last executing test programs: 11.363892248s ago: executing program 2 (id=3436): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x4a0c789, 0x0, 0x1, 0x8e, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0xc, 0x1, 0x0, r0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x4080b000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x8, 0xf}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7, r6}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0x1, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000001c010000000012ff4602b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="00000000ff7f00009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x7f, 0x0, 0x0, 0x40f00, 0x8, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x2, 0x34f9, 0x10}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000540)=[{0x2, 0x2, 0x7, 0x6}, {0x2, 0x1, 0xe, 0xa}, {0x3, 0x4, 0xe, 0xa}, {0x1, 0x1, 0x9, 0x2}, {0x4, 0x1, 0x3, 0xa}, {0x3, 0x4, 0x0, 0xa}], 0x10, 0x8}, 0x94) r9 = socket$kcm(0x15, 0x5, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000980)={@fallback=r5, 0x9, 0x1, 0x6, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000740)=[0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000009c0)={@fallback=r9, r5, 0x10, 0x12, r3, @void, @value=r7, @void, @void, r10}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) recvmsg$unix(r11, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r13, &(0x7f0000000180)=ANY=[@ANYRES8=r12, @ANYBLOB="3ee901"], 0x9a) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@cgroup=r13, r2, 0xa, 0x4, 0x0, @void, @value=r2, @void, @void, r10}, 0x20) syz_clone(0x50205100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xaa45e80, &(0x7f0000000000)="6c82122e02dcde20bddd5e109d76699183d241f047f6809bc13ed25d1b6c02fa0178f6409c046930972382ad04a8e42a901e6c12964fbcc5301b5b5e98511f4ca7d2e71c462c0c8381c6e0223c3e05527330f0509c73da3a306778858222ca67e947f46cdb30cdd1c7a016c7d53adff60b69a30cbf8d32a829795d3b8761d17909417b241df7acedb0f7c2a8ef05fc17734be804bd2bbbb43440ff335b38b47a0149096ab1d0b7e0bdde5c4c989bba0fafaf9373e462a94e6f77666ef26c5c9a2f31df0740b7395e000000000000000000", 0xd1, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="1c2fdce8280512e4d07d4d1fe6738be35d4e51e33e8637a842f839e485c6a8ce064a19c468595b21272860c59b90b3a7bd7748a44c4d0f6c324dc9152ba83aafaf28416cc5c28759c5492a6e47d9ed6ce99a9dc69d7d83530b729b4b64318ad92a30afb3f9b6f8b52ef479eea20bece66f") bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=r14, 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000480)=r14, 0x4) 11.024268006s ago: executing program 4 (id=3437): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x22405, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f00000001c0), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000780)="b9ff05000000008c9c18ed0f6fd2", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 10.501086874s ago: executing program 4 (id=3440): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x40000100) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x8, 0x7, 0xb, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4108, 0x100c}], 0x1}, 0x2002) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b05d25a806f8c6394f90824fc602f0000000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 10.249237907s ago: executing program 2 (id=3443): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8e, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)=@caif=@util={0x25, "a2a8a5222ff1140b1db69ccc6131b57f"}, 0x80, 0x0}, 0x448c0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000060000007f00000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000000)=0x18, &(0x7f0000000080)='%ps \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x3ff, r2}, 0x38) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000280)={r0, r3}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000c700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f00000002c0)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff018}, {0x6, 0x2, 0x0, 0x80100000}]}) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000240)={r6, r5}, 0xc) openat$cgroup_subtree(r5, &(0x7f0000000040), 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r5}, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 9.487699216s ago: executing program 4 (id=3446): r0 = getpid() r1 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x2) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0x5}, @typedef={0x2, 0x0, 0x0, 0x8, 0x2}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x5f, 0x5f, 0x61]}}, 0x0, 0x52}, 0x28) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x8) socket$kcm(0x29, 0x2, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) 5.359835801s ago: executing program 1 (id=3453): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000080)={0x0, 0x5, [@broadcast, @multicast, @random="77eb74b813cd", @multicast, @broadcast]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) 5.251135127s ago: executing program 2 (id=3454): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000700001ec00037153e370a00018025641d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x5, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r6, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x4) sendmsg$inet(r5, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x0, @loopback, 0x2}}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000004c0)="fd924496252b928e0d8a649ae7164f853397785c573551dcd1ac43b3b25fb17362f1c320c2febcbd09a0753774e103347003b49552051552942b91b5", 0x3c}, {&(0x7f0000000540)="63545bb27a849fb211553bdb1c9f851c88d5249a461ade504b4b1f966f3d48ec21da104e234f6b71a83b3347bbfa90fec62f436f38d29c0c6bca8d57a6f1edee932262db85d7241f9a6839bad2ba417c2d1bfa3a872cb2e0f2edd77e3943c8a6a5f64438412da92d1ebf92c43150752a9136a6bd4b578965444a197b67acec8b3f4267bae98a2c215633235409", 0x8d}, {&(0x7f0000000600)="93fea3082e9c5f4314b9c443684a1ec5b92a81a2f9fef8321ae7bbcf58872acdf93e9e7bab7b366d5892f0b6f6a392c3664c9c980b196f06bdf7943c9eb253267ab337bc563dd5bbdca8c37f250dd6174a757d28cfe9284a09c5c161c84a", 0x5e}, {&(0x7f00000007c0)="b15d86af457ab0ce07895d00a640fcbd258a40204abe09b8dec84f52ca90b486c4631640b47f6836c5f12150be896177683278817ed8a15f12c0e4faca1be6356fe154693ddaab9ae0d1bf1b5e6ccf3edd9fd1d59017d8def1a6fc2330635fd2e21b30a8af55df4ecb174c17b48c7cae57c1", 0x72}, {&(0x7f0000000880)="69a90200cb8c337026eaccff6e59c42795227f9b39be5716090679e4fc507b4cf695abc01e2b73a29aed2813efb68291df5f268608d168f85586530ef5280440977913019d051628a1fd48f04cfc4dad8a7ec0cb838b78921af874dce0396e4fad5a2943df1e61a2190caa57d95d41deb72fd0fbe17d996d55a963fa10bce81906cd48557cb0cf523bc3e17807c93b2d", 0x90}, {&(0x7f0000000940)="78fa03e4816ca640bbb7cfd745765198c6692dea3ae0df39ba5bdb7398ead145077235d5021d3bd5da59f599437c945f68b3361b6fab1f1ba57296eabb43effd2f0b6375f5d0a087764e7a5cab57a53b324d5977a8d01670", 0x58}, {&(0x7f0000000a00)="1395a182a412a1b95954b5c10a49a85a506eb10741920ac863f99a15be02333e7503be3b4fa8003542c2ab12ee27e6e74cfe015c21631b1cc58bfd7ce9fb7d8377", 0x41}, {&(0x7f0000000a80)}], 0x8}, 0x80) perf_event_open$cgroup(&(0x7f0000001200)={0x1, 0x80, 0x4, 0xc8, 0x6, 0x2, 0x0, 0x40f, 0x80000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x6, 0x1}, 0xa00, 0xfffffffffffffffe, 0x1ff, 0x7, 0x9f3a, 0x9, 0x400, 0x0, 0xfffff4a7, 0x0, 0xd56}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r8 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff) r9 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r9, 0x0, 0x480, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001100)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000a112e61b1444057cc0db1eb4696b49d2dd198c16027d43f01881d9621262f8de7d6a43d898aad61f4ad9d3d7d78cc8328388568b28b97a7734da123a61ff8068a1b03ef626499edbbd214a387b244536c693217d0b99f2658d454319fcfd1633c6e4420f6ad5241b05bee7db1acb98f2af5919e22a85cf0eed9e84e6d270872e0e61927607a8c111af979fbf8d29a9f1887f90d8a497d2f97e77b993a24e1dc4a1ebbc987f817dde0f399bcdbacf71d47127c5f7430c1a38407fe8c6d2950d9c"], &(0x7f00000009c0)='syzkaller\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0x4, &(0x7f0000000740)=ANY=[@ANYRES64=0x0], &(0x7f0000000300)='syzkaller\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000680)={r10}) sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703360000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) 4.858741117s ago: executing program 1 (id=3456): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000300000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 4.304007926s ago: executing program 1 (id=3457): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061043c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r2 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x5411, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) close(r1) socket$kcm(0x2, 0x5, 0x84) r4 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r4, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="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", 0xfffffe4f}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0xff00) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000002280)={'dvmrp0\x00', @random}) 4.155891684s ago: executing program 0 (id=3458): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40, 0x32}, 0x1}}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x7, 0x2}]}}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x80000001, 0x5, 0xd, 0xfffffffc, 0x0, 0x0, 0x3, 0x0, 0x1000000000007}, 0x0, 0x9, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a0000008000000006"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000effd00100000000040007d007010000080700007500fcff0000000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f0000000a00)=""/250, 0x0, 0x0, '\x00', r7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002640)={{r2, 0xffffffffffffffff}, &(0x7f00000025c0), &(0x7f0000002600)=r3}, 0x20) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r10 = socket$kcm(0x2, 0x6, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x3e, &(0x7f00000002c0)=r9, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002740)={0x11, 0x1, &(0x7f0000000080)=@raw=[@generic={0xae, 0x4, 0xc, 0x930, 0x2b}], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x1000, &(0x7f00000015c0)=""/4096, 0x40f00, 0x8, '\x00', r7, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000002680)=[r2, r8, r9], &(0x7f00000026c0)=[{0x3, 0x3, 0x5}, {0x3, 0x4, 0x3, 0x4}, {0x4, 0x1, 0x3, 0xb}, {0x1, 0x1, 0xa, 0xc}, {0x2, 0x4, 0x10, 0x6}, {0x5, 0x5, 0x1, 0x6}], 0x10, 0x3}, 0x94) 2.711972289s ago: executing program 2 (id=3459): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={r1}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={0x0, 0x0}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x1001, 0x2, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000016c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd887, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x88, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r3, 0x0, 0xe, 0x0, &(0x7f0000000240)="e46647c9d9b8e9a2f2bb70da5800", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x26, 0x26, 0x3, [@datasec={0x2, 0x1, 0x0, 0xf, 0x1, [{0x3, 0x101}], 'H'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], 't'}]}, {0x0, [0x2e]}}, &(0x7f00000003c0)=""/4096, 0x43, 0x1000, 0x1}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x3, 0x3a) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f00000024c0)={0x0, r2}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002480)={&(0x7f00000013c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0xb, [@restrict={0x1, 0x0, 0x0, 0xb, 0x5}, @enum={0xa, 0x5, 0x0, 0x6, 0x4, [{0x6, 0x6}, {0x4, 0x1}, {0x3, 0x5c30ec99}, {0x8, 0x4}, {0xc, 0x46}]}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x5}, @var={0xb, 0x0, 0x0, 0xe, 0x2}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x61, 0x30, 0x48, 0x30, 0x0, 0x30, 0x61, 0x30, 0x30]}}, &(0x7f0000001480)=""/4096, 0x9b, 0x1000, 0x0, 0x3, 0x10000, @value=r4}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875"], 0xfe1b) socket$kcm(0x10, 0x2, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)=@generic={&(0x7f0000000100)='./file0\x00', r2}, 0x18) socket$kcm(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) 2.710461909s ago: executing program 3 (id=3460): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0xe, 0xffffffab, &(0x7f0000000240)="d2ff03066003008cb89e08d988a8", 0x0, 0xa653, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x9) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x1b, &(0x7f0000000300)=[{&(0x7f0000000540)="d80000001c0081054e81f782db4402000a0008040e000000040d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x24000814) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000000)={'macvlan0\x00'}) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000001cc0)) 2.707998899s ago: executing program 0 (id=3461): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000007f0000000000000000000000000800e78b50bb9f355b3e11932ef52ad0094826282f56019bff01e196731afd40056f95d5af9da3210257235e0a21e20bd12bf783ccdff6f0088636a941fdbb37ec4595276793ccf03cf0bbe88e2859b32dda53157e2e50456b856f5ee2ff419dd77e9c4c33180c58ff2adca4db5624a23c0df7407c51b932417643692656385ff2065cb4bc320b0321a86311000400000000000020960ad07925ebd1c809a0b169ca6666773f987401a6f9388ea965"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa000000000000791008000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000bf03000000000000850000000c000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x14, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) (async) r4 = perf_event_open$cgroup(&(0x7f0000000580)={0x4, 0x80, 0x5, 0x1, 0xff, 0x9, 0x0, 0x0, 0x40, 0x10, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000540)}, 0xd5b070c811886402, 0x0, 0x15e, 0x0, 0x8001, 0x3dc, 0xe, 0x0, 0xffffff45, 0x0, 0x77f}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, r4, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) (async) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f95e24fc60040068000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$tipc(r0, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) 2.612425074s ago: executing program 1 (id=3462): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$kcm(0x10, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x23, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020786c250000000000588ada401af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b0000850000007300000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000280000000180000000000000040000cd1591800e03000500000000000000f4ffffffff0c04000000000000000000000a02000000000400006100"], 0x0, 0x46}, 0x28) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x400c84c) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89ed, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) gettid() syz_clone(0x410a4400, 0x0, 0xfffffffffffffd56, 0x0, 0x0, 0xffffffffffffffff) 2.377491606s ago: executing program 0 (id=3463): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/191, 0xbf}, {&(0x7f0000000100)=""/15, 0xf}, {&(0x7f0000000140)=""/89, 0x59}, {&(0x7f00000002c0)=""/95, 0x5f}], 0x4, &(0x7f00000003c0)=""/60, 0x3c}, 0x2020) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1000000000000, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x11, 0x2, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x80}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="1800000069006bcd8e3fe3dc6e3640030000000100000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7fff}, [@call={0x85, 0x0, 0x0, 0xab}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, 0x0, 0x84, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x810000a6, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 2.10899546s ago: executing program 3 (id=3464): socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="07000000040000000001000004000000200000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0], 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffef, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f00000000c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3be4664d327d90424d5503002800"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030020000b12d25a80648c2594f90124fc60100c074002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000001280), 0x4) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x3, 0x5, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x23, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89ed, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)}, 0x120) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed009875f37538e486dd0000000003"], 0xfe1b) recvmsg(r3, &(0x7f0000003e40)={0x0, 0x0, &(0x7f0000003d40)=[{0x0}, {&(0x7f0000000a80)=""/156, 0x9c}, {&(0x7f00000001c0)=""/43, 0x2b}, {&(0x7f0000000b40)=""/167, 0xa7}, {&(0x7f0000000c00)=""/23, 0x17}, {&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/149, 0x95}], 0x8, &(0x7f0000003e00)=""/3, 0x3}, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f00000037c0)=ANY=[@ANYBLOB="1c0000005f00071b189da80400008000000000af1f"], 0xfe33) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) 1.73696427s ago: executing program 2 (id=3465): perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x10001) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000002c0), 0x4}, 0x100c, 0x7, 0x0, 0x2, 0xffffffff, 0x7, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x29, 0x0, &(0x7f0000000280)="4e6f466c21233bd7f42b4dc8611a1e1088672ffa9153177f95ca88f2b010232a390e9e80d6c527972f", 0x0, 0x2, 0x0, 0x7}, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000b40), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0800000000000000000006000201000000000000", @ANYRES32, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000002b551d"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90224fc60100c03", 0x17}], 0x1}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500000000000018490000fe"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x37, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x4, 0x3}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="1c00000018"], 0xfe33) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x8, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) 1.557327369s ago: executing program 4 (id=3466): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$kcm(0x2, 0x3, 0x84) (async) r3 = socket$kcm(0x2, 0x3, 0x84) r4 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c", @ANYRES32, @ANYRES8=r4], 0xfe33) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000080000000700000000080500", @ANYRES32, @ANYBLOB="00000000000b000e0016d8079e8abd12f50000000000000000000000009b2d29c8796d577d84ddb5917f6e41537ff09988a6e1696731ae23d8ded07a1ea9815b02000000b9aaa8f9c09a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000280)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(r6, &(0x7f0000000280)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f00000000c0), 0x12) (async) write$cgroup_int(r7, &(0x7f00000000c0), 0x12) write$cgroup_int(r7, &(0x7f0000000100)=0x1, 0x12) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000009000080850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149c, 0x503, 0xffffff81, 0x0, 0x0, 0x0, 0x7, 0xffff80fe}, 0x7) r9 = socket$kcm(0x10, 0x5, 0x0) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000100)=[{&(0x7f0000000380)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000800)=[{0x0, 0x4000}], 0x1}, 0x40012100) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="20000100", @ANYRES32, @ANYRESOCT=r7, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0006000000"], 