bond0: (slave bridge0): Error: Slave device does not support XDP [ 742.713105][T19239] netlink: 'syz.3.3903': attribute type 10 has an invalid length. [ 742.761179][T19239] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.801294][T19239] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.941411][T19239] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 743.823846][T19264] netlink: 'syz.1.3906': attribute type 10 has an invalid length. [ 743.905539][T19264] device hsr0 entered promiscuous mode [ 743.973526][T19264] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 743.990161][T19264] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 744.021455][T19264] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 744.077206][T19264] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 744.610594][T19279] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3911'. [ 744.652248][T19279] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3911'. [ 745.094063][T19298] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.3915'. [ 745.227283][T19305] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3916'. [ 745.376808][T19305] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3916'. [ 745.455938][T19307] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3916'. [ 745.506217][T19309] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3916'. [ 746.298934][T19323] IPv6: NLM_F_CREATE should be specified when creating new route [ 746.307201][T19323] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3922'. [ 746.492038][T19324] netlink: 'syz.2.3922': attribute type 21 has an invalid length. [ 746.598759][T19324] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3922'. [ 746.617266][T19324] netlink: 'syz.2.3922': attribute type 4 has an invalid length. [ 746.963952][T19330] wlan1: mtu greater than device maximum [ 747.052849][T19330] netlink: 'syz.3.3923': attribute type 49 has an invalid length. [ 747.275443][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.281984][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.637872][T19349] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3939'. [ 747.706094][T19349] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3939'. [ 748.377256][T19370] netlink: 'syz.2.3934': attribute type 21 has an invalid length. [ 749.226623][T19399] netlink: 'syz.0.3943': attribute type 29 has an invalid length. [ 749.290420][T19399] netlink: 'syz.0.3943': attribute type 29 has an invalid length. [ 749.308427][T19401] netlink: 'syz.0.3943': attribute type 29 has an invalid length. [ 749.339474][T19399] netlink: 'syz.0.3943': attribute type 29 has an invalid length. [ 749.410551][T19401] netlink: 'syz.0.3943': attribute type 29 has an invalid length. [ 750.357901][T19420] netlink: 'syz.4.3949': attribute type 1 has an invalid length. [ 750.365692][T19420] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.3949'. [ 750.650791][T19431] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3954'. [ 750.706700][T19433] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3952'. [ 751.310667][T19458] netlink: 'syz.4.3961': attribute type 29 has an invalid length. [ 754.379761][T19458] netlink: 'syz.4.3961': attribute type 29 has an invalid length. [ 754.605142][T19487] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3968'. [ 754.713312][T19492] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.3970'. [ 754.752201][T19493] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.3970'. [ 755.750503][T19531] netlink: 'syz.3.3979': attribute type 1 has an invalid length. [ 755.782679][T19531] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3979'. [ 756.266937][ T4322] tipc: Subscription rejected, illegal request [ 756.356878][T19549] netlink: 'syz.4.3982': attribute type 2 has an invalid length. [ 756.405728][T19549] netlink: 'syz.4.3982': attribute type 8 has an invalid length. [ 756.450250][T19549] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3982'. [ 756.736142][T19552] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3983'. [ 756.976232][T19561] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3986'. [ 759.017465][T19605] device syzkaller0 entered promiscuous mode [ 759.747923][T19627] netlink: 'syz.3.4007': attribute type 13 has an invalid length. [ 759.807238][T19627] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4007'. [ 759.878014][T19627] erspan0: refused to change device tx_queue_len [ 759.895481][T19627] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 764.717174][T15411] Bluetooth: hci2: command 0x0406 tx timeout [ 765.648600][T19653] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 765.680834][T19653] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 765.688846][T19628] delete_channel: no stack [ 765.703131][T19665] netlink: 184 bytes leftover after parsing attributes in process `syz.3.4015'. [ 766.222188][T19688] netlink: 'syz.0.4021': attribute type 3 has an invalid length. [ 766.261824][T19688] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4021'. [ 766.657874][T19701] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4026'. [ 766.743072][T19695] netlink: 'syz.1.4023': attribute type 19 has an invalid length. [ 770.214700][T19736] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.4034'. [ 771.365058][T19770] netlink: 'syz.0.4044': attribute type 10 has an invalid length. [ 771.531296][T19770] device veth0_vlan left promiscuous mode [ 771.683896][T19770] device veth0_vlan entered promiscuous mode [ 771.743232][T19770] team0: Device veth0_vlan failed to register rx_handler [ 772.064079][T19799] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4050'. [ 772.327982][T19802] netlink: 'syz.0.4051': attribute type 39 has an invalid length. [ 773.093881][T19805] netlink: 'syz.1.4052': attribute type 30 has an invalid length. [ 773.312337][T19814] netlink: 'syz.4.4053': attribute type 39 has an invalid length. [ 776.953813][T19867] netlink: 'syz.2.4068': attribute type 39 has an invalid length. [ 777.971214][T19890] netlink: 'syz.0.4074': attribute type 21 has an invalid length. [ 778.009238][T19890] netlink: 'syz.0.4074': attribute type 1 has an invalid length. [ 778.284768][T19908] netlink: 'syz.0.4079': attribute type 21 has an invalid length. [ 778.299614][T19908] netlink: 'syz.0.4079': attribute type 1 has an invalid length. [ 778.403799][T19908] netlink: 'syz.0.4079': attribute type 2 has an invalid length. [ 778.461149][T19908] netlink: 'syz.0.4079': attribute type 8 has an invalid length. [ 778.472106][T19908] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4079'. [ 778.617925][T19921] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4081'. [ 779.044470][T19929] netlink: 'syz.0.4085': attribute type 29 has an invalid length. [ 779.077984][T19929] netlink: 'syz.0.4085': attribute type 29 has an invalid length. [ 779.136741][T19919] device syzkaller0 entered promiscuous mode [ 781.891716][T19955] netlink: 'syz.1.4087': attribute type 39 has an invalid length. [ 782.269321][T19958] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4089'. [ 782.493252][T19958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 782.542873][T19958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 782.584613][T19958] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 782.610372][T19958] bond0 (unregistering): Released all slaves [ 782.686587][T19981] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.4097'. [ 783.239780][T19990] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.4100'. [ 783.288884][T19996] netlink: 'syz.4.4102': attribute type 10 has an invalid length. [ 783.335317][T19996] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4102'. [ 783.395313][T19996] : port 1(team0) entered disabled state [ 783.919649][T19996] bridge0: port 3(team0) entered blocking state [ 783.967756][T19996] bridge0: port 3(team0) entered disabled state [ 783.993526][T19996] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 784.063707][T20006] netlink: 'syz.2.4104': attribute type 21 has an invalid length. [ 784.083779][T20006] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4104'. [ 784.286864][T20014] netlink: 'syz.2.4106': attribute type 10 has an invalid length. [ 784.546395][T20014] device syzkaller0 entered promiscuous mode [ 784.795448][T20038] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.4112'. [ 787.054193][T20030] device syzkaller0 entered promiscuous mode [ 787.065937][T20038] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 787.097321][T20038] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 787.106979][T20038] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 787.364848][T20052] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.4116'. [ 789.292942][T20044] netlink: 'syz.4.4115': attribute type 21 has an invalid length. [ 789.322238][T20065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 789.337639][T20065] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 789.370998][T20065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 789.387812][T20065] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 789.419277][T20065] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 789.426367][T20065] batman_adv: batadv0: Removing interface: virt_wifi0 [ 789.495178][T20072] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4121'. [ 789.733867][T20080] netlink: 'syz.3.4124': attribute type 10 has an invalid length. [ 790.071064][T20086] netlink: 'syz.0.4126': attribute type 13 has an invalid length. [ 