last executing test programs: 4.515002666s ago: executing program 0 (id=4941): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x1000, '\x00', 0x0, r2, 0x2, 0x3, 0x1}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xa, 0x6, 0x4, 0xf, 0x0, 0x1}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x400000000000000, 0x10000003fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="1c0000005e007f029e3b470d649bc33b0281bb9f72ab25399cd956c0", 0x1c}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x10122) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x300060c1) perf_event_open(&(0x7f0000000480)={0x1, 0xfffffffffffffc26, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8005c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc69c, 0x0, @perf_config_ext={0x8000000000000, 0x9}, 0x1008, 0xb, 0x0, 0x9, 0x0, 0x8010001}, 0x0, 0xd, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff808500000004"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r6}, 0xc) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 3.713585357s ago: executing program 0 (id=4946): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x28, 0x1, 0x8, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x7, 0x3, 0x0, 0x0, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7fffffff, 0x2, @perf_bp={&(0x7f00000000c0)}, 0x2006, 0x10001, 0x7ff, 0x9, 0x6, 0x4, 0xf000, 0x0, 0x5f, 0x0, 0x100000000}, 0x0, 0x0, r0, 0x3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x1f00, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) close(r1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair(0x28, 0x1, 0x8, &(0x7f0000000100)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) (async) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x7, 0x3, 0x0, 0x0, 0x0, 0x1, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7fffffff, 0x2, @perf_bp={&(0x7f00000000c0)}, 0x2006, 0x10001, 0x7ff, 0x9, 0x6, 0x4, 0xf000, 0x0, 0x5f, 0x0, 0x100000000}, 0x0, 0x0, r0, 0x3) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x1f00, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) (async) close(r1) (async) 3.290706159s ago: executing program 0 (id=4951): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x3, 0x2, 0x2}}, 0x80, 0x0, 0xfffffffffffffcb5}, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa19}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2000000}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x1, 0xe4, &(0x7f0000000040)=""/228, 0x41000, 0x3}, 0x94) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) r2 = socket$kcm(0x2a, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x890b, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x3c, &(0x7f0000000040), 0x3b) r5 = syz_clone(0x29000, &(0x7f0000000440)="96e4ab27f38f04f478df29fd49e11743f0b81c8c34e0a52885ba70dc41818a7c94753a", 0x23, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="38c6ddd479e574b75e7c08f1ce53c5aec877883144e3b65cfefe13e06f5ba05f9f8f92c1f05dc2a6a53d8338d85b611c445abecd3362c532476028a873fff4a9a76c3400a21c504555e468bf615537f65301cdc34dfcc298083b968e77f8ea892beba3f51127467b0836514c60dc9f7040b3869ec0c457be80bb8c1130ae50390249a95d1768727ce2b7a9e849732ef6418ce264536a418f1533296ef5f50608a129ef1a5ae0974cbd9d2448fb5b4f5568ea6b61f96de997bb4977ae5a6f3b13300b85b7193b96438c9123c39200ba81e11a7c94") sendmsg$unix(r4, &(0x7f0000000640)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000100)="69510e8165e00acd0b67720d26905f5f6042bcfdb7fa9606f5d1faeaa5d8323b546bdb3410c849a0433313db59ebe10dc7c2d64f423c6615254403", 0x3b}, {&(0x7f0000000200)="d338068640aaddee271f69d5cf9878db330a2c472f1d876cb56e9f86ec3ea170fbb3c4d8a31c52d7dd5ec3037c16e5a542407ea4ab251f36c04b78e482c3a96ef594501662613726d54094531290df117fc8fe3cd1b2cbf009a99422b90c0bff2b32ed3666120f11269900bd3b05f8ed57b439d62cd996d28b78a7c051e9fc9953dc651a37fd29a2c9d62f1fa94b5906847bad5d455c594c3f2ac75941b659b4f137e9f59f454be718bdcf3d297df9d16c5a263ca567e6e9abc513b74e27fe6ae3207b1de0a144741297c6e29d96648575f54f54f9ec1cc4b34141234712175e5158fa65f744b793d519bf55163e698b160ccbdaf11a3c5ca9", 0xf9}, {&(0x7f0000000300)="ca899882e05bb04a690734503f2697a1a3a0e8f7bf1ce773a028975ce4b2e8d271bb5d3ec3063f5e975bd2e4768fff8343bf880e22437f3b2b4ae76a428406603c57aa", 0x43}, {&(0x7f0000000380)}], 0x4, &(0x7f0000000600)=[@rights={{0x18, 0x1, 0x1, [r3, r3]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}], 0x38, 0x90}, 0x4000000) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000020"], 0x33fe0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)={[{0x2b, 'net_cls'}, {0x2d, 'cpu'}, {0x2d, 'io'}, {0x2d, 'memory'}, {0x2d, 'net_cls'}, {0x2b, 'rdma'}]}, 0x29) 2.731247668s ago: executing program 1 (id=4954): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) socket$kcm(0x10, 0x5, 0x4) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xec, 0x0, 0x10, 0x1, 0x0, 0x1, 0x659e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x1, @perf_config_ext={0xfffffffffffffffe, 0x800}, 0x11efa, 0x4, 0x98, 0x6, 0x2, 0xfffff271, 0xfff8, 0x0, 0x0, 0x0, 0x1d}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x300060c1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x3, 0x0, 0x0) close(r2) r3 = socket$kcm(0x2, 0x5, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000}, 0x18) socketpair(0xf, 0x3, 0xb83e, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r2, r4}) socket$kcm(0x10, 0x400000002, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x0, 0x1}, 0x48) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$sock(r2, &(0x7f0000000900)={&(0x7f0000000380)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(camellia-asm)\x00'}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000006c0)="aa990a7304fc82e4bf488fd29cd5f9ac1211d5b11a5798e5e3d86f73dfe396b97078e6a73b11236ad99bdca297f1e8571ab24ac4fdd7298d0d09e63032b0a1bb69f3466cfbfa5c969e7ae0c4dd29f5ab97c425d4b06ad55ae263f22697582d61a955ac59b4ce2676db54dead3596cec97937cbad380c62aefe6e6f746c76c7c30d30b8088819e4d4f2e0f2aba2ccc0e192c172bc7597970afbbf6c8b24510ec816322230257d74963efc54c4236cb8456efa4371038cea9655c958e06758d8440fdd2c6ab7e93242", 0xc8}, {&(0x7f00000007c0)="411cf18305262aa0537b82b6556e2e43c8e76c3522330b8f030f7f2f44713cd498853a188f50c3", 0x27}, {&(0x7f0000000800)="075a1bd12e1d00934076ddd1ce13b62db9ed09ce1262f79449ce90d74fcf92235a9fd1213cefbc3b71061708acae843b6f8aaae72688be5f1b4c09c025ba046382bc6f6750cb02ebf050a1a2858c708fa0649150b3908d16ef15f90137a2982d069f4f5fcf438faca8c13f7c8f51b6799e463a1573226d16249217d935460de961c48e218a56f0c7c45ae35a851b46e49b452b027330df1078a955cfe09a1fd8763f7456e3a8dc7d", 0xa8}], 0x3}, 0x40) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{}, {0x0}, {&(0x7f0000000280)="361821115e14f86a63bdc82263fd025352b745c5ccb9b02f4d23c84f4d0533b4a85028bf5f6a28b9c85deb209dabc7fc9b614415c1a4116328902eb5066272b1644dc7dbc6dcbf59f83ab6e1b197a0f974047367c76aaa4de011f7bd56531a4701cef33e77e9dbeacff1e259793baae10c0f33f9295f22e893f8df29aeb213854669f2d449397b3c0e79e421ee2b8f870af0922ec6f3630c23017e5691652712383300c6c3ee12b61148510eab6a18fb8263f52bb535f1a6e5d695672b2611f099b9452ffcc5a5b97b327cb53e7e3346a13df96a4d928ab5a280d71979d143dfa32bf4ec66cc28", 0xe7}], 0x3}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xef, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0) 2.495669961s ago: executing program 0 (id=4956): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000150081054e81f782db44b9040a783b020a000000040000a11800020000e9400084150e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6e94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad9561b4a29c828f6a3aa2fcf72baa7ea67e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a753916647f616b762439deec51", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x19, &(0x7f0000000a40)=@raw=[@func, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @tail_call, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], &(0x7f0000000180)='syzkaller\x00', 0x3, 0xb0, &(0x7f00000001c0)=""/176, 0x41100, 0x63, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xa, 0x8000, 0xa7}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)=[{0x20002, 0x5, 0xc, 0x7}], 0x10, 0x5}, 0x94) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)='1', 0x1}], 0x1}, 0x1) setsockopt$sock_attach_bpf(r6, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x9, 0x0, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000ff000000020000000100000020010000", @ANYRES32=0x1, @ANYBLOB="06ec000000f2ffffff00000000000000000000002a0ef09ac525455fb18398112bedbdd825c31374a1219792abf37c30e1321fcac4da25c966df8591a405810f983934f0e344cdb43c4c4e9c2062ccfdb78d62ce41c0cb6f8a0d6843fba18d1a54ae30dc88cb6c8acf3a429b037b58d06a1e078bc213c41e63cb05072ecb7119c00e6136fb37de6d23b2e0d3c0ef67629fa19564769982843e2ee93a1c100425bacb7a9b39bd0f000000ddb00af1b61b3673372df67871e82f6ceef82623b067845220427afb6cba0dfef895ec68953aa14269c6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000030000000200"/28], 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r9, @ANYRES32=r2, @ANYBLOB="3011000003000000", @ANYRES32=r5, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=r8], 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x19, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf200000000000000700000008000000000c000000006926000000000000bf67000000000000150600000fff070056060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff6d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15}, 0x94) r10 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="20000000000000008400000008000000941f6721e757691d0200000000000000180000000000000084"], 0x38}, 0x41) 2.394143666s ago: executing program 2 (id=4957): r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd79, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x1b, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000140), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x42) sendmsg$kcm(r4, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x84) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r5, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x29, 0x0, 0x1, 0xfffffffa}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000faffffff00000000faffffff6d0920000800000018260000", @ANYRES32, @ANYBLOB="000000004a00aafe"], &(0x7f0000000580)='GPL\x00', 0xd, 0x4f, &(0x7f00000005c0)=""/79, 0x41000, 0x20, '\x00', 0x0, @sched_cls=0x37, r7, 0x8, &(0x7f0000000640)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x9, 0x3, 0x1f}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000700)=[{0x2, 0x1, 0xb, 0xc}, {0x0, 0x4, 0xb, 0x1}, {0x2, 0x5, 0xe, 0xa}], 0x10, 0x58586df}, 0x94) r8 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000740)={0x0, r5}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1e00000002000000010000800400000050400100", @ANYRES32=r5, @ANYBLOB="0200"/20, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="02000000010000000100"/24, @ANYRES32=r8, @ANYBLOB="1c0008000092d2c869"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r9, &(0x7f00000002c0), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="85000000c40000007d000000000000189500000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffdfd}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r9}, 0x0, &(0x7f0000000200)=r3}, 0x20) r10 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r10, 0x84, 0x6b, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb0100180000f900000000280000002800000003000000010000000000000c02000000000000000200000d0000000000000000000000000000000000000000006100"], 0x0, 0x43}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) unlink(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712360000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000006c0)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000d80)=ANY=[], 0x18}, 0x40000) socket$kcm(0x10, 0x2, 0x0) 2.204583006s ago: executing program 1 (id=4958): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x541b, &(0x7f0000000000)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="18080000b0000100000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007baaf8ff00000000b609000000400000dbaaf8ffa0000000bf8600000000000007080000f8ffffffbfa40000000000000704009d5f01ceb99c513de9bc903a00f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000020000008500000007000000b7000000000000009500000000000000"], &(0x7f0000001140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) 2.029491405s ago: executing program 3 (id=4959): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xa0}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xa0}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x1d2, 0x0, &(0x7f0000000280)="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", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.971234128s ago: executing program 0 (id=4960): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000008000000010003000900000001000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000abbc328b3915b0ca"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b63d25a80648c2594f91224fc60100c214002000003050582c137153e370248078000f017", 0x2b}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1}, {0x0, 0x5, 0x0, 0x3}, {0x0, 0x0, 0xfffffffc}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c06", 0xfffffffffffffea7}], 0x1}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) close(r0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x480283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x6606, 0x40, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x95, 0x2, 0x0, 0x0, 0x0, 0x0, 0x481, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7baf376a, 0x3, 0xffff, 0x3, 0x2, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000002780)="5c00000012006bab9a3fe3d86e17aa0e076b876c1d0048007ea60864160af3650400410838001d001931a0e69ee517d34460bc06000000a76a5e2453375fa82e9d63c5d17405251e6182949a3651f60a84c9f4d4938037e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) write$cgroup_devices(r4, &(0x7f00000005c0)=ANY=[], 0xfffffeff) r7 = socket$kcm(0x10, 0x7, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x2) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 1.964799238s ago: executing program 1 (id=4961): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x53, 0x0, 0x0, 0x480000000000000b, 0x800, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x4001, 0x400, 0x98, 0x1, 0x2, 0xfffff271, 0xfff8, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x80000001, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x3100, 0x0, &(0x7f0000000140), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000140), 0x2, 0x0) 1.800884247s ago: executing program 3 (id=4962): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f0000000340)=r2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000006c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp=0x25, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0x2, @perf_config_ext={0x40000000000000, 0x4}, 0x0, 0x701, 0x43a1bd76, 0x0, 0x5, 0x6, 0xa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x80040, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f00000004c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20242, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10004) recvmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f91424fc60100005000a000200053582c137153e37000c0680040006000a00", 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0) r9 = openat$cgroup_procs(r7, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000380), 0x12) write$cgroup_int(r8, &(0x7f0000000040)=0x2c, 0x1) 1.678708813s ago: executing program 1 (id=4963): r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x7, &(0x7f0000000000), 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x8, 0x0, 0x0}}, 0x10) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000040), 0x1) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x13, 0x1f, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1}, [@map_fd={0x18, 0x9, 0x1, 0x0, r3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x517f}}]}, &(0x7f0000000a80)='syzkaller\x00', 0x6, 0xc5, &(0x7f0000000ac0)=""/197, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000c00)={0x2, 0xc, 0x1ff, 0x2}, 0x10, r1, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000c40)=[{0x1, 0x1, 0xc, 0xb}, {0x0, 0x5, 0x2}, {0x4, 0x2, 0xd, 0xc}, {0x5, 0x5, 0xb, 0x16}, {0x2, 0x3, 0xd, 0x8}, {0x0, 0x4, 0xd, 0x2}, {0x4, 0x3, 0x0, 0x4}, {0x0, 0x3, 0x7, 0x3}], 0x10, 0x9}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, r4}, 0x94) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg(0xffffffffffffffff, 0x0, 0x40e4804) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x101, 0x0, &(0x7f0000000c00)="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", 0x0, 0xfe, 0x60000000, 0x99, 0xe4, &(0x7f0000000b40)="3b33960ca793ec96b2ab5b81cdeb2dbbdbcced433230d1274ed3c88dfc404947d1616972a0f8597b30ef983cbacc93f22fc1b95a44794789c03c99b48813a26340fbc746442252c84ccd651d26273e82572b5f4df4d14ae974754bfeca2864b4192ad5c45a8f469b6c751518d2b101000000e8285c4cc429557200de5b69c0b96744a83a00"/153, &(0x7f0000000100)="11c0cc36bf7a0800986a5bb29620e7ef0a5b55aa0de4c0c6a99b7022dd94fc6a4bdd6bbe666012c2ba24a66959c796327ebe94a7c797302ac6cf5de27a21ab578f2cb21df95a36be1e166c4fbf968c15b3043277c264029eb83e4858edf9de8aef14e122c46cea651e3d53ca1f46c1ccb77c970e11c8def4a8c74e3f990d0329709bba01b95dd52ae9ef95fd6209eb6c14d83dd0331acf7f3c2d0b146f53d17b36a5044f67b9e2cf257c0e6043651f9f747dfa89a06e3eca71db23949f04a646e35040478333a75179ee03922fda5e1c9668bbcd15303a30c7ee0b6cb9057bf200000000", 0x3, 0x0, 0x3}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r6, &(0x7f0000000900)={&(0x7f00000002c0)=@generic={0x11, "a2b75aecc11c4ed451d47a15523c92ce12baee03cd17fe9016cb326e5b14a85b3224de0bcb743c331bef1b7b77dec9542a979e0c8a9f3abb5ddeeecc05d45b1bfa393e70b5ebb3eba2ed5a57039783bb433f516be0f8a1f1232e2e8f62bd184102003d7e4a50d4aaafc22f1cb559fb34d1fe8f169bfc005a400597807812"}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000380)="7f71e1617937b9fcd02a797abd053077d6e20420002000"/33, 0x21}, {&(0x7f00000003c0)="5acec9884ab32c0b4cd1284b437575538bc2f30048011578e50b172eeacb5675e2", 0x21}, {&(0x7f0000000580)="a32669c6c1a0587687c85e99b636040ffd05817512f3c9ea212947285151967ae45afe425a92df50b17cbce006ddc15540c5b5fdaad8569c186b65a3f2282603b3700283b192af0fd11814a31ece69ec3eccbd92a8738ff307badd664ee29d7e5c75fd7e98d089813e221c00d67b1bb92aa1352c0b57842cbc2cbefb4ed3fcbeea8bec120a2755b656ec6620512d1605413b8d71d366fad0155267016b6641d0874ae71d95f73dc60ad2f9a6", 0xac}, {&(0x7f0000000640)="a661459d1e940f8a530df730ac2c76235d02708cf91ca1d886a29c0d94a46453959480e1ef96a82556fa62a1d66b61e01e7664dba562136c7c8a5557e29f7d627ccd414d5517cf0434e3709a0c80a1d6cd9463df03d011b31b2a9bd13db83b4e8436296d1618a9be6384a270a1ef36e6c2f593e30d7249e75d8440bb4c4ec97b9fa89090bd3766dc47fe0ab7372103ea60011b230312e58b926caba8be0514658f7c8a0aa73d88845804717b536b62adbed6ab7e796a27655ac37171c6e1c6a99ffacdc714de8b87e26f136edd8d4826281d876c7a431511c0ba129f78d4bea6b7", 0xe1}, {&(0x7f0000000740)="cfb4c2824278733b3a7126a82c587ece5c848e55fd9e2c50f7183799b02c9bf24350b9d548927e0f2dc1fb255d1e3f0ff1482cae97deac32eb090a65f062d7cca8f356e0483c8e50f93692bfaa992c049c33d5fa9036f20493fa9a8f6f80337d1da76251ebc7db2a019162ad7e32273c8227165e1bcfe071f44c86385645a6eb0610fb32338c0cd745747238d4fc6d81f52e6b4f5396c1edda711ab0617ffbc45ae4554e07ba2d62161b1851c652d59bdd8e60b120bc735d42f9140333621793090e2914765dc3208ba7e7", 0xcb}], 0x5, &(0x7f00000008c0)=[{0x20, 0x117, 0x8, "31896f71aac45720916c"}], 0x20}, 0x8100) (async) r7 = socket$kcm(0x29, 0xc, 0x0) (async) r8 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r8, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r8, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000c40)='2', 0x1}], 0x1}, 0x8400) (async) recvmsg(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x104) (async) sendmsg$inet(r8, &(0x7f0000000500)={&(0x7f00000005c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000000340)=[{&(0x7f00000011c0)="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", 0x5b4}], 0x1}, 0xe000800) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r7}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ac0)={r5, 0x0, 0x2b, 0x3b, &(0x7f0000000400)="20b692a0fac15928872f7c6263d2535b8d165909da12e7f8151077cf14815db87b929fdab6b5f52529198a", &(0x7f0000000440)=""/59, 0x1000, 0x0, 0x4f, 0xd2, &(0x7f0000000940)="fe536c1b49cd586ac49da880be05c8507b4ee9d7d0490c3634a2aea2274d9700e6279dd8032da60fe39ef46ffa3b6a16b968511315e4295cbdc081360b73080ec4cf45d091b1696c13ff8c9d6b70e3", &(0x7f00000009c0)="9f08a7e981d5cf9aa07ca9c707cc55de5c189d53c149b63898583b513826c65ba0266e51d2d85d111001937d941f07a02bb2ac939495905780dee4cfe19796411a641ac1443e122f00d9c6f56bf73224fc697506f884ae9104fa687031673ea76593da549196c73f57e88c9417ea1d8ab648888305da4216631478a5af9f8211d596fcde2b1ed5d4dfbba6068a3de4322e6c05e6bcd6c4d6e081bbb699e992778f7b9e346f45cf294274668355afc3ec3ef7169abbaa28d98c0c2ecf05d2d66bceb0315a8d137c63157c3f64bd4dfc471d9e", 0x2, 0x0, 0x80000001}, 0x50) 1.677484973s ago: executing program 2 (id=4964): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='/..