0x50) close(r2) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000380)={r3}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000380)={r3}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000003c0)={r10, r2}) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000003c0)={r10, r2}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x890b, &(0x7f0000000100)) (async) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x890b, &(0x7f0000000100)) r11 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r11, 0x6, 0x21, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r11, 0x6, 0x21, 0x0, 0x0) r12 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000200)="d80000002c0081024e81f782db44b9800ffa80b6379d1000e8fe55a1180015000600142603600e120900210000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809f6e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 1.186051209s ago: executing program 0 (id=3467): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000010600000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 928.190172ms ago: executing program 3 (id=3468): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x3, 0x0, 0x10, 0xfc, 0x0, 0x0, 0x200, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0xc8, 0x9, 0x7, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x8, 0x0, 0x200000000000}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6334ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa3c"], 0xfdef) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) (async) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') ioctl$TUNGETFEATURES(r2, 0x5452, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) (async) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfdef) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESHEX, @ANYRESDEC, @ANYRES64], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x61, 0x0, 0x0, 0x10, 0xfffffffc}, 0x48) 836.040687ms ago: executing program 2 (id=3469): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES64=r3, @ANYRES16=r2], 0xfdef) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000100)={r0}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce947ee2b49e33538afaeb2713f450ebd010a20ff27fff0000000000000000", 0x89}], 0x1}, 0xff0f000000000000) openat$cgroup_int(r4, &(0x7f0000000080)='cpuset.cpu_exclusive\x00', 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="c00e020032000b35d25a806f8c6394f90524fc6004200100002091000535a51771910f0041b080c13715e63e370248018000f01700d1bd3436", 0x39}, {&(0x7f0000000180)="46cb41169116b97cec137035b856e8f8c63f512185201d7fc8e8573804ea7f310c1decda35d40c8b359c48ad0a034a41dacd1ab143ebef1fe56bd41c355f2282302b947115a8417e1d5286efbc29137c96b8ec7d3d06bc71e962622e", 0x5c}], 0x2}, 0x0) 766.86013ms ago: executing program 4 (id=3470): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016", 0x33}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x40, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000080), &(0x7f0000000540)=""/210}, 0x20) r1 = socket$kcm(0x11, 0x2, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x8) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f0000000b80)=r1, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x4, 0x0, 0xffff}}, 0x80, 0x0}, 0x408c5) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x33fe0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016", 0x33}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x40, 0x40, 0x41}, 0x50) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000080), &(0x7f0000000540)=""/210}, 0x20) (async) socket$kcm(0x11, 0x2, 0x0) (async) socket$kcm(0x11, 0x2, 0x0) (async) socket$kcm(0x11, 0x200000000000002, 0x300) (async) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x8) (async) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f0000000b80)=r1, 0x4) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x4, 0x0, 0xffff}}, 0x80, 0x0}, 0x408c5) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x33fe0) (async) 681.916035ms ago: executing program 0 (id=3471): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'netpci0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000080)) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f00000000c0)) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r1}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xe2, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x91, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1b, 0x4, &(0x7f0000000180)=@raw=[@generic={0x7, 0x1, 0x9, 0x8, 0x2}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffe}, @ldst={0x1, 0x0, 0x2, 0x4, 0x6, 0x8, 0x8}], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x60, '\x00', r3, @fallback=0x38, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x4, 0xa, 0x28d4, 0x5}, 0x10, r5, 0xffffffffffffffff, 0x4, &(0x7f00000005c0)=[r2, r2, r2, r2, r2, r2], &(0x7f0000000600)=[{0x3, 0x4, 0x3, 0xb}, {0x4, 0x3, 0x3, 0x6}, {0x1, 0x3, 0x0, 0x8}, {0x5, 0x5, 0xf, 0x8}], 0x10, 0x1}, 0x94) r6 = openat$cgroup_procs(r2, &(0x7f0000000700)='cgroup.procs\x00', 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={&(0x7f0000000740)="5f9b281e489d97c7fba7a78a9ef76ecd332a946af4d672e35b", &(0x7f0000000780), &(0x7f00000007c0)="da05ba56d801562849eff411a5c2e046e376dc3d37e218f2bd7c6dd728af1983d363e427c1ece89c030825a44e3921ad9f0242c11ec08ce54c86f6c2b8ccd5a2db1145e0068ba5fd26290c6c1488d075ca455eca06d5c11e1a6d31100a1c775718473ac78f1f1ef6687544aa3eb3eed1f7f6c8d60e17c212ed33bfafb2ca4673b2d8aeba95f75920644c2996944b3f893bbdefbdda205f73d9d64ca41f6e3c3f305902f9c78f25f906cfc58fdc0a6cad5a64dbe3f5f6d9ec4e365f11a7aad4a33d55acbe", &(0x7f00000008c0)="3329ff9186", 0x80000001, r2}, 0x38) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@bloom_filter={0x1e, 0x6, 0x5, 0x1, 0x100, r2, 0x0, '\x00', r3, r2, 0x2, 0x4, 0x3, 0xc}, 0x50) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r5, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@bloom_filter={0x1e, 0x78ad4a21, 0x80000001, 0x0, 0x110, r7, 0x8001, '\x00', r3, r8, 0x1, 0x3, 0x0, 0x6}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000c80)={&(0x7f0000000a80)="f2523fbd2af24217b3a979fad88b4f54a3f38aebea79c92dbaa53cd0ba89bbbabf402ff0c10068a88b7752518887511924bc8d653b67ffc400e3ae311fe8cdaa6356fca40556f0d64f404ec0ba27d7fa5cb180b1ade9bb332000bd4063aef1f634391433f7c9b4b49645aec3f83bf53ea804d740cab47eb295", &(0x7f0000000b00)=""/146, &(0x7f0000000bc0)="dcdb1b4a4c474effd537b0fa08dad42fa12af168ae7e89327d581abce7e52164dc53335d2ffe7c145919fc2fbf07076095db8eb8c7b255559177ba68479cb757d8c20aea", &(0x7f0000000c40)="c3f3af249f161e42a617d9a15cce2ca3319299fc45779de3ed88374ecec8a9d179881c1923869aa99b48d456b14175a6c63e8975e0", 0x4, r7, 0x4}, 0x38) recvmsg(r2, &(0x7f0000000f00)={&(0x7f0000000cc0)=@nfc_llcp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000d40)=""/42, 0x2a}, {&(0x7f0000000d80)}, {&(0x7f0000000dc0)}], 0x3, &(0x7f0000000e40)=""/149, 0x95}, 0x10000) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000f40)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x7, '\x00', 0x0, r8, 0x5, 0x5, 0x1}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000fc0)={0x2, 0x4, 0x8, 0x1, 0x80, r10, 0x709, '\x00', 0x0, r4, 0x1, 0x2}, 0x50) r11 = openat$cgroup_type(r2, &(0x7f0000001040), 0x2, 0x0) write$cgroup_type(r11, &(0x7f0000001080), 0x9) write$cgroup_type(r11, &(0x7f00000010c0), 0x9) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000021c0)={r2, 0x20, &(0x7f0000002180)={&(0x7f0000001100)=""/4096, 0x1000, 0x0, &(0x7f0000002100)=""/122, 0x7a}}, 0x10) syz_clone(0x10000000, &(0x7f0000002200)="32ba9d800f26ae599d0be23f113f5403b320887e", 0x14, &(0x7f0000002240), &(0x7f0000002280), &(0x7f00000022c0)) perf_event_open$cgroup(&(0x7f0000002340)={0x0, 0x80, 0x3, 0x5a, 0x40, 0xfb, 0x0, 0x2, 0x10001, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000002300), 0x3}, 0x800c, 0x7, 0xa, 0x2, 0xb, 0x7, 0x1, 0x0, 0x1, 0x0, 0x8}, r2, 0xe, r2, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@bloom_filter={0x1e, 0x6, 0x401, 0x3, 0x1100, r9, 0x4, '\x00', r3, r4, 0x1, 0x0, 0x4, 0xf}, 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) write$cgroup_pid(r6, &(0x7f0000002480), 0x12) r12 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000024c0)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000002500)={r12}, 0x8) 631.357947ms ago: executing program 3 (id=3472): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xd, 0x2, 0x5, 0xc, 0x0, 0x3, 0x22004, 0xa, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7f, 0x4, @perf_config_ext={0xff, 0x9}, 0x200, 0x101, 0x5, 0x9, 0x4, 0x1, 0x6, 0x0, 0x400, 0x0, 0x5}, 0xffffffffffffffff, 0x6, r1, 0x1) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r1, &(0x7f0000000100)="d584bd2f941d805173df1867e88e77e4f7c43f318fe8adb2f7a04d277175e16e8260e7a5f8f6eeb3d17c", &(0x7f0000000140)=""/40}, 0x20) r2 = perf_event_open$cgroup(&(0x7f0000000280)={0x1, 0x80, 0x9c, 0x6, 0x5, 0x1d, 0x0, 0x9, 0x2005, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x3, @perf_bp={&(0x7f0000000240), 0x4}, 0x2000, 0x8, 0x4, 0x0, 0x8000, 0x4, 0x5ef, 0x0, 0x7f, 0x0, 0x6}, r1, 0x5, r1, 0x2) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x80, 0x4, 0x2, 0x8, 0x8, 0x0, 0x5, 0x80000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x44a2, 0x400}, 0x8, 0x40, 0x46f, 0x0, 0xc391, 0x7, 0x1, 0x0, 0xffff747f, 0x0, 0xffffffffffffdb61}, r1, 0xb, r2, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r1}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r1, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x1d, 0x1c, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0x4, 0x6, 0x7, 0x3, 0x3}, @map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x401}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @exit]}, &(0x7f0000000580)='GPL\x00', 0x7, 0xca, &(0x7f00000005c0)=""/202, 0x41000, 0x33, '\x00', r5, 0x1b, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x5, 0x7, 0x849, 0x3}, 0x10, 0xffffffffffffffff, 0x0, 0x6, &(0x7f00000007c0)=[r1, r1], &(0x7f0000000800)=[{0x4, 0x5, 0x6, 0xc}, {0x0, 0x1, 0xd}, {0x1, 0x2, 0x7}, {0x1, 0x3, 0xa, 0x2}, {0x4, 0x1, 0x5, 0x4}, {0x5, 0x1, 0x10, 0x5}], 0x10, 0x7ff}, 0x94) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@union={0x10, 0x1, 0x0, 0x5, 0x1, 0x4, [{0xf, 0x2, 0xc87}]}]}, {0x0, [0x61]}}, &(0x7f0000000980)=""/55, 0x33, 0x37, 0x1, 0xffffad27, 0x10000, @value=r1}, 0x28) recvmsg$kcm(r1, &(0x7f0000003180)={&(0x7f0000000a00)=@nfc_llcp, 0x80, &(0x7f00000020c0)=[{&(0x7f0000000a80)=""/162, 0xa2}, {&(0x7f0000000b40)=""/170, 0xaa}, {&(0x7f0000000c00)=""/32, 0x20}, {&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/143, 0x8f}, {&(0x7f0000001d00)=""/176, 0xb0}, {&(0x7f0000001dc0)=""/188, 0xbc}, {&(0x7f0000001e80)=""/68, 0x44}, {&(0x7f0000001f00)=""/235, 0xeb}, {&(0x7f0000002000)=""/158, 0x9e}], 0xa, &(0x7f0000002180)=""/4096, 0x1000}, 0x40000020) bpf$MAP_CREATE(0x0, &(0x7f00000031c0)=@base={0x13, 0x4, 0xf0cd, 0x160f, 0x200, r1, 0x0, '\x00', 0x0, r1, 0x1, 0x5, 0x1}, 0x50) recvmsg(r1, &(0x7f0000004380)={&(0x7f0000003240)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}, 0x80, &(0x7f0000003340)=[{&(0x7f00000032c0)=""/87, 0x57}], 0x1, &(0x7f0000003380)=""/4096, 0x1000}, 0x10000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000043c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000004400)={0x1, 0x0}, 0x8) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000004440)={r8}, 0x4) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', r5, 0xffffffffffffffff, 0x5, 0x0, 0x5}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000047c0)=@bpf_ext={0x1c, 0x6, &(0x7f0000004500)=@raw=[@map_fd={0x18, 0x5, 0x1, 0x0, r10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}], &(0x7f0000004540)='syzkaller\x00', 0xde3a, 0xcb, &(0x7f0000004580)=""/203, 0x41100, 0x8, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000004680)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000046c0)={0x5, 0x9, 0x8, 0x2}, 0x10, 0x7e19, r9, 0x7, &(0x7f0000004700)=[r1], &(0x7f0000004740)=[{0x5, 0x3, 0x3, 0x7}, {0x0, 0x4, 0x9, 0x3}, {0x0, 0x1, 0xf, 0x9}, {0x1, 0x2, 0xf, 0x6}, {0x4, 0x5, 0xe, 0x7}, {0x4, 0x2, 0x2, 0x9}, {0x4, 0x1, 0x6, 0x6}], 0x10, 0x9}, 0x94) openat$cgroup_freezer_state(r1, &(0x7f0000004880), 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000048c0)={r7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000004bc0)={r1, 0xe0, &(0x7f0000004ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000004900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0xa, &(0x7f0000004940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd8, &(0x7f00000049c0)=[{}], 0x8, 0x10, &(0x7f0000004a00), &(0x7f0000004a40), 0x8, 0x67, 0x8, 0x8, &(0x7f0000004a80)}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004c00)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000004c40)=r11, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000004c80)={0x0, r13}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000004cc0)={0x1b, 0x0, 0x0, 0x8, 0x0, r12, 0x1, '\x00', r5, r13, 0x2, 0x5}, 0x50) openat$cgroup_devices(r1, &(0x7f0000004d40)='devices.allow\x00', 0x2, 0x0) r14 = socket$kcm(0x29, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000004d80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r14, 0x89e1, &(0x7f0000004dc0)={r15}) 606.564109ms ago: executing program 1 (id=3473): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x1, 0x0, 0x0, 0x49, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x30040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x14, &(0x7f0000000440), 0x3d) close(r3) r4 = syz_clone(0x1000000, &(0x7f0000000800)="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", 0x1000, &(0x7f0000001800), &(0x7f0000001840), &(0x7f0000001880)='\r') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001900)={r4, r0, 0x0, 0x5, &(0x7f00000018c0)='/[\t\\\x00'}, 0x30) r5 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x9, &(0x7f0000000380), 0x98) r6 = socket$kcm(0x28, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x28, 0x8, 0x0, 0x44) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRES64=r2, @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRESOCT=r1, @ANYRES16=r6, @ANYRES16=r3, @ANYRESOCT=r2], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r7, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)}, 0x20) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/233, 0xe9}], 0x1}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r8}, &(0x7f0000000480), &(0x7f00000005c0)}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00"], 0xfdef) 455.863056ms ago: executing program 0 (id=3474): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xa, &(0x7f0000000200)=@raw=[@ringbuf_output, @exit], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x4}, 0x10}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001e40)={0xffffffffffffffff, 0xe0, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa, &(0x7f0000001b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x95, &(0x7f0000001c40)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001c80), &(0x7f0000001cc0), 0x8, 0x41, 0x8, 0x8, &(0x7f0000001d00)}}, 0x10) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x120, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1d, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r6}, &(0x7f0000000b40), &(0x7f0000000b80)}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8}, 0x0, &(0x7f00000006c0)=r9}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x38) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001800)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB="2500000001000000", @ANYRES32, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="9bbe93531fa31e693f56f28e4edc3a6e44d14e204d0dc4119c8027c6825493f902babf237ad176fb1cf2a8312cbab197af5085010cfab76110fdc43b405b2549b88dc8b3f836438da325db63805af5192056489ab2467b2f3e8bd6933261887d49a6d57d962597f89081734513f958cf4b99b65bad6b3bc6969c19333d0e56c8126abef4215e9514adbe8825a9916a532489cb40f3f42b00"/175, @ANYRES64=0x0], 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', r1, r0, 0x1, 0x2}, 0x50) 404.31304ms ago: executing program 3 (id=3475): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000000000061116e0000000000850000004a0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) recvmsg$kcm(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000a00)=""/221, 0xdd}, {&(0x7f00000008c0)=""/261, 0x105}, {&(0x7f0000003140)=""/4050, 0xfd2}, {&(0x7f00000014c0)=""/260, 0x104}, {&(0x7f0000000400)=""/183, 0xb7}, {&(0x7f0000000340)=""/176, 0xb0}, {&(0x7f0000000e80)=""/261, 0x105}, {&(0x7f0000000e40)=""/21, 0x15}, {&(0x7f0000000bc0)=""/76, 0x4c}, {&(0x7f00000006c0)=""/180, 0xb4}, {&(0x7f00000005c0)=""/158, 0x9e}, {&(0x7f00000002c0)=""/78, 0x4e}, {&(0x7f0000000000)=""/62, 0x3e}, {&(0x7f0000000680)=""/59, 0x3b}, {&(0x7f0000000780)=""/224, 0xe0}, {&(0x7f0000000b00)=""/170, 0xaa}, {&(0x7f0000000d00)=""/242, 0xf2}], 0x11}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400101, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) 261.706637ms ago: executing program 4 (id=3476): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2b8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r0 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r0, &(0x7f00000018c0)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f0000001800)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/192, 0xc0}, {&(0x7f0000001240)=""/237, 0xed}, {&(0x7f0000001340)=""/190, 0xbe}, {&(0x7f0000001400)=""/193, 0xc1}, {&(0x7f0000001500)=""/70, 0x46}, {&(0x7f0000001580)=""/209, 0xd1}, {&(0x7f0000001680)=""/57, 0x39}, {&(0x7f00000016c0)=""/166, 0xa6}, {&(0x7f0000001780)=""/85, 0x55}], 0xa}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90f24fc60", 0x8c0}], 0x1}, 0x0) 79.138756ms ago: executing program 3 (id=3477): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e120900180003", 0x29}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xeb, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2003, 0x0, @perf_config_ext={0xe, 0x66c}, 0x106101, 0x8, 0xfffffffe, 0x6, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800d00000003600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c00a, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getpid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000520091ef"], 0xfe33) recvmsg$kcm(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001a40)=""/4095, 0xfff}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) recvmsg$kcm(r2, &(0x7f0000000240)={&(0x7f00000002c0)=@ax25={{}, [@bcast, @remote, @default, @rose, @default, @remote, @rose, @bcast]}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000100)=""/58, 0x3a}, {&(0x7f0000000340)=""/235, 0xeb}, {&(0x7f00000005c0)=""/253, 0xfd}, {&(0x7f0000000840)=""/133, 0x85}, {&(0x7f0000000900)=""/180, 0xb4}], 0x5, &(0x7f00000001c0)=""/52, 0xfffffffffffffeca}, 0x2000) recvmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000000c0)="1400000027000bff001b05290000000000000000", 0x14}], 0x1}, 0x4080) r4 = socket$kcm(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000080)={r4}) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034009410000000300189215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 0s ago: executing program 1 (id=3478): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8e, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)=@caif=@util={0x25, "a2a8a5222ff1140b1db69ccc6131b57f"}, 0x80, 0x0}, 0x448c0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000060000007f00000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000000)=0x18, &(0x7f0000000080)='%ps \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x3ff, r2}, 0x38) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000280)={r0, r3}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000c700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f00000002c0)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff018}, {0x6, 0x2, 0x0, 