last executing test programs: 5.261050608s ago: executing program 3 (id=1424): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(r0, 0x5460, 0x20000000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@in6={0xa, 0x41, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0xe07e872424dfefca) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x338}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x9, 0x10, 0x0, 0xb}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x20016100) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @random="6f4913451e8b"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) write$cgroup_devices(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="1e00d3ff008c71ef28ff4b"], 0xffdd) socket$kcm(0x10, 0x2, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff0000000080000008850000002300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000b7040000020000008500"/72], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000480)="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", 0xfe}, {&(0x7f0000000180)="3adce185e1c53c20e9d9d451f69ca001400e52daceb3e7ef411687f21dca6502d6d356cb11f9cd0d62e52ae7fa4d6f9e65939e9e11777ecba6fa9e7b1ad6bc383e6656dde5d9cd1ec7941fbdfc75a1454a321520751ebec26c0ba15d0e2f5fddefe3bca971fad29af221d7efe4cc8082078ba7c209e4f1446a368e8f03b6b3fed554f06a30676282a3caacf7ff432a2b04", 0x91}, {&(0x7f0000000340)="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", 0xfb}, {&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}, {&(0x7f00000000c0)="9bd120e6b87ad757db0f292cfefd0a13364fe3d5f42d7e47cc49269b148088752141499a497f9245aad5018aba57763eb3b1b0c295300e8b8c03c68359979798fd06ce52af5f98c8e7f5fe60cc85f695b54eceab8717d9d078d41d", 0x5b}], 0x5}, 0x4000000) 4.523185746s ago: executing program 1 (id=1429): r0 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r0, 0x29, 0x1a, 0x0, 0x4) r1 = socket$kcm(0x2b, 0xa1c3db6f6fa170b3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfd20, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002d000b02d25a806f8c6394f9101a04000a740100067402000000000000800c6400f01700d1bd00000000", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x5, &(0x7f0000000040)=r1, 0x4) 4.242465943s ago: executing program 1 (id=1431): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069001c00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000180)="b8f3117b83c7671380", 0x9}], 0x1}, 0xc0ec) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r1) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x3, 0x8, 0x0, {0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}}, 0x80, 0x0}, 0x2000f761) ioctl$SIOCSIFHWADDR(r1, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @broadcast}) 2.531010406s ago: executing program 1 (id=1435): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="1b00000019007f089ea66997b7bfa8820200c0d784bf000ca4dc04", 0x1b}], 0x1}, 0x840) 2.435326868s ago: executing program 3 (id=1437): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x48510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90524fc600d000347fe000100ff3582c137153e370248018010001700d1bd", 0x33fe0}], 0x1}, 0x0) (async) socketpair(0x22, 0x5, 0x25, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef42100fffee3bd6efb440013030e001b000d000008ba8000001201", 0x2e}], 0x1}, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90324fc6010001c0005000500053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (async) syz_clone(0x41260080, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c230000) 2.361086661s ago: executing program 0 (id=1438): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f6, &(0x7f0000000900)={'tunl0\x00', @random="0000230c1100"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000001a40)={&(0x7f0000000340), 0x6e, &(0x7f00000019c0)=[{&(0x7f00000003c0)=""/69, 0x45}, {&(0x7f0000000440)}, {&(0x7f0000000480)=""/19, 0x13}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/128, 0x80}], 0x5}, 0x40) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) 2.360769521s ago: executing program 1 (id=1439): ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0x11, 0x7, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xa, 0x0, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000015006b03000000d86e6c1d000a117ea6ea6567e71b59", 0xfe86}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)) (async) socket$kcm(0x10, 0x2, 0x4) (async) socket$kcm(0x11, 0x7, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x107, 0xa, 0x0, 0x4) (async) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000015006b03000000d86e6c1d000a117ea6ea6567e71b59", 0xfe86}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) 2.237224474s ago: executing program 2 (id=1440): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x9010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0xce6b9b20411c70f4, 0x800000000000ca, 0x0, 0x9, 0xffffffbffffffffc, 0x0, 0x0, 0x0, 0xf, 0x0, 0x3}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xa402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x5000000000000, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1000000000040}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x400000002, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x111d09, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES32=r2], 0x9a) 2.193509635s ago: executing program 1 (id=1441): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) r1 = gettid() write$cgroup_pid(r0, &(0x7f0000000280)=r1, 0x12) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x45, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x13, &(0x7f0000000b40)=ANY=[@ANYBLOB="8510000003000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="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", @ANYRES32, @ANYBLOB="000000000200000018110000", @ANYRES32, @ANYBLOB="00000000000000005da2e0fa00d642a6e9a84fb198caecb8cf1f52304d804547bccef905417c6f4be4b99f7ed2594bf52d412cc9c6f1bee0ab2360c3e5cc3f4f330fa2c0c59c4024237e3730110aa583726acaed35f779c0cf0200000000000000e2c92b36dfef75cb24923e6800b792e4e90837dc6f"], &(0x7f0000000340)='GPL\x00', 0x4, 0x71, &(0x7f0000000380)=""/113, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000840)=[{0x0, 0x2, 0x10, 0x5}], 0x10, 0x2}, 0x94) socket$kcm(0xa, 0x5, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1f, 0x10, &(0x7f0000001080)=ANY=[@ANYBLOB="18000000ffffffff00000000feffffffb7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000f7c4347805000006ff0f0000000000000000f49500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1e902, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0xc}, 0x10, 0xc8, 0x8, 0x4, 0x2, 0x5, 0xfffd, 0x0, 0x8004, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x1c, &(0x7f0000000f40)=ANY=[@ANYBLOB="1800000006000000000000004103000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708665430bda9cc3181f8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000321b000110000000950000000000000018520000000000000000000000000000bf91000000000000b701e000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x800, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0x10, 0x7, 0xfff}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffff", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x42}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x203f}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x0, 0x10000000}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0xc, 0x7}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xffef, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r3, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcd, &(0x7f0000000300), 0x0, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0xb6, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@ifindex=r7, 0x1e, 0x1, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000100), &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="1200000000000000", @ANYRES32=r5, @ANYBLOB="94029641513009ef0c14beef72392ffe01a016330f85d7e8c74fb19a", @ANYRES32=r5, @ANYBLOB, @ANYRES64=r8], 0x20) r9 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_procs(r9, 0x0, 0x2, 0x0) 2.113683427s ago: executing program 3 (id=1442): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) (async) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000240)={[{0x2b, 'pids'}, {0x2d, 'net'}, {0x2d, 'rlimit'}, {0x2d, 'rdma'}, {0x2d, 'net_cls'}, {0x2b, 'net_cls'}]}, 0x2b) (async) write$cgroup_subtree(r3, &(0x7f0000000240)={[{0x2b, 'pids'}, {0x2d, 'net'}, {0x2d, 'rlimit'}, {0x2d, 'rdma'}, {0x2d, 'net_cls'}, {0x2b, 'net_cls'}]}, 0x2b) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x14, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xc8ae}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0x50}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5}, 0x94) write$cgroup_devices(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0309004d8871ef2885634a8270e7112b00000000000000000000000000ac141401827511d5b4d3a9f536f45ae68ab6086c21"], 0xee8a) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r2, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x400, '\x00', r5, r3, 0x3, 0x3, 0x1}, 0x50) 2.112612577s ago: executing program 0 (id=1443): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069001c00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000180)="b8f3117b83c7671380", 0x9}], 0x1}, 0xc0ec) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r1) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x3, 0x8, 0x0, {0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}}, 0x80, 0x0}, 0x2000f761) ioctl$SIOCSIFHWADDR(r1, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @broadcast}) 1.895113962s ago: executing program 2 (id=1444): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x6a0a1, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x401c5820, &(0x7f0000000080)={'macvlan1\x00', @broadcast}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r0, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1ff, 0x0, r0, 0xfffffff5, '\x00', r2, r0, 0x1, 0x4, 0x4}, 0x50) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000c40)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='/\x00@\x00', @ANYRES32=0x0, @ANYRES64=0x0], 0x20) 1.862174603s ago: executing program 0 (id=1445): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xf) (async) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) perf_event_open(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x800, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) recvmsg$unix(r4, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r7 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r7, 0x1, 0x41, &(0x7f0000000040)=r6, 0x4) (async) sendmsg$kcm(r7, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) (async) recvmsg$kcm(r7, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/3, 0x3}, 0x2062) (async) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r8, 0x88, 0x67, &(0x7f00000000c0)=r9, 0x4) sendmsg$inet(r8, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, &(0x7f0000000040)=[{&(0x7f00000017c0)="8100108cdb5c324a61d8", 0xa}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @remote}}}], 0x20}, 0x4840) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r6, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000000840)=[0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf6, &(0x7f0000000900)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000940), 0x0, 0x0, 0x76, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000bc0)={0x1, 0x58, &(0x7f0000000b40)}, 0x10) (async) sendmsg$inet(r8, &(0x7f0000000e00)={0x0, 0x0, 0x0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1d, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3aa90365, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x2}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0x3, 0x0, 0xe, 0x3, 0x3}, @call={0x85, 0x0, 0x0, 0x80}, @call={0x85, 0x0, 0x0, 0xd3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='GPL\x00', 0xe28, 0x84, &(0x7f00000003c0)=""/132, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0x8, 0x81, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000540), 0x10, 0x3b03}, 0x94) 1.752985005s ago: executing program 1 (id=1446): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(r0, 0x5460, 0x20000000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@in6={0xa, 0x41, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0xe07e872424dfefca) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67", 0x33c}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x9, 0x10, 0x0, 0xb}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x20016100) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @random="6f4913451e8b"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) write$cgroup_devices(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="1e00d3ff008c71ef28ff4b"], 0xffdd) socket$kcm(0x10, 0x2, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff0000000080000008850000002300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000b7040000020000008500"/72], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000480)="2e14511c0604565d05c37d9111fb5dec51ebae93c871d59fea00e3b871a9114882a178fcfa08ae9869b0f273502c4d409d5254cd3fc94e6631421b3a731cf516ff1a885af5c7e51c3d01ccdbe3ef614fd0fcd66de526f4d62c7a61c2b000a38758b5194b03384b159cce822940e0e7fbca5e225a9181ebba2a7e89df5415c8cc46a6f9c1a25eddb2f3c717f031f300be0226f5d74ef7b977d4cbe22624a12f008fce8830b5963fd91539cd3aeb5ef4018c99085cd134db87aa90053874ea0216e940e5fc8df5314cf0f839bfda3a91862a9ddfb2931614017cd2f70b6b2ef2dd245876bfc888cdb7cce101067411549fdb8c7e377abcb81fcd0c51723a6e", 0xfe}, {&(0x7f0000000180)="3adce185e1c53c20e9d9d451f69ca001400e52daceb3e7ef411687f21dca6502d6d356cb11f9cd0d62e52ae7fa4d6f9e65939e9e11777ecba6fa9e7b1ad6bc383e6656dde5d9cd1ec7941fbdfc75a1454a321520751ebec26c0ba15d0e2f5fddefe3bca971fad29af221d7efe4cc8082078ba7c209e4f1446a368e8f03b6b3fed554f06a30676282a3caacf7ff432a2b04", 0x91}, {&(0x7f0000000340)="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", 0xfb}, {&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}, {&(0x7f00000000c0)="9bd120e6b87ad757db0f292cfefd0a13364fe3d5f42d7e47cc49269b148088752141499a497f9245aad5018aba57763eb3b1b0c295300e8b8c03c68359979798fd06ce52af5f98c8e7f5fe60cc85f695b54eceab8717d9d078d41d", 0x5b}], 0x5}, 0x4000000) 1.624246819s ago: executing program 3 (id=1447): openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x37c474f8fe62b765, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x32, 0x5, 0x8, 0x9, 0x6, 0x2, 0x0, 0xd2cc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r4) socket$kcm(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) ioctl$TUNGETVNETLE(r4, 0x8953, &(0x7f0000000040)) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0xfc, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000001}, 0x400, 0x0, 0xc2ba, 0x5, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r5, &(0x7f0000000080)='syz0\x00', 0x1ff) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x108802, 0x7ff, 0x6, 0x0, 0x40, 0x2, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(r5, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3fff8000}, 0x10012, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r6, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24004800) 1.58072368s ago: executing program 2 (id=1448): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x42}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x2, 0x365c0018b608cced, 0x84) sendmsg$inet(r0, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1, 0x100007, 0x4, 0x21, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={r1, 0x58, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x17, 0x20, &(0x7f0000000ac0)=ANY=[@ANYBLOB="8759b634000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800008f0500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000095000000000000001833000001000000000000000000000085100000fdffffff950000000000000018170000", @ANYRES32=r3, @ANYBLOB="000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000270500008500000006000000"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x97, &(0x7f0000000680)=""/151, 0x41000, 0x48, '\x00', r4, @cgroup_sysctl=0x12, r3, 0x8, &(0x7f0000000800)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x4, 0x6, 0x3, 0x6}, 0x10, 0x0, r2, 0x9, 0x0, &(0x7f0000000880)=[{0x0, 0x5, 0x6, 0x7}, {0x1, 0x5, 0x1, 0x1}, {0x2, 0x3, 0x5, 0x4}, {0x4, 0x3, 0xb}, {0x1, 0x2, 0xd, 0x9}, {0x1, 0x2, 0x3, 