\x00') sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="de691c6c1ad6008700"], 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x4a, &(0x7f0000000100), 0x120) socket$kcm(0x15, 0x5, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0xb, &(0x7f0000000000), 0xe) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000600)) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYBLOB="f2f0c9ba931f566e20d4b35f98d85f322851c60f83d41b69d6d28dc2adb0b329a8c5d92957f308fe27290162a5a8f9e7b94d476256a50338ccc1ec8666110d929ba1b8e063ba60b094ce9d081fc2939552d2a26d655fcf5cb2b383cf26a076f187a36315dcfae52116f88de07ef45302f4a939b0dd8a7b28d403acc7a25ea30e4616f504f7164fa051c0d37534b988e3bb61863b7aef6dcb394d1b76c8b8e19dedf3ea", @ANYRES32=0x0, @ANYBLOB="000000f2ffffffffaaffff00"/28, @ANYRES8=r5, @ANYRES32=r4], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1809000000000000020000008c0eaae8bbcdc65e85a2c5a8e76f75de96a56d0231fb93503524e80a7037f958442a8344c4bd08c1b9b46f192a2d42e6345ed2ce31412de16fc9d667664c7eb9212882bfb15db67776d17530378f70e27e2e362d8ec4796e068d6ba5ccdf2419352f4c3daf036a3a0adfdd752211bc3df3b9f0aaeaccdc7fc01fab54f465d4dfd22cc6fb909639417b65dd57cba2de5b15a2917111ca09fe85a0c6a5d1fa96a6223f2190aae90b0c9fdf6fba2da2b4eddee4a792b62e28a4b0801d8176f006f31478fe0fdb8d83b203749fdae6207255a881082bfd2515fdf2780e7cb9509acdb50c75901d19702040981be25fda", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r2, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001880)="04", 0x1}], 0x1}, 0x8054) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{0x405, 0x0, 0x0, 0xc}, {0x4, 0x5, 0x10009, 0x4}], 0x10, 0x2}, 0x94) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f00000001c0)=[{&(0x7f0000000040)="c018030023000b12d25a80648c2594f90124fc60020c084002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x7}, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0xffffffffffffffff) r8 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0xec, 0x9, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_bp={0x0, 0xa}, 0x112311, 0x7, 0x2, 0x2c596eb133aaa4c2, 0x3, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095c9e65a78d4fde908709b0859b15a9fbc3a49a959c337826c059b4e10a72ba6b48cada6c65fde3aae5fa5db728722711b6c3d9533d40297d4c9390c21c64eeb8203443e4157b25dedf8c1"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x387601e5febe1ba0, 0x48, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00'}, 0x18) r10 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r10, 0x6, 0x4, &(0x7f0000000200)=r10, 0x21) 1.498395902s ago: executing program 1 (id=4965): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) bpf$BPF_PROG_TEST_RUN(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random}) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e14060200000e000a00100073350100000000000080", 0x2e}], 0x1}, 0x24040000) 1.478308664s ago: executing program 2 (id=4966): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000f1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = socket$kcm(0xa, 0x6, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="18020000e2ffffff00000000000000c685000000360000009500001800000000922ae83713ab9600010000801b10fb54a8cb72d232ad558c46fff4208d4990ec11ce9413ac30e00bd0081f8504e19a5183d769676520e98a263345e44d5ad12bca35510100c4d86abeb12303ff1c9fe0d0020000d60400000007d3670000008aff66d6b3181ffc1d62a3954c1198bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d24538556e5e57bee3b8cf464ef3c6a7def8bad3ca6e3abdb21696e340bb8e2a093add57196b40def3858ef569147fa4108328392d322ab5df10a2f69a6bdf72ee7944e810d0223917c3d042410f57466f59544047d6d8ac44060000000000ee16c729300d2301800000000000002b5a8b05fcc154ad5290a8cdb97c343f454ff69dd6cbde49b28a6cb5f4fc0001745cff6e00e7ffffff0000acf3209a08439f1ff01779b6f6df7e02aa6d7760525b595fe1f697bc114ed1778e97a3f0395f946974cfb458be2a34cf924dc37b5592bf17956f3547497aba814382ff67b345b677a9d6523d87008000000400000000003fe8613ca29ff92be0d8deffff7b68136b0046d535dd39c0f35408869e9b342b953f91447e6b9eab304f134306320600a44095254b45a6c1312a13696c7202df5f764713504facc532c5a6d44d99ec7530ed7b0311000000000000e54e9072a22d911f4a2c2e2fa806e63c5cd98a8569a6d6bcfb000064885117e2ad910eae67e0ebe380d0f648713e68153579e02d71c58d147b00821ab9a6475b31e1ebf1369a04000000fbf3983f283f2f00000000992774814d63c933912d000006000000a66acb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483bd4bd287c83dd998a74694d18bdd8ad0983bc90770bbd26a82b9d99d5fc04563b523c47ef8c33400e90d02000000000000000edf1147a7afe772cd45af8aeffe2753088e02ca6bb2feec446ce7dbce66f0a93a03371320980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b5062809a7418b165dd0336d226bac1e1223be1c97b15175d0e664beb126000e96549e1a1228c686edb475b705eaa9515c96f4fc6b3c925ea404e0f1de61026dc6c6618580fd6ce9eac602c1756f6d1056712412131ed9925989e01eae489ec7052e0ed72c326c7a8aa63999e2297c54ce1822d14b7c7699a9d0600f11f2e7f474cffbc35bc8623cd5eb68af82275a940be0400000000423346da092cbe220de96d6a8e9f32f18d1f606b381e4903b500000000000000000000004a2357ba5f03000000000000005dcf4f2aaee86d4802000000000000007cdb686d5da2a42e4b5024b6535811f362201d4f82012e6af704973d04ea923c19e6cb723c1923b3eea2d73e176dff383c9fbbac53dfdcb1a68c98e96fe39eec23963faf3ebed3409144c7c53d6318ced678a621450a9b01e9f2772e5f2999d3435da02556e36c3215d2bd4e96c93bff3ad04a82ff3cfadcf65eb92adc6c68d66b11cb2d7556414a86dfa94bb7aa52c7febb1e9b2efcbbc5bccf9d39bed802f4f056976a9a362ee9cc624ec454b90200fd9603f96908bddc14500000000000000000000000000044d917c62b27679913075731e8fddb07c10c82002d60181588ae63a440454287de9e340f611267f37bdd0f2d21cb06fcaf45a0a297e396f428d43371424b307eef82c5d6d19f3ef0d3b8f7fa51957e3099caab31133b34a1d3eebc0f0c9056df2e9667ba0b55695c7894010079b07e7aef7785e248deb8c83ab6eb2c72c484241dc3b66da78260f800fffd39368b952f6f4a10295c50c887a31d8b543c5d10f2dbd4d0b84eaad43feb6e169a9f2fcff7000000000000000000e011bc6366f56fa787f212c1f8c0f47f5078191c8a02ad436725771738a2a98891971e3b932352896e1ea10f62e8ef7a87e16151b39d6c27575714540d8c293a3fa4b5a825360423c1cbc8b5d19167152823ed853140edda002c16c842b168bb55f6bb713deb57d0aa78d6d4e5fc5be2c402bd77125d98120358900000892b135a92e8c844938aa98ba4839a1408a696454d40e5eed4d4dce481ca86bfac54c330331b7f2cde17cbaeb0377696faf546ecbe742d73d47d726a50f6e752f3325255bd7e8b5923aa3cfb6f7e06494f21ca450139c558000000000000000000000800000000000000000075aa0000000000000000000000005560bd9eb81e839e4992e64b074a66cccccf00334fa94da8477be7d99b558ec6a5b1596ac1e7617c6b32eed0cc70286caf2c5189a103f4b0b04aff171c4d388ccf67fea37e782f025c94c853cde330a193a967d907a8c88fcb033e680f559a72150cb900bafcd536f48797915a2fe9922ce27300009e1b36aa4730117d9b00000000003c630000000000008fbbd11b015c415ca04192fbfb1a8b0e3460af35771dbac10062835c9bab3ad09f7a022c52d8000000000000000000004000000000000000000000000000000000000000000400000000000000000000000000006ec473c54399b7b8aa1ee46132fc45da8292631178cecf19550108b8b8423de4295777a17bf4dfdfee5de0f3e4dadf51ab9562827b762fa611ba5f32861c19dffe1dc9fd5c41cd46cf131fd6b0c2ddad90ac33f768f9ecc70327c59918fa5a249befe98262f53c8182d95f6da3698a6a88c2c31d801a8f1f5e0ce05138d5422da0a6a62b9dfe1f39775d1d0c9186096415f544aaf76b0a1c877a6c826a5adcfb22c4a0e5a46271caa3eaf4f389dd5f3c20dbddc0377a4266d7b9fd61b9287e9b4be0a413ee31be0ddecab0ef7b25cba1fb3654ddf291ecb7768ac1e177042cb4c452fa6b3966950000000000000000c187da23d6855500fe8510b51e13a890e394b84a6ea2cc8d42b97c697c29122298d55e2e1cca8e07abda2606a3f381c64b9fec0000000a7965e4854e8e3572ad5149b3872342dea9252132860c9af1bd5fe263c0313dea5d6e0c11a466d6892ed65f34667dd79b07b5cbdd8aa7dd561a26b5562d4861a7e1b0f48930e0b696ea3bee7eb72794e163d7aeac9a0fa5403ac9cb421eae283b0550f1d0d339cd7b96e71d3ab48ad9d7975e0c9b117f71d3ab80a0c9b0284ecc469fa6181c9c71fce07a6ffb23296a107763138e8d9876291af2076890c47925ac773d95d2ca42acb3e5f3a1550665b898462c139ffd0106bc8a61b6117d252efcab7106b4c3a3c13a70ff452e9d2096142c517b0e91b5cf88332faca5b3ee96363065c3ce32d3d39ec36e20d597e05664f2526bd918090649da11f7299789d00f502cdf1e99d3efecb9b457642fe810370ba4fbe00fa60a28af966a27a1659e448bbe43a1dcd2ea760018b57a36ac41ef2051a7b703d55c0602540663016e20d50385766df4dac47802a55bd38dd767ee9960c6daa704fc5d01a14591f26b7b538c9bb22f6a2f7a34d1b9edfd125a9e25a110228c64253588ff420644dbc0854e69a7bdda72f93ceaccf92cfe7dd6296c950db10f6dd8a5ef9b73cf6a12a1ba16fdc7e35b805f4fd2fcff0a623722149c1465e4de2d53f0f10b14c21865027abc71a12cb1e9f8029c7a20000000eeb0d53a83e518c8d2052c08b515d9d0bde24ac4e798040c7db0bb03c019507d6377f3d5dd94a27abc6d6b120d61f772407e0d2cb50d29168b68aef9f176b4c3aa8b21279d4ea9c1f669aa8c2c17d5b3a8d1dda58d26f1019af04b7774c85d5bce8be010f27c5211938031c3404680b01279c778bd1fe1b48c4b5b8e0fe756e54a8d76b7cec5e3407d93b4eadc446440607de844acf5524a4657e33af2115547b735b57b5092d0bc8fa6acb832509abe0882d570ce400aaebd7baff88526608d6991aac95751671174129457e4a03aca69d82b64b89e6ad6ed1e275ec5002e48170e4c7b4f3971481098dedb88fba90770e44bf404d5a97fefe2fe8e459fe45933b78c7ab5fe985a480193a20fb07da1455fb283df68af569ac82aa6dc703e29bf158931fb79f2abfa6ff7eb8c4f381c9da58bea460e2ead969933e5391970ca4fddd64da2e5df9c4d82044068caaaab771b37bb06bbe673056d849825525f1120b2250f6b8520381f7a74b1c687781cb6b23e67b918844b83dbaeeb559ec8520d710dd6d6b4e64838bd434a36ed03fc0c488b24571032ffbc9f8ce97041e1bc4729d539358dc9599c1266b9ce2cb6dd0ad57a6e9d3d4a11a27f70b2934c96237e2ba09c58eeda678d4d08b6da99b7a86e946215afb1b48792fde54492e306cb5342e2589874b603a1de972b1f09cc350096f5c3e814118af9ba0793cfdf20c77b34eacfdf63ce59ec4d2f867bf884e941559b068d908325667672b5e1cf71f4829c0493e8b141399ed926b822becead7a0a2b4a4c008ab16b616d60f347e4da54f06443507efe57ea62399ef4eb11b2f559e1b056456a53998bf1c6d13c92e75136147f91ae3a75ca15eb1b51bf700b3c0bf54bc3745ff313c5e75dc66386897f6ee45429371b8d0878c442ad2fe9baf85c1390da13efc353ccbef950c29f39ddf436f0d9bf1be1515ed251d8b6f11ecb16b1e8d1ed04196e9b6c2f9e068b7749bb6c1f533e493f22c901662c65cb761dc2eeff2f698bd4dbae83e2dfdc4f1c7f918a00515c1bc189d10ec22b35c92725cbf0ba244fd029c4f026f68e000000060000ab0476c3fd7f7c1e5c000000000000000000000011e43e39d3f4394fbfa13c416b1c443c5e52eea726491ad75100ebad7c6d5a665c59a3fb158e43da904f19e7e8daa4e90390b8da945f6cd78536c0d2be07221f85ad46b180f256d4d84592691d15d65896b66b63a46705338b67b72dc1c3075fcdc5cbffb0366151632ba5be8ae815dfea9fadfd31c473a24a73d3e5116c3023b3563c72d26fbd59877132bde5ca4ef8d92fd3613c768b35223f6fd0b5e9a8b98cccf1e2b4612e620e3a159d6365c9045aaa826aa0ee6d26cf0397ce674c20824584b464ebdc2f3ea26a7aec4570b242a6677a4e9187f8591c3a9bdc0000001a002364bbd93964a8d0bdc802b9be2500"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp=0x25}, 0x94) setsockopt$sock_attach_bpf(r2, 0x29, 0x22, &(0x7f0000000100)=r3, 0x120) (async) sendmsg$kcm(r2, &(0x7f0000001740)={&(0x7f0000000340)=@l2tp={0x2, 0x0, @private=0xa010100, 0x1}, 0x80, &(0x7f0000001440)=[{&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="7e9d9ccfc149579975374e5a6baeb873cdf137bf43682fb9c306f7a975f8811ac204feada1bddaf8df75711e3eed7db79df6d740a20a99b962dabc69ba1972e5d859c39b81070197e8b531e8d5ed9c0e5d161e185ea0dd71c0eb63022083a030", 0x60}], 0x2, &(0x7f0000001480)=[{0xd0, 0x118, 0x7ff, "570310d86240e682b3a1b8aced4123931f098984d2f6beafb5cf9b3714b3bc71b15b5654107a8933a8a99d2e11669008344360edef3a5b0c096750b4ff1352b344c1b542915e4423d9712b1cac467a1cb0ea524bb83a780c08fa7a2d7af4cc908f6db77be83c399bed565344986e9e925e39706be401a74b9117e22f017293c4c61577e2c85ee13328ef4ceb7699fe224974c6b7eb2e6fd57ab2b19ed8654b6d1890f56722a2bd1a7bd2fc98ef3ecc1cdef49d7b5e1d9e870a"}, {0x108, 0x111, 0x102, "7f7f30581dc96a38880d6b7b4f87b6086578438b3fa5dbedde65c60d5e22d4eb2c25c90c0f7556cbd5fdd01c8f3b73458997ee1341eaae92ebf8bb145e917eed9535dd5ac69859add4f4ba1293d423ca9ff9f2601401856616a9f265cdd016cf4e2d1b4e7cf195fcfb29b4855aa0b4c7663be8af91f83aebd9fafd4ce26da92696c0bc33592ac6e63919f1edff7e9478c86a3932db202c3107f1dc1bdb9a4ab876b0a3795583fcc09d1726a6e26d7c494f7d827d5b39295929f684ce6c8b4367c6da674abd1561d584e45b38b08ce37a4c0ba099d8f0af83f0b0cb3ed0ddb37c02b21515ab3e1b7b6c0faaac493d1e347fcad4c1"}, {0xd8, 0x10c, 0x2, "3d91c61e6ce861494236ffc55009f7333870cc0834615805dca46022d1008f108a48745c28cbbedc31f67a3ee363aa2de31e42c69b005a6ae0048448cac2544e7edc75435af40bea5fa61305bac0130c333bc88d1452cce4d6472a8c92b0ead4772d64585bcc1d7dbc9fd8fc814b2968511dd0e515d18065c783990987cba472ff54a5d7fcd4129419bd8c091266264a1e1e3cc782ace580fb97a0911d02c662be7bfa7c0bf1dfc8614fc426fb66a0ad9108672c803eb16936b8314e737dfbf3e7067df7271fab6d"}], 0x2b0}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffec5, 0x0, 0x0, 0x3, 0x0, 0x699}, 0x50) 1.283315124s ago: executing program 1 (id=4967): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000150000000000000000000100000000"], 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="5c00000014006b03000000d86e6c1d00028409fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6aee6d7000000", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x84) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x80a, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e120900180000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000001c0)=r5, 0x4) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r0}, 0x38) r6 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x840, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071115f00000000008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r7 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000000)={&(0x7f0000000080)={0x2a, 0x0, @empty=0x1000000}, 0x5, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0xb, &(0x7f0000000040), 0x2) sendmsg$inet(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)="92", 0x1}], 0x1}, 0x0) recvmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000300)='cpu.weight\x00', 0x2, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) close(r8) sendmsg$inet(r6, 0x0, 0x4000) 1.278495264s ago: executing program 2 (id=4968): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x2, @perf_bp={0x0, 0xa}, 0x104105, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89fe, &(0x7f0000000680)={'ip6gre0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000009800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00"], 0x48) (async, rerun: 64) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 767.826291ms ago: executing program 3 (id=4969): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r0}, &(0x7f0000000a00), &(0x7f0000000a40)=r1}, 0x20) (async, rerun: 64) syz_clone(0x22023500, 0x0, 0x20010, 0x0, 0x0, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (rerun: 32) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b35d25a806c8c6f94f90f24fc60", 0x14}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) (async) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="1b0000001e006bcd9e3fe3dc6e0800000a0000dd600000007ea608", 0x1b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000580), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180061"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000001000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (rerun: 32) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="09000000010000006d0500000800000000000000", @ANYRES32, @ANYBLOB="fcffffffffffff00000000000000003d76801435921c82ec59c41f6f6f146b8e0ad934503ba692bf15f58da03585f8dcc5aefde4e97c0ae29b10369a95a21f102b934d3d998d4a4a1488717dd12fa00016a57c801ecf2f927f3b55e8d287f77d02880ccf186f8af1f4cdf3acd489a13cd4f00852d7f7e600c585f8617595daa054c463f6a7a4a2bfe7585dfbfe1e6fffe0fa7504d9f805d41ce6bc9ee33eaf670536a3caad65b8fcbb76c6b7891cae1762a5a1edea7f5e8afad013fb4ce5c816b767ad3c77a8d17489a19c53580000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (rerun: 64) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r7, 0x0, 0x11000000}, 0x38) r8 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r8, 0x84, 0x12, &(0x7f0000000040)=r6, 0x4) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x27, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r9, 0x0, 0x94, 0x0, 0x0, 0x0, 0x11, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) r10 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x101}, 0x210, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x40082406, &(0x7f0000000540)='(pu&00\t(|') 441.084258ms ago: executing program 3 (id=4970): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xa60) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) (async) r4 = socket$kcm(0x2, 0x2, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) (async) setsockopt$sock_attach_bpf(r5, 0x29, 0x6, &(0x7f0000000100), 0x1) (async) close(0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/2'], 0x6a) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r6, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) (async) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0) (async) r10 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r10, &(0x7f0000000480)={&(0x7f0000000a40)=@in6={0xa, 0x4e23, 0x4411, @local, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000440)='m', 0x1}], 0x1}, 0x40814) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) socket$kcm(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f00000000c0)={[{0x2d, 'cpuset'}]}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r9, 0x58, &(0x7f0000000280)}, 0xfd4f) 318.696234ms ago: executing program 0 (id=4971): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01001800000000000000640000006400000006000000020000000200000f00fffffff100ff00cf47ffff0000000000000000000000000000000042000000000300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f03000000980fe900005f"], 0x0, 0x82, 0x0, 0x1}, 0x1f) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90724fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = getpid() r2 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r1, r2, 0x0, 0x12, &(0x7f0000000280)='\\{\x00'}, 0x12) r4 = socket$kcm(0x1e, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000040)) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r5, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x7, [@typedef={0x2000003, 0x0, 0x0, 0x8, 0x5}, @struct={0x9, 0x1, 0x0, 0x4, 0x0, 0x800, [{0x0, 0x0, 0x8}]}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x3}, @float={0xa, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x2e, 0x4f, 0x5f, 0x61, 0x0]}}, 0x0, 0x67, 0x0, 0x1}, 0x28) 318.174334ms ago: executing program 3 (id=4972): socketpair(0x22, 0x2, 0x1, &(0x7f0000000000)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x0, 0xfdfffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x2, 0xa}, {0xfffffffd, 0x0, 0x3}, {0x0, 0x80004, 0x10100, 0x3}], 0x10, 0x1}, 0x94) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000680)="8ff4157f6bae06e67a53aa2011c971dba279208cf1807d2abd58dd22fd676a9ae3c3dc70d26cb28b99a823d1eea4b9275b1e7bfa6cfb2df809c3aa87b9363bcad8d5e71a6cb2eb22814cd0479191ffe5d8c8a863472be51c99c3c0a779c526368a4c8ed2460df54f0115d0de823c1a0c3bd0f076cc79e9d2678bfe6cee55d8165f89df096fd67f05f41219049860e266d2411bfbeec84a62477a6f29da71ab75ce75cde06b32e281eef8a57261f20069c5718b2d162604bc2a2c5418b7dc5b522319fe687e6ed4043cc4e0ba38483b3b39b2a19cce2199b68c8add53b068afafad40d47bcaf5eeb6359ccc010310d4ebfc1047e85dc47cc3a60824ac8ce9705712bfc68fd5514a6fb3b5815bb2f720566a46a99b79cd456b1f038fcd5e5374e15de59e5d49c2a41d79e3d2262061ecc84e83291792364d5a22647bc3eb64a834313cd23a3cddd7abefd6df77d0e13e3949113f1380ef599e4eed0c91ece1ecf284904b6a3032cdfccb811cacfc278581951ba18742006459982763dbe45e7ee8656589d7039bbbf8ce8d98c3eef5df0bcdb8d63c02db26195bbeb68f5f6bac83f657690d8e094ddd5b4a43e42dc8c01eb5b0b732d5f09e861fc7ebc7c1de3be40648610c9896ff57748dcc5da569ca4ff0c8bb88baee2aae54c352e3b6eb79f529b2acd09b8d6dc07a74a074d71db1cc53676a20eefc0b54cc98fbc86983f803c6f91503910627b8ed2554629ab83b29e454087e7ae51cbfbebf0a42c203f8edcf9f00e90ab85261335a0f38e95f06dc40316bddefd9aab7984960a0912fd5426a7b66926a0064c7afc2f27e17ecfd98a3c63e94ee551267cbc9297d6ee87dcd2d5f90aac187d6d3f2f90d1e5b5dbd8e6ba41c3debad5c8a54a9a3191367c26945728c73f3f58cfe02bbf8527f9e86d906e060f5d23093c4bc791451f929c0b8e0b4d343eeeefda7662b0647215e50854b9ebbb1397426e7a11cf1bca953fe4b6a4483fe3fcb3f9f9cefa56d04dcea77b5f7bf2d86816866e272fabbb27d7f29d8d0d22b5e3af31fc06ec8eb4498514b3745ad9a98e5f0b43ae99d7be5839380412047d653d07dfa4d710b5cba69edbd7552272c2996c352e4413e0c3ef60b5e42e3bc86ed4fea59849f7a438bfd3f31a0703cce0aa46fdeec11aec0a1980fb31c14ad36d3dd8fe054644a63b0661bd252b163c356e6c40bcfd46e7f6888431057695514e639c5c51d4d24db748f3ee713d7fa097706f2f5d681c76c71cf3f1a740a0265ff90cad66e27cfc37bff3010ec6f891eaa414fae627d7fe3b628d3b816d91a9cd3aadc829b9bf0e533376309c920c85332478c4c9572bdf2290d50d5159609ebe30670f168bec8eee42fd494660ccbc6fea324d7c700cb89cc83c450dd3ecec2c8427a37f47b35e8b092884de2af0cd50685534ede76fd2757f01b48a3a1533ca4e6c24cfe7dceca44a6a14830f9521cc6f2579dc13839cc3af64ef405d65fbfc229ed37dfb19ee3760846fc27fe6b767417fd3e1cd782302e04f369e34c40d75c7764e9528d8585dd5265621b87359b32de325b784f2cb3e7a969e1cb68b5f5ca7e9eb13024360938a3b1286460e8d0fa02f88484278fe6de6c7d0d8713c105c2c9682650e6bab0cc78ac7f4ce0e7f13eaa48631fcec861f351429b8c5201f31f0f08fe7055fc96d0b3c0767e546d09f2e512a84bc4185ecdb00491685aca89da091a7f46a2901850e69cbb7a32d3f4994091c59a0cd7dc56a7981a06f37fbfbb8aa12793bf524a28525ccb303d34a1f35c0736b009cd2f12704a6902b5f2fac3042db97ae4be1e85a87666e65e528cb1cacd6468f03a771e43f20c8db4f792e70591f38d66a63da8256d03ebc504e5402b90d0a9d96d5061f5321fccfa29cab16836bdace5c3c6c8804f2bae91e6d8bc4d2c9fd3f0086b0870d3a783625d886bb0d87fcc83abe71dd466df33f294df8b8dd083f26f3074004302f40c20e7d51fe45b7c23fe6a1ae41e9e1d7ec3e2cba932a85437fea65b49db2cc894f916bbcfce8a9cc7693279c70e23954cf01658dae31ad8d2dfd5641e14c318e0d4685342b8aa2ff5709f8dee0c9818686364428fcdfff1000e0f02e88f0110c57c97d2856416", 