0x80100000}]}) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000240)={r6, r5}, 0xc) openat$cgroup_subtree(r5, &(0x7f0000000040), 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r5}, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) kernel console output (not intermixed with test programs): ver after parsing attributes in process `syz.1.2182'. [ 492.587087][T12309] delete_channel: no stack [ 492.948668][T12322] FAULT_INJECTION: forcing a failure. [ 492.948668][T12322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.010350][T12326] netlink: 'syz.0.2186': attribute type 29 has an invalid length. [ 493.014197][T12322] CPU: 1 PID: 12322 Comm: syz.2.2185 Not tainted syzkaller #0 [ 493.026126][T12322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 493.036452][T12322] Call Trace: [ 493.039884][T12322] [ 493.042865][T12322] dump_stack_lvl+0x188/0x24e [ 493.047889][T12322] ? show_regs_print_info+0x12/0x12 [ 493.053345][T12322] ? load_image+0x400/0x400 [ 493.058009][T12322] ? __lock_acquire+0x7d10/0x7d10 [ 493.063240][T12322] ? __virt_addr_valid+0x188/0x540 [ 493.069062][T12322] should_fail_ex+0x399/0x4d0 [ 493.074472][T12322] _copy_from_user+0x2c/0x170 [ 493.079501][T12322] sctp_setsockopt+0x19a/0xf90 [ 493.084866][T12322] ? sock_common_recvmsg+0x190/0x190 [ 493.090701][T12322] __sys_setsockopt+0x2bf/0x3d0 [ 493.095866][T12322] __x64_sys_setsockopt+0xb1/0xc0 [ 493.101154][T12322] do_syscall_64+0x4c/0xa0 [ 493.105987][T12322] ? clear_bhb_loop+0x60/0xb0 [ 493.111013][T12322] ? clear_bhb_loop+0x60/0xb0 [ 493.115968][T12322] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 493.122310][T12322] RIP: 0033:0x7f1b2099c819 [ 493.127425][T12322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.149606][T12322] RSP: 002b:00007f1b217bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 493.159567][T12322] RAX: ffffffffffffffda RBX: 00007f1b20c15fa0 RCX: 00007f1b2099c819 [ 493.167942][T12322] RDX: 0000000000000014 RSI: 0000000000000084 RDI: 0000000000000012 [ 493.176501][T12322] RBP: 00007f1b217bd090 R08: 0000000000000008 R09: 0000000000000000 [ 493.185677][T12322] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.194495][T12322] R13: 00007f1b20c16038 R14: 00007f1b20c15fa0 R15: 00007ffd80775f28 [ 493.203850][T12322] [ 493.211743][T12326] netlink: 'syz.0.2186': attribute type 29 has an invalid length. [ 493.620561][T12335] : port 1(ip6gretap0) entered blocking state [ 493.640684][T12335] : port 1(ip6gretap0) entered disabled state [ 493.675724][T12335] device ip6gretap0 entered promiscuous mode [ 493.737696][T12340] device ip6gretap0 left promiscuous mode [ 493.757385][T12340] : port 1(ip6gretap0) entered disabled state [ 494.080902][T12348] netlink: 'syz.2.2190': attribute type 10 has an invalid length. [ 494.109955][T12348] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2190'. [ 496.005525][T12358] netlink: 'syz.3.2194': attribute type 10 has an invalid length. [ 496.036851][T12358] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2194'. [ 496.089442][T12376] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2199'. [ 496.443657][T12388] FAULT_INJECTION: forcing a failure. [ 496.443657][T12388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.534623][T12388] CPU: 1 PID: 12388 Comm: syz.3.2201 Not tainted syzkaller #0 [ 496.542733][T12388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 496.555435][T12388] Call Trace: [ 496.560237][T12388] [ 496.563762][T12388] dump_stack_lvl+0x188/0x24e [ 496.568969][T12388] ? show_regs_print_info+0x12/0x12 [ 496.575320][T12388] ? load_image+0x400/0x400 [ 496.581290][T12388] ? __lock_acquire+0x7d10/0x7d10 [ 496.588305][T12388] ? snprintf+0xe5/0x140 [ 496.593311][T12388] should_fail_ex+0x399/0x4d0 [ 496.599202][T12388] _copy_to_user+0x2c/0x130 [ 496.604878][T12388] simple_read_from_buffer+0xe3/0x150 [ 496.611928][T12388] proc_fail_nth_read+0x1a6/0x220 [ 496.617376][T12388] ? proc_fault_inject_write+0x310/0x310 [ 496.624305][T12388] ? fsnotify_perm+0x248/0x550 [ 496.629419][T12388] ? proc_fault_inject_write+0x310/0x310 [ 496.635917][T12388] vfs_read+0x2de/0xa00 [ 496.641344][T12388] ? kernel_read+0x1e0/0x1e0 [ 496.648133][T12388] ? __fget_files+0x28/0x4b0 [ 496.654204][T12388] ? __fget_files+0x28/0x4b0 [ 496.659809][T12388] ? __fget_files+0x43d/0x4b0 [ 496.666558][T12388] ? __fdget_pos+0x2ae/0x360 [ 496.672076][T12388] ? ksys_read+0x71/0x250 [ 496.676761][T12388] ksys_read+0x14c/0x250 [ 496.681686][T12388] ? vfs_write+0xa30/0xa30 [ 496.687311][T12388] ? lockdep_hardirqs_on+0x94/0x140 [ 496.693787][T12388] do_syscall_64+0x4c/0xa0 [ 496.699116][T12388] ? clear_bhb_loop+0x60/0xb0 [ 496.705772][T12388] ? clear_bhb_loop+0x60/0xb0 [ 496.712275][T12388] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 496.719116][T12388] RIP: 0033:0x7ffbd395d04e [ 496.723699][T12388] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 496.745499][T12388] RSP: 002b:00007ffbd48acfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 496.756427][T12388] RAX: ffffffffffffffda RBX: 00007ffbd48ad6c0 RCX: 00007ffbd395d04e [ 496.765277][T12388] RDX: 000000000000000f RSI: 00007ffbd48ad0a0 RDI: 0000000000000014 [ 496.773528][T12388] RBP: 00007ffbd48ad090 R08: 0000000000000000 R09: 0000000000000000 [ 496.782556][T12388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.791206][T12388] R13: 00007ffbd3c16038 R14: 00007ffbd3c15fa0 R15: 00007ffe0dafda88 [ 496.799783][T12388] [ 497.423923][T12408] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.2208'. [ 497.649328][T12414] netlink: 'syz.3.2207': attribute type 29 has an invalid length. [ 497.658917][T12418] netlink: 'syz.0.2212': attribute type 10 has an invalid length. [ 497.679253][T12418] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2212'. [ 497.706742][T12414] netlink: 'syz.3.2207': attribute type 29 has an invalid length. [ 497.896485][T12423] netlink: 'syz.2.2211': attribute type 10 has an invalid length. [ 497.968361][T12423] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2211'. [ 498.373026][T12446] netlink: 'syz.0.2217': attribute type 10 has an invalid length. [ 498.419528][T12446] device geneve0 entered promiscuous mode [ 499.203576][T12474] device veth1_macvtap left promiscuous mode [ 499.245808][T12474] device macsec0 left promiscuous mode [ 499.389046][T12475] device veth1_macvtap entered promiscuous mode [ 499.432785][T12475] device macsec0 entered promiscuous mode [ 499.475269][T11996] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 499.817365][T12490] sock: sock_timestamping_bind_phc: sock not bind to device [ 499.867603][T12493] netlink: 'syz.2.2228': attribute type 10 has an invalid length. [ 499.896043][T12493] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2228'. [ 500.277724][T12516] device lo entered promiscuous mode [ 500.302688][T12516] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 501.223454][T12552] netlink: 2639 bytes leftover after parsing attributes in process `syz.0.2245'. [ 501.434389][T12558] netlink: 'syz.1.2247': attribute type 29 has an invalid length. [ 501.472355][T12556] netlink: 'syz.2.2246': attribute type 10 has an invalid length. [ 501.580174][T12556] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2246'. [ 501.670753][T12558] netlink: 'syz.1.2247': attribute type 29 has an invalid length. [ 502.958056][T12604] netlink: 'syz.2.2260': attribute type 21 has an invalid length. [ 502.987369][T12604] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2260'. [ 503.024606][T12604] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2260'. [ 503.434376][T12615] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.2264'. [ 503.615729][T12618] sock: sock_timestamping_bind_phc: sock not bind to device [ 503.664665][T12619] netlink: 'syz.4.2265': attribute type 10 has an invalid length. [ 503.699959][T12619] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2265'. [ 503.860238][T12619] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 504.134857][ T4276] Bluetooth: hci4: ISO packet for unknown connection handle 2622 [ 506.892464][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.900078][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.356647][T12684] sock: sock_timestamping_bind_phc: sock not bind to device [ 508.948200][T12672] netlink: 'syz.2.2279': attribute type 1 has an invalid length. [ 508.957526][T12684] netlink: 'syz.1.2281': attribute type 10 has an invalid length. [ 508.989715][T12684] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2281'. [ 509.552492][T12692] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2283'. [ 510.181118][T12718] netlink: 'syz.4.2291': attribute type 29 has an invalid length. [ 510.210993][T12718] netlink: 'syz.4.2291': attribute type 29 has an invalid length. [ 510.352320][T12718] netlink: 'syz.4.2291': attribute type 29 has an invalid length. [ 510.914099][T12738] netlink: 'syz.0.2295': attribute type 10 has an invalid length. [ 510.925091][T12743] netlink: 65840 bytes leftover after parsing attributes in process `syz.2.2296'. [ 510.951748][T12738] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2295'. [ 511.155949][T12742] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2294'. [ 511.278758][T12746] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.2298'. [ 511.738724][T12760] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2299'. [ 511.892152][T12768] netlink: 'syz.4.2303': attribute type 17 has an invalid length. [ 511.904506][T12769] netlink: 'syz.2.2305': attribute type 29 has an invalid length. [ 511.917944][T12768] netlink: 'syz.4.2303': attribute type 41 has an invalid length. [ 511.938085][T12768] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2303'. [ 511.964186][T12769] netlink: 'syz.2.2305': attribute type 29 has an invalid length. [ 512.621752][T12795] sock: sock_timestamping_bind_phc: sock not bind to device [ 512.642392][T12788] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2310'. [ 513.135244][T12817] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2317'. [ 513.230582][T12817] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 513.607439][T12814] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 513.657744][T12814] CPU: 0 PID: 12814 Comm: syz.1.2317 Not tainted syzkaller #0 [ 513.665354][T12814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 513.676213][T12814] Call Trace: [ 513.679625][T12814] [ 513.682643][T12814] dump_stack_lvl+0x188/0x24e [ 513.687675][T12814] ? show_regs_print_info+0x12/0x12 [ 513.693141][T12814] ? load_image+0x400/0x400 [ 513.698050][T12814] sysfs_warn_dup+0x8a/0xa0 [ 513.702671][T12814] sysfs_do_create_link_sd+0xc0/0x110 [ 513.708781][T12814] device_add+0x7ed/0xfb0 [ 513.713358][T12814] wiphy_register+0x1d9f/0x2ac0 [ 513.718834][T12814] ? cfg80211_event_work+0x40/0x40 [ 513.721081][T12826] can: request_module (can-proto-0) failed. [ 513.724023][T12814] ? minstrel_ht_alloc+0x894/0xa20 [ 513.735790][T12814] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 513.742280][T12814] ieee80211_register_hw+0x2d00/0x39f0 [ 513.748036][T12814] ? lockdep_hardirqs_on+0x94/0x140 [ 513.753801][T12814] ? ieee80211_register_hw+0xf21/0x39f0 [ 513.759471][T12814] ? ieee80211_register_hw+0xf21/0x39f0 [ 513.765159][T12814] ? ieee80211_tasklet_handler+0x20/0x20 [ 513.771200][T12814] ? memset+0x1e/0x40 [ 513.775817][T12814] ? __hrtimer_init+0x186/0x270 [ 513.780878][T12814] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 513.787295][T12814] hwsim_new_radio_nl+0xafa/0xce0 [ 513.792474][T12814] genl_family_rcv_msg_doit+0x22a/0x330 [ 513.798395][T12814] ? end_current_label_crit_section+0x170/0x170 [ 513.805396][T12814] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 513.811795][T12814] ? bpf_lsm_capable+0x5/0x10 [ 513.816983][T12814] ? security_capable+0x85/0xb0 [ 513.821949][T12814] genl_rcv_msg+0x604/0x790 [ 513.826646][T12814] ? genl_bind+0x360/0x360 [ 513.831239][T12814] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 513.837683][T12814] netlink_rcv_skb+0x1fb/0x450 [ 513.842518][T12814] ? genl_bind+0x360/0x360 [ 513.846993][T12814] ? netlink_ack+0x1170/0x1170 [ 513.851875][T12814] ? down_read+0x1a8/0x2d0 [ 513.856569][T12814] genl_rcv+0x24/0x40 [ 513.860787][T12814] netlink_unicast+0x74d/0x8d0 [ 513.866052][T12814] netlink_sendmsg+0x8ad/0xbd0 [ 513.871074][T12814] ? netlink_getsockopt+0x550/0x550 [ 513.876847][T12814] ? aa_sock_msg_perm+0x94/0x150 [ 513.881991][T12814] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 513.887489][T12814] ? security_socket_sendmsg+0x7c/0xa0 [ 513.893050][T12814] ? netlink_getsockopt+0x550/0x550 [ 513.898359][T12814] ____sys_sendmsg+0x5be/0x970 [ 513.903235][T12814] ? __sys_sendmsg_sock+0x30/0x30 [ 513.908715][T12814] ? __import_iovec+0x315/0x500 [ 513.914111][T12814] ? import_iovec+0x6f/0xa0 [ 513.918814][T12814] ___sys_sendmsg+0x2a2/0x360 [ 513.923746][T12814] ? try_to_wake_up+0x6ae/0x1080 [ 513.929031][T12814] ? __sys_sendmsg+0x290/0x290 [ 513.933998][T12814] __se_sys_sendmsg+0x1bb/0x2a0 [ 513.939288][T12814] ? __x64_sys_sendmsg+0x80/0x80 [ 513.944712][T12814] ? syscall_enter_from_user_mode+0x2a/0x80 [ 513.950787][T12814] do_syscall_64+0x4c/0xa0 [ 513.955365][T12814] ? clear_bhb_loop+0x60/0xb0 [ 513.960110][T12814] ? clear_bhb_loop+0x60/0xb0 [ 513.965025][T12814] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 513.970969][T12814] RIP: 0033:0x7fb2dbf9c819 [ 513.975616][T12814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.995632][T12814] RSP: 002b:00007fb2dce09028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 514.004409][T12814] RAX: ffffffffffffffda RBX: 00007fb2dc215fa0 RCX: 00007fb2dbf9c819 [ 514.012611][T12814] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 514.020634][T12814] RBP: 00007fb2dc032c91 R08: 0000000000000000 R09: 0000000000000000 [ 514.028682][T12814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 514.037294][T12814] R13: 00007fb2dc216038 R14: 00007fb2dc215fa0 R15: 00007ffdd522a308 [ 514.045986][T12814] [ 514.126844][T12829] __nla_validate_parse: 2 callbacks suppressed [ 514.126910][T12829] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2318'. [ 517.926268][T12952] netlink: 212940 bytes leftover after parsing attributes in process `syz.1.2353'. [ 517.942865][T12951] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.2354'. [ 518.013805][T12951] openvswitch: netlink: Flow actions attr not present in new flow. [ 518.160056][ T4276] Bluetooth: hci4: unexpected event 0x0f length: 15 > 4 [ 518.755568][T12982] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.2361'. [ 518.798059][T12979] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2363'. [ 518.872177][T12984] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.2361'. [ 519.104262][T12998] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.2367'. [ 519.737387][T13018] validate_nla: 6 callbacks suppressed [ 519.737407][T13018] netlink: 'syz.4.2371': attribute type 2 has an invalid length. [ 519.760158][T13018] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2371'. [ 520.830220][T13056] netlink: 'syz.4.2381': attribute type 29 has an invalid length. [ 520.847330][T13056] netlink: 'syz.4.2381': attribute type 29 has an invalid length. [ 521.361148][T13081] sock: sock_timestamping_bind_phc: sock not bind to device [ 522.171791][ T4276] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 522.183412][ T4276] Bluetooth: hci4: Injecting HCI hardware error event [ 522.193794][ T4276] Bluetooth: hci4: hardware error 0x00 [ 523.172153][T13112] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2394'. [ 523.248523][T13112] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2394'. [ 523.258682][T13111] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2394'. [ 523.270039][T13115] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2394'. [ 523.504235][T13120] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.511889][T13120] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.609139][T13125] netlink: 'syz.4.2399': attribute type 6 has an invalid length. [ 523.639575][T13125] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2399'. [ 524.061183][T13140] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2401'. [ 524.339469][ T4276] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 526.502042][T13136] netlink: 'syz.4.2400': attribute type 13 has an invalid length. [ 526.511071][T13136] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2400'. [ 526.523356][T13136] syz_tun: refused to change device tx_queue_len [ 526.530492][T13136] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 526.559267][T13140] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2401'. [ 526.843845][T13164] netlink: 'syz.0.2407': attribute type 29 has an invalid length. [ 526.891390][T13164] netlink: 'syz.0.2407': attribute type 29 has an invalid length. [ 526.929149][T13169] netlink: 'syz.0.2407': attribute type 29 has an invalid length. [ 526.984478][T13164] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2407'. [ 527.277094][T13178] netlink: 15794 bytes leftover after parsing attributes in process `syz.2.2420'. [ 528.546886][T13214] netlink: 'syz.0.2418': attribute type 29 has an invalid length. [ 528.643894][T13214] netlink: 'syz.0.2418': attribute type 29 has an invalid length. [ 528.719908][T13215] netlink: 'syz.0.2418': attribute type 29 has an invalid length. [ 528.745032][T13223] netlink: 'syz.3.2422': attribute type 3 has an invalid length. [ 528.747543][T13224] netlink: 'syz.3.2422': attribute type 3 has an invalid length. [ 528.819781][T13223] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2422'. [ 528.909926][T13224] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2422'. [ 530.122370][T13259] pim6reg0: tun_chr_ioctl cmd 2147767521 [ 530.420292][T13270] netlink: 'syz.4.2432': attribute type 10 has an invalid length. [ 533.134301][T13309] team0: Port device team_slave_0 removed [ 536.137545][T13372] netlink: 'syz.3.2458': attribute type 11 has an invalid length. [ 537.601312][T13397] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2464'. [ 538.898588][T13452] netlink: 'syz.2.2477': attribute type 3 has an invalid length. [ 538.919713][T13452] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2477'. [ 539.111957][T13460] netlink: 'syz.0.2480': attribute type 22 has an invalid length. [ 539.672703][T13470] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2484'. [ 540.214039][T13500] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.2489'. [ 541.332272][T13529] netlink: 'syz.0.2500': attribute type 3 has an invalid length. [ 541.349622][T13529] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2500'. [ 541.619594][T13542] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2502'. [ 541.628992][T13542] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2502'. [ 541.705773][T13544] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2502'. [ 541.754395][T13548] netlink: 15794 bytes leftover after parsing attributes in process `syz.3.2503'. [ 544.554338][T13619] pimreg: tun_chr_ioctl cmd 1074025673 [ 544.573858][T13618] pimreg: tun_chr_ioctl cmd 1074025692 [ 544.592596][T13619] pimreg: tun_chr_ioctl cmd 1074025692 [ 545.385543][T13636] netlink: 'syz.2.2529': attribute type 1 has an invalid length. [ 545.399556][T13636] netlink: 'syz.2.2529': attribute type 4 has an invalid length. [ 545.415238][T13636] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2529'. [ 545.746793][T13647] netlink: 'syz.2.2532': attribute type 7 has an invalid length. [ 545.762725][T13647] netlink: 208404 bytes leftover after parsing attributes in process `syz.2.2532'. [ 545.996921][T13661] device lo left promiscuous mode [ 546.016089][T13661] bˆ¡cÊRݘOC‰ÿæ: renamed from lo [ 546.087588][T13661] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2536'. [ 