last executing test programs: 19m29.58748004s ago: executing program 1 (id=6557): r0 = socket$kcm(0xa, 0x6, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="18020000e2ffffff00000000000000c685000000360000009500001800000000922ae83713ab9600010000801b10fb54a8cb72d232ad558c46fff4208d4990ec11ce9413ac30e00bd0081f8504e19a5183d769676520e98a263345e44d5ad12bca35510100c4d86abeb12303ff1c9fe0d0020000d60400000007d3670000008aff66d6b3181ffc1d62a3954c1198bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d24538556e5e57bee3b8cf464ef3c6a7def8bad3ca6e3abdb21696e340bb8e2a093add57196b40def3858ef569147fa4108328392d322ab5df10a2f69a6bdf72ee7944e810d0223917c3d042410f57466f59544047d6d8ac44060000000000ee16c729300d2301800000000000002b5a8b05fcc154ad5290a8cdb97c343f454ff69dd6cbde49b28a6cb5f4fc0001745cff6e00e7ffffff0000acf3209a08439f1ff01779b6f6df7e02aa6d7760525b595fe1f697bc114ed1778e97a3f0395f946974cfb458be2a34cf924dc37b5592bf17956f3547497aba814382ff67b345b677a9d6523d87008000000400000000003fe8613ca29ff92be0d8deffff7b68136b0046d535dd39c0f35408869e9b342b953f91447e6b9eab304f134306320600a44095254b45a6c1312a13696c7202df5f764713504facc532c5a6d44d99ec7530ed7b0311000000000000e54e9072a22d911f4a2c2e2fa806e63c5cd98a8569a6d6bcfb000064885117e2ad910eae67e0ebe380d0f648713e68153579e02d71c58d147b00821ab9a6475b31e1ebf1369a04000000fbf3983f283f2f00000000992774814d63c933912d000006000000a66acb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483bd4bd287c83dd998a74694d18bdd8ad0983bc90770bbd26a82b9d99d5fc04563b523c47ef8c33400e90d02000000000000000edf1147a7afe772cd45af8aeffe2753088e02ca6bb2feec446ce7dbce66f0a93a03371320980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b5062809a7418b165dd0336d226bac1e1223be1c97b15175d0e664beb126000e96549e1a1228c686edb475b705eaa9515c96f4fc6b3c925ea404e0f1de61026dc6c6618580fd6ce9eac602c1756f6d1056712412131ed9925989e01eae489ec7052e0ed72c326c7a8aa63999e2297c54ce1822d14b7c7699a9d0600f11f2e7f474cffbc35bc8623cd5eb68af82275a940be0400000000423346da092cbe220de96d6a8e9f32f18d1f606b381e4903b500000000000000000000004a2357ba5f03000000000000005dcf4f2aaee86d4802000000000000007cdb686d5da2a42e4b5024b6535811f362201d4f82012e6af704973d04ea923c19e6cb723c1923b3eea2d73e176dff383c9fbbac53dfdcb1a68c98e96fe39eec23963faf3ebed3409144c7c53d6318ced678a621450a9b01e9f2772e5f2999d3435da02556e36c3215d2bd4e96c93bff3ad04a82ff3cfadcf65eb92adc6c68d66b11cb2d7556414a86dfa94bb7aa52c7febb1e9b2efcbbc5bccf9d39bed802f4f056976a9a362ee9cc624ec454b90200fd9603f96908bddc14500000000000000000000000000044d917c62b27679913075731e8fddb07c10c82002d60181588ae63a440454287de9e340f611267f37bdd0f2d21cb06fcaf45a0a297e396f428d43371424b307eef82c5d6d19f3ef0d3b8f7fa51957e3099caab31133b34a1d3eebc0f0c9056df2e9667ba0b55695c7894010079b07e7aef7785e248deb8c83ab6eb2c72c484241dc3b66da78260f800fffd39368b952f6f4a10295c50c887a31d8b543c5d10f2dbd4d0b84eaad43feb6e169a9f2fcff7000000000000000000e011bc6366f56fa787f212c1f8c0f47f5078191c8a02ad436725771738a2a98891971e3b932352896e1ea10f62e8ef7a87e16151b39d6c27575714540d8c293a3fa4b5a825360423c1cbc8b5d19167152823ed853140edda002c16c842b168bb55f6bb713deb57d0aa78d6d4e5fc5be2c402bd77125d98120358900000892b135a92e8c844938aa98ba4839a1408a696454d40e5eed4d4dce481ca86bfac54c330331b7f2cde17cbaeb0377696faf546ecbe742d73d47d726a50f6e752f3325255bd7e8b5923aa3cfb6f7e06494f21ca450139c558000000000000000000000800000000000000000075aa0000000000000000000000005560bd9eb81e839e4992e64b074a66cccccf00334fa94da8477be7d99b558ec6a5b1596ac1e7617c6b32eed0cc70286caf2c5189a103f4b0b04aff171c4d388ccf67fea37e782f025c94c853cde330a193a967d907a8c88fcb033e680f559a72150cb900bafcd536f48797915a2fe9922ce27300009e1b36aa4730117d9b00000000003c630000000000008fbbd11b015c415ca04192fbfb1a8b0e3460af35771dbac10062835c9bab3ad09f7a022c52d8000000000000000000004000000000000000000000000000000000000000000400000000000000000000000000006ec473c54399b7b8aa1ee46132fc45da8292631178cecf19550108b8b8423de4295777a17bf4dfdfee5de0f3e4dadf51ab9562827b762fa611ba5f32861c19dffe1dc9fd5c41cd46cf131fd6b0c2ddad90ac33f768f9ecc70327c59918fa5a249befe98262f53c8182d95f6da3698a6a88c2c31d801a8f1f5e0ce05138d5422da0a6a62b9dfe1f39775d1d0c9186096415f544aaf76b0a1c877a6c826a5adcfb22c4a0e5a46271caa3eaf4f389dd5f3c20dbddc0377a4266d7b9fd61b9287e9b4be0a413ee31be0ddecab0ef7b25cba1fb3654ddf291ecb7768ac1e177042cb4c452fa6b3966950000000000000000c187da23d6855500fe8510b51e13a890e394b84a6ea2cc8d42b97c697c29122298d55e2e1cca8e07abda2606a3f381c64b9fec0000000a7965e4854e8e3572ad5149b3872342dea9252132860c9af1bd5fe263c0313dea5d6e0c11a466d6892ed65f34667dd79b07b5cbdd8aa7dd561a26b5562d4861a7e1b0f48930e0b696ea3bee7eb72794e163d7aeac9a0fa5403ac9cb421eae283b0550f1d0d339cd7b96e71d3ab48ad9d7975e0c9b117f71d3ab80a0c9b0284ecc469fa6181c9c71fce07a6ffb23296a107763138e8d9876291af2076890c47925ac773d95d2ca42acb3e5f3a1550665b898462c139ffd0106bc8a61b6117d252efcab7106b4c3a3c13a70ff452e9d2096142c517b0e91b5cf88332faca5b3ee96363065c3ce32d3d39ec36e20d597e05664f2526bd918090649da11f7299789d00f502cdf1e99d3efecb9b457642fe810370ba4fbe00fa60a28af966a27a1659e448bbe43a1dcd2ea760018b57a36ac41ef2051a7b703d55c0602540663016e20d50385766df4dac47802a55bd38dd767ee9960c6daa704fc5d01a14591f26b7b538c9bb22f6a2f7a34d1b9edfd125a9e25a110228c64253588ff420644dbc0854e69a7bdda72f93ceaccf92cfe7dd6296c950db10f6dd8a5ef9b73cf6a12a1ba16fdc7e35b805f4fd2fcff0a623722149c1465e4de2d53f0f10b14c21865027abc71a12cb1e9f8029c7a20000000eeb0d53a83e518c8d2052c08b515d9d0bde24ac4e798040c7db0bb03c019507d6377f3d5dd94a27abc6d6b120d61f772407e0d2cb50d29168b68aef9f176b4c3aa8b21279d4ea9c1f669aa8c2c17d5b3a8d1dda58d26f1019af04b7774c85d5bce8be010f27c5211938031c3404680b01279c778bd1fe1b48c4b5b8e0fe756e54a8d76b7cec5e3407d93b4eadc446440607de844acf5524a4657e33af2115547b735b57b5092d0bc8fa6acb832509abe0882d570ce400aaebd7baff88526608d6991aac95751671174129457e4a03aca69d82b64b89e6ad6ed1e275ec5002e48170e4c7b4f3971481098dedb88fba90770e44bf404d5a97fefe2fe8e459fe45933b78c7ab5fe985a480193a20fb07da1455fb283df68af569ac82aa6dc703e29bf158931fb79f2abfa6ff7eb8c4f381c9da58bea460e2ead969933e5391970ca4fddd64da2e5df9c4d82044068caaaab771b37bb06bbe673056d849825525f1120b2250f6b8520381f7a74b1c687781cb6b23e67b918844b83dbaeeb559ec8520d710dd6d6b4e64838bd434a36ed03fc0c488b24571032ffbc9f8ce97041e1bc4729d539358dc9599c1266b9ce2cb6dd0ad57a6e9d3d4a11a27f70b2934c96237e2ba09c58eeda678d4d08b6da99b7a86e946215afb1b48792fde54492e306cb5342e2589874b603a1de972b1f09cc350096f5c3e814118af9ba0793cfdf20c77b34eacfdf63ce59ec4d2f867bf884e941559b068d908325667672b5e1cf71f4829c0493e8b141399ed926b822becead7a0a2b4a4c008ab16b616d60f347e4da54f06443507efe57ea62399ef4eb11b2f559e1b056456a53998bf1c6d13c92e75136147f91ae3a75ca15eb1b51bf700b3c0bf54bc3745ff313c5e75dc66386897f6ee45429371b8d0878c442ad2fe9baf85c1390da13efc353ccbef950c29f39ddf436f0d9bf1be1515ed251d8b6f11ecb16b1e8d1ed04196e9b6c2f9e068b7749bb6c1f533e493f22c901662c65cb761dc2eeff2f698bd4dbae83e2dfdc4f1c7f918a00515c1bc189d10ec22b35c92725cbf0ba244fd029c4f026f68e000000060000ab0476c3fd7f7c1e5c000000000000000000000011e43e39d3f4394fbfa13c416b1c443c5e52eea726491ad75100ebad7c6d5a665c59a3fb158e43da904f19e7e8daa4e90390b8da945f6cd78536c0d2be07221f85ad46b180f256d4d84592691d15d65896b66b63a46705338b67b72dc1c3075fcdc5cbffb0366151632ba5be8ae815dfea9fadfd31c473a24a73d3e5116c3023b3563c72d26fbd59877132bde5ca4ef8d92fd3613c768b35223f6fd0b5e9a8b98cccf1e2b4612e620e3a159d6365c9045aaa826aa0ee6d26cf0397ce674c20824584b464ebdc2f3ea26a7aec4570b242a6677a4e9187f8591c3a9bdc0000001a002364bbd93964a8d0bdc802b9be2500"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r0, 0x29, 0x1b, &(0x7f0000000100)=r1, 0x120) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x1d}, 0x94) (rerun: 64) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x0, 0x0, 0x81, &(0x7f00000008c0), &(0x7f0000000940)=""/129, 0x8, 0x0, 0xb1, 0xa8, &(0x7f0000000a00)="0d9811dfca851e1878442d6c1cb291b108f585d84d60f507d40baee5508317bd353a128a3c5cadc0ddc191dc0d1039d868503a021ef2432419727ea88a00919b02c85eaf8452b07ab017a04c226b8dcf5001fa6c5cc6e3a505b1e6ee3d27d200baa23d42064c80076f0aff4aba2b21407dfdb8a20877b708f21ffd2c5ca73bb7e647cf11587bfcc315600360bd0b3b2fe3d74b2e920b4886d4ccff94d3cf67ec07b2b7c6796a8a22f04625bdc3641127f4", &(0x7f0000000ac0)="4a09a1fb4f3d9a03abf92fa62a796716e851a2b3ff71e14b67ef10f75e2115f04638a7427afd0221b37ec2d10fe091f7fc0dbe4815213c97c27c5af4f73a99fe558ab8597793c29d29d41e8c9a4c60e73b4ef6984d22c8e6fb9f7a9d4eeb3b06837972449647ba95c02aa15ca32fd657d45a24d9e8491bf575b90584f76c9ceef8cb27e7c13459145d2e11f97439cca89ce623fb9938e1230dc05121ed29fc189acfe09358344a79", 0x5, 0x0, 0xfffffff0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r3, 0x0, 0xfe, 0x3, &(0x7f0000000040)="da89f31e7df9b55928595af1db778ba1de9702d34dc3da03a207c1193c5c33934f173efacc2899c43e6b8ed75f7048aaba197f5c66fcb0032e97b5c5adc4265a90fad0522b734ae86949d20f3643989824078ad4b4d175918df074e36ab49dc5c05e0ffe19e2a657175a36d32bb737982f8a2e67c57824df1e26119ab5eaece66b622d9393b1a9983c512a86eb360643d554621eb608f068a806185bd31fb8bc0e85863034f817a5431a62f9d719beb301ee906ef02161dca1a6eb0223223e1c92601a00b26be86d7ee7b5b7651f3395bef3f3b1f64725e295a0a1b38b89010561196fb59a949d241dfacb5906d9ddf6ccc04bdfe58a2c8549ddc9e85628", &(0x7f0000000300)=""/3, 0x9, 0x0, 0x39, 0xe0, &(0x7f0000000340)="018b01767be41ac00fec2e1f7e0153e8a356d1ecca4484bddb7667706a71a6356897b4768e88147f8580e919ca7f377d8cf91022a163b82f87", &(0x7f0000000380)="0b1afeaa6b12ae28e88d80293d7666f8e5e2e5bf3f637bbece2f9ab15a3a05d84fd4130155923d63b4d4cd1dfbd87006651c440f12aa0f43d15b20935c54e4b0c95d81d43c09e13d74cdf2386413a9fc228ffcf0b75210237197482ebd32e0256fdaba6502bf329d6bcfa9b6fe33faabfd498f1e0bc88bd77a800d09ff8c125a003e1df8134d98ef1a2842b0997882f8cb5890d9344cb361412bcd0ddf3edb5d1d1c25200821d7c31bf6d7c14a2d644d63304ad9ccc4561aea6e2e803187b4042f6ad2262f4e4bc6bea83f59574678853c7a825ea63a7c424e0158a015abe91e", 0x3, 0x0, 0x1}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe80000000000000101000007f0c08000000000000000071273fa7b49301641184a907c5"], 0xfdef) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0xfde4, 0x0, 0x0, 0x2}, 0x48) 19m29.196468423s ago: executing program 1 (id=6560): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x7, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x103c78, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000340), 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socketpair(0x10, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x200, 0x2}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_devices(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b2388a84b8361bbeb"], 0xffdd) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0xb, 0x0, 0x30) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) 19m28.081061617s ago: executing program 1 (id=6564): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000000), 0x4) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000000), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x8, 0x4, 0x4}]}]}, {0x0, [0x8bdbc055c42301e4, 0x0, 0x30, 0x20, 0x0, 0x71, 0x0, 0x2e, 0x1e]}}, 0x0, 0x3b}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0xc, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@exit, @ldst={0x1, 0x1, 0x3, 0x0, 0x1, 0x96}]}, &(0x7f0000000fc0)='GPL\x00', 0x1, 0x98, &(0x7f00000001c0)=""/152, 0x41100, 0xa}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c022, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) (async) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) (async) r4 = socket$kcm(0xa, 0x5, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0/file0\x00', 0x116) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000005c0), 0x12) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0) (async) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0) setsockopt$sock_attach_bpf(r4, 0x0, 0xb, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xc, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r7}, @generic={0x66}, @initr0={0x18, 0x0, 0x0, 0x0, 0x190767b3, 0x0, 0x0, 0x0, 0xfffffffe}, @exit, @alu={0x7, 0x0, 0x5, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r7}, @generic={0x66}, @initr0={0x18, 0x0, 0x0, 0x0, 0x190767b3, 0x0, 0x0, 0x0, 0xfffffffe}, @exit, @alu={0x7, 0x0, 0x5, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x20040040) (async) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x20040040) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000"], 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, 0x0, &(0x7f0000000200)='syzkaller\x00'}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, 0x0, &(0x7f0000000200)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd6317ce220005"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 19m24.615434944s ago: executing program 1 (id=6605): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x20, 0x0, 0x6, 0xfffffffb}]}) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x20, 0x0, 0x6, 0xfffffffb}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d030000000000000000000002000000000000000000000009030000000000000063"], 0x0, 0x52}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d030000000000000000000002000000000000000000000009030000000000000063"], 0x0, 0x52}, 0x28) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) (async) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) r4 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r4, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6ce75f08916a", 0xfe48}, {&(0x7f00000007c0)="d25bf710e1be938583f8fd9d41e17de159c996072e04e91d87cc599f2c175f6b5862de3d18e2401af6e90065d3eadf", 0x2f}], 0x2}, 0x2000000000000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18300003feffff7f00080000000000009500000000000000db54ffdb929d516c088de72fce9fbe8400886fd92eecfc90e6415e9042156c7137b8e03081dc4eb63983593e82fe57aca9901ce5b9b2a6d1452716162c528470e305fe9dcfacc8206268994d1af9a8515b9ba4debfb0570dc43b9f459dc2d64b7a993184cdda5d07656bf604030e685a51"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18300003feffff7f00080000000000009500000000000000db54ffdb929d516c088de72fce9fbe8400886fd92eecfc90e6415e9042156c7137b8e03081dc4eb63983593e82fe57aca9901ce5b9b2a6d1452716162c528470e305fe9dcfacc8206268994d1af9a8515b9ba4debfb0570dc43b9f459dc2d64b7a993184cdda5d07656bf604030e685a51"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) socket$kcm(0x22, 0x2, 0x21) (async) r5 = socket$kcm(0x22, 0x2, 0x21) setsockopt$sock_attach_bpf(r5, 0x6, 0x16, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) (async) r6 = socket$kcm(0xa, 0x5, 0x0) r7 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="1700000054009155090893b31b71a54a07"], 0xfe33) setsockopt$sock_attach_bpf(r6, 0x0, 0xb, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x15, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000800000000000000101000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7030000000000000c000000b7000000000000007186f0ff01000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0xad, &(0x7f00000002c0)=""/173, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000380)=[r8, r8, r8, r8], &(0x7f0000000500)=[{0x2, 0x5, 0xb, 0x9}, {0x1, 0x1, 0xb, 0x7}, {0x1, 0x5, 0x10, 0x4}, {0x1, 0x1, 0x1, 0x8}, {0x5, 0x4, 0xe, 0xc}, {0x3, 0x4, 0x0, 0xd}, {0x2, 0x5, 0x0, 0xc}, {0x5, 0x3, 0x10, 0x6}, {0x0, 0x1, 0xe, 0x9}], 0x10, 0x2}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f00000007c0)={0xffffffffffffffff, r9}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710422000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710422000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r10}, 0x8) 19m22.380259073s ago: executing program 1 (id=6607): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x4, 0x4, 0x4, 0x1}, 0x48) socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x31}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1a, 0x0, 0x0, 0x8000}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x12}, 0x104101, 0x4, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000001000)=ANY=[], 0x48) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="1400000035000b45d30000000000000003d25a80", 0x14}], 0x1}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[], 0x0, 0xfffffffffffffe3d}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a2, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, 0x0, 0x42, 0x0, 0x1, 0xe988}, 0x28) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000280)={0x0, 0x0}) setsockopt$sock_attach_bpf(r4, 0x10f, 0x85, 0x0, 0x0) sendmsg(r3, &(0x7f00000009c0)={&(0x7f0000000540)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x0, 0x0, 0x2, 0x2, {0xa, 0x4e20, 0x80000001, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}}}, 0x80, &(0x7f0000000680)=[{&(0x7f00000005c0)="39fbfffb3e56e1727882a1aad91ab23614537d6f65059cdf605a0002e6a65311a47fa82f5432e812f50c098bbb25b7ae430d36e1b391dbd30a06f0430c2234c669828a140b061fb004787e6e5a49808f9210954a0691a0bb7e6820e770a68a741d0ee62af01fcee42badcfd6e15fb9fa4c3bfff8e8e409114ad3c89838b3edda9fc77d399b21ec2ec8ea3e47945c67c3", 0x90}], 0x1, &(0x7f00000008c0)=[{0x30, 0x1, 0x9, "2c5c953b246317e11d0d2c79635f4252140405dbb2db5209f475"}, {0xa0, 0x110, 0x4, "cc273c9d43b6b377119641cc9641ec94b122314a025d123f34e3c7cd53e3583b7c5dec96e6d698e65aeeaf4a6db9f769181b92789b8d5ba4f1bc416289563a00ce94223eb01fb82846d7a45dfdbbe228b635d08c81ad10359b50f63a35d03a205882414cde208fe6360e3a656068d1ac6ead5c3cae222eafedb31b99f1e257a4200bda87f818b8b260d90e8abd0f8c"}], 0xd0}, 0x40) sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000140)}, {0x0}], 0x2, &(0x7f0000000240)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x20}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x30}, 0x4008004) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r6, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x4030582b, &(0x7f0000000000)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 19m21.755436902s ago: executing program 1 (id=6615): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) (async) close(r1) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000340)=""/158) (async) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000340)=""/158) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) (async) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) close(r2) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) (async) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff070000000000000000000085000000ae00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000b000000095"], 0x0}, 0x94) r7 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x20, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) syz_clone(0x20200400, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)}, {&(0x7f0000000140)=""/53, 0x35}], 0x2, &(0x7f00000001c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)}, {&(0x7f0000000140)=""/53, 0x35}], 0x2, &(0x7f00000001c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb9"], 0xfdef) gettid() (async) r10 = gettid() write$cgroup_pid(r9, &(0x7f0000000100)=r10, 0x12) 19m6.693342936s ago: executing program 32 (id=6615): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) (async) close(r1) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000340)=""/158) (async) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000340)=""/158) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) (async) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) close(r2) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) (async) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff070000000000000000000085000000ae00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000b000000095"], 0x0}, 0x94) r7 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x20, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) syz_clone(0x20200400, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)}, {&(0x7f0000000140)=""/53, 0x35}], 0x2, &(0x7f00000001c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)}, {&(0x7f0000000140)=""/53, 0x35}], 0x2, &(0x7f00000001c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb9"], 0xfdef) gettid() (async) r10 = gettid() write$cgroup_pid(r9, &(0x7f0000000100)=r10, 0x12) 6.180540299s ago: executing program 0 (id=12841): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000002c0)="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", 0xfa}, {&(0x7f0000000500)="f8c6810d98538909bbcd92b79404f7837b5848d0abfbe843f0968eac2d2fa71048d99d9754598cfd2808080fc366969a5236a0b52c5599c925b49da7e4c0f445a4294a922110d9de0a90dae7156ef22fc917a1bf28fa2341163c16dc519603d4da3480e330ae9e9079abbfe07421ecae729ff160266e595e5fa900f1b128e166c7c637b26e0c63c156ac32159d0f6e745578d631f5ee719661b5f31cb678abff5164e86f8f8750cc303fb0abcb92ab793281dc0d251921eb4c91fd8cf9f464697cfc4d1ed85dec0bb255d9a541623bccc87195fcdea9a908094afcb2f0ad1c9fb750adb212f7e4bf8dc5e428ecf769f75a25dfcae4c8bcb253e81b883f", 0xfd}, {&(0x7f0000000600)="21e12f3a3ec0fef43471588d8caa059d551513f4ef9f1a1d33ecf43396f08e8203dd8aaf504883046197f84bd2280b94acf9e6d5fc30d1f6b19219e4fb3e78eb3b36bde778b14c71c2079ae772a373b1fc8bee550b3e863af118466ccf57b6737ec3e08eaa49dd62e1a6024f2583a0e2f8af1e0c5a361e4af912c1d5101db92f1eb0574dd0e6cae69a59396048e1883cca83e45d5add932a5a4b4704c8869dcb9f", 0xa1}, {&(0x7f00000006c0)="963f80824db4770d256a227589526dcc9b51a0d1a60d1c1d45cca25be21f211630b5c127ebfcc1a50cb9db8b77abb6827ce7e2e44cbb1866db17", 0x3a}, {&(0x7f0000000700)="23df4d7f77e36b32e9ec9ce2101a4a46d020fc7aea", 0x15}, {&(0x7f0000000740)="b761", 0x2}, {&(0x7f0000000840)="6aee523c3078f1693c82f604af287da1ac047b3cb33b75f608b7bed4e500cfbca0f7fd9616950801c9ce176d3c9e3c9b84cd5b2f1b0632c27943b5313a09f97c25b7", 0x42}, {&(0x7f0000000940)="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", 0x1000}], 0x8, 0x0, 0x0, 0x24040844}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd202, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1046a, 0x2, @perf_config_ext={0x9, 0xb}, 0x9985, 0x1, 0x0, 0x0, 0x100000000, 0x200, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = socket$kcm(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000000c0)={r0}) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c034002040000053582c137153e370248078000f01700", 0x2c}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, 0x0, 0x30008004) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x11b, 0x2, &(0x7f0000000900), 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$kcm(r3, &(0x7f0000005600)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x7, 0x3, 0x9, 