0x5e7}], 0x1}, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) 263.370767ms ago: executing program 2 (id=4973): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0xe, &(0x7f0000002040)=ANY=[@ANYBLOB="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", @ANYBLOB="1d139ea82bf95c2a5474d4a0d51d574c1e80c08468a1d0ffcaa5beda1d1e735401cddf133954ac1858a89458dfcc08fd460fd4095d862fefdd7b67249f863619a16200c3158d5c0f1d41e7e236a48ed97a83105f991550cd52d04afc5d4236e333c523630f55e3335db9f3008ffba8c0caf3b9cea8aa798e4b36b3cd801c9bb3c666bd5a41ea3c09e7583961eb53a6c5948b47502e0d4b2959fb217a2ea66fd7e4f5eaa78c31c69a1c9d5f"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x5d, 0x10, &(0x7f0000000040)={0x0, 0x9, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x12, 0x0, 0x0, 0x10, 0xe6}, 0x4b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x1d, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x1c}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)=0x1) 74.949047ms ago: executing program 2 (id=4974): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r3, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext={0x1, 0x4}, 0xa0, 0x58, 0x0, 0x4, 0x2, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000000c0)='(())') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r5], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.sectors\x00', 0x26e1, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r9, 0xffffffffffffffff}, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x3, 0x11, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r11, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x8914, &(0x7f0000000080)) write$cgroup_pid(r7, &(0x7f00000005c0), 0xffbf) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) 0s ago: executing program 3 (id=4975): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESOCT, @ANYBLOB="6a22723c506138f8a6872dc46462af2a3f1ea18647e658aae822c4cad0bde2bdf5cd8b91675f93cdbc4cf44677dbbb599e9752461738b6b8bf6c97c325ba69c637aee622885f7b3f151311191ed16c3300063345c76852d09f62b47f4d5832f2969c55c8892ac7668543fc3e4d018b8fc390baa5987b16e917b6621d44d9082a0529c28ebd594fbb931df2ba3d66511ffa969f685a640cea2de1f0418e55019862756410fe9675df5bd871d76a65d4619e14fcdc6e0f27665777d8e7c7a4dfd134a762df179d8fdca24d4bbbac002980c39413e369e10f384e4a5f28fae19df7"], 0x50) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRESDEC, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000001000"/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0xf3, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x6e}, 0x0, 0x0, 0x0, 0x0, 0x30000000000, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x28, 0x1, 0x0, 0xe, 0x0, 0x9, 0x64039, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_bp={&(0x7f0000000340), 0xa}, 0x8002, 0xd, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x8004000, 0x0, 0x2009}, 0x0, 0xffefffffffffffff, r2, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300080c5) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x214, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x4000, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x1000000000004000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x4, 0x0) close(0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x40800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) bpf$ITER_CREATE(0x21, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3ed00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x62, 0x2}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2) r5 = socket$kcm(0xa, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009000000", @ANYRES32], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="0100c3201000"}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)={r3}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000000060000008000", @ANYRES32=r6, @ANYRES16=r7], 0x50) socket$kcm(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) kernel console output (not intermixed with test programs): ][T10196] veth1_macvtap: left promiscuous mode [ 587.829654][T10196] veth0_macvtap: left promiscuous mode [ 587.838908][T10196] veth1_vlan: left promiscuous mode [ 587.847999][T10196] veth0_vlan: left promiscuous mode [ 588.361430][T17800] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.3348'. [ 588.374068][T17800] net_ratelimit: 28 callbacks suppressed [ 588.374084][T17800] netlink: zone id is out of range [ 588.385394][T17800] netlink: zone id is out of range [ 588.396693][T17800] netlink: zone id is out of range [ 588.402814][T17800] netlink: zone id is out of range [ 588.409106][T17800] netlink: zone id is out of range [ 588.414399][T17800] netlink: zone id is out of range [ 588.420428][T17800] netlink: zone id is out of range [ 588.425721][T17800] netlink: zone id is out of range [ 588.431820][T17800] netlink: zone id is out of range [ 589.075191][T10196] team0 (unregistering): Port device team_slave_1 removed [ 589.148144][T10196] team0 (unregistering): Port device team_slave_0 removed [ 589.226205][T10196] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.291518][T10196] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.635115][T10196] bond0 (unregistering): Released all slaves [ 589.734298][T17780] netlink: 'syz.3.3342': attribute type 39 has an invalid length. [ 589.796149][T17782] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3343'. [ 589.812012][T17798] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3349'. [ 590.134145][T17810] netlink: 'syz.3.3352': attribute type 39 has an invalid length. [ 590.302320][T17810] hsr_slave_1 (unregistering): left promiscuous mode [ 590.462053][T17833] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.3358'. [ 590.472111][T17833] netlink: zone id is out of range [ 590.807973][T17846] netlink: 'syz.1.3363': attribute type 17 has an invalid length. [ 590.816061][T17846] netlink: 'syz.1.3363': attribute type 16 has an invalid length. [ 590.824473][T17846] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3363'. [ 591.117615][T17856] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.3369'. [ 591.401188][T17870] netlink: 'syz.1.3372': attribute type 1 has an invalid length. [ 591.441316][T17870] netlink: 'syz.1.3372': attribute type 10 has an invalid length. [ 591.467355][T17874] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3373'. [ 591.542458][T17870] team0 (unregistering): Port device team_slave_0 removed [ 591.597796][T17870] team0 (unregistering): Port device team_slave_1 removed [ 591.641493][T17874] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 592.011261][T17894] netlink: 'syz.1.3378': attribute type 10 has an invalid length. [ 592.019487][T17894] netlink: 'syz.1.3378': attribute type 10 has an invalid length. [ 592.289541][T11021] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 593.300313][T17913] netlink: 'syz.3.3384': attribute type 2 has an invalid length. [ 593.326998][T17913] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3384'. [ 593.768421][T17928] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.3390'. [ 593.802433][T17928] net_ratelimit: 17 callbacks suppressed [ 593.802461][T17928] netlink: zone id is out of range [ 593.818028][T17928] netlink: zone id is out of range [ 593.837897][T17928] netlink: zone id is out of range [ 593.859597][T17928] netlink: zone id is out of range [ 593.876796][T17928] netlink: zone id is out of range [ 593.885253][T17928] netlink: zone id is out of range [ 593.896383][T17928] netlink: zone id is out of range [ 593.916753][T17928] netlink: zone id is out of range [ 593.928225][T17928] netlink: zone id is out of range [ 593.974104][T17940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3394'. [ 594.264843][T17949] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3397'. [ 594.299035][T17950] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3397'. [ 595.211458][T17970] netlink: 'syz.0.3402': attribute type 21 has an invalid length. [ 595.503446][T17980] netlink: 'syz.3.3406': attribute type 4 has an invalid length. [ 595.512262][T17980] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3406'. [ 595.734629][T17985] netlink: 'syz.3.3408': attribute type 10 has an invalid length. [ 595.860067][T17985] team0: Port device macvlan0 added [ 596.016989][T17991] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3410'. [ 596.030384][T17991] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 596.039324][T17992] mac80211_hwsim hwsim53 wlan1: left promiscuous mode [ 596.056521][T17992] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3411'. [ 596.085494][T17994] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3412'. [ 596.094581][T17992] netlink: 'syz.2.3411': attribute type 10 has an invalid length. [ 596.114228][T17994] netlink: 'syz.3.3412': attribute type 29 has an invalid length. [ 596.125345][T17992] team0: Device hsr_slave_0 failed to register rx_handler [ 596.199196][T17998] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3413'. [ 596.235181][T17994] netlink: 'syz.3.3412': attribute type 29 has an invalid length. [ 596.251896][T17995] netlink: 'syz.3.3412': attribute type 29 has an invalid length. [ 596.274719][T18000] netlink: 'syz.3.3412': attribute type 29 has an invalid length. [ 596.284231][T17994] netlink: 'syz.3.3412': attribute type 29 has an invalid length. [ 596.321223][T18004] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.3415'. [ 596.707430][T18012] netlink: 'syz.1.3418': attribute type 21 has an invalid length. [ 596.728573][T18012] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3418'. [ 596.821078][T18014] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3419'. [ 597.479021][T18053] netlink: 105 bytes leftover after parsing attributes in process `syz.3.3429'. [ 597.498956][T18053] netlink: 105 bytes leftover after parsing attributes in process `syz.3.3429'. [ 597.623022][T18056] mac80211_hwsim hwsim53 wlan1: entered promiscuous mode [ 601.886907][T18140] __nla_validate_parse: 6 callbacks suppressed [ 601.886995][T18140] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.3454'. [ 601.921490][T18136] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3453'. [ 602.005271][T18132] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3452'. [ 602.126427][T18146] validate_nla: 3 callbacks suppressed [ 602.126442][T18146] netlink: 'syz.0.3456': attribute type 21 has an invalid length. [ 602.187554][T18146] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3456'. [ 602.199813][T18146] netlink: 'syz.0.3456': attribute type 4 has an invalid length. [ 602.208080][T18146] netlink: 'syz.0.3456': attribute type 5 has an invalid length. [ 602.216009][T18146] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3456'. [ 603.219966][T18170] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3464'. [ 603.775093][T18179] mac80211_hwsim hwsim52 wlan0: entered promiscuous mode [ 603.801786][T18179] mac80211_hwsim hwsim52 wlan0: entered allmulticast mode [ 604.143711][T18195] netlink: 'syz.2.3470': attribute type 10 has an invalid length. [ 604.152163][T18195] netlink: 'syz.2.3470': attribute type 11 has an invalid length. [ 604.169534][T18195] netlink: 'syz.2.3470': attribute type 11 has an invalid length. [ 604.177789][T18195] netlink: 'syz.2.3470': attribute type 11 has an invalid length. [ 604.185823][T18195] netlink: 'syz.2.3470': attribute type 11 has an invalid length. [ 604.194555][T18195] netlink: 'syz.2.3470': attribute type 11 has an invalid length. [ 604.218002][T18199] netlink: 'syz.2.3470': attribute type 10 has an invalid length. [ 604.225951][T18199] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3470'. [ 604.246990][T18195] netlink: 'syz.2.3470': attribute type 11 has an invalid length. [ 604.254878][T18195] netlink: 'syz.2.3470': attribute type 11 has an invalid length. [ 604.288271][T18199] batadv0: entered promiscuous mode [ 604.293551][T18199] batadv0: entered allmulticast mode [ 604.301358][T18195] netlink: 'syz.2.3470': attribute type 11 has an invalid length. [ 604.312085][T18195] netlink: 'syz.2.3470': attribute type 11 has an invalid length. [ 604.320946][T18199] bond0: (slave batadv0): Releasing backup interface [ 604.324913][T18195] netlink: 'syz.2.3470': attribute type 11 has an invalid length. [ 604.353469][T18199] bridge0: port 4(batadv0) entered blocking state [ 604.371988][T18199] bridge0: port 4(batadv0) entered disabled state [ 604.393827][T18197] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3471'. [ 604.413101][T18195] netlink: 'syz.2.3470': attribute type 4 has an invalid length. [ 604.462445][T18195] netlink: 'syz.2.3470': attribute type 5 has an invalid length. [ 604.504413][T18205] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3473'. [ 604.514308][T18195] netlink: 208556 bytes leftover after parsing attributes in process `syz.2.3470'. [ 604.530293][T11017] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 604.539590][T11017] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 604.615614][T18210] syz.1.3475[18210] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 604.615736][T18210] syz.1.3475[18210] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 604.907208][T18223] syzkaller0: entered promiscuous mode [ 604.925657][T18223] syzkaller0: entered allmulticast mode [ 606.062284][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 607.075028][T18248] __nla_validate_parse: 8 callbacks suppressed [ 607.075045][T18248] netlink: 763 bytes leftover after parsing attributes in process `syz.0.3488'. [ 608.061300][T18252] netlink: 'syz.1.3490': attribute type 1 has an invalid length. [ 608.069320][T18252] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3490'. [ 608.553416][T18260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3491'. [ 608.567802][T18263] netlink: 'syz.1.3491': attribute type 10 has an invalid length. [ 608.960522][T18275] netlink: 'syz.0.3493': attribute type 10 has an invalid length. [ 608.972053][T18272] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3494'. [ 609.006797][T18275] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3493'. [ 609.015743][T18275] bond0: entered promiscuous mode [ 609.053616][T18275] bond_slave_0: entered promiscuous mode [ 609.066930][T18280] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3493'. [ 609.085358][T18275] bond_slave_1: entered promiscuous mode [ 609.114299][T18275] bridge0: port 5(bond0) entered blocking state [ 609.142673][T18275] bridge0: port 5(bond0) entered disabled state [ 609.150048][T18275] bond0: entered allmulticast mode [ 609.155486][T18275] bond_slave_0: entered allmulticast mode [ 609.175848][T18275] bond_slave_1: entered allmulticast mode [ 609.186838][T18275] bridge0: port 5(bond0) entered blocking state [ 609.193268][T18275] bridge0: port 5(bond0) entered forwarding state [ 609.205925][T18280] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3493'. [ 609.414441][T18288] netlink: 'syz.1.3499': attribute type 28 has an invalid length. [ 609.442873][T18288] netlink: 'syz.1.3499': attribute type 3 has an invalid length. [ 609.470328][T18288] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3499'. [ 609.958196][T18298] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.3502'. [ 609.967918][T18298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3502'. [ 611.958980][T18355] netlink: 'syz.2.3516': attribute type 10 has an invalid length. [ 612.972984][T18406] __nla_validate_parse: 3 callbacks suppressed [ 612.973001][T18406] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3525'. [ 613.216997][T18412] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3527'. [ 613.290810][T11018] tipc: Subscription rejected, illegal request [ 613.417188][T18419] syzkaller0: entered promiscuous mode [ 613.426084][T18419] syzkaller0: entered allmulticast mode [ 613.458106][T18418] netlink: 'syz.3.3530': attribute type 10 has an invalid length. [ 613.472533][T18418] veth0_vlan: left promiscuous mode [ 613.491093][T18418] veth0_vlan: entered promiscuous mode [ 613.516393][T18418] team0: Device veth0_vlan failed to register rx_handler [ 616.033186][T18461] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3540'. [ 616.077036][T18464] netlink: 'syz.3.3541': attribute type 10 has an invalid length. [ 616.093215][T18464] nla_validate_range_unsigned: 25 callbacks suppressed [ 616.093233][T18464] netlink: 'syz.3.3541': attribute type 11 has an invalid length. [ 616.128787][T18468] netlink: 'syz.3.3541': attribute type 10 has an invalid length. [ 616.176779][T18468] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3541'. [ 616.186814][T18464] netlink: 'syz.3.3541': attribute type 11 has an invalid length. [ 616.209238][T18464] netlink: 'syz.3.3541': attribute type 11 has an invalid length. [ 616.236033][T18464] netlink: 'syz.3.3541': attribute type 11 has an invalid length. [ 616.244516][T18464] netlink: 'syz.3.3541': attribute type 11 has an invalid length. [ 616.270132][T18464] netlink: 'syz.3.3541': attribute type 11 has an invalid length. [ 616.280837][T18464] netlink: 'syz.3.3541': attribute type 11 has an invalid length. [ 616.290429][ T5779] Bluetooth: hci1: command 0x0406 tx timeout [ 616.316703][T18464] netlink: 'syz.3.3541': attribute type 11 has an invalid length. [ 616.324579][T18464] netlink: 'syz.3.3541': attribute type 11 has an invalid length. [ 616.334440][T18464] netlink: 'syz.3.3541': attribute type 11 has an invalid length. [ 616.342510][T18464] netlink: 'syz.3.3541': attribute type 4 has an invalid length. [ 616.365815][T18464] netlink: 'syz.3.3541': attribute type 5 has an invalid length. [ 616.374265][T18464] netlink: 208556 bytes leftover after parsing attributes in process `syz.3.3541'. [ 617.692110][T18512] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3553'. [ 617.756195][T18515] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3552'. [ 617.874456][T18513] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3553'. [ 618.099257][T18518] netlink: 61867 bytes leftover after parsing attributes in process `syz.3.3554'. [ 618.303751][T18523] netlink: 'syz.0.3555': attribute type 3 has an invalid length. [ 618.338119][T18523] netlink: 'syz.0.3555': attribute type 6 has an invalid length. [ 618.346080][T18523] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.3555'. [ 619.545390][T18554] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3563'. [ 619.871164][T18571] netlink: 'syz.1.3568': attribute type 6 has an invalid length. [ 619.919379][T18571] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3568'. [ 620.162748][T18576] netlink: 8063 bytes leftover after parsing attributes in process `syz.3.3569'. [ 621.181180][T18604] netlink: 'syz.2.3576': attribute type 8 has an invalid length. [ 621.200441][T18604] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.3576'. [ 621.292419][T18614] netlink: 'syz.0.3579': attribute type 21 has an invalid length. [ 621.312690][T18614] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3579'. [ 621.340490][T18615] netlink: 'syz.0.3579': attribute type 21 has an invalid length. [ 621.365088][T18615] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3579'. [ 621.449292][T18611] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3577'. [ 621.556286][T18620] netlink: 'syz.0.3581': attribute type 3 has an invalid length. [ 621.576937][T18620] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3581'. [ 622.343950][T18617] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 622.396820][T18617] CPU: 1 PID: 18617 Comm: syz.1.3580 Not tainted syzkaller #0 [ 622.404378][T18617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 622.414488][T18617] Call Trace: [ 622.417806][T18617] [ 622.420770][T18617] dump_stack_lvl+0x18c/0x250 [ 622.425509][T18617] ? show_regs_print_info+0x20/0x20 [ 622.430756][T18617] ? load_image+0x420/0x420 [ 622.435323][T18617] sysfs_warn_dup+0x8e/0xa0 [ 622.439910][T18617] sysfs_do_create_link_sd+0xc0/0x110 [ 622.445334][T18617] device_add_class_symlinks+0x1cf/0x240 [ 622.451020][T18617] device_add+0x507/0xc20 [ 622.455415][T18617] wiphy_register+0x1dad/0x2ae0 [ 622.460349][T18617] ? cfg80211_event_work+0x40/0x40 [ 622.465504][T18617] ? minstrel_ht_alloc+0x88a/0x990 [ 622.470686][T18617] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 622.476833][T18617] ieee80211_register_hw+0x3464/0x4250 [ 622.482377][T18617] ? ieee80211_tasklet_handler+0x20/0x20 [ 622.488064][T18617] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 622.494008][T18617] ? __debug_object_init+0xec/0x450 [ 622.499267][T18617] ? __asan_memset+0x22/0x40 [ 622.503904][T18617] ? __hrtimer_init+0x186/0x270 [ 622.508806][T18617] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 622.514605][T18617] ? mac80211_hwsim_free+0x220/0x220 [ 