790.120121][T20086] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4126'. [ 790.206604][T20089] netlink: 'syz.2.4127': attribute type 10 has an invalid length. [ 790.237178][T20089] netlink: 'syz.2.4127': attribute type 19 has an invalid length. [ 790.268029][T20089] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4127'. [ 790.291290][T20099] netlink: 'syz.3.4129': attribute type 2 has an invalid length. [ 790.485764][T20099] device 0 entered promiscuous mode [ 790.530870][T20105] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4132'. [ 791.121072][T20125] netlink: 'syz.4.4136': attribute type 21 has an invalid length. [ 791.237503][T20125] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4136'. [ 791.684663][T20140] netlink: 'syz.1.4141': attribute type 21 has an invalid length. [ 791.741439][T20140] netlink: 'syz.1.4141': attribute type 7 has an invalid length. [ 792.241578][T20160] netlink: 'syz.3.4145': attribute type 21 has an invalid length. [ 792.646910][T15411] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 793.586164][T20203] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.4159'. [ 793.954332][T20208] can: request_module (can-proto-0) failed. [ 794.082460][T20230] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4165'. [ 794.564823][T20242] device syzkaller0 entered promiscuous mode [ 794.589507][T20248] validate_nla: 4 callbacks suppressed [ 794.589524][T20248] netlink: 'syz.2.4172': attribute type 33 has an invalid length. [ 794.657337][T20248] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4172'. [ 794.776561][T20249] device syzkaller0 entered promiscuous mode [ 798.225041][T20303] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 800.019643][T20288] netlink: 'syz.2.4180': attribute type 7 has an invalid length. [ 800.028436][T20291] netlink: 192 bytes leftover after parsing attributes in process `syz.2.4180'. [ 800.047144][T20300] netlink: 'syz.3.4183': attribute type 21 has an invalid length. [ 800.055072][T20305] netlink: 'syz.1.4185': attribute type 6 has an invalid length. [ 800.095750][T20305] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4185'. [ 800.384779][T20319] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4188'. [ 800.980713][T20329] netlink: 'syz.0.4187': attribute type 29 has an invalid length. [ 801.155002][T20319] device hsr_slave_0 left promiscuous mode [ 801.180234][T20319] device hsr_slave_1 left promiscuous mode [ 801.308596][T20329] netlink: 'syz.0.4187': attribute type 29 has an invalid length. [ 801.338711][T20332] netlink: 'syz.0.4187': attribute type 29 has an invalid length. [ 801.869778][T20346] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4196'. [ 801.929357][T20354] netlink: 'syz.4.4199': attribute type 21 has an invalid length. [ 801.937434][T20354] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4199'. [ 801.946911][T20354] netlink: 'syz.4.4199': attribute type 5 has an invalid length. [ 801.955349][T20354] netlink: 'syz.4.4199': attribute type 6 has an invalid length. [ 801.977288][T20354] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4199'. [ 802.165680][T20362] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.4201'. [ 802.193736][T20369] netlink: 'syz.0.4203': attribute type 3 has an invalid length. [ 802.204485][T20369] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4203'. [ 802.556853][T20373] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4204'. [ 802.833071][T20384] netlink: 143932 bytes leftover after parsing attributes in process `syz.4.4208'. [ 802.855706][T20384] netlink: zone id is out of range [ 802.887334][T20384] netlink: zone id is out of range [ 802.897602][T20384] netlink: zone id is out of range [ 802.917528][T20384] netlink: zone id is out of range [ 802.932764][T20384] netlink: zone id is out of range [ 802.961274][T20384] netlink: zone id is out of range [ 802.966874][T20384] netlink: zone id is out of range [ 803.007264][T20384] netlink: zone id is out of range [ 803.022980][T20384] netlink: zone id is out of range [ 803.106727][T20395] device hsr0 entered promiscuous mode [ 803.185933][T20395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 803.300559][T20401] tap0: tun_chr_ioctl cmd 1074025681 [ 803.732884][T20409] bridge0: port 3(batadv0) entered blocking state [ 803.772975][T20409] bridge0: port 3(batadv0) entered disabled state [ 803.788581][T20409] device batadv0 entered promiscuous mode [ 803.794919][T20409] bridge0: port 3(batadv0) entered blocking state [ 803.801544][T20409] bridge0: port 3(batadv0) entered forwarding state [ 803.837975][T20410] mac80211_hwsim hwsim41 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 804.042977][T20424] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 804.244953][T20437] net_ratelimit: 3655 callbacks suppressed [ 804.244973][T20437] netlink: zone id is out of range [ 804.256733][T20437] netlink: zone id is out of range [ 804.262691][T20437] netlink: zone id is out of range [ 804.268356][T20437] netlink: zone id is out of range [ 804.278868][ T5334] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 804.281442][T20437] netlink: del zone limit has 4 unknown bytes [ 804.288153][ T5334] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 805.176080][T20459] __nla_validate_parse: 6 callbacks suppressed [ 805.176102][T20459] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4229'. [ 805.745099][T20471] netlink: 212940 bytes leftover after parsing attributes in process `syz.4.4233'. [ 806.722819][T20487] validate_nla: 5 callbacks suppressed [ 806.722839][T20487] netlink: 'syz.1.4238': attribute type 2 has an invalid length. [ 806.779901][T20488] netlink: 'syz.1.4238': attribute type 2 has an invalid length. [ 806.867523][T20487] netlink: 'syz.1.4238': attribute type 1 has an invalid length. [ 806.870529][T20488] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4238'. [ 807.360430][T20495] netlink: 'syz.2.4242': attribute type 29 has an invalid length. [ 807.368072][T20492] device syzkaller0 entered promiscuous mode [ 807.375685][T20497] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4241'. [ 807.538607][T20497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 807.603707][T20497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 807.652855][T20497] bond0 (unregistering): Released all slaves [ 807.701129][T20495] netlink: 'syz.2.4242': attribute type 29 has an invalid length. [ 808.510227][T15411] Bluetooth: hci1: unexpected event 0x16 length: 15 > 6 [ 808.720543][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.733960][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.166134][T20501] netlink: 'syz.2.4242': attribute type 29 has an invalid length. [ 810.177236][T20511] netlink: 'syz.1.4245': attribute type 21 has an invalid length. [ 810.197530][T20511] IPv6: NLM_F_CREATE should be specified when creating new route [ 810.594971][T20541] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4251'. [ 810.615156][T20541] netlink: 'syz.4.4251': attribute type 12 has an invalid length. [ 810.623875][T20541] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4251'. [ 810.643729][T20545] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4254'. [ 810.802031][T20550] netlink: 'syz.1.4257': attribute type 29 has an invalid length. [ 810.869213][T20550] netlink: 'syz.1.4257': attribute type 29 has an invalid length. [ 811.882751][T20582] validate_nla: 6 callbacks suppressed [ 811.882768][T20582] netlink: 'syz.2.4265': attribute type 21 has an invalid length. [ 811.984996][T20584] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.4264'. [ 812.696287][T20612] netlink: 'syz.2.4273': attribute type 9 has an invalid length. [ 812.724914][T20612] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.4273'. [ 816.201647][T20647] netlink: 'syz.0.4284': attribute type 3 has an invalid length. [ 816.223041][T20647] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4284'. [ 817.157997][T20684] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4294'. [ 817.209965][T20688] netlink: 'syz.0.4294': attribute type 6 has an invalid length. [ 817.284898][T20695] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4295'. [ 818.220337][T20713] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.4301'. [ 820.656105][T20749] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.4313'. [ 820.684268][T20755] netlink: 'syz.3.4312': attribute type 10 has an invalid length. [ 820.713278][T20755] netlink: 'syz.3.4312': attribute type 19 has an invalid length. [ 820.791312][T20755] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4312'. [ 821.043011][T20767] netlink: 'syz.4.4317': attribute type 29 has an invalid length. [ 821.108812][T20767] netlink: 'syz.4.4317': attribute type 29 has an invalid length. [ 821.412706][T20776] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4318'. [ 821.567157][T20782] netlink: 'syz.1.4321': attribute type 10 has an invalid length. [ 821.687235][T20782] team0: Device hsr_slave_0 failed to register rx_handler [ 821.836744][T20783] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 821.898245][T20783] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 821.988357][T20783] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 822.695455][T20821] netlink: 'syz.2.4331': attribute type 21 has an invalid length. [ 822.735625][T20821] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4331'. [ 822.829455][T20825] device pim6reg1 entered promiscuous mode [ 823.473090][T20866] netlink: 'syz.4.4342': attribute type 29 has