546.140771][T13661] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2536'. [ 546.209118][T13664] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2536'. [ 546.232596][T13668] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2536'. [ 546.253654][T13667] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2538'. [ 546.310395][T13667] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2538'. [ 546.395286][T13669] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2538'. [ 546.419987][T13672] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2540'. [ 546.452403][T13672] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 546.801690][T13688] netlink: 'syz.0.2542': attribute type 3 has an invalid length. [ 547.022142][T13684] netlink: 'syz.0.2542': attribute type 3 has an invalid length. [ 547.451664][T13700] netlink: 'syz.0.2546': attribute type 1 has an invalid length. [ 547.476770][T13700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.769546][T13763] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 550.985321][T13769] __nla_validate_parse: 6 callbacks suppressed [ 550.985340][T13769] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.2563'. [ 551.424765][T13782] netlink: 'syz.3.2568': attribute type 10 has an invalid length. [ 552.590129][T13806] netlink: 22 bytes leftover after parsing attributes in process `syz.3.2576'. [ 552.639195][T13806] netlink: 'syz.3.2576': attribute type 25 has an invalid length. [ 552.682255][T13806] netlink: 'syz.3.2576': attribute type 9 has an invalid length. [ 552.920498][T13819] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2580'. [ 553.725750][T13824] netlink: 'syz.0.2583': attribute type 2 has an invalid length. [ 553.746454][T13824] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2583'. [ 554.052726][T13832] netlink: 'syz.0.2583': attribute type 3 has an invalid length. [ 554.081463][T13832] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2583'. [ 554.168216][T13824] netlink: 'syz.0.2583': attribute type 12 has an invalid length. [ 554.231470][T13824] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2583'. [ 554.854692][T13864] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2594'. [ 555.360046][T13891] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.2599'. [ 555.525113][T13895] netlink: 13183 bytes leftover after parsing attributes in process `syz.3.2601'. [ 555.890791][T13870] delete_channel: no stack [ 556.067838][T13857] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2592'. [ 556.090182][T13885] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2599'. [ 556.465750][T13916] netlink: 'syz.1.2605': attribute type 19 has an invalid length. [ 556.528387][T13920] netlink: 'syz.0.2607': attribute type 2 has an invalid length. [ 556.597542][T13920] netlink: 'syz.0.2607': attribute type 19 has an invalid length. [ 556.634780][T13920] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2607'. [ 557.148668][T13932] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.2611'. [ 557.592184][T13935] netlink: 11594 bytes leftover after parsing attributes in process `syz.2.2612'. [ 557.620919][T13936] netlink: 'syz.2.2612': attribute type 7 has an invalid length. [ 557.652168][T13936] netlink: 11594 bytes leftover after parsing attributes in process `syz.2.2612'. [ 557.711644][T13938] netlink: 'syz.0.2613': attribute type 21 has an invalid length. [ 557.743850][T13938] netlink: 'syz.0.2613': attribute type 6 has an invalid length. [ 557.762639][T13938] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2613'. [ 557.826819][T13944] device wlan1 entered promiscuous mode [ 558.220522][T13959] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 558.647007][T13970] netlink: 'syz.3.2623': attribute type 10 has an invalid length. [ 558.669247][T13970] netlink: 9279 bytes leftover after parsing attributes in process `syz.3.2623'. [ 558.958913][T13983] netlink: 'syz.4.2625': attribute type 29 has an invalid length. [ 559.000001][T13983] netlink: 'syz.4.2625': attribute type 29 has an invalid length. [ 559.256223][T13994] netlink: 'syz.2.2632': attribute type 21 has an invalid length. [ 559.265867][T13993] netlink: 'syz.2.2632': attribute type 21 has an invalid length. [ 559.463757][T13990] __sock_release: fasync list not empty! [ 559.695695][T14019] netlink: 13183 bytes leftover after parsing attributes in process `syz.4.2639'. [ 559.838782][T14031] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2643'. [ 563.554642][T14077] netlink: 13183 bytes leftover after parsing attributes in process `syz.0.2655'. [ 563.820667][T14080] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.2656'. [ 563.904580][T14088] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2658'. [ 564.160406][T14096] netlink: 'syz.4.2660': attribute type 27 has an invalid length. [ 564.190205][T14096] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2660'. [ 564.398379][T14102] netlink: 'syz.1.2662': attribute type 10 has an invalid length. [ 564.411555][T14102] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2662'. [ 565.033353][T14125] netlink: 'syz.1.2666': attribute type 10 has an invalid length. [ 566.221912][T14159] netlink: 'syz.0.2675': attribute type 3 has an invalid length. [ 566.293768][T14159] netlink: 'syz.0.2675': attribute type 1 has an invalid length. [ 566.343047][T14159] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2675'. [ 566.403897][T14160] netlink: 'syz.0.2675': attribute type 3 has an invalid length. [ 566.430384][T14160] netlink: 'syz.0.2675': attribute type 1 has an invalid length. [ 566.447861][T14160] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2675'. [ 566.570808][T14168] sock: sock_timestamping_bind_phc: sock not bind to device [ 566.582930][T14167] netlink: 'syz.1.2677': attribute type 3 has an invalid length. [ 566.653939][T14167] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2677'. [ 566.891428][T14177] netlink: 'syz.4.2680': attribute type 27 has an invalid length. [ 566.909692][T14177] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2680'. [ 567.295561][T14164] netlink: 'syz.2.2676': attribute type 10 has an invalid length. [ 567.310546][T14164] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2676'. [ 568.334135][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.341661][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.183039][T14221] sock: sock_timestamping_bind_phc: sock not bind to device [ 569.314205][T14217] validate_nla: 7 callbacks suppressed [ 569.314250][T14217] netlink: 'syz.3.2691': attribute type 10 has an invalid length. [ 569.352125][T14217] __nla_validate_parse: 2 callbacks suppressed [ 569.352304][T14217] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2691'. [ 569.382989][T14218] __sock_release: fasync list not empty! [ 569.443858][T14229] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2695'. [ 569.493543][T14228] delete_channel: no stack [ 569.611948][T14235] netlink: 'syz.1.2696': attribute type 4 has an invalid length. [ 569.624757][T14235] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2696'. [ 570.393032][T14248] netlink: 'syz.2.2701': attribute type 7 has an invalid length. [ 571.257101][T14284] sock: sock_timestamping_bind_phc: sock not bind to device [ 571.276259][T14284] netlink: 'syz.0.2710': attribute type 10 has an invalid length. [ 571.298618][T14284] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2710'. [ 571.420050][T14271] __sock_release: fasync list not empty! [ 571.775662][T14318] netlink: 'syz.1.2719': attribute type 21 has an invalid length. [ 571.830300][T14319] netlink: 'syz.4.2718': attribute type 2 has an invalid length. [ 571.863346][T14322] netlink: 'syz.1.2719': attribute type 11 has an invalid length. [ 571.920572][T14318] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2719'. [ 571.937923][T14322] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2719'. [ 571.964712][T14323] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.2720'. [ 571.996955][T14318] netlink: 'syz.1.2719': attribute type 4 has an invalid length. [ 572.069919][T14318] netlink: 'syz.1.2719': attribute type 3 has an invalid length. [ 572.087832][T14318] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2719'. [ 572.161161][T14317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 572.162625][T14319] device 0 entered promiscuous mode [ 572.190773][T14326] netlink: 'syz.0.2720': attribute type 21 has an invalid length. [ 573.680095][T14353] sock: sock_timestamping_bind_phc: sock not bind to device [ 573.754697][T14353] netlink: 'syz.0.2727': attribute type 10 has an invalid length. [ 573.865144][T14353] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2727'. [ 573.921350][T14358] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 573.929389][T14358] IPv6: NLM_F_CREATE should be set when creating new route [ 573.936731][T14358] IPv6: NLM_F_CREATE should be set when creating new route [ 573.944432][T14358] IPv6: NLM_F_CREATE should be set when creating new route [ 574.256005][T14368] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2732'. [ 574.305339][T14368] syz_tun: refused to change device tx_queue_len [ 574.341497][T14368] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 574.397123][T14375] validate_nla: 3 callbacks suppressed [ 574.397141][T14375] netlink: 'syz.3.2732': attribute type 13 has an invalid length. [ 574.477480][T14375] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2732'. [ 574.677951][T14375] syz_tun: refused to change device tx_queue_len [ 574.699515][T14375] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 574.817496][T14388] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2734'. [ 575.106306][T14399] device syzkaller0 entered promiscuous mode [ 576.395285][T14427] netlink: 'syz.3.2748': attribute type 3 has an invalid length. [ 576.404215][T14427] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2748'. [ 576.597690][T14424] sock: sock_timestamping_bind_phc: sock not bind to device [ 579.099416][T14424] netlink: 'syz.1.2746': attribute type 10 has an invalid length. [ 579.107866][T14424] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2746'. [ 579.254171][T14440] device syzkaller0 entered promiscuous mode [ 579.422791][T14459] netlink: 'syz.2.2753': attribute type 11 has an invalid length. [ 579.479733][T14459] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2753'. [ 580.122525][T14447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 581.918916][T14454] netlink: 'syz.2.2753': attribute type 21 has an invalid length. [ 581.927085][T14454] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2753'. [ 581.936834][T14454] netlink: 'syz.2.2753': attribute type 4 has an invalid length. [ 581.945507][T14454] netlink: 'syz.2.2753': attribute type 3 has an invalid length. [ 581.957784][T14454] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2753'. [ 582.620488][T14492] netlink: 'syz.0.2764': attribute type 10 has an invalid length. [ 582.639639][T14492] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2764'. [ 582.815189][T14496] netlink: 126632 bytes leftover after parsing attributes in process `syz.3.2766'. [ 583.016428][T14500] netlink: 'syz.2.2768': attribute type 10 has an invalid length. [ 583.059608][T14500] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2768'. [ 583.230411][T14510] netlink: 'syz.1.2770': attribute type 21 has an invalid length. [ 583.285279][T14510] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.2770'. [ 583.332585][T14517] netlink: 'syz.0.2773': attribute type 21 has an invalid length. [ 583.342465][T14517] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2773'. [ 583.353925][T14517] netlink: 'syz.0.2773': attribute type 4 has an invalid length. [ 583.409834][T14517] netlink: 'syz.0.2773': attribute type 3 has an invalid length. [ 583.421357][T14522] netlink: 'syz.0.2773': attribute type 11 has an invalid length. [ 583.450572][T14522] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2773'. [ 583.453698][T14517] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2773'. [ 583.562706][T14516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 583.997999][T14537] netlink: 'syz.2.2779': attribute type 10 has an invalid length. [ 584.958966][T14553] __nla_validate_parse: 2 callbacks suppressed [ 584.958988][T14553] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2785'. [ 585.292216][T14564] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2789'. [ 585.704160][T14577] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2793'. [ 585.728408][T14577] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 585.944998][T14580] sock: sock_timestamping_bind_phc: sock not bind to device [ 585.978313][T14580] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2795'. [ 586.273578][T14594] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.2799'. [ 586.388520][T14598] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2801'. [ 586.400661][T14598] device bond0 entered promiscuous mode [ 586.406346][T14598] device bond_slave_1 entered promiscuous mode [ 587.997618][T14633] sock: sock_timestamping_bind_phc: sock not bind to device [ 588.017460][T14628] validate_nla: 4 callbacks suppressed [ 588.017490][T14628] netlink: 'syz.4.2808': attribute type 10 has an invalid length. [ 588.050635][T14628] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2808'. [ 588.321594][T14628] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 588.987398][T14649] netlink: 'syz.4.2816': attribute type 10 has an invalid length. [ 588.997617][T14649] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2816'. [ 589.436252][T14658] netlink: 'syz.2.2818': attribute type 4 has an invalid length. [ 589.444916][T14655] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2816'. [ 589.489601][T14662] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2819'. [ 589.722411][T14677] netlink: 'syz.2.2822': attribute type 10 has an invalid length. [ 590.496697][T14691] sock: sock_timestamping_bind_phc: sock not bind to device [ 592.630518][T14691] netlink: 'syz.1.2826': attribute type 10 has an invalid length. [ 592.640152][T14691] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2826'. [ 592.940650][T14711] device sit0 entered promiscuous mode [ 593.217697][T14730] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2835'. [ 593.835047][T14742] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2838'. [ 593.876405][T14742] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2838'. [ 593.940087][T14744] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2838'. [ 594.907119][T14760] sock: sock_timestamping_bind_phc: sock not bind to device [ 594.965615][T14765] netlink: 'syz.2.2843': attribute type 10 has an invalid length. [ 594.985680][T14765] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2843'. [ 596.165971][T14801] netlink: 'syz.2.2853': attribute type 29 has an invalid length. [ 596.213374][T14801] netlink: 'syz.2.2853': attribute type 29 has an invalid length. [ 596.321072][T14811] netlink: 'syz.3.2857': attribute type 46 has an invalid length. [ 596.955359][T14817] netlink: 'syz.1.2858': attribute type 10 has an invalid length. [ 597.056935][T14817] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2858'. [ 597.817507][T14830] netlink: 'syz.2.2862': attribute type 10 has an invalid length. [ 597.884129][T13086] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 597.923153][T13086] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 597.939562][T13086] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 597.949402][T13086] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 597.957717][T13086] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 597.965827][T13086] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 598.114224][ T7865] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.554556][ T7865] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.678363][ T7865] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.705583][T14848] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2867'. [ 598.718656][T14848] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 599.094684][ T7865] team0: Port device netdevsim0 removed [ 599.106660][ T7865] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.309912][T14855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2868'. [ 599.444010][T14863] netlink: 'syz.2.2870': attribute type 10 has an invalid length. [ 599.489432][T14863] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2870'. [ 600.009624][T13086] Bluetooth: hci4: command 0x0409 tx timeout [ 600.144667][T14833] chnl_net:caif_netlink_parms(): no params data found [ 600.485758][T14891] netlink: 'syz.3.2875': attribute type 15 has an invalid length. [ 600.641802][T14891] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.2875'. [ 601.102552][T14892] device syzkaller0 entered promiscuous mode [ 602.032720][T14923] netlink: 'syz.3.2880': attribute type 27 has an invalid length. [ 602.059548][T14923] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2880'. [ 602.099585][T13086] Bluetooth: hci4: command 0x041b tx timeout [ 604.171483][T13086] Bluetooth: hci4: command 0x040f tx timeout [ 604.468615][T14833] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.477381][T14833] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.486476][T14833] device bridge_slave_0 entered promiscuous mode [ 604.563157][T14928] netlink: 'syz.3.2882': attribute type 10 has an invalid length. [ 604.574855][T14928] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2882'. [ 604.588504][T14931] netlink: 'syz.4.2883': attribute type 17 has an invalid length. [ 604.601898][T14931] netlink: 'syz.4.2883': attribute type 16 has an invalid length. [ 604.619726][T14931] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2883'. [ 604.651817][T14833] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.689473][T14833] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.698268][T14833] device bridge_slave_1 entered promiscuous mode [ 604.882617][T13086] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 604.900326][T14833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.109936][T14947] netlink: 'syz.3.2886': attribute type 6 has an invalid length. [ 605.162822][T14947] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2886'. [ 605.197398][T14833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.271072][T14958] netlink: 'syz.2.2890': attribute type 10 has an invalid length. [ 605.315505][T14959] sctp: [Deprecated]: syz.2.2890 (pid 14959) Use of int in maxseg socket option. [ 605.315505][T14959] Use struct sctp_assoc_value instead [ 605.386388][T14833] team0: Port device team_slave_0 added [ 605.428761][T14833] team0: Port device team_slave_1 added [ 605.477769][T14962] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2891'. [ 605.697753][T14833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.733859][T14833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 605.834798][T14833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 605.864443][T14966] netlink: 'syz.2.2892': attribute type 27 has an invalid length. [ 605.886660][T14966] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2892'. [ 605.912089][T14833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 605.929211][T14833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.057855][T14833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.249766][T13086] Bluetooth: hci4: command 0x0419 tx timeout [ 606.255610][T14833] device hsr_slave_0 entered promiscuous mode [ 606.320546][T14833] device hsr_slave_1 entered promiscuous mode [ 606.668776][T14982] netlink: 'syz.1.2895': attribute type 3 has an invalid