last executing test programs: 12m35.369555896s ago: executing program 4 (id=2234): r0 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x4bfcba7ac371de4d) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', r3, 0x4000, r0}, 0x18) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYRES8=r2, @ANYRES8=r4], 0x12) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0xaa}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f900000fb702000005000000b7030000ff0300008500000072000000850000000f0000009500000000000000770d84419072b311a453cf4011a66710e93c1eb116b4"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x31) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x8000, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x3, 0x5, 0x8000, 0x124}, 0x10, 0x92ee, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) r9 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r9, 0x6, 0x1b, &(0x7f0000000100), 0x4) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f00000001c0)=[{0x20, 0x0, 0x3f, 0xfffff000}, {0x16, 0x0, 0x6, 0xa}]}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f00000001c0)="7b4d62fa24bc8822", 0x0}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000a8c5000000a50000001801000020206405000000000004000f7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r10, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r11, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x114}, 0x10) setsockopt$sock_attach_bpf(r12, 0x1, 0x22, &(0x7f00000018c0), 0x4) socket$kcm(0x10, 0x400000002, 0x0) 12m34.858288511s ago: executing program 4 (id=2237): perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0xc, 0x100020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x9, 0x5, 0xd, 0xa6a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000febfffff0000000003000000850000004100000018010000696c6c2500000000002020207b1ae8ff00000000bfa100000000000007010000f805ffffb702000008000006b703000003000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = openat$cgroup_int(r1, &(0x7f0000001180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYBLOB='-', @ANYRESOCT=r0], 0x81) 12m34.299773099s ago: executing program 4 (id=2242): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x800, 0xffffffffffffffff, 0x7}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) 12m34.007593489s ago: executing program 4 (id=2244): r0 = getpid() (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) (async) recvmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[@ANYRES8=r2, @ANYRES16=r1], 0x9a) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x2, 0xfff, 0x3, 0x800, r3, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3, 0x2}, 0x50) (async) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x1c842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x2) (async) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x410644f5, 0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r5, 0x0, 0x2, 0x0) (async) setsockopt$sock_attach_bpf(r4, 0x29, 0x23, &(0x7f0000000040), 0xcf) (async) socket$kcm(0x2, 0x1000000000000002, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0x3) 12m33.764305246s ago: executing program 4 (id=2247): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7ffe, 0xe}, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) write$cgroup_devices(r2, &(0x7f00000005c0)=ANY=[], 0xfffffeff) syz_clone(0x8001000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2002, 0x0) ioctl$TUNSETVNETBE(r5, 0x400454de, &(0x7f0000000100)=0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r4, 0x58, &(0x7f0000000140)}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f0000000080)='GPL\x00'}, 0x94) 12m32.361598152s ago: executing program 4 (id=2259): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x100}, 0x8, 0x7, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe58d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x10bda3f160f25e31, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) write$cgroup_freezer_state(r3, &(0x7f0000000080)='FROZEN\x00', 0x7) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x32, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0, 0x0, 0x0, 0xfffffffffffffc82}, 0x0) r5 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000010) recvmsg(r1, 0x0, 0x40010122) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000003fe4d631851fdb6a4790c5a5", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xa, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000010010000000000000e00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000400000000ff090000080000000000009500000000000000bf9100000000ae0e00000000020000008500000085000000b7000000000000009500000000000000"], 0x0, 0x4d9, 0x0, 0x0, 0x40f00, 0x56, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x50}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x17, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r6 = socket$kcm(0x10, 0x0, 0x4) close(r6) 12m17.255642195s ago: executing program 32 (id=2259): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x100}, 0x8, 0x7, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe58d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x10bda3f160f25e31, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) write$cgroup_freezer_state(r3, &(0x7f0000000080)='FROZEN\x00', 0x7) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x32, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0, 0x0, 0x0, 0xfffffffffffffc82}, 0x0) r5 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000010) recvmsg(r1, 0x0, 0x40010122) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000003fe4d631851fdb6a4790c5a5", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xa, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000010010000000000000e00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000400000000ff090000080000000000009500000000000000bf9100000000ae0e00000000020000008500000085000000b7000000000000009500000000000000"], 0x0, 0x4d9, 0x0, 0x0, 0x40f00, 0x56, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x50}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x17, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r6 = socket$kcm(0x10, 0x0, 0x4) close(r6) 10.238007189s ago: executing program 5 (id=6429): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x22, &(0x7f0000000280), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004000000000000c7528a63692a0c70c21322368999a0cb092d2178e440f37db62169a72310a45b1627d03549a8471cd37926906a2421e9a0b7151b7a3950d80ebf8aaf5a17ceadd3dede0053ae923c650199e73f07c5030b0d53"], 0x0, 0x26}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x0, @loopback, 0x2}}, 0x80, 0x0}, 0x80) perf_event_open$cgroup(&(0x7f0000001200)={0x1, 0x80, 0x4, 0xc8, 0x6, 0x2, 0x0, 0x40f, 0x80000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x6, 0x1}, 0xa00, 0xfffffffffffffffe, 0x1ff, 0x7, 0x9f3a, 0x9, 0x400, 0x0, 0xfffff4a7, 0x0, 0xd56}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000dc0)={r1, 0x0, 0x0, 0x0, &(0x7f0000000bc0), 0x0, 0x9, 0x0, 0x34, 0x13, &(0x7f0000000cc0)="e57ff0a61dacbd871e04c0cc7b53b4007c9dc68fb2ceaba0a54ec5a08f8b216ec135e4368b8bd3f3b548ba69c66d475b027d5a90", &(0x7f0000000d80)="331f70907795577ce63a7d085035dd6c1a8489", 0x4, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001100)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0x9c, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000680)={r4}) sendmsg$inet(r4, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="9f6b050000000000d14a3ade42c2ae404a76000000000c0000000c000000020000000200000000000004ff000000000013c85fc4359fb0a7524f5976843f175a6973b17b702904da6a41490b2103b4ac42726ade252d81741b46fa20b97707bf9267783c0f25a9eb78d28569a0d2ba84d04311c5c52437c1230ea6f37510929dfabf201f740cae4bfd43e8f0168960c32d484330889e9de493a43d6f2445d1040ce063c32c786c0066fe6539c59ac863bd1bbddc13baa8802e381843f0fb055b9ed476ecc43330010fa34b"], 0x0, 0x26}, 0x28) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000001000)=r5) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001580)={r5, 0xe0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001300)=[0x0, 0x0], &(0x7f0000001340), 0x0, 0x22, &(0x7f0000001380)=[{}, {}], 0x10, 0x0, 0x0, &(0x7f0000001400), 0x8, 0xb7, 0x8, 0x8, &(0x7f0000001440)}}, 0x10) r9 = openat$cgroup_ro(r1, &(0x7f00000015c0)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x1d, 0x1c, &(0x7f0000000e40)=ANY=[@ANYBLOB="18000000e30c0000000000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0b00000000850000b70500000800000085000000a5000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000f40)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, @lsm=0x2b, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001280)={0x0, 0xc, 0x400, 0x3}, 0x10, r8, r7, 0x0, &(0x7f0000001600)=[r9], &(0x7f0000001640), 0x10, 0x7d29}, 0x94) close(r6) 9.028556262s ago: executing program 5 (id=6435): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@volatile={0x3, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000c40)=""/4096, 0x28, 0x1000, 0x1}, 0x28) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4040000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)='%pB \x00'}, 0x20) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f109e", 0x2a}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12b6", 0x98}], 0x2}, 0x4000000) 8.62418019s ago: executing program 5 (id=6441): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000000)=ANY=[@ANYBLOB="fc"]) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x6, 0xfe, 0x7, 0x0, 0x5d31, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x3a}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x400}, 0x0, 0xe, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x595b01, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10200, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFINDEX(r6, 0x400454da, 0x0) 6.86596054s ago: executing program 5 (id=6451): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@volatile={0x3, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000c40)=""/4096, 0x28, 0x1000, 0x1}, 0x28) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4040000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)='%pB \x00'}, 0x20) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f109e", 0x2a}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12b6", 0x98}], 0x2}, 0x4000000) 6.560214361s ago: executing program 5 (id=6456): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r1 = socket$kcm(0xa, 0x2, 0x73) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x38, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80000000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x10}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x1, 0x9, 0x7e715267, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000180)=[r0, r3, r0, r0, r0], &(0x7f0000000240)=[{0x1, 0x5, 0x9, 0x5}, {0x3, 0x1, 0x0, 0x4}, {0x3, 0x5, 0x7, 0x7}, {0x5, 0x3, 0x4, 0x6}, {0x1, 0x5, 0x4, 0x5}], 0x10, 0x4}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a62200020000000000", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) (async) socket$kcm(0xa, 0x2, 0x73) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x38, 0x10}, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80000000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x10}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x1, 0x9, 0x7e715267, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000180)=[r0, r3, r0, r0, r0], &(0x7f0000000240)=[{0x1, 0x5, 0x9, 0x5}, {0x3, 0x1, 0x0, 0x4}, {0x3, 0x5, 0x7, 0x7}, {0x5, 0x3, 0x4, 0x6}, {0x1, 0x5, 0x4, 0x5}], 0x10, 0x4}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a62200020000000000", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) 6.338346766s ago: executing program 5 (id=6458): socket$kcm(0x2b, 0x1, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5c31, 0x914, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup, 0x15, 0x718255c667f6b0f4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000040), 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x91, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x6}, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1fb621ab}, 0x0, 0xffffffffffffffff, r0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000940)=""/226, 0xe2}, {&(0x7f0000003a00)=""/4057, 0xfd9}, {&(0x7f0000004a00)=""/4110, 0x100e}, {&(0x7f0000000500)=""/121, 0x79}], 0x4}, 0x0) recvmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x0) close(r2) socket$kcm(0x2b, 0x1, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5c31, 0x914, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup, 0x15, 0x718255c667f6b0f4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) write$cgroup_type(r1, &(0x7f0000000040), 0x9) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x91, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x6}, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1fb621ab}, 0x0, 0xffffffffffffffff, r0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) recvmsg$kcm(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000940)=""/226, 0xe2}, {&(0x7f0000003a00)=""/4057, 0xfd9}, {&(0x7f0000004a00)=""/4110, 0x100e}, {&(0x7f0000000500)=""/121, 0x79}], 0x4}, 0x0) (async) recvmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x0) (async) close(r2) (async) 5.655446273s ago: executing program 0 (id=6464): r0 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYRES8=r0, @ANYRESOCT=r0], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x60000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x6, 0x4}, 0x0, 0x5, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00c80ecdb4cb9f207c804a00d00000088080efb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700760409"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000b80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, 0x0}, 0x2042) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r6) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00', @ANYRES32], 0x50) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1d, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000c56147d1526209240000e900000000000000000000000050f3cf49de7d746306f22be355417345da2816328d7e44470311a5a400cba63587982b8ad3995b01121e02b7d265b6d0dc681bf7db0f716a0558e69d218e468acca13ed7a5d1c6087d8f47585131d5c87867257d653838c61fea91895a89c6cdaff43c7b9a060668b0420329eb0a06406a6d3d61d347d9c5423dd0fce70651ece3d04260120e3cbe63376a143f00d63284e39c2a3a1595f2afe305f471bfc7abc8a07a0359faab4c56389c8f53ec3ffc7141b989002e38285d7556fc99fc11c2622be8", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r10) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180)=r1, 0xf9) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000001419"], 0x48) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) 5.022015276s ago: executing program 2 (id=6467): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000000000000000000037e6b0a1fa6b314e4483414f26a793ae287c1151d95c1c3554ff3c945a35fe6b926a0a39f5c3a9dc9942ef9107f409382b3c005ae528243e779da0a6f45e6457804e27040dc1a327e4ea4198fb0b6824c8d91ec9a5f8e40211592726df68a40e2aecc3292ab4ab4d65ccbb984deb58e78ab9481f32d4e90251974292ed5038b01449d9879b1f4b4414b136423b1882879ffc320b033797d158a3a41ae6d73a1b92d46d3d76ddbb4088de2107cca242540f7341c0cab2d29f8f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000000100), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r0, 0x0, &(0x7f0000000480)=""/78}, 0x20) 4.710132798s ago: executing program 3 (id=6469): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2b7, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8927, &(0x7f0000000280)={'wg2\x00'}) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x85, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x12) r2 = socket$kcm(0xa, 0x6, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r2, 0x29, 0x1b, &(0x7f0000000100)=r3, 0x120) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x7, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x0, 0x10000}, {0x10000002, 0x0, 0x0, 0x9}]}, 0x90) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xa9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_config_ext={0x1, 0x6}, 0x800, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000000c0)='cpu\t>-&&\t') perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x1, 0x5, 0xa, 0x9, 0x0, 0x4, 0x4000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000080), 0x6}, 0x34, 0x9, 0x4, 0x8, 0x5, 0x4, 0x2, 0x0, 0x5, 0x0, 0x8}, r4, 0x2, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x29, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) close(0x3) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$TUNSETDEBUG(r9, 0x400454c9, &(0x7f0000000380)=0x6) r10 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r10, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000280)="b64a7d06e786a437c4db2c5707de4fc5b1051736b7373aaba91c395e593a059ad2273a16478ec867a9de32b10e5573c7d6024b0e2888e60554b4d0f2514311cecbcd7b7fb10a32553f3037b431ab8f8f68c1af0ed4a1a3667e07b7498d77fb576f0ebcce3728fa1ace0db2b7c01246b449503ba9ebe9d35602ccfca085f6edabf2a5c80b4342a2037f391068a2484229081987e2e62e15cd6a0a6b185fffe5c5362d5f9c0cf4337e2ae6099f887016774e4f22e035c5bfff340049261f22ccbe8b2c859db32cd3a6abcb9329c76cdb63aebdb64cd9b43bcb18008f0c", 0xdc}, {&(0x7f0000000440)="0e7b226b5de5d8a7ed5d81a3da51df0d9dc985114b1dc29d7dad04f30a9afd906ee1ef184cadeb061cd5d589882d882ce3c4c7b50f9bc6c4f5b048aeafeb8d720bf888d1c8fddfa5089a9a278027bd7634ee108e8aadc2dab03f56f98d010be2111538c7177cd4c49f137bbe209b8e71ed9cef7df3485b87f568cbfc6099d51e5194b7b4cd5c269a002b389b93f4982ea72638fe41a7e9cb516099a8cdd3e5cc50d601", 0xa3}, {&(0x7f0000000500)="225e8d2ab032f2844c7b032c493c28a537ff9d83510f740d8a75915db6bfedd61f4c290f5393402e731d7d13894df0f4627f812cfa181ac987e832b26b59178acdde50f4ef7902511d468a32ccd616b99501bb30ddb4d240e720b5aa91d9f53cc9aeca28de4d7f134a32744123a40f3d0c48d60c0ad2f609b4a649add168cef2016a94c92b9c7ba0bb31369db091feb05df471c0a50627ba66fe51cae487ea804f", 0xa1}, {&(0x7f00000005c0)="66cef24786274efba552bf64d4218e9154a01bf9a07b366dc5fe6d4a13e3bf33c96392cec3aeb55fffc1f9a85777e7dad477168e456b283819f56579ec924bd19523043ee99bcf57abed6b0497d1431c6496f5cdfa3301ce614e45d06f517430924bb62247aca25321108c688827b341fba38436951b47d1a7c9ed32d78d3ecebb06401f9d19dd530cc5948f7a85cb31c69c20b82aca8c8bcf578418ee7d4d8edeb1d92d103b3182ed1445015d23e01df18ffff83ec83830fbd719585b9880f54145571a821028cf3274c024519619d493f6ac7ef81068a2a1bfb004718b73bd16aa5b671f2cf498cf", 0xe9}, {&(0x7f00000006c0)="b1009f941351bc9e6c79bc62224e452a8303a03c54cfcd9495c9ac0f8130619ebc1b324c7872f6d0ea94a371670337980cc17f0f352ff1fb073d44bc7e101b30e79191c326d4fe905e3190a4784c6ee5ae744dbd645da49eba292fefed29912b3ee243947f450e91b1f493572874ea4baa9f6cde43e5bdb3432f22115decfc07aa2090ca291f4cc20559c1db1b398c602c273b2e", 0x94}], 0x5, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x3a8}, 0x0) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001340)='./cgroup/syz0\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_int(r11, &(0x7f00000003c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f0000001480)=ANY=[@ANYBLOB='a'], 0x6a) 4.709197638s ago: executing program 0 (id=6470): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811000077e508d2c9bd7206f1bdc1d1efc510078f1259664ef6a1aae620f3289302a6cd0bdfe204faf42ddd7fa66b7c67e2d36aecfbaecf7d855a0772d3b0bed222c3ae17845fb003011b385fb1f486de1a9c42408e5e185c775908", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000539d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x6, [@typedef={0x4, 0x0, 0x0, 0x8, 0x2}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x4, 0xa}, @fwd={0x5}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x2}]}, @union={0xf, 0x2, 0x0, 0x5, 0x1, 0x214, [{0xa, 0x1, 0x5}, {0x8, 0x4, 0x6}]}, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x61, 0x2e, 0x61, 0x5f]}}, &(0x7f0000000a00)=""/1, 0x8a, 0x1, 0x0, 0xa}, 0x28) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x17, 0x0, 0x4, 0xfd}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r4 = socket$kcm(0x2b, 0x1, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.kill\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x6, 0x12, &(0x7f0000000200)=r5, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r7}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r6}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES32=r0, @ANYRESOCT=r2, @ANYRESDEC=r7], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0x2b, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc29a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002fee702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) 4.502402321s ago: executing program 2 (id=6471): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x808, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x4}, 0x4108, 0x3, 0x0, 0x6, 0x7, 0xffffffff, 0x802, 0x0, 0xffffffff, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x19) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') ioctl$TUNGETFEATURES(r3, 0x5452, &(0x7f00000013c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x81, 0x6, 0x9, 0x0, 0xd98e, 0x11c, 0xa, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xba8, 0x2, @perf_config_ext={0x1, 0x9ca7}, 0x110002, 0x48000000000, 0x6, 0x3, 0xb, 0x60, 0x4, 0x0, 0x400000, 0x0, 0x1}, r5, 0xb, 0xffffffffffffffff, 0xa) sendmsg$unix(r4, &(0x7f00000002c0)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f00000001c0)="85ecbec863b39d6329e49171cc82c16fc1b68c48b32407dd4fdf7f0bfa77e9ba15bb700b1373d42a680e842702602147e2c202aa68e86781be6b5f967d92145c606deaac", 0x44}], 0x1, &(0x7f0000000280)=[@cred={{0x1c, 0x1, 0x2, {r5, 0xee01, 0xffffffffffffffff}}}], 