an invalid length. [ 823.491899][T20866] netlink: 'syz.4.4342': attribute type 29 has an invalid length. [ 824.137968][T20892] netlink: 'syz.2.4351': attribute type 17 has an invalid length. [ 824.146626][T20892] netlink: 'syz.2.4351': attribute type 16 has an invalid length. [ 824.175486][T20892] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4351'. [ 824.227223][T20893] netlink: 'syz.2.4351': attribute type 17 has an invalid length. [ 824.265569][T20893] netlink: 'syz.2.4351': attribute type 16 has an invalid length. [ 824.317805][T20893] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4351'. [ 824.514285][T20910] netlink: 'syz.1.4355': attribute type 3 has an invalid length. [ 824.546926][T20910] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4355'. [ 824.583490][T20902] netlink: 'syz.0.4353': attribute type 3 has an invalid length. [ 824.592025][T20902] netlink: 42732 bytes leftover after parsing attributes in process `syz.0.4353'. [ 824.632927][T20912] netlink: 'syz.2.4356': attribute type 29 has an invalid length. [ 825.292795][T20938] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.4363'. [ 825.433082][T20941] device wlan1 entered promiscuous mode [ 825.745730][T20950] netlink: 150488 bytes leftover after parsing attributes in process `syz.1.4367'. [ 826.930039][T20981] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4377'. [ 826.988613][T20981] netlink: 126612 bytes leftover after parsing attributes in process `syz.4.4377'. [ 827.035165][T20986] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4377'. [ 827.064992][T20981] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4377'. [ 827.152333][T20984] team0: Device hsr_slave_0 failed to register rx_handler [ 827.361225][T21001] netlink: 60519 bytes leftover after parsing attributes in process `syz.4.4380'. [ 827.769176][T21010] validate_nla: 9 callbacks suppressed [ 827.769201][T21010] netlink: 'syz.4.4385': attribute type 29 has an invalid length. [ 827.840067][T21010] netlink: 'syz.4.4385': attribute type 29 has an invalid length. [ 828.801731][T21058] netlink: 'syz.4.4399': attribute type 29 has an invalid length. [ 830.275809][T21058] netlink: 'syz.4.4399': attribute type 29 has an invalid length. [ 830.297656][T21064] netlink: 'syz.2.4398': attribute type 2 has an invalid length. [ 830.357234][T21064] netlink: 'syz.2.4398': attribute type 8 has an invalid length. [ 830.365127][T21064] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4398'. [ 830.609937][T21081] netlink: 'syz.4.4403': attribute type 1 has an invalid length. [ 830.639729][T21081] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4403'. [ 831.028498][T21096] netlink: 'syz.4.4409': attribute type 10 has an invalid length. [ 831.377236][T21109] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4412'. [ 831.678822][T21109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 831.748425][T21109] device bond_slave_0 left promiscuous mode [ 831.793574][T21109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 831.806199][T21109] device bond_slave_1 left promiscuous mode [ 831.824674][T21109] bond0 (unregistering): Released all slaves [ 833.796855][T21198] netlink: 'syz.2.4435': attribute type 10 has an invalid length. [ 833.893684][T21200] device syzkaller0 entered promiscuous mode [ 833.902573][T21201] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.4435'. [ 834.193175][T21213] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.4439'. [ 836.443794][T21240] netlink: 'syz.2.4446': attribute type 28 has an invalid length. [ 837.045397][T21273] netlink: 'syz.4.4454': attribute type 12 has an invalid length. [ 837.074063][T21273] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4454'. [ 837.209880][T21290] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 837.253687][T21290] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 837.443193][T21294] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 837.455904][T21294] dvmrp1: linktype set to 768 [ 837.462189][T21295] delete_channel: no stack [ 837.656397][T21308] netlink: 'syz.0.4464': attribute type 2 has an invalid length. [ 837.671984][T21308] netlink: 'syz.0.4464': attribute type 8 has an invalid length. [ 837.684853][T21308] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4464'. [ 837.745252][T21314] netlink: 'syz.1.4465': attribute type 19 has an invalid length. [ 837.753876][T21314] netlink: 14552 bytes leftover after parsing attributes in process `syz.1.4465'. [ 837.766895][T21312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 837.775213][T21312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 837.791443][T21312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 837.808833][T21312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 837.952701][T21310] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 837.959236][T21310] syzkaller1: linktype set to 825 [ 838.062341][T21318] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4468'. [ 838.679157][T21331] netlink: 'syz.2.4474': attribute type 39 has an invalid length. [ 838.794063][T21336] netlink: 'syz.0.4476': attribute type 4 has an invalid length. [ 838.877230][T21336] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4476'. [ 839.654870][T21359] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4481'. [ 840.696682][T21408] netlink: 'syz.1.4495': attribute type 11 has an invalid length. [ 840.736016][T21408] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4495'. [ 840.768618][T21412] netlink: 763 bytes leftover after parsing attributes in process `syz.3.4496'. [ 840.779183][T21403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 842.380901][T21436] netlink: 'syz.0.4504': attribute type 3 has an invalid length. [ 842.395948][T21436] netlink: 'syz.0.4504': attribute type 1 has an invalid length. [ 842.412665][T21436] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.4504'. [ 842.846924][ T4260] syzkaller0: tun_net_xmit 76 [ 842.854239][ T4260] syzkaller0: tun_net_xmit 48 [ 842.878648][ T127] syzkaller0: tun_net_xmit 76 [ 842.907295][T21424] syzkaller0: delete flow: hash 4060776798 index 1 [ 846.534553][T21494] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4518'. [ 846.579855][T21494] device hsr_slave_0 left promiscuous mode [ 846.603246][T21494] device hsr_slave_1 left promiscuous mode [ 846.841852][T21501] device syzkaller0 entered promiscuous mode [ 846.861899][T21501] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 847.223069][T21513] netlink: 'syz.1.4524': attribute type 29 has an invalid length. [ 847.298732][T21513] netlink: 'syz.1.4524': attribute type 29 has an invalid length. [ 848.162875][T21549] netlink: 'syz.3.4532': attribute type 21 has an invalid length. [ 848.199548][T21549] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4532'. [ 849.021145][T21569] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4538'. [ 849.080497][T21571] netlink: 'syz.3.4540': attribute type 12 has an invalid length. [ 849.107353][T21571] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4540'. [ 850.145374][T21589] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.4544'. [ 850.588873][T21605] delete_channel: no stack [ 850.643924][T21605] delete_channel: no stack [ 850.676348][T21605] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.4549'. [ 850.883001][T21610] tipc: Started in network mode [ 850.903383][T21610] tipc: Node identity 9215a268, cluster identity 4711 [ 850.952228][T21610] tipc: Node number set to 2450891368 [ 851.412003][T21643] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.4560'. [ 851.423188][T21643] netlink: 'syz.0.4560': attribute type 1 has an invalid length. [ 851.437927][T21643] netlink: 'syz.0.4560': attribute type 3 has an invalid length. [ 851.446844][T21643] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4560'. [ 851.755845][T21662] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4565'. [ 851.767879][T21667] netlink: 'syz.3.4566': attribute type 10 has an invalid length. [ 851.787436][T21667] device macvlan0 entered promiscuous mode [ 851.843012][T21673] netlink: 'syz.3.4566': attribute type 2 has an invalid length. [ 851.843996][T21667] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 851.852219][T21672] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.4568'. [ 851.872654][T21662] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4565'. [ 851.941556][T21673] device 1 entered promiscuous mode [ 852.666056][T21721] netlink: 'syz.3.4583': attribute type 3 has an invalid length. [ 852.709773][T21721] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4583'. [ 854.060625][T21758] netlink: 'syz.2.4593': attribute type 2 has an invalid length. [ 855.128620][T21777] netlink: 'syz.1.4599': attribute type 12 has an invalid length. [ 855.153653][T21777] netlink: 'syz.1.4599': attribute type 15 has an invalid length. [ 855.191910][T21781] delete_channel: no stack [ 856.282406][T21795] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.4605'. [ 858.262854][T21788] netlink: 'syz.3.4602': attribute type 22 has an invalid length. [ 860.726059][T21799] netlink: 'syz.1.4606': attribute type 13 has an invalid length. [ 860.734166][T21799] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4606'. [ 860.744575][T21799] syz_tun: refused to change device tx_queue_len [ 860.751016][T21799] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 860.796772][T21802] device syzkaller0 entered promiscuous mode [ 863.261033][T21816] netlink: 'syz.1.4609': attribute type 39 has an