622.519935][T18617] ? rcu_is_watching+0x15/0xb0 [ 622.524768][T18617] ? kstrndup+0xbd/0x140 [ 622.529077][T18617] hwsim_new_radio_nl+0xdc9/0x1a90 [ 622.534246][T18617] ? __nla_validate+0x50/0x50 [ 622.538977][T18617] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 622.545359][T18617] ? __nla_parse+0x40/0x50 [ 622.549827][T18617] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 622.556218][T18617] genl_family_rcv_msg_doit+0x211/0x310 [ 622.561821][T18617] ? end_current_label_crit_section+0x170/0x170 [ 622.568127][T18617] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 622.574082][T18617] ? bpf_lsm_capable+0x9/0x10 [ 622.578820][T18617] ? security_capable+0x89/0xb0 [ 622.583715][T18617] genl_rcv_msg+0x619/0x7a0 [ 622.588251][T18617] ? genl_bind+0x360/0x360 [ 622.592689][T18617] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 622.599050][T18617] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 622.605669][T18617] ? ref_tracker_free+0x690/0x840 [ 622.610759][T18617] netlink_rcv_skb+0x241/0x4d0 [ 622.615550][T18617] ? genl_bind+0x360/0x360 [ 622.620000][T18617] ? netlink_ack+0x1180/0x1180 [ 622.624805][T18617] ? __lock_acquire+0x7d40/0x7d40 [ 622.629855][T18617] ? down_read+0x1ac/0x2e0 [ 622.634294][T18617] genl_rcv+0x28/0x40 [ 622.638298][T18617] netlink_unicast+0x751/0x8d0 [ 622.643099][T18617] netlink_sendmsg+0x8d0/0xbf0 [ 622.647908][T18617] ? netlink_getsockopt+0x590/0x590 [ 622.653133][T18617] ? perf_trace_preemptirq_template+0xac/0x330 [ 622.659315][T18617] ? aa_sock_msg_perm+0x94/0x150 [ 622.664284][T18617] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 622.669593][T18617] ? security_socket_sendmsg+0x80/0xa0 [ 622.675078][T18617] ? netlink_getsockopt+0x590/0x590 [ 622.680316][T18617] ____sys_sendmsg+0x5ba/0x960 [ 622.685124][T18617] ? __asan_memset+0x22/0x40 [ 622.689738][T18617] ? __sys_sendmsg_sock+0x30/0x30 [ 622.694787][T18617] ? __import_iovec+0x5f2/0x850 [ 622.699693][T18617] ? import_iovec+0x73/0xa0 [ 622.704252][T18617] ___sys_sendmsg+0x2a6/0x360 [ 622.708965][T18617] ? __sys_sendmsg+0x2a0/0x2a0 [ 622.713770][T18617] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 622.720069][T18617] __se_sys_sendmsg+0x1c2/0x2b0 [ 622.724946][T18617] ? __x64_sys_sendmsg+0x80/0x80 [ 622.729925][T18617] ? lockdep_hardirqs_on+0x98/0x150 [ 622.735152][T18617] do_syscall_64+0x55/0xa0 [ 622.739588][T18617] ? clear_bhb_loop+0x40/0x90 [ 622.744297][T18617] ? clear_bhb_loop+0x40/0x90 [ 622.749008][T18617] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 622.754922][T18617] RIP: 0033:0x7fbaf579c819 [ 622.759363][T18617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.778992][T18617] RSP: 002b:00007fbaf6712028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 622.787449][T18617] RAX: ffffffffffffffda RBX: 00007fbaf5a15fa0 RCX: 00007fbaf579c819 [ 622.795442][T18617] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 622.803436][T18617] RBP: 00007fbaf5832c91 R08: 0000000000000000 R09: 0000000000000000 [ 622.811444][T18617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 622.819458][T18617] R13: 00007fbaf5a16038 R14: 00007fbaf5a15fa0 R15: 00007ffccc832ee8 [ 622.827498][T18617] [ 623.465772][T18656] __nla_validate_parse: 4 callbacks suppressed [ 623.465790][T18656] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3591'. [ 623.609253][T18652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 624.463555][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.470069][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.576149][T18681] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3601'. [ 624.869530][T18694] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3603'. [ 625.094930][T18702] netlink: 'syz.0.3606': attribute type 10 has an invalid length. [ 625.148267][T18702] geneve1: entered promiscuous mode [ 625.170895][T18702] geneve1: entered allmulticast mode [ 625.183437][T18702] team0: Port device geneve1 added [ 625.437196][T18713] netlink: 'syz.2.3609': attribute type 12 has an invalid length. [ 625.647846][T18721] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3611'. [ 627.088122][T18844] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3623'. [ 627.219703][T18874] netlink: 'syz.3.3627': attribute type 20 has an invalid length. [ 627.390350][T18879] netlink: zone id is out of range [ 627.395713][T18879] netlink: set zone limit has 8 unknown bytes [ 627.453673][T11022] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.275190][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 628.316446][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 628.338765][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 628.357134][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 628.375708][ T5779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 628.392482][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 629.874394][T11022] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.889679][T18884] netlink: 'syz.1.3630': attribute type 12 has an invalid length. [ 629.899479][T18884] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3630'. [ 630.022588][T11022] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.222478][T11022] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.459455][ T5779] Bluetooth: hci1: command tx timeout [ 630.519148][T18909] IPv6: NLM_F_CREATE should be specified when creating new route [ 630.521988][T18912] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3635'. [ 630.529600][T18909] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3633'. [ 630.861331][T18919] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3636'. [ 630.946406][T18925] netlink: zone id is out of range [ 630.977495][T18925] netlink: set zone limit has 8 unknown bytes [ 631.009654][T11022] ip6gretap0 (unregistering): left allmulticast mode [ 631.016437][T11022] ip6gretap0 (unregistering): left promiscuous mode [ 631.034550][T11022] Ÿë: port 1(ip6gretap0) entered disabled state [ 631.081997][T18893] chnl_net:caif_netlink_parms(): no params data found [ 631.674516][T18961] netlink: 'syz.1.3646': attribute type 12 has an invalid length. [ 631.691995][T18961] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3646'. [ 631.956504][T18974] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3648'. [ 632.141746][T18893] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.150961][T18893] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.162688][T18893] bridge_slave_0: entered allmulticast mode [ 632.181219][T18893] bridge_slave_0: entered promiscuous mode [ 632.190238][T18893] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.197761][T18893] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.205010][T18893] bridge_slave_1: entered allmulticast mode [ 632.212846][T18893] bridge_slave_1: entered promiscuous mode [ 632.438144][T18893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.462561][T18893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.535915][T16705] Bluetooth: hci1: command tx timeout [ 632.601067][T18893] team0: Port device team_slave_0 added [ 632.625451][T18893] team0: Port device team_slave_1 added [ 632.670983][T18991] netlink: zone id is out of range [ 632.687333][T18991] netlink: set zone limit has 8 unknown bytes [ 632.792212][T18893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.821012][T18893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.872404][T18893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.965908][T18893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.987309][T18893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 633.057144][T18893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.110193][T19011] netlink: 'syz.1.3656': attribute type 46 has an invalid length. [ 633.332880][T19026] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.3659'. [ 633.362552][T19026] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.3659'. [ 633.382890][T19031] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3658'. [ 633.395454][T19026] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3659'. [ 633.462091][T18893] hsr_slave_0: entered promiscuous mode [ 633.516976][T18893] hsr_slave_1: entered promiscuous mode [ 633.687548][T19041] netlink: zone id is out of range [ 633.692864][T19041] netlink: set zone limit has 8 unknown bytes [ 633.944777][T11022] hsr_slave_0: left promiscuous mode [ 633.972190][T11022] hsr_slave_1: left promiscuous mode [ 633.994724][T11022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 634.018056][T11022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 634.043213][T11022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 634.059358][T11022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 634.072737][T11022] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 634.082177][T11022] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 634.095350][T11022] bond0: left allmulticast mode [ 634.100672][T11022] bond_slave_0: left allmulticast mode [ 634.109641][T11022] bond_slave_1: left allmulticast mode [ 634.119395][T11022] bridge0: port 5(bond0) entered disabled state [ 634.142485][T11022] hsr0: left allmulticast mode [ 634.159380][T11022] bridge0: port 4(hsr0) entered disabled state [ 634.183958][T11022] bridge0: port 3(team0) entered disabled state [ 634.206978][T11022] bridge_slave_1: left allmulticast mode [ 634.225246][T11022] bridge_slave_1: left promiscuous mode [ 634.239873][T11022] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.262054][T11022] bridge_slave_0: left allmulticast mode [ 634.276224][T11022] bridge_slave_0: left promiscuous mode [ 634.284542][T11022] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.325888][T11022] veth1_macvtap: left promiscuous mode [ 634.333859][T11022] veth0_macvtap: left promiscuous mode [ 634.345121][T11022] veth1_vlan: left promiscuous mode [ 634.350824][T11022] veth0_vlan: left promiscuous mode [ 634.606735][T16705] Bluetooth: hci1: command tx timeout [ 634.669473][T11022] geneve1 (unregistering): left promiscuous mode [ 634.676661][T11022] geneve1 (unregistering): left allmulticast mode [ 634.691441][T11022] team0 (unregistering): Port device geneve1 removed [ 635.545672][T11022] team_slave_1 (unregistering): left promiscuous mode [ 635.553134][T11022] team_slave_1 (unregistering): left allmulticast mode [ 635.569628][T11022] team0 (unregistering): Port device team_slave_1 removed [ 635.645129][T11022] team_slave_0 (unregistering): left promiscuous mode [ 635.659021][T11022] team_slave_0 (unregistering): left allmulticast mode [ 635.674333][T11022] team0 (unregistering): Port device team_slave_0 removed [ 635.736345][T11022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 635.745445][T11022] bond_slave_1 (unregistering): left promiscuous mode [ 635.806710][T11022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.824406][T11022] bond_slave_0 (unregistering): left promiscuous mode [ 636.214423][T11022] bond0 (unregistering): Released all slaves [ 636.692284][T16705] Bluetooth: hci1: command tx timeout [ 636.811948][T19086] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3671'. [ 636.938372][T19092] netlink: 'syz.2.3672': attribute type 2 has an invalid length. [ 636.946860][T19092] netlink: 'syz.2.3672': attribute type 8 has an invalid length. [ 636.954665][T19092] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3672'. [ 637.046102][T19096] netlink: zone id is out of range [ 637.092187][T19096] netlink: set zone limit has 8 unknown bytes [ 637.869595][T19115] netlink: 'syz.2.3675': attribute type 17 has an invalid length. [ 637.882991][T19115] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3675'. [ 637.925856][T19115] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 638.124476][T18893] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 638.138943][T18893] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 638.154804][T18893] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 638.174151][T18893] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 638.309702][T18893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.363584][T18893] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.388163][T11022] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.395359][T11022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.439011][T11022] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.446241][T11022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.515192][T19132] netlink: 'syz.2.3679': attribute type 2 has an invalid length. [ 638.548286][T19132] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3679'. [ 638.724872][T18893] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 638.760080][T19137] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.3681'. [ 638.968435][T19150] netlink: zone id is out of range [ 638.998150][T19150] netlink: set zone limit has 8 unknown bytes [ 639.928309][T18893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.107585][T18893] veth0_vlan: entered promiscuous mode [ 640.150687][T18893] veth1_vlan: entered promiscuous mode [ 640.224388][T18893] veth0_macvtap: entered promiscuous mode [ 640.242227][T18893] veth1_macvtap: entered promiscuous mode [ 640.273073][T18893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.297104][T18893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.316771][T18893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.327930][T18893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.340102][T18893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 640.378801][T18893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.413614][T18893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.417454][T19202] netlink: zone id is out of range [ 640.445020][T18893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.457004][T19202] netlink: set zone limit has 8 unknown bytes [ 640.487012][T18893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.512848][T18893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 640.531317][T18893] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.543448][T18893] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.554098][T18893] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.569428][T18893] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.686371][T19208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 640.717364][T19208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 640.734483][T19208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 640.745029][T19208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 640.775657][T19208] bridge0: port 4(batadv0) entered disabled state [ 640.887225][T11018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.895119][T11018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.973242][T10196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.001970][T10196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.207895][T19229] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3699'. [ 641.843183][T19256] netlink: zone id is out of range [ 641.857695][T19256] netlink: set zone limit has 8 unknown bytes [ 641.996661][T19262] netlink: 'syz.1.3707': attribute type 10 has an invalid length. [ 642.050296][T19262] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3707'. [ 642.119038][T19262] caif0: entered promiscuous mode [ 642.134765][T19271] netlink: 209840 bytes leftover after parsing attributes in process `syz.3.3706'. [ 642.150009][T19262] caif0: entered allmulticast mode [ 642.172857][T19262] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 642.733902][T19296] netlink: 168504 bytes leftover after parsing attributes in process `syz.1.3713'. [ 642.835949][T19305] netlink: zone id is out of range [ 642.847171][T19305] netlink: set zone limit has 8 unknown bytes [ 642.905514][T19311] netlink: 'syz.3.3717': attribute type 1 has an invalid length. [ 642.983573][T19310] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.3718'. [ 643.569829][T19337] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.3726'. [ 643.785326][T19341] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.3726'. [ 644.051065][T19346] netlink: zone id is out of range [ 644.060919][T19346] netlink: set zone limit has 8 unknown bytes [ 644.631876][T19348] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.3729'. [ 645.175457][T19376] netlink: zone id is out of range [ 645.186162][T19376] netlink: set zone limit has 8 unknown bytes [ 645.456678][T19386] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3740'. [ 646.070204][T19395] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.3742'. [ 646.286299][T19397] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3743'. [ 646.678902][T19413] netlink: zone id is out of range [ 646.684182][T19413] netlink: set zone limit has 8 unknown bytes [ 646.971018][T19419] mac80211_hwsim hwsim63 wlan1: entered promiscuous mode [ 646.980492][T19419] mac80211_hwsim hwsim63 wlan1: entered allmulticast mode [ 647.069477][T19419] __nla_validate_parse: 1 callbacks suppressed [ 647.069521][T19419] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.3751'. [ 647.587736][T19441] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3755'. [ 648.043926][T19451] netlink: zone id is out of range [ 648.052897][T19452] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.3758'. [ 648.063837][T19451] netlink: set zone limit has 8 unknown bytes [ 648.079005][T19452] netlink: 'syz.2.3758': attribute type 1 has an invalid length. [ 648.099394][T19452] netlink: 16520 bytes leftover after parsing attributes in process `syz.2.3758'. [ 648.294155][T19457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 648.313119][T19457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 648.437294][T19457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 648.444780][T19457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 648.642347][T19457] batadv0 (unregistering): left allmulticast mode [ 648.654720][T19457] batadv0 (unregistering): left promiscuous mode [ 648.665971][T19457] ¤: port 1(batadv0) entered disabled state [ 648.948278][T19477] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3769'. [ 649.283101][T19500] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3776'. [ 649.298663][T19500] openvswitch: netlink: Key type 4112 is out of range max 32 [ 650.022624][T19520] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3782'. [ 650.310979][T19529] mac80211_hwsim hwsim41 wlan1: left promiscuous mode [ 650.400132][T19533] netlink: 'syz.2.3789': attribute type 10 has an invalid length. [ 650.409468][T19533] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.419045][T19533] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.432906][T19533] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.449336][T19533] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.479708][T19533] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.510382][T19533] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.519616][T19533] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.535265][T19533] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.558117][T19533] geneve1: entered promiscuous mode [ 650.565754][T19533] geneve1: entered allmulticast mode [ 650.572310][T19533] team0: Port device geneve1 added [ 650.600466][T19541] tap0: tun_chr_ioctl cmd 99999999 [ 650.655093][T19543] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3792'. [ 651.222992][T19550] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.308286][T19549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 651.523387][T19584] netlink: 135856 bytes leftover after parsing attributes in process `syz.3.3804'. [ 651.563591][T19584] netlink: 8442 bytes leftover after parsing attributes in process `syz.3.3804'. [ 652.021427][T19606] netlink: zone id is out of range [ 652.047406][T19606] netlink: set zone limit has 8 unknown bytes [ 653.778836][T19638] netlink: zone id is out of range [ 653.805820][T19638] netlink: set zone limit has 8 unknown bytes [ 654.117342][T19641] syzkaller0: entered promiscuous mode [ 654.123095][T19641] syzkaller0: entered allmulticast mode [ 656.215929][T19649] tun0: tun_chr_ioctl cmd 1074025677 [ 656.221782][T19649] tun0: linktype set to 776 [ 656.236147][T19653] netlink: 'syz.0.3827': attribute type 10 has an invalid length. [ 656.251351][T19653] team0: Device ipvlan1 failed to register rx_handler [ 656.441898][T19661] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 656.543688][T19655] tap1: tun_chr_ioctl cmd 1074025677 [ 656.567502][T19655] tap1: linktype set to 778 [ 656.781940][T19668] syzkaller0: entered promiscuous mode [ 656.798177][T19668] syzkaller0: entered allmulticast mode [ 657.106076][T19671] netlink: zone id is out of range [ 657.126384][T19671] netlink: set zone limit has 8 unknown bytes [ 657.235058][T19676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 657.600552][T19688] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3838'. [ 657.707841][T19693] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3841'. [ 657.882320][T19705] netlink: zone id is out of range [ 657.893004][T19705] netlink: set zone limit has 8 unknown bytes [ 658.101840][T19710] netlink: 'syz.1.3846': attribute type 10 has an invalid length. [ 658.139423][T19710] bridge0: port 3(hsr0) entered disabled state [ 658.145910][T19710] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.154441][T19710] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.211148][T19715] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3848'. [ 658.339172][T19722] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3850'. [ 658.402548][T19726] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3852'. [ 658.412036][T19726] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3852'. [ 658.525751][T19731] netlink: zone id is out of range [ 658.531859][T19726] netlink: 207508 bytes leftover after parsing attributes in process `syz.2.3852'. [ 658.540445][T19731] netlink: set zone limit has 8 unknown bytes [ 659.423643][T19759] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3862'. [ 659.844682][T19763] netlink: 'syz.1.3864': attribute type 9 has an invalid length. [ 659.861307][T19763] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3864'. [ 659.977051][T19768] netlink: 'syz.1.3864': attribute type 21 has an invalid length. [ 660.011436][T19767] netlink: 'syz.1.3864': attribute type 9 has an invalid length. [ 660.040381][T19768] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3864'. [ 660.088943][T19773] netlink: zone id is out of range [ 660.107959][T19763] netlink: 'syz.1.3864': attribute type 10 has an invalid length. [ 660.116099][T19773] netlink: set zone limit has 8 unknown bytes [ 660.615717][T19786] netlink: 'syz.1.3869': attribute type 10 has an invalid length. [ 660.740837][T19790] netlink: 'syz.2.3870': attribute type 21 has an invalid length. [ 660.782924][T19792] netlink: 'syz.3.3871': attribute type 1 has an invalid length. [ 661.210098][T19808] netlink: 'syz.1.3874': attribute type 21 has an invalid length. [ 661.346169][T19810] C: renamed from team_slave_0 [ 661.884890][T19817] netlink: zone id is out of range [ 661.896878][T19817] netlink: set zone limit has 8 unknown bytes [ 662.201125][T16705] Bluetooth: hci1: unexpected subevent 0x05 length: 150 > 12 [ 663.170576][T19848] netlink: 'syz.2.3886': attribute type 3 has an invalid length. [ 663.187614][T19848] netlink: 'syz.2.3886': attribute type 6 has an invalid length. [ 663.234935][T19848] __nla_validate_parse: 8 callbacks suppressed [ 663.235020][T19848] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.3886'. [ 663.345079][T19858] netlink: 'syz.3.3889': attribute type 21 has an invalid length. [ 663.357944][T19858] IPv6: NLM_F_CREATE should be specified when creating new route [ 663.366131][T19858] IPv6: Can't replace route, no match found [ 663.572302][T19861] netlink: 'syz.2.3890': attribute type 7 has an invalid length. [ 663.683498][T19861] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.3890'. [ 664.302014][T16705] Bluetooth: hci1: command tx timeout [ 665.690634][T19898] netlink: 38831 bytes leftover after parsing attributes in process `syz.3.3902'. [ 665.858482][T19904] veth0_vlan: entered allmulticast mode [ 665.983924][T19907] veth0_vlan: left promiscuous mode [ 666.003201][T19907] veth0_vlan: entered promiscuous mode [ 666.380530][T19934] netlink: 'syz.1.3912': attribute type 3 has an invalid length. [ 666.395000][T19934] netlink: 'syz.1.3912': attribute type 16 has an invalid length. [ 666.425899][T19934] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3912'. [ 666.461406][T19941] netlink: zone id is out of range [ 666.467681][T19941] netlink: set zone limit has 8 unknown bytes [ 666.885307][T19967] netlink: 'syz.1.3921': attribute type 10 has an invalid length. [ 667.294086][T19972] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.3922'. [ 667.320737][T19972] netlink: 21096 bytes leftover after parsing attributes in process `syz.2.3922'. [ 667.360279][T19972] tipc: Started in network mode [ 667.385345][T19972] tipc: Node identity 1a, cluster identity 4711 [ 667.404009][T19972] tipc: Node number set to 26 [ 667.848394][T19983] mac80211_hwsim hwsim41 wlan1: entered promiscuous mode [ 667.850808][T19979] netlink: zone id is out of range [ 667.861828][T19979] netlink: set zone limit has 8 unknown bytes [ 668.311080][T19993] sctp: [Deprecated]: syz.1.3929 (pid 19993) Use of struct sctp_assoc_value in delayed_ack socket option. [ 668.311080][T19993] Use struct sctp_sack_info instead [ 669.438242][T20020] netlink: 'syz.2.3939': attribute type 10 has an invalid length. [ 670.019876][T20020] bridge0: port 3(team0) entered disabled state [ 670.029521][T20020] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.763555][T20054] netlink: 'syz.3.3950': attribute type 3 has an invalid length. [ 671.578488][T20058] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.3949'. [ 671.655512][T20058] netlink: zone id is out of range [ 671.692882][T20058] netlink: zone id is out of range [ 671.716792][T20058] netlink: zone id is out of range [ 671.787169][T20058] netlink: zone id is out of range [ 671.827092][T20058] netlink: zone id is out of range [ 671.833842][T20058] netlink: zone id is out of range [ 671.875580][T20058] netlink: zone id is out of range [ 671.911617][T20058] netlink: zone id is out of range [ 672.390691][T20055] netlink: 'syz.1.3948': attribute type 4 has an invalid length. [ 672.400379][T20055] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3948'. [ 672.813475][T20079] netlink: 'syz.3.3956': attribute type 10 has an invalid length. [ 672.830302][T20079] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.3956'. [ 672.984584][T20083] netlink: 'syz.0.3957': attribute type 3 has an invalid length. [ 673.299167][T20093] can: request_module (can-proto-0) failed. [ 673.530273][T20101] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.3964'. [ 673.583435][T20101] net_ratelimit: 321 callbacks suppressed [ 673.583457][T20101] netlink: del zone limit has 8 unknown bytes [ 673.675208][T20104] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.3964'. [ 673.859476][T20104] netlink: zone id is out of range [ 673.864690][T20104] netlink: zone id is out of range [ 673.937559][T20104] netlink: zone id is out of range [ 673.995103][T20104] netlink: zone id is out of range [ 674.012430][T20104] netlink: zone id is out of range [ 674.046868][T20104] netlink: zone id is out of range [ 674.127139][T20104] netlink: zone id is out of range [ 674.151696][T20104] netlink: zone id is out of range [ 674.173482][T20104] netlink: zone id is out of range [ 674.783437][T20120] netlink: 63763 bytes leftover after parsing attributes in process `syz.1.3969'. [ 676.406613][T20134] netlink: 'syz.0.3972': attribute type 2 has an invalid length. [ 676.418146][T20134] netlink: 'syz.0.3972': attribute type 8 has an invalid length. [ 676.435526][T20134] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3972'. [ 676.551240][T20138] netlink: 'syz.1.3973': attribute type 1 has an invalid length. [ 676.569364][T20138] netlink: 126632 bytes leftover after parsing attributes in process `syz.1.3973'. [ 677.094207][T20153] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.3977'. [ 677.252208][T20159] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.3977'. [ 678.477892][T20197] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3990'. [ 678.528005][T20198] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3989'. [ 678.587219][T20198] bond0: (slave bond_slave_0): Releasing backup interface [ 678.632071][T20198] net_ratelimit: 662 callbacks suppressed [ 678.632086][T20198] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 678.860185][T20204] netlink: 'syz.0.3993': attribute type 2 has an invalid length. [ 678.870082][T20204] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3993'. [ 679.398619][T20226] netlink: 'syz.0.3998': attribute type 10 has an invalid length. [ 679.423679][T20226] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.3998'. [ 679.434653][T20230] netlink: 'syz.1.4001': attribute type 39 has an invalid length. [ 679.551479][T20236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4001'. [ 680.522314][T20257] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4008'. [ 680.736349][T20269] team_slave_0: left promiscuous mode [ 680.754422][T20269] team_slave_0: left allmulticast mode [ 680.898782][T20269] team0: Port device team_slave_0 removed [ 680.909352][T20269] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 680.997919][T20289] netlink: 'syz.0.4015': attribute type 10 has an invalid length. [ 681.096195][T20289] team0: Device hsr_slave_0 failed to register rx_handler [ 681.318639][T20300] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.4018'. [ 681.502944][T20306] netlink: 'syz.0.4022': attribute type 1 has an invalid length. [ 681.512361][T20306] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.4022'. [ 681.523540][T20306] netlink: 'syz.0.4022': attribute type 1 has an invalid length. [ 681.743522][T20313] pim6reg1: entered promiscuous mode [ 681.751366][T20313] pim6reg1: entered allmulticast mode [ 682.089716][T20331] netlink: 'syz.0.4030': attribute type 39 has an invalid length. [ 682.633073][T20341] __nla_validate_parse: 1 callbacks suppressed [ 682.633090][T20341] netlink: 149044 bytes leftover after parsing attributes in process `syz.2.4034'. [ 683.039200][T20364] netlink: 'syz.0.4039': attribute type 2 has an invalid length. [ 683.085298][T20364] netlink: 'syz.0.4039': attribute type 9 has an invalid length. [ 683.116684][T20364] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4039'. [ 683.427250][T20356] netlink: 'syz.0.4039': attribute type 13 has an invalid length. [ 683.435196][T20356] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.4039'. [ 683.928251][T20383] netlink: 16239 bytes leftover after parsing attributes in process `syz.2.4046'. [ 684.281035][T20399] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.4051'. [ 684.339304][T20399] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.4051'. [ 685.217520][T20427] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4057'. [ 685.246086][T20425] IPv6: Can't replace route, no match found [ 685.278499][T20427] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4057'. [ 685.753646][T20444] netlink: 'syz.2.4063': attribute type 21 has an invalid length. [ 685.794405][T20444] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4063'. [ 685.935244][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.941758][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.139675][T20448] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4064'. [ 686.155252][T20432] delete_channel: no stack [ 686.508513][T20457] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 686.640978][T20464] netlink: 'syz.2.4070': attribute type 21 has an invalid length. [ 686.649286][T20464] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 686.656617][T20464] IPv6: NLM_F_CREATE should be set when creating new route [ 686.663947][T20464] IPv6: NLM_F_CREATE should be set when creating new route [ 686.671326][T20464] IPv6: NLM_F_CREATE should be set when creating new route [ 686.775605][T20469] netlink: 'syz.3.4071': attribute type 46 has an invalid length. [ 687.018598][T20482] netlink: 'syz.2.4076': attribute type 21 has an invalid length. [ 687.164079][T20486] can: request_module (can-proto-0) failed. [ 687.562700][T20509] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 687.788461][T20515] -: renamed from syzkaller0 [ 687.872846][T20518] netlink: 'syz.3.4087': attribute type 21 has an invalid length. [ 687.882043][T20518] __nla_validate_parse: 3 callbacks suppressed [ 687.882085][T20518] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4087'. [ 688.250025][T20539] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4093'. [ 688.303551][T20542] netlink: zone id is out of range [ 688.309748][T20542] netlink: set zone limit has 8 unknown bytes [ 688.452381][T20553] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 688.469561][T20553] ±ÿ: renamed from team_slave_1 [ 688.489812][T20550] netlink: 209032 bytes leftover after parsing attributes in process `syz.3.4097'. [ 688.521528][T20550] netlink: 252 bytes leftover after parsing attributes in process `syz.3.4097'. [ 688.579684][T20553] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4098'. [ 688.731520][T20561] netlink: 'syz.3.4102': attribute type 19 has an invalid length. [ 688.756652][T20561] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4102'. [ 688.838021][T20568] netlink: zone id is out of range [ 688.856771][T20568] netlink: set zone limit has 8 unknown bytes [ 688.974242][T20579] netlink: zone id is out of range [ 688.980842][T20574] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 689.015670][T20579] netlink: set zone limit has 8 unknown bytes [ 689.425007][T20598] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4115'. [ 689.467877][T20592] netlink: 'syz.0.4112': attribute type 10 has an invalid length. [ 689.621595][T20592] team0: Device vxcan1 is of different type [ 689.636759][T20603] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4116'. [ 689.718277][T20603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4116'. [ 689.733217][T20595] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.4114'. [ 690.012184][T20618] netlink: 'syz.1.4120': attribute type 21 has an invalid length. [ 690.660192][T20647] netlink: 'syz.1.4128': attribute type 14 has an invalid length. [ 691.994533][T20695] net_ratelimit: 4 callbacks suppressed [ 691.994550][T20695] netlink: zone id is out of range [ 692.028946][T20695] netlink: set zone limit has 8 unknown bytes [ 692.343284][T20709] netlink: 'syz.0.4144': attribute type 3 has an invalid length. [ 692.369269][T20709] netlink: 'syz.0.4144': attribute type 1 has an invalid length. [ 692.606200][T20723] netlink: 'syz.2.4150': attribute type 3 has an invalid length. [ 692.839689][T20730] netlink: zone id is out of range [ 692.845355][T20730] netlink: set zone limit has 8 unknown bytes [ 692.989193][T20732] netlink: 'syz.3.4152': attribute type 10 has an invalid length. [ 693.022493][T20732] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 693.056107][T20735] netlink: 'syz.0.4153': attribute type 21 has an invalid length. [ 693.074916][T20732] netlink: 'syz.3.4152': attribute type 21 has an invalid length. [ 693.097224][T20732] __nla_validate_parse: 7 callbacks suppressed [ 693.097239][T20732] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4152'. [ 693.204764][T20742] netlink: 209560 bytes leftover after parsing attributes in process `syz.2.4155'. [ 693.450559][T20750] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4157'. [ 693.481725][T20748] delete_channel: no stack [ 693.502723][T20750] bond0: (slave bond_slave_0): Releasing backup interface [ 693.603344][T20750] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 693.752680][T20764] netlink: 'syz.0.4161': attribute type 1 has an invalid length. [ 693.762184][T20764] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.4161'. [ 693.779137][T20764] netlink: 'syz.0.4161': attribute type 1 has an invalid length. [ 694.037013][T20775] netlink: 1772 bytes leftover after parsing attributes in process `syz.0.4165'. [ 694.070502][T20775] netlink: 1772 bytes leftover after parsing attributes in process `syz.0.4165'. [ 694.128948][T20780] netlink: 'syz.2.4164': attribute type 10 has an invalid length. [ 694.138328][T20780] vxcan1: entered promiscuous mode [ 694.143662][T20780] vxcan1: entered allmulticast mode [ 694.159876][T20780] team0: Device vxcan1 is of different type [ 694.274230][T20784] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 694.282111][T20784] pim6reg1: linktype set to 773 [ 694.332471][T20782] netlink: 209560 bytes leftover after parsing attributes in process `syz.0.4166'. [ 694.784664][T20804] netlink: 'syz.1.4172': attribute type 3 has an invalid length. [ 695.496913][T20826] netlink: 209560 bytes leftover after parsing attributes in process `syz.1.4178'. [ 697.174230][T20857] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4186'. [ 697.223972][T20857] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4186'. [ 698.234796][T20866] netlink: 207508 bytes leftover after parsing attributes in process `syz.3.4189'. [ 698.281406][T20868] validate_nla: 3 callbacks suppressed [ 698.281422][T20868] netlink: 'syz.0.4183': attribute type 21 has an invalid length. [ 698.316890][T20868] netlink: 'syz.0.4183': attribute type 30 has an invalid length. [ 698.831398][T20870] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4190'. [ 699.239051][T20885] netlink: 'syz.2.4195': attribute type 21 has an invalid length. [ 699.267975][T20885] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.4195'. [ 701.966411][T20890] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4197'. [ 703.837678][T20895] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.4199'. [ 703.906005][T20902] netlink: 21 bytes leftover after parsing attributes in process `syz.2.4200'. [ 703.915853][T20902] ksmbd: Unknown IPC event: 0, ignore. [ 703.954448][T20902] netlink: 'syz.2.4200': attribute type 3 has an invalid length. [ 703.966410][T20902] netlink: 'syz.2.4200': attribute type 1 has an invalid length. [ 703.976960][T20902] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.4200'. [ 704.152459][T20905] netlink: 'syz.1.4201': attribute type 10 has an invalid length. [ 704.249228][T20917] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4203'. [ 704.493064][T20923] netlink: 'syz.2.4206': attribute type 10 has an invalid length. [ 704.575525][T20928] netlink: 'syz.1.4208': attribute type 2 has an invalid length. [ 704.836287][T20934] netlink: 822 bytes leftover after parsing attributes in process `syz.3.4209'. [ 704.857571][T20934] veth0_to_bond: invalid flags given to default FDB implementation [ 705.432338][T20942] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4212'. [ 705.789712][T20947] netlink: 'syz.3.4213': attribute type 10 has an invalid length. [ 707.866013][T20956] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4214'. [ 707.909152][T20960] netlink: 'syz.1.4217': attribute type 21 has an invalid length. [ 708.093675][T20966] netlink: 'syz.0.4219': attribute type 10 has an invalid length. [ 708.108665][T20966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 709.033044][T20966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 709.141201][T20966] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 709.176718][T20978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4223'. [ 709.479211][T20991] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4227'. [ 709.579988][T21000] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4230'. [ 709.687582][T21003] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4230'. [ 709.779484][T21004] netlink: 'syz.3.4231': attribute type 1 has an invalid length. [ 709.817464][T21004] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4231'. [ 709.889945][T21008] netlink: 'syz.3.4231': attribute type 1 has an invalid length. [ 709.939536][T21008] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.4231'. [ 709.978752][T21010] syzkaller0: entered promiscuous mode [ 709.984349][T21010] syzkaller0: entered allmulticast mode [ 710.009137][T21013] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4232'. [ 710.214752][T21012] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4229'. [ 710.270129][T21012] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 710.638436][T21046] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4239'. [ 710.660683][T21048] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4238'. [ 710.801442][T21051] syzkaller0: entered promiscuous mode [ 710.808244][T21051] syzkaller0: entered allmulticast mode [ 710.826449][T21052] netlink: 'syz.3.4241': attribute type 10 has an invalid length. [ 710.835816][T21052] hsr0: entered promiscuous mode [ 713.849536][T21061] netlink: 'syz.0.4244': attribute type 10 has an invalid length. [ 713.857622][T21061] team0: entered promiscuous mode [ 713.862654][T21061] team_slave_0: entered promiscuous mode [ 713.868984][T21061] team_slave_1: entered promiscuous mode [ 713.874823][T21061] team0: entered allmulticast mode [ 713.880050][T21061] team_slave_0: entered allmulticast mode [ 713.885825][T21061] team_slave_1: entered allmulticast mode [ 713.892704][T21061] bridge0: port 3(team0) entered blocking state [ 713.899300][T21061] bridge0: port 3(team0) entered disabled state [ 713.908670][T21061] bridge0: port 3(team0) entered blocking state [ 713.915031][T21061] bridge0: port 3(team0) entered forwarding state [ 713.926691][T21057] netlink: 'syz.3.4243': attribute type 10 has an invalid length. [ 714.406722][T21095] netlink: 'syz.3.4254': attribute type 10 has an invalid length. [ 715.362305][T21095] team0 (unregistering): Port device team_slave_1 removed [ 715.415977][T21095] team0 (unregistering): Port device macvlan0 removed [ 715.450814][T21101] pim6reg1: entered promiscuous mode [ 715.456325][T21101] pim6reg1: entered allmulticast mode [ 715.511494][T21104] netlink: 'syz.1.4257': attribute type 3 has an invalid length. [ 715.525355][T21104] __nla_validate_parse: 5 callbacks suppressed [ 715.525369][T21104] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4257'. [ 715.605657][T21106] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.4258'. [ 715.679717][T21108] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4259'. [ 715.690506][T21108] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 715.735393][T21110] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4260'. [ 716.327787][T21128] pim6reg0: tun_chr_ioctl cmd 1074025676 [ 716.333529][T21128] pim6reg0: owner set to 0 [ 716.718477][T21133] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4267'. [ 716.861425][T21139] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4269'. [ 716.987746][T21153] netlink: 'syz.0.4272': attribute type 1 has an invalid length. [ 717.037302][T21153] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.4272'. [ 717.871529][T21157] netlink: 'syz.3.4275': attribute type 21 has an invalid length. [ 717.932627][T21159] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4276'. [ 718.141817][T21167] netlink: 'syz.0.4277': attribute type 6 has an invalid length. [ 718.170492][T21167] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4277'. [ 718.350154][T21172] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4278'. [ 718.804240][T16705] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 719.766716][T21236] delete_channel: no stack [ 720.024816][T21257] netlink: 'syz.3.4304': attribute type 3 has an invalid length. [ 720.047528][T21257] netlink: 'syz.3.4304': attribute type 1 has an invalid length. [ 720.066805][T21257] netlink: 'syz.3.4304': attribute type 6 has an invalid length. [ 720.466320][T21282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 720.553326][T21288] __nla_validate_parse: 9 callbacks suppressed [ 720.553362][T21288] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4316'. [ 720.858417][ T5779] Bluetooth: hci4: command 0x0406 tx timeout [ 721.201954][T21309] netlink: 'syz.0.4318': attribute type 10 has an invalid length. [ 721.221601][T21309] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4318'. [ 721.242226][T21309] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 721.259837][T21309] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 721.330786][T21309] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 721.753919][T21310] syzkaller0: entered promiscuous mode [ 721.789123][T21310] syzkaller0: entered allmulticast mode [ 722.820205][T21332] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4326'. [ 727.171131][T21336] netlink: 'syz.1.4327': attribute type 21 has an invalid length. [ 727.180786][T21336] netlink: 'syz.1.4327': attribute type 30 has an invalid length. [ 727.227385][T21342] netlink: 'syz.2.4328': attribute type 5 has an invalid length. [ 727.239868][T21341] netlink: 'syz.2.4328': attribute type 5 has an invalid length. [ 727.641553][T21354] netlink: 'syz.2.4333': attribute type 29 has an invalid length. [ 727.666763][T21354] netlink: 'syz.2.4333': attribute type 29 has an invalid length. [ 727.678829][T21354] netlink: 'syz.2.4333': attribute type 29 has an invalid length. [ 727.690221][T21354] netlink: 'syz.2.4333': attribute type 29 has an invalid length. [ 727.698897][T21354] netlink: 'syz.2.4333': attribute type 29 has an invalid length. [ 728.531899][T21372] netlink: 'syz.3.4337': attribute type 21 has an invalid length. [ 728.548551][T21372] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4337'. [ 728.652763][T21383] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4339'. [ 731.495825][T21426] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4350'. [ 731.823847][T21449] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4356'. [ 731.875556][T21452] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4355'. [ 732.400963][T21470] validate_nla: 4 callbacks suppressed [ 732.400978][T21470] netlink: 'syz.3.4360': attribute type 27 has an invalid length. [ 732.416903][T21470] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4360'. [ 732.426931][T21470] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 732.458923][T21469] netlink: 'syz.3.4360': attribute type 27 has an invalid length. [ 732.468339][T21469] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4360'. [ 732.483081][T21469] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 733.088171][T21475] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4363'. [ 733.133665][T21475] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 733.186670][T21481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4363'. [ 733.277543][T21482] netlink: 'syz.1.4362': attribute type 21 has an invalid length. [ 733.285699][T21482] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4362'. [ 733.661703][T21505] netlink: 'syz.2.4371': attribute type 21 has an invalid length. [ 733.691592][T21505] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 733.699067][T21505] IPv6: NLM_F_CREATE should be set when creating new route [ 733.706583][T21505] IPv6: NLM_F_CREATE should be set when creating new route [ 733.713872][T21505] IPv6: NLM_F_CREATE should be set when creating new route [ 733.725875][T21504] netlink: 'syz.2.4371': attribute type 21 has an invalid length. [ 733.746227][T21504] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 733.810871][T21505] netlink: 16278 bytes leftover after parsing attributes in process `syz.2.4371'. [ 734.029685][T21513] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4374'. [ 735.336437][T21545] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4384'. [ 737.613180][T21574] netlink: 'syz.3.4395': attribute type 10 has an invalid length. [ 737.636890][T21575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4394'. [ 737.651624][T21575] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4394'. [ 737.924577][T21586] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4399'. [ 738.193723][T21600] netlink: 'syz.3.4405': attribute type 10 has an invalid length. [ 738.207674][T21600] nla_validate_range_unsigned: 25 callbacks suppressed [ 738.207718][T21600] netlink: 'syz.3.4405': attribute type 11 has an invalid length. [ 738.241012][T21600] netlink: 'syz.3.4405': attribute type 11 has an invalid length. [ 738.263495][T21600] netlink: 'syz.3.4405': attribute type 11 has an invalid length. [ 738.289411][T21600] netlink: 'syz.3.4405': attribute type 11 has an invalid length. [ 738.300161][T21600] netlink: 'syz.3.4405': attribute type 11 has an invalid length. [ 738.315539][T21600] netlink: 'syz.3.4405': attribute type 11 has an invalid length. [ 738.324363][T21600] netlink: 'syz.3.4405': attribute type 11 has an invalid length. [ 738.333198][T21600] netlink: 'syz.3.4405': attribute type 11 has an invalid length. [ 738.349878][T21600] netlink: 'syz.3.4405': attribute type 11 has an invalid length. [ 738.368019][T21600] netlink: 'syz.3.4405': attribute type 11 has an invalid length. [ 738.386207][T21600] netlink: 'syz.3.4405': attribute type 4 has an invalid length. [ 738.400070][T21600] netlink: 'syz.3.4405': attribute type 5 has an invalid length. [ 738.408810][T21600] netlink: 208556 bytes leftover after parsing attributes in process `syz.3.4405'. [ 738.887616][T21620] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4410'. [ 739.971045][T21640] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.4418'. [ 739.981129][T21640] netlink: zone id is out of range [ 739.986335][T21640] netlink: zone id is out of range [ 739.992879][T21640] netlink: zone id is out of range [ 739.998103][T21640] netlink: zone id is out of range [ 740.003705][T21640] netlink: zone id is out of range [ 740.010182][T21640] netlink: zone id is out of range [ 740.015773][T21640] netlink: zone id is out of range [ 740.021570][T21640] netlink: zone id is out of range [ 740.027911][T21640] netlink: zone id is out of range [ 740.039375][T21640] netlink: zone id is out of range [ 740.167328][T21647] netlink: 'syz.0.4419': attribute type 1 has an invalid length. [ 740.176065][T21650] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.4416'. [ 740.204247][ T5779] Bluetooth: hci4: unexpected event 0x2c length: 151 > 17 [ 740.207214][T21651] netlink: 'syz.1.4420': attribute type 28 has an invalid length. [ 740.225483][T21650] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.4416'. [ 740.240440][T21650] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 740.249031][T21651] netlink: 'syz.1.4420': attribute type 3 has an invalid length. [ 740.258422][T21651] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4420'. [ 740.272429][T21650] CPU: 0 PID: 21650 Comm: syz.2.4416 Not tainted syzkaller #0 [ 740.279968][T21650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 740.290112][T21650] Call Trace: [ 740.293454][T21650] [ 740.296452][T21650] dump_stack_lvl+0x18c/0x250 [ 740.301244][T21650] ? show_regs_print_info+0x20/0x20 [ 740.306531][T21650] ? load_image+0x420/0x420 [ 740.311175][T21650] sysfs_warn_dup+0x8e/0xa0 [ 740.315849][T21650] sysfs_do_create_link_sd+0xc0/0x110 [ 740.321315][T21650] device_add_class_symlinks+0x1cf/0x240 [ 740.327072][T21650] device_add+0x507/0xc20 [ 740.331500][T21650] wiphy_register+0x1dad/0x2ae0 [ 740.336509][T21650] ? cfg80211_event_work+0x40/0x40 [ 740.341704][T21650] ? minstrel_ht_alloc+0x88a/0x990 [ 740.346948][T21650] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 740.353103][T21650] ieee80211_register_hw+0x3464/0x4250 [ 740.358731][T21650] ? ieee80211_tasklet_handler+0x20/0x20 [ 740.364428][T21650] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 740.370416][T21650] ? __debug_object_init+0xec/0x450 [ 740.375775][T21650] ? __asan_memset+0x22/0x40 [ 740.380468][T21650] ? __hrtimer_init+0x186/0x270 [ 740.385446][T21650] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 740.391313][T21650] ? mac80211_hwsim_free+0x220/0x220 [ 740.396673][T21650] ? rcu_is_watching+0x15/0xb0 [ 740.401523][T21650] ? kstrndup+0xbd/0x140 [ 740.405886][T21650] hwsim_new_radio_nl+0xdc9/0x1a90 [ 740.411105][T21650] ? __nla_validate+0x50/0x50 [ 740.415903][T21650] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 740.422353][T21650] ? __nla_parse+0x40/0x50 [ 740.426866][T21650] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 740.433307][T21650] genl_family_rcv_msg_doit+0x211/0x310 [ 740.438929][T21650] ? end_current_label_crit_section+0x170/0x170 [ 740.445253][T21650] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 740.451298][T21650] ? bpf_lsm_capable+0x9/0x10 [ 740.456109][T21650] ? security_capable+0x89/0xb0 [ 740.461067][T21650] genl_rcv_msg+0x619/0x7a0 [ 740.465670][T21650] ? genl_bind+0x360/0x360 [ 740.470180][T21650] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 740.476585][T21650] ? perf_trace_lock+0x304/0x3b0 [ 740.481643][T21650] netlink_rcv_skb+0x241/0x4d0 [ 740.486501][T21650] ? genl_bind+0x360/0x360 [ 740.490998][T21650] ? netlink_ack+0x1180/0x1180 [ 740.495913][T21650] ? __lock_acquire+0x7d40/0x7d40 [ 740.501021][T21650] ? net_generic+0x1e/0x240 [ 740.505659][T21650] ? down_read+0x1ac/0x2e0 [ 740.510190][T21650] genl_rcv+0x28/0x40 [ 740.514233][T21650] netlink_unicast+0x751/0x8d0 [ 740.519136][T21650] netlink_sendmsg+0x8d0/0xbf0 [ 740.523979][T21650] ? perf_trace_lock+0x304/0x3b0 [ 740.529010][T21650] ? netlink_getsockopt+0x590/0x590 [ 740.534323][T21650] ? aa_sock_msg_perm+0x94/0x150 [ 740.539345][T21650] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 740.544691][T21650] ? security_socket_sendmsg+0x80/0xa0 [ 740.550217][T21650] ? netlink_getsockopt+0x590/0x590 [ 740.555503][T21650] ____sys_sendmsg+0x5ba/0x960 [ 740.560372][T21650] ? __asan_memset+0x22/0x40 [ 740.565042][T21650] ? __sys_sendmsg_sock+0x30/0x30 [ 740.570129][T21650] ? __import_iovec+0x5f2/0x850 [ 740.575080][T21650] ? import_iovec+0x73/0xa0 [ 740.579695][T21650] ___sys_sendmsg+0x2a6/0x360 [ 740.584472][T21650] ? __sys_sendmsg+0x2a0/0x2a0 [ 740.589535][T21650] __se_sys_sendmsg+0x1c2/0x2b0 [ 740.594478][T21650] ? __x64_sys_sendmsg+0x80/0x80 [ 740.599524][T21650] ? lockdep_hardirqs_on+0x98/0x150 [ 740.604779][T21650] do_syscall_64+0x55/0xa0 [ 740.609228][T21650] ? clear_bhb_loop+0x40/0x90 [ 740.613938][T21650] ? clear_bhb_loop+0x40/0x90 [ 740.618668][T21650] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 740.624605][T21650] RIP: 0033:0x7f5a75f9c819 [ 740.629066][T21650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 740.648716][T21650] RSP: 002b:00007f5a76e01028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 740.657175][T21650] RAX: ffffffffffffffda RBX: 00007f5a76215fa0 RCX: 00007f5a75f9c819 [ 740.665180][T21650] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 740.673190][T21650] RBP: 00007f5a76032c91 R08: 0000000000000000 R09: 0000000000000000 [ 740.681194][T21650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 740.689196][T21650] R13: 00007f5a76216038 R14: 00007f5a76215fa0 R15: 00007ffcaf305ec8 [ 740.697253][T21650] [ 741.060185][T21656] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4421'. [ 741.102643][T21651] netlink: 'syz.1.4420': attribute type 39 has an invalid length. [ 741.209844][T21660] netlink: 'syz.2.4423': attribute type 1 has an invalid length. [ 741.229776][T21660] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.4423'. [ 741.385171][T21663] netlink: 'syz.1.4424': attribute type 16 has an invalid length. [ 741.404006][T21663] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4424'. [ 741.436643][T21665] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4425'. [ 741.471090][T21666] netlink: 160 bytes leftover after parsing attributes in process `syz.0.4425'. [ 742.113167][T21695] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 742.126614][T21695] pim6reg0: persist enabled [ 743.167644][T21739] syzkaller0: entered promiscuous mode [ 743.173239][T21739] syzkaller0: entered allmulticast mode [ 744.032253][T21762] validate_nla: 4 callbacks suppressed [ 744.032269][T21762] netlink: 'syz.3.4450': attribute type 4 has an invalid length. [ 744.049925][T21762] __nla_validate_parse: 4 callbacks suppressed [ 744.049940][T21762] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4450'. [ 746.319539][T21776] netlink: 209560 bytes leftover after parsing attributes in process `syz.0.4453'. [ 747.340837][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.347291][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.228815][T21806] netlink: 'syz.2.4462': attribute type 6 has an invalid length. [ 748.543617][T21819] netlink: 209560 bytes leftover after parsing attributes in process `syz.0.4467'. [ 748.813291][T21832] netlink: 'syz.1.4471': attribute type 29 has an invalid length. [ 748.863931][T21832] netlink: 'syz.1.4471': attribute type 29 has an invalid length. [ 748.872376][T21834] netlink: 'syz.1.4471': attribute type 29 has an invalid length. [ 748.906833][T21828] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 748.914840][T21828] syzkaller0: entered promiscuous mode [ 748.977228][T21828] syzkaller0: entered allmulticast mode [ 749.150642][T21849] netlink: 'syz.3.4475': attribute type 21 has an invalid length. [ 749.168115][T21849] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4475'. [ 749.196751][T21849] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4475'. [ 749.328486][T21853] delete_channel: no stack [ 749.399329][T21861] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4478'. [ 749.413148][T21860] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4478'. [ 749.540180][T21860] netlink: 'syz.1.4478': attribute type 10 has an invalid length. [ 749.614953][T21863] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4479'. [ 749.802359][T21870] netlink: 'syz.1.4481': attribute type 41 has an invalid length. [ 749.861617][T21870] netlink: 'syz.1.4481': attribute type 41 has an invalid length. [ 750.263733][T21882] IPv6: pim6reg1: Disabled Multicast RS [ 750.310805][T21891] IPv6: Can't replace route, no match found [ 751.060153][T21905] netlink: 'syz.3.4491': attribute type 21 has an invalid length. [ 751.069410][T21905] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4491'. [ 751.082486][T21905] netlink: 'syz.3.4491': attribute type 21 has an invalid length. [ 751.093515][T21905] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4491'. [ 751.182951][T21909] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4492'. [ 751.200887][T21904] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4490'. [ 751.229639][T21911] netlink: 'syz.2.4493': attribute type 3 has an invalid length. [ 751.302999][T21913] netlink: 'syz.3.4494': attribute type 12 has an invalid length. [ 751.340160][T21913] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4494'. [ 751.457654][T21916] netlink: 'syz.1.4497': attribute type 10 has an invalid length. [ 751.481346][T21918] netlink: 'syz.1.4497': attribute type 10 has an invalid length. [ 751.885158][T21923] Â: renamed from pim6reg1 [ 754.387449][T21956] __nla_validate_parse: 1 callbacks suppressed [ 754.387592][T21956] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4505'. [ 754.528595][ T5779] Bluetooth: hci1: command 0x0406 tx timeout [ 756.002604][T21975] netlink: 209848 bytes leftover after parsing attributes in process `syz.3.4510'. [ 757.024448][T21999] net_ratelimit: 58 callbacks suppressed [ 757.024470][T21999] netlink: zone id is out of range [ 757.076799][T21999] netlink: set zone limit has 8 unknown bytes [ 758.213924][T22007] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4518'. [ 758.279628][T22005] delete_channel: no stack [ 758.799425][T22025] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4526'. [ 759.272194][T22033] netlink: 'syz.2.4528': attribute type 12 has an invalid length. [ 759.296987][T22033] nla_validate_range_unsigned: 26 callbacks suppressed [ 759.297006][T22033] netlink: 'syz.2.4528': attribute type 11 has an invalid length. [ 759.326972][T22033] netlink: 188816 bytes leftover after parsing attributes in process `syz.2.4528'. [ 759.718228][T22036] netlink: 'syz.1.4529': attribute type 10 has an invalid length. [ 759.747527][T22036] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4529'. [ 759.795446][T22036] veth0_vlan: left promiscuous mode [ 759.818520][T22036] veth0_vlan: entered promiscuous mode [ 759.849071][T22036] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 759.973881][T22040] netlink: 'syz.0.4530': attribute type 10 has an invalid length. [ 760.260435][T22040] mac80211_hwsim hwsim63 wlan1: left promiscuous mode [ 760.283711][T22040] mac80211_hwsim hwsim63 wlan1: left allmulticast mode [ 760.337505][T22040] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 760.529659][T22050] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4532'. [ 761.103045][T22062] netlink: 'syz.1.4536': attribute type 8 has an invalid length. [ 761.194930][T22062] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.4536'. [ 761.475586][T22065] netlink: 'syz.0.4538': attribute type 17 has an invalid length. [ 761.493549][T22065] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4538'. [ 761.538983][T22065] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 761.598661][T22067] netlink: 'syz.0.4538': attribute type 21 has an invalid length. [ 761.676596][T22067] IPv6: NLM_F_CREATE should be specified when creating new route [ 762.602601][T22088] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4542'. [ 763.863369][T22108] netlink: 'syz.0.4548': attribute type 1 has an invalid length. [ 763.898464][T22108] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.4548'. [ 763.978819][T22099] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4545'. [ 764.426347][T22118] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4550'. [ 764.446217][T22113] syzkaller0: entered promiscuous mode [ 764.461324][T22113] syzkaller0: entered allmulticast mode [ 764.530935][T22115] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4551'. [ 764.550518][T22124] netlink: 'syz.0.4551': attribute type 29 has an invalid length. [ 764.627854][T22124] netlink: 'syz.0.4551': attribute type 29 has an invalid length. [ 765.305684][T22143] netlink: 'syz.0.4555': attribute type 11 has an invalid length. [ 765.315056][T22143] netlink: 'syz.0.4555': attribute type 1 has an invalid length. [ 765.323345][T22143] netlink: 'syz.0.4555': attribute type 1 has an invalid length. [ 765.336136][T22143] netlink: 'syz.0.4555': attribute type 2 has an invalid length. [ 765.345710][T22143] netlink: 198140 bytes leftover after parsing attributes in process `syz.0.4555'. [ 767.138708][T22153] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4557'. [ 767.298594][T22154] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4558'. [ 767.471985][T22158] netlink: 'syz.1.4560': attribute type 5 has an invalid length. [ 767.495553][T22158] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4560'. [ 768.103956][T22168] netlink: 'syz.3.4563': attribute