0x20, 0x400c000}, 0x40000) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x9, 0x8, 0x1, 0x7, 0x0, 0x2, 0x10000, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp, 0x100002, 0x0, 0xa, 0x6, 0x3ffb, 0x8, 0xbbfe, 0x0, 0x7412ca43, 0x0, 0x8}, r5, 0xd, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x10, 0x0, 0x0, 0x8, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8040) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeff, 0x1, @perf_config_ext={0xfffffffffffffffb, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffff4, 0x2}, 0x0, 0x100000000, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4c}, 0x0, 0x2, 0x0, 0x0, 0x201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4083, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xe7c}, 0x7a) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000100)=r7, 0x120) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f0, &(0x7f0000000080)) 4.09372033s ago: executing program 0 (id=6473): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={r0, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000b00)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000b40)=[0x0], &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1e, &(0x7f0000000bc0)=[{}, {}], 0x10, 0x10, &(0x7f0000000c00), &(0x7f0000000c40), 0x8, 0x3e, 0x8, 0x8, &(0x7f0000000c80)}}, 0x10) (async) r1 = socket$kcm(0x2, 0x200000000000003, 0x106) (async) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0xa, 0x0, @private}}, 0x80, 0x0}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)="2e00000038000511d25a80698c63940d0224fc602f6e35400c000200681ec00037153e370a000180256400d1bd74", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) (async) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd055, 0x200}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0xf}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x15, 0x5, 0x0) (async, rerun: 64) socket$kcm(0x11, 0x200000000000002, 0x300) (async, rerun: 64) r7 = socket$kcm(0x11, 0x2, 0x0) r8 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r8, 0x107, 0x12, &(0x7f00000000c0)=r7, 0x8) (async) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000800)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)="d1", 0x1}], 0x1}, 0x4c081) (async) setsockopt$sock_attach_bpf(r6, 0x114, 0x1d, 0x0, 0xfea5) setsockopt$sock_attach_bpf(r1, 0x0, 0x5, 0x0, 0x0) (async) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000a80)={0x5, 0x80, 0x8, 0x10, 0xb, 0x6, 0x0, 0x5, 0x80000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000180), 0x1}, 0x428, 0x2, 0x3, 0x7, 0x3, 0x8, 0x10, 0x0, 0x2, 0x0, 0xb}) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r9, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x13, 0xa, &(0x7f0000000100)=@framed={{0x18, 0x8, 0x0, 0x0, 0xfffffff9}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x62, 0x8, 0x4, 0x5}, @initr0, @exit]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 3.690342367s ago: executing program 3 (id=6475): openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x2b, 0x7, 0x3, 0x0, 0x0, 0x4, 0x18c10, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1, 0x4, 0x9, 0x8, 0x6, 0x2, 0x4, 0x0, 0x400, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0xe, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@map_fd={0x18, 0x4, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7fff}, @alu={0x4, 0x1, 0x2, 0x6, 0x5, 0x6, 0x4}, @map_fd, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xdad}, @initr0={0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000180)='syzkaller\x00', 0x9f7, 0x87, &(0x7f00000001c0)=""/135, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0xd, 0xd5, 0xd0}, 0x10, 0x2d741, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x5, 0x0, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x50) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0x0, 0x2, 0x8}, 0xc) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0), 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x58, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@int={0xf, 0x0, 0x0, 0x1, 0x0, 0x6f, 0x0, 0x73, 0x4}]}, {0x0, [0x5f, 0x41, 0x2e]}}, &(0x7f00000008c0)=""/232, 0x2d, 0xe8, 0x1, 0x5, 0x10000}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)=r1}, 0x20) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000b80), &(0x7f0000000bc0)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x2b, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @generic={0x5, 0x5, 0xc, 0x1, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc35, 0x0, 0x0, 0x0, 0xd}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9f}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000680)='syzkaller\x00', 0x8, 0xd2, &(0x7f00000006c0)=""/210, 0x61780, 0x6, '\x00', r5, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a00)={0x4, 0x0, 0x9, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c40)=[r7, r8, r9], 0x0, 0x10, 0x5}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000e80)={r8, 0x58, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f80)={0x6, 0x6, &(0x7f0000000d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, [@map_fd={0x18, 0x7, 0x1, 0x0, r4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000d80)='syzkaller\x00', 0x6, 0xe, &(0x7f0000000dc0)=""/14, 0x40f00, 0x0, '\x00', r10, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ec0)={0x0, 0xd, 0x3ff, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000f00)=[r4, r2, r8, r8, r3, r2, 0x1], &(0x7f0000000f40)=[{0x3, 0x4, 0xf, 0x2}], 0x10, 0x3}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000001040)=r11, 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000001080)=r11, 0x4) r12 = perf_event_open(&(0x7f00000010c0)={0x5, 0x80, 0x9, 0x1, 0x2, 0x6, 0x0, 0xf5, 0x8000, 0x7, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x2, @perf_config_ext={0x9, 0xfffffffffffffff5}, 0x1574, 0xfff, 0xdfed, 0x6, 0x5, 0xdff52ff5, 0x0, 0x0, 0xaa, 0x0, 0x6}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) gettid() ioctl$PERF_EVENT_IOC_SET_OUTPUT(r12, 0x2405, r4) ioctl$TUNGETVNETBE(r9, 0x800454df, &(0x7f0000001140)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001200)={{r3, 0xffffffffffffffff}, &(0x7f0000001180), &(0x7f00000011c0)='%-010d \x00'}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001340)={@cgroup=r4, 0x34, 0x0, 0xfff, &(0x7f0000001240)=[0x0], 0x1, 0x0, &(0x7f0000001280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000012c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000015c0)={{r4, 0xffffffffffffffff}, &(0x7f0000001540), &(0x7f0000001580)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x11, 0x10, &(0x7f0000001380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ldst={0x0, 0x2, 0x1, 0x2, 0x8, 0x20, 0xfffffffffffffffb}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001400)='syzkaller\x00', 0x9, 0x58, &(0x7f0000001440)=""/88, 0x40f00, 0x60, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f00000014c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000001500)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001600)=[r7, r14, r13, r3, r4, 0x1, r3], &(0x7f0000001640)=[{0x4, 0x3, 0xa, 0xa}, {0x4, 0x1, 0x1, 0xb}], 0x10, 0x1}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000019c0)={{r8, 0xffffffffffffffff}, &(0x7f0000001940), &(0x7f0000001980)='%pK \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x2006fb30496ef52e, 0x4, &(0x7f0000001740)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x19}, @jmp={0x5, 0x1, 0xa, 0x0, 0x6, 0xfffffffffffffff8, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x9}], &(0x7f0000001780)='GPL\x00', 0x5, 0xee, &(0x7f00000017c0)=""/238, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000018c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000001900)={0x5, 0x8, 0xffff1893, 0x10001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[r14, r14, r8, r15], 0x0, 0x10, 0xffff0000}, 0x94) socket$kcm(0x29, 0x8, 0x0) r16 = bpf$ITER_CREATE(0x21, &(0x7f0000001b80)={r4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0x1f, 0x5, &(0x7f0000001b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xad20}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x90}]}, &(0x7f0000001b40)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x4, '\x00', r5, @fallback=0xa, r16, 0x8, &(0x7f0000001bc0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000001c00)={0x4, 0x0, 0xfffff250, 0x7ff}, 0x10, 0x0, r4, 0x6, &(0x7f0000001f40)=[r2, r8, r8, r15, r8, r3], &(0x7f0000001f80)=[{0x1, 0x4, 0xf, 0xc}, {0x1, 0x1, 0x1, 0x2}, {0x4, 0x5, 0x0, 0x3}, {0x4, 0x3, 0xb, 0x5}, {0x3, 0x3}, {0x3, 0x2, 0x1, 0x6}], 0x10, 0x8000}, 0x94) 3.618145362s ago: executing program 2 (id=6476): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, {0xa, 0xfffd, 0x0, @local}}}, 0x80, 0x0}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="5f12db07003c8cb6103157f4f2499b4e063fe7ecddea5a53430ce4e8089b", @ANYRES32, @ANYBLOB="000000000002000000000000000000000080", @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYRES32], 0x48) (async) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x98) (async) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x80, 0x0, 0x8, 0x0, 0x4000003, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYRESHEX=r1], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xc}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) r4 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5, 0x3}, 0x80, 0x0}, 0x20000000) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x2, 0x3, 0x84) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) (async) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x161) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8918, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)}, 0x0) (async) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a0053ea"], 0xfe33) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, 0x0) socket$kcm(0x1e, 0x4, 0x0) r8 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r8, 0x10e, 0xb, &(0x7f0000000080), 0x4) (async) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)}, 0x4880) (async) socket$kcm(0xa, 0x2, 0x3a) (async) ioctl$TUNSETCARRIER(r5, 0x400454e2, &(0x7f00000005c0)=0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1e, 0x17, &(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYRES32], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8916, &(0x7f0000000040)={'ipvlan1\x00', @random="0200ac7f7e00"}) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1, @perf_bp={0x0}, 0x108021, 0x0, 0x0, 0x6, 0xfffffffffffffffd, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.597998804s ago: executing program 0 (id=6477): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@volatile={0x3, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000c40)=""/4096, 0x28, 0x1000, 0x1}, 0x28) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4040000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)='%pB \x00'}, 0x20) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f109e", 0x2a}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12b6", 0x98}], 0x2}, 0x4000000) 3.450183564s ago: executing program 1 (id=6478): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0, @exit, @alu={0x4, 0x0, 0x0, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0xc0045878, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xb, &(0x7f0000000040)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ldst={0x0, 0x3, 0x6, 0x3, 0x2, 0xffffffffffffffe0, 0xa6ae69461a44be08}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x4, 0xe, 0x80000000, 0x400}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000001c0)=[{0x2, 0x2, 0xb, 0xb}, {0x5, 0x3, 0x6, 0xb}, {0x4, 0x5, 0x0, 0x9}, {0x2, 0x4, 0x10, 0x9}], 0x10, 0x3ff}, 0x94) 3.35843058s ago: executing program 3 (id=6479): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff070000000000000000000085000000ae00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x2, 0x9000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r3}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async, rerun: 64) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async, rerun: 64) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.22019124s ago: executing program 1 (id=6480): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x4000, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x100000000, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x1828a6, 0xca, 0x2, 0x0, 0x4, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x0, 0x27}, 0x28) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[@ANYRES8=r1], 0x12) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000600)) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x4}, 0x18) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x400, 0x2d, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) socket$kcm(0x21, 0x2, 0x2) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000006c0)={0x6, 0x80, 0xd3, 0xec, 0x1, 0x2, 0x0, 0x3, 0x200, 0x7, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x400, 0x0, @perf_bp={&(0x7f0000000680), 0xe}, 0x0, 0x99d1, 0x400, 0x9, 0xb48, 0x80000000, 0x3, 0x0, 0x6, 0x0, 0x7}) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x1) socket$kcm(0x23, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x600c00, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x4f}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x98, &(0x7f00000002c0)=""/152, 0x0, 0x0, '\x00', 0x0, 0x0, r6}, 0x94) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x22, 0x2, 0x21) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 3.05528675s ago: executing program 3 (id=6481): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000bcfffff400000000000000008500000041000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8000007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xc8e}, 0x50) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x208}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020013003505d25a806f8c6394f97e24fc6004030e000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) (async) r4 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r4, &(0x7f0000000c00)={&(0x7f0000000380)=@ax25={{0x3, @netrom}, [@netrom, @bcast, @rose, @rose, @bcast, @rose, @remote, @netrom]}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000680)=""/190, 0xbe}, {&(0x7f0000000740)=""/129, 0x81}, {&(0x7f0000000800)=""/88, 0x58}, {&(0x7f0000000880)=""/98, 0x62}, {&(0x7f0000000900)=""/154, 0x9a}, {&(0x7f0000000a40)=""/65, 0x41}], 0x6, &(0x7f0000000b40)=""/167, 0xa7}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5, 0xffffffffffffffff}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r6}, &(0x7f0000000040), &(0x7f0000000500)=r2}, 0x20) 2.873999903s ago: executing program 2 (id=6482): bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @perf_config_ext={0x0, 0x2}, 0x104411, 0x8, 0x8, 0x0, 0x4000002, 0x0, 0x0, 0x0, 0xfff80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x15}, 0x94) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x104007, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0xe, 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="1800000000000000000000000000000020000000000000109500000000800000927f612271fa2115eb750ae0a2d028206b87ac8a8c5b463de1f9f7dd52055eca2de0e5ad03c831b6f331a9306c319fa18e1927a69639ea54ffc566b80a7c3013b9c304952873078f8a57a7b5b3bb4fed1c"], &(0x7f0000000480)='GPL\x00', 0x4, 0x1000, &(0x7f00000004c0)=""/4096}, 0x21) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x4, 0xc272}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000700000000000000000000180000000000000000000000000000009500020000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000705b3da6cffffffb7020000000000b50a000000000010850000000600000095000000000000000000002000800000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff99, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRES32=0x0], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000380), 0x12) write$cgroup_pid(r5, &(0x7f00000000c0), 0x12) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="0f00000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="0000c600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r6, &(0x7f0000000200)="ba"}, 0x20) r7 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x5, &(0x7f0000000180), 0x43) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x7d) socket$kcm(0x29, 0x5, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 2.508079518s ago: executing program 0 (id=6483): r0 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000400)={r0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x400, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91b24fc602f020f000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000a000000020000000000000102000000080000010800000001000084090000000400000001000000010000200061615f5f0000305f"], &(0x7f00000000c0)=""/138, 0x4a, 0x8a, 0x1}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000001a00000000867b4841ba004000000078ab58386b6ae60e48ac25f2b24c5c719a2ba3b5411f3eb3a5f0011ebaf02b6a1b0000000000000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r4, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x3, 0x16, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r5, @sched_cls=0x2f}, 0x94) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='cgroup.kill\x00', 0x0, 0x0) recvmsg$unix(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000580)=""/141, 0x8d}, {&(0x7f0000000640)=""/6, 0x6}, {&(0x7f0000000680)=""/149, 0x95}, {&(0x7f0000000840)=""/124, 0x7c}, {&(0x7f00000008c0)=""/111, 0x6f}], 0x5, &(0x7f00000009c0)=[@cred={{0x1c}}], 0x20}, 0x10000) setsockopt$sock_attach_bpf(r6, 0x1, 0x12, &(0x7f0000000500), 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', r5, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002b00)={r8, 0x20, &(0x7f0000002ac0)={0x0, 0x0, 0x0, &(0x7f0000002a00)=""/181, 0xb5}}, 0x10) socket$kcm(0x29, 0x4, 0x0) 2.011779142s ago: executing program 1 (id=6484): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)=0x1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x304) r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x8, 0x3, 0x7, 0x80, 0x0, 0x5, 0x10000, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xff, 0x1}, 0x4a2, 0x0, 0x0, 0x4, 0x0, 0x5, 0x5eb, 0x0, 0xfffffff9, 0x0, 0x83}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000100)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) r2 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x1, 0x5, 0x0, 0x4, 0x0, 0x70000000000, 0x200, 0x6, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, @perf_config_ext={0x3, 0x10}, 0x104, 0x4, 0x4, 0x7, 0xffffffffffffffff, 0x5, 0x3, 0x0, 0x2, 0x0, 0x1000}, 0xffffffffffffffff, 0x3, r1, 0x1) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x31bf) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000200)={'tunl0\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r3, &(0x7f0000000280)="cdfd2e02bb2c281369f41e29ae317befbe8a2796a3d579a707e1596710485b1cc643aacf54713624bcf6434d9a3824650aae8a5f5a408267c990e97cf0e3172f5d43d9444ddda5589a2860308abcb69a5dd89bb6d55097ded206ca6270e0a86f863d2391f5a0b40d7166001ffd5fb6bd159254ee7281b5fdf59f402842765399aa4b9a1a4c752eef"}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000003c0)='./cgroup.net/syz1\x00') socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000400)=0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000440)='&{[{+\x00') r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000480)=0xffffffffffffffff, 0x4) bpf$LINK_DETACH(0x22, &(0x7f00000004c0)=r4, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r2, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0], 0x0, 0x83, &(0x7f00000005c0)=[{}], 0x8, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x71, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@volatile={0x6, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x5f, 0x0, 0x5f, 0x0, 0x30, 0x61]}}, &(0x7f0000000840)=""/227, 0x2c, 0xe3, 0x0, 0xffff, 0x10000, @value=r1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x401, '\x00', r5, r6, 0x1, 0x9, 0x2}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000001c40)={&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000001b00)=[{&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/1, 0x1}], 0x2, &(0x7f0000001b40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}, 0xc0002102) socketpair(0x6, 0x0, 0x1, &(0x7f0000001c80)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000001f00)={&(0x7f0000001cc0)=@isdn, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001d40)=""/114, 0x72}], 0x1, &(0x7f0000001e00)=""/226, 0xe2}, 0x40002020) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000001f40)=0xffffffffffffffff, 0x12) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001fc0)=@generic={&(0x7f0000001f80)='./file0\x00', 0x0, 0x18}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff) 1.650102597s ago: executing program 3 (id=6485): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.stat\x00', 0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.stat\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@volatile={0x8, 0x0, 0x0, 0x9, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0x4ce2}}]}, {0x0, [0x0, 0x61, 0x1e, 0x0]}}, &(0x7f0000000280)=""/20, 0x42, 0x14, 0x1, 0x0, 0x10000, @value=r0}, 0x28) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000007c0)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c00aab9715732c9fb7", 0x35}, {&(0x7f0000000240)="7d586d16062b1e1b9685b88189e0093982f6994b8df2fe56386ed999f1b34b06f256adbf60f38f9289", 0x29}], 0x2}, 