invalid length. [ 863.395774][T21831] netlink: 'syz.4.4611': attribute type 10 has an invalid length. [ 863.411500][T21831] device macvlan0 entered promiscuous mode [ 863.430025][T21831] team0: Port device macvlan0 added [ 863.450560][T21837] netlink: 'syz.3.4613': attribute type 10 has an invalid length. [ 864.102434][T21862] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.4620'. [ 864.386407][T21866] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.4622'. [ 867.069136][T21865] netlink: 'syz.1.4624': attribute type 21 has an invalid length. [ 867.107110][T21865] netlink: 'syz.1.4624': attribute type 5 has an invalid length. [ 867.121192][T21859] netlink: 22 bytes leftover after parsing attributes in process `syz.4.4621'. [ 867.121815][T21861] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 867.189107][T21866] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 867.196878][T21866] CPU: 1 PID: 21866 Comm: syz.3.4622 Not tainted syzkaller #0 [ 867.197443][T21861] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 867.204349][T21866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 867.204369][T21866] Call Trace: [ 867.204379][T21866] [ 867.204388][T21866] dump_stack_lvl+0x188/0x24e [ 867.204423][T21866] ? show_regs_print_info+0x12/0x12 [ 867.204447][T21866] ? load_image+0x410/0x410 [ 867.204476][T21866] sysfs_warn_dup+0x8a/0xa0 [ 867.204503][T21866] sysfs_do_create_link_sd+0xc0/0x110 [ 867.233476][T21861] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 867.234999][T21866] device_add+0x83b/0x1050 [ 867.235039][T21866] wiphy_register+0x1d8b/0x2aa0 [ 867.273608][T21866] ? cfg80211_event_work+0x40/0x40 [ 867.278821][T21866] ? minstrel_ht_alloc+0x894/0xa20 [ 867.283961][T21866] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 867.290640][T21866] ieee80211_register_hw+0x2d48/0x39f0 [ 867.296114][T21866] ? ieee80211_register_hw+0xf41/0x39f0 [ 867.301671][T21866] ? ieee80211_register_hw+0xf41/0x39f0 [ 867.307233][T21866] ? ieee80211_tasklet_handler+0x20/0x20 [ 867.312892][T21866] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 867.318792][T21866] ? __debug_object_init+0xed/0x440 [ 867.323999][T21866] ? memset+0x1e/0x40 [ 867.328154][T21866] ? __hrtimer_init+0x189/0x270 [ 867.333009][T21866] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 867.338754][T21866] ? memcpy+0x3c/0x60 [ 867.342749][T21866] hwsim_new_radio_nl+0xab7/0xc90 [ 867.347794][T21866] genl_family_rcv_msg_doit+0x22f/0x350 [ 867.353373][T21866] ? end_current_label_crit_section+0x170/0x170 [ 867.359719][T21866] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 867.365711][T21866] ? bpf_lsm_capable+0x5/0x10 [ 867.370393][T21866] ? security_capable+0x85/0xb0 [ 867.375253][T21866] genl_rcv_msg+0x601/0x790 [ 867.379763][T21866] ? genl_bind+0x360/0x360 [ 867.384179][T21866] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 867.390546][T21866] netlink_rcv_skb+0x1ef/0x440 [ 867.395317][T21866] ? genl_bind+0x360/0x360 [ 867.399734][T21866] ? netlink_ack+0x1160/0x1160 [ 867.404604][T21866] ? down_read+0x1a8/0x2d0 [ 867.409020][T21866] genl_rcv+0x24/0x40 [ 867.413002][T21866] netlink_unicast+0x7ad/0x920 [ 867.417776][T21866] netlink_sendmsg+0x8ad/0xbd0 [ 867.422550][T21866] ? netlink_getsockopt+0x550/0x550 [ 867.427771][T21866] ? apparmor_socket_sendmsg+0x8a/0x330 [ 867.433346][T21866] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 867.438641][T21866] ? security_socket_sendmsg+0x7c/0xa0 [ 867.444108][T21866] ? netlink_getsockopt+0x550/0x550 [ 867.449319][T21866] ____sys_sendmsg+0x5ed/0x9a0 [ 867.454099][T21866] ? __sys_sendmsg_sock+0x30/0x30 [ 867.459126][T21866] ? __import_iovec+0x306/0x510 [ 867.463991][T21866] ? import_iovec+0x6f/0xa0 [ 867.468500][T21866] ___sys_sendmsg+0x2a2/0x360 [ 867.473191][T21866] ? __sys_sendmsg+0x2a0/0x2a0 [ 867.477996][T21866] __se_sys_sendmsg+0x1c3/0x2b0 [ 867.482860][T21866] ? __x64_sys_sendmsg+0x80/0x80 [ 867.487816][T21866] ? lockdep_hardirqs_on+0x94/0x140 [ 867.493017][T21866] do_syscall_64+0x4c/0xa0 [ 867.497463][T21866] ? clear_bhb_loop+0x60/0xb0 [ 867.502220][T21866] ? clear_bhb_loop+0x60/0xb0 [ 867.506962][T21866] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 867.512885][T21866] RIP: 0033:0x7f1995b9de99 [ 867.517309][T21866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 867.537031][T21866] RSP: 002b:00007f1996a4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 867.545516][T21866] RAX: ffffffffffffffda RBX: 00007f1995e25fa0 RCX: 00007f1995b9de99 [ 867.553498][T21866] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 867.561466][T21866] RBP: 00007f1995c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 867.569437][T21866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 867.577403][T21866] R13: 00007f1995e26038 R14: 00007f1995e25fa0 R15: 00007ffc4297a638 [ 867.585389][T21866] [ 867.772497][T21897] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4628'. [ 867.783472][T21884] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4622'. [ 867.785909][T21890] netlink: 'syz.1.4626': attribute type 29 has an invalid length. [ 867.812661][T21897] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4628'. [ 867.837185][T21890] netlink: 'syz.1.4626': attribute type 29 has an invalid length. [ 867.863917][T21900] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4628'. [ 868.120830][T21910] netlink: 'syz.1.4632': attribute type 22 has an invalid length. [ 868.155847][T21910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4632'. [ 870.159812][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.166200][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.233561][T21984] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4650'. [ 870.593969][T22012] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.4658'. [ 870.609203][T22004] netlink: 'syz.3.4655': attribute type 3 has an invalid length. [ 870.666422][T22004] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4655'. [ 870.742180][T22018] netlink: 5427 bytes leftover after parsing attributes in process `syz.2.4657'. [ 872.707438][T22051] device sit0 entered promiscuous mode [ 873.076171][T22070] netlink: 'syz.4.4674': attribute type 13 has an invalid length. [ 873.104989][T22070] __nla_validate_parse: 2 callbacks suppressed [ 873.105008][T22070] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4674'. [ 873.175261][T22070] erspan0: refused to change device tx_queue_len [ 873.210123][T22070] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 873.251229][T22078] netlink: 'syz.1.4675': attribute type 3 has an invalid length. [ 873.264309][T22078] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4675'. [ 873.400795][T22066] device syzkaller0 entered promiscuous mode [ 873.996073][T22096] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 874.502594][T22104] netlink: 'syz.2.4683': attribute type 3 has an invalid length. [ 874.513247][T22104] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4683'. [ 875.555988][T22109] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4684'. [ 877.337420][T22121] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.4687'. [ 878.286867][T22136] netlink: 'syz.2.4691': attribute type 2 has an invalid length. [ 878.299902][T22136] netlink: 'syz.2.4691': attribute type 4 has an invalid length. [ 878.311069][T22136] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4691'. [ 880.330723][T22144] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4693'. [ 880.461678][T22156] netlink: 'syz.0.4694': attribute type 275 has an invalid length. [ 880.576441][T22155] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4697'. [ 880.750347][T22161] tap0: tun_chr_ioctl cmd 1074025677 [ 880.768767][T22161] tap0: linktype set to 804 [ 881.022758][T22181] netlink: 'syz.1.4703': attribute type 21 has an invalid length. [ 881.912904][T22200] device aaaaaaaaaaaaaaa entered promiscuous mode [ 881.928274][T22206] netlink: 'syz.4.4711': attribute type 10 has an invalid length. [ 881.946794][T22206] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4711'. [ 881.974298][T22206] bridge0: port 4(team0) entered blocking state [ 882.048207][T22206] bridge0: port 4(team0) entered disabled state [ 882.162643][T22206] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 882.263554][T22218] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4713'. [ 882.528586][T22234] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.4716'. [ 882.610169][T22241] netlink: 'syz.4.4717': attribute type 8 has an invalid length. [ 882.618646][T22241] netlink: 'syz.4.4717': attribute type 4 has an invalid length. [ 882.626441][T22241] netlink: 'syz.4.4717': attribute type 7 has an invalid length. [ 882.634825][T22241] netlink: 'syz.4.4717': attribute type 8 has an invalid length. [ 882.647511][T22241] netlink: 'syz.4.4717': attribute type 7 has an invalid length. [ 882.655297][T22241] netlink: 125876 bytes leftover after parsing attributes in process `syz.4.4717'. [ 882.841942][T22244] device syzkaller0 entered promiscuous mode [ 885.594275][T22250] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4721'. [ 885.817450][T22278] netlink: 'syz.1.4730': attribute type 10 has an invalid length. [ 885.846363][T22278] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4730'. [ 886.346161][T22278] batman_adv: batadv0: Adding interface: virt_wifi0 [ 886.361087][T22278] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 886.450767][T22278] batman_adv: batadv0: Interface activated: virt_wifi0 [ 886.629423][T15411] Bluetooth: hci5: ACL