0x6, 0x0, 0x0, 0x20000, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x7, @perf_config_ext={0x7, 0x6}, 0x1, 0x2, 0x2, 0x8, 0x45b, 0x3, 0x401, 0x0, 0x6, 0x0, 0x4eac}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x221, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0x261, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$kcm(0x2, 0x7, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup(r4, &(0x7f0000000400)='syz1\x00', 0x200002, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[], 0xfe33) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$inet(r7, 0x0, 0x0) 5.885793928s ago: executing program 5 (id=12846): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xed, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x10000, 0x0, 0xc29a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000003340)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003f00000000feffff7f10001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) 5.546503379s ago: executing program 4 (id=12849): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@typedef={0x3, 0x2, 0x0, 0x13, 0x4}, @restrict={0x3}, @typedef={0x4}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, 0x0, 0x42}, 0x20) (async, rerun: 32) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/82, 0x52}, 0x20000) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000001280), 0x4) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x7, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="160a0000000000006110ac000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="13100000", @ANYRES32], 0xfe33) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x26e1, 0x0) (rerun: 64) setsockopt$sock_attach_bpf(r1, 0x1, 0x2e, &(0x7f0000000040)=r2, 0xffa8) (async) recvmsg$unix(r2, &(0x7f0000000500)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/173, 0xad}], 0x1, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x3) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x2}, 0x10}, 0x94) (rerun: 64) 5.481710541s ago: executing program 0 (id=12850): socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000020000800000000000000000850000004f0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000690f000085000000230000"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r0}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000800)={r2}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x20000000}, 0x94) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f93424fc60", 0x8c0}], 0x1}, 0x0) r7 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r5}, 0x8) close(r7) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x7}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x13, 0xa, &(0x7f0000000340)=@raw=[@alu={0x7, 0x1, 0xa, 0xb, 0x8, 0x30, 0xfffffffffffffffa}, @exit, @jmp={0x5, 0x1, 0x2, 0x1, 0x2, 0x1, 0x10}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}], &(0x7f0000000400)='syzkaller\x00', 0xffffffff, 0x90, &(0x7f0000000500)=""/144, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x1d, r4, 0x8, &(0x7f00000005c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0x2, 0x3, 0x1}, 0x10, 0x0, r7, 0x5, &(0x7f0000000640)=[r8, r8, r7, r7], &(0x7f0000000680)=[{0x4, 0x2, 0x3, 0xb}, {0x5, 0x3, 0x7, 0xa}, {0x2, 0x4, 0x7, 0x1}, {0x0, 0x1, 0x4, 0xa}, {0x5, 0x1, 0xc, 0x1}], 0x10, 0x7}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x6, 0x4, 0x8, 0x7}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r11}, 0xc) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000007c0)={r3, r9, 0x0, r7}, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r13 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r7, r12, 0x4, r13}, 0x10) 5.340813115s ago: executing program 2 (id=12852): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000640)="25b2b3cbea40", 0x6}], 0x1, 0x0, 0x0, 0x900}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d0000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7ce", 0x6c}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6f5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000380), 0x12) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x17200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d5d, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r7}, 0xc) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="0000520000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000000000850000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb70300004caf0000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.330386915s ago: executing program 4 (id=12853): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x1}, 0x10, 0x0, 0xc2ba, 0x0, 0x4000000, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x10, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe"], &(0x7f0000000000)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc, 0x0, 0x4000000}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc006, 0x6451, 0xffffffff, 0x0, 0x0, 0x7, 0xfffa}, 0x0, 0xffffffffffffffff, r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000963400"/28], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x8, &(0x7f0000004600)=ANY=[@ANYRES16=r1], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="1400000034003507d25a806f8c6394f90224fc60", 0x14}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r7, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff03076844268cb8be14f0884703", 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) recvmsg$unix(r6, &(0x7f0000000b00)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000280)=""/237, 0xed}, {&(0x7f0000000680)=""/185, 0xb9}, {&(0x7f00000008c0)=""/160, 0xa0}], 0x3, &(0x7f0000000a40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) write$cgroup_devices(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="80"], 0xa) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0xe900) r8 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) socket$kcm(0x10, 0x2, 0x10) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 5.271541517s ago: executing program 5 (id=12854): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000100), 0x120) (async) r1 = perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x6, 0x7, 0x2f, 0x6, 0x0, 0xc0c2, 0x0, 0x7, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0xfffffffffffffff9, 0x8277}, 0x9000, 0x8e2, 0x3, 0x5, 0xfffffffffffffff4, 0x9, 0x5, 0x0, 0x10001, 0x0, 0x5}, 0x0, 0xd, 0xffffffffffffffff, 0xa) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r3, 0x0, 0x0}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) (async) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x2, @private1}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0x8c1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = socket$kcm(0x11, 0x2, 0x300) (async, rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 5.132524291s ago: executing program 0 (id=12855): socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) socket$kcm(0xa, 0x2, 0x11) (async) r1 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r1, 0x1, 0x3d, &(0x7f00000002c0), 0x8) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000240)=@in6={0xa, 0x4e20, 0x5c3b, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@txtime={{0x14, 0x1, 0x3d, 0xfffffffffffffffe}}], 0x18}, 0x40) (async) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000240)=@in6={0xa, 0x4e20, 0x5c3b, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@txtime={{0x14, 0x1, 0x3d, 0xfffffffffffffffe}}], 0x18}, 0x40) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0xd, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x301) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x800, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x800, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0xc, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0xc, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916630000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ff3d4301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) recvmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) (async) recvmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) 5.063930683s ago: executing program 3 (id=12856): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c25000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYRESOCT], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xfffff038}, {0x6, 0x0, 0x0, 0xfffffffc}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x54) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r3}, &(0x7f0000000400), &(0x7f0000000500)}, 0x20) 5.061944814s ago: executing program 4 (id=12857): syz_clone(0x4080b000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x50205100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x10, 0x8, 0x7f, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xd7b, 0x2, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x2, 0x9, 0x3, 0x1, 0xf4e, 0xa, 0x0, 0x40}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000100)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000100000000008000000018000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={&(0x7f0000000140)="db330a4b7df65e6341fb20fd219a4a1dfee9c39490831cb8bb0bfa8b7300ec7769dd51391df804d77708c9", &(0x7f0000000180)=""/80, &(0x7f0000000200)="a1156ef307367793246929165437cf6570007b103c739df5c95da447cc0ca9ecc9ef0a01983dec6e7d7f4cf1cfd48ca5026ffb3afcb34f5fec6be81d6f0d87320fd46f025495eb7633c18101bb0d61", &(0x7f0000000280)="89e29688c60033d8035f6a3db480ca0e6a56475654ba3b6717451da9f67813ab02181291b2f0c8e4ab21b0ece27f48e6aabf13287ba4cc61a3a1c66ba1be700d0a006050e196795e1cf3d05d067845e94b45cb0c6d348b598f641242152ed8ef9e4c72b140bd734ee8ed5b023cd36fd3ee097434822f1f8d1c921589d3ecd6bbb532", 0xd, r1, 0x4}, 0x38) 4.630003837s ago: executing program 5 (id=12858): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x800, 0x0, 0xc2ba, 0x8, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x900000000000000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x1, 0x4000000, 0x0, 0x0, 0x0, 0x851e, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x2a979d) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) (async) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 4.432590653s ago: executing program 3 (id=12859): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x13, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000098"], 0x50) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0xc084) r2 = socket$kcm(0x28, 0x5, 0x0) recvmsg(r2, &(0x7f0000001f00)={0x0, 0x0, 0x0}, 0x40000100) r3 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r3, &(0x7f0000000900)={&(0x7f0000000500)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000540)="e8691a913b", 0x1718}, {0x0, 0x2900}], 0x2, &(0x7f00000008c0)=[@ip_tos_u8={{0x38, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010101}}}], 0x38}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf, 0xfe, 0x0, 0x2, 0x0, 0x0, 0x28002, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0xffff, 0x0, 0x10000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x0, 0x4a, 0x0, 0x1, 0x800, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_vlan\x00', @random='\x00\x00\x00\x00\x00 '}) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000a80)='syz0\x00', 0x200002, 0x0) openat$cgroup_type(r5, 0x0, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890c, &(0x7f0000000000)) 3.2412391s ago: executing program 3 (id=12860): r0 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfd, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x60300, 0xcdb028c08dcc6e1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x8000, 0xc8, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007fc5f603ff65"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x19201, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4136}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$kcm(0xa, 0x3, 0x73) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xe, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000faffffff000000000000000085000000360000009500000000000000cd36f7bdd85f167e2e40ad43bd29a61dff07000000000000e46851a5145f41f808e6b59c670af119df6a08041985e666c35bd3ecc595e976c471f317f1dcbbc311fd6df7f2c563625ce2a843163749e1ef3433e0bf560c2eeee3"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp=0xbec151108205ee6d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000040)="178d8544cab8a6048604bf0bb019", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r11 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r11, 0x6, 0x8, &(0x7f0000000000)=r11, 0x4) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[], 0xffffffffffffffef) openat$cgroup_procs(r3, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) 3.23589544s ago: executing program 5 (id=12870): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100808, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0xe, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x9c}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x0, r1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000ff03000002e21fcdd6000000fbe3ff03000c0000", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000100"/28], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'macsec0\x00', @local}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r4, 0x58, &(0x7f00000002c0)}, 0x10) 3.211076031s ago: executing program 2 (id=12861): getpid() (async) r0 = getpid() perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x1c842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x2) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) socket$kcm(0x10, 0x3, 0x10) (async) r2 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x703, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000010000b0fd25a806c8c6f94f90a24fc60", 0x33fe0}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r7, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) (async) ioctl$TUNSETIFF(r7, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411}) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000240)={'\x00', 0x52d35ce30131f272}) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x410644f5, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x410644f5, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b00)=@o_path={&(0x7f0000000ac0)='./file0\x00', 0x0, 0x0, r4}, 0x18) (async) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b00)=@o_path={&(0x7f0000000ac0)='./file0\x00', 0x0, 0x0, r4}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b40)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_lsm={0x1d, 0x10, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10001}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f00000003c0)='GPL\x00', 0x1, 0xe6, &(0x7f00000005c0)=""/230, 0x41100, 0x22, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x4, 0x6, 0x6, 0xda}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000b80)=[r6, r5, r5, r8, r9, r5], &(0x7f0000000bc0)=[{0x2, 0x3, 0xd, 0xa}], 0x10, 0xeb0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup/syz0\x00', 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x2, &(0x7f00000000c0)=@raw=[@map_fd={0x18, 0x7}], 0x0, 0xfffffff1, 0x2e, &(0x7f0000000200)=""/46, 0x40f00, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x1, 0x1], 0x0, 0x10, 0x9}, 0x94) 3.094405244s ago: executing program 4 (id=12862): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) (async) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x24, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac141416e00000406207", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c000) (async) sendmsg$sock(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1a, 0xe45, 0x7b, 0x873, 0x42, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x240000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x5, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1f, 0x2, 0x4, 0x8, 0x10000, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r3, &(0x7f0000000300), &(0x7f0000000340)=""/41, 0x4}, 0x20) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) r4 = socket$kcm(0xa, 0x2, 0x88) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x27}, @multicast1}}}], 0x20}, 0x8000) (async) sendmsg$inet(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001640)="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", 0xfdef}], 0x1}, 0x48800) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)=ANY=[], 0x50) (async) socket$kcm(0xa, 0x6, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1.668520518s ago: executing program 4 (id=12863): socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6c", 0x41}], 0x1}, 0x4000050) socket$kcm(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@o_path={&(0x7f0000000080)='./file0\x00', r3, 0x4000, r4}, 0x18) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.60251745s ago: executing program 3 (id=12864): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085000000b000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x22, 0x3, 0x25) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000640)={&(0x7f0000000080)="81a3d2c1302f1a56f7266d75b2512a3c1911be23129cc455b3eba8780b8a206c7305b546f44302500bb56bf7fc000fa3c76c258e1d1207101a4ddf00f666f746b7ff1429f9f5844800d8c16d79f6f5d8ddcf875c0abe05501ef2955093ef9dab2aaa0f7d0ed8d04b12d41234f08014fd9e", &(0x7f0000000400)=""/154, &(0x7f0000000500)="ed2a261cabe12b", &(0x7f0000000540)="e64f45431026c901f47a928774723d09ad5d619bcaed24cfa7b5143ac287b0d257dbb1b26833c0e27518af848456c393e65fdaec748f29f7394ee20203db0c05f41764f6c2c8b1dea7ffdbe5a5d2d10a5572ef92c0768efddc16da46c861834fcccbb0a010a5d5391347bd8191cca1b4c91274622396d5e805706343470b58fc36268863d9dfaf3480c79b7dfc51af209c55285de36a303a20bce56ec019b7ef6af749d7bb592bab7e13d3c5cbc83c569cf3c0efce2908cf45f36b576516c3201a", 0x1, r1}, 0x38) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x0, 0x7, 0x5, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x26, '\x00', 0x0, 0x24}, 0x94) socket$kcm(0x29, 0x5, 0x0) 1.221828332s ago: executing program 2 (id=12865): socket$kcm(0x10, 0x2, 0x10) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x29}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0xfc40) sendmsg$kcm(r0, &(0x7f0000000e40)={&(0x7f0000000440)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x80, &(0x7f0000000b00)=[{0x0}, {0x0}, {&(0x7f0000000800)="3b117fcc70bf7522e103ab4be258aec91c4aceb29bdcf1e6869a4342edfc03be8c46cf920782f4784dedd2fd87fea55081d8d68f66984c7cafe5dbf981f3e17a2257ccc08458f36919b8e2919570230eaf6154223af4b3900b9bb3291770b14b94df691d2ddb788d80dbf105be030ba23774fc5fa744dc238d665fcb97eddc4dc2f467a04c1b4d8295be2987f3b68960853d04523be57019d9d395996fc52a9f4ffde5244f0848663c4e682e90cd220414b6e4b5889fa9b7b78579cd22d7ace3e5654ae87d87e8dfbd2aa98b9f587ed738a065f226bfdbd1904b", 0xda}, {&(0x7f0000000900)}, {0x0}], 0x5, &(0x7f0000000e80)=ANY=[@ANYBLOB="800000000000000007010000050000004985333d2adf488d09b7bf3e4694c2a9e7bb060dd3d10811d7d2a15ea5beae7d4ab77ad40283089a533cd9b605ce979622408d82342ef9497db8bbc3e1f2bdbd99ac65e318e8c089cf744c519a6dcc0fa0aea3d0df4bd248481e76ddeca96b3bd0d42d3f82024534eca1647e475abb3af9ebe1d9ebc70000000000000088000000000000000901000006000000529304371a20de9ee5d9dfecbfe9c4f34ac9653472099eb61481f0b4b5f9e1705844dc228f9ea4b03ab337bf91a171777fd8996821b9fb6970eda755dfcd1cbad76b893c3300425811da0b72bd47fae49cb598ef2716b54d60d7e04d1f91b4c7ec2ff9674ba967d998f3dbfb9b6067f2efc508470e7034eb61a302000008000000000000000017010000b9130000a7cc5131935baf4989c5d9ae093b39f110bf3be0507c1c485052d45db29fff030000b8b01866219268ceb65d78c7a2c0fde879c3226781c7c3ec8af65c177214464c853fd131bd7a186307bd164b23f878fdd03714986ce8f061ceca36978769ab58864d71b1bb5cc3440f656e9d04aca29531d2c5b4878fc0f888621a71a70dcca9b36b5499facddbd5facc61270fc603c30430c25c73a7c9821ef454058df1e1d7577974167491ca72bc9e00000000df54a139dda69cb7526400639201ce0f9ead8a9793b2f0c7e6c947f891daa467b4553755c211fed66cc250607fb497d7ac874a170ef58401f1d0605fc1e67dba94e694a293cded7bdef1e6d6e24595e0e96c79e5d65fd71a2b1490be74eb444d1cccde6691701291acd3d877a6d0678505344eec97a54fa0d69e962b970290e0ac2a7dadc94b4f0daf9c3d515094a569a6ed1031bf83f12dc8161bf1f6137b1119b3e0449bd90c240855"], 0x1c8}, 0xc004800) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x10, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000ffffffff000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000006b000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x10, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000ffffffff000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000006b000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800003b3f8848"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000008001000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="00000000000000000000000000000000000000e5ec381e00"/48], 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000008001000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="00000000000000000000000000000000000000e5ec381e00"/48], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000a40)={r4, &(0x7f0000000600), &(0x7f0000000980)=""/164}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000300)=""/180}, 0x20) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r2, 0x0, 0x26, 0x53, &(0x7f0000000200)="42dfcc2619c07d3731ca52c9c26c6f4ca0f3ebf404073cdc7ee5c9675b655bbf742e30c032e0", &(0x7f00000002c0)=""/83, 0x80000000, 0x0, 0xd1, 0x6d, &(0x7f0000000340)="4503c10be5a14be5c9e0d278e4ea7ad5a9e07a15680133d82113e6f57ded7af8e7ee6c002239c5c797064ff804edd3a8a90e95f5ca413bc240b485d8bccab504bfbfea6724078139d1506ec4a42a6b5ef47acfd6bde42d85877f9d8a10a0be798ce993388b1101a604785594cae9be2ae84032759f3ea27a8e24a85b4cdd27d45d5ae4d79ce268b305561bfbda20548dbe47351526e2d0051999006be9236c360983aafababa86742f3e9e535f331360daeda6962159e4ef275d02f9332ad0f9d3eb83cdaa8aca3acfe5ff9c6cbc600ce8", &(0x7f00000005c0)="f24c69b4fa90526b6d1fc90e36d02abf158eac9c820df6b6a0f16b7a0100d4e87a4c484b2817634647e575e44373f3d66b2226eb2c8a100f99965a25fd027383b57994f2a0068d539884fba068a9e62b4e0e4ea1c2ccb3f5e652e29b755ca041a866fdf96d971e313a5d61b876", 0x1, 0x0, 0x2}, 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) (async) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) sendmsg(r1, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002a00)=[{0x10, 0x1, 0x8}], 0x10}, 0x8000) (async) sendmsg(r1, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002a00)=[{0x10, 