length. [ 606.681503][T14982] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2895'. [ 606.987800][T14995] netlink: 'syz.2.2898': attribute type 15 has an invalid length. [ 607.034280][T14995] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.2898'. [ 607.915433][ T7865] device bridge_slave_1 left promiscuous mode [ 607.926053][ T7865] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.938827][ T7865] device bridge_slave_0 left promiscuous mode [ 607.955977][ T7865] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.011820][ T7865] device veth1_macvtap left promiscuous mode [ 608.019061][ T7865] device veth0_macvtap left promiscuous mode [ 608.594707][ T7865] team0 (unregistering): Port device team_slave_1 removed [ 609.301387][T15024] netlink: 'syz.2.2905': attribute type 3 has an invalid length. [ 609.366739][T15024] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2905'. [ 609.439873][T15025] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.2905'. [ 609.513372][T15028] netlink: 'syz.1.2906': attribute type 27 has an invalid length. [ 609.581175][T15028] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2906'. [ 610.125695][T15044] syz.4.2909[15044] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 610.125924][T15044] syz.4.2909[15044] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 610.244516][T14833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 610.335982][T14833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 610.452778][T14833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 610.545890][T14833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 610.564070][T15051] sock: sock_set_timeout: `syz.2.2920' (pid 15051) tries to set negative timeout [ 610.678075][T15055] netlink: 'syz.4.2911': attribute type 15 has an invalid length. [ 610.698348][T15055] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.2911'. [ 610.893090][T14833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.934438][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 610.951718][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 610.987405][T14833] 8021q: adding VLAN 0 to HW filter on device team0 [ 611.015112][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 611.041940][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 611.051912][ T7852] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.059544][ T7852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.098255][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 611.109033][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 611.121641][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 611.133458][ T7852] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.141501][ T7852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.152817][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 611.167813][T15069] netlink: 'syz.1.2914': attribute type 2 has an invalid length. [ 611.177886][T15069] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2914'. [ 611.202086][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 611.237534][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 611.257960][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 611.268538][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 611.344598][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 611.372772][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 611.412580][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 611.482370][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 611.551010][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 611.575545][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 611.590052][T14833] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 611.649786][T15078] netlink: 'syz.3.2917': attribute type 23 has an invalid length. [ 612.019096][T15089] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2921'. [ 612.391044][T15107] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2925'. [ 612.477997][T15107] device hsr_slave_0 left promiscuous mode [ 612.529684][T15107] device hsr_slave_1 left promiscuous mode [ 613.009436][T11996] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 613.017229][T11996] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 613.088225][T14833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 613.229973][T11996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 613.249209][T11996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 613.372385][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 613.385299][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 613.415422][T14833] device veth0_vlan entered promiscuous mode [ 613.440835][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 613.481544][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 613.518976][T14833] device veth1_vlan entered promiscuous mode [ 613.718255][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 613.753667][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 613.806877][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 613.858134][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 613.903749][T14833] device veth0_macvtap entered promiscuous mode [ 613.961647][T14833] device veth1_macvtap entered promiscuous mode [ 614.020647][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 614.052713][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 614.106028][T14833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 614.139855][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 614.152785][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 614.177045][T14833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 614.196666][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 614.233337][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 614.283513][T14833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.311989][T14833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.344414][T14833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.385208][T14833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.674471][T15168] netlink: 'syz.4.2937': attribute type 3 has an invalid length. [ 614.717271][ T7869] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.720176][T15168] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2937'. [ 614.740409][ T7869] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.796041][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 614.896976][ T4331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.926648][ T4331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.989768][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 615.007471][T15174] netlink: 'syz.3.2940': attribute type 2 has an invalid length. [ 615.031601][T15174] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.2940'. [ 615.331676][T15183] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2943'. [ 615.818439][T15198] netlink: 'syz.1.2946': attribute type 22 has an invalid length. [ 615.873191][T15198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2946'. [ 616.523025][T15219] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2949'. [ 616.658840][T15216] netlink: 'syz.0.2951': attribute type 3 has an invalid length. [ 616.709513][T15216] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2951'. [ 617.164057][ T4276] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 617.177425][ T4276] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 617.187667][ T4273] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 617.221931][ T4276] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 617.233314][ T4276] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 617.241123][ T4276] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 617.436093][T11996] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.501393][T15229] device syzkaller0 entered promiscuous mode [ 617.583743][T15241] device veth1_macvtap left promiscuous mode [ 617.666108][T15243] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2956'. [ 617.730811][T15243] bridge_slave_1: default FDB implementation only supports local addresses [ 617.875088][T11996] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.925258][T15229] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2953'. [ 617.950731][T15252] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 617.970792][T15243] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 618.195109][T11996] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.420559][T11996] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.587406][T15278] netlink: 'syz.0.2960': attribute type 2 has an invalid length. [ 618.650059][T15278] netlink: 'syz.0.2960': attribute type 8 has an invalid length. [ 618.726990][T15278] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2960'. [ 619.017931][T15282] netlink: 'syz.1.2963': attribute type 10 has an invalid length. [ 619.045801][T15282] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2963'. [ 619.289750][ T4276] Bluetooth: hci1: command 0x0409 tx timeout [ 619.852304][T15284] device syzkaller0 entered promiscuous mode [ 621.039562][T15355] __nla_validate_parse: 2 callbacks suppressed [ 621.039580][T15355] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2974'. [ 621.370950][ T4276] Bluetooth: hci1: command 0x041b tx timeout [ 622.561981][T15233] chnl_net:caif_netlink_parms(): no params data found [ 622.935773][T15366] netlink: 22 bytes leftover after parsing attributes in process `syz.0.2975'. [ 622.946379][T15374] netlink: 'syz.0.2975': attribute type 25 has an invalid length. [ 622.956572][T15374] netlink: 'syz.0.2975': attribute type 9 has an invalid length. [ 623.107564][T15233] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.137008][T15233] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.173095][T15233] device bridge_slave_0 entered promiscuous mode [ 623.454664][ T4276] Bluetooth: hci1: command 0x040f tx timeout [ 623.456725][T15233] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.513177][T15233] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.552880][T15388] netlink: 'syz.0.2980': attribute type 29 has an invalid length. [ 623.563163][T15233] device bridge_slave_1 entered promiscuous mode [ 623.571985][T15379] netlink: 'syz.2.2976': attribute type 10 has an invalid length. [ 623.580271][T15379] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2976'. [ 623.698711][T15388] netlink: 'syz.0.2980': attribute type 29 has an invalid length. [ 623.835997][T15389] netlink: 'syz.0.2980': attribute type 29 has an invalid length. [ 623.848906][T15233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.967106][T15233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 624.304656][T15233] team0: Port device team_slave_0 added [ 624.448612][T15233] team0: Port device team_slave_1 added [ 624.693444][T15410] netlink: 'syz.1.2984': attribute type 39 has an invalid length. [ 624.840099][T15233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.850270][T15233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.928159][T15233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.962084][T15233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 624.979594][T15233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.064898][T15233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 625.152991][T15419] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.2986'. [ 625.310332][T15430] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2988'. [ 625.357622][T15233] device hsr_slave_0 entered promiscuous mode [ 625.406829][T15233] device hsr_slave_1 entered promiscuous mode [ 625.419520][T15233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 625.449428][T15233] Cannot create hsr debugfs directory [ 625.529418][ T4276] Bluetooth: hci1: command 0x0419 tx timeout [ 626.088871][T15446] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2989'. [ 626.633028][T15461] netlink: 'syz.0.2992': attribute type 10 has an invalid length. [ 626.741367][T15461] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2992'. [ 626.778131][T15461] bridge0: port 3(veth0_vlan) entered blocking state [ 626.818158][T15461] bridge0: port 3(veth0_vlan) entered disabled state [ 626.925149][T15461] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 626.992138][T11996] device bridge_slave_1 left promiscuous mode [ 627.049605][T11996] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.103939][T11996] device bridge_slave_0 left promiscuous mode [ 627.129622][T11996] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.261855][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.268358][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.287240][T11996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 631.110070][T11996] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 631.172995][T11996] bond0 (unregistering): Released all slaves [ 631.350712][T15479] netlink: 'syz.0.2997': attribute type 39 has an invalid length. [ 631.421912][T15483] netlink: 'syz.2.2998': attribute type 39 has an invalid length. [ 631.434577][T15483] device veth0_macvtap left promiscuous mode [ 631.838564][T15508] netlink: 'syz.0.3005': attribute type 2 has an invalid length. [ 631.879480][T15508] netlink: 'syz.0.3005': attribute type 8 has an invalid length. [ 631.887932][T15508] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3005'. [ 631.926556][T15509] netlink: 'syz.2.3004': attribute type 10 has an invalid length. [ 632.049465][T15509] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3004'. [ 632.076895][T15513] netlink: 'syz.4.3006': attribute type 4 has an invalid length. [ 632.162974][T15513] netlink: 'syz.4.3006': attribute type 1 has an invalid length. [ 632.226368][T15513] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.3006'. [ 632.377846][T15233] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 632.415187][T15233] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 632.433858][T15518] netlink: 'syz.0.3007': attribute type 21 has an invalid length. [ 632.485371][T15233] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 632.543410][T15233] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 632.607271][T15518] netlink: 'syz.0.3007': attribute type 10 has an invalid length. [ 632.643742][T15525] delete_channel: no stack [ 632.775093][T15518] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 632.887329][T15533] netlink: 'syz.4.3011': attribute type 3 has an invalid length. [ 632.935506][T15533] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3011'. [ 633.047463][T15233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 633.094249][T15357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 633.106658][T15357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 633.136899][T15233] 8021q: adding VLAN 0 to HW filter on device team0 [ 633.153999][T15357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 633.166618][T15357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 633.176551][T15357] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.183925][T15357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 633.203842][ T4276] Bluetooth: hci4: ISO packet for unknown connection handle 2622 [ 633.206210][T15357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 633.223114][T15357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 633.234228][T15357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 633.263447][T15357] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.270957][T15357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 633.282725][T15357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 633.309978][T15357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 633.327026][T15357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 633.354737][T15357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 633.375826][T15357] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 633.408515][T15357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 633.440827][T15357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 633.486455][T15357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 633.531518][T15357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 633.627706][T15233] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 633.657842][T15233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 633.676972][T15357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 633.686568][T15357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 634.460448][T15566] delete_channel: no stack [ 634.932676][T15580] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3017'. [ 635.321893][T11996] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 635.340965][T11996] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 635.440312][T15233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 635.504257][T15356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 635.521319][T15356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 635.589176][T11996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 635.630436][T11996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 635.671090][T11996] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 635.714292][T11996] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 635.749054][T15233] device veth0_vlan entered promiscuous mode [ 635.814783][T15233] device veth1_vlan entered promiscuous mode [ 635.852639][T15617] device sit0 entered promiscuous mode [ 636.065420][T15630] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3029'. [ 636.178667][T15343] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 636.220392][T15343] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 636.239216][T15343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 636.251015][T15343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 636.267828][T15233] device veth0_macvtap entered promiscuous mode [ 636.285497][T15233] device veth1_macvtap entered promiscuous mode [ 636.383286][T15233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.435750][T15233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.493292][T15640] validate_nla: 3 callbacks suppressed [ 636.493344][T15640] netlink: 'syz.1.3031': attribute type 16 has an invalid length. [ 636.511329][T15233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 636.533134][T15343] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 636.562515][T15343] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 636.606206][T15343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 636.694310][T15343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 636.706485][T15640] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3031'. [ 636.890481][T15233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.019570][T15233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.102749][T15233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 637.204292][T15646] netlink: 'syz.0.3032': attribute type 10 has an invalid length. [ 637.221098][T15646] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3032'. [ 637.283199][T15646] bridge0: port 3(veth0_vlan) entered blocking state [ 637.318421][T15646] bridge0: port 3(veth0_vlan) entered disabled state [ 637.358713][T15646] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 637.403312][T15647] device sit0 left promiscuous mode [ 637.413004][T15652] device sit0 entered promiscuous mode [ 637.542435][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 637.566648][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 637.597830][T15233] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.618192][T15233] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.638082][T15233] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.681764][T15233] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.405190][T15665] netlink: 