packet for unknown connection handle 0 [ 886.637490][T15411] Bluetooth: hci5: ACL packet for unknown connection handle 0 [ 886.825480][T22302] netlink: 'syz.2.4736': attribute type 21 has an invalid length. [ 886.860777][T22302] netlink: 'syz.2.4736': attribute type 4 has an invalid length. [ 887.981939][T22333] netlink: 'syz.4.4748': attribute type 10 has an invalid length. [ 888.414719][T22351] netlink: 'syz.4.4752': attribute type 29 has an invalid length. [ 888.487547][T22351] netlink: 'syz.4.4752': attribute type 29 has an invalid length. [ 888.698769][T22353] netlink: 'syz.4.4752': attribute type 29 has an invalid length. [ 888.851295][T22346] netlink: 'syz.4.4752': attribute type 29 has an invalid length. [ 888.902990][T22353] netlink: 'syz.4.4752': attribute type 29 has an invalid length. [ 888.951920][T22356] netlink: 'syz.3.4754': attribute type 21 has an invalid length. [ 889.037170][T22351] can: request_module (can-proto-0) failed. [ 889.544483][T22384] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4763'. [ 889.617451][T22384] openvswitch: netlink: Flow key attr not present in new flow. [ 890.006240][T22404] netlink: 15478 bytes leftover after parsing attributes in process `syz.3.4767'. [ 890.135546][T22405] bridge0: port 3(batadv0) entered disabled state [ 890.940074][T22423] netlink: 'syz.4.4777': attribute type 1 has an invalid length. [ 891.017115][T22423] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.4777'. [ 891.870273][T22464] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4788'. [ 891.977804][T22468] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4785'. [ 894.226797][T22498] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4795'. [ 895.538216][T22510] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.4798'. [ 895.852487][T22532] netlink: 'syz.2.4804': attribute type 2 has an invalid length. [ 895.865449][T22532] netlink: 'syz.2.4804': attribute type 8 has an invalid length. [ 895.909116][T22532] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4804'. [ 896.042050][T22534] delete_channel: no stack [ 896.574962][T22567] netlink: 'syz.2.4815': attribute type 10 has an invalid length. [ 896.684498][T22561] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4817'. [ 896.722396][T22561] device hsr_slave_0 left promiscuous mode [ 896.772821][T22561] device hsr_slave_1 left promiscuous mode [ 897.137526][T22572] netlink: 'syz.3.4814': attribute type 21 has an invalid length. [ 897.256053][T22572] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4814'. [ 897.505757][T22595] netlink: 'syz.1.4825': attribute type 29 has an invalid length. [ 897.539124][T22595] netlink: 'syz.1.4825': attribute type 29 has an invalid length. [ 897.569302][T22595] netlink: 'syz.1.4825': attribute type 29 has an invalid length. [ 898.073817][T22623] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.4832'. [ 898.132205][T22623] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 898.251462][T22630] netlink: 'syz.3.4834': attribute type 10 has an invalid length. [ 898.522485][T22639] netlink: 'syz.0.4837': attribute type 29 has an invalid length. [ 898.541891][ T4279] Bluetooth: hci1: ISO packet for unknown connection handle 1 [ 898.554104][T22639] netlink: 'syz.0.4837': attribute type 29 has an invalid length. [ 898.655580][T22649] netlink: 'syz.1.4839': attribute type 21 has an invalid length. [ 898.685263][T22649] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 898.747824][T22647] netlink: 'syz.4.4836': attribute type 11 has an invalid length. [ 898.823928][T22647] netlink: 191896 bytes leftover after parsing attributes in process `syz.4.4836'. [ 899.432804][T22638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 899.923843][T22664] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 899.953786][T22664] device syzkaller0 entered promiscuous mode [ 900.153797][T22677] bridge0: port 3(batadv0) entered disabled state [ 900.314850][T22683] netlink: 'syz.0.4847': attribute type 3 has an invalid length. [ 900.354408][T22683] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4847'. [ 903.238571][T22707] validate_nla: 1 callbacks suppressed [ 903.238587][T22707] netlink: 'syz.0.4853': attribute type 29 has an invalid length. [ 903.474419][T22725] netlink: 'syz.0.4859': attribute type 29 has an invalid length. [ 903.503990][T22725] netlink: 'syz.0.4859': attribute type 29 has an invalid length. [ 903.551391][T22731] netlink: 'syz.0.4859': attribute type 29 has an invalid length. [ 903.731713][T22737] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4861'. [ 903.782237][T22742] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4863'. [ 904.218502][T22764] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4869'. [ 904.288360][T22762] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4869'. [ 904.831874][T22776] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.4872'. [ 904.885922][T22776] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 904.913009][T22776] CPU: 0 PID: 22776 Comm: syz.2.4872 Not tainted syzkaller #0 [ 904.920553][T22776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 904.930725][T22776] Call Trace: [ 904.934040][T22776] [ 904.937100][T22776] dump_stack_lvl+0x188/0x24e [ 904.941853][T22776] ? show_regs_print_info+0x12/0x12 [ 904.947377][T22776] ? load_image+0x410/0x410 [ 904.951942][T22776] sysfs_warn_dup+0x8a/0xa0 [ 904.956488][T22776] sysfs_do_create_link_sd+0xc0/0x110 [ 904.961916][T22776] device_add+0x83b/0x1050 [ 904.966390][T22776] wiphy_register+0x1d8b/0x2aa0 [ 904.971284][T22776] ? cfg80211_event_work+0x40/0x40 [ 904.976417][T22776] ? minstrel_ht_alloc+0x894/0xa20 [ 904.981546][T22776] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 904.987703][T22776] ieee80211_register_hw+0x2d48/0x39f0 [ 904.993181][T22776] ? ieee80211_register_hw+0xf41/0x39f0 [ 904.998731][T22776] ? ieee80211_register_hw+0xf41/0x39f0 [ 905.004283][T22776] ? ieee80211_tasklet_handler+0x20/0x20 [ 905.009928][T22776] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 905.015827][T22776] ? __debug_object_init+0xed/0x440 [ 905.021047][T22776] ? memset+0x1e/0x40 [ 905.025030][T22776] ? __hrtimer_init+0x189/0x270 [ 905.030059][T22776] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 905.036174][T22776] ? memcpy+0x3c/0x60 [ 905.040195][T22776] hwsim_new_radio_nl+0xab7/0xc90 [ 905.045254][T22776] genl_family_rcv_msg_doit+0x22f/0x350 [ 905.050805][T22776] ? end_current_label_crit_section+0x170/0x170 [ 905.057319][T22776] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 905.063234][T22776] ? bpf_lsm_capable+0x5/0x10 [ 905.067933][T22776] ? security_capable+0x85/0xb0 [ 905.072808][T22776] genl_rcv_msg+0x601/0x790 [ 905.077354][T22776] ? genl_bind+0x360/0x360 [ 905.081787][T22776] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 905.088160][T22776] netlink_rcv_skb+0x1ef/0x440 [ 905.092952][T22776] ? genl_bind+0x360/0x360 [ 905.097389][T22776] ? netlink_ack+0x1160/0x1160 [ 905.102257][T22776] ? down_read+0x1a8/0x2d0 [ 905.106678][T22776] genl_rcv+0x24/0x40 [ 905.110662][T22776] netlink_unicast+0x7ad/0x920 [ 905.115442][T22776] netlink_sendmsg+0x8ad/0xbd0 [ 905.120403][T22776] ? netlink_getsockopt+0x550/0x550 [ 905.125613][T22776] ? apparmor_socket_sendmsg+0x8a/0x330 [ 905.131190][T22776] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 905.136475][T22776] ? security_socket_sendmsg+0x7c/0xa0 [ 905.141953][T22776] ? netlink_getsockopt+0x550/0x550 [ 905.147172][T22776] ____sys_sendmsg+0x5ed/0x9a0 [ 905.151953][T22776] ? __sys_sendmsg_sock+0x30/0x30 [ 905.156979][T22776] ? __import_iovec+0x306/0x510 [ 905.161842][T22776] ? import_iovec+0x6f/0xa0 [ 905.166350][T22776] ___sys_sendmsg+0x2a2/0x360 [ 905.171048][T22776] ? __sys_sendmsg+0x2a0/0x2a0 [ 905.175859][T22776] __se_sys_sendmsg+0x1c3/0x2b0 [ 905.180716][T22776] ? __x64_sys_sendmsg+0x80/0x80 [ 905.185672][T22776] ? lockdep_hardirqs_on+0x94/0x140 [ 905.190871][T22776] do_syscall_64+0x4c/0xa0 [ 905.195299][T22776] ? clear_bhb_loop+0x60/0xb0 [ 905.199982][T22776] ? clear_bhb_loop+0x60/0xb0 [ 905.204666][T22776] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 905.210748][T22776] RIP: 0033:0x7ff14059de99 [ 905.215181][T22776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 905.234826][T22776] RSP: 002b:00007ff1413d8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 905.243281][T22776] RAX: ffffffffffffffda RBX: 00007ff140826090 RCX: 00007ff14059de99 [ 905.251272][T22776] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 905.259250][T22776] RBP: 00007ff140633eaf R08: 0000000000000000 R09: 0000000000000000 [ 905.267223][T22776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 905.275295][T22776] R13: 00007ff140826128 R14: 00007ff140826090 R15: 00007ffe07590018 [ 905.283277][T22776] [ 905.680949][T22788] netlink: 'syz.4.4875': attribute type 25 has an invalid length. [ 905.716926][T22788] netlink: 'syz.4.4875': attribute type 9 has an invalid length. [ 905.745563][T22788] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4875'. [ 906.084353][T22794] netlink: 'syz.3.4880': attribute type 29 has an invalid length. [ 906.175276][T22794] netlink: 'syz.3.4880': attribute type 29 has an invalid length. [ 906.259644][T22794] netlink: 'syz.3.4880': attribute type 29 has an invalid length. [ 906.293665][T22812] device syzkaller0 entered promiscuous mode [ 907.553322][T22872] netlink: 'syz.4.4900': attribute type 21 has an invalid length. [ 907.823803][T22879] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4902'. [ 