0x1, 0x8}], 0x10}, 0x8000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x80086601, &(0x7f0000000280)={'lo\x00', @link_local={0x2, 0x80, 0xc2, 0xc}}) recvmsg$kcm(r7, &(0x7f0000002800)={&(0x7f0000000140)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000027c0)}, 0x10060) 901.067702ms ago: executing program 5 (id=12866): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) r1 = perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0x7, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x5, 0x5, 0x81, 0x49, 0x0, 0x7140, 0x20008, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5c4, 0x4, @perf_bp={&(0x7f0000000040)}, 0x4000, 0x1, 0x5, 0x0, 0x1, 0x1ff, 0x6, 0x0, 0x0, 0x0, 0x18001b29}, 0xffffffffffffffff, 0x0, r1, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000680)='GPL\x00') (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a3f"], 0xfe33) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) (async, rerun: 64) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) (async, rerun: 64) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) socket$kcm(0xa, 0x2, 0x3a) (async, rerun: 32) socket$kcm(0xa, 0x5, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0xfffffffd, 0x8, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000000000000000000020000000000c2e673240af3e898214ecbef722f0f8bf5fc3328133a46250441c25f398559a261d873051341c0f09ab38406d5f18c0b24007c1f71d6826679a7ce5a6c9dd4d9b8c7cc6b0f148e6ae43e7c796ac1e307dfb2f98ceed01787832eda6370d8a0d335bb9aefe72c392ee41b84acf7b6efdadcb27d1b7a3935ad3762cf4aa5914df042336fefa0c516d32e14dfe9d7feeb40b05058c6f6791c542d1fc29cf332f31a617236"], &(0x7f0000000140)=""/237, 0x1a, 0xed, 0x1}, 0x28) (async, rerun: 64) socket$kcm(0x21, 0x2, 0x2) (async, rerun: 64) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (rerun: 64) perf_event_open(0x0, 0x0, 0xd, r5, 0x0) (async) r6 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x891b, 0x0) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000005000000030000000000001008000000030000000000001103000000000000000000000001000004040000000023000002000000000000000061612e00081c0cb0d3b0e6e4d90a105fb6921b8f13654896d5c459ff20659db47bbd4e8a7bc2fbe945783ba22000d36f02"], 0x0, 0x51}, 0x28) (rerun: 32) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x1c, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0e00000000000000080000000b00000000000000", @ANYRES32, @ANYBLOB="070000000000edff00d6b000f70000000000efe0fcbd0000343e24f86f19cf496c89b710db4938807d6607e0ba03fd6886d4a70d6999995a95c8d5d66dad5e2e1aeb5d72054e8bb4d3189d2db40e29087a5df00abcffdf6ac3e7fc4f84eb46582b449a3238365affd8f0bf", @ANYBLOB="d3ce68d6ab7ec902837c6fd848", @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 818.413945ms ago: executing program 0 (id=12867): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c836, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x10) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/254, 0xfe}, 0x40000020) (async) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x40810) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001500)=""/4112, 0x1010}], 0x1}, 0x10100) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd}, 0x94) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) (async) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x2, 0xfe, 0x0, 0x0, 0x7fffffff, 0xfe809, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x4, @perf_config_ext={0xb, 0x8000000000000004}, 0x11000, 0xfffffffffffffffc, 0x0, 0x8, 0x100000002, 0xfffffffc, 0x2, 0x0, 0x2}, 0x0, 0xa, 0xffffffffffffffff, 0x0) (async) r2 = socket$kcm(0x25, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4000000) (async) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x46b, 0x0, 0x2cae02074de29cf3, 0xfffffffffffffffd, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_clone(0x8000200, &(0x7f00000002c0)="da821c092aae6c110e447ee9569c968f3c8fbcfd0834038a50859f7c2ef51bd4e5801fa6f724e22d5bf980aa77879b76a2bc0f4161bac8ca50508ea4c29d05bcbecc59dd6c2d1bf19a43dfeb740812fdcbf22d95c0e02c2f650871e579286a983e6f000804034081619414b0ba23233522b123626b08cb278db35383e3d8dd3e9cbe3a223566f42890b73ee9f02327cfc2c69943d8bc26c39a28fecc1da38601e35d0c60a1adb9707e21c512c4cf809c1027bd439a7afd7f5a2ff67e98b018e09995537a2772ebf7214e94f4c9f6a96eb85b4e4475a9df6f492e58d8ab5e", 0xde, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f00000003c0)="26f0d59b45aafffb449c867db600442c525ca40eabeb31bb84b1ae8a48cacb062fb245") (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'syz_tun\x00', 0x1000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) 740.669547ms ago: executing program 3 (id=12868): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x48000) setsockopt$sock_attach_bpf(r1, 0x1, 0x31, &(0x7f0000000640)=r0, 0x4) close(r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x14, &(0x7f0000000440), 0x3d) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x14, &(0x7f00000000c0), 0xb9) close(r2) r4 = socket$kcm(0x29, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000000)={r2, r5}) 679.232589ms ago: executing program 2 (id=12869): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x10c002, 0xac5d, 0x7f, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f93d24fc60", 0x14}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400"], 0x48) socket$kcm(0x2c, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000001980)="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", 0xd49}, {&(0x7f0000000700)='z?r)', 0x4}], 0x2, 0x0, 0x0, 0x41024}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(0x4) recvmsg(r1, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000022850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socket$kcm(0x10, 0x8, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40841, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x4800, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 658.539539ms ago: executing program 5 (id=12871): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffbd}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a1180015000600141f030000120800040043000000a8001600a400014020000b00ffffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x22004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000300)=r5) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x804, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETDEBUG(r3, 0x400454c9, &(0x7f0000000380)=0x57062096) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0xf, &(0x7f0000000080)=[{&(0x7f00000000c0)="0209070002000000e4a17c45c8d260c90ec56959a440278950ff8cdca342f51686908ea4fe07dee035abee82755979fbd7991b71517d20096811c5a663a947eaf378bf56aaccdde0d91d2fa08aba131d91a15f81bfd1e961e534a605e9196747aaf27c0ec3994018ec333b40070beae950827d3efce8a34af6c67c60ee83b76c1132f55a7ccf7843a9a1de5284a60a57f66fa52701bccb915def033b664bc63242c782ecc7", 0x10}], 0x1}, 0x0) 540.748133ms ago: executing program 0 (id=12872): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="850000006c0000009c0000000000000025000000fffffff19500000d000000004bea11fade2d6950bdaebf39f5d5e2c5dec1e666c3a573"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) 434.360106ms ago: executing program 3 (id=12873): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x11, 0x3, 0x0) 403.352927ms ago: executing program 0 (id=12874): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040200080211000000040000a118000200e020000114000e1208000f0100810401a80016ea1f000840032e5f54c92011144dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c01000000000000e2cb090000001fb79101015ee4bd31445a7ba9599763001b14620d9de656d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9e5e6d98031b68c76f9cefbbcbee5de6ccd40d", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4009044) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYBLOB="3eca", @ANYRES8=r4], 0x9a) openat$cgroup_int(r5, &(0x7f0000000040)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 2.80419ms ago: executing program 2 (id=12875): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000001200)={&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x80, 0x0}, 0x0) sendmsg$kcm(r1, &(0x7f0000000180)={&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40, 0x4}, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x10}, 0x0) close(r1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x7}, 0x38) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1200000004010000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r3, &(0x7f0000000340), 0x0}, 0x20) 1.63653ms ago: executing program 4 (id=12876): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x4000, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x100000000, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4400c884) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x3, &(0x7f00000006c0)=[{}, {}, {}]}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r1, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8940, 0x0) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0800000004"], 0x50) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) close(r2) close(0x3) 0s ago: executing program 2 (id=12877): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f00000004000000080000000800000015000000a7752261e12865af18e6f80fd632e2e1db26b320c85e3681d32827f60f7dee27d3647318747828b8c349f615610fa5b1ad0cc1223d54fd967d1e77f72a6d8163c9a522af25f06d01edd3d6f279fb80691d", @ANYRES32, @ANYBLOB='B\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 64) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socket$kcm(0x23, 0x5, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000060000000100000004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000e1ff"], 0x50) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0f0000665f54c00028f5733e9b63080000000400000012000000ffffffff2097f9bd9841fdbec16bdf8111a4f8aa8589b4d2f16148cded6894fe521e480fa30c6b07e7b914fd2aa3a700631b4cd89a2e16801311e1190124f31894acbd01fcd4514d31fc91bad749c088582c25aae2ddbdc947587c0e4bedbb3a8369a5eb6fb818d9d576240104b674fab083a98af569eabd518e76b294aa46246ef41181cc262100"/173, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESOCT=r2, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="26001c2f7f15c10000080000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x50) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004001}, 0x40001) close(0x3) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311420000000000851000000200000085000000af00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r5}, 0xc) r6 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000600)=r1}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000680)={&(0x7f0000000040), &(0x7f00000001c0)=""/129, &(0x7f0000000280), &(0x7f00000002c0)="7eae11bd89b9e4b369a7e122a675924915fe027a7b09eaae0f856177d915e7e2bbbae743ebeb994c32874d7f8e1ab51a776a9317342bcc66d8482aadb8ccdf84cb9e1c03014174d131b17433cb6de84c019f503c0a96edb24204e8805c3d1e9d0a404161ecc311b1e6dc3c626b18ddc1cfa19f7deea427623e50ef5277d934d0b41622283f9e03c9450c81dd3520bffe3ae2a481565c84cffb27ba308086d79a3e132553e63f5e40b8cf2ba333b2bb6df30328e22c37857b846f17090a466e6b029b6e5f0cf5", 0x1, r7}, 0x38) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) kernel console output (not intermixed with test programs): 02556][T14917] netlink: 'syz.5.11210': attribute type 2 has an invalid length. [ 2131.738973][T14917] netlink: 132 bytes leftover after parsing attributes in process `syz.5.11210'. [ 2131.998228][T14924] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.11214'. [ 2132.214455][T14921] delete_channel: no stack [ 2132.371101][T14935] netlink: 'syz.0.11217': attribute type 153 has an invalid length. [ 2132.399885][T14935] netlink: 69544 bytes leftover after parsing attributes in process `syz.0.11217'. [ 2132.486923][T14940] netlink: 'syz.2.11219': attribute type 12 has an invalid length. [ 2132.495236][T14940] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11219'. [ 2132.644040][T14944] netlink: 'syz.0.11221': attribute type 3 has an invalid length. [ 2132.658551][T14945] netlink: 'syz.0.11221': attribute type 3 has an invalid length. [ 2132.691820][T14944] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11221'. [ 2132.710864][T14945] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11221'. [ 2132.732340][T14949] €Â0: renamed from pim6reg1 [ 2133.485066][T14959] device wg2 entered promiscuous mode [ 2133.511545][T14965] netlink: 830 bytes leftover after parsing attributes in process `syz.2.11227'. [ 2134.156177][T14990] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.11235'. [ 2134.369945][T14994] netlink: 168 bytes leftover after parsing attributes in process `syz.4.11230'. [ 2134.526329][T14994] netlink: 'syz.4.11230': attribute type 11 has an invalid length. [ 2134.577139][T14994] netlink: 168 bytes leftover after parsing attributes in process `syz.4.11230'. [ 2134.719162][T26269] wlan1: Trigger new scan to find an IBSS to join [ 2135.105544][T15005] netlink: 'syz.0.11238': attribute type 2 has an invalid length. [ 2135.116665][T15005] netlink: 'syz.0.11238': attribute type 8 has an invalid length. [ 2135.133049][T15005] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11238'. [ 2135.160134][T15004] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11238'. [ 2136.406509][T15049] netlink: zone id is out of range [ 2136.417282][T15049] netlink: zone id is out of range [ 2136.462459][T15049] netlink: get zone limit has 8 unknown bytes [ 2137.603511][T15074] validate_nla: 5 callbacks suppressed [ 2137.603533][T15074] netlink: 'syz.5.11258': attribute type 21 has an invalid length. [ 2137.692070][T15074] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2138.258101][T11778] Bluetooth: hci6: ISO packet for unknown connection handle 3860 [ 2138.267942][T15089] __nla_validate_parse: 8 callbacks suppressed [ 2138.267960][T15089] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11260'. [ 2138.858220][T15082] delete_channel: no stack [ 2139.779753][T11602] wlan1: Trigger new scan to find an IBSS to join [ 2140.214002][T15106] netlink: 132 bytes leftover after parsing attributes in process `syz.5.11265'. [ 2140.517823][T15121] netlink: 'syz.2.11270': attribute type 39 has an invalid length. [ 2140.872634][T26269] wlan1: Creating new IBSS network, BSSID 02:1d:c2:9b:f0:be [ 2141.171008][T15130] netlink: 'syz.4.11273': attribute type 3 has an invalid length. [ 2141.210648][T15130] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.11273'. [ 2141.328846][T15139] netlink: 156 bytes leftover after parsing attributes in process `syz.3.11277'. [ 2141.577020][T15147] netlink: 48423 bytes leftover after parsing attributes in process `syz.0.11275'. [ 2141.633068][T15149] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.11279'. [ 2142.490520][T15180] netlink: 'syz.4.11288': attribute type 39 has an invalid length. [ 2142.694273][T15180] device hsr_slave_1 left promiscuous mode [ 2142.822525][T15184] device macsec0 entered promiscuous mode [ 2143.126464][T15194] device sit0 left promiscuous mode [ 2143.817432][T15203] device sit0 entered promiscuous mode [ 2144.068587][T15239] netlink: 184 bytes leftover after parsing attributes in process `syz.0.11301'. [ 2144.376970][T15244] netlink: 'syz.3.11302': attribute type 3 has an invalid length. [ 2144.463154][T15244] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.11302'. [ 2145.229635][T15272] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.11312'. [ 2145.349275][T15281] netlink: 'syz.0.11313': attribute type 29 has an invalid length. [ 2145.357557][T15281] netlink: 'syz.0.11313': attribute type 29 has an invalid length. [ 2145.564817][T15290] device syzkaller0 entered promiscuous mode [ 2145.899490][T11778] Bluetooth: hci1: unexpected event 0x36 length: 15 > 7 [ 2149.405863][T15318] netlink: 'syz.5.11323': attribute type 7 has an invalid length. [ 2149.590426][T15356] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.11333'. [ 2149.614518][T15353] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11334'. [ 2152.872742][T15353] device veth0_to_team left promiscuous mode [ 2152.905972][T15353] Ÿë: port 1(veth0_to_team) entered disabled state [ 2152.999206][T15374] netlink: 14 bytes leftover after parsing attributes in process `syz.5.11339'. [ 2153.389792][T15389] netlink: 180 bytes leftover after parsing attributes in process `syz.4.11342'. [ 2153.519454][T15392] netlink: 'syz.0.11345': attribute type 13 has an invalid length. [ 2153.558222][T15392] netlink: 152 bytes leftover after parsing attributes in process `syz.0.11345'. [ 2153.613100][T15392] syz_tun: refused to change device tx_queue_len [ 2153.646189][T15392] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2153.749869][T15400] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11342'. [ 2153.786114][T15402] netlink: 'syz.3.11346': attribute type 1 has an invalid length. [ 2153.795372][T15404] device pim6reg1 entered promiscuous mode [ 2153.809594][T15402] netlink: 5 bytes leftover after parsing attributes in process `syz.3.11346'. [ 2154.248490][T15415] netlink: 'syz.2.11349': attribute type 4 has an invalid length. [ 2154.291957][T15415] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.11349'. [ 2154.333428][T15418] netlink: 'syz.2.11349': attribute type 11 has an invalid length. [ 2154.357549][T15417] netlink: 'syz.3.11351': attribute type 2 has an invalid length. [ 2154.382906][T15417] netlink: 10 bytes leftover after parsing attributes in process `syz.3.11351'. [ 2154.876229][T15438] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2156.246895][T15487] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11371'. [ 2156.702300][T15491] delete_channel: no stack [ 2157.160767][T15507] netlink: 'syz.4.11379': attribute type 29 has an invalid length. [ 2157.189339][T15507] netlink: 'syz.4.11379': attribute type 29 has an invalid length. [ 2157.226010][T15507] netlink: 'syz.4.11379': attribute type 29 has an invalid length. [ 2157.763693][T15529] netlink: 'syz.0.11386': attribute type 10 has an invalid length. [ 2157.803417][T15529] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11386'. [ 2157.869466][T15529] device team0 entered promiscuous mode [ 2157.897652][T15529] device team_slave_0 entered promiscuous mode [ 2157.929951][T15529] device team_slave_1 entered promiscuous mode [ 2157.981192][T15529] bridge0: port 4(team0) entered blocking state [ 2157.987865][T15529] bridge0: port 4(team0) entered disabled state [ 2158.172597][T15529] bridge0: port 4(team0) entered blocking state [ 2158.179166][T15529] bridge0: port 4(team0) entered forwarding state [ 2160.064607][T15541] netlink: 'syz.4.11388': attribute type 29 has an invalid length. [ 2160.111034][T15541] netlink: 'syz.4.11388': attribute type 29 has an invalid length. [ 2160.143160][T15542] netlink: 'syz.4.11388': attribute type 29 has an invalid length. [ 2160.243653][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.250069][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2161.184175][T15594] netlink: 'syz.2.11403': attribute type 29 has an invalid length. [ 2161.202667][T15594] netlink: 'syz.2.11403': attribute type 29 has an invalid length. [ 2161.219108][T15594] netlink: 'syz.2.11403': attribute type 29 has an invalid length. [ 2161.278645][T15592] netlink: 132 bytes leftover after parsing attributes in process `syz.5.11401'. [ 2161.549289][T11778] Bluetooth: hci4: ISO packet for unknown connection handle 3860 [ 2162.028016][T15613] device 0 entered promiscuous mode [ 2162.061198][T15614] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11405'. [ 2162.482758][T15617] netlink: 164 bytes leftover after parsing attributes in process `syz.4.11408'. [ 2162.863780][T15635] netlink: 132 bytes leftover after parsing attributes in process `syz.5.11413'. [ 2162.972589][T15635] netlink: 128 bytes leftover after parsing attributes in process `syz.5.11413'. [ 2163.045881][T15635] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2163.464111][T15655] netlink: 128 bytes leftover after parsing attributes in process `syz.4.11419'. [ 2163.501261][T15655] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2163.547853][T15655] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2163.763581][ T5863] wlan1: Trigger new scan to find an IBSS to join [ 2164.628777][T15689] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.11430'. [ 2165.790903][T15699] À: port 1(vlan0) entered blocking state [ 2165.824867][T15699] À: port 1(vlan0) entered disabled state [ 2165.833447][T15699] device vlan0 entered promiscuous mode [ 2165.883997][T15698] À: port 1(vlan0) entered blocking state [ 2165.889984][T15698] À: port 1(vlan0) entered forwarding state [ 2166.817135][ T9] wlan1: Trigger new scan to find an IBSS to join [ 2166.887286][T15711] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11434'. [ 2167.080642][T15723] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.11438'. [ 2167.211547][T15711] bond0: (slave bond_slave_0): Releasing backup interface [ 2167.288159][T15711] device bond_slave_0 left promiscuous mode [ 2167.332639][T15711] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 2167.428370][T15725] syzkaller0: tun_chr_ioctl cmd 1074025692 [ 2167.581648][T15728] netlink: 65043 bytes leftover after parsing attributes in process `syz.3.11439'. [ 2167.896397][ T9] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00 [ 2168.228463][T15742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11443'. [ 2170.529598][T15766] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.11449'. [ 2170.717573][T15769] netlink: 68 bytes leftover after parsing attributes in process `syz.5.11448'. [ 2172.339815][T15784] validate_nla: 3 callbacks suppressed [ 2172.339839][T15784] netlink: 'syz.2.11455': attribute type 30 has an invalid length. [ 2173.514072][T15796] netlink: 'syz.2.11457': attribute type 3 has an invalid length. [ 2173.605859][T15797] netlink: 'syz.2.11457': attribute type 2 has an invalid length. [ 2173.870873][T15796] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.11457'. [ 2173.930419][T15797] device 1 entered promiscuous mode [ 2178.057386][T15839] netlink: 161460 bytes leftover after parsing attributes in process `syz.3.11466'. [ 2178.697535][T15839] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.11466'. [ 