'syz.2.3038': attribute type 21 has an invalid length. [ 638.417021][T15671] netlink: 'syz.1.3040': attribute type 21 has an invalid length. [ 638.430564][T15671] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3040'. [ 638.446812][T15671] netlink: 'syz.1.3040': attribute type 4 has an invalid length. [ 638.455926][T15670] netlink: 'syz.2.3038': attribute type 10 has an invalid length. [ 638.483668][T15670] device netdevsim0 entered promiscuous mode [ 638.500586][T15670] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 638.795653][ T7869] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.820356][ T7869] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.832260][ T7856] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 639.107748][T15688] netlink: 'syz.2.3044': attribute type 2 has an invalid length. [ 639.139654][T15688] netlink: 193088 bytes leftover after parsing attributes in process `syz.2.3044'. [ 639.474059][T15357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.487361][T15357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.525650][ T7856] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 640.593621][T15715] netlink: 'syz.4.3051': attribute type 39 has an invalid length. [ 640.984310][T15356] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.023538][T13086] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 641.034077][T13086] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 641.043289][T13086] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 641.055581][T13086] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 641.065735][T13086] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 641.073338][T13086] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 641.286487][T15729] device syzkaller0 entered promiscuous mode [ 641.428585][T15356] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.597895][T15356] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.744035][T15744] netlink: 'syz.0.3060': attribute type 29 has an invalid length. [ 641.761217][T15356] team0: Port device netdevsim0 removed [ 641.775020][T15356] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.815934][T15744] netlink: 'syz.0.3060': attribute type 29 has an invalid length. [ 642.001914][T15749] netlink: 'syz.2.3062': attribute type 39 has an invalid length. [ 642.028282][T15751] netlink: 'syz.4.3061': attribute type 3 has an invalid length. [ 642.088862][T15724] chnl_net:caif_netlink_parms(): no params data found [ 642.099266][T15751] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3061'. [ 642.284950][T15757] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 642.293906][T15757] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 643.191668][T13086] Bluetooth: hci0: command 0x0409 tx timeout [ 643.465748][T15780] netlink: 'syz.2.3067': attribute type 10 has an invalid length. [ 643.994009][T15724] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.007663][T15724] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.079546][T15724] device bridge_slave_0 entered promiscuous mode [ 644.224647][T15724] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.260618][T15724] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.279808][T15724] device bridge_slave_1 entered promiscuous mode [ 644.304376][T15792] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.3070'. [ 644.664617][T15724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 644.847739][T15724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 644.975921][T15824] delete_channel: no stack [ 644.985010][T15824] delete_channel: no stack [ 645.058896][T15821] netlink: 'syz.3.3076': attribute type 3 has an invalid length. [ 645.075649][T15821] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3076'. [ 645.098866][T15724] team0: Port device team_slave_0 added [ 645.156652][T15724] team0: Port device team_slave_1 added [ 645.211281][T13086] Bluetooth: hci0: command 0x041b tx timeout [ 645.334258][T15724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 645.351942][T15724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 645.481970][T15724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 645.508119][T15724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 645.520234][T15724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 645.672595][T15724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 646.302644][T15841] netlink: 'syz.2.3084': attribute type 5 has an invalid length. [ 646.413734][T15724] device hsr_slave_0 entered promiscuous mode [ 646.426581][T15724] device hsr_slave_1 entered promiscuous mode [ 646.436278][T15724] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 646.450652][T15724] Cannot create hsr debugfs directory [ 647.289461][T13086] Bluetooth: hci0: command 0x040f tx timeout [ 647.358147][T15356] device bridge_slave_1 left promiscuous mode [ 647.378270][T15356] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.398906][T15356] device bridge_slave_0 left promiscuous mode [ 647.413642][T15356] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.367580][T15886] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3092'. [ 648.745821][T15356] team0 (unregistering): Port device team_slave_1 removed [ 649.379724][T13086] Bluetooth: hci0: command 0x0419 tx timeout [ 650.283829][T15907] netlink: 'syz.0.3096': attribute type 10 has an invalid length. [ 650.327576][T15907] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3096'. [ 650.338429][T15907] bridge0: port 3(veth0_vlan) entered blocking state [ 650.414764][T15907] bridge0: port 3(veth0_vlan) entered disabled state [ 650.517382][T15907] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 650.869913][T15916] netlink: 'syz.4.3100': attribute type 10 has an invalid length. [ 650.917688][T15724] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 651.119755][T13086] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 651.609339][T15924] netlink: 'syz.4.3102': attribute type 10 has an invalid length. [ 651.643189][T15926] netlink: 'syz.4.3102': attribute type 2 has an invalid length. [ 651.669545][T15926] netlink: 'syz.4.3102': attribute type 8 has an invalid length. [ 651.699769][T15926] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3102'. [ 651.779866][T15927] netlink: 'syz.4.3102': attribute type 2 has an invalid length. [ 651.797493][T15927] netlink: 'syz.4.3102': attribute type 8 has an invalid length. [ 651.851681][T15927] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3102'. [ 651.940924][T15724] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 651.991111][T15724] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 652.058179][T15724] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 652.396397][T15950] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3109'. [ 652.438490][T15724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 652.483440][T15950] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 652.581790][T11992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 652.600790][T11992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 652.766142][T15724] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.880498][T15961] netlink: 'syz.3.3110': attribute type 10 has an invalid length. [ 652.936733][T15961] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3110'. [ 652.968885][T15961] bridge0: port 3(veth0_vlan) entered blocking state [ 653.005329][T15961] bridge0: port 3(veth0_vlan) entered disabled state [ 653.028844][T15961] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 653.052725][T15979] netlink: 'syz.4.3112': attribute type 1 has an invalid length. [ 653.071597][T15979] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3112'. [ 653.090044][T15354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 653.113580][T15354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 653.151132][T15354] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.158647][T15354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 653.193957][T15970] netlink: 'syz.4.3112': attribute type 10 has an invalid length. [ 653.218251][T15970] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3112'. [ 653.350379][T15354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 653.373258][T15354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 653.414014][T15354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 653.440201][T15354] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.447551][T15354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.490024][T15354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 653.544449][T15354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 653.571962][T15354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 653.617062][T15354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 653.698245][T15354] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 653.741524][T15354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 653.781186][T15354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 653.864612][T15354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 653.905706][T15354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 654.018050][T15354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 654.080976][T15354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 654.096140][T15724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 655.141812][T15353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 655.166848][T15353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 655.211395][T15724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 655.282206][T16033] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3125'. [ 655.334364][T16033] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 655.389784][T16031] validate_nla: 3 callbacks suppressed [ 655.389805][T16031] netlink: 'syz.0.3124': attribute type 10 has an invalid length. [ 655.450185][T16031] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3124'. [ 655.481524][T16031] bridge0: port 3(veth0_vlan) entered blocking state [ 655.500446][T16031] bridge0: port 3(veth0_vlan) entered disabled state [ 655.576766][T16031] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 655.718315][T15357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 655.740841][T15357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 655.787041][T15724] device veth0_vlan entered promiscuous mode [ 655.879486][T11992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 655.913369][T11992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 655.943903][T11992] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 655.994348][T11992] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 656.033930][T16049] netlink: 'syz.0.3129': attribute type 9 has an invalid length. [ 656.047429][T15724] device veth1_vlan entered promiscuous mode [ 656.069535][T16049] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.3129'. [ 656.147184][T15357] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 656.186542][T15357] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 656.287637][T15357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 656.317757][T15357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 656.341054][T16062] netlink: 'syz.3.3130': attribute type 29 has an invalid length. [ 656.366584][T16062] netlink: 'syz.3.3130': attribute type 29 has an invalid length. [ 656.377759][T15724] device veth0_macvtap entered promiscuous mode [ 656.393161][T16057] netlink: 'syz.3.3130': attribute type 29 has an invalid length. [ 656.418872][T15724] device veth1_macvtap entered promiscuous mode [ 656.435419][T16062] netlink: 'syz.3.3130': attribute type 29 has an invalid length. [ 656.475132][ T4276] Bluetooth: hci3: unexpected subevent 0x12 length: 150 > 5 [ 656.517269][T16065] netlink: 'syz.0.3134': attribute type 10 has an invalid length. [ 656.589602][T16065] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3134'. [ 656.612538][T15724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.635513][T15724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.666587][T15724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.695153][T15724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.737770][T16072] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.3135'. [ 656.757242][T15724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 656.815024][T16065] mac80211_hwsim hwsim30 ªªªªªª: renamed from wlan0 [ 656.899132][T11992] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 656.919773][T11992] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 656.953200][T11992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 656.982470][T15724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.009422][T15724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.036062][T15724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.057042][T15724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.133943][T15724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 657.176329][T11992] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 657.206159][T11992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 657.302620][T15724] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.379405][T15724] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.429182][T15724] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.469931][T15724] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.405811][T16095] netlink: 'syz.2.3139': attribute type 10 has an invalid length. [ 658.429737][T16095] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3139'. [ 658.709660][T15356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.717950][T15356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.876686][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 659.007208][T16108] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3142'. [ 659.168293][T16115] netlink: 'syz.2.3144': attribute type 3 has an invalid length. [ 659.189443][T16115] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3144'. [ 659.242120][T15357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.260765][T15357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.329261][T15353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 662.158697][T13086] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 662.171813][T13086] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 662.183426][T13086] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 662.193174][T13086] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 662.213858][T13086] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 662.221916][T13086] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 662.988912][T16150] chnl_net:caif_netlink_parms(): no params data found [ 663.065391][T16162] netlink: 'syz.2.3153': attribute type 10 has an invalid length. [ 663.084719][T16162] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3153'. [ 663.418941][T16168] netlink: 'syz.1.3156': attribute type 10 has an invalid length. [ 663.586381][T16150] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.599865][T16150] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.641467][T16150] device bridge_slave_0 entered promiscuous mode [ 663.680379][T16150] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.688352][T16150] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.730772][T16150] device bridge_slave_1 entered promiscuous mode [ 663.821486][T16150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 663.903722][T16150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 663.997299][T16183] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3159'. [ 664.069630][T16150] team0: Port device team_slave_0 added [ 664.092611][T16150] team0: Port device team_slave_1 added [ 664.175104][T16150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.189680][T16150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 664.235984][T16150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 664.249634][ T4276] Bluetooth: hci5: command 0x0409 tx timeout [ 664.260292][T16150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 664.267415][T16150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 664.361508][T16150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 664.602709][T16150] device hsr_slave_0 entered promiscuous mode [ 664.634126][T16150] device hsr_slave_1 entered promiscuous mode [ 664.674168][T16150] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 664.689527][T16150] Cannot create hsr debugfs directory [ 666.038014][T16150] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.100181][T16211] netlink: 'syz.0.3166': attribute type 10 has an invalid length. [ 666.119576][T16211] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3166'. [ 666.140118][T16211] bridge0: port 3(veth0_vlan) entered blocking state [ 666.168983][T16211] bridge0: port 3(veth0_vlan) entered disabled state [ 666.187749][T16211] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 666.330573][T13086] Bluetooth: hci5: command 0x041b tx timeout [ 666.489225][T16150] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.697032][T16150] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.776916][T16228] netlink: 'syz.0.3169': attribute type 10 has an invalid length. [ 666.975064][T16150] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.532442][T16150] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 667.554694][T16150] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 667.576043][T16150] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 667.605851][T16150] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 667.988362][T16150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.000431][T16243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 668.035634][T16243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 668.138375][T16243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 668.200376][T16243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 668.410591][T13086] Bluetooth: hci5: command 0x040f tx timeout [ 668.640858][T15354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 668.650889][T15354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 668.719671][T16150] 8021q: adding VLAN 0 to HW filter on device team0 [ 668.779002][T15354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 668.793738][T15354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 668.803623][T15354] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.812109][T15354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.830718][T15354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 668.870144][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 668.885260][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 668.898460][ T7865] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.906067][ T7865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.949792][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 669.024228][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 669.044756][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 669.095955][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 669.139193][T16150] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 669.167224][T16150] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 669.233266][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 669.244584][T16271] netlink: 'syz.0.3178': attribute type 3 has an invalid length. [ 669.266785][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 669.279637][T16271] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3178'. [ 