909.071331][T22900] netlink: 'syz.4.4907': attribute type 3 has an invalid length. [ 909.097341][T22900] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4907'. [ 911.406790][T22933] netlink: 'syz.2.4917': attribute type 21 has an invalid length. [ 911.437334][T22933] netlink: 'syz.2.4917': attribute type 7 has an invalid length. [ 911.592849][T22937] netlink: 'syz.2.4917': attribute type 10 has an invalid length. [ 911.658484][T22937] team0: Port device virt_wifi0 added [ 913.169725][T22946] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.4921'. [ 914.782608][T22956] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4923'. [ 914.843659][T22957] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.4924'. [ 914.857715][T22957] netlink: zone id is out of range [ 914.879428][T22957] netlink: zone id is out of range [ 914.895511][T22964] netlink: 'syz.3.4926': attribute type 6 has an invalid length. [ 914.926111][T22957] netlink: zone id is out of range [ 914.936575][T22968] netlink: 'syz.4.4927': attribute type 10 has an invalid length. [ 914.956948][T22957] netlink: zone id is out of range [ 914.989582][T22957] netlink: zone id is out of range [ 914.994888][T22957] netlink: zone id is out of range [ 915.032644][T22957] netlink: zone id is out of range [ 915.045016][T22957] netlink: zone id is out of range [ 915.056725][T22968] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 915.063428][T22957] netlink: zone id is out of range [ 915.093825][T22957] netlink: zone id is out of range [ 915.378447][T22986] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4932'. [ 915.464634][T22984] device syzkaller0 entered promiscuous mode [ 916.578046][T23014] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4940'. [ 919.477475][T22995] netlink: 'syz.3.4934': attribute type 275 has an invalid length. [ 919.485590][T22997] netlink: 'syz.1.4935': attribute type 15 has an invalid length. [ 919.493821][T22997] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.4935'. [ 919.527208][T23014] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4940'. [ 919.968834][T23051] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4947'. [ 920.001966][T23042] netlink: 'syz.0.4948': attribute type 3 has an invalid length. [ 920.013001][T23057] netlink: 'syz.2.4949': attribute type 21 has an invalid length. [ 920.039557][T23042] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4948'. [ 920.760101][T23075] netlink: 'syz.4.4952': attribute type 29 has an invalid length. [ 920.786132][T23075] netlink: 'syz.4.4952': attribute type 29 has an invalid length. [ 920.833731][T23076] netlink: 'syz.4.4952': attribute type 29 has an invalid length. [ 920.863546][T23075] netlink: 'syz.4.4952': attribute type 29 has an invalid length. [ 920.892825][T23075] netlink: 'syz.4.4952': attribute type 10 has an invalid length. [ 923.091847][T23081] netlink: 'syz.2.4955': attribute type 10 has an invalid length. [ 923.129376][T23081] device syz_tun entered promiscuous mode [ 923.684562][T23081] netlink: 'syz.2.4955': attribute type 3 has an invalid length. [ 923.762768][T23081] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4955'. [ 924.426505][T23110] netlink: 'syz.3.4963': attribute type 13 has an invalid length. [ 924.466386][T23110] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4963'. [ 924.525512][T23110] syz_tun: refused to change device tx_queue_len [ 924.548273][T23110] net_ratelimit: 17 callbacks suppressed [ 924.548315][T23110] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 924.600406][T23113] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4965'. [ 925.334238][T23123] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4966'. [ 928.053647][T23144] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4971'. [ 928.241540][T23148] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4973'. [ 928.318096][T23148] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 928.399008][T23148] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 929.155519][T23164] device wlan1 entered promiscuous mode [ 929.275106][T23155] device syzkaller0 entered promiscuous mode [ 931.520292][T23185] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4981'. [ 931.589386][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.595796][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.815945][T23198] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4984'. [ 931.839414][T23198] tc_dump_action: action bad kind [ 931.845662][T23192] bridge0: port 3(team0) entered disabled state [ 931.852322][T23192] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.859685][T23192] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.181384][T23201] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 932.211588][T23201] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 932.364829][T23201] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 932.374804][T23201] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 932.443337][T23201] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 932.455267][T23201] batman_adv: batadv0: Removing interface: virt_wifi0 [ 932.654575][T23201] bridge0: port 3(batadv0) entered disabled state [ 933.322014][T23241] netlink: 212940 bytes leftover after parsing attributes in process `syz.2.5000'. [ 933.614078][T23254] netlink: 'syz.2.5005': attribute type 2 has an invalid length. [ 933.894683][T23246] device syzkaller0 entered promiscuous mode [ 933.914220][T23248] netlink: 'syz.1.5002': attribute type 10 has an invalid length. [ 934.057890][T23248] team0 (unregistering): Port device team_slave_0 removed [ 934.146339][T23248] team0 (unregistering): Port device team_slave_1 removed [ 934.427438][T23263] device wlan1 entered promiscuous mode [ 934.710647][T23276] netlink: 'syz.2.5009': attribute type 29 has an invalid length. [ 934.963403][T23289] netlink: 'syz.0.5015': attribute type 2 has an invalid length. [ 934.999684][T23289] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.5015'. [ 936.981243][T23276] netlink: 'syz.2.5009': attribute type 29 has an invalid length. [ 937.208959][T23300] netlink: 'syz.0.5019': attribute type 10 has an invalid length. [ 937.227560][T23300] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5019'. [ 937.245618][T23308] netlink: 'syz.1.5022': attribute type 10 has an invalid length. [ 937.265350][T23308] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5022'. [ 937.789215][T23316] netlink: 'syz.2.5024': attribute type 10 has an invalid length. [ 937.870925][T23316] device wlan1 left promiscuous mode [ 938.044905][T23316] team0: Port device wlan1 added [ 938.885183][T23346] netlink: 'syz.3.5031': attribute type 3 has an invalid length. [ 938.906125][T23346] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5031'. [ 939.164530][T23358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5035'. [ 939.207326][T23358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5035'. [ 939.233491][T23362] netlink: 180900 bytes leftover after parsing attributes in process `syz.1.5036'. [ 939.259135][T23358] netlink: 33 bytes leftover after parsing attributes in process `syz.2.5035'. [ 939.261378][T23362] openvswitch: netlink: Flow actions attr not present in new flow. [ 939.322989][T23358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5035'. [ 939.407090][T23358] netlink: 33 bytes leftover after parsing attributes in process `syz.2.5035'. [ 939.448708][T23358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5035'. [ 939.995393][T23391] netlink: 'syz.3.5041': attribute type 3 has an invalid length. [ 940.006492][T23386] mac80211_hwsim hwsim41 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 940.235119][T23398] netlink: 'syz.0.5045': attribute type 9 has an invalid length. [ 940.263726][T23398] netlink: 'syz.0.5045': attribute type 3 has an invalid length. [ 940.281747][T23398] netlink: 'syz.0.5045': attribute type 4 has an invalid length. [ 941.065836][T23441] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 941.084287][T23440] delete_channel: no stack [ 941.440180][T23442] can: request_module (can-proto-0) failed. [ 941.503880][T23449] device syzkaller0 entered promiscuous mode [ 944.580919][T23490] __nla_validate_parse: 6 callbacks suppressed [ 944.580938][T23490] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5071'. [ 944.880440][T23504] netlink: 184 bytes leftover after parsing attributes in process `syz.1.5077'. [ 944.923265][T23502] netlink: 'syz.0.5075': attribute type 21 has an invalid length. [ 944.973851][T23502] netlink: 'syz.0.5075': attribute type 6 has an invalid length. [ 945.020838][T23502] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5075'. [ 945.526565][T23513] device syzkaller0 entered promiscuous mode [ 946.565208][T23533] delete_channel: no stack [ 950.042167][T23550] netlink: 'syz.4.5088': attribute type 10 has an invalid length. [ 950.054367][T23550] device wlan1 left promiscuous mode [ 950.081001][T23550] device wlan1 entered promiscuous mode [ 950.097857][T23550] team0: Port device wlan1 added [ 950.149343][T23587] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5097'. [ 950.794313][T23612] netlink: 'syz.1.5105': attribute type 3 has an invalid length. [ 950.823352][T23612] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5105'. [ 950.842058][T23608] netlink: 'syz.3.5103': attribute type 10 has an invalid length. [ 950.893087][T23613] netlink: 'syz.0.5106': attribute type 4 has an invalid length. [ 950.893681][T23608] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5103'. [ 950.920905][T23613] netlink: 'syz.0.5106': attribute type 8 has an invalid length. [ 950.949857][T23613] netlink: 109560 bytes leftover after parsing attributes in process `syz.0.5106'. [ 950.967395][T23615] netlink: 'syz.4.5104': attribute type 10 has an invalid length. [ 951.010006][T23615] bridge0: port 2(veth0_to_bond) entered disabled state [ 951.019166][T23615] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.870627][T23637] netlink: 'syz.2.5111': attribute type 2 has an invalid length. [ 951.913537][T23637] device .