0xa}, {0x2, 0x4, 0x8, 0x1}, {0x1, 0x3, 0xc, 0x5}, {0x0, 0x4, 0x0, 0xc}], 0x10, 0x7fff}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r1, 0x58, &(0x7f0000000200)}, 0x10) close(r0) 1.377134115s ago: executing program 2 (id=1449): r0 = perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x13ac9d9a938af256, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x25) 1.376377106s ago: executing program 0 (id=1450): r0 = perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0x6, 0xa, 0x40, 0x7, 0x0, 0x2, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x4986, 0xfc, 0x4, 0x9, 0x81, 0x7, 0x5, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80368, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r0, 0x0) (async) close(0x3) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffe72, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008105e00212ba0d8105040a020200020f100b067c55a1bc000900b80006990200000015000500fc038178a80015000338004002000c0901ac040000d67f6f947a7100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000380), 0x12) write$cgroup_int(r3, &(0x7f0000000040), 0x1) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000002300000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000, 0x0, 0x0, 0x0, 0x0, 0xda}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r5, 0x0, 0x2, 0x0) (async) syz_clone(0xc920000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x10000, 0x3, 0x5, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8ac}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe000000008500000089000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00'}, 0x48) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000020006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) (async) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000000540)={&(0x7f0000000140)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e22, 0x1}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)}], 0x1}, 0x4) 1.057134763s ago: executing program 0 (id=1451): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x7f, 0x8, 0x9, 0xff, 0x0, 0x1, 0x40, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000000, 0xb}, 0x100100, 0x10a, 0x1aa4, 0x4, 0x5, 0xfffffffb, 0x6, 0x0, 0xfffff002, 0x0, 0x7fffffffffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x201, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0x80b1, 0x0, 0x0, 0x0, 0x5, 0xfffefffd, 0x0, 0x0, 0x5ff, 0x0, 0x80}, 0x0, 0x8, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8918, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8000, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000006000000080000000800000000000000", @ANYRES32, @ANYBLOB="fcffffff00000000000000000000000000b77382", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x8, r4}, 0x38) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000fcffffffffffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 974.922055ms ago: executing program 3 (id=1452): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x9010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0xce6b9b20411c70f4, 0x800000000000ca, 0x0, 0x9, 0xffffffbffffffffc, 0x0, 0x0, 0x0, 0xf, 0x0, 0x3}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xa402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x5000000000000, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1000000000040}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x400000002, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x111d09, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES32=r2], 0x9a) 802.08256ms ago: executing program 0 (id=1453): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069001c00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000180)="b8f3117b83c7671380", 0x9}], 0x1}, 0xc0ec) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r1) socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x3, 0x8, 0x0, {0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}}, 0x80, 0x0}, 0x2000f761) ioctl$SIOCSIFHWADDR(r1, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @broadcast}) 708.782862ms ago: executing program 2 (id=1454): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4080, 0x40000000, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffefc, &(0x7f0000000080)=[{&(0x7f0000000280)="e03f03003d000b648c740d64fe5bfd1304873601005df33694f90324fc600800000000000000053582c1", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)="5d46542b3090ce5ceca970bf8abf170549531f3309044e8b5176033b03b6ffb6877fc1bf93944e8918f7671993d5b56494717c96f1a910bc20b312c4ac1319c04da6b26ab882b4086cb2ac1545cef2003c2f29885496d182cc00eb08067822dfbfa896a37248b990", &(0x7f0000000100), 0x1003, r1}, 0x38) bpf$MAP_CREATE(0x20000000000000, &(0x7f0000000200)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x50) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x0, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x10}, 0x100000, 0x7, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r2) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r7) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0800000004"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r9 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43) close(r3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000140)={0x5, 0x80, 0x1, 0x7f, 0x4, 0x8, 0x0, 0x6, 0x88244, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x5, 0x6}, 0xc028, 0x2, 0x3, 0x0, 0x9, 0x3, 0x4, 0x0, 0x9, 0x0, 0x4}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{}]}, 0x94) 541.055596ms ago: executing program 3 (id=1455): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1a, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='GPL\x00', 0x9, 0xde, &(0x7f0000000940)=""/222, 0x0, 0x48}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x18082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="1e0328004d8c71ef2885634a8270001406"], 0xffdd) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x410000, 0x0) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000100)=0x1) 0s ago: executing program 2 (id=1456): r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xd, 0x6}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x2000000000000019, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000cb000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff3a2c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000002b80)={r4}, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000280)=ANY=[@ANYRESDEC=r3, @ANYRESDEC=r1, @ANYRESDEC=r1, @ANYRESOCT=r2, @ANYRES32=r4, @ANYRESDEC=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x94e4, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x1, @perf_bp={0x0, 0x6}, 0x19183, 0x1, 0x5, 0xb, 0xa, 0x904813a5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x21140200, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.171' (ED25519) to the list of known hosts. [ 77.887529][ T5761] cgroup: Unknown subsys name 'net' [ 78.020593][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.731787][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.709217][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.717839][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.725796][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.759791][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.769701][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.781112][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.789578][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.809919][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.818934][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.827885][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.835602][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.869787][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.879863][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.901746][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.915431][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.919812][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.929959][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.933995][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.939202][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.953825][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.961580][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.970092][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.970853][ T5787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.991391][ T5776] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.474138][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 82.494537][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 82.581012][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 82.628101][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 82.733315][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.741258][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.748905][ T5777] bridge_slave_0: entered allmulticast mode [ 82.756985][ T5777] bridge_slave_0: entered promiscuous mode [ 82.765803][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.773770][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.780994][ T5773] bridge_slave_0: entered allmulticast mode [ 82.788232][ T5773] bridge_slave_0: entered promiscuous mode [ 82.818377][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.825657][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.833159][ T5777] bridge_slave_1: entered allmulticast mode [ 82.840620][ T5777] bridge_slave_1: entered promiscuous mode [ 82.847777][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.855187][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.862504][ T5773] bridge_slave_1: entered allmulticast mode [ 82.869534][ T5773] bridge_slave_1: entered promiscuous mode [ 82.953880][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.979883][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.987305][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.994719][ T5778] bridge_slave_0: entered allmulticast mode [ 83.001668][ T5778] bridge_slave_0: entered promiscuous mode [ 83.010630][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.018319][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.027886][ T5778] bridge_slave_1: entered allmulticast mode [ 83.035117][ T5778] bridge_slave_1: entered promiscuous mode [ 83.044579][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.086785][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.120464][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.127800][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.135440][ T5779] bridge_slave_0: entered allmulticast mode [ 83.143107][ T5779] bridge_slave_0: entered promiscuous mode [ 83.153044][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.189330][ T5773] team0: Port device team_slave_0 added [ 83.195803][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.206124][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.213592][ T5779] bridge_slave_1: entered allmulticast mode [ 83.220624][ T5779] bridge_slave_1: entered promiscuous mode [ 83.253563][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.267345][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.279093][ T5773] team0: Port device team_slave_1 added [ 83.300400][ T5777] team0: Port device team_slave_0 added [ 83.320936][ T5777] team0: Port device team_slave_1 added [ 83.339098][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.351749][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.417851][ T5778] team0: Port device team_slave_0 added [ 83.429059][ T5778] team0: Port device team_slave_1 added [ 83.458661][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.465823][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.491814][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.506959][ T5779] team0: Port device team_slave_0 added [ 83.516361][ T5779] team0: Port device team_slave_1 added [ 83.532389][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.539430][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.565466][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.577975][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.585081][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.611371][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.625354][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.632944][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.659449][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.712671][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.719689][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.745688][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.766906][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.773949][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.800353][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.813474][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.820458][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.846675][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.858625][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.867998][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.894567][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.986030][ T5778] hsr_slave_0: entered promiscuous mode [ 83.993022][ T5785] Bluetooth: hci1: command tx timeout [ 83.993083][ T5780] Bluetooth: hci0: command tx timeout [ 84.005798][ T5778] hsr_slave_1: entered promiscuous mode [ 84.032993][ T5773] hsr_slave_0: entered promiscuous mode [ 84.040933][ T5773] hsr_slave_1: entered promiscuous mode [ 84.047689][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.055963][ T5773] Cannot create hsr debugfs directory [ 84.072582][ T5780] Bluetooth: hci3: command tx timeout [ 84.072633][ T5785] Bluetooth: hci2: command tx timeout [ 84.091520][ T5777] hsr_slave_0: entered promiscuous mode [ 84.098775][ T5777] hsr_slave_1: entered promiscuous mode [ 84.105628][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.113773][ T5777] Cannot create hsr debugfs directory [ 84.209724][ T5779] hsr_slave_0: entered promiscuous mode [ 84.219328][ T5779] hsr_slave_1: entered promiscuous mode [ 84.225798][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.233562][ T5779] Cannot create hsr debugfs directory [ 84.635035][ T5778] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.656931][ T5778] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.669464][ T5778] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.681569][ T5778] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.758003][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.768871][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.780101][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.796505][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.903566][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.915148][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.937555][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.965834][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.035688][ T5779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.046973][ T5779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.058716][ T5779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.084606][ T5779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.111087][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.168081][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.207148][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.237839][ T4289] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.245214][ T4289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.284724][ T4289] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.292001][ T4289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.319021][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.385715][ T4289] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.392944][ T4289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.414877][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.445567][ T4289] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.452756][ T4289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.500603][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.527148][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.545052][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.552290][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.626913][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.648133][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.655405][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.704278][ T1306] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.711661][ T1306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.780656][ T1306] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.787880][ T1306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.916950][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.049302][ T5778] veth0_vlan: entered promiscuous mode [ 86.073789][ T5785] Bluetooth: hci1: command tx timeout [ 86.073800][ T5780] Bluetooth: hci0: command tx timeout [ 86.095245][ T5778] veth1_vlan: entered promiscuous mode [ 86.155457][ T5785] Bluetooth: hci2: command tx timeout [ 86.155468][ T5780] Bluetooth: hci3: command tx timeout [ 86.211445][ T5778] veth0_macvtap: entered promiscuous mode [ 86.248178][ T5778] veth1_macvtap: entered promiscuous mode [ 86.309027][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.359737][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.384882][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.396014][ T5778] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.416884][ T5778] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.425917][ T5778] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.434959][ T5778] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.579356][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.617315][ T5773] veth0_vlan: entered promiscuous mode [ 86.636090][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.648918][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.664367][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.705708][ T5773] veth1_vlan: entered promiscuous mode [ 86.751419][ T1306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.760258][ T1306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.834095][ T5773] veth0_macvtap: entered promiscuous mode [ 86.876293][ T5773] veth1_macvtap: entered promiscuous mode [ 86.895362][ T5777] veth0_vlan: entered promiscuous mode [ 86.932419][ T5777] veth1_vlan: entered promiscuous mode [ 86.956358][ T5779] veth0_vlan: entered promiscuous mode [ 87.037242][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.052089][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.069166][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.081401][ T5779] veth1_vlan: entered promiscuous mode [ 87.115131][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.131109][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.149249][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.193903][ T5773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.208473][ T5773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.217586][ T5773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.226520][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.256609][ T5777] veth0_macvtap: entered promiscuous mode [ 87.344167][ T5777] veth1_macvtap: entered promiscuous mode [ 87.488839][ T5838] syzkaller0: entered promiscuous mode [ 87.555949][ T5779] veth0_macvtap: entered promiscuous mode [ 87.568614][ T5779] veth1_macvtap: entered promiscuous mode [ 87.588245][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.603912][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.614866][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.625752][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.638849][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.154355][ T5780] Bluetooth: hci0: command tx timeout [ 88.163915][ T5780] Bluetooth: hci1: command tx timeout [ 88.233524][ T5780] Bluetooth: hci3: command tx timeout [ 88.243456][ T5780] Bluetooth: hci2: command tx timeout [ 88.839803][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.854032][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.865749][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.882173][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.896362][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.918613][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.920223][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.936581][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.945686][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.955166][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.978482][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.991122][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.007299][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.018591][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.034312][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.048709][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.059557][ T5838] syz.1.2 (5838) used greatest stack depth: 20456 bytes left [ 89.082046][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.103260][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.131006][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.149137][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.165112][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.176125][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.187405][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.198420][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.220100][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.224067][ C0] hrtimer: interrupt took 226199 ns [ 89.284199][ T4289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.301692][ T5779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.308964][ T4289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.321162][ T5779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.333548][ T5779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.343728][ T5779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.623825][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.631731][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.693628][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.709489][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.830711][ T4289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.863210][ T4289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.949770][ T4539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.969421][ T4539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.232334][ T5780] Bluetooth: hci1: command tx timeout [ 90.235749][ T5785] Bluetooth: hci0: command tx timeout [ 90.317756][ T5785] Bluetooth: hci2: command tx timeout [ 90.317782][ T5780] Bluetooth: hci3: command tx timeout [ 91.443001][ T5882] netlink: 'syz.3.12': attribute type 6 has an invalid length. [ 91.453094][ T5882] netlink: 164 bytes leftover after parsing attributes in process `syz.3.12'. [ 91.806488][ T5888] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.14'. [ 91.840352][ T5888] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 92.017976][ T5894] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 92.045925][ T5894] Zero length message leads to an empty skb [ 92.093722][ T23] cfg80211: failed to load regulatory.db [ 92.859529][ T5908] lo: entered allmulticast mode [ 93.037182][ T5909] syzkaller0: entered promiscuous mode [ 94.313796][ T5908] b‹¡Y­™4`Ò˜: renamed from lo [ 94.422450][ T5917] netlink: 60 bytes leftover after parsing attributes in process `syz.0.25'. [ 94.482625][ T5917] netlink: 60 bytes leftover after parsing attributes in process `syz.0.25'. [ 94.511609][ T5918] netlink: 60 bytes leftover after parsing attributes in process `syz.0.25'. [ 94.972355][ T5780] Bluetooth: hci0: unexpected subevent 0x19 length: 150 > 28 [ 94.979852][ T5780] Bluetooth: hci0: Unable to find connection with handle 0x0000 [ 95.055265][ T5928] netlink: 'syz.1.28': attribute type 9 has an invalid length. [ 95.114953][ T5928] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.28'. [ 95.219681][ T5931] netlink: 'syz.0.30': attribute type 153 has an invalid length. [ 95.227822][ T5931] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.30'. [ 95.765217][ T5937] netlink: 'syz.3.32': attribute type 10 has an invalid length. [ 95.809363][ T5928] syz.1.28 (5928) used greatest stack depth: 20200 bytes left [ 95.867489][ T5937] team0: Device hsr_slave_0 failed to register rx_handler [ 96.084274][ T5942] lo: entered allmulticast mode [ 96.180530][ T5942] b‹¡Y­™4`Ò˜: renamed from lo [ 96.273043][ T5937] syz.3.32 (5937) used greatest stack depth: 19624 bytes left [ 96.640852][ T5944] syzkaller0: entered promiscuous mode [ 97.157377][ T5780] Bluetooth: hci1: unexpected subevent 0x19 length: 150 > 28 [ 97.168952][ T5780] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 98.519719][ T5965] Illegal XDP return value 4294967283 on prog (id 42) dev N/A, expect packet loss! [ 98.877868][ T5944] syz.2.35 (5944) used greatest stack depth: 19136 bytes left [ 99.051957][ T5974] warning: `syz.0.42' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 99.109175][ T5976] netlink: 'syz.2.44': attribute type 17 has an invalid length. [ 99.125042][ T5976] netlink: 'syz.2.44': attribute type 16 has an invalid length. [ 99.142529][ T5976] netlink: 152 bytes leftover after parsing attributes in process `syz.2.44'. [ 99.379318][ T5985] lo: entered allmulticast mode [ 99.573744][ T5985] b‹¡Y­™4`Ò˜: renamed from lo [ 99.812385][ T5983] netlink: 'syz.1.46': attribute type 10 has an invalid length. [ 99.882803][ T5983] team0: Device hsr_slave_0 failed to register rx_handler [ 100.031773][ T5983] syz.1.46 (5983) used greatest stack depth: 18856 bytes left [ 100.071198][ T5780] Bluetooth: hci3: unexpected subevent 0x19 length: 150 > 28 [ 100.078973][ T5780] Bluetooth: hci3: Unable to find connection with handle 0x0000 [ 100.331451][ T5993] syzkaller0: entered promiscuous mode [ 100.337316][ T5993] syzkaller0: entered allmulticast mode [ 100.676259][ T5780] Bluetooth: hci3: unexpected subevent 0x19 length: 150 > 28 [ 100.683898][ T5780] Bluetooth: hci3: Unable to find connection with handle 0x0000 [ 100.842879][ T6013] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.051393][ T6008] syzkaller0: entered promiscuous mode [ 102.062275][ T6011] netlink: 'syz.3.54': attribute type 17 has an invalid length. [ 102.070558][ T6011] netlink: 'syz.3.54': attribute type 16 has an invalid length. [ 102.078995][ T6011] netlink: 152 bytes leftover after parsing attributes in process `syz.3.54'. [ 103.858728][ T6029] netlink: 'syz.2.61': attribute type 6 has an invalid length. [ 103.867151][ T6029] netlink: 164 bytes leftover after parsing attributes in process `syz.2.61'. [ 104.163080][ T6034] netlink: 'syz.0.64': attribute type 29 has an invalid length. [ 105.037998][ T5780] Bluetooth: hci2: unexpected subevent 0x1a length: 150 > 6 [ 105.303710][ T6061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.337413][ T6061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.361142][ T6061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.377251][ T6061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.811933][ T6087] netlink: 'syz.0.78': attribute type 29 has an invalid length. [ 106.824682][ T6087] netlink: 'syz.0.78': attribute type 29 has an invalid length. [ 106.846169][ T6087] netlink: 'syz.0.78': attribute type 29 has an invalid length. [ 106.989579][ T6087] netlink: 'syz.0.78': attribute type 3 has an invalid length. [ 107.009333][ T6087] netlink: 132 bytes leftover after parsing attributes in process `syz.0.78'. [ 107.594667][ T5780] Bluetooth: hci1: unexpected subevent 0x1a length: 150 > 6 [ 107.788896][ T6105] syz.0.82[6105] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.789609][ T6105] syz.0.82[6105] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.596881][ T6105] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 108.831077][ T6112] syzkaller0: entered promiscuous mode [ 110.356534][ T6120] netlink: 'syz.0.85': attribute type 6 has an invalid length. [ 110.365401][ T6120] netlink: 164 bytes leftover after parsing attributes in process `syz.0.85'. [ 111.118991][ T1306] wlan1: Trigger new scan to find an IBSS to join [ 111.140326][ T6129] bridge_slave_1: left allmulticast mode [ 111.163866][ T6129] bridge_slave_1: left promiscuous mode [ 111.172544][ T6129] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.223156][ T6129] bridge_slave_0: left allmulticast mode [ 111.229317][ T6129] bridge_slave_0: left promiscuous mode [ 111.238024][ T6129] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.578780][ T6136] netlink: 'syz.3.87': attribute type 9 has an invalid length. [ 111.657308][ T6136] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.87'. [ 112.082827][ T6133] netlink: 'syz.1.88': attribute type 10 has an invalid length. [ 112.090567][ T6133] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.88'. [ 112.209829][ T6138] netlink: 'syz.2.89': attribute type 10 has an invalid length. [ 112.219267][ T6138] netlink: 40 bytes leftover after parsing attributes in process `syz.2.89'. [ 112.262962][ T6138] batman_adv: batadv0: Adding interface: virt_wifi0 [ 112.271233][ T6138] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.321781][ T6138] batman_adv: batadv0: Interface activated: virt_wifi0 [ 112.574378][ T5780] Bluetooth: hci1: unexpected subevent 0x1a length: 150 > 6 [ 112.770321][ T6146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.792759][ T6146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.809727][ T6146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.818507][ T6146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.106889][ T6154] syzkaller0: entered promiscuous mode [ 113.479988][ T6166] netlink: 'syz.1.97': attribute type 3 has an invalid length. [ 113.534371][ T6168] netlink: 'syz.3.98': attribute type 3 has an invalid length. [ 113.543818][ T6166] netlink: 16795 bytes leftover after parsing attributes in process `syz.1.97'. [ 113.553954][ T6168] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.98'. [ 114.115109][ T6184] syz.3.102 uses obsolete (PF_INET,SOCK_PACKET) [ 115.115853][ T33] wlan1: Trigger new scan to find an IBSS to join [ 115.510080][ T6190] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.104'. [ 115.617556][ T6194] netlink: 14 bytes leftover after parsing attributes in process `syz.3.106'. [ 116.090320][ T6200] netlink: 'syz.2.107': attribute type 3 has an invalid length. [ 116.114807][ T6200] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.107'. [ 116.253277][ T5780] Bluetooth: hci1: unexpected subevent 0x19 length: 150 > 28 [ 116.260877][ T5780] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 117.122753][ T4289] wlan1: Creating new IBSS network, BSSID e6:37:3b:f9:c8:ef [ 117.290686][ T6212] syzkaller0: entered promiscuous mode [ 117.324439][ T6209] netlink: 60 bytes leftover after parsing attributes in process `syz.3.111'. [ 120.023676][ T6224] netlink: 'syz.3.114': attribute type 2 has an invalid length. [ 120.031416][ T6224] netlink: 119 bytes leftover after parsing attributes in process `syz.3.114'. [ 120.244568][ T6231] netlink: 'syz.3.115': attribute type 3 has an invalid length. [ 120.260102][ T6231] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.115'. [ 120.573332][ T6250] netlink: 'syz.1.118': attribute type 3 has an invalid length. [ 120.581307][ T6250] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.118'. [ 120.669733][ T5780] Bluetooth: hci0: unexpected subevent 0x19 length: 150 > 28 [ 120.679404][ T5780] Bluetooth: hci0: Unable to find connection with handle 0x0000 [ 121.269772][ T6258] syzkaller0: entered promiscuous mode [ 121.708801][ T6291] netlink: 'syz.2.132': attribute type 27 has an invalid length. [ 121.946484][ T5780] Bluetooth: hci1: unexpected subevent 0x19 length: 150 > 28 [ 121.965070][ T5780] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 122.079637][ T6291] bond0: (slave bond_slave_0): Releasing backup interface [ 122.977089][ T6306] netlink: 'syz.3.137': attribute type 3 has an invalid length. [ 122.985781][ T6306] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.137'. [ 124.557243][ T6321] bridge0: port 3(batadv0) entered blocking state [ 124.575960][ T6321] bridge0: port 3(batadv0) entered disabled state [ 124.594989][ T6321] batadv0: entered allmulticast mode [ 124.661596][ T6321] batadv0: entered promiscuous mode [ 124.697905][ T6322] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.139'. [ 124.769530][ T4289] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 124.779700][ T4289] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 124.794685][ T6321] bridge0: port 3(batadv0) entered blocking state [ 124.801694][ T6321] bridge0: port 3(batadv0) entered forwarding state [ 125.320166][ T6318] netlink: 60 bytes leftover after parsing attributes in process `syz.1.141'. [ 125.779035][ T5780] Bluetooth: hci3: unexpected subevent 0x19 length: 150 > 28 [ 125.786956][ T5780] Bluetooth: hci3: Unable to find connection with handle 0x0000 [ 126.019545][ T6339] netlink: 'syz.0.147': attribute type 3 has an invalid length. [ 126.028688][ T6339] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.147'. [ 126.179528][ T6335] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 126.280641][ T6343] netlink: 'syz.3.148': attribute type 11 has an invalid length. [ 126.296284][ T6343] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.148'. [ 126.620659][ T6346] syzkaller0: entered promiscuous mode [ 127.016827][ T6349] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.150'. [ 127.053633][ T6349] bridge_slave_1: default FDB implementation only supports local addresses [ 127.083621][ T6353] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 129.113436][ T1087] wlan1: Trigger new scan to find an IBSS to join [ 130.303923][ T5780] Bluetooth: hci2: unexpected subevent 0x19 length: 150 > 28 [ 130.311420][ T5780] Bluetooth: hci2: Unable to find connection with handle 0x0000 [ 130.986899][ T6375] netlink: 'syz.3.158': attribute type 3 has an invalid length. [ 130.996608][ T6375] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.158'. [ 132.073205][ T1087] wlan1: Trigger new scan to find an IBSS to join [ 132.422465][ T6382] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 132.556635][ T6385] delete_channel: no stack [ 133.048333][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.055219][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.251542][ T5780] Bluetooth: hci2: unexpected subevent 0x19 length: 150 > 28 [ 133.259277][ T5780] Bluetooth: hci2: Unable to find connection with handle 0x0000 [ 133.685454][ T6404] netlink: 'syz.2.168': attribute type 3 has an invalid length. [ 133.696289][ T6404] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.168'. [ 133.843648][ T6405] syzkaller0: entered promiscuous mode [ 133.851786][ T6412] netlink: 'syz.0.171': attribute type 21 has an invalid length. [ 133.860566][ T6412] netlink: 'syz.0.171': attribute type 6 has an invalid length. [ 133.868896][ T6412] netlink: 132 bytes leftover after parsing attributes in process `syz.0.171'. [ 134.170844][ T6424] C: renamed from team_slave_0 (while UP) [ 134.200722][ T6424] netlink: 'syz.0.174': attribute type 8 has an invalid length. [ 134.212697][ T6424] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 134.409342][ T6428] netlink: 'syz.2.175': attribute type 1 has an invalid length. [ 134.418608][ T6428] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.175'. [ 134.430630][ T6428] netlink: 'syz.2.175': attribute type 1 has an invalid length. [ 135.115990][ T1306] wlan1: Trigger new scan to find an IBSS to join [ 135.119290][ T60] wlan1: Trigger new scan to find an IBSS to join [ 135.594381][ T5780] Bluetooth: hci0: unexpected subevent 0x19 length: 150 > 28 [ 135.602188][ T5780] Bluetooth: hci0: Unable to find connection with handle 0x0000 [ 136.098309][ T1306] wlan1: Creating new IBSS network, BSSID 4a:c3:47:3a:ad:46 [ 136.978623][ T6433] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 136.994929][ T6446] netlink: 'syz.3.180': attribute type 27 has an invalid length. [ 137.118820][ T6446] bond0: (slave bond_slave_0): Releasing backup interface [ 137.134960][ T6448] netlink: 'syz.0.182': attribute type 3 has an invalid length. [ 137.144587][ T6448] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.182'. [ 137.230116][ T6450] netlink: 'syz.1.183': attribute type 3 has an invalid length. [ 137.240960][ T6450] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.183'. [ 137.726100][ T6456] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.185'. [ 139.112140][ T1306] wlan1: Trigger new scan to find an IBSS to join [ 139.811134][ T6504] syzkaller0: entered promiscuous mode [ 140.044630][ T6511] netlink: 'syz.3.213': attribute type 3 has an invalid length. [ 140.053204][ T6511] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.213'. [ 140.082968][ T1306] wlan1: Trigger new scan to find an IBSS to join [ 140.180428][ T6513] netlink: 'syz.1.214': attribute type 3 has an invalid length. [ 140.195881][ T6513] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.214'. [ 140.343530][ T6515] TCP: TCP_TX_DELAY enabled [ 141.095977][ T4289] wlan1: Creating new IBSS network, BSSID a2:fe:58:f0:cb:50 [ 141.805855][ T6523] netlink: 16142 bytes leftover after parsing attributes in process `syz.3.217'. [ 142.080779][ T4289] wlan1: Trigger new scan to find an IBSS to join [ 142.144637][ T6531] : port 1(ip6gretap0) entered blocking state [ 142.151450][ T6531] : port 1(ip6gretap0) entered disabled state [ 142.203743][ T6531] ip6gretap0: entered allmulticast mode [ 142.278451][ T6531] ip6gretap0: entered promiscuous mode [ 142.360756][ T6532] netlink: 'syz.0.219': attribute type 10 has an invalid length. [ 142.419371][ T6532] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 142.939529][ T6548] netlink: 'syz.1.225': attribute type 3 has an invalid length. [ 142.984413][ T5780] Bluetooth: hci1: unexpected subevent 0x19 length: 150 > 28 [ 142.993083][ T5780] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 143.007911][ T6548] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.225'. [ 143.218139][ T6550] netlink: 164 bytes leftover after parsing attributes in process `syz.0.226'. [ 143.549958][ T6553] syzkaller0: entered promiscuous mode [ 143.893861][ T6570] netlink: 'syz.2.234': attribute type 3 has an invalid length. [ 143.902169][ T6570] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.234'. [ 143.939835][ T6571] netlink: 16046 bytes leftover after parsing attributes in process `syz.1.233'. [ 144.260711][ T5780] Bluetooth: hci3: unexpected subevent 0x19 length: 150 > 28 [ 144.269356][ T5780] Bluetooth: hci3: Unable to find connection with handle 0x0000 [ 145.112920][ T4289] wlan1: Trigger new scan to find an IBSS to join [ 145.310289][ T6576] netlink: 'syz.0.236': attribute type 10 has an invalid length. [ 145.331966][ T6576] netlink: 40 bytes leftover after parsing attributes in process `syz.0.236'. [ 145.340935][ T6576] team0: entered promiscuous mode [ 145.351182][ T6576] C: entered promiscuous mode [ 145.356955][ T6576] team_slave_1: entered promiscuous mode [ 145.365260][ T6576] bridge0: port 3(team0) entered blocking state [ 145.371755][ T6576] bridge0: port 3(team0) entered disabled state [ 145.378539][ T6576] team0: entered allmulticast mode [ 145.384988][ T6576] C: entered allmulticast mode [ 145.415484][ T6576] team_slave_1: entered allmulticast mode [ 145.427567][ T6576] bridge0: port 3(team0) entered blocking state [ 145.434075][ T6576] bridge0: port 3(team0) entered forwarding state [ 145.514465][ T6580] syzkaller0: entered promiscuous mode [ 145.522242][ T6580] syzkaller0: entered allmulticast mode [ 146.231077][ T6604] netlink: 128 bytes leftover after parsing attributes in process `syz.1.243'. [ 146.256330][ T6604] A link change request failed with some changes committed already. Interface b‹¡Y­™4`Ò˜ may have been left with an inconsistent configuration, please check. [ 146.298299][ T5780] Bluetooth: hci1: unexpected subevent 0x19 length: 150 > 28 [ 146.306521][ T5780] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 146.708488][ T6609] syzkaller0: entered promiscuous mode [ 148.512832][ T6636] netlink: 'syz.1.255': attribute type 1 has an invalid length. [ 148.546236][ T6636] netlink: 'syz.1.255': attribute type 3 has an invalid length. [ 148.575505][ T6636] netlink: 132 bytes leftover after parsing attributes in process `syz.1.255'. [ 148.659751][ T5780] Bluetooth: hci0: unexpected subevent 0x19 length: 150 > 28 [ 148.667753][ T5780] Bluetooth: hci0: Unable to find connection with handle 0x0000 [ 149.035066][ T49] wlan1: Trigger new scan to find an IBSS to join [ 149.757836][ T5780] Bluetooth: hci2: unexpected subevent 0x19 length: 150 > 28 [ 149.765511][ T5780] Bluetooth: hci2: Unable to find connection with handle 0x0000 [ 149.963253][ T6663] syzkaller0: entered promiscuous mode [ 150.934439][ T5780] Bluetooth: hci2: unexpected subevent 0x19 length: 150 > 28 [ 150.942287][ T5780] Bluetooth: hci2: Unable to find connection with handle 0x0000 [ 151.113703][ T49] wlan1: Creating new IBSS network, BSSID 3a:7f:e2:33:15:1b [ 152.063311][ T6689] netlink: 'syz.3.272': attribute type 33 has an invalid length. [ 152.071111][ T6689] netlink: 152 bytes leftover after parsing attributes in process `syz.3.272'. [ 152.133848][ T6709] netlink: 'syz.1.277': attribute type 10 has an invalid length. [ 152.150706][ T6709] netlink: 40 bytes leftover after parsing attributes in process `syz.1.277'. [ 152.164262][ T6709] ipvlan1: entered promiscuous mode [ 152.169542][ T6709] ipvlan1: entered allmulticast mode [ 152.176502][ T6709] veth0_vlan: entered allmulticast mode [ 152.185747][ T6709] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 154.852792][ T5780] Bluetooth: hci3: unexpected subevent 0x19 length: 150 > 28 [ 154.870540][ T5780] Bluetooth: hci3: Unable to find connection with handle 0x0000 [ 155.348376][ T6734] syzkaller0: entered promiscuous mode [ 155.644636][ T6738] netlink: 'syz.2.289': attribute type 10 has an invalid length. [ 155.661988][ T6738] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.289'. [ 155.671416][ T6738] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 155.728269][ T6742] netlink: 'syz.0.288': attribute type 27 has an invalid length. [ 155.750365][ T6742] netlink: 'syz.0.288': attribute type 3 has an invalid length. [ 155.759949][ T6742] netlink: 132 bytes leftover after parsing attributes in process `syz.0.288'. [ 155.825620][ T6744] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.290'. [ 157.351610][ T6751] netlink: 156 bytes leftover after parsing attributes in process `syz.3.292'. [ 157.708958][ T5780] Bluetooth: hci3: unexpected subevent 0x19 length: 150 > 28 [ 157.716661][ T5780] Bluetooth: hci3: Unable to find connection with handle 0x0000 [ 157.965495][ T6783] netlink: 26 bytes leftover after parsing attributes in process `syz.2.300'. [ 158.311678][ T6791] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.300'. [ 158.322290][ T6791] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.300'. [ 158.366949][ T6783] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.300'. [ 158.383196][ T6791] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.300'. [ 158.432421][ T6794] netlink: 'syz.3.303': attribute type 29 has an invalid length. [ 158.452539][ T6794] netlink: 'syz.3.303': attribute type 29 has an invalid length. [ 158.486078][ T6798] netlink: 'syz.3.303': attribute type 29 has an invalid length. [ 158.521124][ T6794] netlink: 'syz.3.303': attribute type 29 has an invalid length. [ 158.846003][ T5780] Bluetooth: hci3: unexpected subevent 0x1a length: 150 > 6 [ 158.859049][ T6802] syzkaller0: entered promiscuous mode [ 158.896923][ T6810] netlink: 'syz.3.308': attribute type 3 has an invalid length. [ 162.289884][ T5780] Bluetooth: hci3: unexpected subevent 0x19 length: 150 > 28 [ 162.297816][ T5780] Bluetooth: hci3: Unable to find connection with handle 0x0000 [ 163.191386][ T6823] netlink: 'syz.3.312': attribute type 21 has an invalid length. [ 163.199622][ T6823] netlink: 14530 bytes leftover after parsing attributes in process `syz.3.312'. [ 163.765005][ T6855] netlink: 'syz.1.322': attribute type 29 has an invalid length. [ 163.814738][ T6855] netlink: 'syz.1.322': attribute type 29 has an invalid length. [ 163.854743][ T6859] netlink: 'syz.1.322': attribute type 29 has an invalid length. [ 163.885403][ T6862] netlink: 'syz.1.322': attribute type 29 has an invalid length. [ 164.135279][ T6869] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 164.177694][ T49] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 164.188471][ T49] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 164.211583][ T5780] Bluetooth: hci1: unexpected subevent 0x19 length: 150 > 28 [ 164.219457][ T5780] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 164.624131][ T6879] netlink: 123072 bytes leftover after parsing attributes in process `syz.3.329'. [ 164.638579][ T6871] syzkaller0: entered promiscuous mode [ 165.025343][ T6889] netlink: 26 bytes leftover after parsing attributes in process `syz.0.334'. [ 165.383849][ T5780] Bluetooth: hci1: unexpected subevent 0x19 length: 150 > 28 [ 165.391674][ T5780] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 165.667971][ T6902] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.334'. [ 166.140474][ T1306] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 167.115309][ T6902] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.334'. [ 167.125620][ T6913] IPv6: Can't replace route, no match found [ 167.561583][ T6936] netlink: 'syz.3.347': attribute type 3 has an invalid length. [ 167.592256][ T6936] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.347'. [ 167.905317][ T6941] netlink: 'syz.0.349': attribute type 3 has an invalid length. [ 167.924120][ T6941] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.349'. [ 168.174894][ T6952] syzkaller0: entered promiscuous mode [ 168.245825][ T6961] netlink: 26 bytes leftover after parsing attributes in process `syz.3.355'. [ 168.762803][ T6971] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.355'. [ 168.782031][ T6971] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.355'. [ 168.792426][ T6961] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.355'. [ 168.843961][ T6971] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.355'. [ 169.288054][ T6977] netlink: 'syz.1.359': attribute type 3 has an invalid length. [ 169.325974][ T6977] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.359'. [ 169.808555][ T6986] netlink: 'syz.3.363': attribute type 3 has an invalid length. [ 169.827980][ T6986] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.363'. [ 171.154579][ T4289] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 171.790702][ T6990] netlink: 128 bytes leftover after parsing attributes in process `syz.0.364'. [ 171.800131][ T6990] A link change request failed with some changes committed already. Interface b‹¡Y­™4`Ò˜ may have been left with an inconsistent configuration, please check. [ 172.036678][ T6993] netlink: 26 bytes leftover after parsing attributes in process `syz.2.367'. [ 172.290254][ T7001] netlink: 826 bytes leftover after parsing attributes in process `syz.2.369'. [ 172.705835][ T7016] netlink: 'syz.0.374': attribute type 3 has an invalid length. [ 172.789972][ T7018] syzkaller0: entered promiscuous mode [ 172.862491][ T7021] netlink: 'syz.3.376': attribute type 3 has an invalid length. [ 173.188404][ T5780] Bluetooth: hci3: unexpected subevent 0x19 length: 150 > 28 [ 173.196452][ T5780] Bluetooth: hci3: Unable to find connection with handle 0x0000 [ 173.394877][ T7036] __nla_validate_parse: 4 callbacks suppressed [ 173.394894][ T7036] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.383'. [ 173.438218][ T7030] syzkaller0: entered promiscuous mode [ 173.443961][ T7030] syzkaller0: entered allmulticast mode [ 173.458345][ T7033] netlink: 'syz.2.382': attribute type 10 has an invalid length. [ 173.469180][ T7033] hsr0: entered promiscuous mode [ 173.480684][ T7033] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 176.074816][ T60] wlan1: Trigger new scan to find an IBSS to join [ 176.882792][ T7054] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.388'. [ 178.060118][ T7052] netlink: 26 bytes leftover after parsing attributes in process `syz.1.387'. [ 178.340008][ T7064] netlink: 40 bytes leftover after parsing attributes in process `syz.0.390'. [ 178.435677][ T7064] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.462561][ T5780] Bluetooth: hci1: unexpected subevent 0x19 length: 150 > 28 [ 178.470048][ T5780] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 178.748872][ T7064] bridge_slave_0 (unregistering): left allmulticast mode [ 178.757899][ T7064] bridge_slave_0 (unregistering): left promiscuous mode [ 178.769733][ T7064] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.099893][ T7074] syzkaller0: entered promiscuous mode [ 179.168425][ T7081] netlink: 26 bytes leftover after parsing attributes in process `syz.2.397'. [ 179.180923][ T7076] netlink: 'syz.1.396': attribute type 10 has an invalid length. [ 179.202327][ T7076] netlink: 40 bytes leftover after parsing attributes in process `syz.1.396'. [ 179.224303][ T7076] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 180.082141][ T1087] wlan1: Trigger new scan to find an IBSS to join [ 180.161320][ T4289] wlan1: Creating new IBSS network, BSSID e6:0f:17:5e:2f:c9 [ 180.715502][ T7092] netlink: 'syz.0.400': attribute type 33 has an invalid length. [ 180.736374][ T7092] netlink: 152 bytes leftover after parsing attributes in process `syz.0.400'. [ 180.767395][ T7092] `: renamed from ip6tnl0 (while UP) [ 180.825860][ T7092] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 181.078416][ T5780] Bluetooth: hci0: unexpected subevent 0x19 length: 150 > 28 [ 181.086076][ T5780] Bluetooth: hci0: Unable to find connection with handle 0x0000 [ 181.181139][ T7104] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.407'. [ 181.196197][ T7104] netlink: 'syz.2.407': attribute type 2 has an invalid length. [ 181.398564][ T7108] netlink: 'syz.1.406': attribute type 1 has an invalid length. [ 181.412488][ T7108] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.406'. [ 181.585262][ T7114] netlink: 1772 bytes leftover after parsing attributes in process `syz.3.409'. [ 182.202408][ T5780] Bluetooth: hci0: unexpected subevent 0x19 length: 150 > 28 [ 182.210035][ T5780] Bluetooth: hci0: Unable to find connection with handle 0x0000 [ 182.321331][ T7128] syzkaller0: entered promiscuous mode [ 184.909696][ T7147] netlink: 'syz.2.419': attribute type 41 has an invalid length. [ 184.988976][ T7165] syzkaller0: entered promiscuous mode [ 184.999676][ T7165] syzkaller0: entered allmulticast mode [ 187.384983][ T7189] netlink: 'syz.3.431': attribute type 10 has an invalid length. [ 187.415010][ T7189] team0: Device wg1 is of different type [ 187.530686][ T7204] syzkaller0: entered promiscuous mode [ 188.557804][ T7229] netlink: 'syz.0.442': attribute type 4 has an invalid length. [ 188.568271][ T7229] netlink: 'syz.0.442': attribute type 1 has an invalid length. [ 188.577006][ T7229] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.442'. [ 190.922912][ T7267] netlink: 'syz.2.453': attribute type 3 has an invalid length. [ 190.930654][ T7267] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.453'. [ 191.006031][ T7267] netlink: 'syz.2.453': attribute type 10 has an invalid length. [ 191.022175][ T7267] netlink: 2 bytes leftover after parsing attributes in process `syz.2.453'. [ 191.041560][ T7267] bridge0: port 3(hsr0) entered blocking state [ 191.081995][ T7267] bridge0: port 3(hsr0) entered disabled state [ 191.104267][ T7267] hsr0: entered allmulticast mode [ 191.119677][ T7267] hsr_slave_0: entered allmulticast mode [ 191.126340][ T7267] hsr_slave_1: entered allmulticast mode [ 191.139181][ T7267] bridge0: port 3(hsr0) entered blocking state [ 191.145627][ T7267] bridge0: port 3(hsr0) entered forwarding state [ 191.338929][ T7270] syzkaller0: entered promiscuous mode [ 193.629634][ T7296] netlink: 14546 bytes leftover after parsing attributes in process `syz.3.463'. [ 193.639385][ T7297] netlink: 14546 bytes leftover after parsing attributes in process `syz.3.463'. [ 193.649021][ T7294] netlink: 'syz.1.462': attribute type 10 has an invalid length. [ 193.661041][ T7294] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 194.367195][ T7319] netlink: 132 bytes leftover after parsing attributes in process `syz.1.470'. [ 194.476839][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.487169][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.738742][ T7328] syzkaller0: entered promiscuous mode [ 194.744472][ T7328] syzkaller0: entered allmulticast mode [ 194.914943][ T7339] netlink: 'syz.2.476': attribute type 17 has an invalid length. [ 195.135570][ T7337] syzkaller0: entered promiscuous mode [ 197.166091][ T1087] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 197.331704][ T7354] netlink: 'syz.3.482': attribute type 21 has an invalid length. [ 197.340001][ T7354] netlink: 132 bytes leftover after parsing attributes in process `syz.3.482'. [ 198.884142][ T7366] netlink: 132 bytes leftover after parsing attributes in process `syz.0.484'. [ 201.185565][ T7396] sit0: entered allmulticast mode [ 201.665577][ T7410] syzkaller0: entered promiscuous mode [ 202.079817][ T33] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 204.996046][ T7474] netlink: 'syz.2.514': attribute type 33 has an invalid length. [ 205.022044][ T7474] netlink: 147680 bytes leftover after parsing attributes in process `syz.2.514'. [ 206.045285][ T7498] syzkaller0: entered promiscuous mode [ 206.220835][ T7509] syzkaller0: entered promiscuous mode [ 206.238180][ T7509] syzkaller0: entered allmulticast mode [ 206.792176][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 206.798434][ T5782] Bluetooth: hci1: command 0x0406 tx timeout [ 206.804679][ T5084] Bluetooth: hci2: command 0x0406 tx timeout [ 206.807606][ T5784] Bluetooth: hci3: command 0x0406 tx timeout [ 207.532069][ T7551] netlink: 'syz.2.536': attribute type 9 has an invalid length. [ 207.541223][ T7551] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.536'. [ 210.265620][ T7550] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.272978][ T7550] IPv6: NLM_F_CREATE should be set when creating new route [ 210.280340][ T7550] IPv6: NLM_F_CREATE should be set when creating new route [ 210.287638][ T7550] IPv6: NLM_F_CREATE should be set when creating new route [ 210.453158][ T7552] netlink: 'syz.2.536': attribute type 9 has an invalid length. [ 210.460916][ T7552] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.536'. [ 210.532051][ T7574] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.543'. [ 210.554074][ T7574] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.543'. [ 211.118343][ T7597] netlink: 'syz.2.552': attribute type 9 has an invalid length. [ 211.141208][ T7597] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.552'. [ 211.584185][ T7607] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.555'. [ 211.609253][ T7607] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 211.632143][ T7607] openvswitch: netlink: Message has 1 unknown bytes. [ 212.616101][ T7638] netlink: 135056 bytes leftover after parsing attributes in process `syz.0.565'. [ 212.642060][ T7638] openvswitch: netlink: Tunnel attr 8545 out of range max 16 [ 212.875741][ T7645] netlink: 'syz.1.566': attribute type 10 has an invalid length. [ 212.922052][ T7645] netlink: 152 bytes leftover after parsing attributes in process `syz.1.566'. [ 213.019197][ T7645] netlink: 'syz.1.566': attribute type 29 has an invalid length. [ 213.075763][ T7645] netlink: 'syz.1.566': attribute type 29 has an invalid length. [ 213.135440][ T7653] netlink: 'syz.1.566': attribute type 29 has an invalid length. [ 213.599496][ T7657] syzkaller0: entered promiscuous mode [ 213.951022][ T7677] netlink: 60 bytes leftover after parsing attributes in process `syz.1.576'. [ 215.801122][ T7677] netlink: 60 bytes leftover after parsing attributes in process `syz.1.576'. [ 215.828840][ T7683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.576'. [ 216.867621][ T7722] syzkaller0: entered promiscuous mode [ 218.653915][ T7740] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.595'. [ 218.684679][ T7740] netlink: 6328 bytes leftover after parsing attributes in process `syz.3.595'. [ 219.092140][ T7750] pim6reg0: tun_chr_ioctl cmd 1074025672 [ 219.097900][ T7750] pim6reg0: ignored: set checksum disabled [ 219.171653][ T7763] netlink: 68 bytes leftover after parsing attributes in process `syz.3.601'. [ 219.300594][ T7763] netlink: 'syz.3.601': attribute type 3 has an invalid length. [ 219.309364][ T7763] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.601'. [ 219.508689][ T5776] Bluetooth: hci3: unexpected subevent 0x19 length: 150 > 28 [ 219.517237][ T5776] Bluetooth: hci3: Unable to find connection with handle 0x0000 [ 220.997831][ T7789] netlink: 'syz.1.609': attribute type 2 has an invalid length. [ 221.006252][ T7789] netlink: 'syz.1.609': attribute type 3 has an invalid length. [ 221.018382][ T7789] netlink: 132 bytes leftover after parsing attributes in process `syz.1.609'. [ 222.218023][ T7780] netlink: 'syz.3.606': attribute type 21 has an invalid length. [ 222.226154][ T7780] netlink: 'syz.3.606': attribute type 1 has an invalid length. [ 222.621565][ T5776] Bluetooth: hci0: unexpected subevent 0x19 length: 150 > 28 [ 222.629453][ T5776] Bluetooth: hci0: Unable to find connection with handle 0x0000 [ 222.984548][ T7815] netlink: 26 bytes leftover after parsing attributes in process `syz.1.618'. [ 223.197719][ T7819] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.618'. [ 223.207655][ T7819] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.618'. [ 223.219200][ T7815] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.618'. [ 223.233450][ T7822] netlink: 'syz.3.619': attribute type 25 has an invalid length. [ 223.241505][ T7822] netlink: 'syz.3.619': attribute type 3 has an invalid length. [ 223.259390][ T7822] netlink: 'syz.3.619': attribute type 10 has an invalid length. [ 223.267809][ T7822] netlink: 40 bytes leftover after parsing attributes in process `syz.3.619'. [ 223.314839][ T7822] batman_adv: batadv0: Adding interface: virt_wifi0 [ 223.321995][ T7822] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.352248][ T7822] batman_adv: batadv0: Interface activated: virt_wifi0 [ 223.616207][ T7830] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.623'. [ 223.821777][ T5776] Bluetooth: hci1: unexpected subevent 0x19 length: 150 > 28 [ 223.829451][ T5776] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 224.121654][ T7839] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.627'. [ 224.162285][ T7839] openvswitch: netlink: Message has 20476 unknown bytes. [ 224.396152][ T7847] netlink: 26 bytes leftover after parsing attributes in process `syz.1.629'. [ 224.817556][ T7851] syzkaller0: entered promiscuous mode [ 224.823446][ T7851] syzkaller0: entered allmulticast mode [ 224.857377][ T7853] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.629'. [ 225.311693][ T5776] Bluetooth: hci1: unexpected subevent 0x19 length: 150 > 28 [ 225.319349][ T5776] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 225.818644][ T7880] netlink: 'syz.3.640': attribute type 2 has an invalid length. [ 225.880572][ T7880] netlink: 'syz.3.640': attribute type 3 has an invalid length. [ 226.063355][ T7888] __nla_validate_parse: 7 callbacks suppressed [ 226.063373][ T7888] netlink: 26 bytes leftover after parsing attributes in process `syz.0.642'. [ 226.277158][ T7889] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.642'. [ 226.298699][ T7889] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.642'. [ 226.310352][ T7888] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.642'. [ 226.592612][ T7903] netlink: 156 bytes leftover after parsing attributes in process `syz.0.645'. [ 227.435642][ T5776] Bluetooth: hci3: unexpected subevent 0x19 length: 150 > 28 [ 227.443274][ T5776] Bluetooth: hci3: Unable to find connection with handle 0x0000 [ 228.107940][ T33] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 228.986627][ T7927] netlink: 'syz.0.652': attribute type 2 has an invalid length. [ 228.996863][ T7927] netlink: 'syz.0.652': attribute type 3 has an invalid length. [ 229.005203][ T7927] netlink: 132 bytes leftover after parsing attributes in process `syz.0.652'. [ 229.037241][ T7928] netlink: 26 bytes leftover after parsing attributes in process `syz.1.653'. [ 229.190958][ T7933] netlink: 'syz.3.656': attribute type 21 has an invalid length. [ 229.216420][ T7933] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.656'. [ 229.452826][ T7929] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.653'. [ 229.494122][ T7929] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.653'. [ 229.599432][ T5776] Bluetooth: hci1: unexpected subevent 0x19 length: 150 > 28 [ 229.607525][ T5776] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 231.390694][ T7970] __nla_validate_parse: 6 callbacks suppressed [ 231.390760][ T7970] netlink: 26 bytes leftover after parsing attributes in process `syz.0.669'. [ 231.514745][ T5776] Bluetooth: hci2: unexpected subevent 0x19 length: 150 > 28 [ 231.522835][ T5776] Bluetooth: hci2: Unable to find connection with handle 0x0000 [ 231.540914][ T7972] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.669'. [ 231.557991][ T7976] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 231.585003][ T7972] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.669'. [ 231.787278][ T7981] netlink: 'syz.2.674': attribute type 29 has an invalid length. [ 233.093266][ T7970] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.669'. [ 233.104036][ T7978] netlink: 10 bytes leftover after parsing attributes in process `syz.1.673'. [ 233.109112][ T60] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 233.120402][ T7981] netlink: 'syz.2.674': attribute type 29 has an invalid length. [ 233.762162][ T5776] Bluetooth: hci3: unexpected subevent 0x19 length: 150 > 28 [ 233.769836][ T5776] Bluetooth: hci3: Unable to find connection with handle 0x0000 [ 234.294993][ T8013] netlink: 26 bytes leftover after parsing attributes in process `syz.0.683'. [ 234.408708][ T8013] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.683'. [ 234.927824][ T8013] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.683'. [ 234.998740][ T8023] veth1_to_bond: entered allmulticast mode [ 235.076049][ T8014] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.683'. [ 235.664989][ T5776] Bluetooth: hci0: unexpected subevent 0x19 length: 150 > 28 [ 235.673976][ T5776] Bluetooth: hci0: Unable to find connection with handle 0x0000 [ 235.943050][ T8042] : renamed from veth1 (while UP) [ 237.119475][ T8058] netlink: 'syz.0.700': attribute type 11 has an invalid length. [ 237.172248][ T8058] netlink: 140 bytes leftover after parsing attributes in process `syz.0.700'. [ 237.183840][ T8056] netlink: 26 bytes leftover after parsing attributes in process `syz.2.698'. [ 237.270791][ T8060] netlink: 'syz.3.699': attribute type 9 has an invalid length. [ 237.279378][ T8060] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.699'. [ 237.289776][ T8056] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.698'. [ 237.290191][ T8056] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.698'. [ 237.291348][ T8062] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.698'. [ 238.114284][ T8072] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 238.128412][ T8072] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 239.744533][ T8104] __sock_release: fasync list not empty! [ 240.125427][ T8108] netlink: 'syz.0.713': attribute type 3 has an invalid length. [ 240.140958][ T8108] netlink: 'syz.0.713': attribute type 1 has an invalid length. [ 240.157933][ T8108] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.713'. [ 240.854528][ T8129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.720'. [ 241.102207][ T8138] netlink: 'syz.0.723': attribute type 39 has an invalid length. [ 241.159806][ T5776] Bluetooth: hci3: unexpected event 0x04 length: 151 > 10 [ 241.568984][ T8143] netlink: 'syz.3.724': attribute type 10 has an invalid length. [ 241.624798][ T8143] team0: Device hsr_slave_0 failed to register rx_handler [ 241.719243][ T8139] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.723'. [ 241.742801][ T8139] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.723'. [ 242.425702][ T8165] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 242.457529][ T8165] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 242.844992][ T8173] netlink: 'syz.0.733': attribute type 29 has an invalid length. [ 242.854224][ T8173] netlink: 'syz.0.733': attribute type 3 has an invalid length. [ 242.872213][ T8173] __nla_validate_parse: 2 callbacks suppressed [ 242.872241][ T8173] netlink: 132 bytes leftover after parsing