2178.843889][T15839] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2178.885109][T15839] CPU: 1 PID: 15839 Comm: syz.3.11466 Not tainted syzkaller #0 [ 2178.892781][T15839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2178.902936][T15839] Call Trace: [ 2178.906274][T15839] [ 2178.909287][T15839] dump_stack_lvl+0x188/0x24e [ 2178.914056][T15839] ? show_regs_print_info+0x12/0x12 [ 2178.919334][T15839] ? load_image+0x410/0x410 [ 2178.923972][T15839] sysfs_warn_dup+0x8a/0xa0 [ 2178.928611][T15839] sysfs_do_create_link_sd+0xc0/0x110 [ 2178.934085][T15839] device_add+0x83b/0x1050 [ 2178.938608][T15839] wiphy_register+0x1d8b/0x2aa0 [ 2178.943651][T15839] ? cfg80211_event_work+0x40/0x40 [ 2178.948850][T15839] ? minstrel_ht_alloc+0x894/0xa20 [ 2178.954085][T15839] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2178.960264][T15839] ieee80211_register_hw+0x2d48/0x39f0 [ 2178.965845][T15839] ? ieee80211_register_hw+0xed1/0x39f0 [ 2178.971468][T15839] ? ieee80211_register_hw+0xed1/0x39f0 [ 2178.977129][T15839] ? ieee80211_tasklet_handler+0x20/0x20 [ 2178.982837][T15839] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2178.988822][T15839] ? __debug_object_init+0xed/0x440 [ 2178.994117][T15839] ? memset+0x1e/0x40 [ 2178.998175][T15839] ? __hrtimer_init+0x189/0x270 [ 2179.003120][T15839] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2179.008948][T15839] ? memcpy+0x3c/0x60 [ 2179.013032][T15839] hwsim_new_radio_nl+0xab7/0xc90 [ 2179.018179][T15839] genl_family_rcv_msg_doit+0x22f/0x350 [ 2179.023807][T15839] ? end_current_label_crit_section+0x170/0x170 [ 2179.030130][T15839] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 2179.036085][T15839] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2179.042051][T15839] ? bpf_lsm_capable+0x5/0x10 [ 2179.046780][T15839] ? security_capable+0x85/0xb0 [ 2179.051703][T15839] genl_rcv_msg+0x601/0x790 [ 2179.056280][T15839] ? genl_bind+0x360/0x360 [ 2179.060745][T15839] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2179.067159][T15839] netlink_rcv_skb+0x1ef/0x440 [ 2179.071980][T15839] ? genl_bind+0x360/0x360 [ 2179.076459][T15839] ? netlink_ack+0x1160/0x1160 [ 2179.081340][T15839] ? down_read+0x1a8/0x2d0 [ 2179.085812][T15839] genl_rcv+0x24/0x40 [ 2179.089851][T15839] netlink_unicast+0x7ad/0x920 [ 2179.094693][T15839] netlink_sendmsg+0x8ad/0xbd0 [ 2179.099537][T15839] ? netlink_getsockopt+0x550/0x550 [ 2179.104791][T15839] ? aa_sock_msg_perm+0x94/0x150 [ 2179.109788][T15839] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2179.115118][T15839] ? security_socket_sendmsg+0x7c/0xa0 [ 2179.120624][T15839] ? netlink_getsockopt+0x550/0x550 [ 2179.125895][T15839] ____sys_sendmsg+0x5ed/0x9a0 [ 2179.130749][T15839] ? __import_iovec+0x217/0x510 [ 2179.135656][T15839] ? __sys_sendmsg_sock+0x30/0x30 [ 2179.140736][T15839] ? __import_iovec+0x306/0x510 [ 2179.145667][T15839] ? import_iovec+0x6f/0xa0 [ 2179.150235][T15839] ___sys_sendmsg+0x2a2/0x360 [ 2179.155062][T15839] ? __sys_sendmsg+0x2a0/0x2a0 [ 2179.160068][T15839] __se_sys_sendmsg+0x1c3/0x2b0 [ 2179.164987][T15839] ? __x64_sys_sendmsg+0x80/0x80 [ 2179.170012][T15839] ? syscall_enter_from_user_mode+0x2a/0x80 [ 2179.175968][T15839] do_syscall_64+0x4c/0xa0 [ 2179.180457][T15839] ? clear_bhb_loop+0x60/0xb0 [ 2179.185177][T15839] ? clear_bhb_loop+0x60/0xb0 [ 2179.189907][T15839] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2179.195882][T15839] RIP: 0033:0x7fe956f9ce59 [ 2179.200349][T15839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2179.220019][T15839] RSP: 002b:00007fe957e46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2179.228499][T15839] RAX: ffffffffffffffda RBX: 00007fe957216090 RCX: 00007fe956f9ce59 [ 2179.236516][T15839] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2179.244533][T15839] RBP: 00007fe957032e6f R08: 0000000000000000 R09: 0000000000000000 [ 2179.252557][T15839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2179.260571][T15839] R13: 00007fe957216128 R14: 00007fe957216090 R15: 00007ffe8b7c72a8 [ 2179.268667][T15839] [ 2180.333686][T15850] netlink: 128 bytes leftover after parsing attributes in process `syz.5.11469'. [ 2180.369374][T15850] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2180.422574][T15850] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2180.474988][T15852] netlink: 132 bytes leftover after parsing attributes in process `syz.5.11469'. [ 2180.649125][T15860] netlink: 'syz.2.11472': attribute type 13 has an invalid length. [ 2180.659356][T15860] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11472'. [ 2180.856165][T15860] syz_tun: refused to change device tx_queue_len [ 2180.959500][T15860] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2181.052167][T15863] netlink: 'syz.2.11472': attribute type 10 has an invalid length. [ 2182.193621][T15883] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.11477'. [ 2182.329505][T15883] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 2183.511664][T15902] netlink: 'syz.5.11484': attribute type 2 has an invalid length. [ 2183.541969][T15902] netlink: 17267 bytes leftover after parsing attributes in process `syz.5.11484'. [ 2184.822979][T15919] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11490'. [ 2185.110297][T15921] netlink: 'syz.2.11491': attribute type 21 has an invalid length. [ 2185.186766][T15922] netlink: 'syz.2.11491': attribute type 21 has an invalid length. [ 2185.217098][T15922] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11491'. [ 2185.270413][T15922] netlink: 'syz.2.11491': attribute type 4 has an invalid length. [ 2185.309140][T15922] netlink: 'syz.2.11491': attribute type 3 has an invalid length. [ 2185.335214][T15922] netlink: 3 bytes leftover after parsing attributes in process `syz.2.11491'. [ 2185.531084][T15930] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.11494'. [ 2185.930438][T15937] netlink: 188 bytes leftover after parsing attributes in process `syz.5.11496'. [ 2186.070447][T15937] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate. [ 2186.862417][T15945] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.11498'. [ 2188.195598][T15972] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11505'. [ 2188.215507][T15971] netlink: 192 bytes leftover after parsing attributes in process `syz.2.11505'. [ 2189.108995][T15985] netlink: 'syz.4.11509': attribute type 10 has an invalid length. [ 2190.371096][T15994] netlink: 'syz.2.11511': attribute type 2 has an invalid length. [ 2190.387571][T15994] netlink: 'syz.2.11511': attribute type 8 has an invalid length. [ 2190.399730][T15994] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11511'. [ 2190.438051][T15993] netlink: 'syz.2.11511': attribute type 2 has an invalid length. [ 2190.450432][T15993] netlink: 'syz.2.11511': attribute type 8 has an invalid length. [ 2190.479538][T15993] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11511'. [ 2191.071786][T16011] netlink: 'syz.2.11515': attribute type 10 has an invalid length. [ 2192.563118][T16031] netlink: 152 bytes leftover after parsing attributes in process `syz.4.11519'. [ 2192.746321][T16031] bond0: (slave bond_slave_0): Releasing backup interface [ 2192.979738][T16031] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 2192.995516][T16036] netlink: 'syz.5.11522': attribute type 3 has an invalid length. [ 2193.010269][T16036] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.11522'. [ 2193.586654][T16041] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11524'. [ 2194.014804][T16047] netlink: 'syz.3.11525': attribute type 10 has an invalid length. [ 2196.526900][T16075] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11533'. [ 2197.967385][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2198.159336][T15233] Bluetooth: hci0: command 0x0406 tx timeout [ 2198.433018][T16091] netlink: 132 bytes leftover after parsing attributes in process `syz.5.11539'. [ 2198.609397][T16092] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11538'. [ 2198.887447][T16092] bond0: (slave bond_slave_0): Releasing backup interface [ 2198.990037][T16092] device bond_slave_0 left promiscuous mode [ 2199.132041][T16092] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 2201.197245][T16117] netlink: 'syz.2.11546': attribute type 9 has an invalid length. [ 2201.289019][T16117] netlink: 399 bytes leftover after parsing attributes in process `syz.2.11546'. [ 2201.404355][T16117] netlink: 'syz.2.11546': attribute type 10 has an invalid length. [ 2202.710706][T16152] netlink: 'syz.5.11556': attribute type 7 has an invalid length. [ 2204.095562][T16175] ref_ctr_offset mismatch. inode: 0x4e8 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2205.095464][T16216] netlink: 'syz.4.11565': attribute type 10 has an invalid length. [ 2205.477183][T16216] team0: Device veth1_vlan failed to register rx_handler [ 2205.992837][T16237] netlink: 'syz.5.11566': attribute type 39 has an invalid length. [ 2207.665967][T16251] netlink: 'syz.3.11567': attribute type 10 has an invalid length. [ 2208.284283][T16271] delete_channel: no stack [ 2208.388315][T16251] team0 (unregistering): Port device team_slave_0 removed [ 2208.479327][T16251] team0 (unregistering): Port device team_slave_1 removed [ 2208.573320][T16251] team0 (unregistering): Port device macvlan0 removed [ 2208.742361][T16270] netlink: 'syz.4.11574': attribute type 1 has an invalid length. [ 2209.314987][T16295] netlink: 'syz.4.11582': attribute type 40 has an invalid length. [ 2211.382916][T16347] netlink: 'syz.4.11593': attribute type 1 has an invalid length. [ 2211.401184][T16347] netlink: 'syz.4.11593': attribute type 3 has an invalid length. [ 2211.429240][T16347] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11593'. [ 2212.193468][T16351] netlink: 'syz.4.11593': attribute type 10 has an invalid length. [ 2212.222551][T16351] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11593'. [ 2212.255519][T16351] device dummy0 entered promiscuous mode [ 2212.266644][T16351] bridge0: port 3(dummy0) entered blocking state [ 2212.296495][T16351] bridge0: port 3(dummy0) entered disabled state [ 2212.318499][T16351] bridge0: port 3(dummy0) entered blocking state [ 2212.325060][T16351] bridge0: port 3(dummy0) entered forwarding state [ 2212.515504][T16361] netlink: 'syz.4.11594': attribute type 22 has an invalid length. [ 2212.546170][T16361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11594'. [ 2213.971552][T16383] netlink: 'syz.2.11601': attribute type 30 has an invalid length. [ 2214.944686][T16411] netlink: 463 bytes leftover after parsing attributes in process `syz.3.11609'. [ 2215.254626][T16410] netlink: 72 bytes leftover after parsing attributes in process `syz.2.11610'. [ 2215.419573][T16415] netlink: 3 bytes leftover after parsing attributes in process `syz.4.11611'. [ 2215.617036][T16417] netlink: 'syz.3.11612': attribute type 3 has an invalid length. [ 2215.698349][T16417] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.11612'. [ 2215.947473][T16422] netlink: 'syz.2.11614': attribute type 10 has an invalid length. [ 2220.581400][T16424] netlink: 'syz.3.11612': attribute type 21 has an invalid length. [ 2220.595059][T16424] netlink: 128 bytes leftover after parsing attributes in process `syz.3.11612'. [ 2220.617780][T16424] netlink: 'syz.3.11612': attribute type 4 has an invalid length. [ 2220.639303][T16424] netlink: 3 bytes leftover after parsing attributes in process `syz.3.11612'. [ 2220.661502][T16431] netlink: 148 bytes leftover after parsing attributes in process `syz.0.11615'. [ 2221.684768][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.691189][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.117598][T16509] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.11625'. [ 2222.281575][T15233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2222.292029][T15233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2222.300575][T15233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2222.308450][T15233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2222.316136][T15233] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2222.325349][T15233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2222.541476][T16525] netlink: 'syz.0.11628': attribute type 21 has an invalid length. [ 2222.736222][T16517] chnl_net:caif_netlink_parms(): no params data found [ 2222.985212][T16247] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2223.281268][T16543] netlink: 'syz.3.11632': attribute type 10 has an invalid length. [ 2223.309560][T16247] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2223.328999][T16543] netlink: 3819 bytes leftover after parsing attributes in process `syz.3.11632'. [ 2223.403567][T16247] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2223.452507][T16517] bridge0: port 1(bridge_slave_0) entered blocking state [ 2223.460752][T16517] bridge0: port 1(bridge_slave_0) entered disabled state [ 2223.475200][T16517] device bridge_slave_0 entered promiscuous mode [ 2223.511824][T16247] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2223.549973][T16517] bridge0: port 2(bridge_slave_1) entered blocking state [ 2223.560063][T16517] bridge0: port 2(bridge_slave_1) entered disabled state [ 2223.572191][T16547] netlink: 'syz.5.11633': attribute type 29 has an invalid length. [ 2223.587504][T16517] device bridge_slave_1 entered promiscuous mode [ 2223.720230][T16547] netlink: 'syz.5.11633': attribute type 29 has an invalid length. [ 2223.759649][T15233] Bluetooth: hci1: command 0x0406 tx timeout [ 2223.767409][T16517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2223.839523][T16547] netlink: 'syz.5.11633': attribute type 29 has an invalid length. [ 2223.883075][T16517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2224.044937][T16517] team0: Port device team_slave_0 added [ 2224.057543][T16558] netlink: 'syz.3.11636': attribute type 3 has an invalid length. [ 2224.066581][T16517] team0: Port device team_slave_1 added [ 2224.079753][T16558] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.11636'. [ 2224.209373][T16517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2224.216405][T16517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2224.303925][T16517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2224.383132][T16517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2224.399303][T11778] Bluetooth: hci2: command 0x0409 tx timeout [ 2224.409166][T16517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2224.507605][T16517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2224.602182][T16247] device 0 left promiscuous mode [ 2224.623640][T16517] device hsr_slave_0 entered promiscuous mode [ 2224.699419][T16517] device hsr_slave_1 entered promiscuous mode [ 2224.749127][T16517] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2224.757141][T16517] Cannot create hsr debugfs directory [ 2224.787162][T16247] device 0 left promiscuous mode [ 2224.860936][T16579] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.11642'. [ 2224.881324][T16247] device 1 left promiscuous mode [ 2225.741511][T16597] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.11644'. [ 2225.979891][T16597] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2225.987917][T16597] CPU: 1 PID: 16597 Comm: syz.3.11644 Not tainted syzkaller #0 [ 2225.995532][T16597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2226.005643][T16597] Call Trace: [ 2226.008968][T16597] [ 2226.011935][T16597] dump_stack_lvl+0x188/0x24e [ 2226.016663][T16597] ? show_regs_print_info+0x12/0x12 [ 2226.021908][T16597] ? load_image+0x410/0x410 [ 2226.026486][T16597] sysfs_warn_dup+0x8a/0xa0 [ 2226.031048][T16597] sysfs_do_create_link_sd+0xc0/0x110 [ 2226.036506][T16597] device_add+0x83b/0x1050 [ 2226.040994][T16597] wiphy_register+0x1d8b/0x2aa0 [ 2226.045915][T16597] ? cfg80211_event_work+0x40/0x40 [ 2226.051075][T16597] ? minstrel_ht_alloc+0x894/0xa20 [ 2226.056245][T16597] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2226.062376][T16597] ieee80211_register_hw+0x2d48/0x39f0 [ 2226.067898][T16597] ? ieee80211_register_hw+0xed1/0x39f0 [ 2226.073669][T16597] ? ieee80211_register_hw+0xed1/0x39f0 [ 2226.079277][T16597] ? ieee80211_tasklet_handler+0x20/0x20 [ 2226.084952][T16597] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2226.090904][T16597] ? __debug_object_init+0xed/0x440 [ 2226.096161][T16597] ? memset+0x1e/0x40 [ 2226.100196][T16597] ? __hrtimer_init+0x189/0x270 [ 2226.105102][T16597] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2226.110898][T16597] ? memcpy+0x3c/0x60 [ 2226.114940][T16597] hwsim_new_radio_nl+0xab7/0xc90 [ 2226.120026][T16597] genl_family_rcv_msg_doit+0x22f/0x350 [ 2226.125617][T16597] ? end_current_label_crit_section+0x170/0x170 [ 2226.131908][T16597] ? trace_call_bpf+0xbf/0x6b0 [ 2226.136822][T16597] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2226.142782][T16597] ? bpf_lsm_capable+0x5/0x10 [ 2226.147510][T16597] ? security_capable+0x85/0xb0 [ 2226.152420][T16597] genl_rcv_msg+0x601/0x790 [ 2226.156988][T16597] ? genl_bind+0x360/0x360 [ 2226.161449][T16597] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2226.167849][T16597] netlink_rcv_skb+0x1ef/0x440 [ 2226.172688][T16597] ? genl_bind+0x360/0x360 [ 2226.177167][T16597] ? netlink_ack+0x1160/0x1160 [ 2226.182005][T16597] ? down_read+0x1a8/0x2d0 [ 2226.186480][T16597] genl_rcv+0x24/0x40 [ 2226.190511][T16597] netlink_unicast+0x7ad/0x920 [ 2226.195346][T16597] netlink_sendmsg+0x8ad/0xbd0 [ 2226.200173][T16597] ? netlink_getsockopt+0x550/0x550 [ 2226.205423][T16597] ? aa_sock_msg_perm+0x94/0x150 [ 2226.210412][T16597] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2226.215740][T16597] ? security_socket_sendmsg+0x7c/0xa0 [ 2226.221239][T16597] ? netlink_getsockopt+0x550/0x550 [ 2226.226493][T16597] ____sys_sendmsg+0x5ed/0x9a0 [ 2226.231320][T16597] ? __sys_sendmsg_sock+0x30/0x30 [ 2226.236396][T16597] ? __import_iovec+0x306/0x510 [ 2226.241307][T16597] ? import_iovec+0x6f/0xa0 [ 2226.245860][T16597] ___sys_sendmsg+0x2a2/0x360 [ 2226.250594][T16597] ? __sys_sendmsg+0x2a0/0x2a0 [ 2226.255463][T16597] __se_sys_sendmsg+0x1c3/0x2b0 [ 2226.260385][T16597] ? ct_nmi_exit+0x145/0x1c0 [ 2226.265033][T16597] ? __x64_sys_sendmsg+0x80/0x80 [ 2226.270033][T16597] ? lockdep_hardirqs_on+0x94/0x140 [ 2226.275294][T16597] do_syscall_64+0x4c/0xa0 [ 2226.279761][T16597] ? clear_bhb_loop+0x60/0xb0 [ 2226.284524][T16597] ? clear_bhb_loop+0x60/0xb0 [ 2226.289247][T16597] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2226.295199][T16597] RIP: 0033:0x7fe956f9ce59 [ 2226.299658][T16597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2226.319371][T16597] RSP: 002b:00007fe957e67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2226.327823][T16597] RAX: ffffffffffffffda RBX: 00007fe957215fa0 RCX: 00007fe956f9ce59 [ 2226.335830][T16597] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2226.343853][T16597] RBP: 00007fe957032e6f R08: 0000000000000000 R09: 0000000000000000 [ 2226.351952][T16597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2226.359967][T16597] R13: 00007fe957216038 R14: 00007fe957215fa0 R15: 00007ffe8b7c72a8 [ 2226.367979][T16597] [ 2226.478956][T11778] Bluetooth: hci2: command 0x041b tx timeout [ 2227.161919][T16631] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.11651'. [ 2227.276458][T16606] netlink: 'syz.4.11645': attribute type 21 has an invalid length. [ 2227.477663][T16641] netlink: 'syz.5.11653': attribute type 2 has an invalid length. [ 2227.509391][T16641] netlink: 17267 bytes leftover after parsing attributes in process `syz.5.11653'. [ 2227.659544][T16649] device wlan1 entered promiscuous mode [ 2228.143339][T16517] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2228.196190][T16517] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2228.238309][T16517] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2228.437413][T16675] device syzkaller0 entered promiscuous mode [ 2228.491435][T16517] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2228.559350][T11778] Bluetooth: hci2: command 0x040f tx timeout [ 2229.039233][T16249] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2229.472572][T16517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2230.639403][T11778] Bluetooth: hci2: command 0x0419 tx timeout [ 2233.419794][T16706] netlink: 'syz.3.11666': attribute type 21 has an invalid length. [ 2233.443645][T16718] netlink: 168 bytes leftover after parsing attributes in process `syz.4.11668'. [ 2233.725760][T16517] 8021q: adding VLAN 0 to HW filter on device team0 [ 2233.755840][ T5863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2233.779907][ T5863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2233.834386][ T5863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2233.869516][ T5863] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2233.910111][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 2233.917286][ T5863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2233.956265][ T5863] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2234.200191][T16242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2234.220480][T16242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2234.260205][T16242] bridge0: port 2(bridge_slave_1) entered blocking state [ 2234.267481][T16242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2234.309621][T16242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2234.335444][T16753] netlink: 'syz.0.11675': attribute type 4 has an invalid length. [ 2234.345959][T16242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2234.368302][T16753] netlink: 134728 bytes leftover after parsing attributes in process `syz.0.11675'. [ 2234.427936][T16755] netlink: 'syz.4.11676': attribute type 10 has an invalid length. [ 2234.515743][T16755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2234.546816][T16755] team0: Port device bond0 added [ 2234.557083][T16242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2234.574125][T16242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2234.598251][T16242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2234.624512][T16242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2234.672042][T16242] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2234.707638][T16247] device