*! entered promiscuous mode [ 952.748671][T23674] netlink: 'syz.1.5119': attribute type 3 has an invalid length. [ 952.756483][T23674] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5119'. [ 953.038311][T23682] netlink: 'syz.2.5121': attribute type 10 has an invalid length. [ 953.662114][T23704] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.5127'. [ 953.778434][T23712] netlink: 'syz.4.5128': attribute type 4 has an invalid length. [ 955.112172][T23724] syzkaller1: tun_chr_ioctl cmd 35108 [ 957.649127][T23725] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5131'. [ 957.658339][T23726] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 957.905427][T23762] netlink: 'syz.0.5138': attribute type 10 has an invalid length. [ 957.940192][T23762] team0: Device bridge0 is already an upper device of the team interface [ 958.066697][T23769] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.5144'. [ 958.085999][T23766] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.5142'. [ 958.138819][T23769] netlink: 'syz.4.5144': attribute type 21 has an invalid length. [ 958.237912][T23769] netlink: 'syz.4.5144': attribute type 10 has an invalid length. [ 958.273201][T23769] netlink: 'syz.4.5144': attribute type 12 has an invalid length. [ 958.321449][T23769] netlink: 'syz.4.5144': attribute type 13 has an invalid length. [ 958.378810][T23769] netlink: 'syz.4.5144': attribute type 14 has an invalid length. [ 958.401172][T23769] netlink: 'syz.4.5144': attribute type 15 has an invalid length. [ 958.412466][T23769] netlink: 'syz.4.5144': attribute type 16 has an invalid length. [ 958.423063][T23769] netlink: 'syz.4.5144': attribute type 19 has an invalid length. [ 958.437290][T23769] netlink: 'syz.4.5144': attribute type 21 has an invalid length. [ 958.445374][T23769] netlink: 12226 bytes leftover after parsing attributes in process `syz.4.5144'. [ 958.582181][T23786] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5146'. [ 958.993995][T23806] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5153'. [ 959.019888][T23806] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5153'. [ 959.142849][T23814] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5154'. [ 959.180857][T23814] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.5154'. [ 959.237961][T23817] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5156'. [ 961.403922][T23860] device syzkaller0 entered promiscuous mode [ 963.980452][T23862] __nla_validate_parse: 3 callbacks suppressed [ 963.980467][T23862] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5173'. [ 963.996001][T23875] validate_nla: 8 callbacks suppressed [ 963.996015][T23875] netlink: 'syz.1.5178': attribute type 27 has an invalid length. [ 964.107280][T23886] netlink: 'syz.4.5181': attribute type 10 has an invalid length. [ 964.115171][T23886] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5181'. [ 964.135643][T23886] batman_adv: batadv0: Adding interface: virt_wifi0 [ 964.142758][T23886] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 964.178266][T23886] batman_adv: batadv0: Interface activated: virt_wifi0 [ 964.219100][T23890] Q6\bY4: renamed from lo [ 964.281396][T23894] netlink: 'syz.0.5183': attribute type 10 has an invalid length. [ 964.327336][T23894] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5183'. [ 964.481651][T23909] netlink: 'syz.2.5187': attribute type 4 has an invalid length. [ 964.492455][T23909] netlink: 'syz.2.5187': attribute type 8 has an invalid length. [ 964.528743][T23909] netlink: 193092 bytes leftover after parsing attributes in process `syz.2.5187'. [ 964.640900][T23914] netlink: 'syz.3.5186': attribute type 2 has an invalid length. [ 964.688214][T23914] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5186'. [ 965.769264][T23906] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.5185'. [ 966.056594][T23928] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.5192'. [ 966.486881][T23949] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5198'. [ 967.010881][T23969] netlink: 'syz.3.5204': attribute type 10 has an invalid length. [ 967.034034][T23969] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5204'. [ 967.253319][T23980] netlink: 'syz.0.5207': attribute type 29 has an invalid length. [ 967.465274][T23969] bond0: (slave macvlan0): Releasing backup interface [ 967.513520][T23976] netlink: 'syz.4.5206': attribute type 21 has an invalid length. [ 967.537422][T23980] netlink: 'syz.0.5207': attribute type 29 has an invalid length. [ 967.830220][T23998] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.5210'. [ 968.230164][ T4279] Bluetooth: hci2: unexpected subevent 0x19 length: 150 > 28 [ 968.237745][ T4279] Bluetooth: hci2: Unable to find connection with handle 0x6e2f [ 969.049136][T24034] sctp: [Deprecated]: syz.4.5222 (pid 24034) Use of struct sctp_assoc_value in delayed_ack socket option. [ 969.049136][T24034] Use struct sctp_sack_info instead [ 969.102475][T24036] sctp: [Deprecated]: syz.4.5222 (pid 24036) Use of int in maxseg socket option. [ 969.102475][T24036] Use struct sctp_assoc_value instead [ 969.145853][T24034] __nla_validate_parse: 2 callbacks suppressed [ 969.145874][T24034] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5222'. [ 969.162817][T24034] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 969.235494][T24034] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 969.306368][T24039] validate_nla: 5 callbacks suppressed [ 969.306385][T24039] netlink: 'syz.2.5224': attribute type 16 has an invalid length. [ 969.330399][T24039] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5224'. [ 969.417184][T24045] netlink: 'syz.0.5236': attribute type 6 has an invalid length. [ 969.425327][T24045] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5236'. [ 969.614458][T24051] netlink: 'syz.1.5226': attribute type 10 has an invalid length. [ 969.633299][T24051] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5226'. [ 970.730483][T24078] device syzkaller0 entered promiscuous mode [ 970.910247][T24095] netlink: 'syz.1.5235': attribute type 4 has an invalid length. [ 970.918396][T24095] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5235'. [ 971.133035][T24108] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.5239'. [ 971.133204][T24107] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.5239'. [ 973.380889][T24100] netlink: 'syz.0.5238': attribute type 10 has an invalid length. [ 973.432110][T24100] bridge0: port 3(team0) entered disabled state [ 973.443939][T24100] device team_slave_0 left promiscuous mode [ 973.455366][T24100] team0 (unregistering): Port device team_slave_0 removed [ 973.463490][T24100] device team_slave_1 left promiscuous mode [ 973.510887][T24100] team0 (unregistering): Port device team_slave_1 removed [ 973.578164][T24116] netlink: 'syz.2.5241': attribute type 6 has an invalid length. [ 973.586387][T24116] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5241'. [ 973.860887][T24136] netlink: 'syz.2.5247': attribute type 10 has an invalid length. [ 973.924936][T24136] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5247'. [ 974.646810][T24153] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.5251'. [ 974.882080][T24158] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.5243'. [ 974.914723][T24158] netlink: 'syz.3.5243': attribute type 21 has an invalid length. [ 974.942629][T24158] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5243'. [ 975.029322][T24161] netlink: 'syz.4.5253': attribute type 29 has an invalid length. [ 975.040714][T24161] netlink: 'syz.4.5253': attribute type 29 has an invalid length. [ 975.063173][T24161] netlink: 'syz.4.5253': attribute type 29 has an invalid length. [ 975.346269][T24171] netlink: 'syz.4.5258': attribute type 6 has an invalid length. [ 975.367299][T24171] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5258'. [ 975.663210][T24182] netlink: 'syz.0.5262': attribute type 33 has an invalid length. [ 975.707420][T24182] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5262'. [ 975.993555][T24194] netlink: 'syz.0.5266': attribute type 3 has an invalid length. [ 976.041460][T24194] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5266'. [ 976.456894][T24214] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.5273'. [ 976.986553][T24240] netlink: 'syz.0.5280': attribute type 7 has an invalid length. [ 977.015712][T24246] netlink: 'syz.1.5279': attribute type 29 has an invalid length. [ 977.482158][T24242] device syzkaller0 entered promiscuous mode [ 977.511428][T24251] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 977.547821][T24251] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 977.923267][T24255] netlink: 'syz.0.5283': attribute type 1 has an invalid length. [ 977.971013][T24255] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.5283'. [ 981.920987][T24256] validate_nla: 1 callbacks suppressed [ 981.920999][T24256] netlink: 'syz.0.5283': attribute type 29 