669.292275][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 669.308021][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 669.325422][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 669.346248][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 669.364941][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 669.386639][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 669.661137][T16275] netlink: 'syz.3.3180': attribute type 10 has an invalid length. [ 669.746005][T16275] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3180'. [ 669.876493][T16275] bridge0: port 3(veth0_vlan) entered blocking state [ 669.894009][T16275] bridge0: port 3(veth0_vlan) entered disabled state [ 669.915646][T16275] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 670.260403][T16280] netlink: 'syz.0.3181': attribute type 10 has an invalid length. [ 670.499375][ T4276] Bluetooth: hci5: command 0x0419 tx timeout [ 671.488493][T16280] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.497345][T16280] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.578344][T16280] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.586692][T16280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 671.596747][T16280] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.604113][T16280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 671.666655][T16280] team0: Port device bridge0 added [ 671.773675][T15353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 671.789646][T15353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 671.844605][T16150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 673.022621][T16333] netlink: 'syz.0.3192': attribute type 10 has an invalid length. [ 673.045454][T16333] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3192'. [ 673.092581][T16333] bridge0: port 3(veth0_vlan) entered blocking state [ 673.116972][T16333] bridge0: port 3(veth0_vlan) entered disabled state [ 673.193384][T16333] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 673.797080][T15353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 673.813387][T15353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 673.878239][T15353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 673.891011][T15353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 673.905097][T16150] device veth0_vlan entered promiscuous mode [ 673.916065][T15353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 673.925927][T15353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 673.985804][T16150] device veth1_vlan entered promiscuous mode [ 674.101181][T11992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 674.120430][T11992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 674.141361][T16354] Ÿë: port 1(gretap0) entered blocking state [ 674.150346][T16354] Ÿë: port 1(gretap0) entered disabled state [ 674.167721][T16354] device gretap0 entered promiscuous mode [ 674.207172][T16150] device veth0_macvtap entered promiscuous mode [ 674.223372][T16150] device veth1_macvtap entered promiscuous mode [ 674.265278][T16150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.284853][T16150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.302285][T16150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 674.317015][T16150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.333267][T16150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 674.349339][T15353] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 674.358779][T15353] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 674.372037][T15353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 674.384298][T15353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 674.402571][T16150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 674.422385][T16150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.434835][T16150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 674.448655][T16150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 674.462629][T16150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 674.475006][T15353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 674.496663][T15353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 674.540086][T16150] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.557004][T16150] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.569839][T16150] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.583929][T16150] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.857141][T16362] netlink: 'syz.0.3197': attribute type 29 has an invalid length. [ 674.967981][T16362] netlink: 'syz.0.3197': attribute type 29 has an invalid length. [ 675.052719][T15356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.066777][T15356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.166968][T15353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 675.222597][T16361] netlink: 'syz.1.3198': attribute type 1 has an invalid length. [ 675.254250][T16361] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.3198'. [ 675.368473][T15356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.394616][T15356] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.449823][T16374] netlink: 'syz.3.3200': attribute type 21 has an invalid length. [ 675.527383][T16374] IPv6: NLM_F_CREATE should be specified when creating new route [ 675.643129][T16374] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 675.650650][T16374] IPv6: NLM_F_CREATE should be set when creating new route [ 675.658918][T16374] IPv6: NLM_F_CREATE should be set when creating new route [ 675.667345][T16374] IPv6: NLM_F_CREATE should be set when creating new route [ 675.792476][T15353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 675.830724][T16362] netlink: 'syz.0.3197': attribute type 10 has an invalid length. [ 677.037791][T16362] device hsr0 entered promiscuous mode [ 677.118372][T16362] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 677.146140][T16362] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 677.159757][T16362] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 677.173821][T16362] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 677.216187][T16379] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3203'. [ 677.819484][T11992] tipc: Subscription rejected, illegal request [ 678.306821][T16403] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.3211'. [ 678.408705][T16408] device wlan1 entered promiscuous mode [ 678.577321][T16405] IPv6: Can't replace route, no match found [ 678.830197][ T4276] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 678.849825][ T4276] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 678.859223][ T4276] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 678.871329][ T4276] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 678.884589][ T4276] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 678.894276][ T4276] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 678.942083][T16411] device wlan1 entered promiscuous mode [ 679.086423][ T7865] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.330654][T16431] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3214'. [ 679.350571][ T7865] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.409568][T16431] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3214'. [ 679.430775][T16434] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3214'. [ 679.496902][T16433] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3217'. [ 679.550521][ T7865] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.583889][ T4276] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18 [ 679.597327][T16436] wlan1: mtu greater than device maximum [ 679.605647][T16431] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.3214'. [ 679.622045][T16415] chnl_net:caif_netlink_parms(): no params data found [ 679.753212][ T7865] bond0: (slave netdevsim0): Releasing backup interface [ 679.810602][ T7865] device netdevsim0 left promiscuous mode [ 679.903202][ T7865] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.962503][T16443] delete_channel: no stack [ 680.382095][T16458] netlink: 'syz.4.3226': attribute type 29 has an invalid length. [ 680.405008][T16460] netlink: 'syz.4.3226': attribute type 1 has an invalid length. [ 680.452199][T16462] IPv6: Can't replace route, no match found [ 680.486027][T16415] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.509533][T16415] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.544632][T16415] device bridge_slave_0 entered promiscuous mode [ 680.622603][T16415] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.657512][T16415] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.690698][T16415] device bridge_slave_1 entered promiscuous mode [ 680.779261][T16470] device wlan1 entered promiscuous mode [ 680.837060][T16415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 680.885200][ T7865] device 0 left promiscuous mode [ 680.969237][T16415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 680.981957][ T4276] Bluetooth: hci2: command 0x0409 tx timeout [ 681.256093][T16415] team0: Port device team_slave_0 added [ 681.495064][T16499] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.3232'. [ 681.515870][T16415] team0: Port device team_slave_1 added [ 682.439079][T16415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 682.457399][T16415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 682.588017][T16415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 682.691402][T16511] netlink: 'syz.3.3234': attribute type 29 has an invalid length. [ 682.835513][T16515] netlink: 'syz.0.3235': attribute type 3 has an invalid length. [ 682.847940][T16415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 682.862296][T16415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 682.895286][T16515] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3235'. [ 682.957614][T16415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 683.001254][T16511] netlink: 'syz.3.3234': attribute type 29 has an invalid length. [ 683.059916][ T4276] Bluetooth: hci2: command 0x041b tx timeout [ 683.151577][T16510] netlink: 'syz.3.3234': attribute type 29 has an invalid length. [ 683.275038][T16513] netlink: 'syz.3.3234': attribute type 29 has an invalid length. [ 683.578832][T16415] device hsr_slave_0 entered promiscuous mode [ 683.601177][T16415] device hsr_slave_1 entered promiscuous mode [ 683.636900][T16415] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 683.657632][T16415] Cannot create hsr debugfs directory [ 683.696820][T16528] netlink: 'syz.3.3238': attribute type 2 has an invalid length. [ 683.717643][T16533] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3239'. [ 683.727626][T16528] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3238'. [ 683.802248][ T7865] device gretap0 left promiscuous mode [ 683.828911][ T7865] Ÿë: port 1(gretap0) entered disabled state [ 684.536286][T16539] netlink: 'syz.3.3240': attribute type 10 has an invalid length. [ 684.546953][T16539] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3240'. [ 684.565903][T16539] bridge0: port 3(ipvlan1) entered blocking state [ 684.576223][T16539] bridge0: port 3(ipvlan1) entered disabled state [ 684.594468][T16539] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 684.979838][T16545] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3242'. [ 685.016999][T16545] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.139846][ T4276] Bluetooth: hci2: command 0x040f tx timeout [ 685.165272][T16545] device bridge_slave_0 left promiscuous mode [ 685.173513][T16545] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.766635][T16570] netlink: 'syz.3.3245': attribute type 29 has an invalid length. [ 686.910885][T16570] netlink: 'syz.3.3245': attribute type 29 has an invalid length. [ 686.939663][T16574] netlink: 'syz.1.3248': attribute type 15 has an invalid length. [ 686.953193][T16580] netlink: 'syz.3.3245': attribute type 10 has an invalid length. [ 686.976129][T16580] device hsr0 entered promiscuous mode [ 687.017259][T16580] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 687.051743][T16580] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 687.063439][T16580] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 687.078006][T16580] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 687.210069][ T4276] Bluetooth: hci2: command 0x0419 tx timeout [ 688.464647][T16607] netlink: 'syz.4.3256': attribute type 3 has an invalid length. [ 688.478451][T16607] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3256'. [ 689.382400][ T7865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 689.392259][ T7865] device bond_slave_1 left promiscuous mode [ 689.740944][ T7865] bond0 (unregistering): Released all slaves [ 689.798889][T16616] netlink: 'syz.1.3259': attribute type 10 has an invalid length. [ 689.826759][T16616] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3259'. [ 689.851301][T16616] device team0 entered promiscuous mode [ 689.876181][T16616] device team_slave_0 entered promiscuous mode [ 689.919859][T16616] device team_slave_1 entered promiscuous mode [ 689.960357][T16616] bridge0: port 3(team0) entered blocking state [ 689.966885][T16616] bridge0: port 3(team0) entered disabled state [ 690.020029][T16616] bridge0: port 3(team0) entered blocking state [ 690.026488][T16616] bridge0: port 3(team0) entered forwarding state [ 690.295849][T16415] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 690.353131][T16646] netlink: 'syz.1.3267': attribute type 2 has an invalid length. [ 690.405662][T16646] netlink: 'syz.1.3267': attribute type 1 has an invalid length. [ 690.435864][T16415] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 690.457295][T16646] netlink: 185292 bytes leftover after parsing attributes in process `syz.1.3267'. [ 690.535858][T16649] netlink: 'syz.4.3265': attribute type 29 has an invalid length. [ 691.215892][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.222433][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.868962][T16649] netlink: 'syz.4.3265': attribute type 29 has an invalid length. [ 691.944892][T16659] netlink: 'syz.4.3265': attribute type 10 has an invalid length. [ 691.976577][T16659] device hsr0 entered promiscuous mode [ 692.008760][T16672] netlink: 'syz.0.3272': attribute type 3 has an invalid length. [ 692.036763][T16676] netlink: 'syz.3.3268': attribute type 2 has an invalid length. [ 692.055977][T16659] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 692.077487][T16672] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3272'. [ 692.095377][T16676] netlink: 140244 bytes leftover after parsing attributes in process `syz.3.3268'. [ 692.121218][T16659] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 692.138951][T16659] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 692.157757][T16659] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 692.246123][T16415] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 692.265574][T16673] pimreg0: tun_chr_ioctl cmd 35111 [ 692.294617][T16415] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 692.631271][ T7865] device 0 left promiscuous mode [ 693.572917][T16415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 693.799477][T16711] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.3277'. [ 693.863262][T11994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 693.877548][T11994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 693.954795][T16415] 8021q: adding VLAN 0 to HW filter on device team0 [ 694.006211][T15356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 694.028809][T15356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 694.063749][T15356] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.072808][T15356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 694.212304][T15356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 694.229034][T15356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 694.248121][T15356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 694.280524][T15356] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.288970][T15356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 694.304306][T15356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 694.318372][T15356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 694.439487][T15356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 694.476156][T15356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 694.527127][T15356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 694.569920][T15356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 694.752001][T15356] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 694.776193][T15356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 694.807480][T15356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 694.871026][T15356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 694.911394][T15356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 694.957882][T16415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 695.771942][T16749] netlink: 'syz.0.3285': attribute type 29 has an invalid length. [ 696.435083][T16749] netlink: 'syz.0.3285': attribute type 29 has an invalid length. [ 698.749988][T16747] netlink: 'syz.0.3285': attribute type 29 has an invalid length. [ 699.030418][T16783] netlink: 'syz.3.3290': attribute type 3 has an invalid length. [ 699.103477][T16783] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3290'. [ 699.280068][ T7865] bond0: (slave wlan1): Releasing backup interface [ 699.470150][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 699.517538][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 699.784195][T16794] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.3288'. [ 699.919708][T16415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 700.068432][ T7865] device veth1_macvtap left promiscuous mode [ 700.079715][ T7865] device veth0_macvtap left promiscuous mode [ 701.370677][ T7865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 701.383097][ T7865] device bond_slave_1 left promiscuous mode [ 701.883382][ T7865] bond0 (unregistering): Released all slaves [ 701.956305][T16811] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3296'. [ 701.994943][T16822] netlink: 'syz.1.3298': attribute type 17 has an invalid length. [ 702.020626][T16822] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3298'. [ 702.086360][T15353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 702.155498][T15353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 702.256945][T15353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 702.286536][T16829] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.3299'. [ 702.326580][T15353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 702.351653][T16828] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.3299'. [ 702.380051][T15353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 702.436048][T15353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 702.476567][T16415] device veth0_vlan entered promiscuous mode [ 702.540970][T16415] device veth1_vlan entered promiscuous mode [ 702.781047][T15356] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 702.808497][T15356] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 702.897472][T15356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 702.956887][T15356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 702.985924][T16838] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3302'. [ 703.022402][T16415] device veth0_macvtap entered promiscuous mode [ 703.053625][ T7829] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 703.100880][T16415] device veth1_macvtap entered promiscuous mode [ 703.115690][T16848] netlink: 