vlan0 left promiscuous mode [ 2234.716325][T16247] À: port 1(vlan0) entered disabled state [ 2234.773316][T16247] device hsr_slave_0 left promiscuous mode [ 2234.796627][T16247] device hsr_slave_1 left promiscuous mode [ 2234.831409][T16247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2234.853138][T16247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2234.880087][T16247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2234.904011][T16247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2235.093980][T16247] device veth1_vlan left promiscuous mode [ 2235.696995][T16792] netlink: 'syz.0.11683': attribute type 1 has an invalid length. [ 2235.709128][T16792] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.11683'. [ 2236.072482][T16247] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 2236.592686][T16247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2236.601864][T16247] device bond_slave_1 left promiscuous mode [ 2236.696678][T16247] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 2236.706231][T16247] device bridge_slave_1 left promiscuous mode [ 2236.986749][T16247] bond0 (unregistering): Released all slaves [ 2237.031556][T16767] netlink: 'syz.4.11678': attribute type 28 has an invalid length. [ 2237.069613][T16231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2237.078262][T16231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2237.157198][T16797] -1: renamed from syzkaller0 [ 2237.216744][T16517] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2237.255958][T16517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2237.959245][T16231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2237.967935][T16231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2238.016175][T16818] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11689'. [ 2238.101266][T16823] netlink: 'syz.5.11690': attribute type 21 has an invalid length. [ 2238.145062][T16823] netlink: 'syz.5.11690': attribute type 20 has an invalid length. [ 2238.271635][T16825] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.11691'. [ 2238.512818][T16837] netlink: 'syz.5.11694': attribute type 3 has an invalid length. [ 2238.568389][T16837] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.11694'. [ 2238.622831][T16831] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.11693'. [ 2238.681879][T16831] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 2239.523535][T16242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2239.559794][T16242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2239.590682][T16848] netlink: 'syz.5.11696': attribute type 1 has an invalid length. [ 2239.598602][T16848] netlink: 'syz.5.11696': attribute type 4 has an invalid length. [ 2239.626064][T16848] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.11696'. [ 2239.658564][T16517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2239.725216][T16220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2239.741564][T16220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2239.772341][T16220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2239.790289][T16220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2239.808485][T16517] device veth0_vlan entered promiscuous mode [ 2239.816485][T16220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2239.836523][T16220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2239.958449][T16862] netlink: 'syz.5.11700': attribute type 29 has an invalid length. [ 2240.142189][T16866] netlink: 'syz.5.11700': attribute type 16 has an invalid length. [ 2240.180048][T16866] netlink: 132 bytes leftover after parsing attributes in process `syz.5.11700'. [ 2240.332904][T16863] tap0: tun_chr_ioctl cmd 1074025681 [ 2240.338510][T16862] netlink: 'syz.5.11700': attribute type 29 has an invalid length. [ 2240.389714][T16517] device veth1_vlan entered promiscuous mode [ 2240.413083][T16866] netlink: 'syz.5.11700': attribute type 10 has an invalid length. [ 2240.604781][T16866] team0: Port device macvlan0 added [ 2240.646450][T16867] netlink: 'syz.5.11700': attribute type 29 has an invalid length. [ 2240.712770][T16862] netlink: 'syz.5.11700': attribute type 29 has an invalid length. [ 2240.855757][T16220] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2240.864491][T16220] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2240.926614][T16869] netlink: 'syz.5.11700': attribute type 29 has an invalid length. [ 2240.943913][T16220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2240.966698][T16220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2241.041410][T16517] device veth0_macvtap entered promiscuous mode [ 2241.063471][T16517] device veth1_macvtap entered promiscuous mode [ 2241.127005][T16517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2241.181256][T16517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2241.241264][T16517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2241.283863][T16517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2241.314649][T16517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2241.367250][T16517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2241.397853][T16517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2241.408898][T16876] can: request_module (can-proto-0) failed. [ 2241.429767][T16517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2241.491226][T16517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2241.498616][T16225] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2241.565035][T16225] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2241.608035][T16225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2241.644126][T16225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2241.778122][T16517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2241.796397][T16517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2241.816910][T16517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2241.840036][T16517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2241.868884][T16517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2241.880041][T16517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2241.891140][T16517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2241.905347][T16517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2241.917257][T16517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2241.976562][T16249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2241.986301][T16249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2242.006868][T16891] device syzkaller1 entered promiscuous mode [ 2242.091421][T16517] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2242.110058][T16517] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2242.124809][T16517] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2242.134397][T16517] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2242.905510][T16247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2242.927365][T16247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2243.076548][T16249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2243.265405][T16247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2243.285199][T16247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2243.375078][T16225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2243.411680][T16913] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11708'. [ 2244.037772][T16926] validate_nla: 3 callbacks suppressed [ 2244.037813][T16926] netlink: 'syz.2.11711': attribute type 4 has an invalid length. [ 2244.097576][T16926] netlink: 134728 bytes leftover after parsing attributes in process `syz.2.11711'. [ 2244.964459][T16943] netlink: 63503 bytes leftover after parsing attributes in process `syz.5.11716'. [ 2245.544776][T16960] netlink: 'syz.5.11721': attribute type 3 has an invalid length. [ 2245.566847][T16960] netlink: 199824 bytes leftover after parsing attributes in process `syz.5.11721'. [ 2245.957233][T16987] netlink: 56843 bytes leftover after parsing attributes in process `syz.2.11728'. [ 2246.282327][T16865] delete_channel: no stack [ 2246.453121][T17016] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.11733'. [ 2246.487333][T17016] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 2246.509812][T17016] CPU: 1 PID: 17016 Comm: syz.5.11733 Not tainted syzkaller #0 [ 2246.517456][T17016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2246.527594][T17016] Call Trace: [ 2246.530916][T17016] [ 2246.533892][T17016] dump_stack_lvl+0x188/0x24e [ 2246.538627][T17016] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2246.544846][T17016] ? show_regs_print_info+0x12/0x12 [ 2246.550095][T17016] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2246.556338][T17016] sysfs_warn_dup+0x8a/0xa0 [ 2246.560912][T17016] sysfs_do_create_link_sd+0xc0/0x110 [ 2246.566363][T17016] device_add+0x83b/0x1050 [ 2246.570842][T17016] wiphy_register+0x1d8b/0x2aa0 [ 2246.575770][T17016] ? cfg80211_event_work+0x40/0x40 [ 2246.580951][T17016] ? minstrel_ht_alloc+0x894/0xa20 [ 2246.586134][T17016] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2246.592269][T17016] ieee80211_register_hw+0x2d48/0x39f0 [ 2246.597836][T17016] ? ieee80211_register_hw+0xed1/0x39f0 [ 2246.603484][T17016] ? ieee80211_register_hw+0xed1/0x39f0 [ 2246.609094][T17016] ? ieee80211_tasklet_handler+0x20/0x20 [ 2246.614766][T17016] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2246.620711][T17016] ? __debug_object_init+0xed/0x440 [ 2246.625952][T17016] ? memset+0x1e/0x40 [ 2246.629976][T17016] ? __hrtimer_init+0x189/0x270 [ 2246.634886][T17016] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2246.640664][T17016] ? memcpy+0x3c/0x60 [ 2246.644698][T17016] hwsim_new_radio_nl+0xab7/0xc90 [ 2246.649775][T17016] genl_family_rcv_msg_doit+0x22f/0x350 [ 2246.655373][T17016] ? end_current_label_crit_section+0x170/0x170 [ 2246.661650][T17016] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2246.667588][T17016] ? bpf_lsm_capable+0x5/0x10 [ 2246.672310][T17016] ? security_capable+0x85/0xb0 [ 2246.677255][T17016] genl_rcv_msg+0x601/0x790 [ 2246.681814][T17016] ? genl_bind+0x360/0x360 [ 2246.686268][T17016] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2246.692632][T17016] ? lock_chain_count+0x20/0x20 [ 2246.697538][T17016] netlink_rcv_skb+0x1ef/0x440 [ 2246.702332][T17016] ? genl_bind+0x360/0x360 [ 2246.706934][T17016] ? netlink_ack+0x1160/0x1160 [ 2246.711756][T17016] ? down_read+0x1a8/0x2d0 [ 2246.716220][T17016] genl_rcv+0x24/0x40 [ 2246.720241][T17016] netlink_unicast+0x7ad/0x920 [ 2246.725045][T17016] netlink_sendmsg+0x8ad/0xbd0 [ 2246.729837][T17016] ? lockdep_hardirqs_on+0x94/0x140 [ 2246.735084][T17016] ? netlink_getsockopt+0x550/0x550 [ 2246.740319][T17016] ? security_socket_sendmsg+0x41/0xa0 [ 2246.745806][T17016] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2246.751118][T17016] ? security_socket_sendmsg+0x7c/0xa0 [ 2246.756597][T17016] ? netlink_getsockopt+0x550/0x550 [ 2246.761824][T17016] ____sys_sendmsg+0x5ed/0x9a0 [ 2246.766627][T17016] ? __sys_sendmsg_sock+0x30/0x30 [ 2246.771692][T17016] ? __import_iovec+0x306/0x510 [ 2246.776617][T17016] ? import_iovec+0x6f/0xa0 [ 2246.781165][T17016] ___sys_sendmsg+0x2a2/0x360 [ 2246.785911][T17016] ? __sys_sendmsg+0x2a0/0x2a0 [ 2246.790763][T17016] __se_sys_sendmsg+0x1c3/0x2b0 [ 2246.795648][T17016] ? __x64_sys_sendmsg+0x80/0x80 [ 2246.800638][T17016] do_syscall_64+0x4c/0xa0 [ 2246.805099][T17016] ? clear_bhb_loop+0x60/0xb0 [ 2246.809812][T17016] ? clear_bhb_loop+0x60/0xb0 [ 2246.814524][T17016] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2246.820455][T17016] RIP: 0033:0x7fe913f9ce59 [ 2246.824905][T17016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2246.844541][T17016] RSP: 002b:00007fe914e2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2246.852984][T17016] RAX: ffffffffffffffda RBX: 00007fe914216090 RCX: 00007fe913f9ce59 [ 2246.860979][T17016] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 2246.868982][T17016] RBP: 00007fe914032e6f R08: 0000000000000000 R09: 0000000000000000 [ 2246.876977][T17016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2246.884971][T17016] R13: 00007fe914216128 R14: 00007fe914216090 R15: 00007ffccd2e80f8 [ 2246.892990][T17016] [ 2247.344937][T17049] netlink: 'syz.0.11741': attribute type 10 has an invalid length. [ 2247.376381][T17049] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11741'. [ 2247.745647][T17031] netlink: 'syz.3.11737': attribute type 21 has an invalid length. [ 2247.794636][T17031] IPv6: NLM_F_CREATE should be specified when creating new route [ 2247.869193][T17031] IPv6: Can't replace route, no match found [ 2251.238008][T17096] netlink: 'syz.4.11750': attribute type 2 has an invalid length. [ 2251.456683][T17096] device 1 entered promiscuous mode [ 2251.675566][T17104] -: renamed from syzkaller0 [ 2252.303762][T17131] netlink: 'syz.0.11766': attribute type 3 has an invalid length. [ 2252.358580][T17131] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.11766'. [ 2254.874495][T17223] netlink: 'syz.0.11792': attribute type 10 has an invalid length. [ 2254.930381][T17223] device hsr0 entered promiscuous mode [ 2254.958277][T17223] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2255.579155][T17235] netlink: 'syz.4.11796': attribute type 9 has an invalid length. [ 2255.603162][T17235] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.11796'. [ 2255.742805][T17235] netlink: 'syz.4.11796': attribute type 4 has an invalid length. [ 2255.789460][T17235] netlink: 152 bytes leftover after parsing attributes in process `syz.4.11796'. [ 2257.279578][T17282] netlink: 'syz.0.11808': attribute type 1 has an invalid length. [ 2257.299656][T17282] netlink: 'syz.0.11808': attribute type 4 has an invalid length. [ 2257.307741][T17282] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.11808'. [ 2257.379188][T17287] netlink: 'syz.2.11810': attribute type 29 has an invalid length. [ 2257.413401][T17287] netlink: 'syz.2.11810': attribute type 29 has an invalid length. [ 2257.432079][T17289] netlink: 'syz.2.11810': attribute type 29 has an invalid length. [ 2259.357372][T17301] tap0: tun_chr_ioctl cmd 1074025677 [ 2259.370308][T17301] tap0: linktype set to 776 [ 2259.407521][T17303] netlink: 'syz.4.11813': attribute type 10 has an invalid length. [ 2259.448938][T17303] device hsr0 entered promiscuous mode [ 2259.455065][T17303] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2259.789354][T17317] netlink: 128 bytes leftover after parsing attributes in process `syz.3.11816'. [ 2259.798638][T17317] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2259.916498][T17317] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2260.393276][T17341] netlink: 'syz.0.11824': attribute type 21 has an invalid length. [ 2260.441735][T17341] netlink: 156 bytes leftover after parsing attributes in process `syz.0.11824'. [ 2261.186712][T17375] netlink: 'syz.3.11834': attribute type 4 has an invalid length. [ 2261.209324][T17375] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11834'. [ 2261.259995][T17375] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2262.552039][T17409] device sit0 left promiscuous mode [ 2263.396071][T17418] mac80211_hwsim hwsim106 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2263.566934][T17420] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11843'. [ 2264.467242][T17455] netlink: 'syz.3.11856': attribute type 29 has an invalid length. [ 2264.496205][T17455] netlink: 'syz.3.11856': attribute type 3 has an invalid length. [ 2264.516555][T17455] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11856'. [ 2264.761222][T17461] netlink: 'syz.2.11857': attribute type 29 has an invalid length. [ 2264.809712][T17461] netlink: 'syz.2.11857': attribute type 29 has an invalid length. [ 2264.834830][T17460] netlink: 'syz.2.11857': attribute type 29 has an invalid length. [ 2265.763153][T16247] wlan1: Trigger new scan to find an IBSS to join [ 2265.869860][T17493] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11866'. [ 2265.889105][T17493] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11866'. [ 2265.929369][T17494] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11866'. [ 2266.525304][T17512] netlink: 'syz.4.11872': attribute type 19 has an invalid length. [ 2266.742666][T17523] netlink: 'syz.3.11874': attribute type 2 has an invalid length. [ 2266.759353][T17519] netlink: 'syz.2.11873': attribute type 21 has an invalid length. [ 2266.767343][T17519] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11873'. [ 2266.773916][T17523] netlink: 198692 bytes leftover after parsing attributes in process `syz.3.11874'. [ 2266.809554][T17519] netlink: 'syz.2.11873': attribute type 4 has an invalid length. [ 2266.817449][T17519] netlink: 'syz.2.11873': attribute type 5 has an invalid length. [ 2266.859214][T17519] netlink: 3 bytes leftover after parsing attributes in process `syz.2.11873'. [ 2266.879682][T17526] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11873'. [ 2266.899584][T17526] netlink: 3 bytes leftover after parsing attributes in process `syz.2.11873'. [ 2267.572922][T17560] netlink: 15039 bytes leftover after parsing attributes in process `syz.3.11884'. [ 2268.049700][T17568] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2268.059764][T17568] syzkaller1: linktype set to 825 [ 2268.462649][T17585] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11889'. [ 2269.940523][T17600] validate_nla: 4 callbacks suppressed [ 2269.940546][T17600] netlink: 'syz.0.11895': attribute type 10 has an invalid length. [ 2270.035164][T17605] netlink: 'syz.0.11895': attribute type 21 has an invalid length. [ 2270.067776][T17605] netlink: 'syz.0.11895': attribute type 1 has an invalid length. [ 2270.122065][T17609] netlink: 'syz.4.11897': attribute type 6 has an invalid length. [ 2270.206405][T17613] netlink: 'syz.2.11899': attribute type 2 has an invalid length. [ 2270.385672][T17615] netlink: 'syz.3.11900': attribute type 3 has an invalid length. [ 2270.809234][T16246] wlan1: Trigger new scan to find an IBSS to join [ 2271.434199][T17650] netlink: 'syz.5.11912': attribute type 2 has an invalid length. [ 2271.469658][T17650] __nla_validate_parse: 7 callbacks suppressed [ 2271.469694][T17650] netlink: 60 bytes leftover after parsing attributes in process `syz.5.11912'. [ 2271.712407][T16242] wlan1: Creating new IBSS network, BSSID 8a:7f:3d:df:17:88 [ 2271.744870][T16242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2272.108088][T17667] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.11916'. [ 2272.139026][T17667] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 2272.461445][T17680] netlink: 'syz.2.11920': attribute type 11 has an invalid length. [ 2272.509040][T17680] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.11920'. [ 2272.561927][T17681] netlink: 'syz.2.11920': attribute type 3 has an invalid length. [ 2272.599018][T17681] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.11920'. [ 2272.639182][T17678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2272.691117][T17691] netlink: 'syz.3.11923': attribute type 10 has an invalid length. [ 2272.715344][T17691] netlink: 3819 bytes leftover after parsing attributes in process `syz.3.11923'. [ 2272.788474][T17691] netlink: 'syz.3.11923': attribute type 21 has an invalid length. [ 2272.797263][T17691] netlink: 16090 bytes leftover after parsing attributes in process `syz.3.11923'. [ 2273.723091][T17733] netlink: 3819 bytes leftover after parsing attributes in process `syz.2.11934'. [ 2273.832957][T17733] netlink: 16090 bytes leftover after parsing attributes in process `syz.2.11934'. [ 2274.300732][T17748] IPv6: NLM_F_CREATE should be specified when creating new route [ 2274.308651][T17748] IPv6: Can't replace route, no match found [ 2274.602141][T17759] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11945'. [ 2274.819040][T17769] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.11948'. [ 2274.986112][T17769] netlink: zone id is out of range [ 2275.024117][T17769] netlink: zone id is out of range [ 2275.055895][T17769] netlink: zone id is out of range [ 2275.133436][T17769] netlink: zone id is out of range [ 2275.159925][T17795] FAULT_INJECTION: forcing a failure. [ 2275.159925][T17795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2275.199123][T17795] CPU: 0 PID: 17795 Comm: syz.4.11955 Not tainted syzkaller #0 [ 2275.206769][T17795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2275.216879][T17795] Call Trace: [ 2275.220194][T17795] [ 2275.223173][T17795] dump_stack_lvl+0x188/0x24e [ 2275.227906][T17795] ? show_regs_print_info+0x12/0x12 [ 2275.233157][T17795] ? load_image+0x410/0x410 [ 2275.237770][T17795] ? __lock_acquire+0x7bd0/0x7bd0 [ 2275.242873][T17795] should_fail_ex+0x390/0x4c0 [ 2275.247601][T17795] _copy_from_user+0x2c/0x170 [ 2275.252332][T17795] __sys_bpf+0x2ea/0x780 [ 2275.256620][T17795] ? bpf_link_show_fdinfo+0x380/0x380 [ 2275.262107][T17795] ? lock_chain_count+0x20/0x20 [ 2275.267032][T17795] __x64_sys_bpf+0x78/0x90 [ 2275.271502][T17795] do_syscall_64+0x4c/0xa0 [ 2275.275976][T17795] ? clear_bhb_loop+0x60/0xb0 [ 2275.280689][T17795] ? clear_bhb_loop+0x60/0xb0 [ 2275.285406][T17795] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2275.291352][T17795] RIP: 0033:0x7f359bf9ce59 [ 2275.295812][T17795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2275.315471][T17795] RSP: 002b:00007f359a1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2275.323933][T17795] RAX: ffffffffffffffda RBX: 00007f359c215fa0 RCX: 00007f359bf9ce59 [ 2275.331948][T17795] RDX: 0000000000000048 RSI: 0000200000000500 RDI: 000000000000000a [ 2275.339960][T17795] RBP: 00007f359a1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2275.347971][T17795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2275.355981][T17795] R13: 00007f359c216038 R14: 00007f359c215fa0 R15: 00007ffe4b9cb1b8 [ 2275.364012][T17795] [ 2275.422890][T17769] netlink: del zone limit has 4 unknown bytes [ 2276.070140][T17827] validate_nla: 8 callbacks suppressed [ 2276.070179][T17827] netlink: 'syz.2.11965': attribute type 25 has an invalid length. [ 2276.146131][T17827] netlink: 