0x4040068) (async) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000007c0)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c00aab9715732c9fb7", 0x35}, {&(0x7f0000000240)="7d586d16062b1e1b9685b88189e0093982f6994b8df2fe56386ed999f1b34b06f256adbf60f38f9289", 0x29}], 0x2}, 0x4040068) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611077000000000063010d0000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0xa, 0x5, 0x0) (async) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) getpid() (async) r5 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r5, r2, 0x0, 0xc, &(0x7f0000000340)='cgroup.stat\x00'}, 0x30) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) close(r6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}, 0x0) socket$kcm(0xa, 0x2, 0x73) (async) r7 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r7, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x18, 0x29, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x14}, 0x0) socket$kcm(0x2b, 0x1, 0x0) (async) socket$kcm(0x2b, 0x1, 0x0) 1.477247319s ago: executing program 1 (id=6486): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1}, 0x50) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x100, 0x4}, 0x4869, 0x6, 0x0, 0xf, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f00000000c0), 0x12) sendmsg$inet(r4, &(0x7f0000001dc0)={&(0x7f00000001c0)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000001980)="4ad70e3d81dafc32c502ecb5d01ba329e77a532714fe17d92bc22184b1db9fd8f1e3828ca6a770bb8b4baae8ee9d8e552baa7eadaa7bdc9e3bf867be85e501a75c890e9267cdb9169c6920a5051164b9c4136a26200fdeff53d4263f13f7d167", 0x60}, {&(0x7f0000001a00)="1b943047aef9c8f03f7c01e66e13b3a7130d67cc3f4dbf37bfae9829c4fd6665e164a923ed7397ecd9d6f33010352477848920e66a8120f62feb7382bcca9a50c22af23ea129f2a8c543ab021298", 0x4e}, {&(0x7f0000001a80)="209da1e41e16ce3cb33b362bc783a44a4f78a1141488158104eb4b31b2ac500b6e", 0x21}, {&(0x7f0000001ac0)="96c83eccbd6c7638212b0db6241a36588c00c677167b71de39e49b9f8e1e7db48f80124a9508453a0dff37555c57494da5666b6ef5ec27f0cd878c18b5810a62df27e98f9c1e2ce5ce7dbdaef80903d98d941b7346054e8a156735888c62a4c8672243f4c7ea2d51961d361740b93a1a82263d06f1c9763c505762759731d1fc754a692712eeeae102b94e84e01545a387261756b50a55a53afbeeff68defb33186a4ba462dcece28cf2ec5d05c07f09914b7ca983faa0d42dcafba9f9d103aa3e4ba59d36d41ffe2b836930de17e956d36e84bcf2b04c87cc5868e58e8fb1", 0xdf}, {&(0x7f0000001bc0)="c97cda0a956c2ed789464a446374dac04bd7b224c33894e9a89b2d06a6f8d261d6c6e10cfdd9186941ea8a138b46ca75467a8a2020dc6ce66b6d7ca59cb33c3055c3fd6e809adf2cee3f80e1c77958ff3f7f50745712651feefda0fc5e0cef0f976998dc3bfac56a18d3a47c6690560c5d195fa55fd6564f3f9f0a5bbf507b329ef1d0990274", 0x86}], 0x5, &(0x7f0000001d00)=[@ip_retopts={{0x8c, 0x0, 0x7, {[@lsrr={0x83, 0xf, 0x32, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0x13, 0x44, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @remote]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0x7c, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x1d, 0x3, [{0x0, 0x3, "f9"}, {0x5, 0x7, "3b5d6276b3"}, {0x5, 0xd, "9b8de41295aa893fbd163c"}]}, @timestamp={0x44, 0xc, 0x1c, 0x0, 0x8, [0x4, 0x1]}, @lsrr={0x83, 0x1f, 0x21, [@loopback, @local, @private=0xa010100, @local, @broadcast, @private=0xa010101, @rand_addr=0x64010100]}, @noop]}}}], 0x90}, 0x0) write$cgroup_int(r4, &(0x7f0000000100)=0x1, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018000000000000000000000000000000950000002304f866"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0xe1, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe66}, 0x22) 1.450920501s ago: executing program 2 (id=6487): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a0001802f581d00d1bd", 0x2e}], 0x100000000000025b, 0x0, 0x0, 0x39c}, 0x10) socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a0001802f581d00d1bd", 0x2e}], 0x100000000000025b, 0x0, 0x0, 0x39c}, 0x10) (async) 1.133022432s ago: executing program 0 (id=6488): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) r2 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x4}, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x23, 0x5, 0x0) write$cgroup_pressure(r4, 0x0, 0xeaff) sendmsg$kcm(r4, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x800) close(r1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000032000b07d25a806f090094f9105f9253", 0x14}], 0x1}, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0xfc, 0x0, 0x5, 0x0, 0x0, 0xd2, 0x2080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xad2}, 0x8201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0x0, r3, 0x0, 0x16, &(0x7f0000000000)='/proc/net/\x01?\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc29a, 0x0, 0x0, 0x80, 0x0, 0x0, 0x5}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x98, 0x1, 0x0, 0x60, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xffffffff}, 0x1, 0x3, 0x0, 0x0, 0x400, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xb, 0x7}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, r2, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x8, 0x0, &(0x7f0000000180)="0005000000000001", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40042409, 0x1) write$cgroup_subtree(r8, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) 805.410505ms ago: executing program 1 (id=6489): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x8b, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4108, 0x4, 0x0, 0x9, 0xf8, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) 346.505046ms ago: executing program 2 (id=6490): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'ipvlan0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.io_serviced\x00', 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r3, 0xffffffffffffffff}, 0x4) (async) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000001c0)={'veth1_to_hsr\x00', @multicast}) (async) r5 = openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000280)={0x4, &(0x7f0000000240)=[{0x9, 0x2, 0x0, 0x887}, {0x200, 0x8, 0x81, 0x48000000}, {0x8001, 0x5, 0x2b, 0x7fffffff}, {0xbb1, 0x2a, 0x5, 0xfffffffa}]}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000002c0)={'nr0\x00', @local}) (async) perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0x1, 0x8, 0x6, 0x6, 0x0, 0x100, 0x54800, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x2b, 0xf}, 0x5100, 0x8000000, 0xfffff801, 0x3, 0x7, 0x0, 0x7, 0x0, 0x8, 0x0, 0x6}, r3, 0x4, 0xffffffffffffffff, 0x8) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@fallback=r5, r3, 0x4, 0x10, 0x0, @void, @value=r3}, 0x20) (async) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f00000003c0)) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000400)='./file0\x00', 0x0, 0x4008, r0}, 0x18) write$cgroup_type(r3, &(0x7f0000000480), 0x9) (async) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f00000004c0)=0x1) (async) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000500), 0x2, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000580)=@generic={&(0x7f0000000540)='./file0\x00', r6}, 0x18) (async) openat$cgroup_pressure(r3, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000600)=r6) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000640)={0xf, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000680)=r7, 0x4) ioctl$TUNSETDEBUG(r3, 0x400454c9, &(0x7f00000006c0)=0x1) (async) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000700)=r6) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r6, 0x0, 0xb8, 0xc6, &(0x7f0000000740)="155c711cced8b8520e65933e6359bbc1494cecb8144db70d85294f1db847259fdf2df63f21c5ce022c40f8489adf88443710a365a1abf224aa459d2ba75de7ca91e15bb141f8b7b86f5d2ba2ef7f0b3757a113ad6ff87966115f64cbdf0853d1d23101aa3988e947e496964193a982b7bbea2964791dd03e6d23a846ace36a740cdad3dbd231e3084876cada825b38ddcd8a15de0789a955f294e1677e03d0e011f1fe904159d1ef17c905f39306fd5e1d18f922b93d3f23", &(0x7f0000000800)=""/198, 0xc49, 0x0, 0xd7, 0x40, &(0x7f0000000900)="4ee9c10780ba6728177760b5784731bc3165199d32bdbd1a8e557aaeec832cc5ffae7756551692aed4d9a0644287ef24c47e0eb72212f845aa529c7ea03822c9579b4d10a44b55fa36966fb616886dc386be88ac8fba58d16a43c920817060d19a9fd61c7c59d1b5a0936fbc60d05bafef1e2cc822885fd8018ef389fbec798d88d52a065109934b436a07d1f2eb7023baf283e235b7c19ef332caf4f55465722d1d4eb50c0afee7a041901c79fb9ad62bad8e137845ebfd9ee227870916eaa4341b802d364b69fd5ed631f8830d7592bd39a98d2fd403", &(0x7f0000000a00)="48824b5fa2363c0ee9dc05b24d37cc6201de66c4135b57453612f5a34848988c39421a73c8ac6b937870672adc54339e5bfbb2138b11549cb8ed9651ed54da01", 0x5}, 0x50) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000ac0)=r4, 0x4) (async) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000b00)=r3) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000b40)) 0s ago: executing program 1 (id=6491): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e25, 0x0, @private0}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x11}], 0x10}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab070004000523"], 0xfe33) write$cgroup_devices(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="1e0301003c05000128876b60864668f82ffdeefa000000000000ffd2acb165fe580cd568020031b87b548cb74136f366da0abe01"], 0xffdd) kernel console output (not intermixed with test programs): uous mode [ 898.910406][T21975] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4690'. [ 898.938973][T21966] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4691'. [ 898.961496][T21971] netlink: 'syz.2.4692': attribute type 2 has an invalid length. [ 898.976163][T21973] netlink: 'syz.2.4692': attribute type 2 has an invalid length. [ 899.003536][T21961] netlink: 15478 bytes leftover after parsing attributes in process `syz.0.4689'. [ 902.569808][T22000] netlink: 'syz.1.4700': attribute type 6 has an invalid length. [ 902.577965][T22000] netlink: 'syz.1.4700': attribute type 30 has an invalid length. [ 904.182609][T22066] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.4718'. [ 905.335312][T22101] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4730'. [ 905.567209][ T48] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 905.577179][ T48] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 905.586116][ T48] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 905.594243][ T48] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 905.602200][ T48] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 905.611692][ T48] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 906.287304][T22125] netlink: 'syz.3.4736': attribute type 7 has an invalid length. [ 906.507745][T22106] chnl_net:caif_netlink_parms(): no params data found [ 906.743665][T22106] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.785447][T22137] netlink: 'syz.3.4738': attribute type 2 has an invalid length. [ 906.818722][T22106] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.875936][T22106] device bridge_slave_0 entered promiscuous mode [ 906.973234][T22106] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.020476][T22106] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.029714][T22106] device bridge_slave_1 entered promiscuous mode [ 907.222683][T22106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 907.302812][T22106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 907.512389][T22106] team0: Port device team_slave_0 added [ 907.542971][T22106] team0: Port device team_slave_1 added [ 907.605686][T22106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 907.612701][T22106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 907.674933][ T4279] Bluetooth: hci6: command 0x0409 tx timeout [ 907.701334][T22106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 907.771024][T22106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 907.805203][T22106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 907.864755][T22106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 907.960740][T22106] device hsr_slave_0 entered promiscuous mode [ 907.977742][T22106] device hsr_slave_1 entered promiscuous mode [ 908.015263][T22106] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 908.022906][T22106] Cannot create hsr debugfs directory [ 908.172615][T22170] netlink: 'syz.3.4745': attribute type 4 has an invalid length. [ 908.181506][T22170] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4745'. [ 908.464558][T22106] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.090867][T22106] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.154035][T22195] netlink: 'syz.0.4750': attribute type 21 has an invalid length. [ 909.799106][ T4279] Bluetooth: hci6: command 0x041b tx timeout [ 910.690278][T22106] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.762390][T22194] device pim6reg1 entered promiscuous mode [ 911.492960][T22106] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.825207][ T4279] Bluetooth: hci6: command 0x040f tx timeout [ 912.201545][T22106] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 912.282859][T22106] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 912.342772][T22106] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 912.404354][T22106] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 912.910102][T22106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 912.939698][ T7504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 912.954558][ T7504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 912.977944][T22106] 8021q: adding VLAN 0 to HW filter on device team0 [ 913.001187][ T7125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 913.020285][ T7125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 913.055320][ T7125] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.062577][ T7125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 913.116436][ T7125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 913.137742][ T7125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 913.156420][ T7125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 913.188389][ T7125] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.195641][ T7125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 913.221184][ T7125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 913.269469][T22232] netlink: 'syz.3.4761': attribute type 15 has an invalid length. [ 913.285041][T22232] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4761'. [ 913.297929][ T7504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 913.341563][ T7130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 913.385092][ T7130] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 913.412767][ T7130] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 913.454427][ T7130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 913.478446][ T7130] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 913.524153][T22106] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 913.581277][T22106] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 913.609451][ T7504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 913.625630][ T7504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 913.660691][ T7504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 913.678922][ T7504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 913.739346][ T7504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 913.909202][ T4279] Bluetooth: hci6: command 0x0419 tx timeout [ 913.918727][ T7125] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 914.031879][T22262] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4769'. [ 914.539349][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 914.566561][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 914.600722][T22106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 914.853025][ T7130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 914.871547][ T7130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 914.912542][T22284] netlink: 'syz.1.4773': attribute type 10 has an invalid length. [ 914.927234][T22284] device netdevsim0 entered promiscuous mode [ 915.002312][ T7125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 915.013272][ T7125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 915.043079][ T7125] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 915.065792][ T7125] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 915.108335][T22106] device veth0_vlan entered promiscuous mode [ 915.164712][T22106] device veth1_vlan entered promiscuous mode [ 915.271286][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 915.283088][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 915.296639][T22106] device veth0_macvtap entered promiscuous mode [ 915.322465][T22106] device veth1_macvtap entered promiscuous mode [ 915.398548][T22106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 915.429719][ T7125] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 915.445633][ T7125] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 915.457978][T22299] netlink: 'syz.3.4778': attribute type 3 has an invalid length. [ 915.471599][ T7125] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 915.479245][T22299] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4778'. [ 915.504017][ T7125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 915.562039][T22106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.583019][T22106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.605366][T22106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 915.624152][T22305] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.4779'. [ 915.647847][ T7130] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 915.667603][ T7130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 916.032147][T22319] delete_channel: no stack [ 916.061229][T22319] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4783'. [ 916.092243][T22106] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.114985][T22106] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.131191][T22106] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.142302][T22106] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.201118][T22319] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4783'. [ 916.214247][T22321] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4783'. [ 916.404507][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.429437][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.445031][ T7130] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 916.552949][ T7130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.582956][ T7130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.623163][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 916.668533][T22335] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4786'. [ 917.554556][T22350] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4723'. [ 917.689897][T22356] netlink: 'syz.3.4792': attribute type 10 has an invalid length. [ 917.733338][T22356] team0: Device wg1 is of different type [ 918.413863][T22378] netlink: 'syz.2.4799': attribute type 10 has an invalid length. [ 918.511796][T22378] team0: Device vxcan1 is of different type [ 918.743377][T22398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4804'. [ 919.104141][T22410] device sit0 left promiscuous mode [ 919.315608][T22412] device sit0 entered promiscuous mode [ 919.693572][T22425] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.4813'. [ 919.718046][T22428] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.4813'. [ 920.039607][T22439] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4815'. [ 920.055582][T22439] netlink: 'syz.1.4815': attribute type 10 has an invalid length. [ 920.065867][T22439] team0: Device hsr_slave_0 failed to register rx_handler [ 920.464376][T22456] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4821'. [ 920.663243][T22465] netlink: 'syz.0.4824': attribute type 10 has an invalid length. [ 920.945285][T22477] netlink: 'syz.5.4828': attribute type 21 has an invalid length. [ 921.108843][T22483] tap0: tun_chr_ioctl cmd 1074025677 [ 921.114443][T22483] tap0: linktype set to 773 [ 921.922889][T22509] bridge0: port 4(team0) entered disabled state [ 921.971498][T22513] netlink: 'syz.1.4838': attribute type 2 has an invalid length. [ 922.069326][T22509] bridge0: port 3(hsr0) entered disabled state [ 922.136655][T22509] device bridge_slave_1 left promiscuous mode [ 922.143161][T22509] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.173521][T22509] device bridge_slave_0 left promiscuous mode [ 922.181544][T22509] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.539658][T22513] device 2 entered promiscuous mode [ 922.918186][T22518] netlink: 'syz.2.4839': attribute type 10 has an invalid length. [ 922.944907][T22522] netlink: 'syz.3.4840': attribute type 2 has an invalid length. [ 922.952744][T22522] netlink: 'syz.3.4840': attribute type 8 has an invalid length. [ 922.995422][T22522] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4840'. [ 923.785446][T22538] netlink: 'syz.1.4846': attribute type 17 has an invalid length. [ 923.824043][T22538] netlink: 'syz.1.4846': attribute type 16 has an invalid length. [ 923.894598][T22538] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4846'. [ 925.002570][T22556] netlink: 'syz.2.4850': attribute type 2 has an invalid length. [ 925.025122][T22556] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4850'. [ 927.748407][T22590] netlink: 'syz.2.4860': attribute type 10 has an invalid length. [ 927.868810][T22590] team0: Device veth1_macvtap failed to register rx_handler [ 928.972221][T22644] netlink: 'syz.0.4875': attribute type 3 has an invalid length. [ 928.986919][T22636] netlink: 'syz.3.4874': attribute type 10 has an invalid length. [ 