attributes in process `syz.0.733'. [ 242.985324][ T8174] netlink: 61963 bytes leftover after parsing attributes in process `syz.0.733'. [ 243.073972][ T8173] netlink: 152 bytes leftover after parsing attributes in process `syz.0.733'. [ 243.106222][ T8173] tc_dump_action: action bad kind [ 243.194285][ T5776] Bluetooth: hci3: command 0x0406 tx timeout [ 243.363390][ T8190] netlink: 'syz.1.737': attribute type 21 has an invalid length. [ 243.384932][ T8191] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.738'. [ 243.800156][ T8186] syz.2.736 (8186) used greatest stack depth: 18536 bytes left [ 243.817203][ T8198] raw_sendmsg: syz.1.739 forgot to set AF_INET. Fix it! [ 245.682691][ T8234] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.749'. [ 246.031049][ T8239] syzkaller0: entered promiscuous mode [ 246.064217][ T8239] syzkaller0: entered allmulticast mode [ 246.944393][ T8254] netlink: 'syz.2.754': attribute type 39 has an invalid length. [ 247.235738][ T8258] netlink: 40 bytes leftover after parsing attributes in process `syz.1.756'. [ 247.614459][ T8274] netlink: 'syz.0.758': attribute type 13 has an invalid length. [ 247.641940][ T8274] netlink: 168 bytes leftover after parsing attributes in process `syz.0.758'. [ 249.170395][ T8318] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.773'. [ 249.825890][ T8332] netlink: set zone limit has 8 unknown bytes [ 250.594636][ T8343] netlink: 176 bytes leftover after parsing attributes in process `syz.1.781'. [ 250.763348][ T8349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.782'. [ 251.688921][ T8366] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.787'. [ 251.703406][ T8366] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.787'. [ 251.715380][ T8361] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.787'. [ 251.732123][ T8366] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.787'. [ 251.902661][ T8366] netlink: 'syz.2.787': attribute type 10 has an invalid length. [ 251.934468][ T8366] netlink: 40 bytes leftover after parsing attributes in process `syz.2.787'. [ 251.957736][ T8366] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 251.972042][ T8366] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.030025][ T8366] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 253.085932][ T8359] IPv6: Can't replace route, no match found [ 253.600135][ T8398] netlink: 'syz.1.798': attribute type 21 has an invalid length. [ 253.652716][ T8398] netlink: 156 bytes leftover after parsing attributes in process `syz.1.798'. [ 253.730213][ T8402] netlink: 'syz.2.799': attribute type 10 has an invalid length. [ 253.796364][ T8405] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.799'. [ 253.836413][ T8402] ipvlan1: entered promiscuous mode [ 253.880749][ T8402] ipvlan1: entered allmulticast mode [ 253.895662][ T8402] veth0_vlan: entered allmulticast mode [ 253.916965][ T8402] bridge0: port 4(ipvlan1) entered blocking state [ 253.925768][ T8402] bridge0: port 4(ipvlan1) entered disabled state [ 253.947352][ T8402] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 254.886738][ T8419] __nla_validate_parse: 1 callbacks suppressed [ 254.886758][ T8419] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.804'. [ 255.222678][ T8419] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 255.577229][ T8432] netlink: 12095 bytes leftover after parsing attributes in process `syz.1.806'. [ 255.916857][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.927939][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.021551][ T8448] netlink: 60 bytes leftover after parsing attributes in process `syz.0.813'. [ 256.035979][ T8449] netlink: 'syz.1.812': attribute type 9 has an invalid length. [ 256.045556][ T8449] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.812'. [ 256.327380][ T8452] netlink: 'syz.1.812': attribute type 9 has an invalid length. [ 256.361949][ T8452] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.812'. [ 257.594462][ T8461] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.814'. [ 258.228108][ T8476] netlink: 132 bytes leftover after parsing attributes in process `syz.2.819'. [ 258.358497][ T8476] netlink: 'syz.2.819': attribute type 17 has an invalid length. [ 258.389130][ T8476] netlink: 'syz.2.819': attribute type 16 has an invalid length. [ 258.417127][ T8476] netlink: 152 bytes leftover after parsing attributes in process `syz.2.819'. [ 258.993756][ T8486] netlink: 132 bytes leftover after parsing attributes in process `syz.0.821'. [ 259.020547][ T8486] netlink: 132 bytes leftover after parsing attributes in process `syz.0.821'. [ 259.033522][ T8486] netlink: 'syz.0.821': attribute type 21 has an invalid length. [ 259.043443][ T8486] IPv6: NLM_F_CREATE should be specified when creating new route [ 259.051312][ T8486] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 259.058620][ T8486] IPv6: NLM_F_CREATE should be set when creating new route [ 259.065953][ T8486] IPv6: NLM_F_CREATE should be set when creating new route [ 259.073260][ T8486] IPv6: NLM_F_CREATE should be set when creating new route [ 259.115998][ T4289] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 259.398318][ T8495] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 259.951134][ T8508] __nla_validate_parse: 2 callbacks suppressed [ 259.951170][ T8508] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.827'. [ 259.969760][ T8507] netlink: 'syz.1.828': attribute type 39 has an invalid length. [ 260.387851][ T8517] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.830'. [ 261.086910][ T8541] netlink: 188 bytes leftover after parsing attributes in process `syz.0.837'. [ 261.314305][ T8551] netlink: 111004 bytes leftover after parsing attributes in process `syz.1.840'. [ 261.330116][ T8555] netlink: 10 bytes leftover after parsing attributes in process `syz.3.841'. [ 261.354033][ T8550] netlink: 'syz.1.840': attribute type 10 has an invalid length. [ 261.394703][ T8550] veth0_macvtap: left promiscuous mode [ 261.512494][ T8559] netlink: 'syz.0.843': attribute type 39 has an invalid length. [ 261.710969][ T8566] netlink: 60 bytes leftover after parsing attributes in process `syz.1.845'. [ 262.685812][ T8594] netlink: 'syz.0.852': attribute type 64 has an invalid length. [ 262.716850][ T8594] netlink: 'syz.0.852': attribute type 64 has an invalid length. [ 262.745494][ T8588] netlink: 'syz.0.852': attribute type 64 has an invalid length. [ 263.024376][ T8606] netlink: 144 bytes leftover after parsing attributes in process `syz.3.858'. [ 263.327353][ T8619] netlink: 60 bytes leftover after parsing attributes in process `syz.2.860'. [ 264.260830][ T8651] netlink: 'syz.0.869': attribute type 1 has an invalid length. [ 264.280556][ T8651] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.869'. [ 264.857824][ T8669] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.877'. [ 265.336957][ T8701] netlink: 'syz.2.884': attribute type 21 has an invalid length. [ 265.355840][ T8701] netlink: 'syz.2.884': attribute type 20 has an invalid length. [ 265.536430][ T8707] netlink: 76 bytes leftover after parsing attributes in process `syz.1.887'. [ 266.119110][ T8725] netlink: 'syz.0.893': attribute type 10 has an invalid length. [ 266.141508][ T8723] netlink: 'syz.2.891': attribute type 9 has an invalid length. [ 266.160892][ T8725] team0: Device veth1_vlan failed to register rx_handler [ 266.164604][ T8723] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.891'. [ 266.822255][ T8748] netlink: 'syz.3.896': attribute type 9 has an invalid length. [ 266.842260][ T8748] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.896'. [ 267.392386][ T5776] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 267.543220][ T8770] netlink: 'syz.0.905': attribute type 10 has an invalid length. [ 267.977427][ T8770] bond0: (slave wlan1): Releasing backup interface [ 268.112687][ T8770] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 268.189555][ T8770] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 268.221785][ T8770] team0: Port device wlan1 added [ 268.354363][ T8774] tap0: tun_chr_ioctl cmd 1074025694 [ 268.528755][ T8769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.543423][ T8789] sit0: entered allmulticast mode [ 270.022076][ T5776] Bluetooth: hci1: ISO packet for unknown connection handle 21 [ 270.072736][ T12] wlan1: Trigger new scan to find an IBSS to join [ 272.061848][ T8830] sock: sock_timestamping_bind_phc: sock not bind to device [ 272.094893][ T8830] netlink: 40 bytes leftover after parsing attributes in process `syz.2.918'. [ 272.146037][ T8830] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.277760][ T8830] bridge_slave_0 (unregistering): left allmulticast mode [ 272.285355][ T8830] bridge_slave_0 (unregistering): left promiscuous mode [ 272.294030][ T8830] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.463968][ T8844] sit0: entered allmulticast mode [ 272.492753][ T8836] netlink: 'syz.1.920': attribute type 10 has an invalid length. [ 272.669788][ T8836] team0: Port device wlan1 added [ 272.843649][ T8833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.029770][ T8853] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.925'. [ 273.072055][ T8853] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 273.086010][ T8853] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 273.102825][ T8853] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.925'. [ 273.124552][ T8853] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 273.139850][ T8853] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 273.176103][ T8853] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.925'. [ 273.205236][ T8853] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 273.221007][ T8853] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 273.253572][ T8853] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.925'. [ 273.296552][ T8853] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 273.316823][ T8853] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 273.388693][ T8853] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.925'. [ 273.447654][ T8853] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 273.461771][ T8853] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 273.488030][ T8853] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.925'. [ 273.524199][ T8853] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.925'. [ 273.538060][ T8853] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.925'. [ 273.576367][ T8853] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.925'. [ 273.696731][ T5776] Bluetooth: hci2: unexpected subevent 0x19 length: 150 > 28 [ 273.704697][ T5776] Bluetooth: hci2: Unable to find connection with handle 0x0000 [ 276.648463][ T8889] sit0: entered allmulticast mode [ 276.676793][ T8895] netlink: 'syz.1.935': attribute type 21 has an invalid length. [ 276.701951][ T8895] netlink: 'syz.1.935': attribute type 4 has an invalid length. [ 276.712173][ T8896] bridge_slave_1: entered promiscuous mode [ 276.952014][ T8901] netlink: 'syz.3.937': attribute type 10 has an invalid length. [ 277.108503][ T8901] team0: Port device wlan1 added [ 277.312036][ T8914] netlink: 'syz.0.942': attribute type 29 has an invalid length. [ 277.336159][ T8914] netlink: 'syz.0.942': attribute type 29 has an invalid length. [ 277.383710][ T8899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.453180][ T8939] netlink: 'syz.0.949': attribute type 21 has an invalid length. [ 278.461099][ T8939] netlink: 'syz.0.949': attribute type 6 has an invalid length. [ 278.499986][ T8939] __nla_validate_parse: 21 callbacks suppressed [ 278.500002][ T8939] netlink: 132 bytes leftover after parsing attributes in process `syz.0.949'. [ 279.115247][ T8950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.953'. [ 279.132594][ T8951] netlink: 132 bytes leftover after parsing attributes in process `syz.0.953'. [ 280.577883][ T8972] netlink: 'syz.1.959': attribute type 19 has an invalid length. [ 283.568087][ T8988] netlink: 'syz.0.964': attribute type 29 has an invalid length. [ 283.617638][ T8988] netlink: 'syz.0.964': attribute type 29 has an invalid length. [ 283.629458][ T8989] netlink: 156 bytes leftover after parsing attributes in process `syz.2.962'. [ 283.643892][ T8988] netlink: 'syz.0.964': attribute type 29 has an invalid length. [ 283.672667][ T5776] Bluetooth: hci1: unexpected event 0x2c length: 151 > 17 [ 283.777709][ T8988] netlink: 'syz.0.964': attribute type 3 has an invalid length. [ 283.797342][ T8988] netlink: 132 bytes leftover after parsing attributes in process `syz.0.964'. [ 284.107610][ T9011] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.969'. [ 284.232537][ T9013] netlink: 132 bytes leftover after parsing attributes in process `syz.1.971'. [ 284.278949][ T5776] Bluetooth: hci2: unexpected subevent 0x12 length: 150 > 5 [ 284.280865][ T9013] netlink: 164 bytes leftover after parsing attributes in process `syz.1.971'. [ 284.305794][ T9016] netlink: 763 bytes leftover after parsing attributes in process `syz.3.972'. [ 284.958705][ T9042] netlink: 140 bytes leftover after parsing attributes in process `syz.0.979'. [ 284.976982][ T9042] netlink: 10 bytes leftover after parsing attributes in process `syz.0.979'. [ 285.022678][ T9042] bond0: (slave bond_slave_0): Releasing backup interface [ 285.041720][ T9042] net_ratelimit: 46 callbacks suppressed [ 285.041744][ T9042] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 285.797990][ T9059] netlink: 26 bytes leftover after parsing attributes in process `syz.3.987'. [ 285.932228][ T9062] netlink: 26 bytes leftover after parsing attributes in process `syz.0.988'. [ 286.454253][ T9069] netlink: 'syz.1.990': attribute type 2 has an invalid length. [ 286.467818][ T9069] netlink: 'syz.1.990': attribute type 1 has an invalid length. [ 286.477982][ T9069] netlink: 'syz.1.990': attribute type 2 has an invalid length. [ 287.859050][ T9105] netlink: 'syz.0.1004': attribute type 10 has an invalid length. [ 288.513756][ T9120] syzkaller0: entered promiscuous mode [ 288.523913][ T9120] syzkaller0: entered allmulticast mode [ 288.732895][ T9129] __nla_validate_parse: 21 callbacks suppressed [ 288.732917][ T9129] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1009'. [ 290.191101][ T9119] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1007'. [ 291.053998][ T9151] netlink: 'syz.2.1016': attribute type 3 has an invalid length. [ 291.087171][ T9151] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1016'. [ 292.221338][ T9127] netlink: 26 bytes leftover after parsing attributes in process `syz.1.1009'. [ 292.230563][ T9129] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1009'. [ 292.520110][ T9166] FAULT_INJECTION: forcing a failure. [ 292.520110][ T9166] name failslab, interval 1, probability 0, space 0, times 1 [ 292.561609][ T9166] CPU: 0 PID: 9166 Comm: syz.3.1019 Not tainted syzkaller #0 [ 292.569087][ T9166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 292.579209][ T9166] Call Trace: [ 292.582525][ T9166] [ 292.585490][ T9166] dump_stack_lvl+0x18c/0x250 [ 292.590214][ T9166] ? show_regs_print_info+0x20/0x20 [ 292.595447][ T9166] ? load_image+0x420/0x420 [ 292.600010][ T9166] ? __might_sleep+0xe0/0xe0 [ 292.604652][ T9166] ? __lock_acquire+0x7d80/0x7d80 [ 292.609726][ T9166] should_fail_ex+0x394/0x4c0 [ 292.614462][ T9166] should_failslab+0x9/0x20 [ 292.619008][ T9166] slab_pre_alloc_hook+0x59/0x300 [ 292.624079][ T9166] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 292.629842][ T9166] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 292.635595][ T9166] __kmem_cache_alloc_node+0x53/0x250 [ 292.641028][ T9166] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 292.646792][ T9166] __kmalloc+0xa7/0x240 [ 292.650989][ T9166] tomoyo_realpath_from_path+0xe6/0x5c0 [ 292.656584][ T9166] ? tomoyo_domain+0xd6/0x120 [ 292.661321][ T9166] tomoyo_path_number_perm+0x248/0x5e0 [ 292.666817][ T9166] ? tomoyo_path_number_perm+0x217/0x5e0 [ 292.672485][ T9166] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 292.678078][ T9166] ? ksys_write+0x1d2/0x260 [ 292.682652][ T9166] ? __fget_files+0x28/0x460 [ 292.687297][ T9166] security_file_ioctl+0x70/0xa0 [ 292.692282][ T9166] __se_sys_ioctl+0x48/0x170 [ 292.696910][ T9166] do_syscall_64+0x55/0xb0 [ 292.701359][ T9166] ? clear_bhb_loop+0x40/0x90 [ 