'syz.2.11965': attribute type 29 has an invalid length. [ 2276.244970][T17837] netlink: 'syz.4.11968': attribute type 29 has an invalid length. [ 2276.258510][T17837] netlink: 'syz.4.11968': attribute type 29 has an invalid length. [ 2276.297678][T17839] netlink: 'syz.4.11968': attribute type 29 has an invalid length. [ 2277.104634][T17857] netlink: 'syz.0.11974': attribute type 39 has an invalid length. [ 2278.133704][T17876] netlink: 'syz.5.11979': attribute type 3 has an invalid length. [ 2278.185446][T17876] __nla_validate_parse: 1 callbacks suppressed [ 2278.185477][T17876] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.11979'. [ 2278.326887][T17892] netlink: 'syz.4.11983': attribute type 12 has an invalid length. [ 2278.346327][T17892] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11983'. [ 2278.416065][T17894] netlink: 180 bytes leftover after parsing attributes in process `syz.3.11985'. [ 2279.303016][T17926] netlink: 'syz.2.11994': attribute type 10 has an invalid length. [ 2279.473644][T17926] team0 (unregistering): Port device team_slave_0 removed [ 2279.492844][T17938] netlink: 'syz.0.11996': attribute type 1 has an invalid length. [ 2279.509288][T17938] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.11996'. [ 2279.548876][T17926] team0 (unregistering): Port device team_slave_1 removed [ 2279.573708][T17928] bridge0: port 2(bridge_slave_1) entered disabled state [ 2279.581247][T17928] bridge0: port 1(bridge_slave_0) entered disabled state [ 2279.647862][T17934] device bridge_slave_1 left promiscuous mode [ 2279.662473][T17934] bridge0: port 2(bridge_slave_1) entered disabled state [ 2279.690301][T17934] device bridge_slave_0 left promiscuous mode [ 2279.706664][T17934] bridge0: port 1(bridge_slave_0) entered disabled state [ 2279.781785][T17934] team0: Port device bridge0 removed [ 2279.843565][T17938] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11996'. [ 2281.646558][T17996] validate_nla: 5 callbacks suppressed [ 2281.646577][T17996] netlink: 'syz.0.12014': attribute type 2 has an invalid length. [ 2281.693752][T17996] netlink: 'syz.0.12014': attribute type 10 has an invalid length. [ 2281.731044][T17996] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2281.771214][T17996] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 2281.788219][T17996] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2281.810442][T17996] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 2281.826985][T18005] netlink: 'syz.0.12014': attribute type 21 has an invalid length. [ 2281.990742][T18006] netlink: 128 bytes leftover after parsing attributes in process `syz.2.12017'. [ 2282.040768][T18006] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2282.089796][T18006] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2282.195341][T18013] netlink: 15039 bytes leftover after parsing attributes in process `syz.5.12019'. [ 2282.494734][T18029] bridge0: port 3(dummy0) entered disabled state [ 2282.501352][T18029] bridge0: port 2(bridge_slave_1) entered disabled state [ 2282.508875][T18029] bridge0: port 1(bridge_slave_0) entered disabled state [ 2282.541311][T18032] netlink: 'syz.2.12025': attribute type 3 has an invalid length. [ 2282.569903][T18032] netlink: 'syz.2.12025': attribute type 8 has an invalid length. [ 2282.578148][T18029] bridge0: port 3(dummy0) entered disabled state [ 2282.600668][T18032] netlink: 'syz.2.12025': attribute type 7 has an invalid length. [ 2282.608577][T18032] netlink: 194740 bytes leftover after parsing attributes in process `syz.2.12025'. [ 2282.622696][T18029] device bridge_slave_1 left promiscuous mode [ 2282.639355][T18029] bridge0: port 2(bridge_slave_1) entered disabled state [ 2282.653600][T18029] device bridge_slave_0 left promiscuous mode [ 2282.669349][T18029] bridge0: port 1(bridge_slave_0) entered disabled state [ 2282.772753][T18036] netlink: 'syz.5.12027': attribute type 13 has an invalid length. [ 2282.781405][T18036] netlink: 172 bytes leftover after parsing attributes in process `syz.5.12027'. [ 2282.851980][T18036] erspan0: refused to change device tx_queue_len [ 2282.866317][T18039] netlink: 144 bytes leftover after parsing attributes in process `syz.2.12025'. [ 2282.911888][T18039] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2283.070979][T18047] netlink: 'syz.5.12030': attribute type 10 has an invalid length. [ 2283.097135][T18047] device hsr0 entered promiscuous mode [ 2283.107998][T18050] netlink: 'syz.2.12032': attribute type 11 has an invalid length. [ 2283.127831][T18047] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2283.147865][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.154284][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.188560][T18047] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 2283.200141][T18047] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2283.213142][T18047] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 2283.230924][T18053] __nla_validate_parse: 1 callbacks suppressed [ 2283.230946][T18053] netlink: 125520 bytes leftover after parsing attributes in process `syz.3.12031'. [ 2284.147044][T18092] netlink: 'syz.5.12043': attribute type 21 has an invalid length. [ 2286.837895][T18103] netlink: 'syz.4.12045': attribute type 3 has an invalid length. [ 2286.877208][T18103] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.12045'. [ 2286.974229][ T5863] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2287.424725][T18122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12050'. [ 2287.468746][T18122] netlink: 'syz.4.12050': attribute type 2 has an invalid length. [ 2287.721437][T18135] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.12054'. [ 2287.792444][T18134] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.12053'. [ 2287.897122][T18135] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 2287.945523][T18135] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 2288.007135][T18135] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2288.203083][T18145] netlink: 'syz.5.12057': attribute type 15 has an invalid length. [ 2288.248736][T18145] netlink: 16098 bytes leftover after parsing attributes in process `syz.5.12057'. [ 2288.658425][T18161] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.12060'. [ 2288.750591][T18159] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.12060'. [ 2288.760053][T18155] -1: renamed from syzkaller0 [ 2291.493601][T18168] netlink: 763 bytes leftover after parsing attributes in process `syz.4.12062'. [ 2291.524738][T18166] mac80211_hwsim hwsim105 ªªªªªª: renamed from wlan0 [ 2292.067574][T18189] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12068'. [ 2292.303913][T18206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2292.311832][T18206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2292.322231][T18206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2292.332778][T18206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2292.354986][T18206] bridge0: port 3(batadv0) entered disabled state [ 2292.425367][T18206] device batadv0 left promiscuous mode [ 2292.438560][T18206] bridge0: port 3(batadv0) entered disabled state [ 2292.453593][T18210] netlink: 'syz.2.12074': attribute type 2 has an invalid length. [ 2292.632956][T18215] netlink: 'syz.4.12075': attribute type 13 has an invalid length. [ 2292.659632][T18215] netlink: 172 bytes leftover after parsing attributes in process `syz.4.12075'. [ 2293.178727][T18215] erspan0: refused to change device tx_queue_len [ 2293.507545][T18248] netlink: 830 bytes leftover after parsing attributes in process `syz.4.12084'. [ 2293.574254][T18250] netlink: 830 bytes leftover after parsing attributes in process `syz.4.12084'. [ 2294.775257][T18276] device syzkaller0 entered promiscuous mode [ 2298.447847][T18304] netlink: 'syz.3.12100': attribute type 10 has an invalid length. [ 2299.003615][T18351] netlink: 'syz.2.12112': attribute type 10 has an invalid length. [ 2299.125335][T18356] netlink: 'syz.2.12112': attribute type 46 has an invalid length. [ 2299.518126][T18356] netlink: 'syz.2.12112': attribute type 46 has an invalid length. [ 2300.055875][T18369] veth1_vlan: mtu greater than device maximum [ 2300.072033][T18375] netlink: 156 bytes leftover after parsing attributes in process `syz.2.12116'. [ 2300.244712][T18381] netlink: 'syz.4.12118': attribute type 9 has an invalid length. [ 2300.266224][T18381] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.12118'. [ 2300.324137][T18381] netlink: 'syz.4.12118': attribute type 9 has an invalid length. [ 2300.369809][T18381] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.12118'. [ 2300.700684][T18405] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.12124'. [ 2300.808088][T18406] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.12125'. [ 2300.964083][T18414] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12128'. [ 2300.984902][T18414] tc_dump_action: action bad kind [ 2301.006145][T18414] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.12128'. [ 2301.036517][T18414] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.12128'. [ 2301.308926][T18437] netlink: 'syz.0.12133': attribute type 10 has an invalid length. [ 2301.353861][T18437] device geneve1 entered promiscuous mode [ 2301.375260][T18437] team0: Port device geneve1 added [ 2301.573858][T18447] netlink: 'syz.4.12138': attribute type 10 has an invalid length. [ 2301.642107][T18444] delete_channel: no stack [ 2301.768681][T18464] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.12141'. [ 2302.600275][T18496] device batadv0 entered promiscuous mode [ 2302.971532][T18507] device pim6reg1 entered promiscuous mode [ 2303.621890][T18529] netlink: 'syz.3.12161': attribute type 10 has an invalid length. [ 2303.998106][T18542] netlink: 'syz.0.12165': attribute type 15 has an invalid length. [ 2304.060248][T18542] netlink: 'syz.0.12165': attribute type 7 has an invalid length. [ 2304.129504][T18542] netlink: 52 bytes leftover after parsing attributes in process `syz.0.12165'. [ 2304.241816][T16242] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2304.577634][T18551] netlink: 'syz.0.12166': attribute type 10 has an invalid length. [ 2304.719602][T18551] bridge0: port 4(team0) entered disabled state [ 2304.728370][T18551] bridge0: port 2(bridge_slave_1) entered disabled state [ 2304.739195][T18551] bridge0: port 1(bridge_slave_0) entered disabled state [ 2304.918729][T18551] team0: Device bridge0 is already an upper device of the team interface [ 2304.983316][T18550] netlink: 'syz.0.12166': attribute type 10 has an invalid length. [ 2305.020089][T18550] team0: Device bridge0 is already an upper device of the team interface [ 2305.139131][T18560] netlink: 'syz.3.12168': attribute type 7 has an invalid length. [ 2305.150574][T18560] netlink: 148 bytes leftover after parsing attributes in process `syz.3.12168'. [ 2305.434752][T18564] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.12170'. [ 2305.440508][T18565] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.12170'. [ 2305.545503][T18567] netlink: 'syz.2.12169': attribute type 11 has an invalid length. [ 2306.106197][T18571] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12171'. [ 2306.842384][T18579] netlink: 'syz.0.12173': attribute type 1 has an invalid length. [ 2306.898439][T18579] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.12173'. [ 2306.930440][T18595] netlink: 'syz.0.12173': attribute type 29 has an invalid length. [ 2306.950177][T18595] netlink: 'syz.0.12173': attribute type 29 has an invalid length. [ 2307.004167][T18579] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12173'. [ 2307.099563][T18579] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12173'. [ 2307.454940][T18600] device sit0 entered promiscuous mode [ 2307.737864][T18620] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.12181'. [ 2307.775017][T18612] device hsr0 entered promiscuous mode [ 2307.838569][T18612] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2308.121200][T18630] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.12182'. [ 2308.183990][T18631] netlink: 14552 bytes leftover after parsing attributes in process `syz.3.12186'. [ 2308.363475][T18634] device syzkaller0 entered promiscuous mode [ 2311.832261][T18646] validate_nla: 5 callbacks suppressed [ 2311.832279][T18646] netlink: 'syz.2.12191': attribute type 2 has an invalid length. [ 2311.846595][T18646] netlink: 'syz.2.12191': attribute type 8 has an invalid length. [ 2311.855096][T18646] __nla_validate_parse: 2 callbacks suppressed [ 2311.855113][T18646] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12191'. [ 2312.313207][T18673] netlink: 156 bytes leftover after parsing attributes in process `syz.5.12198'. [ 2312.612213][T18682] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.12199'. [ 2313.487023][T18706] netlink: 'syz.5.12207': attribute type 3 has an invalid length. [ 2313.570772][T18706] netlink: 'syz.5.12207': attribute type 1 has an invalid length. [ 2313.630592][T18706] netlink: 198452 bytes leftover after parsing attributes in process `syz.5.12207'. [ 2313.658629][T18713] netlink: 'syz.0.12209': attribute type 3 has an invalid length. [ 2313.751145][T18713] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.12209'. [ 2314.173961][T18724] netlink: 175 bytes leftover after parsing attributes in process `syz.3.12212'. [ 2314.219043][T18727] netlink: 175 bytes leftover after parsing attributes in process `syz.3.12212'. [ 2314.266729][T18724] netlink: 'syz.3.12212': attribute type 10 has an invalid length. [ 2314.319619][T18723] netlink: 'syz.3.12212': attribute type 10 has an invalid length. [ 2314.756576][T14433] syzkaller0: tun_net_xmit 76 [ 2314.761693][T14433] syzkaller0: tun_net_xmit 48 [ 2314.779442][ T22] syzkaller0: tun_net_xmit 76 [ 2314.899385][T14433] syzkaller0: tun_net_xmit 76 [ 2318.984647][T16218] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2319.019905][T18749] netlink: 'syz.4.12217': attribute type 10 has an invalid length. [ 2319.055377][T18749] device veth0_vlan left promiscuous mode [ 2319.069808][T18749] device veth0_vlan entered promiscuous mode [ 2319.101733][T18749] team0: Device veth0_vlan failed to register rx_handler [ 2319.139056][T18756] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.12220'. [ 2319.209076][T18758] netlink: 144 bytes leftover after parsing attributes in process `syz.2.12221'. [ 2319.810918][T18781] netlink: 'syz.3.12228': attribute type 2 has an invalid length. [ 2320.071115][T18798] netlink: 'syz.4.12233': attribute type 3 has an invalid length. [ 2320.121242][T18798] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.12233'. [ 2320.162002][T18799] netlink: 'syz.4.12233': attribute type 3 has an invalid length. [ 2320.200508][T18797] netlink: 'syz.4.12233': attribute type 3 has an invalid length. [ 2320.249746][T18799] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.12233'. [ 2320.257952][T18797] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.12233'. [ 2320.544044][T18807] netlink: 156 bytes leftover after parsing attributes in process `syz.3.12235'. [ 2320.579567][T18807] netlink: 763 bytes leftover after parsing attributes in process `syz.3.12235'. [ 2320.870698][T18814] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.12237'. [ 2320.962538][T18825] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.12242'. [ 2321.005913][T18825] bridge_slave_1: default FDB implementation only supports local addresses [ 2321.137305][T18827] netlink: 'syz.3.12243': attribute type 21 has an invalid length. [ 2321.154970][T18827] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12243'. [ 2321.764386][T18842] netlink: 'syz.3.12248': attribute type 15 has an invalid length. [ 2321.819187][T18842] netlink: 'syz.3.12248': attribute type 7 has an invalid length. [ 2322.369889][T18872] netlink: 'syz.2.12253': attribute type 10 has an invalid length. [ 2322.422754][T18872] bridge0: port 2(bridge_slave_1) entered disabled state [ 2322.491476][T18872] device bridge_slave_1 left promiscuous mode [ 2322.497957][T18872] bridge0: port 2(bridge_slave_1) entered disabled state [ 2322.569047][T18872] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 2323.296557][T18896] netlink: 'syz.4.12256': attribute type 21 has an invalid length. [ 2323.910618][T18924] device wlan1 left promiscuous mode [ 2323.990774][T18930] device wlan1 entered promiscuous mode [ 2324.392670][T18933] __nla_validate_parse: 3 callbacks suppressed [ 2324.392712][T18933] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.12270'. [ 2324.577577][T18938] netlink: 'syz.5.12271': attribute type 3 has an invalid length. [ 2324.609167][T18938] netlink: 163968 bytes leftover after parsing attributes in process `syz.5.12271'. [ 2324.880461][T18934] delete_channel: no stack [ 2324.995743][T18943] netlink: 132 bytes leftover after parsing attributes in process `syz.5.12273'. [ 2325.022616][T18943] netlink: 128 bytes leftover after parsing attributes in process `syz.5.12273'. [ 2325.065972][T18943] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2325.109923][T18944] netlink: 'syz.3.12272': attribute type 1 has an invalid length. [ 2325.383465][T18950] netlink: 'syz.0.12275': attribute type 20 has an invalid length. [ 2325.579842][T18953] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.12275'. [ 2325.653922][T18953] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.12275'. [ 2325.715407][T18950] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.12275'. [ 2326.550213][T18985] IPv6: NLM_F_CREATE should be specified when creating new route [ 2326.559340][T18985] netlink: 1 bytes leftover after parsing attributes in process `syz.5.12284'. [ 2327.014596][T19004] netlink: 'syz.2.12290': attribute type 10 has an invalid length. [ 2327.654231][T19020] netlink: 'syz.3.12294': attribute type 2 has an invalid length. [ 2327.688181][T19020] netlink: 'syz.3.12294': attribute type 1 has an invalid length. [ 2327.726101][T19020] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.12294'. [ 2327.787084][T19015] netlink: 'syz.5.12293': attribute type 6 has an invalid length. [ 2328.851346][T19056] netlink: 'syz.3.12304': attribute type 1 has an invalid length. [ 2328.900493][T19056] netlink: 5 bytes leftover after parsing attributes in process `syz.3.12304'. [ 2331.907841][T19092] netlink: 'syz.4.12314': attribute type 13 has an invalid length. [ 2331.928638][T19092] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12314'. [ 2331.964411][T19092] erspan0: refused to change device tx_queue_len [ 2331.990695][T19092] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 2332.076007][T19102] netlink: 'syz.0.12313': attribute type 2 has an invalid length. [ 2332.366786][T19102] device 0 entered promiscuous mode [ 2332.984240][T19127] netlink: 64535 bytes leftover after parsing attributes in process `syz.5.12322'. [ 2333.201942][T19139] netlink: 'syz.2.12324': attribute type 3 has an invalid length. [ 2333.252432][T19139] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.12324'. [ 2333.504950][T19143] netlink: 'syz.0.12325': attribute type 3 has an invalid length. [ 2333.517823][T19143] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.12325'. [ 2333.697292][T19149] netlink: 'syz.0.12326': attribute type 3 has an invalid length. [ 2333.711875][T19149] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.12326'. [ 2333.727392][T19148] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.12326'. [ 2333.742037][T19148] bridge_slave_1: default FDB implementation only supports local addresses [ 2334.419144][T19173] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12333'. [ 2334.548408][T19171] can: request_module (can-proto-0) failed. [ 2334.701497][T19184] netlink: 'syz.2.12336': attribute type 21 has an invalid length. [ 2334.744969][T19186] netlink: 212168 bytes leftover after parsing attributes in process `syz.3.12338'. [ 2335.594461][T19223] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.12347'. [ 2335.685590][T19223] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.12347'. [ 2336.253691][T16475] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2336.280456][T19234] netlink: 'syz.3.12350': attribute type 9 has an invalid length. [ 2336.413180][T19237] device syzkaller0 entered promiscuous mode [ 2336.450989][T19234] netlink: 'syz.3.12350': attribute type 29 has an invalid length. [ 2336.474959][T19234] netlink: 'syz.3.12350': attribute type 29 has an invalid length. [ 2339.344149][T19257] netlink: 56863 bytes leftover after parsing attributes in process `syz.0.12357'. [ 2343.211365][T19307] netlink: 'syz.0.12370': attribute type 2 has an invalid length. [ 2343.246851][T19301] can: request_module (can-proto-0) failed. [ 2343.323405][T19307] device 0 entered promiscuous mode [ 2343.345286][T19310] netlink: 'syz.3.12371': attribute type 6 has an invalid length. [ 2343.362087][T19310] netlink: 164 bytes leftover after parsing attributes in process `syz.3.12371'. [ 2343.664313][T19321] netlink: 'syz.5.12374': attribute type 30 has an invalid length. [ 2343.827903][T19315] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.12372'. [ 2343.921812][T19325] netlink: 830 bytes leftover after parsing attributes in process `syz.5.12374'. [ 2344.404077][T19335] netlink: 'syz.5.12378': attribute type 10 has an invalid length. [ 2344.617409][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.623922][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2344.699209][T19335] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 2345.903620][T19367] netlink: 'syz.3.12388': attribute type 5 has an invalid length. [ 2345.933931][T19367] netlink: 'syz.3.12388': attribute type 30 has an invalid length. [ 2346.118068][T19376] netlink: 'syz.4.12389': attribute type 4 has an invalid length. [ 2346.168174][T19376] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12389'. [ 2346.437628][T19385] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.12391'. [ 2346.649431][T15233] Bluetooth: hci2: command 0x0406 tx timeout [ 2347.073731][T19398] device GPL entered promiscuous mode [ 2347.498456][T19409] device sit0 left promiscuous mode [ 2347.661749][T19410] device sit0 entered promiscuous