929.005029][T22644] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4875'. [ 929.464369][T22658] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4878'. [ 930.092905][T22636] bond0: (slave wlan1): Releasing backup interface [ 930.112891][T22636] team0: Port device wlan1 added [ 930.154226][T22665] netlink: 'syz.5.4878': attribute type 10 has an invalid length. [ 930.182231][T22665] team0: Device hsr_slave_0 failed to register rx_handler [ 930.311046][T22663] device syzkaller0 entered promiscuous mode [ 930.617018][T22687] netlink: 'syz.5.4884': attribute type 3 has an invalid length. [ 930.630951][T22687] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.4884'. [ 931.508586][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.516452][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.487601][T22672] -1: renamed from syzkaller0 [ 933.523368][T22708] device wlan1 entered promiscuous mode [ 933.781990][T22719] netlink: 'syz.3.4890': attribute type 10 has an invalid length. [ 933.814853][T22719] device hsr0 entered promiscuous mode [ 933.845824][T22719] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 933.943706][T22722] netlink: 180 bytes leftover after parsing attributes in process `syz.2.4892'. [ 934.000488][T22726] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4892'. [ 934.045417][T22736] netlink: 'syz.5.4895': attribute type 21 has an invalid length. [ 934.098798][T22733] device syzkaller0 entered promiscuous mode [ 934.124443][T22738] netlink: 'syz.1.4896': attribute type 6 has an invalid length. [ 934.538938][T22753] netlink: 'syz.2.4901': attribute type 153 has an invalid length. [ 934.548320][T22753] netlink: 69544 bytes leftover after parsing attributes in process `syz.2.4901'. [ 936.650608][T22763] netlink: 'syz.1.4904': attribute type 7 has an invalid length. [ 936.975725][T22780] netlink: 'syz.3.4905': attribute type 5 has an invalid length. [ 937.340122][T22788] netlink: 'syz.1.4910': attribute type 28 has an invalid length. [ 937.358400][T22788] netlink: 'syz.1.4910': attribute type 29 has an invalid length. [ 937.517164][T22788] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4910'. [ 937.828450][T22788] netlink: 'syz.1.4910': attribute type 10 has an invalid length. [ 937.886283][T22788] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4910'. [ 939.218966][T22804] netlink: 'syz.3.4914': attribute type 10 has an invalid length. [ 939.513336][T22810] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4916'. [ 939.517292][T22806] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 939.531915][T22825] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4919'. [ 939.547716][T22806] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 939.558867][T22806] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 939.845567][T22838] netlink: 'syz.5.4924': attribute type 10 has an invalid length. [ 939.853774][T22838] netlink: 2 bytes leftover after parsing attributes in process `syz.5.4924'. [ 939.923269][T22836] netlink: 'syz.1.4923': attribute type 3 has an invalid length. [ 940.000607][T22836] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4923'. [ 940.271975][T22844] netlink: 'syz.3.4927': attribute type 4 has an invalid length. [ 940.301365][T22844] netlink: 'syz.3.4927': attribute type 8 has an invalid length. [ 940.331098][T22844] netlink: 109560 bytes leftover after parsing attributes in process `syz.3.4927'. [ 941.075964][T22865] netlink: 'syz.2.4931': attribute type 10 has an invalid length. [ 941.232422][T22865] device hsr0 entered promiscuous mode [ 941.521367][T22865] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 943.447723][T22883] netlink: 54183 bytes leftover after parsing attributes in process `syz.3.4937'. [ 943.989463][T22887] netlink: 'syz.0.4940': attribute type 10 has an invalid length. [ 944.010923][T22887] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4940'. [ 944.044913][T22887] net_ratelimit: 10 callbacks suppressed [ 944.044930][T22887] A link change request failed with some changes committed already. Interface bˆ¡cÊRݘOC‰ÿæ may have been left with an inconsistent configuration, please check. [ 944.135537][T22892] netlink: 'syz.3.4939': attribute type 5 has an invalid length. [ 944.943064][ T7504] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 945.097663][T22923] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4948'. [ 945.164322][T22922] netlink: 'syz.0.4949': attribute type 17 has an invalid length. [ 945.177854][T22922] netlink: 'syz.0.4949': attribute type 41 has an invalid length. [ 945.203486][T22922] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4949'. [ 945.990871][T22951] netlink: 'syz.2.4956': attribute type 15 has an invalid length. [ 946.030233][T22951] netlink: 'syz.2.4956': attribute type 7 has an invalid length. [ 946.108966][T22951] netlink: 'syz.2.4956': attribute type 39 has an invalid length. [ 947.203639][T22976] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4964'. [ 947.380760][T22979] netlink: 'syz.2.4965': attribute type 10 has an invalid length. [ 947.728409][T22990] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.4966'. [ 947.925331][T22979] team0: Port device wlan1 added [ 949.494212][T23030] netlink: 'syz.0.4979': attribute type 29 has an invalid length. [ 949.523612][T23030] netlink: 'syz.0.4979': attribute type 29 has an invalid length. [ 949.564237][T23024] netlink: 'syz.0.4979': attribute type 29 has an invalid length. [ 949.826706][T23037] netlink: 'syz.2.4981': attribute type 30 has an invalid length. [ 950.257181][T23024] device veth0_macvtap left promiscuous mode [ 951.019446][T23050] validate_nla: 1 callbacks suppressed [ 951.019492][T23050] netlink: 'syz.0.4985': attribute type 3 has an invalid length. [ 951.052874][T23061] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.4985'. [ 951.084879][T23050] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4985'. [ 951.839030][T23087] netlink: 'syz.3.4994': attribute type 2 has an invalid length. [ 951.855091][T23087] netlink: 'syz.3.4994': attribute type 8 has an invalid length. [ 951.863079][T23087] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4994'. [ 952.534201][T23114] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5001'. [ 952.928409][T23134] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5006'. [ 953.497575][T23162] netlink: 'syz.3.5013': attribute type 3 has an invalid length. [ 953.523228][T23162] netlink: 163968 bytes leftover after parsing attributes in process `syz.3.5013'. [ 953.818975][T23179] netlink: 164 bytes leftover after parsing attributes in process `syz.5.5017'. [ 954.352778][T23204] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5026'. [ 954.366941][T23201] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.5023'. [ 954.419358][T23201] netlink: 6955 bytes leftover after parsing attributes in process `syz.2.5023'. [ 954.532638][T23213] netlink: 'syz.3.5028': attribute type 3 has an invalid length. [ 954.899097][T23228] netlink: zone id is out of range [ 954.907630][T23228] netlink: zone id is out of range [ 954.912953][T23228] netlink: zone id is out of range [ 954.919039][T23228] netlink: zone id is out of range [ 954.924522][T23228] netlink: get zone limit has 8 unknown bytes [ 955.308764][T23211] delete_channel: no stack [ 957.126722][T23260] netlink: 'syz.0.5040': attribute type 6 has an invalid length. [ 957.138781][T23260] __nla_validate_parse: 4 callbacks suppressed [ 957.138797][T23260] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5040'. [ 957.337002][T23269] netlink: 'syz.3.5042': attribute type 10 has an invalid length. [ 957.388222][T23269] team0: Device ipvlan1 failed to register rx_handler [ 957.990630][T23287] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5047'. [ 958.142830][T23288] device syzkaller0 entered promiscuous mode [ 958.166326][T23290] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.5047'. [ 958.193324][T23295] netlink: 16410 bytes leftover after parsing attributes in process `syz.5.5049'. [ 958.210771][T23297] netlink: 'syz.0.5047': attribute type 21 has an invalid length. [ 958.234034][T23294] netlink: 'syz.1.5050': attribute type 11 has an invalid length. [ 958.237183][T23297] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5047'. [ 958.244640][T23294] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5050'. [ 958.268245][T23298] netlink: 'syz.1.5050': attribute type 10 has an invalid length. [ 958.280104][T23292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 958.450116][T23302] netlink: 'syz.5.5051': attribute type 3 has an invalid length. [ 958.458327][T23302] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.5051'. [ 958.541797][T23305] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 958.660294][T23310] netlink: 'syz.0.5052': attribute type 10 has an invalid length. [ 958.745550][T23310] wlan1: mtu less than device minimum [ 958.751013][T23310] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 961.724033][T23333] netlink: 'syz.2.5060': attribute type 6 has an invalid length. [ 961.732573][T23333] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5060'. [ 962.021894][T23355] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.5066'. [ 962.170112][T23363] netlink: 'syz.0.5068': attribute type 7 has an invalid length. [ 962.316115][T23367] netlink: 'syz.3.5070': attribute type 10 has an invalid length. [ 962.629800][T23367] bond0: (slave bond_slave_0): Releasing backup interface [ 962.810833][T23383] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5073'. [ 963.682218][T23420] netlink: 'syz.5.5085': attribute type 1 has an invalid length. [ 963.829545][T23421] netlink: 'syz.1.5082': attribute type 27 has an invalid length. [ 963.870536][T23420] netlink: 'syz.5.5085': attribute type 11 has an invalid length. [ 963.884749][T23421] C: renamed from team_slave_0 [ 963.899446][T23420] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.5085'. [ 964.160436][T23429] netlink: 'syz.0.5086': attribute type 21 has an invalid length. [ 964.314753][T23431] netlink: 'syz.2.5087': attribute type 2 has an invalid length. [ 964.396247][T23431] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5087'. [ 964.492926][T23418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 965.066829][T23440] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.5090'. [ 965.189056][T23442] netlink: 'syz.0.5089': attribute type 10 has an invalid length. [ 965.203045][T23442] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.210387][T23442] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.408299][T23452] netlink: 'syz.3.5093': attribute type 3 has an invalid length. [ 965.441053][T23452] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5093'. [ 965.990547][T23445] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.5093'. [ 966.238567][T23467] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.5096'. [ 966.310756][T23467] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 966.320840][T23467] CPU: 1 PID: 23467 Comm: syz.1.5096 Not tainted syzkaller #0 [ 966.328393][T23467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 966.338556][T23467] Call Trace: [ 966.341927][T23467] [ 966.344932][T23467] dump_stack_lvl+0x188/0x24e [ 966.349709][T23467] ? show_regs_print_info+0x12/0x12 [ 966.354994][T23467] ? load_image+0x400/0x400 [ 966.359629][T23467] sysfs_warn_dup+0x8a/0xa0 [ 966.364225][T23467] sysfs_do_create_link_sd+0xc0/0x110 [ 966.369694][T23467] device_add+0x7ed/0xfb0 [ 966.374181][T23467] wiphy_register+0x1d9f/0x2ac0 [ 966.379194][T23467] ? cfg80211_event_work+0x40/0x40 [ 966.384391][T23467] ? minstrel_ht_alloc+0x894/0xa20 [ 966.389637][T23467] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 966.395830][T23467] ieee80211_register_hw+0x2d00/0x39f0 [ 966.401426][T23467] ? ieee80211_register_hw+0xf11/0x39f0 [ 966.407052][T23467] ? ieee80211_register_hw+0xf11/0x39f0 [ 966.412718][T23467] ? ieee80211_tasklet_handler+0x20/0x20 [ 966.418485][T23467] ? memset+0x1e/0x40 [ 966.422547][T23467] ? __hrtimer_init+0x186/0x270 [ 966.427501][T23467] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 966.433400][T23467] hwsim_new_radio_nl+0xafa/0xce0 [ 966.438585][T23467] genl_family_rcv_msg_doit+0x22a/0x330 [ 966.444219][T23467] ? end_current_label_crit_section+0x170/0x170 [ 966.450558][T23467] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 966.456559][T23467] ? bpf_lsm_capable+0x5/0x10 [ 966.461313][T23467] ? security_capable+0x85/0xb0 [ 966.466269][T23467] genl_rcv_msg+0x604/0x790 [ 966.470892][T23467] ? genl_bind+0x360/0x360 [ 966.475381][T23467] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 966.481884][T23467] netlink_rcv_skb+0x1fb/0x450 [ 966.486736][T23467] ? genl_bind+0x360/0x360 [ 966.491255][T23467] ? netlink_ack+0x1170/0x1170 [ 966.496150][T23467] ? down_read+0x1a8/0x2d0 [ 966.500662][T23467] genl_rcv+0x24/0x40 [ 966.504712][T23467] netlink_unicast+0x74d/0x8d0 [ 966.509619][T23467] netlink_sendmsg+0x8ad/0xbd0 [ 966.514500][T23467] ? netlink_getsockopt+0x550/0x550 [ 966.519822][T23467] ? aa_sock_msg_perm+0x94/0x150 [ 966.524849][T23467] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 966.530205][T23467] ? security_socket_sendmsg+0x7c/0xa0 [ 966.535757][T23467] ? netlink_getsockopt+0x550/0x550 [ 966.541063][T23467] ____sys_sendmsg+0x5be/0x970 [ 966.545946][T23467] ? __sys_sendmsg_sock+0x30/0x30 [ 966.551047][T23467] ? __import_iovec+0x315/0x500 [ 966.556015][T23467] ? import_iovec+0x6f/0xa0 [ 966.560606][T23467] ___sys_sendmsg+0x2a2/0x360 [ 966.565372][T23467] ? __fget_files+0x28/0x4b0 [ 966.570066][T23467] ? __sys_sendmsg+0x290/0x290 [ 966.575104][T23467] __se_sys_sendmsg+0x1bb/0x2a0 [ 966.580059][T23467] ? __x64_sys_sendmsg+0x80/0x80 [ 966.585161][T23467] ? lockdep_hardirqs_on+0x94/0x140 [ 966.590451][T23467] do_syscall_64+0x4c/0xa0 [ 966.594945][T23467] ? clear_bhb_loop+0x60/0xb0 [ 966.599693][T23467] ? clear_bhb_loop+0x60/0xb0 [ 966.604491][T23467] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 966.610481][T23467] RIP: 0033:0x7f9e2bd9c819 [ 966.614982][T23467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 966.634682][T23467] RSP: 002b:00007f9e29fd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 966.643199][T23467] RAX: ffffffffffffffda RBX: 00007f9e2c016090 RCX: 00007f9e2bd9c819 [ 966.651241][T23467] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 966.659281][T23467] RBP: 00007f9e2be32c91 R08: 0000000000000000 R09: 0000000000000000 [ 966.667327][T23467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 966.675365][T23467] R13: 00007f9e2c016128 R14: 00007f9e2c016090 R15: 00007ffe76e288c8 [ 966.683478][T23467] [ 968.271139][T23493] netlink: 168 bytes leftover after parsing attributes in process `syz.5.5102'. [ 973.364335][ T4279] Bluetooth: hci6: ISO packet too small [ 973.410537][T23536] netlink: 'syz.3.5117': attribute type 2 has an invalid length. [ 973.546914][T23536] device 0 entered promiscuous mode [ 973.837249][T23536] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.5117'. [ 974.586033][T23555] delete_channel: no stack [ 974.622354][T23555] delete_channel: no stack [ 975.101256][T23566] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.5126'. [ 975.122737][T23566] tc_dump_action: action bad kind [ 978.989370][T23591] netlink: 'syz.1.5134': attribute type 1 has an invalid length. [ 979.200876][T23595] netlink: 'syz.2.5133': attribute type 9 has an invalid length. [ 979.305147][T23595] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.5133'. [ 979.485028][T23593] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5131'. [ 980.291480][ T4279] Bluetooth: hci3: unexpected event 0x33 length: 15 > 10 [ 981.386052][T23620] netlink: 'syz.3.5141': attribute type 10 has an invalid length. [ 981.542006][T23620] device wlan1 left promiscuous mode [ 984.271648][T23670] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5154'. [ 984.660953][T23681] netlink: 'syz.1.5159': attribute type 25 has an invalid length. [ 984.891461][T23683] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.5160'. [ 984.999426][T23683] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 988.018188][T23691] netlink: 'syz.2.5161': attribute type 11 has an invalid length. [ 988.035290][T23691] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5161'. [ 988.065377][T23691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 988.303780][T23717] device wlan1 entered promiscuous mode [ 988.392219][T23719] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5167'. [ 988.547170][T23723] netlink: 'syz.1.5171': attribute type 10 has an invalid length. [ 988.687687][T23724] device syzkaller0 entered promiscuous mode [ 989.053454][T23738] netlink: 'syz.1.5175': attribute type 10 has an invalid length. [ 990.787084][ T56] wlan1: Trigger new scan to find an IBSS to join [ 992.814364][T23766] netlink: 'syz.1.5182': attribute type 11 has an invalid length. [ 992.828286][T23766] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5182'. [ 992.837794][T23760] netlink: 'syz.3.5178': attribute type 10 has an invalid length. [ 992.846136][T23766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 992.947737][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.954123][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.826584][ T9] wlan1: Trigger new scan to find an IBSS to join [ 993.952087][ T7504] device 0 left promiscuous mode [ 994.262220][T23810] sctp: [Deprecated]: syz.5.5194 (pid 23810) Use of struct sctp_assoc_value in delayed_ack socket option. [ 994.262220][T23810] Use struct sctp_sack_info instead [ 994.337854][T23810] netlink: 'syz.5.5194': attribute type 10 has an invalid length. [ 994.349632][T23810] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5194'. [ 994.379747][T23810] device ipvlan1 entered promiscuous mode [ 994.391484][T23796] delete_channel: no stack [ 994.492389][T23810] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 994.825166][T23826] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 994.842551][T23826] dvmrp1: linktype set to 786 [ 995.039072][T23829] netlink: 'syz.5.5200': attribute type 10 has an invalid length. [ 995.081123][T23829] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5200'. [ 995.383121][T23829] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 995.731912][T23835] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5200'. [ 995.790153][T23829] netlink: 128 bytes leftover after parsing attributes in process `syz.5.5200'. [ 995.823688][T23846] netlink: 134268 bytes leftover after parsing attributes in process `syz.2.5204'. [ 995.864994][T23829] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 996.098831][ T7504] device gretap0 left promiscuous mode [ 996.104419][ T7504] Ÿë: port 1(gretap0) entered disabled state [ 996.536890][T23866] mac80211_hwsim hwsim31 ªªªªªª: renamed from wlan0 [ 996.786811][ T7137] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 996.924476][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 996.996834][ T7504] device veth0_to_team left promiscuous mode [ 997.009185][ T7504] Ÿë: port 2(veth0_to_team) entered disabled state [ 997.051643][ T7504] device hsr_slave_0 left promiscuous mode [ 997.075079][ T7504] device hsr_slave_1 left promiscuous mode [ 997.185995][ T7504] device veth1_macvtap left promiscuous mode [ 997.192167][ T7504] device veth0_macvtap left promiscuous mode [ 1000.904880][T23917] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.5222'. [ 1000.924851][T23917] bridge_slave_1: default FDB implementation only supports local addresses [ 1001.479355][T23936] device wg2 entered promiscuous mode [ 1002.379734][T23976] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5239'. [ 1002.433080][T23976] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5239'. [ 1002.478787][T23979] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5239'. [ 1002.665984][T23985] netlink: 'syz.0.5241': attribute type 3 has an invalid length. [ 1002.685034][T23985] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5241'. [ 1002.860087][T23996] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.5243'. [ 1003.537600][T24024] netlink: 'syz.2.5250': attribute type 10 has an invalid length. [ 1003.587107][T24024] device geneve0 entered promiscuous mode [ 1003.867765][T24024] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1003.891826][T24028] netlink: 111 bytes leftover after parsing attributes in process `syz.5.5252'. [ 1003.910998][T24030] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5251'. [ 1004.212270][T24046] netlink: 'syz.0.5257': attribute type 46 has an invalid length. [ 1004.314429][T24048] delete_channel: no stack [ 1004.361845][T24053] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.5255'. [ 1004.698638][T24073] netlink: 'syz.2.5262': attribute type 13 has an invalid length. [ 1004.725187][T24073] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5262'. [ 1004.735945][T24073] syz_tun: refused to change device tx_queue_len [ 1004.757261][T24073] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1005.828505][T24113] netlink: 'syz.2.5274': attribute type 10 has an invalid length. [ 1005.839886][T24113] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 1005.856540][T24115] netlink: 'syz.5.5275': attribute type 46 has an invalid length. [ 1006.512910][T24148] netlink: 'syz.0.5285': attribute type 13 has an invalid length. [ 1006.540818][T24152] netlink: 'syz.3.5284': attribute type 29 has an invalid length. [ 1006.574269][T24148] __nla_validate_parse: 5 callbacks suppressed [ 1006.574290][T24148] netlink: 14581 bytes leftover after parsing attributes in