'syz.0.3304': attribute type 2 has an invalid length. [ 703.150862][T16848] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3304'. [ 703.276645][T16415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 703.318049][T16415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.331048][T16415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 703.343264][T16415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.354532][T16415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 703.366655][T16415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.401496][T16415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 703.417999][T16415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 703.484595][T16415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.531826][T16415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 703.561368][T16415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.575879][T16415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 703.593755][T16415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.635865][T16415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 703.663374][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 703.681610][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 703.730431][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 703.749406][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 703.798357][T16415] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.859431][T16415] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.886788][T16415] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.917615][T16415] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.158712][T16876] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3310'. [ 704.409975][T11992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.450876][T11992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.486954][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 704.568275][ T7869] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.584242][T16884] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3314'. [ 704.595904][ T7869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.611422][T11992] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 705.135070][T16899] netlink: 'syz.2.3206': attribute type 10 has an invalid length. [ 705.156108][T16899] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3206'. [ 705.168255][T16899] bridge0: port 3(veth0_vlan) entered blocking state [ 705.177190][T16899] bridge0: port 3(veth0_vlan) entered disabled state [ 705.194646][T16899] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 706.872785][T16921] netlink: 'syz.0.3324': attribute type 21 has an invalid length. [ 706.924367][T16929] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3326'. [ 706.956798][T16932] device veth0_vlan left promiscuous mode [ 707.031429][T16932] device veth0_vlan entered promiscuous mode [ 707.081324][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 707.153707][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 707.164442][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 708.291111][T16958] device wlan1 entered promiscuous mode [ 708.960127][T16969] netlink: 'syz.0.3334': attribute type 10 has an invalid length. [ 708.984520][T16969] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3334'. [ 709.011527][T16969] device veth0_vlan left promiscuous mode [ 709.019724][T16969] device veth0_vlan entered promiscuous mode [ 709.105153][T16969] bridge0: port 3(veth0_vlan) entered blocking state [ 709.121024][T16969] bridge0: port 3(veth0_vlan) entered disabled state [ 709.187104][T16969] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 709.233819][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 709.248372][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 709.269219][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 709.282902][T16976] netlink: 'syz.1.3339': attribute type 2 has an invalid length. [ 709.294601][T16976] netlink: 'syz.1.3339': attribute type 8 has an invalid length. [ 709.309004][T16976] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3339'. [ 709.326344][T16985] netlink: 'syz.4.3341': attribute type 3 has an invalid length. [ 709.336309][T16985] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.3341'. [ 710.077853][T17005] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3348'. [ 712.634090][T17005] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 712.680308][T17016] netlink: 'syz.4.3347': attribute type 10 has an invalid length. [ 712.695720][T17016] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 712.718796][T17016] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 712.742952][T17016] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 712.795308][T17016] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 713.009773][T17023] netlink: 'syz.0.3350': attribute type 1 has an invalid length. [ 713.334157][T17033] netlink: 'syz.3.3352': attribute type 10 has an invalid length. [ 713.360542][T17033] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3352'. [ 713.442173][T17033] bridge0: port 1(veth0_vlan) entered blocking state [ 713.451030][T17033] bridge0: port 1(veth0_vlan) entered disabled state [ 713.518438][T17033] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 713.798075][T17052] netlink: 'syz.4.3358': attribute type 21 has an invalid length. [ 713.821176][T17052] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3358'. [ 714.325893][T17063] netlink: 'syz.1.3361': attribute type 10 has an invalid length. [ 714.401664][T17063] device macvlan0 entered promiscuous mode [ 714.430412][T17063] team0: Port device macvlan0 added [ 714.470901][T17067] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3364'. [ 714.621116][T17079] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3366'. [ 714.798238][T17087] netlink: 'syz.1.3367': attribute type 21 has an invalid length. [ 714.871345][T17087] netlink: 'syz.1.3367': attribute type 11 has an invalid length. [ 715.332758][T17090] netlink: 'syz.2.3369': attribute type 10 has an invalid length. [ 715.348189][T17090] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3369'. [ 715.497404][T17090] bridge0: port 3(veth0_vlan) entered blocking state [ 715.538384][T17090] bridge0: port 3(veth0_vlan) entered disabled state [ 716.317391][T17111] netlink: 'syz.3.3372': attribute type 2 has an invalid length. [ 716.945366][T17090] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 716.980098][T17111] device 0 entered promiscuous mode [ 717.541063][T17117] netlink: 'syz.0.3373': attribute type 27 has an invalid length. [ 717.560627][T17117] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3373'. [ 718.679910][T17159] validate_nla: 1 callbacks suppressed [ 718.679931][T17159] netlink: 'syz.0.3386': attribute type 10 has an invalid length. [ 718.705898][T17159] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3386'. [ 718.795110][T17159] bridge0: port 3(veth0_vlan) entered blocking state [ 718.883542][T17159] bridge0: port 3(veth0_vlan) entered disabled state [ 718.950437][T17159] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 719.415737][T17169] netlink: 'syz.4.3390': attribute type 29 has an invalid length. [ 719.737855][T17182] netlink: 'syz.3.3394': attribute type 17 has an invalid length. [ 720.335614][T17193] netlink: 'syz.0.3398': attribute type 22 has an invalid length. [ 720.374405][T17193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3398'. [ 721.542520][T17211] netlink: 'syz.0.3403': attribute type 10 has an invalid length. [ 721.579167][T17211] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3403'. [ 721.599862][T17211] bridge0: port 3(veth0_vlan) entered blocking state [ 721.620453][T17211] bridge0: port 3(veth0_vlan) entered disabled state [ 721.659659][T17211] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 722.993547][T17253] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3416'. [ 723.256337][T17260] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3418'. [ 723.363084][T17262] netlink: 'syz.0.3419': attribute type 10 has an invalid length. [ 723.472220][T17262] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3419'. [ 723.632229][T17262] bridge0: port 3(veth0_vlan) entered blocking state [ 723.690173][T17262] bridge0: port 3(veth0_vlan) entered disabled state [ 723.779611][T17262] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 723.877223][T17270] netlink: 'syz.1.3423': attribute type 4 has an invalid length. [ 723.919759][T17270] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3423'. [ 724.009750][T13086] Bluetooth: hci4: command 0x0406 tx timeout [ 724.028952][T17270] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 725.544921][T17294] delete_channel: no stack [ 725.686404][T17308] netlink: 'syz.1.3433': attribute type 29 has an invalid length. [ 725.726904][T17308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3433'. [ 725.780013][T17308] netlink: 'syz.1.3433': attribute type 29 has an invalid length. [ 725.819188][T17308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3433'. [ 725.966183][T17316] netlink: 'syz.0.3435': attribute type 10 has an invalid length. [ 726.014872][T17316] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3435'. [ 726.096911][T17316] bridge0: port 3(veth0_vlan) entered blocking state [ 726.186635][T17316] bridge0: port 3(veth0_vlan) entered disabled state [ 726.271618][T17316] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 727.095523][T17348] netlink: 126288 bytes leftover after parsing attributes in process `syz.4.3440'. [ 727.155559][T17336] device syzkaller0 entered promiscuous mode [ 729.418206][T17369] netlink: 'syz.1.3450': attribute type 29 has an invalid length. [ 729.484343][T17370] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3450'. [ 731.489647][T17369] netlink: 'syz.1.3450': attribute type 29 has an invalid length. [ 731.938792][T17375] netlink: 'syz.0.3451': attribute type 10 has an invalid length. [ 731.987698][T17375] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3451'. [ 732.030601][T17382] netlink: 'syz.2.3454': attribute type 7 has an invalid length. [ 732.297756][T17375] bridge0: port 3(veth0_vlan) entered blocking state [ 732.313654][T17375] bridge0: port 3(veth0_vlan) entered disabled state [ 732.499212][T17375] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 732.674854][T17388] netlink: 'syz.2.3454': attribute type 10 has an invalid length. [ 732.713192][T17388] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3454'. [ 732.868444][T17388] bridge0: port 3(veth0_vlan) entered blocking state [ 732.885662][T17388] bridge0: port 3(veth0_vlan) entered disabled state [ 732.968510][T17388] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 733.281318][T17395] netlink: 'syz.3.3455': attribute type 12 has an invalid length. [ 733.304057][T17395] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3455'. [ 734.517038][T17415] netlink: 'syz.3.3460': attribute type 12 has an invalid length. [ 734.535656][T17415] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3460'. [ 735.182688][T17423] netlink: 'syz.3.3464': attribute type 29 has an invalid length. [ 735.305170][T17424] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3464'. [ 735.465951][T17423] netlink: 'syz.3.3464': attribute type 29 has an invalid length. [ 736.320282][T17445] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3470'. [ 736.682022][T17458] netlink: 'syz.3.3475': attribute type 29 has an invalid length. [ 736.694361][T17458] netlink: 'syz.3.3475': attribute type 29 has an invalid length. [ 736.707989][T17458] netlink: 'syz.3.3475': attribute type 29 has an invalid length. [ 736.988431][ C0] [ 736.988441][ C0] ================================ [ 736.988446][ C0] WARNING: inconsistent lock state [ 736.988465][ C0] syzkaller #0 Not tainted [ 736.988476][ C0] -------------------------------- [ 736.988482][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 736.988491][ C0] syz.0.3474/17461 [HC2[2]:SC0[0]:HE0:SE1] takes: [ 736.988514][ C0] ffff88805278ffa0 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x179/0x2f0 [ 736.988576][ C0] {INITIAL USE} state was registered at: [ 736.988583][ C0] lock_acquire+0x1bb/0x4a0 [ 736.988611][ C0] _raw_spin_lock+0x2a/0x40 [ 736.988631][ C0] htab_lock_bucket+0x179/0x2f0 [ 736.988652][ C0] htab_lru_map_update_elem+0x31e/0xe80 [ 736.988673][ C0] bpf_map_update_value+0x59e/0x670 [ 736.988698][ C0] map_update_elem+0x4d7/0x680 [ 736.988724][ C0] __sys_bpf+0x4ec/0x780 [ 736.988750][ C0] __x64_sys_bpf+0x78/0x90 [ 736.988774][ C0] do_syscall_64+0x4c/0xa0 [ 736.988802][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 736.988827][ C0] irq event stamp: 11584 [ 736.988833][ C0] hardirqs last enabled at (11583): [] noist_exc_debug+0xee/0x120 [ 736.988857][ C0] hardirqs last disabled at (11584): [] irqentry_enter+0xf/0x50 [ 736.988883][ C0] softirqs last enabled at (11578): [] __irq_exit_rcu+0x13b/0x230 [ 736.988908][ C0] softirqs last disabled at (11411): [] __irq_exit_rcu+0x13b/0x230 [ 736.988932][ C0] [ 736.988932][ C0] other info that might help us debug this: [ 736.988937][ C0] Possible unsafe locking scenario: [ 736.988937][ C0] [ 736.988942][ C0] CPU0 [ 736.988945][ C0] ---- [ 736.988948][ C0] lock(&htab->lockdep_key); [ 736.988960][ C0] [ 736.988963][ C0] lock(&htab->lockdep_key); [ 736.988975][ C0] [ 736.988975][ C0] *** DEADLOCK *** [ 736.988975][ C0] [ 736.988978][ C0] 1 lock held by syz.0.3474/17461: [ 736.988989][ C0] #0: ffffffff8cb2d5e0 (rcu_read_lock){....}-{1:2}, at: perf_event_output_forward+0xbe/0x2f0 [ 736.989046][ C0] [ 736.989046][ C0] stack backtrace: [ 736.989052][ C0] CPU: 0 PID: 17461 Comm: syz.0.3474 Not tainted syzkaller #0 [ 736.989071][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 736.989084][ C0] Call Trace: [ 736.989090][ C0] <#DB> [ 736.989100][ C0] dump_stack_lvl+0x188/0x24e [ 736.989137][ C0] ? show_regs_print_info+0x12/0x12 [ 736.989180][ C0] ? print_usage_bug+0x42a/0x690 [ 736.989211][ C0] ? verify_lock_unused+0x18/0x140 [ 736.989249][ C0] lock_acquire+0x2df/0x4a0 [ 736.989291][ C0] ? htab_lock_bucket+0x179/0x2f0 [ 736.989319][ C0] ? read_lock_is_recursive+0x10/0x10 [ 736.989349][ C0] ? rcu_read_unlock+0x8c/0xa0 [ 736.989375][ C0] ? perf_output_begin_forward+0xa7/0xa80 [ 736.989409][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 736.989436][ C0] ? get_perf_callchain+0x3c8/0x490 [ 736.989474][ C0] _raw_spin_lock+0x2a/0x40 [ 736.989496][ C0] ? htab_lock_bucket+0x179/0x2f0 [ 736.989520][ C0] htab_lock_bucket+0x179/0x2f0 [ 736.989551][ C0] ? htab_lru_map_delete_node+0x630/0x630 [ 736.989575][ C0] ? rcu_is_watching+0x11/0xa0 [ 736.989608][ C0] ? lock_release+0xcf/0x920 [ 736.989644][ C0] ? htab_map_hash+0x269/0x6d0 [ 736.989675][ C0] htab_lru_map_delete_elem+0x1ad/0x780 [ 736.989708][ C0] ? bpf_overflow_handler+0xd9/0x7c0 [ 736.989737][ C0] ? htab_lru_map_update_elem+0xe80/0xe80 [ 736.989779][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 736.989806][ C0] bpf_overflow_handler+0x6e8/0x7c0 [ 736.989838][ C0] ? bpf_overflow_handler+0xd9/0x7c0 [ 736.989863][ C0] ? perf_swevent_overflow+0x230/0x230 [ 736.989900][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 736.989938][ C0] __perf_event_overflow+0x448/0x610 [ 736.989983][ C0] perf_swevent_event+0x315/0x570 [ 736.990021][ C0] ? perf_tp_event+0xc30/0xc30 [ 736.990074][ C0] perf_bp_event+0x312/0x3f0 [ 736.990116][ C0] ? perf_event_free_bpf_prog+0x110/0x110 [ 736.990191][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 736.990220][ C0] ? read_lock_is_recursive+0x10/0x10 [ 736.990262][ C0] hw_breakpoint_exceptions_notify+0x152/0x470 [ 736.990310][ C0] atomic_notifier_call_chain+0x17a/0x2b0 [ 736.990335][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 736.990366][ C0] notify_die+0x141/0x1a0 [ 736.990396][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 736.990444][ C0] notify_debug+0x20/0x30 [ 736.990470][ C0] exc_debug+0xd9/0x130 [ 736.990495][ C0] asm_exc_debug+0x1a/0x40 [ 736.990521][ C0] RIP: 0010:__get_user_nocheck_8+0x9/0x13 [ 736.990554][ C0] Code: 90 0f 01 cb 0f ae e8 0f b7 10 31 c0 0f 01 ca c3 90 0f 01 cb 0f ae e8 8b 10 31 c0 0f 01 ca c3 90 90 0f 01 cb 0f ae e8 48 8b 10 <31> c0 0f 01 ca c3 90 0f 01 ca 31 d2 48 c7 c0 f2 ff ff ff c3 00 00 [ 736.990572][ C0] RSP: 0000:ffffc90005587540 EFLAGS: 00040802 [ 736.990591][ C0] RAX: 0000200000000300 RBX: dffffc0000000000 RCX: ffff88802a8c1dc0 [ 736.990606][ C0] RDX: 00006370692f736e RSI: 0000200000000300 RDI: 00007fffffffeff0 [ 736.990621][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000000 [ 736.990634][ C0] R10: dffffc0000000000 R11: fffff52000ab0f07 R12: 00000000ffffffff [ 736.990649][ C0] R13: 0000200000000300 R14: 0000000000000003 R15: 00007fffffffeff0 [ 736.990687][ C0] [ 736.990693][ C0] [ 736.990699][ C0] perf_callchain_user+0x55d/0x13c0 [ 736.990753][ C0] get_perf_callchain+0x39e/0x490 [ 736.990788][ C0] ? put_callchain_entry+0xb0/0xb0 [ 736.990827][ C0] ? __perf_event_header__init_id+0x425/0x530 [ 736.990866][ C0] perf_prepare_sample+0x399/0x2020 [ 736.990907][ C0] ? read_lock_is_recursive+0x10/0x10 [ 736.990940][ C0] ? perf_callchain+0x190/0x190 [ 736.990969][ C0] ? rcu_is_watching+0x11/0xa0 [ 736.991001][ C0] ? trace_bpf_trace_printk+0x9c/0x220 [ 736.991032][ C0] perf_event_output_forward+0x197/0x2f0 [ 736.991065][ C0] ? perf_event_output_forward+0xbe/0x2f0 [ 736.991097][ C0] ? perf_get_page_size+0x430/0x430 [ 736.991156][ C0] bpf_overflow_handler+0x60f/0x7c0 [ 736.991187][ C0] ? bpf_overflow_handler+0xd9/0x7c0 [ 736.991213][ C0] ? perf_swevent_overflow+0x230/0x230 [ 736.991240][ C0] ? sched_clock_cpu+0x6e/0x260 [ 736.991271][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 736.991318][ C0] __perf_event_overflow+0x448/0x610 [ 736.991363][ C0] perf_swevent_hrtimer+0x472/0x630 [ 736.991401][ C0] ? cpu_clock_event_read+0x50/0x50 [ 736.991472][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 736.991499][ C0] ? _raw_spin_unlock+0x40/0x40 [ 736.991537][ C0] __hrtimer_run_queues+0x50b/0xd50 [ 736.991573][ C0] ? cpu_clock_event_read+0x50/0x50 [ 736.991615][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 736.991640][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 736.991682][ C0] hrtimer_interrupt+0x3c5/0x9c0 [ 736.991747][ C0] __sysvec_apic_timer_interrupt+0x153/0x5a0 [ 736.991783][ C0] sysvec_apic_timer_interrupt+0x4d/0xc0 [ 736.991809][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 736.991836][ C0] RIP: 0033:0x7fefb917b5bd [ 736.991856][ C0] Code: 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 c5 fd 74 0f fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 90 f3 0f bc [ 736.991874][ C0] RSP: 002b:00007fefba01a8a8 EFLAGS: 00000283 [ 736.991891][ C0] RAX: 0000000000000300 RBX: 00007fefba01ade0 RCX: 2f666c65732f636f [ 736.991906][ C0] RDX: 0000200000000300 RSI: 00007fefb925cdc0 RDI: 0000200000000300 [ 736.991920][ C0] RBP: 0000200000000300 R08: 00007fefba01b010 R09: 00000000ffffffff [ 736.991935][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 736.991947][ C0] R13: 0000000000000073 R14: 00007fefb9231f5b R15: 00007fefba01aea0 [ 736.991986][ C0] [ 737.716328][T17472] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3477'. [ 737.942882][T17472] ieee80211 !!!: Selected rate control algorithm 'minstrel_ht' [ 737.952141][T17472] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 737.966079][T17482] netlink: 'syz.2.3479': attribute type 29 has an invalid length. [ 738.045411][T17482] netlink: 'syz.2.3479': attribute type 29 has an invalid length. [ 738.083713][T17480] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3479'. [ 739.849783][T13086] Bluetooth: hci1: command 0x0406 tx timeout