mode [ 2348.247134][T19417] netlink: 'syz.4.12400': attribute type 28 has an invalid length. [ 2348.395345][T19424] À: port 1(vlan0) entered blocking state [ 2348.408519][T19424] À: port 1(vlan0) entered disabled state [ 2348.416137][T19424] device vlan0 entered promiscuous mode [ 2348.448835][T19424] À: port 1(vlan0) entered blocking state [ 2348.454783][T19424] À: port 1(vlan0) entered forwarding state [ 2348.499378][T11778] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11 [ 2348.907922][T19438] netlink: 157696 bytes leftover after parsing attributes in process `syz.4.12406'. [ 2350.319100][ T6009] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2351.823726][T19458] bridge_slave_0: mtu less than device minimum [ 2351.847608][T19459] netlink: 'syz.3.12412': attribute type 29 has an invalid length. [ 2351.879086][T19459] netlink: 'syz.3.12412': attribute type 29 has an invalid length. [ 2352.296876][T19470] bridge0: port 2(batadv0) entered blocking state [ 2352.314162][T19470] bridge0: port 2(batadv0) entered disabled state [ 2352.390635][T19470] device batadv0 entered promiscuous mode [ 2352.417985][T19470] bridge0: port 2(batadv0) entered blocking state [ 2352.424639][T19470] bridge0: port 2(batadv0) entered forwarding state [ 2352.755484][ T5863] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 2352.764921][ T5863] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 2352.933927][T19491] netlink: 'syz.0.12423': attribute type 2 has an invalid length. [ 2352.999604][T19491] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.12423'. [ 2353.474490][T19508] delete_channel: no stack [ 2353.557912][T19515] netlink: 'syz.3.12429': attribute type 10 has an invalid length. [ 2353.713199][T19520] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12429'. [ 2356.561751][T19537] netlink: 'syz.2.12434': attribute type 12 has an invalid length. [ 2356.590402][T19537] netlink: 'syz.2.12434': attribute type 15 has an invalid length. [ 2357.024564][T19557] netlink: 128 bytes leftover after parsing attributes in process `syz.3.12438'. [ 2357.074731][T19557] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2357.206941][T19560] netlink: 'syz.4.12440': attribute type 2 has an invalid length. [ 2357.685813][T19564] netlink: 168 bytes leftover after parsing attributes in process `syz.3.12442'. [ 2358.186656][T11778] Bluetooth: hci3: Malformed LE Event: 0x02 [ 2358.490969][T19573] netlink: 'syz.2.12444': attribute type 10 has an invalid length. [ 2358.576373][T19573] netlink: 'syz.2.12444': attribute type 25 has an invalid length. [ 2358.632624][T19573] netlink: 'syz.2.12444': attribute type 25 has an invalid length. [ 2358.664521][T19582] netlink: 'syz.3.12449': attribute type 3 has an invalid length. [ 2358.701312][T19582] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.12449'. [ 2359.104882][T19594] netlink: 'syz.2.12452': attribute type 21 has an invalid length. [ 2359.135760][T19594] netlink: 144 bytes leftover after parsing attributes in process `syz.2.12452'. [ 2362.223221][T19620] sctp: [Deprecated]: syz.3.12459 (pid 19620) Use of int in max_burst socket option deprecated. [ 2362.223221][T19620] Use struct sctp_assoc_value instead [ 2362.507770][T19624] netlink: 'syz.5.12462': attribute type 21 has an invalid length. [ 2362.516735][T19624] netlink: 132 bytes leftover after parsing attributes in process `syz.5.12462'. [ 2362.531663][T19624] netlink: 'syz.5.12462': attribute type 1 has an invalid length. [ 2362.636017][T19642] netlink: 'syz.3.12465': attribute type 3 has an invalid length. [ 2362.659142][T19642] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.12465'. [ 2363.891514][T19652] netlink: 52 bytes leftover after parsing attributes in process `syz.5.12467'. [ 2366.955680][T19644] netlink: 'syz.3.12465': attribute type 21 has an invalid length. [ 2366.966694][T19644] netlink: 128 bytes leftover after parsing attributes in process `syz.3.12465'. [ 2366.977234][T19644] netlink: 'syz.3.12465': attribute type 4 has an invalid length. [ 2366.985281][T19644] netlink: 3 bytes leftover after parsing attributes in process `syz.3.12465'. [ 2367.191764][T19673] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.12471'. [ 2367.328407][T19674] netlink: 'syz.3.12472': attribute type 1 has an invalid length. [ 2367.399484][T19674] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.12472'. [ 2367.527566][T19686] netlink: 'syz.0.12476': attribute type 25 has an invalid length. [ 2367.667662][T19690] netlink: 'syz.4.12478': attribute type 10 has an invalid length. [ 2367.716957][T19690] device veth0_vlan left promiscuous mode [ 2367.748146][T19690] device veth0_vlan entered promiscuous mode [ 2367.832155][T19690] team0: Device veth0_vlan failed to register rx_handler [ 2367.911034][T19696] netlink: 'syz.5.12477': attribute type 10 has an invalid length. [ 2367.948187][T19696] netlink: 2 bytes leftover after parsing attributes in process `syz.5.12477'. [ 2367.978937][T19696] device bond0 entered promiscuous mode [ 2367.988857][T19696] device bond_slave_0 entered promiscuous mode [ 2368.019106][T19696] device bond_slave_1 entered promiscuous mode [ 2368.039111][T19696] device dummy0 entered promiscuous mode [ 2368.045563][T19696] device bridge_slave_1 entered promiscuous mode [ 2368.239053][T16218] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2368.582512][T19725] netlink: 'syz.4.12487': attribute type 3 has an invalid length. [ 2368.608513][T19725] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.12487'. [ 2369.200269][T19728] netlink: 156 bytes leftover after parsing attributes in process `syz.3.12488'. [ 2369.230133][T19730] netlink: 132 bytes leftover after parsing attributes in process `syz.5.12489'. [ 2369.544729][T19742] -1: renamed from syzkaller0 [ 2370.438640][T19770] netlink: 'syz.2.12500': attribute type 2 has an invalid length. [ 2370.481928][T19770] netlink: 'syz.2.12500': attribute type 8 has an invalid length. [ 2370.505530][T19770] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12500'. [ 2370.575091][T19773] netlink: 'syz.0.12501': attribute type 30 has an invalid length. [ 2370.639782][T19768] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.12500'. [ 2372.287010][T19826] netlink: 'syz.2.12515': attribute type 2 has an invalid length. [ 2372.465800][T19826] device 0 entered promiscuous mode [ 2372.858649][T19848] netlink: 'syz.5.12520': attribute type 2 has an invalid length. [ 2372.890890][T19848] netlink: 'syz.5.12520': attribute type 8 has an invalid length. [ 2372.959298][T19848] netlink: 132 bytes leftover after parsing attributes in process `syz.5.12520'. [ 2373.054649][T19835] netlink: 202920 bytes leftover after parsing attributes in process `syz.5.12520'. [ 2373.392785][T19861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12524'. [ 2373.466753][T19861] tc_dump_action: action bad kind [ 2373.503107][T19865] netlink: 'syz.4.12526': attribute type 21 has an invalid length. [ 2373.531338][T19865] netlink: 'syz.4.12526': attribute type 1 has an invalid length. [ 2373.547894][T19865] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12526'. [ 2373.626246][T11778] Bluetooth: hci3: unexpected subevent 0x05 length: 150 > 12 [ 2373.798061][T19872] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12526'. [ 2373.977114][T19879] netlink: 'syz.0.12528': attribute type 27 has an invalid length. [ 2374.016947][T19879] netlink: 164 bytes leftover after parsing attributes in process `syz.0.12528'. [ 2375.001188][T19899] netlink: 'syz.2.12534': attribute type 13 has an invalid length. [ 2375.049108][T19899] __nla_validate_parse: 1 callbacks suppressed [ 2375.049127][T19899] netlink: 172 bytes leftover after parsing attributes in process `syz.2.12534'. [ 2375.197400][T19899] erspan0: refused to change device tx_queue_len [ 2375.337172][T19903] device veth1_macvtap left promiscuous mode [ 2375.437963][T19904] device veth1_macvtap entered promiscuous mode [ 2375.470418][T19904] device macsec0 entered promiscuous mode [ 2375.522527][T19912] netlink: 'syz.3.12538': attribute type 2 has an invalid length. [ 2375.576260][T19912] netlink: 'syz.3.12538': attribute type 8 has an invalid length. [ 2375.617817][T19912] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12538'. [ 2375.679581][T11778] Bluetooth: hci3: command 0x201b tx timeout [ 2375.744212][T19918] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.12539'. [ 2375.781559][T19918] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 2375.822398][T19912] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.12538'. [ 2376.557363][T19951] netlink: 'syz.3.12547': attribute type 10 has an invalid length. [ 2376.680675][T19946] netlink: 10 bytes leftover after parsing attributes in process `syz.0.12545'. [ 2377.245107][T19978] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.12556'. [ 2377.377810][T19980] netlink: 'syz.2.12555': attribute type 10 has an invalid length. [ 2378.246720][T15233] Bluetooth: hci3: Malformed LE Event: 0x02 [ 2378.253026][T15233] Bluetooth: hci3: Malformed LE Event: 0x02 [ 2378.781718][T20018] netlink: 'syz.4.12565': attribute type 2 has an invalid length. [ 2378.828679][T15233] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 2378.833090][T20020] netlink: 'syz.5.12567': attribute type 10 has an invalid length. [ 2378.848406][T20020] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2378.861602][T20020] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 2378.872776][T20020] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2378.896152][T20022] netlink: 'syz.4.12565': attribute type 29 has an invalid length. [ 2378.919499][T20020] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 2378.947117][T20022] netlink: 'syz.4.12565': attribute type 29 has an invalid length. [ 2378.982759][T20018] netlink: 'syz.4.12565': attribute type 29 has an invalid length. [ 2379.051009][T20024] netlink: 'syz.4.12565': attribute type 29 has an invalid length. [ 2379.786047][T20032] device wlan1 left promiscuous mode [ 2379.802272][T20032] netlink: 10 bytes leftover after parsing attributes in process `syz.4.12568'. [ 2379.981448][T20034] netlink: 156 bytes leftover after parsing attributes in process `syz.3.12569'. [ 2380.263658][T20050] device syzkaller1 entered promiscuous mode [ 2380.301566][T20050] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2380.329934][T20050] syzkaller1: Linktype set failed because interface is up [ 2383.686785][T20072] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.12580'. [ 2383.780202][T20072] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2383.809262][T20072] CPU: 1 PID: 20072 Comm: syz.3.12580 Not tainted syzkaller #0 [ 2383.816908][T20072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2383.827017][T20072] Call Trace: [ 2383.830340][T20072] [ 2383.833319][T20072] dump_stack_lvl+0x188/0x24e [ 2383.838055][T20072] ? show_regs_print_info+0x12/0x12 [ 2383.843298][T20072] ? load_image+0x410/0x410 [ 2383.847875][T20072] sysfs_warn_dup+0x8a/0xa0 [ 2383.852437][T20072] sysfs_do_create_link_sd+0xc0/0x110 [ 2383.857876][T20072] device_add+0x83b/0x1050 [ 2383.862349][T20072] wiphy_register+0x1d8b/0x2aa0 [ 2383.867283][T20072] ? cfg80211_event_work+0x40/0x40 [ 2383.872449][T20072] ? minstrel_ht_alloc+0x894/0xa20 [ 2383.877630][T20072] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2383.883752][T20072] ieee80211_register_hw+0x2d48/0x39f0 [ 2383.889254][T20072] ? ieee80211_register_hw+0xed1/0x39f0 [ 2383.894826][T20072] ? ieee80211_register_hw+0xed1/0x39f0 [ 2383.900409][T20072] ? ieee80211_tasklet_handler+0x20/0x20 [ 2383.906079][T20072] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2383.912026][T20072] ? __debug_object_init+0xed/0x440 [ 2383.917284][T20072] ? memset+0x1e/0x40 [ 2383.921307][T20072] ? __hrtimer_init+0x189/0x270 [ 2383.926209][T20072] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2383.931972][T20072] ? memcpy+0x3c/0x60 [ 2383.935990][T20072] hwsim_new_radio_nl+0xab7/0xc90 [ 2383.941079][T20072] genl_family_rcv_msg_doit+0x22f/0x350 [ 2383.946661][T20072] ? end_current_label_crit_section+0x170/0x170 [ 2383.952933][T20072] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2383.958860][T20072] ? bpf_lsm_capable+0x5/0x10 [ 2383.963568][T20072] ? security_capable+0x85/0xb0 [ 2383.968453][T20072] genl_rcv_msg+0x601/0x790 [ 2383.972985][T20072] ? lock_chain_count+0x20/0x20 [ 2383.977884][T20072] ? genl_bind+0x360/0x360 [ 2383.982323][T20072] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2383.988687][T20072] netlink_rcv_skb+0x1ef/0x440 [ 2383.993480][T20072] ? genl_bind+0x360/0x360 [ 2383.997921][T20072] ? netlink_ack+0x1160/0x1160 [ 2384.002719][T20072] ? down_read+0x1a8/0x2d0 [ 2384.007164][T20072] genl_rcv+0x24/0x40 [ 2384.011171][T20072] netlink_unicast+0x7ad/0x920 [ 2384.015967][T20072] netlink_sendmsg+0x8ad/0xbd0 [ 2384.020770][T20072] ? netlink_getsockopt+0x550/0x550 [ 2384.026035][T20072] ? aa_sock_msg_perm+0x94/0x150 [ 2384.030996][T20072] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2384.036310][T20072] ? security_socket_sendmsg+0x7c/0xa0 [ 2384.041789][T20072] ? netlink_getsockopt+0x550/0x550 [ 2384.047017][T20072] ____sys_sendmsg+0x5ed/0x9a0 [ 2384.051824][T20072] ? __sys_sendmsg_sock+0x30/0x30 [ 2384.056869][T20072] ? __import_iovec+0x306/0x510 [ 2384.061751][T20072] ? import_iovec+0x6f/0xa0 [ 2384.066287][T20072] ___sys_sendmsg+0x2a2/0x360 [ 2384.070997][T20072] ? __sys_sendmsg+0x2a0/0x2a0 [ 2384.075828][T20072] __se_sys_sendmsg+0x1c3/0x2b0 [ 2384.080713][T20072] ? __x64_sys_sendmsg+0x80/0x80 [ 2384.085690][T20072] ? lockdep_hardirqs_on+0x94/0x140 [ 2384.090920][T20072] do_syscall_64+0x4c/0xa0 [ 2384.095363][T20072] ? clear_bhb_loop+0x60/0xb0 [ 2384.100059][T20072] ? clear_bhb_loop+0x60/0xb0 [ 2384.104766][T20072] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2384.110697][T20072] RIP: 0033:0x7fe956f9ce59 [ 2384.115142][T20072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2384.134811][T20072] RSP: 002b:00007fe957e67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2384.143266][T20072] RAX: ffffffffffffffda RBX: 00007fe957215fa0 RCX: 00007fe956f9ce59 [ 2384.151265][T20072] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2384.159263][T20072] RBP: 00007fe957032e6f R08: 0000000000000000 R09: 0000000000000000 [ 2384.167260][T20072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2384.175251][T20072] R13: 00007fe957216038 R14: 00007fe957215fa0 R15: 00007ffe8b7c72a8 [ 2384.183266][T20072] [ 2384.212730][T20086] netlink: 'syz.0.12579': attribute type 3 has an invalid length. [ 2384.242135][T20086] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.12579'. [ 2384.577940][T20103] netlink: 'syz.3.12587': attribute type 10 has an invalid length. [ 2384.607065][T20103] netlink: 55 bytes leftover after parsing attributes in process `syz.3.12587'. [ 2384.760736][T20102] netlink: 10 bytes leftover after parsing attributes in process `syz.2.12586'. [ 2385.204135][T20122] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.12592'. [ 2385.241062][T20120] netlink: 'syz.5.12591': attribute type 3 has an invalid length. [ 2385.267466][T20120] netlink: 'syz.5.12591': attribute type 1 has an invalid length. [ 2385.315388][T20120] netlink: 198452 bytes leftover after parsing attributes in process `syz.5.12591'. [ 2385.372325][T20128] netlink: 'syz.5.12591': attribute type 10 has an invalid length. [ 2385.460363][T20128] device veth1_macvtap left promiscuous mode [ 2386.121720][T20144] netlink: 'syz.5.12597': attribute type 2 has an invalid length. [ 2386.228152][T20147] IPv6: Can't replace route, no match found [ 2386.269173][T20144] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.12597'. [ 2386.279152][T20140] netlink: 'syz.5.12597': attribute type 2 has an invalid length. [ 2386.329275][T20140] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.12597'. [ 2387.040966][T20158] netlink: 'syz.0.12601': attribute type 3 has an invalid length. [ 2387.128023][T20159] netlink: 'syz.0.12601': attribute type 3 has an invalid length. [ 2387.146387][T20158] netlink: 'syz.0.12601': attribute type 1 has an invalid length. [ 2387.165620][T20159] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12601'. [ 2387.251268][T20158] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.12601'. [ 2388.005294][T20201] device macvlan1 entered promiscuous mode [ 2388.026610][T20201] team0: Port device macvlan1 added [ 2389.046897][T20233] __nla_validate_parse: 8 callbacks suppressed [ 2389.046936][T20233] netlink: 164 bytes leftover after parsing attributes in process `syz.5.12620'. [ 2389.845665][T15233] Bluetooth: hci2: unexpected event 0x20 length: 15 > 7 [ 2390.415833][T20277] validate_nla: 3 callbacks suppressed [ 2390.415853][T20277] netlink: 'syz.4.12634': attribute type 3 has an invalid length. [ 2390.470511][T20277] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.12634'. [ 2394.376558][T20298] netlink: 'syz.2.12638': attribute type 4 has an invalid length. [ 2394.489164][T20298] netlink: 152 bytes leftover after parsing attributes in process `syz.2.12638'. [ 2394.498407][T20298] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2394.983453][T20311] netlink: 132 bytes leftover after parsing attributes in process `syz.5.12643'. [ 2395.009250][T20313] netlink: 'syz.4.12644': attribute type 10 has an invalid length. [ 2395.029004][T20313] netlink: 55 bytes leftover after parsing attributes in process `syz.4.12644'. [ 2395.410322][T20324] netlink: 'syz.2.12646': attribute type 2 has an invalid length. [ 2395.433255][T20324] netlink: 'syz.2.12646': attribute type 8 has an invalid length. [ 2395.446118][T20324] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12646'. [ 2395.473599][T20324] netlink: 'syz.2.12646': attribute type 2 has an invalid length. [ 2395.493822][T20324] netlink: 'syz.2.12646': attribute type 8 has an invalid length. [ 2395.512552][T20324] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12646'. [ 2395.986292][T20341] netlink: 'syz.3.12649': attribute type 7 has an invalid length. [ 2396.001378][T20341] netlink: 'syz.3.12649': attribute type 1 has an invalid length. [ 2396.014889][T20341] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.12649'. [ 2396.374280][T20353] bridge_slave_0: mtu less than device minimum [ 2396.406712][T20354] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.12654'. [ 2397.053715][T20369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12656'. [ 2397.077065][T20369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12656'. [ 2397.109656][T20369] netlink: 33 bytes leftover after parsing attributes in process `syz.2.12656'. [ 2398.017035][T20385] netlink: 'syz.4.12663': attribute type 2 has an invalid length. [ 2398.039124][T20385] netlink: 'syz.4.12663': attribute type 8 has an invalid length. [ 2398.082045][T20385] netlink: 'syz.4.12663': attribute type 2 has an invalid length. [ 2398.096989][T20385] netlink: 'syz.4.12663': attribute type 8 has an invalid length. [ 2398.131421][T20391] device wlan1 entered promiscuous mode [ 2398.167275][T20390] netlink: 'syz.3.12664': attribute type 3 has an invalid length. [ 2399.572786][T20447] __nla_validate_parse: 7 callbacks suppressed [ 2399.572825][T20447] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12679'. [ 2399.759667][T20445] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12680'. [ 2399.822540][T20453] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12680'. [ 2400.243372][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2400.503919][T16242] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2400.836430][T16242] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2401.081709][T11778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2401.101187][T11778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2401.112641][T11778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2401.121741][T11778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2401.133288][T11778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2401.140748][T11778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2401.195519][T16242] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2401.381393][T16242] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2401.443609][T20490] netlink: 144 bytes leftover after parsing attributes in process `syz.4.12690'. [ 2401.696953][T20501] validate_nla: 6 callbacks suppressed [ 2401.696994][T20501] netlink: 'syz.0.12693': attribute type 10 has an invalid length. [ 2401.731729][T20501] netlink: 55 bytes leftover after parsing attributes in process `syz.0.12693'. [ 2402.013484][T20506] netlink: 'syz.2.12694': attribute type 9 has an invalid length. [ 2402.033630][T20506] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.12694'. [ 2402.063745][T20507] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12694'. [ 2402.674000][T20501] device macvlan1 left promiscuous mode [ 2402.686930][T20501] team0: Port device macvlan1 removed [ 2402.806129][T20520] netlink: 'syz.3.12697': attribute type 2 has an invalid length. [ 2402.870274][T20502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12693'. [ 2402.902767][T20507] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12694'. [ 2403.120356][T16242] device 0 left promiscuous mode [ 2403.201778][T11778] Bluetooth: hci3: command 0x0409 tx timeout [ 2403.226469][T20484] chnl_net:caif_netlink_parms(): no params data found [ 2403.380939][T16242] device 1 left promiscuous mode [ 2403.534204][T20530] netlink: 'syz.0.12700': attribute type 28 has an invalid length. [ 2404.046746][T16242] device ip6gretap0 left promiscuous mode [ 2404.077440][T16242] : port 1(ip6gretap0) entered disabled state [ 2404.193397][T20558] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.12702'. [ 2404.261576][T20484] bridge0: port 1(bridge_slave_0) entered blocking state [ 2404.282665][T20484] bridge0: port 1(bridge_slave_0) entered disabled state [ 2404.316377][T20484] device bridge_slave_0 entered promiscuous mode [ 2404.357446][T20484] bridge0: port 2(bridge_slave_1) entered blocking state [ 2404.384366][T20484] bridge0: port 2(bridge_slave_1) entered disabled state [ 2404.407036][T20484] device bridge_slave_1 entered promiscuous mode [ 