type 9 has an invalid length. [ 768.135619][T22168] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4563'. [ 768.358318][T22174] tap0: tun_chr_ioctl cmd 1074025677 [ 768.363893][T22174] tap0: linktype set to 270 [ 768.510059][T22187] netlink: 199832 bytes leftover after parsing attributes in process `syz.3.4566'. [ 768.582027][T22186] mac80211_hwsim hwsim63 wlan1: entered promiscuous mode [ 768.590555][T22186] mac80211_hwsim hwsim63 wlan1: entered allmulticast mode [ 768.633770][T22186] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4569'. [ 768.893906][T22197] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4574'. [ 769.131606][T22205] netlink: 'syz.2.4576': attribute type 10 has an invalid length. [ 769.152769][T22205] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4576'. [ 769.252558][T22206] netlink: 'syz.1.4575': attribute type 19 has an invalid length. [ 769.264761][T22206] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4575'. [ 770.813537][T22251] netlink: 'syz.2.4588': attribute type 29 has an invalid length. [ 770.879047][T22251] netlink: 'syz.2.4588': attribute type 29 has an invalid length. [ 770.937787][T22254] netlink: 'syz.2.4588': attribute type 29 has an invalid length. [ 770.975886][T22255] netlink: 'syz.2.4588': attribute type 29 has an invalid length. [ 771.150821][T22256] netlink: 'syz.0.4590': attribute type 10 has an invalid length. [ 771.470293][T22257] __nla_validate_parse: 1 callbacks suppressed [ 771.470313][T22257] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4590'. [ 771.868764][T22256] hsr_slave_0: left promiscuous mode [ 771.920755][T22256] hsr_slave_1: left promiscuous mode [ 772.141041][T22257] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 772.608346][T22273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 772.627636][T22271] netlink: 'syz.0.4595': attribute type 1 has an invalid length. [ 772.635438][T22271] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.4595'. [ 772.661080][T22276] netlink: 'syz.2.4597': attribute type 10 has an invalid length. [ 772.672516][T22276] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4597'. [ 773.269925][T22297] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.4604'. [ 774.190294][T22314] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4610'. [ 775.608356][T22355] tap0: tun_chr_ioctl cmd 1074025680 [ 775.755510][T22352] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4621'. [ 776.265212][T22376] netlink: 'syz.2.4630': attribute type 21 has an invalid length. [ 776.287118][T22376] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4630'. [ 776.296640][T22376] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4630'. [ 776.659378][T22389] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4633'. [ 777.206836][T22394] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4635'. [ 777.350565][T22399] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 777.948579][T22426] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4646'. [ 778.013468][T22426] netlink: 'syz.1.4646': attribute type 9 has an invalid length. [ 778.042670][T22426] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.4646'. [ 778.091199][T22426] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4646'. [ 778.109117][T22430] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4647'. [ 778.992398][T22445] netlink: 'syz.1.4653': attribute type 1 has an invalid length. [ 779.008445][T22446] netlink: 'syz.1.4653': attribute type 1 has an invalid length. [ 779.247836][T22455] netlink: 'syz.0.4656': attribute type 19 has an invalid length. [ 779.255779][T22455] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4656'. [ 779.599149][T22469] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4660'. [ 779.781083][T22475] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.4661'. [ 779.829271][T22475] netlink: 'syz.1.4661': attribute type 1 has an invalid length. [ 780.136959][T22474] netlink: 'syz.0.4662': attribute type 3 has an invalid length. [ 780.156557][T22474] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4662'. [ 780.912629][T22515] netlink: 'syz.2.4670': attribute type 3 has an invalid length. [ 781.264955][T22533] netlink: 'syz.2.4674': attribute type 3 has an invalid length. [ 781.498294][T22547] netlink: 'syz.3.4677': attribute type 29 has an invalid length. [ 781.751467][T22552] __nla_validate_parse: 3 callbacks suppressed [ 781.751484][T22552] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.4681'. [ 781.894697][T22552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4681'. [ 781.987306][T22553] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.4681'. [ 783.342240][T22553] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4681'. [ 783.358387][T22562] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4680'. [ 783.387453][T22562] bridge_slave_1: default FDB implementation only supports local addresses [ 783.541246][T22567] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4684'. [ 783.619641][T22569] mac80211_hwsim hwsim52 wlan0: left promiscuous mode [ 783.635817][T22569] mac80211_hwsim hwsim52 wlan0: left allmulticast mode [ 783.692358][T22577] mac80211_hwsim hwsim52 »»»»»»: renamed from wlan0 [ 784.032218][T22589] netlink: 'syz.3.4691': attribute type 9 has an invalid length. [ 784.211103][T22595] netlink: 'syz.0.4693': attribute type 10 has an invalid length. [ 784.268690][T22600] netlink: 'syz.0.4693': attribute type 9 has an invalid length. [ 784.301270][T22600] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4693'. [ 784.322141][T22602] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4695'. [ 784.590653][T22603] netlink: 'syz.0.4693': attribute type 9 has an invalid length. [ 784.631843][T22603] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4693'. [ 784.906020][T22609] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4696'. [ 785.125252][T22609] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 785.182822][T22609] CPU: 1 PID: 22609 Comm: syz.2.4696 Not tainted syzkaller #0 [ 785.190350][T22609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 785.200447][T22609] Call Trace: [ 785.203758][T22609] [ 785.206721][T22609] dump_stack_lvl+0x18c/0x250 [ 785.211465][T22609] ? show_regs_print_info+0x20/0x20 [ 785.216720][T22609] ? load_image+0x420/0x420 [ 785.221376][T22609] sysfs_warn_dup+0x8e/0xa0 [ 785.225935][T22609] sysfs_do_create_link_sd+0xc0/0x110 [ 785.231370][T22609] device_add_class_symlinks+0x1cf/0x240 [ 785.237063][T22609] device_add+0x507/0xc20 [ 785.241444][T22609] wiphy_register+0x1dad/0x2ae0 [ 785.246363][T22609] ? cfg80211_event_work+0x40/0x40 [ 785.251525][T22609] ? minstrel_ht_alloc+0x88a/0x990 [ 785.256705][T22609] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 785.262834][T22609] ieee80211_register_hw+0x3464/0x4250 [ 785.268354][T22609] ? ieee80211_tasklet_handler+0x20/0x20 [ 785.274049][T22609] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 785.279980][T22609] ? __debug_object_init+0xec/0x450 [ 785.285229][T22609] ? __asan_memset+0x22/0x40 [ 785.289877][T22609] ? __hrtimer_init+0x186/0x270 [ 785.294783][T22609] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 785.300562][T22609] ? mac80211_hwsim_free+0x220/0x220 [ 785.305888][T22609] ? rcu_is_watching+0x15/0xb0 [ 785.310703][T22609] ? kstrndup+0xbd/0x140 [ 785.315012][T22609] hwsim_new_radio_nl+0xdc9/0x1a90 [ 785.320187][T22609] ? __nla_validate+0x50/0x50 [ 785.324922][T22609] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 785.331314][T22609] ? __nla_parse+0x40/0x50 [ 785.335770][T22609] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 785.342144][T22609] genl_family_rcv_msg_doit+0x211/0x310 [ 785.347725][T22609] ? end_current_label_crit_section+0x170/0x170 [ 785.354004][T22609] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 785.359945][T22609] ? bpf_lsm_capable+0x9/0x10 [ 785.364660][T22609] ? security_capable+0x89/0xb0 [ 785.369567][T22609] genl_rcv_msg+0x619/0x7a0 [ 785.374133][T22609] ? genl_bind+0x360/0x360 [ 785.378604][T22609] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 785.384999][T22609] netlink_rcv_skb+0x241/0x4d0 [ 785.389830][T22609] ? genl_bind+0x360/0x360 [ 785.394282][T22609] ? netlink_ack+0x1180/0x1180 [ 785.399094][T22609] ? __lock_acquire+0x7d40/0x7d40 [ 785.404171][T22609] ? net_generic+0x1e/0x240 [ 785.408721][T22609] ? down_read+0x1ac/0x2e0 [ 785.413180][T22609] genl_rcv+0x28/0x40 [ 785.417196][T22609] netlink_unicast+0x751/0x8d0 [ 785.422014][T22609] netlink_sendmsg+0x8d0/0xbf0 [ 785.426840][T22609] ? netlink_getsockopt+0x590/0x590 [ 785.432085][T22609] ? aa_sock_msg_perm+0x94/0x150 [ 785.437060][T22609] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 785.442380][T22609] ? security_socket_sendmsg+0x80/0xa0 [ 785.447871][T22609] ? netlink_getsockopt+0x590/0x590 [ 785.453111][T22609] ____sys_sendmsg+0x5ba/0x960 [ 785.457907][T22609] ? __asan_memset+0x22/0x40 [ 785.462527][T22609] ? __sys_sendmsg_sock+0x30/0x30 [ 785.467576][T22609] ? __import_iovec+0x5f2/0x850 [ 785.472454][T22609] ? import_iovec+0x73/0xa0 [ 785.476985][T22609] ___sys_sendmsg+0x2a6/0x360 [ 785.481723][T22609] ? __sys_sendmsg+0x2a0/0x2a0 [ 785.486542][T22609] ? debug_mutex_init+0x38/0x70 [ 785.491456][T22609] __se_sys_sendmsg+0x1c2/0x2b0 [ 785.496343][T22609] ? __x64_sys_sendmsg+0x80/0x80 [ 785.501313][T22609] ? lockdep_hardirqs_on+0x98/0x150 [ 785.506546][T22609] do_syscall_64+0x55/0xa0 [ 785.510994][T22609] ? clear_bhb_loop+0x40/0x90 [ 785.515708][T22609] ? clear_bhb_loop+0x40/0x90 [ 785.520430][T22609] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 785.526359][T22609] RIP: 0033:0x7f5a75f9c819 [ 785.530805][T22609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 785.550431][T22609] RSP: 002b:00007f5a76e01028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 785.558866][T22609] RAX: ffffffffffffffda RBX: 00007f5a76215fa0 RCX: 00007f5a75f9c819 [ 785.566879][T22609] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 785.574880][T22609] RBP: 00007f5a76032c91 R08: 0000000000000000 R09: 0000000000000000 [ 785.582873][T22609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 785.590867][T22609] R13: 00007f5a76216038 R14: 00007f5a76215fa0 R15: 00007ffcaf305ec8 [ 785.598878][T22609] [ 786.903159][T22645] netlink: 'syz.2.4707': attribute type 3 has an invalid length. [ 786.954040][T22645] __nla_validate_parse: 1 callbacks suppressed [ 786.954057][T22645] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.4707'. [ 788.100090][T22668] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4714'. [ 788.122641][T22663] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.4713'. [ 788.408830][T22682] netlink: 'syz.0.4717': attribute type 10 has an invalid length. [ 788.437816][T22682] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.449651][T22682] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.479042][T22682] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.488656][T22682] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.581328][T22682] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.607123][T22682] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.646879][T22682] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.668820][T22682] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.736243][T22682] geneve1: entered promiscuous mode [ 788.767700][T22682] geneve1: entered allmulticast mode [ 788.798657][T22682] team0: Port device geneve1 added [ 788.817060][T22689] netlink: 'syz.3.4722': attribute type 7 has an invalid length. [ 789.025789][T22693] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4723'. [ 789.061167][T22694] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4723'. [ 789.096799][T22693] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4723'. [ 789.188610][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 789.199506][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 789.218450][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 789.227109][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 789.236774][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 789.246752][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 789.585110][T22712] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4727'. [ 789.824846][T11029] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.875075][T22699] chnl_net:caif_netlink_parms(): no params data found [ 789.999064][T11029] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.083235][T11029] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.132049][T22738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4734'. [ 790.284290][T11029] bond0: (slave netdevsim0): Releasing backup interface [ 790.301103][T11029] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.319201][T22741] netlink: 'syz.0.4734': attribute type 10 has an invalid length. [ 790.328524][T22741] veth0_vlan: left allmulticast mode [ 790.355407][T22741] veth0_vlan: left promiscuous mode [ 790.383278][T22741] veth0_vlan: entered promiscuous mode [ 790.393761][T22741] team0: Device veth0_vlan failed to register rx_handler [ 790.451550][T22699] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.472386][T22699] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.479808][T22699] bridge_slave_0: entered allmulticast mode [ 790.487422][T22699] bridge_slave_0: entered promiscuous mode [ 790.505001][T22699] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.522721][T22699] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.531891][T22699] bridge_slave_1: entered allmulticast mode [ 790.539460][T22699] bridge_slave_1: entered promiscuous mode [ 790.634385][T22699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 790.683421][T22699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 790.925160][T22758] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4739'. [ 791.343732][ T5779] Bluetooth: hci3: command tx timeout [ 791.666849][T22767] mac80211_hwsim hwsim62 »»»»»»: renamed from wlan0 (while UP) [ 791.691276][T22765] pimreg0: entered promiscuous mode [ 791.697386][T22765] pimreg0: entered allmulticast mode [ 791.784806][T22699] team0: Port device team_slave_0 added [ 791.816947][T22699] team0: Port device team_slave_1 added [ 791.963725][T11029] ip6gretap0 (unregistering): left allmulticast mode [ 791.972636][T11029] ip6gretap0 (unregistering): left promiscuous mode [ 791.982510][T11029] Ÿë: port 1(ip6gretap0) entered disabled state [ 792.010726][T22699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 792.026659][T22699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 792.059567][T22699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 792.118647][T22786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4745'. [ 792.147642][T22699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 792.154623][T22699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 792.189927][T22699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 792.216285][T22782] tun0: tun_chr_ioctl cmd 1074025678 [ 792.222572][T22782] tun0: group set to 0 [ 792.475882][T22797] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.4749'. [ 793.407002][ T5779] Bluetooth: hci3: command tx timeout [ 795.332134][T22793] netlink: 'syz.3.4749': attribute type 10 has an invalid length. [ 795.366629][T22793] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4749'. [ 795.375878][T22793] veth0_vlan: left promiscuous mode [ 795.416642][T22793] veth0_vlan: entered promiscuous mode [ 795.453163][T22793] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 795.486622][ T5779] Bluetooth: hci3: command tx timeout [ 795.504522][T22699] hsr_slave_0: entered promiscuous mode [ 795.511345][T22699] hsr_slave_1: entered promiscuous mode [ 795.662733][T22800] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4750'. [ 796.070097][T22812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4753'. [ 796.252644][T22825] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4756'. [ 796.319348][T22830] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4758'. [ 796.607176][T22838] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4760'. [ 797.096313][T22847] netlink: 'syz.2.4761': attribute type 10 has an invalid length. [ 797.104592][T22847] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4761'. [ 797.137611][T22844] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.4761'. [ 797.566769][ T5779] Bluetooth: hci3: command tx timeout [ 800.457887][T22853] netlink: 'syz.0.4764': attribute type 10 has an invalid length. [ 801.100896][T22699] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 801.141616][T22699] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 801.206732][T22699] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 801.235299][T22699] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 801.348790][T22870] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4769'. [ 801.368386][T11029] hsr_slave_0: left promiscuous mode [ 802.110469][T11029] hsr0: left allmulticast mode [ 802.116409][T11029] bridge0: port 3(hsr0) entered disabled state [ 802.167056][T11029] bridge_slave_1: left allmulticast mode [ 802.178728][T11029] bridge_slave_1: left promiscuous mode [ 802.190513][T11029] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.200967][T11029] bridge_slave_0: left allmulticast mode [ 802.207630][T11029] bridge_slave_0: left promiscuous mode [ 802.220240][T11029] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.265719][T11029] veth1_vlan: left promiscuous mode [ 802.276758][T11029] veth0_vlan: left promiscuous mode [ 802.710106][T11029] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 803.062286][T11029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 803.111528][T11029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 803.377597][T11029] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 803.386231][T11029] bond0 (unregistering): (slave bridge0): last VLAN challenged slave left bond - VLAN blocking is removed [ 803.397754][T11029] bond0 (unregistering): Released all slaves [ 803.478761][T22888] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.4773'. [ 803.488614][T22891] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4773'. [ 803.509775][T22897] netlink: 'syz.3.4774': attribute type 10 has an invalid length. [ 803.544890][T22897] hsr0: left promiscuous mode [ 803.791554][T22915] netlink: 22 bytes leftover after parsing attributes in process `syz.3.4778'. [ 803.822300][T22699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 803.848873][T22699] 8021q: adding VLAN 0 to HW filter on device team0 [ 803.875914][T10185] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.883125][T10185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 803.927528][T10185] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.934732][T10185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 804.004512][T22919] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4779'. [ 804.550334][T22699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 804.659897][T22953] netlink: 'syz.2.4786': attribute type 10 has an invalid length. [ 804.921277][T22953] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 804.972996][T22955] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4787'. [ 805.029044][T22699] veth0_vlan: entered promiscuous mode [ 805.048982][T22699] veth1_vlan: entered promiscuous mode [ 805.084418][T22699] veth0_macvtap: entered promiscuous mode [ 805.096238][T22699] veth1_macvtap: entered promiscuous mode [ 805.146063][T22699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 805.176067][T22699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.212743][T22699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.224834][T22699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 805.235057][T22961] netlink: 'syz.2.4788': attribute type 2 has an invalid length. [ 805.244313][T22961] netlink: 119 bytes leftover after parsing attributes in process `syz.2.4788'. [ 805.270702][T22966] netlink: 'syz.0.4790': attribute type 21 has an invalid length. [ 805.327779][T22699] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.345112][T22699] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.364340][T22699] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.376704][T22699] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.086784][T11026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.108294][T11026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.177797][T10185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.187400][T10185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.295725][T22983] netlink: 'syz.3.4794': attribute type 21 has an invalid length. [ 806.340187][T22987] netlink: 'syz.2.4795': attribute type 10 has an invalid length. [ 806.362422][T22987] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4795'. [ 806.373102][T22986] netlink: 'syz.1.4721': attribute type 9 has an invalid length. [ 806.520787][T22987] syzkaller0: entered promiscuous mode [ 806.526512][T22987] syzkaller0: entered