has an invalid length. [ 981.936704][T24257] netlink: 'syz.0.5283': attribute type 21 has an invalid length. [ 981.946393][T24257] netlink: 'syz.0.5283': attribute type 6 has an invalid length. [ 981.954387][T24257] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5283'. [ 981.964032][T24258] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5283'. [ 981.996148][T24266] netlink: 'syz.3.5286': attribute type 21 has an invalid length. [ 982.004750][T24266] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5286'. [ 982.300024][T24281] netlink: 'syz.1.5287': attribute type 25 has an invalid length. [ 982.331135][T24281] netlink: 'syz.1.5287': attribute type 9 has an invalid length. [ 982.363599][T24281] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5287'. [ 982.545472][T24291] netlink: 'syz.3.5292': attribute type 6 has an invalid length. [ 982.564404][T24291] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5292'. [ 982.655076][T24294] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.5293'. [ 982.881055][T24301] netlink: 2739 bytes leftover after parsing attributes in process `syz.3.5297'. [ 983.603637][ T4279] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 983.754154][T24336] netlink: 'syz.0.5307': attribute type 12 has an invalid length. [ 983.794182][T24336] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5307'. [ 983.807840][T24330] can: request_module (can-proto-0) failed. [ 983.837993][T24338] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5307'. [ 984.211862][T24349] netlink: 'syz.1.5310': attribute type 6 has an invalid length. [ 984.225413][T24349] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5310'. [ 985.363392][T24366] delete_channel: no stack [ 985.672609][T24334] Bluetooth: hci1: command 0x2016 tx timeout [ 987.073537][T24372] netlink: 'syz.2.5315': attribute type 10 has an invalid length. [ 987.094639][T24373] netlink: 'syz.1.5314': attribute type 16 has an invalid length. [ 987.103265][T24373] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5314'. [ 987.114462][T24373] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 987.126364][T24381] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5317'. [ 987.138107][T24383] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5318'. [ 987.317961][T24391] netlink: 2739 bytes leftover after parsing attributes in process `syz.1.5319'. [ 987.813554][T24392] device syzkaller0 entered promiscuous mode [ 989.402608][T24415] ------------[ cut here ]------------ [ 989.408350][T24415] WARNING: CPU: 0 PID: 24415 at kernel/events/core.c:6592 perf_pending_task+0x353/0x480 [ 989.418187][T24415] Modules linked in: [ 989.422105][T24415] CPU: 0 PID: 24415 Comm: syz.3.5325 Not tainted syzkaller #0 [ 989.430217][T24415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 989.440533][T24415] RIP: 0010:perf_pending_task+0x353/0x480 [ 989.446297][T24415] Code: e8 d2 82 da ff 84 db 75 10 e8 69 80 da ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 59 80 da ff e8 dc cf 58 ff eb e9 e8 4d 80 da ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 989.466126][T24415] RSP: 0018:ffffc9000da1f888 EFLAGS: 00010293 [ 989.472259][T24415] RAX: ffffffff81a7b3a3 RBX: ffff8880654d5e58 RCX: ffff88801bb9da00 [ 989.480281][T24415] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 989.488326][T24415] RBP: ffff8880654d5c20 R08: ffff8880b8e3580b R09: 1ffff110171c6b01 [ 989.496320][T24415] R10: dffffc0000000000 R11: ffffed10171c6b02 R12: ffff88801bb9da00 [ 989.504344][T24415] R13: ffff888077a90d60 R14: 0000000000000000 R15: 1ffff1100ca9ab84 [ 989.512369][T24415] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 989.521366][T24415] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 989.528071][T24415] CR2: 000000110c35c7f6 CR3: 00000000771c6000 CR4: 00000000003506f0 [ 989.536052][T24415] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 989.544086][T24415] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 989.552107][T24415] Call Trace: [ 989.555414][T24415] [ 989.558413][T24415] task_work_run+0x1d0/0x260 [ 989.563158][T24415] ? task_work_cancel+0x220/0x220 [ 989.568232][T24415] ? do_raw_spin_unlock+0x11d/0x230 [ 989.573467][T24415] do_exit+0x9d5/0x2570 [ 989.577768][T24415] ? nfs_stat_to_errno+0x170/0x170 [ 989.582965][T24415] ? put_task_struct+0x80/0x80 [ 989.587888][T24415] ? lock_chain_count+0x20/0x20 [ 989.592781][T24415] do_group_exit+0x229/0x2e0 [ 989.597519][T24415] ? lockdep_hardirqs_on+0x94/0x140 [ 989.602731][T24415] get_signal+0x1259/0x1340 [ 989.607310][T24415] arch_do_signal_or_restart+0xc4/0x1310 [ 989.613084][T24415] ? ct_nmi_exit+0x145/0x1c0 [ 989.617740][T24415] ? get_sigframe_size+0x10/0x10 [ 989.622696][T24415] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 989.628774][T24415] ? exit_to_user_mode_loop+0x3b/0x110 [ 989.634380][T24415] exit_to_user_mode_loop+0x70/0x110 [ 989.639721][T24415] exit_to_user_mode_prepare+0xee/0x180 [ 989.645301][T24415] irqentry_exit_to_user_mode+0x5/0x30 [ 989.650817][T24415] exc_general_protection+0x164/0x1f0 [ 989.656216][T24415] ? exc_page_fault+0x88/0x100 [ 989.661043][T24415] asm_exc_general_protection+0x22/0x30 [ 989.666644][T24415] RIP: 0033:0x7f1995b9dea1 [ 989.671108][T24415] Code: Unable to access opcode bytes at 0x7f1995b9de77. [ 989.678265][T24415] RSP: 002b:0000200000000080 EFLAGS: 00010217 [ 989.684449][T24415] RAX: 0000000000000000 RBX: 00007f1995e25fa0 RCX: 00007f1995b9de99 [ 989.692495][T24415] RDX: 0000200000000100 RSI: 0000200000000080 RDI: 0000000000001000 [ 989.700576][T24415] RBP: 00007f1995c33eaf R08: 0000200000000440 R09: 0000200000000440 [ 989.708647][T24415] R10: 0000200000000340 R11: 0000000000000206 R12: 0000000000000000 [ 989.716660][T24415] R13: 00007f1995e26038 R14: 00007f1995e25fa0 R15: 00007ffc4297a638 [ 989.724711][T24415] [ 989.727819][T24415] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 989.735102][T24415] CPU: 0 PID: 24415 Comm: syz.3.5325 Not tainted syzkaller #0 [ 989.742553][T24415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 989.752605][T24415] Call Trace: [ 989.755894][T24415] [ 989.758846][T24415] dump_stack_lvl+0x188/0x24e [ 989.763523][T24415] ? memcpy+0x3c/0x60 [ 989.767493][T24415] ? show_regs_print_info+0x12/0x12 [ 989.772687][T24415] ? load_image+0x410/0x410 [ 989.777182][T24415] panic+0x2d3/0x710 [ 989.781066][T24415] ? bpf_jit_dump+0xd0/0xd0 [ 989.785580][T24415] __warn+0x2f8/0x4f0 [ 989.789561][T24415] ? perf_pending_task+0x353/0x480 [ 989.794688][T24415] ? perf_pending_task+0x353/0x480 [ 989.799791][T24415] report_bug+0x2ba/0x4f0 [ 989.804177][T24415] ? perf_pending_task+0x353/0x480 [ 989.809549][T24415] handle_bug+0x3a/0x70 [ 989.813740][T24415] exc_invalid_op+0x16/0x40 [ 989.818237][T24415] asm_exc_invalid_op+0x16/0x20 [ 989.823076][T24415] RIP: 0010:perf_pending_task+0x353/0x480 [ 989.828817][T24415] Code: e8 d2 82 da ff 84 db 75 10 e8 69 80 da ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 59 80 da ff e8 dc cf 58 ff eb e9 e8 4d 80 da ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 989.848557][T24415] RSP: 0018:ffffc9000da1f888 EFLAGS: 00010293 [ 989.854622][T24415] RAX: ffffffff81a7b3a3 RBX: ffff8880654d5e58 RCX: ffff88801bb9da00 [ 989.862610][T24415] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 989.870584][T24415] RBP: ffff8880654d5c20 R08: ffff8880b8e3580b R09: 1ffff110171c6b01 [ 989.878561][T24415] R10: dffffc0000000000 R11: ffffed10171c6b02 R12: ffff88801bb9da00 [ 989.886609][T24415] R13: ffff888077a90d60 R14: 0000000000000000 R15: 1ffff1100ca9ab84 [ 989.894604][T24415] ? perf_pending_task+0x353/0x480 [ 989.899718][T24415] ? perf_pending_task+0x353/0x480 [ 989.904823][T24415] task_work_run+0x1d0/0x260 [ 989.909411][T24415] ? task_work_cancel+0x220/0x220 [ 989.914436][T24415] ? do_raw_spin_unlock+0x11d/0x230 [ 989.919638][T24415] do_exit+0x9d5/0x2570 [ 989.923804][T24415] ? nfs_stat_to_errno+0x170/0x170 [ 989.928908][T24415] ? put_task_struct+0x80/0x80 [ 989.933698][T24415] ? lock_chain_count+0x20/0x20 [ 989.938554][T24415] do_group_exit+0x229/0x2e0 [ 989.943161][T24415] ? lockdep_hardirqs_on+0x94/0x140 [ 989.948366][T24415] get_signal+0x1259/0x1340 [ 989.952877][T24415] arch_do_signal_or_restart+0xc4/0x1310 [ 989.958509][T24415] ? ct_nmi_exit+0x145/0x1c0 [ 989.963088][T24415] ? get_sigframe_size+0x10/0x10 [ 989.968042][T24415] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 989.974027][T24415] ? exit_to_user_mode_loop+0x3b/0x110 [ 989.979496][T24415] exit_to_user_mode_loop+0x70/0x110 [ 989.984776][T24415] exit_to_user_mode_prepare+0xee/0x180 [ 989.990328][T24415] irqentry_exit_to_user_mode+0x5/0x30 [ 989.995825][T24415] exc_general_protection+0x164/0x1f0 [ 990.001199][T24415] ? exc_page_fault+0x88/0x100 [ 990.005951][T24415] asm_exc_general_protection+0x22/0x30 [ 990.011489][T24415] RIP: 0033:0x7f1995b9dea1 [ 990.015897][T24415] Code: Unable to access opcode bytes at 0x7f1995b9de77. [ 990.022922][T24415] RSP: 002b:0000200000000080 EFLAGS: 00010217 [ 990.028976][T24415] RAX: 0000000000000000 RBX: 00007f1995e25fa0 RCX: 00007f1995b9de99 [ 990.036936][T24415] RDX: 0000200000000100 RSI: 0000200000000080 RDI: 0000000000001000 [ 990.044905][T24415] RBP: 00007f1995c33eaf R08: 0000200000000440 R09: 0000200000000440 [ 990.052913][T24415] R10: 0000200000000340 R11: 0000000000000206 R12: 0000000000000000 [ 990.060886][T24415] R13: 00007f1995e26038 R14: 00007f1995e25fa0 R15: 00007ffc4297a638 [ 990.068859][T24415] [ 990.072045][T24415] Kernel Offset: disabled [ 990.076363][T24415] Rebooting in 86400 seconds..