2404.613654][T20484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2404.668252][T20484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2404.970564][T20590] netlink: 'syz.2.12711': attribute type 3 has an invalid length. [ 2404.976815][T20484] team0: Port device team_slave_0 added [ 2405.009541][T20592] netlink: 'syz.4.12710': attribute type 10 has an invalid length. [ 2405.039145][T20590] netlink: 'syz.2.12711': attribute type 1 has an invalid length. [ 2405.058942][T20590] __nla_validate_parse: 2 callbacks suppressed [ 2405.058961][T20590] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.12711'. [ 2405.185442][T20592] team0 (unregistering): Port device team_slave_0 removed [ 2405.242231][T20592] team0 (unregistering): Port device team_slave_1 removed [ 2405.279135][T11778] Bluetooth: hci3: command 0x041b tx timeout [ 2405.343975][T20592] team0 (unregistering): Port device geneve1 removed [ 2406.009363][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.015756][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.223433][T20592] team0 (unregistering): Port device bond0 removed [ 2406.325345][T20484] team0: Port device team_slave_1 added [ 2406.413503][T20598] netlink: 'syz.2.12714': attribute type 2 has an invalid length. [ 2406.429147][T20598] netlink: 'syz.2.12714': attribute type 8 has an invalid length. [ 2406.437034][T20598] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12714'. [ 2406.447245][T11778] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 2406.499510][T20484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2406.529466][T20484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2406.581029][T20484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2406.618312][T20484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2406.625837][T20484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2406.679196][T20484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2406.820242][T20484] device hsr_slave_0 entered promiscuous mode [ 2406.846482][T20484] device hsr_slave_1 entered promiscuous mode [ 2406.869254][T20484] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2406.876965][T20484] Cannot create hsr debugfs directory [ 2407.054712][T20649] netlink: 'syz.2.12727': attribute type 11 has an invalid length. [ 2407.095630][T20649] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.12727'. [ 2407.359083][T11778] Bluetooth: hci3: command 0x040f tx timeout [ 2407.541265][T20649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2407.692467][T20666] netlink: 'syz.0.12729': attribute type 19 has an invalid length. [ 2407.755793][T20666] netlink: 14552 bytes leftover after parsing attributes in process `syz.0.12729'. [ 2409.438964][T11778] Bluetooth: hci3: command 0x0419 tx timeout [ 2409.553812][T16242] device hsr_slave_0 left promiscuous mode [ 2409.579730][T16242] device hsr_slave_1 left promiscuous mode [ 2409.609177][T16242] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2409.616685][T16242] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2409.696503][T16242] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2409.715368][T16242] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2410.616496][T16242] device veth0_macvtap left promiscuous mode [ 2410.649093][T16242] device veth1_vlan left promiscuous mode [ 2410.720450][T20735] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.12746'. [ 2410.755797][T20735] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.12746'. [ 2411.373835][T16242] team0 (unregistering): Port device macvlan0 removed [ 2411.538713][T16242] team0 (unregistering): Port device virt_wifi0 removed [ 2411.952974][T16242] team0 (unregistering): Port device team_slave_1 removed [ 2412.027821][T16242] team0 (unregistering): Port device team_slave_0 removed [ 2412.110579][T16242] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2412.129499][T16242] device bond_slave_1 left promiscuous mode [ 2412.228999][T16242] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2412.238154][T16242] device bond_slave_0 left promiscuous mode [ 2412.319680][T16242] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 2412.329218][T16242] device bridge_slave_1 left promiscuous mode [ 2412.582887][T16242] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 2412.591724][T16242] device dummy0 left promiscuous mode [ 2412.652759][T16242] bond0 (unregistering): Released all slaves [ 2412.712615][T20740] netlink: 'syz.2.12748': attribute type 2 has an invalid length. [ 2412.728964][T20745] netlink: 'syz.2.12748': attribute type 13 has an invalid length. [ 2412.736946][T20745] netlink: 172 bytes leftover after parsing attributes in process `syz.2.12748'. [ 2412.759190][T20745] erspan0: refused to change device tx_queue_len [ 2412.767339][T20748] netlink: 'syz.0.12749': attribute type 10 has an invalid length. [ 2412.853697][T20748] device wg1 entered promiscuous mode [ 2412.860579][T20748] team0: Device wg1 is of different type [ 2413.215775][T20484] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2413.308587][T20484] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2413.368553][T20484] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2413.493913][T20484] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2413.989105][T20484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2414.640779][T16475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2414.689315][T16475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2414.731862][T20484] 8021q: adding VLAN 0 to HW filter on device team0 [ 2414.771400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2414.796453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2414.830888][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 2414.838071][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2414.887815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2414.938584][T20805] netlink: 'syz.3.12752': attribute type 29 has an invalid length. [ 2415.010328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2415.023667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2415.056319][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 2415.063530][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2415.081646][T20805] netlink: 'syz.3.12752': attribute type 29 has an invalid length. [ 2415.125992][T16475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2415.147838][T20806] netlink: 'syz.0.12762': attribute type 10 has an invalid length. [ 2415.166923][T20806] device syz_tun entered promiscuous mode [ 2415.192413][T20806] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2415.227274][T16218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2415.263658][T16218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2415.292281][T16218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2415.321031][T16218] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2415.350265][T16218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2415.449682][T16218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2415.478327][T20484] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2415.553728][T20484] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2415.606353][T16218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2415.621647][T16218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2415.751534][T16218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2415.779334][T16218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2415.815751][T16218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2417.073129][T20865] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12773'. [ 2417.089428][T20869] netlink: 'syz.2.12774': attribute type 153 has an invalid length. [ 2417.138940][T20869] netlink: 69544 bytes leftover after parsing attributes in process `syz.2.12774'. [ 2417.382256][T16242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2417.419175][T16242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2417.456652][T20484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2418.956704][T16475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2418.976224][T16475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2419.037727][ T6009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2419.056682][ T6009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2419.083606][ T6009] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2419.122436][ T6009] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2419.152541][T20484] device veth0_vlan entered promiscuous mode [ 2419.201547][T20484] device veth1_vlan entered promiscuous mode [ 2419.287595][T16242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2419.330933][T16242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2419.373233][T16242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2419.411974][T16242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2419.475938][T20484] device veth0_macvtap entered promiscuous mode [ 2419.507733][T20484] device veth1_macvtap entered promiscuous mode [ 2419.615640][T20484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2419.646123][T20484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2419.666195][T20484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2419.722590][T20484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2419.753507][T20484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2419.806425][T20484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2419.842262][T20484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2419.872736][T16475] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2419.910278][T16475] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2419.956732][T16475] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2419.984276][T16475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2420.033330][T20484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2420.078847][T20484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2420.119196][T20484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2420.161125][T20484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2420.241098][T20484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2420.278793][T20484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2420.325763][T20484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2420.381938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2420.391642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2420.451668][T20484] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2420.489318][T20484] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2420.518653][T20484] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2420.539043][T20484] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2420.796884][T16475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2420.828850][T16475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2421.206860][T16242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2427.231016][T16242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2427.246447][T16242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2427.301519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2427.435815][T20981] netlink: 'syz.3.12794': attribute type 2 has an invalid length. [ 2427.479516][T20981] netlink: 'syz.3.12794': attribute type 1 has an invalid length. [ 2427.527919][T20981] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.12794'. [ 2427.848627][T20996] can: request_module (can-proto-0) failed. [ 2428.297005][T21007] netlink: 'syz.3.12799': attribute type 21 has an invalid length. [ 2428.748210][T21019] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.12801'. [ 2428.818059][T21018] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12802'. [ 2428.854643][T21021] netlink: 'syz.5.12803': attribute type 3 has an invalid length. [ 2428.901508][T21021] netlink: 132 bytes leftover after parsing attributes in process `syz.5.12803'. [ 2429.194022][T21032] netlink: 'syz.2.12806': attribute type 8 has an invalid length. [ 2429.289164][T21032] netlink: 399 bytes leftover after parsing attributes in process `syz.2.12806'. [ 2429.813691][T21049] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12808'. [ 2430.235890][T21059] netlink: 'syz.2.12813': attribute type 2 has an invalid length. [ 2430.255078][T21059] netlink: 14 bytes leftover after parsing attributes in process `syz.2.12813'. [ 2430.515431][T21068] netlink: 'syz.2.12813': attribute type 10 has an invalid length. [ 2430.563306][T21068] bond0: (slave bridge_slave_1): Releasing backup interface [ 2430.721473][T21080] netlink: 164 bytes leftover after parsing attributes in process `syz.5.12817'. [ 2430.767322][T21082] netlink: 'syz.5.12817': attribute type 10 has an invalid length. [ 2430.832777][T21082] team0: Device hsr_slave_0 failed to register rx_handler [ 2431.060977][T21089] tc_dump_action: action bad kind [ 2431.722432][T21123] netlink: 'syz.4.12830': attribute type 6 has an invalid length. [ 2431.722845][T21118] delete_channel: no stack [ 2431.749061][T21123] netlink: 168 bytes leftover after parsing attributes in process `syz.4.12830'. [ 2431.883897][T21128] netlink: 'syz.3.12832': attribute type 2 has an invalid length. [ 2431.909326][T21128] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12832'. [ 2432.774636][T21168] __nla_validate_parse: 1 callbacks suppressed [ 2432.774674][T21168] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12842'. [ 2432.855539][T21168] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12842'. [ 2432.936054][T21174] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12842'. [ 2433.104452][T21180] validate_nla: 1 callbacks suppressed [ 2433.104470][T21180] netlink: 'syz.5.12846': attribute type 39 has an invalid length. [ 2433.147990][T21180] device veth0_macvtap left promiscuous mode [ 2433.492507][T21198] netlink: 'syz.3.12851': attribute type 2 has an invalid length. [ 2433.516637][T21200] netlink: 'syz.2.12852': attribute type 1 has an invalid length. [ 2433.555666][T21200] netlink: 152 bytes leftover after parsing attributes in process `syz.2.12852'. [ 2433.597913][T21198] device 0 entered promiscuous mode [ 2437.641532][T21255] netlink: 'syz.3.12864': attribute type 2 has an invalid length. [ 2438.229399][T21277] netlink: 128 bytes leftover after parsing attributes in process `syz.5.12871'. [ 2438.247433][T21277] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2438.645289][T21291] netlink: 'syz.0.12874': attribute type 2 has an invalid length. [ 2438.783948][T21291] netlink: 'syz.0.12874': attribute type 8 has an invalid length. [ 2438.931247][T21291] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12874'. [ 2455.343541][T21317] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2455.449917][T21322] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2455.469606][T21322] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2455.478863][T21322] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2455.487953][T21322] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 2455.500121][T21322] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2455.508811][T21322] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2455.516466][T21322] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 2455.526148][T21322] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2455.534207][T21322] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 2455.545364][T21322] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2455.553732][T21322] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2455.561501][T21322] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 2455.571274][T21322] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2455.580945][T21322] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 2455.588249][T21322] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2455.596229][T21322] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 2455.604475][T21322] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2455.614070][T21322] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 2455.622316][T21322] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2455.684905][T21317] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2455.717563][T21322] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2455.725607][T21322] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 2455.733622][T21322] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2456.186025][T21322] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 2456.205771][T21322] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 2456.214382][T21322] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 2456.224127][T21322] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 2456.233252][T21322] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 2456.245874][T21322] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 2457.689159][T21324] Bluetooth: hci8: command 0x0409 tx timeout [ 2457.695851][T21324] Bluetooth: hci9: command 0x0409 tx timeout [ 2457.789329][T21324] Bluetooth: hci7: command 0x0409 tx timeout [ 2457.795996][T21324] Bluetooth: hci6: command 0x0409 tx timeout [ 2458.339093][T21324] Bluetooth: hci10: command 0x0409 tx timeout [ 2459.789251][T21324] Bluetooth: hci9: command 0x041b tx timeout [ 2459.795353][T21324] Bluetooth: hci8: command 0x041b tx timeout [ 2459.839097][T21324] Bluetooth: hci6: command 0x041b tx timeout [ 2459.845198][T21324] Bluetooth: hci7: command 0x041b tx timeout [ 2460.438953][T21324] Bluetooth: hci10: command 0x041b tx timeout [ 2461.839080][T21324] Bluetooth: hci8: command 0x040f tx timeout [ 2461.845183][T21324] Bluetooth: hci9: command 0x040f tx timeout [ 2461.939074][T21324] Bluetooth: hci7: command 0x040f tx timeout [ 2461.945178][T21324] Bluetooth: hci6: command 0x040f tx timeout [ 2462.489013][T21324] Bluetooth: hci10: command 0x040f tx timeout [ 2463.939171][T21324] Bluetooth: hci9: command 0x0419 tx timeout [ 2463.945269][T21324] Bluetooth: hci8: command 0x0419 tx timeout [ 2464.038998][T21324] Bluetooth: hci6: command 0x0419 tx timeout [ 2464.045099][T21324] Bluetooth: hci7: command 0x0419 tx timeout [ 2464.589053][T21324] Bluetooth: hci10: command 0x0419 tx timeout [ 2464.889105][T15209] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2645 jiffies s: 318809 root: 0x1/. [ 2464.911502][T15209] rcu: blocking rcu_node structures (internal RCU debug): [ 2464.920430][T15209] Sending NMI from CPU 1 to CPUs 0: [ 2464.926234][ C0] NMI backtrace for cpu 0 [ 2464.926245][ C0] CPU: 0 PID: 11776 Comm: syz-executor Not tainted syzkaller #0 [ 2464.926263][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2464.926275][ C0] RIP: 0010:asm_sysvec_irq_work+0x3/0x20 [ 2464.926310][ C0] Code: 00 00 90 90 90 90 90 0f 01 ca fc 6a ff e8 b5 02 00 00 48 89 c4 48 89 e7 e8 7a a5 ea ff e9 95 03 00 00 90 90 90 90 90 0f 01 ca 6a ff e8 95 02 00 00 48 89 c4 48 89 e7 e8 4a aa ea ff e9 75 03 [ 2464.926326][ C0] RSP: 0018:ffffc900034d73f8 EFLAGS: 00000006 [ 2464.926342][ C0] RAX: 654500f9cc89c900 RBX: 1ffff9200069ae8c RCX: 654500f9cc89c900 [ 2464.926356][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adee1a0 [ 2464.926370][ C0] RBP: ffffc900034d7510 R08: ffffffff90af22df R09: 1ffffffff215e45b [ 2464.926384][ C0] R10: dffffc0000000000 R11: fffffbfff215e45c R12: 0000000000000246 [ 2464.926397][ C0] R13: dffffc0000000000 R14: ffff8880b8e3bb00 R15: 0000000000000001 [ 2464.926411][ C0] FS: 000055558c384500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2464.926428][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2464.926441][ C0] CR2: 00007fa408b7aa10 CR3: 00000000569a2000 CR4: 00000000003506f0 [ 2464.926456][ C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 2464.926468][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2464.926479][ C0] Call Trace: [ 2464.926485][ C0] [ 2464.926491][ C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 2464.926588][ C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 e2 82 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 2464.926603][ C0] RSP: 0018:ffffc900034d7420 EFLAGS: 00000206 [ 2464.926619][ C0] ? lock_downgrade+0x820/0x830 [ 2464.926648][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 2464.926666][ C0] ? page_ext_get+0x1e/0x2a0 [ 2464.926717][ C0] ? page_ext_get+0x1de/0x2a0 [ 2464.926742][ C0] __rcu_read_unlock+0x78/0xd0 [ 2464.926760][ C0] page_ext_put+0x91/0xb0 [ 2464.926783][ C0] copy_page_range+0x2586/0x3a60 [ 2464.926837][ C0] ? pfn_valid+0x450/0x450 [ 2464.926870][ C0] ? up_write+0x1b6/0x410 [ 2464.926893][ C0] copy_mm+0xeb0/0x1680 [ 2464.926962][ C0] ? copy_signal+0x640/0x640 [ 2464.926981][ C0] ? lockdep_init_map_type+0x98/0x8d0 [ 2464.927015][ C0] ? __init_rwsem+0x11e/0x160 [ 2464.927037][ C0] ? copy_signal+0x51f/0x640 [ 2464.927057][ C0] copy_process+0x19a6/0x40c0 [ 2464.927083][ C0] ? copy_process+0x974/0x40c0 [ 2464.927119][ C0] ? idle_dummy+0x10/0x10 [ 2464.927144][ C0] kernel_clone+0x24b/0x900 [ 2464.927165][ C0] ? create_io_thread+0x170/0x170 [ 2464.927188][ C0] ? __lock_acquire+0x7bd0/0x7bd0 [ 2464.927211][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2464.927240][ C0] __x64_sys_clone+0x1a7/0x220 [ 2464.927258][ C0] ? __might_fault+0xc2/0x120 [ 2464.927276][ C0] ? __ia32_sys_vfork+0x140/0x140 [ 2464.927301][ C0] ? lock_chain_count+0x20/0x20 [ 2464.927328][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 2464.927354][ C0] do_syscall_64+0x4c/0xa0 [ 2464.927372][ C0] ? clear_bhb_loop+0x60/0xb0 [ 2464.927387][ C0] ? clear_bhb_loop+0x60/0xb0 [ 2464.927404][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2464.927429][ C0] RIP: 0033:0x7fe956fc58d2 [ 2464.927444][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 2464.927458][ C0] RSP: 002b:00007ffe8b7c74c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2464.927475][ C0] RAX: ffffffffffffffda RBX: 00007ffe8b7c74c0 RCX: 00007fe956fc58d2 [ 2464.927489][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2464.927500][ C0] RBP: 00007ffe8b7c764c R08: 0000000000000000 R09: 0000000000000001 [ 2464.927511][ C0] R10: 000055558c3847d0 R11: 0000000000000246 R12: 0000000000000001 [ 2464.927523][ C0] R13: 00000000000927c0 R14: 0000000000253412 R15: 00007ffe8b7c76a0 [ 2464.927543][ C0]