allmulticast mode [ 808.319627][T22989] netlink: 'syz.0.4796': attribute type 10 has an invalid length. [ 808.555464][T22998] netlink: 'syz.0.4797': attribute type 17 has an invalid length. [ 808.584195][T22998] netlink: 'syz.0.4797': attribute type 41 has an invalid length. [ 808.605023][T22998] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4797'. [ 808.854330][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.860957][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.473155][T16705] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 809.482535][T16705] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 809.494873][T16705] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 809.533822][T16705] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 809.544222][T16705] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 809.553244][T16705] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 809.676215][ T3463] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.702047][T23022] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4803'. [ 809.851958][T23022] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4803'. [ 809.885659][ T3463] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.914728][T23024] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.4803'. [ 809.932124][T23023] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4803'. [ 810.034921][ T3463] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.187797][ T3463] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.826212][T23042] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4808'. [ 811.050793][ T3463] ip6gretap0 (unregistering): left allmulticast mode [ 811.066653][ T3463] ip6gretap0 (unregistering): left promiscuous mode [ 811.074258][ T3463] Ÿë: port 1(ip6gretap0) entered disabled state [ 811.089384][T23052] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.4809'. [ 811.107355][T23052] openvswitch: netlink: Message has 20476 unknown bytes. [ 811.142205][T23015] chnl_net:caif_netlink_parms(): no params data found [ 811.473982][T23015] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.496653][T23015] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.504963][T23015] bridge_slave_0: entered allmulticast mode [ 811.537247][T23015] bridge_slave_0: entered promiscuous mode [ 811.649660][T16705] Bluetooth: hci2: command tx timeout [ 811.679176][T23015] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.686348][T23015] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.720859][T23015] bridge_slave_1: entered allmulticast mode [ 811.758334][T23015] bridge_slave_1: entered promiscuous mode [ 811.909226][T23015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 811.952462][T23015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 812.111222][T23015] team0: Port device team_slave_0 added [ 812.126185][T23015] team0: Port device team_slave_1 added [ 812.190107][T23015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 812.202541][T23015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 812.229043][T23015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 812.265938][T23015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 812.274222][T23015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 812.302146][T23015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 812.430189][T23015] hsr_slave_0: entered promiscuous mode [ 812.451943][T23015] hsr_slave_1: entered promiscuous mode [ 812.463527][T23015] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 812.479642][T23015] Cannot create hsr debugfs directory [ 813.076730][T23111] netlink: 'syz.0.4819': attribute type 2 has an invalid length. [ 813.084538][T23111] netlink: 'syz.0.4819': attribute type 3 has an invalid length. [ 813.107050][T23111] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4819'. [ 813.320215][T23117] netlink: 'syz.0.4820': attribute type 21 has an invalid length. [ 813.550996][T23120] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4821'. [ 813.599735][ T3463] hsr_slave_0: left promiscuous mode [ 813.728483][T16705] Bluetooth: hci2: command tx timeout [ 813.787387][ T3463] veth1_vlan: left promiscuous mode [ 813.865179][T23127] netlink: 'syz.2.4822': attribute type 8 has an invalid length. [ 814.419943][ T3463] bond0 (unregistering): (slave cÙ): Releasing backup interface [ 814.466245][ T3463] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 814.511251][ T3463] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 814.724107][ T3463] bond0 (unregistering): Released all slaves [ 814.851670][T23127] netlink: 'syz.2.4822': attribute type 10 has an invalid length. [ 814.865838][T23134] netlink: 'syz.1.4823': attribute type 21 has an invalid length. [ 815.129926][T23150] netlink: 65027 bytes leftover after parsing attributes in process `syz.0.4826'. [ 815.182316][T23151] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.4826'. [ 815.483035][T23015] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 815.509712][T23015] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 815.552916][T23015] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 815.614566][T23015] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 815.794122][T23170] netlink: 209560 bytes leftover after parsing attributes in process `syz.0.4831'. [ 815.807422][T16705] Bluetooth: hci2: command tx timeout [ 815.858567][T23015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 815.885689][T23015] 8021q: adding VLAN 0 to HW filter on device team0 [ 815.909535][T11026] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.916752][T11026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 815.932255][T11026] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.939428][T11026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 816.641922][T23015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 816.784045][T23015] veth0_vlan: entered promiscuous mode [ 816.804556][T23015] veth1_vlan: entered promiscuous mode [ 816.911839][T23015] veth0_macvtap: entered promiscuous mode [ 816.961277][T23015] veth1_macvtap: entered promiscuous mode [ 817.006236][T23015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 817.046556][T23015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.083504][T23015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 817.181070][T23015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.193865][T23015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.218609][T23015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.241051][T23015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.263800][T23015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 817.302285][T23015] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.326627][T23015] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.335401][T23015] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.345645][T23015] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.525251][T11029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.559879][T11029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.605544][T11029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.632315][T11029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.886826][T16705] Bluetooth: hci2: command tx timeout [ 818.022415][T23256] netlink: 'syz.3.4799': attribute type 46 has an invalid length. [ 818.143257][T23266] netlink: 'syz.2.4847': attribute type 21 has an invalid length. [ 818.170905][T23266] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4847'. [ 818.907963][T23284] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4851'. [ 819.170355][T23282] syzkaller0: entered promiscuous mode [ 819.175898][T23282] syzkaller0: entered allmulticast mode [ 824.705923][T23371] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4862'. [ 825.392675][T23384] netlink: 'syz.2.4864': attribute type 46 has an invalid length. [ 825.977133][T23404] netlink: 'syz.0.4870': attribute type 3 has an invalid length. [ 825.985112][T23404] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4870'. [ 826.037420][T23407] netlink: zone id is out of range [ 826.042648][T23407] netlink: set zone limit has 8 unknown bytes [ 826.439451][T23425] netlink: 'syz.3.4877': attribute type 3 has an invalid length. [ 827.045985][T23437] pim6reg1: entered promiscuous mode [ 827.051725][T23437] pim6reg1: entered allmulticast mode [ 827.383294][T23453] netlink: zone id is out of range [ 827.388897][T23453] netlink: set zone limit has 8 unknown bytes [ 827.432547][T23457] netlink: 'syz.3.4884': attribute type 10 has an invalid length. [ 827.442143][T23457] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.449919][T23457] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.480741][T23457] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.488003][T23457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 827.495535][T23457] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.502798][T23457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 827.546388][T23457] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 828.004265][T23481] netlink: 'syz.0.4894': attribute type 10 has an invalid length. [ 828.045198][T23481] hsr_slave_0: entered promiscuous mode [ 828.059620][T23483] netlink: zone id is out of range [ 828.064943][T23483] netlink: set zone limit has 8 unknown bytes [ 828.072025][T23481] hsr_slave_0: entered allmulticast mode [ 828.084417][T23481] team0: Port device hsr_slave_0 added [ 828.293072][T23495] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4897'. [ 828.501388][T23496] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4899'. [ 829.146180][T23515] netlink: zone id is out of range [ 829.176673][T23515] netlink: set zone limit has 8 unknown bytes [ 829.469933][T23522] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4908'. [ 829.745274][T23533] syzkaller0: entered promiscuous mode [ 829.751628][T23533] syzkaller0: entered allmulticast mode [ 830.065964][T23541] can: request_module (can-proto-0) failed. [ 830.334257][T23549] netlink: 'syz.1.4916': attribute type 9 has an invalid length. [ 830.361471][T23549] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.4916'. [ 831.731581][T23556] netlink: 'syz.1.4919': attribute type 28 has an invalid length. [ 831.766036][T23556] netlink: 'syz.1.4919': attribute type 3 has an invalid length. [ 831.794940][T23556] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4919'. [ 833.819686][T23542] netlink: 'syz.3.4915': attribute type 10 has an invalid length. [ 833.827710][T23542] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4915'. [ 833.836768][T23542] veth0_vlan: entered allmulticast mode [ 833.842847][T23542] bridge0: port 3(veth0_vlan) entered blocking state [ 833.850105][T23542] bridge0: port 3(veth0_vlan) entered disabled state [ 833.860574][T23542] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 834.148824][T23574] netlink: 'syz.2.4925': attribute type 10 has an invalid length. [ 834.598737][T23580] pim6reg1: entered promiscuous mode [ 834.604328][T23580] pim6reg1: entered allmulticast mode [ 834.980135][T23602] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4932'. [ 835.011983][T23605] netlink: 'syz.0.4933': attribute type 3 has an invalid length. [ 835.027530][T23605] netlink: 'syz.0.4933': attribute type 1 has an invalid length. [ 835.039205][T23605] netlink: 130160 bytes leftover after parsing attributes in process `syz.0.4933'. [ 835.504861][T23622] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4936'. [ 835.523235][T23623] netlink: 'syz.2.4938': attribute type 4 has an invalid length. [ 835.571878][T23623] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4938'. [ 837.201453][T23632] pim6reg1: entered promiscuous mode [ 837.207241][T23632] pim6reg1: entered allmulticast mode [ 837.410874][T23651] netlink: 'syz.0.4946': attribute type 10 has an invalid length. [ 837.601653][T23651] syz_tun: entered promiscuous mode [ 837.647052][T23651] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 837.856030][T23664] netlink: 'syz.3.4949': attribute type 3 has an invalid length. [ 837.877857][T23669] netlink: 'syz.3.4949': attribute type 3 has an invalid length. [ 837.929265][T23669] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4949'. [ 837.967642][T23664] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4949'. [ 838.199424][T23673] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.4952'. [ 838.318837][T23668] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.4951'. [ 838.542084][T23680] netlink: 'syz.1.4954': attribute type 10 has an invalid length. [ 838.774174][T23680] team0: Port device wlan1 added [ 838.795952][T23686] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4956'. [ 838.903200][T23682] pim6reg1: entered promiscuous mode [ 838.910329][T23682] pim6reg1: entered allmulticast mode [ 838.923149][T23692] netlink: 'syz.2.4957': attribute type 10 has an invalid length. [ 838.956630][T23692] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4957'. [ 839.210057][T23702] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.4960'. [ 839.393640][T23702] netlink: 'syz.0.4960': attribute type 29 has an invalid length. [ 839.459326][T23708] netlink: 208092 bytes leftover after parsing attributes in process `syz.3.4962'. [ 839.463520][T23702] netlink: 'syz.0.4960': attribute type 29 has an invalid length. [ 839.477023][T23708] netlink: 'syz.3.4962': attribute type 1 has an invalid length. [ 839.501904][T23708] netlink: 'syz.3.4962': attribute type 2 has an invalid length. [ 839.539874][T23708] netlink: 'syz.3.4962': attribute type 3 has an invalid length. [ 840.546581][T23730] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 840.830053][T23743] netlink: 'syz.3.4972': attribute type 11 has an invalid length. [ 840.876584][T23743] __nla_validate_parse: 2 callbacks suppressed [ 840.876665][T23743] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.4972'. [ 840.919852][T23747] netlink: 130160 bytes leftover after parsing attributes in process `syz.0.4971'. [ 841.167795][ C0] [ 841.167803][ C0] ================================ [ 841.167809][ C0] WARNING: inconsistent lock state [ 841.167821][ C0] syzkaller #0 Not tainted [ 841.167832][ C0] -------------------------------- [ 841.167837][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 841.167846][ C0] syz.2.4974/23755 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 841.167866][ C0] ffff8880605e38f8 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300 [ 841.167923][ C0] {INITIAL USE} state was registered at: [ 841.167934][ C0] lock_acquire+0x19e/0x420 [ 841.167955][ C0] _raw_spin_lock+0x2e/0x40 [ 841.167976][ C0] htab_lock_bucket+0x17d/0x300 [ 841.167994][ C0] htab_map_delete_elem+0x1a4/0x650 [ 841.168011][ C0] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 841.168031][ C0] bpf_overflow_handler+0x1fc/0x510 [ 841.168056][ C0] __perf_event_overflow+0x447/0x630 [ 841.168075][ C0] perf_swevent_overflow+0x268/0x340 [ 841.168099][ C0] perf_swevent_event+0x45c/0x570 [ 841.168118][ C0] perf_bp_event+0x319/0x430 [ 841.168137][ C0] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 841.168158][ C0] notifier_call_chain+0x197/0x380 [ 841.168179][ C0] atomic_notifier_call_chain+0xda/0x180 [ 841.168201][ C0] notify_die+0x145/0x1a0 [ 841.168221][ C0] notify_debug+0x2e/0x50 [ 841.168235][ C0] noist_exc_debug+0x77/0x120 [ 841.168252][ C0] asm_exc_debug+0x33/0x40 [ 841.168272][ C0] irq event stamp: 1380 [ 841.168277][ C0] hardirqs last enabled at (1379): [] exc_debug+0xf5/0x140 [ 841.168321][ C0] hardirqs last disabled at (1380): [] exc_debug+0x73/0x140 [ 841.168341][ C0] softirqs last enabled at (744): [] bpf_prog_load+0x1266/0x1670 [ 841.168364][ C0] softirqs last disabled at (742): [] bpf_ksym_add+0x2d/0x340 [ 841.168389][ C0] [ 841.168389][ C0] other info that might help us debug this: [ 841.168394][ C0] Possible unsafe locking scenario: [ 841.168394][ C0] [ 841.168398][ C0] CPU0 [ 841.168402][ C0] ---- [ 841.168404][ C0] lock(&htab->lockdep_key); [ 841.168416][ C0] [ 841.168419][ C0] lock(&htab->lockdep_key); [ 841.168430][ C0] [ 841.168430][ C0] *** DEADLOCK *** [ 841.168430][ C0] [ 841.168434][ C0] no locks held by syz.2.4974/23755. [ 841.168441][ C0] [ 841.168441][ C0] stack backtrace: [ 841.168446][ C0] CPU: 0 PID: 23755 Comm: syz.2.4974 Not tainted syzkaller #0 [ 841.168464][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 841.168475][ C0] Call Trace: [ 841.168483][ C0] <#DB> [ 841.168509][ C0] dump_stack_lvl+0x18c/0x250 [ 841.168565][ C0] ? show_regs_print_info+0x20/0x20 [ 841.168609][ C0] ? print_usage_bug+0x475/0x690 [ 841.168632][ C0] ? verify_lock_unused+0x18/0x140 [ 841.168662][ C0] lock_acquire+0x2c2/0x420 [ 841.168692][ C0] ? htab_lock_bucket+0x17d/0x300 [ 841.168718][ C0] ? read_lock_is_recursive+0x20/0x20 [ 841.168739][ C0] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 841.168770][ C0] ? perf_trace_lock+0x304/0x3b0 [ 841.168799][ C0] _raw_spin_lock+0x2e/0x40 [ 841.168818][ C0] ? htab_lock_bucket+0x17d/0x300 [ 841.168838][ C0] htab_lock_bucket+0x17d/0x300 [ 841.168865][ C0] ? htab_lru_map_delete_node+0x760/0x760 [ 841.168886][ C0] ? look_up_lock_class+0x75/0x140 [ 841.168913][ C0] ? verify_lock_unused+0x18/0x140 [ 841.168939][ C0] ? jhash+0x2e8/0x740 [ 841.168964][ C0] htab_map_delete_elem+0x1a4/0x650 [ 841.168995][ C0] ? htab_map_update_elem+0x1040/0x1040 [ 841.169012][ C0] ? rcu_is_watching+0x15/0xb0 [ 841.169038][ C0] ? perf_callchain+0x220/0x220 [ 841.169072][ C0] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 841.169095][ C0] bpf_overflow_handler+0x1fc/0x510 [ 841.169123][ C0] ? perf_tp_event+0x1520/0x1520 [ 841.169145][ C0] ? perf_trace_buf_alloc+0x290/0x290 [ 841.169188][ C0] ? bpf_overflow_handler+0xde/0x510 [ 841.169216][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 841.169260][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 841.169290][ C0] __perf_event_overflow+0x447/0x630 [ 841.169336][ C0] perf_swevent_overflow+0x268/0x340 [ 841.169371][ C0] ? perf_event_switch_output+0x790/0x790 [ 841.169422][ C0] perf_swevent_event+0x45c/0x570 [ 841.169452][ C0] ? perf_tp_event+0x1520/0x1520 [ 841.169473][ C0] ? trace_call_bpf+0x5e9/0x6c0 [ 841.169503][ C0] ? trace_call_bpf+0xc3/0x6c0 [ 841.169555][ C0] perf_bp_event+0x319/0x430 [ 841.169591][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 841.169678][ C0] ? lock_acquire+0x2c2/0x420 [ 841.169719][ C0] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 841.169755][ C0] notifier_call_chain+0x197/0x380 [ 841.169788][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 841.169820][ C0] atomic_notifier_call_chain+0xda/0x180 [ 841.169852][ C0] notify_die+0x145/0x1a0 [ 841.169894][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 841.169935][ C0] ? rcu_is_watching+0x15/0xb0 [ 841.169967][ C0] notify_debug+0x2e/0x50 [ 841.169985][ C0] exc_debug+0xde/0x140 [ 841.170011][ C0] asm_exc_debug+0x1e/0x40 [ 841.170032][ C0] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 841.170053][ C0] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 841.170069][ C0] RSP: 0018:ffffc9000f6dfcb8 EFLAGS: 00050202 [ 841.170084][ C0] RAX: ffffffff842a2001 RBX: 0000000000000080 RCX: 000000000000007c [ 841.170097][ C0] RDX: 0000000000000001 RSI: 0000200000000304 RDI: ffffc9000f6dfde4 [ 841.170109][ C0] RBP: 0000000000000008 R08: ffffc9000f6dfe5f R09: 1ffff92001edbfcb [ 841.170122][ C0] R10: dffffc0000000000 R11: fffff52001edbfcc R12: 0000200000000380 [ 841.170135][ C0] R13: 0000200000000304 R14: ffffc9000f6dfde0 R15: 0000200000000300 [ 841.170167][ C0] ? rcuref_put_slowpath+0xe1/0x150 [ 841.170222][ C0] [ 841.170228][ C0] [ 841.170233][ C0] _copy_from_user+0x8b/0xe0 [ 841.170269][ C0] perf_copy_attr+0x16a/0x840 [ 841.170315][ C0] __se_sys_perf_event_open+0x11b/0x1c50 [ 841.170354][ C0] ? __ia32_sys_get_robust_list+0x110/0x110 [ 841.170385][ C0] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 841.170434][ C0] ? lock_chain_count+0x20/0x20 [ 841.170472][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 841.170494][ C0] ? __x64_sys_perf_event_open+0x20/0xc0 [ 841.170526][ C0] do_syscall_64+0x55/0xa0 [ 841.170543][ C0] ? clear_bhb_loop+0x40/0x90 [ 841.170567][ C0] ? clear_bhb_loop+0x40/0x90 [ 841.170597][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 841.170621][ C0] RIP: 0033:0x7f5a75f9c819 [ 841.170639][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 841.170656][ C0] RSP: 002b:00007f5a76e01028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 841.170680][ C0] RAX: ffffffffffffffda RBX: 00007f5a76215fa0 RCX: 00007f5a75f9c819 [ 841.170694][ C0] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000300 [ 841.170707][ C0] RBP: 00007f5a76032c91 R08: 0000000000000000 R09: 0000000000000000 [ 841.170719][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 841.170732][ C0] R13: 00007f5a76216038 R14: 00007f5a76215fa0 R15: 00007ffcaf305ec8 [ 841.170784][ C0] [ 842.153835][T23755] syzkaller0: entered promiscuous mode [ 842.159667][T23755] syzkaller0: entered allmulticast mode