process `syz.0.5285'. [ 1006.603269][T24154] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5284'. [ 1006.641223][T24153] netlink: 'syz.2.5282': attribute type 1 has an invalid length. [ 1006.728207][T24152] netlink: 'syz.3.5284': attribute type 29 has an invalid length. [ 1006.785729][T24154] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1006.824796][T24154] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1006.870842][T24154] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1006.934797][T24154] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1006.966335][T24155] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5286'. [ 1007.146444][T24169] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1007.158040][T24169] syzkaller0: linktype set to 778 [ 1007.598941][T24176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5291'. [ 1008.682834][T24202] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.5297'. [ 1008.772414][T24202] openvswitch: netlink: Flow actions attr not present in new flow. [ 1009.082415][T24208] validate_nla: 2 callbacks suppressed [ 1009.082431][T24208] netlink: 'syz.3.5298': attribute type 10 has an invalid length. [ 1009.297833][T24211] device macsec0 entered promiscuous mode [ 1009.420268][T24222] netlink: 'syz.3.5301': attribute type 2 has an invalid length. [ 1009.428285][T24223] netlink: 'syz.2.5303': attribute type 27 has an invalid length. [ 1009.446681][T24216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1009.460234][T24223] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5303'. [ 1009.488136][T24222] device 1 entered promiscuous mode [ 1009.570186][T24222] IPv6: Can't replace route, no match found [ 1010.012210][T24238] Ÿë: port 1(gretap0) entered blocking state [ 1010.036834][T24238] Ÿë: port 1(gretap0) entered disabled state [ 1010.043851][T24238] device gretap0 entered promiscuous mode [ 1010.070828][T24237] netlink: 'syz.2.5307': attribute type 21 has an invalid length. [ 1010.095641][T24237] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5307'. [ 1010.108092][T24237] netlink: 'syz.2.5307': attribute type 4 has an invalid length. [ 1010.117344][T24237] netlink: 'syz.2.5307': attribute type 5 has an invalid length. [ 1010.127379][T24237] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5307'. [ 1010.133282][T24244] netlink: 'syz.2.5307': attribute type 3 has an invalid length. [ 1010.149203][T24235] Ÿë: port 2(veth0_to_team) entered blocking state [ 1010.159636][T24235] Ÿë: port 2(veth0_to_team) entered disabled state [ 1010.187594][T24244] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5307'. [ 1010.217780][T24235] device veth0_to_team entered promiscuous mode [ 1010.372049][T24248] netlink: 'syz.3.5310': attribute type 21 has an invalid length. [ 1010.777595][T24248] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5310'. [ 1011.405299][T24268] netlink: 'syz.1.5315': attribute type 2 has an invalid length. [ 1012.197857][T24273] __nla_validate_parse: 1 callbacks suppressed [ 1012.197897][T24273] netlink: 128 bytes leftover after parsing attributes in process `syz.5.5319'. [ 1012.284894][T24285] netlink: 'syz.3.5317': attribute type 3 has an invalid length. [ 1012.358208][T24273] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1012.379666][T24285] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5317'. [ 1013.373361][T24320] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5327'. [ 1013.711881][T24320] team0: Port device team_slave_0 removed [ 1013.772093][T24320] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1013.861128][T24328] pimreg0: tun_chr_ioctl cmd 35111 [ 1013.912176][T24328] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.5329'. [ 1014.154071][T24340] validate_nla: 1 callbacks suppressed [ 1014.154137][T24340] netlink: 'syz.0.5330': attribute type 21 has an invalid length. [ 1014.298411][T24340] netlink: 'syz.0.5330': attribute type 10 has an invalid length. [ 1014.502678][T24340] team0: Port device netdevsim0 removed [ 1014.599259][T24340] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1014.626066][T24350] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5333'. [ 1014.734000][T24357] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.5336'. [ 1016.041720][T24387] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.5345'. [ 1016.563635][T24396] delete_channel: no stack [ 1017.080440][T24410] netlink: 'syz.2.5350': attribute type 3 has an invalid length. [ 1017.124500][T24410] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5350'. [ 1017.264142][T24410] syzkaller0: tun_chr_ioctl cmd 2147767517 [ 1017.323365][T24419] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5353'. [ 1018.078159][T24442] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.5359'. [ 1018.839935][T24437] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.5359'. [ 1019.153700][T24448] device wg2 entered promiscuous mode [ 1020.828292][T24517] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5379'. [ 1020.978310][T24527] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5381'. [ 1021.039525][T24527] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1021.206863][T24533] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5385'. [ 1021.445849][T24536] sock: sock_set_timeout: `syz.0.5384' (pid 24536) tries to set negative timeout [ 1021.830827][T24545] device syzkaller0 entered promiscuous mode [ 1022.478017][T24560] netlink: 'syz.0.5392': attribute type 10 has an invalid length. [ 1022.496410][T24560] netlink: 3819 bytes leftover after parsing attributes in process `syz.0.5392'. [ 1024.823585][ T7524] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1026.362864][T24638] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.5413'. [ 1026.388041][T24640] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1026.591611][T24646] netlink: 'syz.1.5415': attribute type 1 has an invalid length. [ 1026.634785][T24646] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.5415'. [ 1027.304948][T24673] netlink: 'syz.5.5417': attribute type 10 has an invalid length. [ 1027.452023][T24676] netlink: 'syz.1.5425': attribute type 3 has an invalid length. [ 1027.486889][T24676] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5425'. [ 1027.851716][T24691] device syzkaller0 entered promiscuous mode [ 1028.960922][T24721] device sit0 left promiscuous mode [ 1029.130704][T24731] device syzkaller0 entered promiscuous mode [ 1030.869094][ T48] Bluetooth: hci6: command 0x0406 tx timeout [ 1033.739584][T24781] netlink: 'syz.2.5451': attribute type 39 has an invalid length. [ 1034.318095][T24796] device bridge_slave_1 left promiscuous mode [ 1034.324765][T24796] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.377588][T24796] device bridge_slave_0 left promiscuous mode [ 1034.416391][T24796] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.240279][T24811] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1035.247631][T24811] IPv6: NLM_F_CREATE should be set when creating new route [ 1035.255005][T24811] IPv6: NLM_F_CREATE should be set when creating new route [ 1035.262289][T24811] IPv6: NLM_F_CREATE should be set when creating new route [ 1035.916021][T24838] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5470'. [ 1036.651860][T24852] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5474'. [ 1036.692341][T24852] bond0: (slave bond_slave_0): Releasing backup interface [ 1036.743760][T24852] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1037.021544][ T48] Bluetooth: hci6: ISO packet for unknown connection handle 300 [ 1037.596565][T24874] delete_channel: no stack [ 1038.107847][T24888] netlink: 'syz.1.5487': attribute type 21 has an invalid length. [ 1038.133700][T24886] netlink: 'syz.2.5486': attribute type 28 has an invalid length. [ 1038.150692][T24886] netlink: 'syz.2.5486': attribute type 29 has an invalid length. [ 1038.163995][T24886] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5486'. [ 1038.208079][T24888] IPv6: NLM_F_CREATE should be specified when creating new route [ 1038.234866][T24888] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1038.242173][T24888] IPv6: NLM_F_CREATE should be set when creating new route [ 1038.249546][T24888] IPv6: NLM_F_CREATE should be set when creating new route [ 1038.257005][T24888] IPv6: NLM_F_CREATE should be set when creating new route [ 1038.732300][T24920] sock: sock_timestamping_bind_phc: sock not bind to device [ 1038.824735][T24909] device veth0_vlan left promiscuous mode [ 1038.866394][T24909] device veth0_vlan entered promiscuous mode [ 1039.510150][T24958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5505'. [ 1039.970881][T24969] netlink: 763 bytes leftover after parsing attributes in process `syz.3.5509'. [ 1040.034573][T24973] netlink: 'syz.0.5510': attribute type 3 has an invalid length. [ 1040.042717][T24973] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5510'. [ 1041.009014][T25008] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5519'. [ 1041.176792][T25015] netlink: 'syz.1.5520': attribute type 10 has an invalid length. [ 1041.203522][T25015] device netdevsim0 left promiscuous mode [ 1042.666967][T25061] device syzkaller0 entered promiscuous mode [ 1044.702027][T25064] netlink: 'syz.0.5535': attribute type 6 has an invalid length. [ 1044.710523][T25064] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5535'. [ 1044.726812][T25071] netlink: 'syz.1.5537': attribute type 10 has an invalid length. [ 1044.734991][T25071] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5537'. [ 1044.893946][T25086] netlink: 'syz.1.5542': attribute type 2 has an invalid length. [ 1044.922545][T25086] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.5542'. [ 1046.672800][T25132] netlink: 'syz.5.5554': attribute type 10 has an invalid length. [ 1046.704799][T25132] netlink: 128 bytes leftover after parsing attributes in process `syz.5.5554'. [ 1046.829558][T25141] netlink: 'syz.1.5557': attribute type 3 has an invalid length. [ 1046.858799][T25141] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5557'. [ 1047.379941][T25167] delete_channel: no stack [ 1047.405181][T25167] delete_channel: no stack [ 1048.008747][T25175] netlink: 'syz.0.5566': attribute type 3 has an invalid length. [ 1048.034782][T25175] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5566'. [ 1048.315051][T25192] netlink: 'syz.1.5570': attribute type 10 has an invalid length. [ 1048.332002][T25192] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5570'. [ 1048.857839][T25216] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5576'. [ 1048.888391][T25216] tc_dump_action: action bad kind [ 1049.051374][T25221] Ÿë: port 2(gretap0) entered blocking state [ 1049.067876][T25221] Ÿë: port 2(gretap0) entered disabled state [ 1049.088822][T25221] device gretap0 entered promiscuous mode [ 1049.194536][T25234] netlink: 'syz.3.5581': attribute type 15 has an invalid length. [ 1049.231280][T25234] netlink: 11594 bytes leftover after parsing attributes in process `syz.3.5581'. [ 1049.275878][T25229] netlink: 'syz.3.5581': attribute type 11 has an invalid length. [ 1049.302770][T25229] netlink: 'syz.3.5581': attribute type 15 has an invalid length. [ 1049.318493][T25229] netlink: 'syz.3.5581': attribute type 16 has an invalid length. [ 1049.329141][T25229] netlink: 'syz.3.5581': attribute type 21 has an invalid length. [ 1049.377637][T25229] netlink: 'syz.3.5581': attribute type 25 has an invalid length. [ 1049.407971][T25229] netlink: 11594 bytes leftover after parsing attributes in process `syz.3.5581'. [ 1052.597378][T25354] validate_nla: 6 callbacks suppressed [ 1052.597397][T25354] netlink: 'syz.3.5615': attribute type 12 has an invalid length. [ 1052.670446][T25354] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5615'. [ 1052.738906][T25360] netlink: 'syz.2.5618': attribute type 1 has an invalid length. [ 1052.786430][T25360] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.5618'. [ 1053.021592][T25365] netlink: 'syz.3.5619': attribute type 4 has an invalid length. [ 1053.060569][T25365] netlink: 'syz.3.5619': attribute type 8 has an invalid length. [ 1053.068901][T25365] netlink: 109560 bytes leftover after parsing attributes in process `syz.3.5619'. [ 1053.170038][T25358] netlink: 'syz.0.5617': attribute type 2 has an invalid length. [ 1053.206094][T25358] netlink: 'syz.0.5617': attribute type 1 has an invalid length. [ 1053.351439][T25374] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.5622'. [ 1054.321399][T25409] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1054.368242][T25409] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5632'. [ 1054.387862][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.394325][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.818146][T25419] tun0: tun_chr_ioctl cmd 1074025675 [ 1054.836463][T25419] tun0: persist enabled [ 1054.914772][T25430] tun0: tun_chr_ioctl cmd 1074025680 [ 1055.190335][T25434] sock: sock_timestamping_bind_phc: sock not bind to device [ 1056.190220][T25482] netlink: 'syz.0.5654': attribute type 2 has an invalid length. [ 1056.225951][T25482] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5654'. [ 1056.355089][T25482] bond0: (slave dummy0): Releasing backup interface [ 1056.475616][T25492] netlink: 'syz.5.5659': attribute type 10 has an invalid length. [ 1056.901062][T25511] netlink: 131036 bytes leftover after parsing attributes in process `syz.2.5663'. [ 1056.930901][T25511] openvswitch: netlink: Flow actions attr not present in new flow. [ 1057.144039][T25513] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.5664'. [ 1057.325155][T25520] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5660'. [ 1058.391320][T25549] netlink: 'syz.0.5673': attribute type 3 has an invalid length. [ 1058.412903][T25549] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5673'. [ 1058.816225][T25564] netlink: 184 bytes leftover after parsing attributes in process `syz.5.5676'. [ 1060.229894][T25599] netlink: 'syz.5.5688': attribute type 3 has an invalid length. [ 1060.255172][T25599] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.5688'. [ 1060.283510][T25606] netlink: 'syz.5.5688': attribute type 10 has an invalid length. [ 1060.293541][T25604] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1060.355427][T25605] netlink: 'syz.0.5690': attribute type 2 has an invalid length. [ 1060.697282][T25620] netlink: 'syz.0.5696': attribute type 10 has an invalid length. [ 1060.716350][T25620] team0: Device hsr_slave_0 failed to register rx_handler [ 1061.412589][T25638] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.5702'. [ 1061.460543][T25638] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.5702'. [ 1061.485486][T25638] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5702'. [ 1061.728871][T25656] netlink: 'syz.0.5707': attribute type 10 has an invalid length. [ 1061.774463][T25656] team0: Device vxcan1 is of different type [ 1061.831660][T25663] @: port 1(vlan0) entered blocking state [ 1061.848712][T25663] @: port 1(vlan0) entered disabled state [ 1061.868350][T25663] device vlan0 entered promiscuous mode [ 1061.879984][T25659] @: port 1(vlan0) entered blocking state [ 1061.886007][T25659] @: port 1(vlan0) entered forwarding state [ 1061.902605][T25659] netlink: 'syz.3.5708': attribute type 153 has an invalid length. [ 1061.911190][T25659] netlink: 69544 bytes leftover after parsing attributes in process `syz.3.5708'. [ 1062.421234][T25692] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5716'. [ 1062.447207][T25692] netlink: 'syz.3.5716': attribute type 11 has an invalid length. [ 1062.542034][T25695] device syzkaller0 entered promiscuous mode [ 1063.282497][T25707] netlink: 'syz.5.5720': attribute type 10 has an invalid length. [ 1063.409519][T25707] device bridge_slave_1 entered promiscuous mode [ 1063.448508][T25707] team0: Port device bridge_slave_1 added [ 1063.874497][T25736] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5728'. [ 1063.917893][T25736] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5728'. [ 1063.973818][T25739] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5729'. [ 1064.110597][T25746] netlink: 'syz.5.5730': attribute type 29 has an invalid length. [ 1064.136727][T25746] netlink: 'syz.5.5730': attribute type 29 has an invalid length. [ 1064.164421][T25746] netlink: 'syz.5.5730': attribute type 29 has an invalid length. [ 1064.229083][T25746] netlink: 'syz.5.5730': attribute type 3 has an invalid length. [ 1064.238167][T25746] netlink: 152 bytes leftover after parsing attributes in process `syz.5.5730'. [ 1065.432144][T25786] device syzkaller0 entered promiscuous mode [ 1065.781216][T25804] netlink: 'syz.3.5748': attribute type 1 has an invalid length. [ 1065.800522][T25804] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.5748'. [ 1065.837577][T25803] netlink: 196 bytes leftover after parsing attributes in process `syz.5.5746'. [ 1066.737562][T25813] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5752'. [ 1066.819197][T25813] openvswitch: netlink: Flow key attr not present in new flow. [ 1071.978659][T25842] netlink: 'syz.3.5759': attribute type 21 has an invalid length. [ 1071.999776][T25851] netlink: 'syz.5.5761': attribute type 13 has an invalid length. [ 1072.035245][T25851] netlink: 160 bytes leftover after parsing attributes in process `syz.5.5761'. [ 1072.193740][T25858] netlink: 'syz.2.5763': attribute type 10 has an invalid length. [ 1072.210026][T25858] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.5763'. [ 1073.250945][T25886] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.5772'. [ 1073.297538][T25886] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.5772'. [ 1073.326208][T25888] netlink: 'syz.5.5773': attribute type 2 has an invalid length. [ 1073.341840][T25886] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5772'. [ 1073.413172][T25888] device 2 entered promiscuous mode [ 1073.718879][T25902] netlink: 'syz.0.5777': attribute type 10 has an invalid length. [ 1074.938088][T25948] netlink: 'syz.2.5791': attribute type 2 has an invalid length. [ 1074.961045][T25948] netlink: 'syz.2.5791': attribute type 1 has an invalid length. [ 1074.985887][T25948] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5791'. [ 1076.001118][T25973] netlink: 180900 bytes leftover after parsing attributes in process `syz.1.5798'. [ 1076.044796][T25973] openvswitch: netlink: Flow actions attr not present in new flow. [ 1076.362099][ T4279] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1076.372152][ T4279] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1076.381211][ T4279] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1076.389519][ T4279] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1076.398528][ T4279] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1076.406180][ T4279] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1076.678930][T25994] netlink: 'syz.0.5803': attribute type 2 has an invalid length. [ 1076.692568][T25994] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5803'. [ 1077.487781][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.616094][T25984] chnl_net:caif_netlink_parms(): no params data found [ 1077.771745][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.864141][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.921936][T25984] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.945913][T25984] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.965271][T25984] device bridge_slave_0 entered promiscuous mode [ 1078.107724][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.142691][T25984] bridge0: port 2(bridge_slave_1) entered blocking state [ 1078.175018][T25984] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.196272][T25984] device bridge_slave_1 entered promiscuous mode [ 1078.218190][T26029] netlink: 188 bytes leftover after parsing attributes in process `syz.1.5814'. [ 1078.315677][T26036] netlink: 'syz.2.5815': attribute type 3 has an invalid length. [ 1078.364910][T26036] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5815'. [ 1078.390499][T25984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1078.417856][T25984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1078.464861][ T4279] Bluetooth: hci4: command 0x0409 tx timeout [ 1078.479099][T26037] netlink: 'syz.2.5815': attribute type 39 has an invalid length. [ 1078.549638][T25984] team0: Port device team_slave_0 added [ 1078.563667][T25984] team0: Port device team_slave_1 added [ 1078.660226][T26045] netlink: 'syz.1.5817': attribute type 21 has an invalid length. [ 1078.689571][T25984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1078.709087][T25984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1078.823577][T25984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1078.859094][ T9] device 0 left promiscuous mode [ 1078.878447][T26056] netlink: 'syz.2.5819': attribute type 21 has an invalid length. [ 1078.926619][T25984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1078.933693][T25984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1078.998670][T25984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1079.030693][ T9] device 0 left promiscuous mode [ 1079.160554][T25984] device hsr_slave_0 entered promiscuous mode [ 1079.189281][T25984] device hsr_slave_1 entered promiscuous mode [ 1079.205556][T25984] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1079.222413][T25984] Cannot create hsr debugfs directory [ 1079.230381][ T9] device 1 left promiscuous mode [ 1080.544741][ T4279] Bluetooth: hci4: command 0x041b tx timeout [ 1081.739867][T26080] netlink: 'syz.0.5824': attribute type 21 has an invalid length. [ 1081.752345][T26080] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5824'. [ 1081.763577][T26080] netlink: 'syz.0.5824': attribute type 4 has an invalid length. [ 1081.773002][T26080] netlink: 'syz.0.5824': attribute type 5 has an invalid length. [ 1081.781218][T26080] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5824'. [ 1081.970191][ T9] tipc: Left network mode [ 1082.168928][T26119] netlink: 'syz.1.5831': attribute type 9 has an invalid length. [ 1082.227277][T26119] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.5831'. [ 1082.313002][T26122] netlink: 'syz.0.5833': attribute type 29 has an invalid length. [ 1082.624739][ T4279] Bluetooth: hci4: command 0x040f tx timeout [ 1083.314298][T26122] netlink: 'syz.0.5833': attribute type 29 has an invalid length. [ 1083.325145][T26126] device lo entered promiscuous mode [ 1084.363074][T26165] ªªªªªª: renamed from vlan0 [ 1084.708046][ T4279] Bluetooth: hci4: command 0x0419 tx timeout [ 1085.631383][T26188] IPv6: pim6reg1: Disabled Multicast RS [ 1088.650133][T26225] tipc: Started in network mode [ 1088.655743][T26225] tipc: Node identity 9215a268, cluster identity 4711 [ 1088.662569][T26225] tipc: Node number set to 2450891368 [ 1088.913331][T25984] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1088.941581][T26235] syz.0.5849[26235] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1088.941668][T26235] syz.0.5849[26235] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1089.071996][T26235] netlink: 'syz.0.5849': attribute type 2 has an invalid length. [ 1089.129178][T26235] netlink: 'syz.0.5849': attribute type 1 has an invalid length. [ 1089.141832][T26235] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.5849'. [ 1089.460966][T25984] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1089.516767][T25984] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1089.689134][ T9] team0: Port device wlan1 removed [ 1089.771859][T25984] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1090.600181][ T9] device vlan0 left promiscuous mode [ 1090.630244][ T9] @: port 1(vlan0) entered disabled state [ 1090.672212][ T9] device veth0_to_team left promiscuous mode [ 1090.695110][ T9] Ÿë: port 1(veth0_to_team) entered disabled state [ 1090.717779][ T9] device hsr_slave_0 left promiscuous mode [ 1090.737432][ T9] device hsr_slave_1 left promiscuous mode [ 1090.853783][ T9] device veth1_vlan left promiscuous mode [ 1091.314000][ T9] team0 (unregistering): Port device geneve1 removed [ 1094.161674][ T9] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1094.236277][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1094.353282][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1094.683284][ T9] team0 (unregistering): Port device bond0 removed [ 1094.720433][ T9] bond0 (unregistering): Released all slaves [ 1094.776780][T26328] tap0: tun_chr_ioctl cmd 1074025677 [ 1094.789576][T26328] tap0: linktype set to 270 [ 1094.808692][T26329] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1094.838309][T26332] tap0: tun_chr_ioctl cmd 35588 [ 1094.861945][T26345] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1094.875861][T26345] syzkaller0: linktype set to 825 [ 1094.999887][T26350] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.5875'. [ 1095.047049][T26350] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.5875'. [ 1095.070230][T25984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1095.133616][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1095.150867][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1095.176475][T25984] 8021q: adding VLAN 0 to HW filter on device team0 [ 1095.224011][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1095.260308][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1095.311111][ T7523] bridge0: port 1(bridge_slave_0) entered blocking state [ 1095.318342][ T7523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1095.398669][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1095.554942][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1095.563807][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1095.588788][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 1095.596060][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1095.605829][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1095.623522][T26370] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1095.638815][T26370] syzkaller0: linktype set to 778 [ 1095.670042][ T7504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1095.753568][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1095.798419][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1095.818530][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1095.862764][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1095.914052][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1095.950441][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1095.985896][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1096.004915][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1096.024753][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1096.059964][T25984] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1096.116960][T26384] syzkaller1: tun_chr_ioctl cmd 1074025681 [ 1096.328656][T26392] -: renamed from syzkaller0 [ 1096.781559][T26400] tap0: tun_chr_ioctl cmd 1074025677 [ 1096.818751][T26400] tap0: linktype set to 1 [ 1097.567270][ T7504] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1097.634070][ T7504] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1097.671150][T25984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1097.847627][T25984] device veth0_vlan entered promiscuous mode [ 1097.900895][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1097.927622][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1097.977369][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1098.000010][T26428] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.5892'. [ 1098.038160][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1098.092685][T25984] device veth1_vlan entered promiscuous mode [ 1098.183552][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1098.219810][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1098.268535][T26431] netlink: 'syz.2.5893': attribute type 33 has an invalid length. [ 1098.302064][T26431] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5893'. [ 1098.433949][ T7504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1098.470159][ T7504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1098.521778][T25984] device veth0_macvtap entered promiscuous mode [ 1098.554178][T25984] device veth1_macvtap entered promiscuous mode [ 1098.644451][T25984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1098.695094][T25984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.733856][T25984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1098.770747][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1098.790379][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1098.839944][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1098.871985][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1098.919005][T25984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1098.945024][T25984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.975178][T25984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1099.010877][T25984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.048594][T25984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1099.090382][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1099.100752][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1099.138542][T25984] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.154773][T25984] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.170022][T25984] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.182847][T25984] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.495563][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1099.503506][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1099.562852][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1099.623886][ T7523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1099.641966][ T7523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1099.676263][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1099.923939][T26452] netlink: 'syz.2.5897': attribute type 2 has an invalid length. [ 1099.951658][T26452] netlink: 'syz.2.5897': attribute type 8 has an invalid length. [ 1099.967207][T26452] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5897'. [ 1102.341863][T26499] netlink: 'syz.0.5908': attribute type 10 has an invalid length. [ 1102.364817][T26499] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.5908'. [ 1103.007464][T26508] device syzkaller0 entered promiscuous mode [ 1105.571985][T26510] netlink: 'syz.2.5913': attribute type 10 has an invalid length. [ 1105.605617][T26510] team0: Port device geneve1 added [ 1105.622493][T26515] netlink: 'syz.3.5914': attribute type 27 has an invalid length. [ 1105.783084][T26529] netlink: 'syz.5.5917': attribute type 2 has an invalid length. [ 1105.791122][T26529] netlink: 'syz.5.5917': attribute type 1 has an invalid length. [ 1105.799561][T26529] netlink: 170140 bytes leftover after parsing attributes in process `syz.5.5917'. [ 1105.801005][T26515] bond0: (slave bond_slave_0): Releasing backup interface [ 1105.858044][T26526] delete_channel: no stack [ 1106.207826][T26541] netlink: 'syz.3.5921': attribute type 4 has an invalid length. [ 1106.233424][T26541] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5921'. [ 1106.252744][T26545] netlink: 'syz.0.5922': attribute type 13 has an invalid length. [ 1106.320931][T26545] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5922'. [ 1106.334927][T26545] syz_tun: refused to change device tx_queue_len [ 1106.341548][T26545] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1107.810274][T26557] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.5925'. [ 1108.015756][T26565] netlink: 'syz.0.5927': attribute type 21 has an invalid length. [ 1108.023862][T26565] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5927'. [ 1108.070859][T26565] netlink: 'syz.0.5927': attribute type 4 has an invalid length. [ 1108.107264][T26565] netlink: 'syz.0.5927': attribute type 5 has an invalid length. [ 1108.142765][T26565] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5927'. [ 1108.239001][T26584] netlink: 'syz.3.5932': attribute type 10 has an invalid length. [ 1108.330832][T26584] team0: Device ipvlan1 failed to register rx_handler [ 1108.684408][T26600] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5937'. [ 1111.382324][T26637] netlink: 152 bytes leftover after parsing attributes in process `syz.5.5945'. [ 1111.600671][T26632] device syzkaller0 entered promiscuous mode [ 1111.946087][T26659] validate_nla: 2 callbacks suppressed [ 1111.946107][T26659] netlink: 'syz.0.5951': attribute type 21 has an invalid length. [ 1112.034934][T26659] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1112.042300][T26659] IPv6: NLM_F_CREATE should be set when creating new route [ 1112.049714][T26659] IPv6: NLM_F_CREATE should be set when creating new route [ 1112.057021][T26659] IPv6: NLM_F_CREATE should be set when creating new route [ 1112.408141][T26671] netlink: 'syz.0.5953': attribute type 27 has an invalid length. [ 1112.427999][T26671] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5953'. [ 1112.589297][T26678] netlink: 'syz.5.5955': attribute type 3 has an invalid length. [ 1112.599898][T26678] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.5955'. [ 1115.045858][T26666] netlink: 'syz.2.5949': attribute type 4 has an invalid length. [ 1115.053680][T26666] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5949'. [ 1115.109921][T26666] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1115.135327][T26676] netlink: 'syz.2.5949': attribute type 10 has an invalid length. [ 1115.154086][T26676] team0: Device ipvlan1 failed to register rx_handler [ 1115.838078][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.844481][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.282499][T26705] netlink: 'syz.5.5962': attribute type 1 has an invalid length. [ 1117.729574][T26726] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5967'. [ 1117.786781][T26726] device hsr_slave_0 left promiscuous mode [ 1117.844564][T26726] device hsr_slave_1 left promiscuous mode [ 1118.081011][T26731] netlink: 65055 bytes leftover after parsing attributes in process `syz.5.5969'. [ 1118.933089][ T4279] Bluetooth: hci5: unexpected event 0x06 length: 15 > 3 [ 1119.083122][T26773] netlink: 'syz.1.5981': attribute type 21 has an invalid length. [ 1119.132448][T26773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5981'. [ 1120.864506][T26832] netlink: 'syz.1.5996': attribute type 12 has an invalid length. [ 1120.914768][T26832] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5996'. [ 1121.197786][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1121.207202][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1121.215207][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1121.224300][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1121.232156][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1121.245039][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1122.121599][T26844] chnl_net:caif_netlink_parms(): no params data found [ 1122.180870][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.230463][T26869] tap0: tun_chr_ioctl cmd 2147767517 [ 1122.306882][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.364295][T26871] netlink: 'syz.3.6005': attribute type 1 has an invalid length. [ 1122.448250][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.505657][T26871] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.6005'. [ 1122.627427][ T11] bond0: (slave netdevsim0): Releasing backup interface [ 1122.649263][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.682316][T26844] bridge0: port 1(bridge_slave_0) entered blocking state [ 1122.694759][T26844] bridge0: port 1(bridge_slave_0) entered disabled state [ 1122.705900][T26844] device bridge_slave_0 entered promiscuous mode [ 1122.741801][T26844] bridge0: port 2(bridge_slave_1) entered blocking state [ 1122.760664][T26844] bridge0: port 2(bridge_slave_1) entered disabled state [ 1122.790164][T26844] device bridge_slave_1 entered promiscuous mode [ 1122.888484][T26844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1122.913801][T26844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1123.084463][T26844] team0: Port device team_slave_0 added [ 1123.114863][ T11] device 0 left promiscuous mode [ 1123.146729][T26844] team0: Port device team_slave_1 added [ 1123.214248][ T11] device 0 left promiscuous mode [ 1123.235071][T26844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1123.242149][T26844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1123.265341][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 1123.318145][T26898] netlink: 'syz.5.6013': attribute type 29 has an invalid length. [ 1123.354855][T26844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1123.391513][T26898] netlink: 'syz.5.6013': attribute type 29 has an invalid length. [ 1123.410099][T26844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1123.444732][T26844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1123.518843][T26844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1123.567675][ T11] tipc: Left network mode [ 1123.585042][T26899] netlink: 'syz.5.6013': attribute type 29 has an invalid length. [ 1123.633840][T26898] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.6013'. [ 1123.663200][T26902] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.6013'. [ 1123.957160][T26905] netlink: 'syz.1.6015': attribute type 41 has an invalid length. [ 1123.994247][T26905] netlink: 'syz.1.6015': attribute type 4 has an invalid length. [ 1124.015616][T26905] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6015'. [ 1124.196792][T26905] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1124.259588][T26906] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6015'. [ 1124.522765][T26844] device hsr_slave_0 entered promiscuous mode [ 1124.547724][T26844] device hsr_slave_1 entered promiscuous mode [ 1124.567000][T26844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1124.593317][T26844] Cannot create hsr debugfs directory [ 1125.142088][T26936] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6021'. [ 1125.179778][T26936] device caif0 entered promiscuous mode [ 1125.345009][ T48] Bluetooth: hci2: command 0x041b tx timeout [ 1125.696731][ T11] device gretap0 left promiscuous mode [ 1125.702334][ T11] Ÿë: port 1(gretap0) entered disabled state [ 1125.754022][T26954] netlink: 'syz.2.6027': attribute type 21 has an invalid length. [ 1126.047578][T26965] delete_channel: no stack [ 1126.052255][T26965] delete_channel: no stack [ 1126.246137][T26969] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.6028'. [ 1126.450052][T26969] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1126.465106][T26969] CPU: 0 PID: 26969 Comm: syz.1.6028 Not tainted syzkaller #0 [ 1126.472666][T26969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1126.482892][T26969] Call Trace: [ 1126.486239][T26969] [ 1126.489249][T26969] dump_stack_lvl+0x188/0x24e [ 1126.494031][T26969] ? show_regs_print_info+0x12/0x12 [ 1126.499319][T26969] ? load_image+0x400/0x400 [ 1126.503998][T26969] sysfs_warn_dup+0x8a/0xa0 [ 1126.508614][T26969] sysfs_do_create_link_sd+0xc0/0x110 [ 1126.514076][T26969] device_add+0x7ed/0xfb0 [ 1126.518498][T26969] wiphy_register+0x1d9f/0x2ac0 [ 1126.523460][T26969] ? cfg80211_event_work+0x40/0x40 [ 1126.528630][T26969] ? minstrel_ht_alloc+0x894/0xa20 [ 1126.533825][T26969] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1126.539975][T26969] ieee80211_register_hw+0x2d00/0x39f0 [ 1126.545544][T26969] ? ieee80211_register_hw+0xf11/0x39f0 [ 1126.551146][T26969] ? ieee80211_register_hw+0xf11/0x39f0 [ 1126.556802][T26969] ? ieee80211_tasklet_handler+0x20/0x20 [ 1126.562556][T26969] ? memset+0x1e/0x40 [ 1126.566593][T26969] ? __hrtimer_init+0x186/0x270 [ 1126.571518][T26969] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1126.577346][T26969] hwsim_new_radio_nl+0xafa/0xce0 [ 1126.582493][T26969] genl_family_rcv_msg_doit+0x22a/0x330 [ 1126.588094][T26969] ? end_current_label_crit_section+0x170/0x170 [ 1126.594403][T26969] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1126.600394][T26969] ? bpf_lsm_capable+0x5/0x10 [ 1126.605148][T26969] ? security_capable+0x85/0xb0 [ 1126.610126][T26969] genl_rcv_msg+0x604/0x790 [ 1126.614717][T26969] ? genl_bind+0x360/0x360 [ 1126.619183][T26969] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1126.625607][T26969] netlink_rcv_skb+0x1fb/0x450 [ 1126.630432][T26969] ? genl_bind+0x360/0x360 [ 1126.634902][T26969] ? netlink_ack+0x1170/0x1170 [ 1126.639755][T26969] ? down_read+0x1a8/0x2d0 [ 1126.644237][T26969] genl_rcv+0x24/0x40 [ 1126.648271][T26969] netlink_unicast+0x74d/0x8d0 [ 1126.653126][T26969] netlink_sendmsg+0x8ad/0xbd0 [ 1126.657978][T26969] ? netlink_getsockopt+0x550/0x550 [ 1126.663243][T26969] ? aa_sock_msg_perm+0x94/0x150 [ 1126.668236][T26969] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1126.673572][T26969] ? security_socket_sendmsg+0x7c/0xa0 [ 1126.679106][T26969] ? netlink_getsockopt+0x550/0x550 [ 1126.684360][T26969] ____sys_sendmsg+0x5be/0x970 [ 1126.689226][T26969] ? __sys_sendmsg_sock+0x30/0x30 [ 1126.694308][T26969] ? __import_iovec+0x315/0x500 [ 1126.699241][T26969] ? import_iovec+0x6f/0xa0 [ 1126.703815][T26969] ___sys_sendmsg+0x2a2/0x360 [ 1126.708560][T26969] ? try_to_wake_up+0x67c/0x1080 [ 1126.713567][T26969] ? __sys_sendmsg+0x290/0x290 [ 1126.718581][T26969] __se_sys_sendmsg+0x1bb/0x2a0 [ 1126.723523][T26969] ? __x64_sys_sendmsg+0x80/0x80 [ 1126.728574][T26969] ? lockdep_hardirqs_on+0x94/0x140 [ 1126.733843][T26969] do_syscall_64+0x4c/0xa0 [ 1126.738313][T26969] ? clear_bhb_loop+0x60/0xb0 [ 1126.743068][T26969] ? clear_bhb_loop+0x60/0xb0 [ 1126.747813][T26969] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1126.753761][T26969] RIP: 0033:0x7f9e2bd9c819 [ 1126.758237][T26969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1126.777976][T26969] RSP: 002b:00007f9e2976e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1126.786537][T26969] RAX: ffffffffffffffda RBX: 00007f9e2c016360 RCX: 00007f9e2bd9c819 [ 1126.794559][T26969] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d [ 1126.802588][T26969] RBP: 00007f9e2be32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1126.810601][T26969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1126.818622][T26969] R13: 00007f9e2c0163f8 R14: 00007f9e2c016360 R15: 00007ffe76e288c8 [ 1126.826702][T26969] [ 1127.262258][T26975] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6031'. [ 1127.316285][T26975] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1127.425126][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 1127.561669][T26989] netlink: 5 bytes leftover after parsing attributes in process `syz.3.6032'. [ 1127.583456][T26989] netlink: 'syz.3.6032': attribute type 1 has an invalid length. [ 1127.964202][T26844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1128.233324][T26844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1128.267557][T26844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1128.292254][T26844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1128.405909][T27006] netlink: 