292.706069][ T9166] ? clear_bhb_loop+0x40/0x90 [ 292.710810][ T9166] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 292.716749][ T9166] RIP: 0033:0x7fda5439e019 [ 292.721204][ T9166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.740839][ T9166] RSP: 002b:00007fda551be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 292.749289][ T9166] RAX: ffffffffffffffda RBX: 00007fda54625fa0 RCX: 00007fda5439e019 [ 292.757291][ T9166] RDX: 0000200000000100 RSI: 0000000000008943 RDI: 0000000000000007 [ 292.765290][ T9166] RBP: 00007fda551be090 R08: 0000000000000000 R09: 0000000000000000 [ 292.773290][ T9166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.781292][ T9166] R13: 00007fda54626038 R14: 00007fda54625fa0 R15: 00007ffc03cf2d18 [ 292.789313][ T9166] [ 292.809531][ T9166] ERROR: Out of memory at tomoyo_realpath_from_path. [ 293.188544][ T9177] netlink: 26 bytes leftover after parsing attributes in process `syz.2.1023'. [ 293.303764][ T9180] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1023'. [ 293.324092][ T9180] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1023'. [ 293.344134][ T9177] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1023'. [ 293.382828][ T9182] netlink: 26 bytes leftover after parsing attributes in process `syz.3.1026'. [ 293.429282][ T9184] netlink: 'syz.1.1027': attribute type 21 has an invalid length. [ 293.579373][ T9190] netlink: 'syz.1.1029': attribute type 21 has an invalid length. [ 293.596425][ T9190] netlink: 'syz.1.1029': attribute type 11 has an invalid length. [ 293.783038][ T9192] netlink: 'syz.3.1030': attribute type 49 has an invalid length. [ 294.533548][ T9210] __nla_validate_parse: 4 callbacks suppressed [ 294.533592][ T9210] netlink: 26 bytes leftover after parsing attributes in process `syz.2.1038'. [ 294.629423][ T9212] netlink: 26 bytes leftover after parsing attributes in process `syz.1.1037'. [ 294.657798][ T9214] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1038'. [ 294.727100][ T9214] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1038'. [ 294.789278][ T9210] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1038'. [ 294.907322][ T9213] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1037'. [ 294.938879][ T9213] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1037'. [ 294.967665][ T9212] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1037'. [ 295.220134][ T9227] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1042'. [ 295.265201][ T9227] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1042'. [ 295.289223][ T9227] bond0: (slave bond_slave_0): Releasing backup interface [ 295.307534][ T9227] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 295.575690][ T9229] syzkaller0: entered promiscuous mode [ 297.191638][ T9251] delete_channel: no stack [ 299.183832][ T9255] netlink: 'syz.1.1054': attribute type 10 has an invalid length. [ 299.195369][ T9255] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 299.696015][ T9267] __nla_validate_parse: 5 callbacks suppressed [ 299.696048][ T9267] netlink: 26 bytes leftover after parsing attributes in process `syz.0.1059'. [ 299.788041][ T9269] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1060'. [ 299.795249][ T9273] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1059'. [ 299.848416][ T9273] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1059'. [ 299.907854][ T9267] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1059'. [ 300.069286][ T9283] netlink: 'syz.2.1064': attribute type 21 has an invalid length. [ 300.087875][ T9283] netlink: 'syz.2.1064': attribute type 6 has an invalid length. [ 300.105839][ T9283] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1064'. [ 300.554462][ T9285] syzkaller0: entered promiscuous mode [ 300.615353][ T9298] sctp: [Deprecated]: syz.3.1070 (pid 9298) Use of struct sctp_assoc_value in delayed_ack socket option. [ 300.615353][ T9298] Use struct sctp_sack_info instead [ 300.816276][ T9303] netlink: 'syz.3.1072': attribute type 10 has an invalid length. [ 300.844195][ T9303] team0: Device veth1_macvtap failed to register rx_handler [ 300.891610][ T9304] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1072'. [ 301.273097][ T9317] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1074'. [ 303.214467][ T9315] netlink: 26 bytes leftover after parsing attributes in process `syz.3.1074'. [ 303.223726][ T9317] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1074'. [ 304.937036][ T9335] netlink: 'syz.0.1080': attribute type 10 has an invalid length. [ 305.113113][ T9335] wg1: entered promiscuous mode [ 305.136201][ T9335] wg1: entered allmulticast mode [ 305.143100][ T9335] team0: Device wg1 is of different type [ 305.257917][ T9348] netlink: 26 bytes leftover after parsing attributes in process `syz.1.1083'. [ 305.301113][ T9348] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1083'. [ 305.334295][ T9348] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1083'. [ 305.345536][ T9351] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1083'. [ 305.649782][ T9355] sctp: [Deprecated]: syz.2.1085 (pid 9355) Use of struct sctp_assoc_value in delayed_ack socket option. [ 305.649782][ T9355] Use struct sctp_sack_info instead [ 305.734396][ T9358] syzkaller0: entered promiscuous mode [ 305.846497][ T9361] FAULT_INJECTION: forcing a failure. [ 305.846497][ T9361] name failslab, interval 1, probability 0, space 0, times 0 [ 305.859507][ T9361] CPU: 1 PID: 9361 Comm: syz.2.1088 Not tainted syzkaller #0 [ 305.866926][ T9361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 305.877016][ T9361] Call Trace: [ 305.880325][ T9361] [ 305.883283][ T9361] dump_stack_lvl+0x18c/0x250 [ 305.888017][ T9361] ? show_regs_print_info+0x20/0x20 [ 305.893261][ T9361] ? load_image+0x420/0x420 [ 305.897793][ T9361] ? __might_sleep+0xe0/0xe0 [ 305.902420][ T9361] ? __lock_acquire+0x7d80/0x7d80 [ 305.907506][ T9361] should_fail_ex+0x394/0x4c0 [ 305.912255][ T9361] should_failslab+0x9/0x20 [ 305.916828][ T9361] slab_pre_alloc_hook+0x59/0x300 [ 305.921888][ T9361] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 305.927908][ T9361] ? tun_device_event+0x166/0x1020 [ 305.933053][ T9361] ? tun_device_event+0x166/0x1020 [ 305.938254][ T9361] __kmem_cache_alloc_node+0x53/0x250 [ 305.943694][ T9361] ? tun_device_event+0x166/0x1020 [ 305.948852][ T9361] __kmalloc+0xa7/0x240 [ 305.953083][ T9361] tun_device_event+0x166/0x1020 [ 305.958070][ T9361] ? lockdep_rtnl_is_held+0x26/0x30 [ 305.963312][ T9361] notifier_call_chain+0x18f/0x380 [ 305.968493][ T9361] dev_change_tx_queue_len+0x13a/0x290 [ 305.973997][ T9361] ? dev_set_mtu+0x1c0/0x1c0 [ 305.978623][ T9361] ? dev_ifsioc+0x1b1/0xc40 [ 305.983162][ T9361] dev_ioctl+0x7b4/0x1140 [ 305.987552][ T9361] sock_do_ioctl+0x239/0x310 [ 305.992177][ T9361] ? sock_show_fdinfo+0xb0/0xb0 [ 305.997095][ T9361] sock_ioctl+0x5be/0x7e0 [ 306.001475][ T9361] ? sock_poll+0x3e0/0x3e0 [ 306.005928][ T9361] ? bpf_lsm_file_ioctl+0x9/0x10 [ 306.010891][ T9361] ? security_file_ioctl+0x80/0xa0 [ 306.016035][ T9361] ? sock_poll+0x3e0/0x3e0 [ 306.020490][ T9361] __se_sys_ioctl+0xfd/0x170 [ 306.025125][ T9361] do_syscall_64+0x55/0xb0 [ 306.029569][ T9361] ? clear_bhb_loop+0x40/0x90 [ 306.034277][ T9361] ? clear_bhb_loop+0x40/0x90 [ 306.038986][ T9361] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 306.044912][ T9361] RIP: 0033:0x7fb689b9e019 [ 306.049355][ T9361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.068988][ T9361] RSP: 002b:00007fb68aa38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 306.077433][ T9361] RAX: ffffffffffffffda RBX: 00007fb689e25fa0 RCX: 00007fb689b9e019 [ 306.085435][ T9361] RDX: 0000200000000100 RSI: 0000000000008943 RDI: 0000000000000007 [ 306.093439][ T9361] RBP: 00007fb68aa38090 R08: 0000000000000000 R09: 0000000000000000 [ 306.101607][ T9361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.109600][ T9361] R13: 00007fb689e26038 R14: 00007fb689e25fa0 R15: 00007fffcb0f84e8 [ 306.117614][ T9361] [ 306.132285][ T9361] syzkaller0: refused to change device tx_queue_len [ 308.009478][ T9368] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1091'. [ 308.305217][ T9377] netlink: 'syz.1.1093': attribute type 12 has an invalid length. [ 308.326888][ T9377] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1093'. [ 308.346094][ T9376] netlink: 26 bytes leftover after parsing attributes in process `syz.0.1094'. [ 308.482749][ T9379] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1094'. [ 308.502680][ T9379] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1094'. [ 308.537607][ T9376] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1094'. [ 308.784980][ T9389] FAULT_INJECTION: forcing a failure. [ 308.784980][ T9389] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 308.814172][ T9389] CPU: 0 PID: 9389 Comm: syz.0.1097 Not tainted syzkaller #0 [ 308.821646][ T9389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 308.831753][ T9389] Call Trace: [ 308.835075][ T9389] [ 308.838055][ T9389] dump_stack_lvl+0x18c/0x250 [ 308.842789][ T9389] ? show_regs_print_info+0x20/0x20 [ 308.848050][ T9389] ? load_image+0x420/0x420 [ 308.852625][ T9389] ? __lock_acquire+0x7d80/0x7d80 [ 308.857701][ T9389] ? snprintf+0xe9/0x140 [ 308.862000][ T9389] should_fail_ex+0x394/0x4c0 [ 308.866739][ T9389] _copy_to_user+0x2f/0xa0 [ 308.871206][ T9389] simple_read_from_buffer+0xe7/0x150 [ 308.876642][ T9389] proc_fail_nth_read+0x1e8/0x260 [ 308.881721][ T9389] ? proc_fault_inject_write+0x360/0x360 [ 308.887420][ T9389] ? fsnotify_perm+0x271/0x5e0 [ 308.892242][ T9389] ? proc_fault_inject_write+0x360/0x360 [ 308.897935][ T9389] vfs_read+0x298/0x990 [ 308.902181][ T9389] ? kernel_read+0x1e0/0x1e0 [ 308.906822][ T9389] ? __fget_files+0x28/0x460 [ 308.911470][ T9389] ? __fget_files+0x3fc/0x460 [ 308.916217][ T9389] ? __fdget_pos+0x2a3/0x330 [ 308.920870][ T9389] ? ksys_read+0x74/0x260 [ 308.925266][ T9389] ksys_read+0x151/0x260 [ 308.929567][ T9389] ? vfs_write+0x9a0/0x9a0 [ 308.934032][ T9389] ? lockdep_hardirqs_on+0x98/0x150 [ 308.939269][ T9389] do_syscall_64+0x55/0xb0 [ 308.943711][ T9389] ? clear_bhb_loop+0x40/0x90 [ 308.948415][ T9389] ? clear_bhb_loop+0x40/0x90 [ 308.953121][ T9389] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 308.959042][ T9389] RIP: 0033:0x7fcada35e84e [ 308.963480][ T9389] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 308.983222][ T9389] RSP: 002b:00007fcadb20cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 308.991668][ T9389] RAX: ffffffffffffffda RBX: 00007fcadb20d6c0 RCX: 00007fcada35e84e [ 308.999662][ T9389] RDX: 000000000000000f RSI: 00007fcadb20d0a0 RDI: 0000000000000009 [ 309.007665][ T9389] RBP: 00007fcadb20d090 R08: 0000000000000000 R09: 0000000000000000 [ 309.015668][ T9389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.023665][ T9389] R13: 00007fcada626038 R14: 00007fcada625fa0 R15: 00007ffe8396bf78 [ 309.031676][ T9389] [ 309.537760][ T9399] syzkaller0: entered promiscuous mode [ 309.627045][ T9413] team0: Port device team_slave_0 removed [ 310.058146][ T9427] syzkaller0: entered promiscuous mode [ 310.088317][ T9427] syzkaller0: entered allmulticast mode [ 310.097371][ T9422] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 310.117325][ T9422] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 311.825567][ T9399] syz.0.1101 (9399) used greatest stack depth: 18344 bytes left [ 312.109190][ T9448] netlink: 'syz.3.1117': attribute type 10 has an invalid length. [ 312.128781][ T9452] __nla_validate_parse: 5 callbacks suppressed [ 312.128798][ T9452] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1116'. [ 312.135991][ T9448] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1117'. [ 312.174598][ T9452] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1116'. [ 312.192964][ T9443] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1116'. [ 312.664474][ T9448] syzkaller0: entered promiscuous mode [ 312.670398][ T9448] syzkaller0: entered allmulticast mode [ 312.694980][ T9458] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1120'. [ 314.740901][ T9497] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1129'. [ 314.750392][ T9497] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1129'. [ 314.799491][ T9492] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1129'. [ 315.082296][ T9511] delete_channel: no stack [ 315.086982][ T9511] delete_channel: no stack [ 315.127055][ T9511] delete_channel: no stack [ 315.135854][ T9511] delete_channel: no stack [ 315.441165][ T9523] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.1137'. [ 315.578106][ T9525] syzkaller0: entered promiscuous mode [ 315.959979][ T9533] netlink: 'syz.2.1138': attribute type 2 has an invalid length. [ 315.968817][ T9533] netlink: 7906 bytes leftover after parsing attributes in process `syz.2.1138'. [ 317.358676][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.365453][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.231048][ T9552] __nla_validate_parse: 2 callbacks suppressed [ 318.231066][ T9552] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1143'. [ 318.649123][ T9556] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1145'. [ 318.802805][ T9570] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.1148'. [ 320.218433][ T9568] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1148'. [ 320.238303][ T9568] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 320.901988][ T9584] netlink: 26 bytes leftover after parsing attributes in process `syz.1.1153'. [ 321.032153][ T9585] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1153'. [ 321.292120][ T9585] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1153'. [ 321.341969][ T9584] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1153'. [ 321.499067][ T9596] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.1156'. [ 321.630566][ T5780] Bluetooth: hci3: unexpected subevent 0x19 length: 150 > 28 [ 321.640287][ T5780] Bluetooth: hci3: Unable to find connection with handle 0x0000 [ 321.657036][ T9599] netlink: 668 bytes leftover after parsing attributes in process `syz.2.1157'. [ 321.666897][ T9599] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 321.679814][ T9599] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 321.843538][ T9591] syzkaller0: entered promiscuous mode [ 322.959077][ T9616] netlink: 'syz.1.1162': attribute type 3 has an invalid length. [ 323.966351][ T9622] netlink: 'syz.1.1163': attribute type 153 has an invalid length. [ 323.977825][ T9622] __nla_validate_parse: 1 callbacks suppressed [ 323.977841][ T9622] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1163'. [ 324.187189][ T9626] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1164'. [ 325.332056][ T9621] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1163'. [ 325.344837][ T9624] netlink: 26 bytes leftover after parsing attributes in process `syz.2.1164'. [ 325.368547][ T9626] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1164'. [ 325.754898][ T5780] Bluetooth: hci1: unexpected subevent 0x19 length: 150 > 28 [ 325.771905][ T5780] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 325.970595][ T9646] netlink: 'syz.2.1170': attribute type 1 has an invalid length. [ 325.989630][ T9646] netlink: 'syz.2.1170': attribute type 3 has an invalid length. [ 326.008112][ T9646] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1170'. [ 326.253988][ T9658] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 326.261335][ T9658] IPv6: NLM_F_CREATE should be set when creating new route [ 326.268714][ T9658] IPv6: NLM_F_CREATE should be set when creating new route [ 326.276052][ T9658] IPv6: NLM_F_CREATE should be set when creating new route [ 326.288500][ T9659] netlink: 'syz.0.1174': attribute type 9 has an invalid length. [ 326.297355][ T9659] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1174'. [ 326.561000][ T9663] syzkaller0: entered promiscuous mode [ 326.638340][ T5780] Bluetooth: hci0: unexpected subevent 0x19 length: 150 > 28 [ 326.646500][ T5780] Bluetooth: hci0: Unable to find connection with handle 0x0000 [ 330.291156][ T9709] netlink: 'syz.3.1185': attribute type 10 has an invalid length. [ 330.301500][ T9709] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1185'. [ 330.326594][ T9709] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 330.342679][ T9709] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.381863][ T9709] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 330.438904][ T9714] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1190'. [ 330.448379][ T9713] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1190'. [ 330.649231][ T9723] netlink: 'syz.2.1193': attribute type 27 has an invalid length. [ 330.658475][ T9721] netlink: 26 bytes leftover after parsing attributes in process `syz.3.1192'. [ 330.734143][ T9729] netlink: 'syz.1.1194': attribute type 10 has an invalid length. [ 330.759580][ T9724] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1192'. [ 330.771548][ T9729] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1194'. [ 330.785532][ T9729] bond0: entered promiscuous mode [ 330.792677][ T9729] bond_slave_1: entered promiscuous mode [ 330.803434][ T9732] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1194'. [ 330.817350][ T9724] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1192'. [ 330.835827][ T9721] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1192'. [ 331.096078][ T9731] syzkaller0: entered promiscuous mode [ 331.129404][ T9739] netlink: 'syz.1.1198': attribute type 10 has an invalid length. [ 331.138251][ T9739] netlink: 'syz.1.1198': attribute type 16 has an invalid length. [ 331.150861][ T9739] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1198'. [ 331.364975][ T9744] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.379206][ T9744] bond0 (unregistering): Released all slaves [ 334.637869][ T9780] netlink: 'syz.1.1210': attribute type 10 has an invalid length. [ 334.797757][ T9780] team0: Port device geneve1 added [ 335.062735][ T9791] tun0: tun_chr_ioctl cmd 1074025675 [ 335.068438][ T9791] tun0: persist enabled [ 335.075939][ T9791] tun0: tun_chr_ioctl cmd 1074025675 [ 335.081663][ T9791] tun0: persist disabled [ 335.585639][ T9803] syzkaller0: entered promiscuous mode [ 335.598278][ T9807] netlink: 'syz.1.1218': attribute type 13 has an invalid length. [ 335.609596][ T9807] __nla_validate_parse: 9 callbacks suppressed [ 335.609612][ T9807] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1218'. [ 335.921341][ T9818] netlink: 26 bytes leftover after parsing attributes in process `syz.0.1221'. [ 336.043813][ T9823] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1221'. [ 336.062162][ T9823] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1221'. [ 336.085252][ T9818] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1221'. [ 339.360688][ T9832] netlink: 'syz.0.1225': attribute type 10 has an invalid length. [ 339.396270][ T9822] netlink: 'syz.2.1223': attribute type 39 has an invalid length. [ 341.083987][ T9867] netlink: 'syz.2.1227': attribute type 13 has an invalid length. [ 341.097931][ T9867] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1227'. [ 341.117837][ T9866] netlink: 'syz.3.1235': attribute type 17 has an invalid length. [ 341.134012][ T9866] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1235'. [ 341.174071][ T9868] netlink: 207496 bytes leftover after parsing attributes in process `syz.3.1235'. [ 341.367648][ T9871] ÿÿÿÿ: port 1(macsec0) entered blocking state [ 341.384240][ T9871] ÿÿÿÿ: port 1(macsec0) entered disabled state [ 341.390728][ T9871] macsec0: entered allmulticast mode [ 341.412184][ T9871] veth1_macvtap: entered allmulticast mode [ 341.437526][ T9871] macsec0: entered promiscuous mode [ 341.522799][ T9876] €Â0: renamed from batadv_slave_1 (while UP) [ 341.556073][ T9879] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.1239'. [ 341.754262][ T9873] syzkaller0: entered promiscuous mode [ 341.882803][ T9888] netlink: 'syz.1.1242': attribute type 12 has an invalid length. [ 341.895466][ T9888] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1242'. [ 342.082082][ T5780] Bluetooth: hci0: unexpected subevent 0x19 length: 150 > 28 [ 342.090211][ T5780] Bluetooth: hci0: Unable to find connection with handle 0x0000 [ 342.164324][ T9894] netlink: 'syz.0.1245': attribute type 13 has an invalid length. [ 342.172509][ T9894] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1245'. [ 343.967525][ T9900] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1247'. [ 344.406630][ T9917] netlink: 'syz.1.1252': attribute type 10 has an invalid length. [ 344.417821][ T9917] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1252'. [ 344.430632][ T9917] hsr0: entered promiscuous mode [ 344.437299][ T9916] netlink: 'syz.1.1252': attribute type 10 has an invalid length. [ 344.449643][ T9916] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1252'. [ 344.761302][ T5780] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 344.917968][ T5780] Bluetooth: hci2: unexpected subevent 0x19 length: 150 > 28 [ 344.932977][ T5780] Bluetooth: hci2: Unable to find connection with handle 0x0000 [ 345.220451][ T9936] netlink: 'syz.1.1258': attribute type 1 has an invalid length. [ 345.243663][ T9936] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.1258'. [ 345.592265][ T9947] netlink: 'syz.3.1263': attribute type 6 has an invalid length. [ 345.881761][ T9943] syzkaller0: entered promiscuous mode [ 345.961231][ T5780] Bluetooth: hci1: unexpected subevent 0x19 length: 150 > 28 [ 345.968930][ T5780] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 346.221246][ T9962] __nla_validate_parse: 1 callbacks suppressed [ 346.221327][ T9962] netlink: 826 bytes leftover after parsing attributes in process `syz.3.1267'. [ 348.363223][ T9969] netlink: 'syz.3.1270': attribute type 3 has an invalid length. [ 348.371190][ T9969] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1270'. [ 348.988705][ T5780] Bluetooth: hci1: unexpected subevent 0x19 length: 150 > 28 [ 348.996381][ T5780] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 349.084842][ T9990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.754841][T10001] syzkaller0: entered promiscuous mode [ 349.789850][T10010] netlink: 'syz.0.1284': attribute type 6 has an invalid length. [ 349.805673][T10010] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1284'. [ 350.776104][ T5780] Bluetooth: hci0: unexpected subevent 0x19 length: 150 > 28 [ 350.784342][ T5780] Bluetooth: hci0: Unable to find connection with handle 0x0000 [ 353.079485][T10058] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.1295'. [ 354.639073][T10077] syzkaller0: entered promiscuous mode [ 355.945323][ T5780] Bluetooth: hci0: unexpected subevent 0x19 length: 150 > 28 [ 355.953093][ T5780] Bluetooth: hci0: Unable to find connection with handle 0x0000 [ 359.144710][ T5780] Bluetooth: hci3: unexpected subevent 0x19 length: 150 > 28 [ 359.152534][ T5780] Bluetooth: hci3: Unable to find connection with handle 0x0000 [ 359.844929][ T8738] tipc: Subscription rejected, illegal request [ 359.988424][T10165] syzkaller0: entered promiscuous mode [ 360.955293][ T5780] Bluetooth: hci2: unexpected subevent 0x19 length: 150 > 28 [ 360.963215][ T5780] Bluetooth: hci2: Unable to find connection with handle 0x0000 [ 362.432178][T10200] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1332'. [ 363.839610][T10200] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1332'. [ 364.725967][T10225] netlink: 'syz.3.1340': attribute type 21 has an invalid length. [ 364.764181][ T5780] Bluetooth: hci2: unexpected subevent 0x19 length: 150 > 28 [ 364.771696][ T5780] Bluetooth: hci2: Unable to find connection with handle 0x0000 [ 364.785251][T10225] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1340'. [ 364.804769][T10225] netlink: 'syz.3.1340': attribute type 4 has an invalid length. [ 364.819670][T10225] netlink: 'syz.3.1340': attribute type 3 has an invalid length. [ 364.844511][T10225] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1340'. [ 365.386691][T10240] syzkaller0: entered promiscuous mode [ 365.485604][ T5780] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 367.830342][T10253] syzkaller0: entered promiscuous mode [ 367.911552][ T5780] Bluetooth: hci1: unexpected subevent 0x19 length: 150 > 28 [ 367.919509][ T5780] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 368.976501][T10286] netlink: 'syz.2.1358': attribute type 1 has an invalid length. [ 368.986442][T10286] netlink: 'syz.2.1358': attribute type 3 has an invalid length. [ 369.004639][T10286] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1358'. [ 372.714248][T10337] netlink: 154876 bytes leftover after parsing attributes in process `syz.0.1372'. [ 372.759478][T10325] syzkaller0: entered promiscuous mode [ 372.796894][T10336] netlink: 'syz.3.1374': attribute type 11 has an invalid length. [ 372.804938][T10336] netlink: 'syz.3.1374': attribute type 1 has an invalid length. [ 372.813485][T10336] netlink: 'syz.3.1374': attribute type 1 has an invalid length. [ 372.821473][T10336] netlink: 'syz.3.1374': attribute type 2 has an invalid length. [ 372.830558][T10336] netlink: 198100 bytes leftover after parsing attributes in process `syz.3.1374'. [ 372.910026][T10341] netlink: 'syz.2.1375': attribute type 17 has an invalid length. [ 372.918122][T10341] netlink: 'syz.2.1375': attribute type 16 has an invalid length. [ 372.927290][T10341] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1375'. [ 373.580886][T10348] netlink: 'syz.0.1377': attribute type 63 has an invalid length. [ 373.602584][T10348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1377'. [ 375.105359][T10345] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1376'. [ 375.190613][T10345] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.256398][T10345] bond0 (unregistering): Released all slaves [ 375.305666][T10348] netlink: 'syz.0.1377': attribute type 63 has an invalid length. [ 375.320840][T10348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1377'. [ 375.948480][T10369] netlink: 26 bytes leftover after parsing attributes in process `syz.0.1384'. [ 376.077269][T10372] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1384'. [ 376.232283][T10372] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1384'. [ 376.279845][T10369] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1384'. [ 376.611659][T10377] syzkaller0: entered promiscuous mode [ 378.798123][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.808222][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.066837][T10387] veth1_to_bond: entered allmulticast mode [ 379.258063][T10417] netlink: 26 bytes leftover after parsing attributes in process `syz.1.1396'. [ 379.374579][T10422] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1396'. [ 379.384110][T10422] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1396'. [ 379.400094][T10417] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1396'. [ 380.146187][T10446] syzkaller0: entered promiscuous mode [ 380.168974][T10454] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1407'. [ 380.182275][T10452] delete_channel: no stack [ 383.257287][T10463] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1410'. [ 384.905922][T10459] netlink: 26 bytes leftover after parsing attributes in process `syz.0.1410'. [ 384.916160][T10463] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1410'. [ 384.925574][T10466] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1412'. [ 385.123415][T10474] netlink: 'syz.3.1415': attribute type 8 has an invalid length. [ 385.152400][T10474] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.1415'. [ 385.227443][ T5780] Bluetooth: hci3: unexpected subevent 0x19 length: 150 > 28 [ 385.235232][ T5780] Bluetooth: hci3: Invalid connection link type handle 0x0000 [ 385.629396][T10494] netlink: 26 bytes leftover after parsing attributes in process `syz.0.1422'. [ 385.743047][T10497] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1422'. [ 385.762216][T10497] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1422'. [ 385.784125][T10494] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1422'. [ 385.964154][T10499] syzkaller0: entered promiscuous mode [ 386.637556][T10517] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.1429'. [ 386.662091][T10517] netlink: 'syz.1.1429': attribute type 2 has an invalid length. [ 386.734355][ T5780] Bluetooth: hci0: unexpected subevent 0x19 length: 150 > 28 [ 386.742073][ T5780] Bluetooth: hci0: Unable to find connection with handle 0x0000 [ 388.478066][T10529] netlink: 'syz.2.1433': attribute type 21 has an invalid length. [ 388.501940][T10529] netlink: 'syz.2.1433': attribute type 1 has an invalid length. [ 388.520325][T10529] netlink: 16090 bytes leftover after parsing attributes in process `syz.2.1433'. [ 388.755422][T10540] netlink: 'syz.3.1437': attribute type 1 has an invalid length. [ 388.782693][T10540] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.1437'. [ 388.788025][T10541] netlink: 'syz.3.1437': attribute type 27 has an invalid length. [ 389.045243][ T5780] Bluetooth: hci0: unexpected subevent 0x19 length: 150 > 28 [ 389.052881][ T5780] Bluetooth: hci0: Unable to find connection with handle 0x0000 [ 389.620957][T10571] syzkaller0: entered promiscuous mode [ 390.049068][T10585] netlink: 'syz.0.1451': attribute type 39 has an invalid length. [ 390.398217][ T5780] Bluetooth: hci1: unexpected subevent 0x19 length: 150 > 28 [ 390.406330][ T5780] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 390.474958][T10591] netlink: 149044 bytes leftover after parsing attributes in process `syz.2.1454'. [ 391.133858][T10600] [ 391.136900][T10600] ============================= [ 391.141950][T10600] WARNING: suspicious RCU usage [ 391.146856][T10600] syzkaller #0 Not tainted [ 391.151305][T10600] ----------------------------- [ 391.156286][T10600] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 391.165016][T10600] [ 391.165016][T10600] other info that might help us debug this: [ 391.165016][T10600] [ 391.175386][T10600] [ 391.175386][T10600] rcu_scheduler_active = 2, debug_locks = 1 [ 391.183599][T10600] 1 lock held by syz.2.1456/10600: [ 391.188794][T10600] #0: ffffffff8d131f80 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 391.199328][T10600] [ 391.199328][T10600] stack backtrace: [ 391.205339][T10600] CPU: 1 PID: 10600 Comm: syz.2.1456 Not tainted syzkaller #0 [ 391.212852][T10600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 391.222961][T10600] Call Trace: [ 391.226295][T10600] [ 391.229267][T10600] dump_stack_lvl+0x18c/0x250 [ 391.234076][T10600] ? show_regs_print_info+0x20/0x20 [ 391.239400][T10600] ? load_image+0x420/0x420 [ 391.243983][T10600] ? __lock_acquire+0x1262/0x7d80 [ 391.249135][T10600] lockdep_rcu_suspicious+0x1e1/0x300 [ 391.254568][T10600] get_callchain_entry+0x2a9/0x3c0 [ 391.259767][T10600] get_perf_callchain+0xc6/0x510 [ 391.264787][T10600] ? put_callchain_entry+0xb0/0xb0 [ 391.269964][T10600] ? perf_trace_lock+0xfc/0x3b0 [ 391.274887][T10600] __bpf_get_stack+0x2e4/0x540 [ 391.279719][T10600] ? stack_map_get_build_id_offset+0x720/0x720 [ 391.285949][T10600] ? bpf_prog_1fbb33774cbc1240_F+0x34/0x36 [ 391.291803][T10600] bpf_get_stack_raw_tp+0x1a4/0x210 [ 391.297097][T10600] bpf_prog_1fbb33774cbc1240_F+0x34/0x36 [ 391.302763][T10600] bpf_prog_46c89e342bf12ef6+0x20/0x29 [ 391.308279][T10600] bpf_prog_run_pin_on_cpu+0x64/0x150 [ 391.313789][T10600] bpf_prog_test_run_syscall+0x320/0x4b0 [ 391.319469][T10600] ? sock_gen_cookie+0x60/0x60 [ 391.324276][T10600] ? sock_gen_cookie+0x60/0x60 [ 391.329080][T10600] bpf_prog_test_run+0x31f/0x390 [ 391.334053][T10600] __sys_bpf+0x49d/0x890 [ 391.338359][T10600] ? bpf_link_show_fdinfo+0x390/0x390 [ 391.343797][T10600] ? lock_chain_count+0x20/0x20 [ 391.348991][T10600] __x64_sys_bpf+0x7c/0x90 [ 391.353556][T10600] do_syscall_64+0x55/0xb0 [ 391.358016][T10600] ? clear_bhb_loop+0x40/0x90 [ 391.362851][T10600] ? clear_bhb_loop+0x40/0x90 [ 391.367568][T10600] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 391.373581][T10600] RIP: 0033:0x7fb689b9e019 [ 391.378035][T10600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.397689][T10600] RSP: 002b:00007fb68aa38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 391.406230][T10600] RAX: ffffffffffffffda RBX: 00007fb689e25fa0 RCX: 00007fb689b9e019 [ 391.414236][T10600] RDX: 000000000000000c RSI: 0000200000002b80 RDI: 000000000000000a [ 391.422242][T10600] RBP: 00007fb689c3500c R08: 0000000000000000 R09: 0000000000000000 [ 391.430245][T10600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.438244][T10600] R13: 00007fb689e26038 R14: 00007fb689e25fa0 R15: 00007fffcb0f84e8 [ 391.446349][T10600]