'syz.2.6035': attribute type 1 has an invalid length. [ 1128.417913][ T11] device veth0_to_team left promiscuous mode [ 1128.437230][T27006] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6035'. [ 1128.464956][ T11] Ÿë: port 2(veth0_to_team) entered disabled state [ 1128.526820][ T11] device bridge_slave_1 left promiscuous mode [ 1128.552089][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1128.578855][ T11] device bridge_slave_0 left promiscuous mode [ 1128.594961][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.682522][ T11] device veth1_macvtap left promiscuous mode [ 1128.697781][ T11] device veth1_vlan left promiscuous mode [ 1128.711103][ T11] device veth0_vlan left promiscuous mode [ 1129.305360][ T11] team0 (unregistering): Port device geneve1 removed [ 1129.805231][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 1129.946459][ T11] team0 (unregistering): Port device macvlan0 removed [ 1130.439643][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1130.495567][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1130.545460][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1130.903570][ T11] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1130.913229][ T11] bond0 (unregistering): Released all slaves [ 1131.083609][T27025] netlink: 'syz.1.6037': attribute type 1 has an invalid length. [ 1131.399412][T26844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1131.516239][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1131.538563][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1131.600251][T26844] 8021q: adding VLAN 0 to HW filter on device team0 [ 1131.675312][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1131.700387][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1131.805110][ T7523] bridge0: port 1(bridge_slave_0) entered blocking state [ 1131.812465][ T7523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1132.118792][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1132.155230][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1132.164054][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1132.258969][ T7524] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.266271][ T7524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1132.319553][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1132.370702][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1132.428246][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1132.467313][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1132.545747][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1132.605224][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1132.646827][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1132.671796][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1132.691946][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1132.719584][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1132.768639][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1132.816105][T26844] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1134.209650][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1134.245548][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1134.260171][T26844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1134.322282][T27114] device wlan1 entered promiscuous mode [ 1134.426175][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1134.446845][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1134.516262][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1134.530560][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1134.542133][T26844] device veth0_vlan entered promiscuous mode [ 1134.556948][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1134.582797][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1134.600054][T26844] device veth1_vlan entered promiscuous mode [ 1134.661909][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1134.712049][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1134.734557][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1134.747933][ T7524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1134.796289][T26844] device veth0_macvtap entered promiscuous mode [ 1134.842698][T26844] device veth1_macvtap entered promiscuous mode [ 1134.883905][T27130] netlink: 'syz.5.6062': attribute type 9 has an invalid length. [ 1134.902899][T26844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1134.913601][T27130] netlink: 126588 bytes leftover after parsing attributes in process `syz.5.6062'. [ 1134.943598][T26844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.985019][T26844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1135.021363][T26844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.056795][T26844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1135.080156][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1135.089373][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1135.118749][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1135.155106][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1135.189756][T26844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1135.210537][T26844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.236874][T26844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1135.267796][T26844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.308462][T26844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1135.315711][T27142] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1135.326235][T27142] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1135.339569][T26844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.376244][T26844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1135.418568][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1135.437618][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1135.468464][T26844] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.509638][T26844] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.544735][T26844] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.553753][T26844] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.878391][ T7524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1135.902349][ T7524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1135.948961][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1136.027304][ T7516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1136.053873][ T7516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1136.089693][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1136.470177][T27167] device wlan1 entered promiscuous mode [ 1137.863039][T27198] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.6076'. [ 1138.063718][T27203] netlink: 'syz.5.6079': attribute type 22 has an invalid length. [ 1138.448251][T27215] netlink: 'syz.5.6083': attribute type 4 has an invalid length. [ 1138.526818][T27215] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6083'. [ 1139.133663][T27229] netlink: 'syz.2.6086': attribute type 10 has an invalid length. [ 1140.770862][T27266] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6095'. [ 1141.557857][T27296] netlink: 'syz.3.6102': attribute type 21 has an invalid length. [ 1141.593183][T27296] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6102'. [ 1141.734644][T27296] netlink: 'syz.3.6102': attribute type 1 has an invalid length. [ 1141.938156][T27297] netlink: 180 bytes leftover after parsing attributes in process `syz.0.6103'. [ 1142.103434][T27310] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6104'. [ 1142.326481][T27310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1142.372503][T27310] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 1142.457312][T27310] bond0 (unregistering): Released all slaves [ 1142.527149][T27313] netlink: 'syz.1.6105': attribute type 22 has an invalid length. [ 1143.618297][T27338] netlink: 'syz.1.6110': attribute type 1 has an invalid length. [ 1143.657708][T27338] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.6110'. [ 1143.822301][T27342] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6113'. [ 1144.386662][T27356] netlink: 'syz.0.6115': attribute type 10 has an invalid length. [ 1145.514360][T27356] team0: Port device geneve1 added [ 1145.757882][T27370] netlink: 'syz.5.6118': attribute type 6 has an invalid length. [ 1145.787896][T27370] netlink: 164 bytes leftover after parsing attributes in process `syz.5.6118'. [ 1146.740176][T27395] netlink: 'syz.2.6127': attribute type 2 has an invalid length. [ 1146.812625][T27395] netlink: 'syz.2.6127': attribute type 9 has an invalid length. [ 1146.854532][T27395] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6127'. [ 1147.137064][T27399] netlink: 'syz.3.6128': attribute type 10 has an invalid length. [ 1147.244935][T27399] netlink: 55 bytes leftover after parsing attributes in process `syz.3.6128'. [ 1148.878383][T27398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6126'. [ 1148.914888][T27398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6126'. [ 1148.937000][T27398] netlink: 33 bytes leftover after parsing attributes in process `syz.1.6126'. [ 1148.980493][T27398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6126'. [ 1149.014694][T27398] netlink: 33 bytes leftover after parsing attributes in process `syz.1.6126'. [ 1149.054794][T27398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6126'. [ 1149.162094][T27398] netlink: 33 bytes leftover after parsing attributes in process `syz.1.6126'. [ 1149.935573][T27425] netlink: 'syz.0.6134': attribute type 12 has an invalid length. [ 1150.462059][T27447] netlink: 'syz.5.6140': attribute type 3 has an invalid length. [ 1150.495132][T27447] netlink: 'syz.5.6140': attribute type 4 has an invalid length. [ 1150.549426][T27447] netlink: 'syz.5.6140': attribute type 6 has an invalid length. [ 1150.586322][T27447] netlink: 'syz.5.6140': attribute type 15 has an invalid length. [ 1150.621707][T27447] netlink: 'syz.5.6140': attribute type 16 has an invalid length. [ 1150.683378][T27447] netlink: 'syz.5.6140': attribute type 20 has an invalid length. [ 1151.410935][T27469] bˆ¡cÊRݘOC‰ÿæ: renamed from lo [ 1151.523546][T27470] __nla_validate_parse: 4 callbacks suppressed [ 1151.523565][T27470] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6145'. [ 1151.714452][T27474] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6147'. [ 1151.728315][T27470] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6145'. [ 1151.750115][T27479] validate_nla: 10 callbacks suppressed [ 1151.750135][T27479] netlink: 'syz.0.6148': attribute type 25 has an invalid length. [ 1151.856388][T27479] netlink: 'syz.0.6148': attribute type 29 has an invalid length. [ 1153.333609][T27503] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1154.410518][T27535] netlink: 'syz.3.6161': attribute type 29 has an invalid length. [ 1154.461412][T27535] netlink: 'syz.3.6161': attribute type 29 has an invalid length. [ 1154.507750][T27540] netlink: 'syz.3.6161': attribute type 29 has an invalid length. [ 1154.541567][T27544] netlink: 'syz.3.6161': attribute type 29 has an invalid length. [ 1154.668551][T27535] netlink: 'syz.3.6161': attribute type 29 has an invalid length. [ 1155.289745][T27558] netlink: 'syz.5.6168': attribute type 39 has an invalid length. [ 1155.666248][T27564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6170'. [ 1155.687044][T27564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6170'. [ 1155.711072][T27564] netlink: 33 bytes leftover after parsing attributes in process `syz.0.6170'. [ 1155.729414][T27564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6170'. [ 1155.742596][T27564] netlink: 33 bytes leftover after parsing attributes in process `syz.0.6170'. [ 1155.761437][T27564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6170'. [ 1155.770720][T27564] netlink: 33 bytes leftover after parsing attributes in process `syz.0.6170'. [ 1156.783258][T27595] netlink: 92148 bytes leftover after parsing attributes in process `syz.5.6180'. [ 1156.877507][T27598] can: request_module (can-proto-0) failed. [ 1157.584510][T27626] netlink: 'syz.2.6188': attribute type 10 has an invalid length. [ 1157.593880][T27626] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6188'. [ 1157.625539][T27626] bridge0: port 3(hsr0) entered blocking state [ 1157.639453][T27626] bridge0: port 3(hsr0) entered disabled state [ 1157.704782][T27626] bridge0: port 3(hsr0) entered blocking state [ 1157.711995][T27626] bridge0: port 3(hsr0) entered forwarding state [ 1158.259611][T27653] netlink: 'syz.5.6195': attribute type 10 has an invalid length. [ 1158.281897][T27653] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6195'. [ 1158.325129][T27653] netlink: 'syz.5.6195': attribute type 10 has an invalid length. [ 1158.344411][T27653] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6195'. [ 1158.500432][T27658] netlink: 'syz.3.6197': attribute type 11 has an invalid length. [ 1158.514951][T27658] netlink: 192312 bytes leftover after parsing attributes in process `syz.3.6197'. [ 1158.915394][ T48] Bluetooth: hci5: unexpected event 0x2c length: 151 > 17 [ 1158.915448][ T48] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 1159.846109][T27711] netlink: 'syz.3.6210': attribute type 10 has an invalid length. [ 1159.893086][T27711] device hsr0 entered promiscuous mode [ 1159.927590][T27711] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1160.118798][T27711] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.6210'. [ 1160.169684][T27699] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6208'. [ 1160.307762][T27721] netlink: 'syz.0.6213': attribute type 2 has an invalid length. [ 1160.520036][T27728] netlink: 'syz.5.6216': attribute type 13 has an invalid length. [ 1160.569309][T27728] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6216'. [ 1160.590301][T27728] syz_tun: refused to change device tx_queue_len [ 1160.603841][T27728] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1160.643500][T27729] netlink: 'syz.5.6216': attribute type 13 has an invalid length. [ 1160.710247][T27729] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6216'. [ 1160.750743][T27729] syz_tun: refused to change device tx_queue_len [ 1160.824877][T27729] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1160.889614][T27740] netlink: 'syz.3.6219': attribute type 2 has an invalid length. [ 1160.904896][T27728] netlink: 'syz.5.6216': attribute type 10 has an invalid length. [ 1160.945118][T27740] netlink: 'syz.3.6219': attribute type 1 has an invalid length. [ 1160.956548][T27740] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.6219'. [ 1161.385474][ T4279] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1161.406629][ T4275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1161.424821][ T4279] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1161.433411][ T4279] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1161.443406][ T4275] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1161.450983][ T4279] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1161.660018][T27733] delete_channel: no stack [ 1162.181965][T27764] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1162.188930][T27764] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1162.659932][T27757] device syzkaller0 entered promiscuous mode [ 1162.711853][T27746] chnl_net:caif_netlink_parms(): no params data found [ 1162.742741][T27769] netlink: 4068 bytes leftover after parsing attributes in process `syz.2.6225'. [ 1162.765722][T27771] netlink: 'syz.5.6227': attribute type 46 has an invalid length. [ 1163.515922][ T4279] Bluetooth: hci0: command 0x0409 tx timeout [ 1165.193650][T27779] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6229'. [ 1165.380357][ T4343] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.503447][ T4343] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.594491][ T4279] Bluetooth: hci0: command 0x041b tx timeout [ 1165.690187][ T4343] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.779211][T27791] netlink: 'syz.3.6233': attribute type 2 has an invalid length. [ 1165.886984][ T4343] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.939998][T27746] bridge0: port 1(bridge_slave_0) entered blocking state [ 1165.948033][T27746] bridge0: port 1(bridge_slave_0) entered disabled state [ 1165.958900][T27746] device bridge_slave_0 entered promiscuous mode [ 1166.000916][T27796] device syzkaller0 entered promiscuous mode [ 1166.016877][T27746] bridge0: port 2(bridge_slave_1) entered blocking state [ 1166.026062][T27746] bridge0: port 2(bridge_slave_1) entered disabled state [ 1166.034450][T27746] device bridge_slave_1 entered promiscuous mode [ 1166.099400][T27746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1166.152502][T27746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1166.216862][T27801] netlink: 160 bytes leftover after parsing attributes in process `syz.3.6236'. [ 1166.351426][T27746] team0: Port device team_slave_0 added [ 1166.363026][T27746] team0: Port device team_slave_1 added [ 1166.390937][T27804] netlink: 'syz.2.6237': attribute type 1 has an invalid length. [ 1166.412901][T27809] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6238'. [ 1167.684101][ T4279] Bluetooth: hci0: command 0x040f tx timeout [ 1169.102936][T27746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1169.140891][T27746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1169.183392][T27746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1169.232341][ T4343] device 0 left promiscuous mode [ 1169.295403][T27746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1169.315016][T27831] netlink: 'syz.2.6243': attribute type 29 has an invalid length. [ 1169.335250][T27746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1169.372688][T27746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1169.394648][T27831] netlink: 'syz.2.6243': attribute type 29 has an invalid length. [ 1169.404603][ T4343] device 1 left promiscuous mode [ 1169.493274][T27831] netlink: 'syz.2.6243': attribute type 29 has an invalid length. [ 1169.513897][ T4343] device 2 left promiscuous mode [ 1169.598442][T27746] device hsr_slave_0 entered promiscuous mode [ 1169.708665][ T7502] tipc: Subscription rejected, illegal request [ 1169.724899][T27746] device hsr_slave_1 entered promiscuous mode [ 1169.745967][ T4279] Bluetooth: hci0: command 0x0419 tx timeout [ 1169.771733][T27746] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1169.785784][T27746] Cannot create hsr debugfs directory [ 1169.798648][ T4343] tipc: Left network mode [ 1170.370066][T27863] netlink: 'syz.5.6251': attribute type 2 has an invalid length. [ 1170.523499][T27859] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6250'. [ 1170.554708][T27860] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6250'. [ 1171.635935][T27890] netlink: 'syz.3.6256': attribute type 16 has an invalid length. [ 1171.644043][T27890] netlink: 59 bytes leftover after parsing attributes in process `syz.3.6256'. [ 1171.711640][ T4343] device gretap0 left promiscuous mode [ 1171.741124][ T4343] Ÿë: port 2(gretap0) entered disabled state [ 1172.059202][T27910] netlink: 'syz.0.6260': attribute type 39 has an invalid length. [ 1172.333948][T27907] netlink: 'syz.3.6259': attribute type 39 has an invalid length. [ 1172.871358][T27917] netlink: 'syz.2.6262': attribute type 29 has an invalid length. [ 1173.037017][T27924] netlink: 'syz.0.6264': attribute type 1 has an invalid length. [ 1173.055898][T27924] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6264'. [ 1173.097518][ T4343] team0: Port device wlan1 removed [ 1173.144751][T27917] netlink: 'syz.2.6262': attribute type 29 has an invalid length. [ 1173.197857][T27746] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1173.237511][T27746] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1173.276398][T27746] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1173.517353][T27746] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1173.530821][T27937] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6266'. [ 1173.564950][T27935] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6265'. [ 1173.689262][T27935] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 1174.023294][ T4343] device veth0_to_team left promiscuous mode [ 1174.040542][ T4343] Ÿë: port 1(veth0_to_team) entered disabled state [ 1174.100622][ T4343] device hsr_slave_0 left promiscuous mode [ 1174.115420][ T4343] device hsr_slave_1 left promiscuous mode [ 1174.492922][ T4343] team0 (unregistering): Port device geneve1 removed [ 1174.944039][ T4343] team0 (unregistering): Port device team_slave_1 removed [ 1174.997090][ T4343] team0 (unregistering): Port device C removed [ 1175.808645][T27746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1175.881013][T27996] validate_nla: 3 callbacks suppressed [ 1175.881032][T27996] netlink: 'syz.3.6279': attribute type 9 has an invalid length. [ 1175.910984][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1175.925623][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1175.947150][T27746] 8021q: adding VLAN 0 to HW filter on device team0 [ 1175.976181][T27996] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6279'. [ 1175.999360][ T7502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1176.055642][ T7502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1176.095677][ T7502] bridge0: port 1(bridge_slave_0) entered blocking state [ 1176.102875][ T7502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1176.132565][ T7502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1176.193083][ T7502] tipc: Subscription rejected, illegal request [ 1176.221348][ T7502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1176.241216][ T7502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1176.285411][ T7502] bridge0: port 2(bridge_slave_1) entered blocking state [ 1176.292679][ T7502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1176.385225][ T7502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1176.428181][ T7502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1176.456349][ T7502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1176.499295][ T7502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1176.529579][ T7502] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1176.556404][ T7502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1176.586120][ T7502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1176.616424][ T7502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1176.637847][ T7502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1176.647936][ T7502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1176.657310][ T7502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1176.682432][T27746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1177.267041][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.273426][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.568032][T28035] netlink: 'syz.2.6286': attribute type 10 has an invalid length. [ 1177.666311][T28035] bridge0: port 3(hsr0) entered disabled state [ 1177.672749][T28035] bridge0: port 2(bridge_slave_1) entered disabled state [ 1177.680127][T28035] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.118294][T28051] netlink: 'syz.0.6289': attribute type 21 has an invalid length. [ 1178.239354][T28058] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.6293'. [ 1178.252154][T28062] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.6292'. [ 1178.279685][T28058] bridge_slave_1: default FDB implementation only supports local addresses [ 1178.379772][T28062] device wg2 left promiscuous mode [ 1178.453567][ T7504] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1178.516182][ T7504] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1178.577083][T27746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1178.713421][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1178.759869][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1179.089604][T27746] device veth0_vlan entered promiscuous mode [ 1179.115801][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1179.145894][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1179.173475][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1179.184338][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1179.230610][T27746] device veth1_vlan entered promiscuous mode [ 1179.376129][T27746] device veth0_macvtap entered promiscuous mode [ 1179.410661][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1179.435699][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1179.466144][T27746] device veth1_macvtap entered promiscuous mode [ 1179.487773][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1179.522013][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1179.561602][T27746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1179.603194][T27746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.634612][T27746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1179.690321][T27746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.722039][T27746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1179.745185][T27746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.780560][T27746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1179.809776][T28109] netlink: 'syz.3.6303': attribute type 3 has an invalid length. [ 1179.834913][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1179.845001][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1179.877580][T27746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1179.889773][T28109] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6303'. [ 1179.916172][T27746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.951057][T27746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1179.994835][T27746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1180.043141][T27746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1180.094662][T27746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1180.114632][T27746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1180.145067][T27746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1180.186223][T27746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1180.222401][T27746] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.255196][T27746] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.264346][T27746] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.304805][T27746] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.316504][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1180.331201][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1180.640325][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1180.679923][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1180.743236][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1180.767812][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1180.815433][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1180.852936][ T7502] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1181.373860][T28145] netlink: 65027 bytes leftover after parsing attributes in process `syz.2.6310'. [ 1186.237114][T28213] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6326'. [ 1188.782830][T28213] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6326'. [ 1190.039601][T28248] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6337'. [ 1190.119867][T28248] netlink: 'syz.2.6337': attribute type 4 has an invalid length. [ 1190.164455][T28249] netlink: 'syz.0.6336': attribute type 39 has an invalid length. [ 1190.166020][T28248] netlink: 'syz.2.6337': attribute type 1 has an invalid length. [ 1190.237227][T28248] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.6337'. [ 1191.556266][T28279] netlink: 'syz.1.6343': attribute type 3 has an invalid length. [ 1191.576005][T28273] netlink: 'syz.2.6341': attribute type 1 has an invalid length. [ 1191.587189][T28279] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6343'. [ 1191.621905][T28273] netlink: 63743 bytes leftover after parsing attributes in process `syz.2.6341'. [ 1192.926465][T28323] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6358'. [ 1193.270122][T28336] netlink: 14478 bytes leftover after parsing attributes in process `syz.1.6361'. [ 1193.931217][T28349] netlink: 'syz.1.6365': attribute type 2 has an invalid length. [ 1193.983590][T28349] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6365'. [ 1194.487519][T28366] netlink: 'syz.1.6369': attribute type 1 has an invalid length. [ 1194.530043][T28366] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.6369'. [ 1194.561753][T28368] netlink: 'syz.2.6370': attribute type 4 has an invalid length. [ 1194.592994][T28368] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6370'. [ 1194.943607][T28399] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.6376'. [ 1194.982864][T28399] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6376'. [ 1195.169027][T28406] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.6379'. [ 1195.192113][T28406] netlink: zone id is out of range [ 1195.206656][T28406] netlink: zone id is out of range [ 1195.230983][T28406] netlink: zone id is out of range [ 1195.242534][T28406] netlink: get zone limit has 8 unknown bytes [ 1196.621566][T28430] netlink: 'syz.3.6385': attribute type 1 has an invalid length. [ 1196.657153][T28430] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.6385'. [ 1196.689806][T28429] netlink: 'syz.3.6385': attribute type 1 has an invalid length. [ 1196.715800][T28429] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.6385'. [ 1196.762009][T28427] device syzkaller0 entered promiscuous mode [ 1199.825093][ T4279] Bluetooth: hci4: command 0x0406 tx timeout [ 1200.327851][T28463] netlink: 'syz.2.6396': attribute type 2 has an invalid length. [ 1200.387197][T28461] netlink: 'syz.0.6395': attribute type 11 has an invalid length. [ 1200.413047][T28463] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.6396'. [ 1201.062073][T28476] netlink: 'syz.5.6393': attribute type 21 has an invalid length. [ 1201.080329][T28476] netlink: 128 bytes leftover after parsing attributes in process `syz.5.6393'. [ 1201.105442][T28476] netlink: 'syz.5.6393': attribute type 4 has an invalid length. [ 1201.134143][T28476] netlink: 'syz.5.6393': attribute type 5 has an invalid length. [ 1201.166862][T28476] netlink: 3 bytes leftover after parsing attributes in process `syz.5.6393'. [ 1201.189049][T28484] netlink: 'syz.3.6398': attribute type 1 has an invalid length. [ 1201.203526][T28484] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.6398'. [ 1201.368684][T28490] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6401'. [ 1201.668441][T28503] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.6406'. [ 1201.752146][T28505] syz.2.6407[28505] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1201.752261][T28505] syz.2.6407[28505] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1205.055307][T28540] ref_ctr_offset mismatch. inode: 0x755 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 1205.183720][T28541] netlink: 'syz.5.6413': attribute type 1 has an invalid length. [ 1205.203999][T28541] netlink: 116376 bytes leftover after parsing attributes in process `syz.5.6413'. [ 1205.255357][T28540] netlink: 'syz.2.6416': attribute type 21 has an invalid length. [ 1205.284875][T28540] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6416'. [ 1205.343107][T28547] netlink: 'syz.0.6418': attribute type 5 has an invalid length. [ 1205.608622][T28555] netlink: 'syz.0.6422': attribute type 10 has an invalid length. [ 1205.633993][T28557] netlink: 'syz.0.6422': attribute type 1 has an invalid length. [ 1205.642391][T28555] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6422'. [ 1205.649410][T28557] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.6422'. [ 1205.704861][T28555] device bond0 entered promiscuous mode [ 1205.710518][T28555] device bond_slave_0 entered promiscuous mode [ 1205.766718][T28555] device bond_slave_1 entered promiscuous mode [ 1205.773351][T28555] bridge0: port 3(bond0) entered blocking state [ 1205.825176][T28555] bridge0: port 3(bond0) entered disabled state [ 1205.858061][T28555] bridge0: port 3(bond0) entered blocking state [ 1205.864482][T28555] bridge0: port 3(bond0) entered forwarding state [ 1208.693955][T28556] device veth1_macvtap left promiscuous mode [ 1208.703379][T28556] device macsec0 entered promiscuous mode [ 1208.962001][T28577] netlink: 'syz.2.6427': attribute type 10 has an invalid length. [ 1209.003538][T28577] netlink: 55 bytes leftover after parsing attributes in process `syz.2.6427'. [ 1209.931744][T28583] netlink: 'syz.1.6431': attribute type 10 has an invalid length. [ 1209.953103][T28583] team0: Device vxcan1 is of different type [ 1210.244408][T28606] netlink: 'syz.3.6436': attribute type 10 has an invalid length. [ 1210.247139][T28608] netlink: 16054 bytes leftover after parsing attributes in process `syz.0.6437'. [ 1210.574224][T28617] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6438'. [ 1210.935641][T28632] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6444'. [ 1211.385496][T28640] device syzkaller0 entered promiscuous mode [ 1212.062272][T28644] netlink: 19831 bytes leftover after parsing attributes in process `syz.1.6447'. [ 1212.093410][T28646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6445'. [ 1212.657789][T28666] netlink: 'syz.1.6453': attribute type 1 has an invalid length. [ 1212.972391][T28679] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6458'. [ 1213.002862][T28679] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6458'. [ 1213.026864][T28682] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6458'. [ 1213.065060][T28681] netlink: 'syz.2.6459': attribute type 10 has an invalid length. [ 1213.084379][T28681] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6459'. [ 1213.123750][T28679] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6458'. [ 1213.741103][T28696] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6464'. [ 1214.106137][T28696] can: request_module (can-proto-0) failed. [ 1214.259958][ T4279] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1214.272837][ T4279] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1214.282004][ T4279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1214.296972][ T4279] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1214.304803][ T4279] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1214.312550][ T4279] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1214.519227][ T7524] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.660817][T28716] device pim6reg1 entered promiscuous mode [ 1214.747829][ T7524] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.886128][ T7524] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.026961][ T7524] device netdevsim0 left promiscuous mode [ 1215.087176][ T7524] team0: Port device netdevsim0 removed [ 1215.102696][ T7524] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.536018][ T7524] device 0 left promiscuous mode [ 1215.661847][T28705] chnl_net:caif_netlink_parms(): no params data found [ 1215.701179][ T7524] device 1 left promiscuous mode [ 1215.905813][ T7524] device 2 left promiscuous mode [ 1216.068968][ T4279] Bluetooth: hci0: unexpected event 0x01 length: 15 > 1 [ 1216.094527][ T7524] tipc: Left network mode [ 1216.188545][T28705] bridge0: port 1(bridge_slave_0) entered blocking state [ 1216.275145][T28705] bridge0: port 1(bridge_slave_0) entered disabled state [ 1216.283552][T28705] device bridge_slave_0 entered promiscuous mode [ 1216.384961][ T4279] Bluetooth: hci3: command 0x0409 tx timeout [ 1216.391423][T28705] bridge0: port 2(bridge_slave_1) entered blocking state [ 1216.495310][T28705] bridge0: port 2(bridge_slave_1) entered disabled state [ 1216.556839][T28705] device bridge_slave_1 entered promiscuous mode [ 1217.327184][T28778] delete_channel: no stack [ 1217.498468][T28705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1217.776010][T28705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1218.400979][T28705] team0: Port device team_slave_0 added [ 1218.475731][T28705] team0: Port device team_slave_1 added [ 1218.567610][ T4279] Bluetooth: hci3: command 0x041b tx timeout [ 1218.813368][ T4279] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1245.105118][ T4353] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2642 jiffies s: 144041 root: 0x2/. [ 1245.137654][ T4353] rcu: blocking rcu_node structures (internal RCU debug): [ 1245.164609][ T4353] Sending NMI from CPU 0 to CPUs 1: [ 1245.170215][ C1] NMI backtrace for cpu 1 [ 1245.170229][ C1] CPU: 1 PID: 28794 Comm: syz.3.6485 Not tainted syzkaller #0 [ 1245.170248][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1245.170259][ C1] RIP: 0010:lockdep_hardirqs_off+0x7b/0x100 [ 1245.170285][ C1] Code: 65 8b 05 98 af d4 75 85 c0 74 56 65 4c 8b 35 5c a8 d4 75 48 c7 c7 a0 10 8c 8a e8 f0 13 00 00 65 c7 05 75 af d4 75 00 00 00 00 <49> 89 9e 88 0a 00 00 41 8b 86 78 0a 00 00 ff c0 41 89 86 78 0a 00 [ 1245.170301][ C1] RSP: 0018:ffffc900001e09c8 EFLAGS: 00000086 [ 1245.170318][ C1] RAX: 0000000000000001 RBX: ffffffff8a2da39a RCX: db4d0da451d07c00 [ 1245.170331][ C1] RDX: 0000000000000000 RSI: ffffffff8a8c10a0 RDI: ffffffff8adf0d20 [ 1245.170345][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1245.170355][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1245.170366][ C1] R13: 0000000000000000 R14: ffff8880549c5940 R15: 0000000000000000 [ 1245.170378][ C1] FS: 00007f3cb85876c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1245.170395][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1245.170408][ C1] CR2: 00007fec5dc8eff8 CR3: 00000000279ee000 CR4: 00000000003506e0 [ 1245.170424][ C1] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000200000000300 [ 1245.170437][ C1] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1245.170450][ C1] Call Trace: [ 1245.170456][ C1] [ 1245.170465][ C1] irqentry_enter+0x27/0x50 [ 1245.170486][ C1] sysvec_irq_work+0xa/0xc0 [ 1245.170503][ C1] asm_sysvec_irq_work+0x16/0x20 [ 1245.170526][ C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 1245.170546][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 d2 33 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 1245.170561][ C1] RSP: 0018:ffffc900001e0ac0 EFLAGS: 00000206 [ 1245.170576][ C1] RAX: db4d0da451d07c00 RBX: 1ffff9200003c160 RCX: db4d0da451d07c00 [ 1245.170589][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c10a0 RDI: ffffffff8adf0d20 [ 1245.170603][ C1] RBP: ffffc900001e0bb0 R08: ffff8880b8f3580b R09: 1ffff110171e6b01 [ 1245.170617][ C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: 0000000000000246 [ 1245.170631][ C1] R13: dffffc0000000000 R14: ffff8880b8f3b900 R15: 0000000000000002 [ 1245.170655][ C1] ? mac80211_hwsim_beacon_tx+0x61e/0xae0 [ 1245.170679][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 1245.170706][ C1] __rcu_read_unlock+0x78/0xd0 [ 1245.170730][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 1245.170759][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1245.170779][ C1] ieee80211_iterate_active_interfaces_atomic+0x156/0x170 [ 1245.170810][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 1245.170842][ C1] __hrtimer_run_queues+0x54a/0xd50 [ 1245.170869][ C1] ? hw_scan_work+0xf50/0xf50 [ 1245.170902][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1245.170923][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 1245.170954][ C1] hrtimer_run_softirq+0x183/0x2a0 [ 1245.170980][ C1] handle_softirqs+0x2a1/0x930 [ 1245.171003][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 1245.171025][ C1] ? do_softirq+0x210/0x210 [ 1245.171048][ C1] __irq_exit_rcu+0x13b/0x230 [ 1245.171066][ C1] ? irq_exit_rcu+0x20/0x20 [ 1245.171091][ C1] irq_exit_rcu+0x5/0x20 [ 1245.171107][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1245.171127][ C1] [ 1245.171133][ C1] [ 1245.171139][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1245.171163][ C1] RIP: 0010:__sanitizer_cov_trace_switch+0x4/0xe0 [ 1245.171186][ C1] Code: 77 1e 49 ff c0 4c 89 02 48 c7 44 0a 08 07 00 00 00 48 89 7c 0a 10 48 89 74 0a 18 48 89 44 0a 20 c3 0f 1f 44 00 00 48 8b 4e 08 <48> 83 c1 f8 48 c1 c1 3d 48 83 f9 08 0f 92 c0 b2 8b d2 ea 20 c2 80 [ 1245.171202][ C1] RSP: 0018:ffffc9000347f7c0 EFLAGS: 00000293 [ 1245.171216][ C1] RAX: 0000000000000002 RBX: 0000000000000001 RCX: 0000000000000010 [ 1245.171228][ C1] RDX: ffffffff81d09347 RSI: ffffffff8cc16e30 RDI: 0000000000000001 [ 1245.171242][ C1] RBP: ffffffff96c57584 R08: ffff8880549c5940 R09: 0000000000000002 [ 1245.171255][ C1] R10: 0000000000000005 R11: 0000000000000000 R12: 1ffffffff2d8aeb0 [ 1245.171267][ C1] R13: 0000000000000000 R14: ffffffff96c57580 R15: 0000000000000000 [ 1245.171286][ C1] ? alloc_pages+0xc7/0x740 [ 1245.171316][ C1] alloc_pages+0x254/0x740 [ 1245.171341][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 1245.171363][ C1] __get_free_pages+0x8/0x30 [ 1245.171389][ C1] kasan_populate_vmalloc_pte+0x31/0xf0 [ 1245.171409][ C1] ? __apply_to_page_range+0x977/0xd10 [ 1245.171429][ C1] __apply_to_page_range+0x989/0xd10 [ 1245.171453][ C1] ? kasan_populate_vmalloc+0x70/0x70 [ 1245.171477][ C1] alloc_vmap_area+0x178f/0x18c0 [ 1245.171511][ C1] ? vm_map_ram+0xab0/0xab0 [ 1245.171535][ C1] ? kasan_save_stack+0x60/0x60 [ 1245.171564][ C1] __get_vm_area_node+0x158/0x330 [ 1245.171588][ C1] ? __kmem_cache_free+0xb6/0x1f0 [ 1245.171610][ C1] __vmalloc_node_range+0x357/0x13b0 [ 1245.171634][ C1] ? btf_new_fd+0x277/0x780 [ 1245.171674][ C1] ? free_vm_area+0x50/0x50 [ 1245.171699][ C1] ? rcu_is_watching+0x11/0xa0 [ 1245.171733][ C1] ? kvmalloc_node+0x6c/0x180 [ 1245.171759][ C1] ? trace_kmalloc+0x22/0xa0 [ 1245.171789][ C1] kvmalloc_node+0x13b/0x180 [ 1245.171817][ C1] ? btf_new_fd+0x277/0x780 [ 1245.171840][ C1] btf_new_fd+0x277/0x780 [ 1245.171866][ C1] __sys_bpf+0x612/0x780 [ 1245.171894][ C1] ? bpf_link_show_fdinfo+0x380/0x380 [ 1245.171928][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1245.171962][ C1] __x64_sys_bpf+0x78/0x90 [ 1245.171989][ C1] do_syscall_64+0x4c/0xa0 [ 1245.172014][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1245.172037][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1245.172062][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1245.172085][ C1] RIP: 0033:0x7f3cb779c819 [ 1245.172101][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1245.172116][ C1] RSP: 002b:00007f3cb8587028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1245.172134][ C1] RAX: ffffffffffffffda RBX: 00007f3cb7a16090 RCX: 00007f3cb779c819 [ 1245.172148][ C1] RDX: 0000000000000020 RSI: 0000200000000280 RDI: 0000000000000012 [ 1245.172161][ C1] RBP: 00007f3cb7832c91 R08: 0000000000000000 R09: 0000000000000000 [ 1245.172173][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1245.172184][ C1] R13: 00007f3cb7a16128 R14: 00007f3cb7a16090 R15: 00007ffd5fa41b38 [ 1245.172209][ C1]