last executing test programs: 9.198645123s ago: executing program 0 (id=4879): r0 = socket$kcm(0xa, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed0", 0x2b}], 0x1}, 0x0) socket$kcm(0x21, 0x1, 0x2) (async) socket$kcm(0x21, 0x1, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d, 0x10000000, 0x0, 0x2000, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xf, 0xffffffffffffffff, 0x0) (async) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d, 0x10000000, 0x0, 0x2000, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xf, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000295"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x24, 0x0, 0x6, &(0x7f0000000180)) (async) socketpair(0x24, 0x0, 0x6, &(0x7f0000000180)) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0}, 0x0) (async) sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0xfffffffc}, 0x28) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0xfffffffc}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r5, 0x20, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f00000027c0)=""/4096, 0x1000}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r5, 0x20, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f00000027c0)=""/4096, 0x1000}}, 0x10) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) close(r0) (async) close(r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair(0x2c, 0x3, 0x80, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x21, &(0x7f0000000100), 0x120) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x24044051) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8d}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8d}, 0x48) socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000001c0), 0x4) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x10001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r7, 0x20e, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x31, 0x6000000000000000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x5e0}, 0x50) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 8.301301324s ago: executing program 0 (id=4883): perf_event_open(&(0x7f0000000fc0)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x1000000009, 0x8}, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcd, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000600), &(0x7f0000000900), 0x8, 0x8c, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000980)=ANY=[@ANYRES8, @ANYRES16=0x0], 0x0, 0x40003836, 0x0, 0x0, 0x41000, 0x3f, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x29, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x3, 0x8, 0x10, 0x9}, {0x3a63, 0xa3, 0x7}, {0x407, 0x9, 0x2, 0x6}, {0xffff, 0x3, 0x99, 0xfffffff9}, {0x1, 0x9, 0x7, 0x5}]}) r3 = socket$kcm(0xa, 0x2, 0x73) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x11, &(0x7f0000000140)=r4, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1}, 0x480c0) syz_clone(0x8000000, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)="ecf94da393fb2424b69d2b9a49ea15988949fadd610574a4332a5f648c499398b7ff95aa71078207431ef70cd8cae857e60930db6718564bac513c47e7b46c62fa9ab1f73aff20335bc311654cb5ddbf527b3eb8004d75156d732b1bc4ee0347e2e1c9dea5e690391a1172666ce7f9a93259ebab3efb834db72ade7b1ea75f858cdc3b1d9241b02a129495") recvmsg$kcm(r4, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000000500)=""/198, 0xc6}, {&(0x7f0000000680)=""/98, 0x62}, {&(0x7f0000000700)=""/182, 0xb6}, {&(0x7f00000007c0)=""/42, 0xfffffffffffffd2a}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f0000000800)=""/221, 0xdd}, {&(0x7f00000034c0)=""/120, 0x78}], 0x8, &(0x7f0000000240)=""/79, 0x4f}, 0x2000) 7.494847403s ago: executing program 0 (id=4890): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}, 0x402, 0x40000000000, 0xc2ba, 0x0, 0x4000000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1b, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fbdeffff00000000000000008500000041000000850000000700000095"], &(0x7f00000002c0)='GPL\x00', 0x40000002, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) (async) close(r1) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x0, 0x0, 0x0, 0x8, 0x75, &(0x7f0000000800)=""/117, 0x41000, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0xffff}, 0x94) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20005, 0x10021, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x63ec0f7b, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4862, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0xb) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair(0x1f, 0x1, 0x0, &(0x7f0000000200)) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x9, 0x9, 0xfffff010}, {0x6, 0x0, 0x0, 0xa}]}) socket$kcm(0x10, 0x400000002, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d37, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x87, 0x100000001}, 0x113041, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x31) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b04c84e21020af32c6e0a0675f800250002500100000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e7861400bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x6}, 0xffffffffffffffff, 0x0, r3, 0x0) syz_clone(0x82000, 0x0, 0x2e, 0x0, 0x0, 0x0) (async) socket$kcm(0xa, 0x2, 0x3a) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) (async) socket$kcm(0xa, 0x3, 0x3a) 7.171307551s ago: executing program 0 (id=4892): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x18e091180c4df350, 0x400000002, 0xfffffffe, 0x4, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$kcm(0x2, 0x3, 0x84) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r3, &(0x7f0000000480)={&(0x7f0000000a40)=@in6={0xa, 0x4e23, 0x4411, @local, 0x4}, 0x80, 0x0}, 0x40814) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xa0700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r4, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r7 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000001c0)=r6, 0x4) sendmsg$inet(r7, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000180)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e12", 0x28}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) 6.973237536s ago: executing program 4 (id=4894): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000020000002000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) (async) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async, rerun: 32) r3 = socket$kcm(0x10, 0x2, 0x10) (rerun: 32) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020039000b05d25a806f8c6394f90324fc602f00000008000100feff000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x40080, 0x0) (rerun: 32) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) (async, rerun: 64) ioctl$TUNSETVNETLE(r4, 0x400454cc, 0x0) (rerun: 64) close(0x3) 6.35907393s ago: executing program 3 (id=4897): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x15, &(0x7f00000001c0)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0xbe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@lx}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x15, &(0x7f00000001c0)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0xbe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@lx}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) (async) 5.837257032s ago: executing program 4 (id=4899): socketpair(0x1f, 0x800, 0x3, &(0x7f0000000100)={0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400), &(0x7f0000000440)=[0x0, 0x0], 0x0, 0x5a, &(0x7f0000000600), 0x0, 0x10, &(0x7f0000000100), &(0x7f0000000680), 0x8, 0x10d8, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) sendmsg$kcm(r0, &(0x7f0000000800)={&(0x7f0000000140)=@xdp={0x2c, 0xa, r1, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000240)="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", 0xfe}, {&(0x7f0000000440)="f0854f64677d1ef8da49ca67081864309c8be4e90a5d2f4213111cf6097c140aef06e8671916fef835e960966b2be79778979235c604eab72cdfe1da416b1f1e36c30818b39816915bd3012e1924fa95912c711f5218222f4689792f70c6155a5a1c6a2f93cf50726c404fb1ac74693407184a9b39df70ae24496895881a85097f912ab7ed9bfe27252a3bb15d04d2a450cda9bbdc5d", 0x96}], 0x2, &(0x7f0000000540)=[{0x40, 0x110, 0x3, "2d9eb6e5bb171b0391f223f759d02b808b96c25547d60f3e4d47df431eff76d73069daecff7106cccb"}, {0xf0, 0x0, 0x3, "c5cbe0b7893af7d0ff9c21090a1d6bf91b22f51dd5f9dcec9010a35200140c1b9866d130bc9af25790a7c1a210125b12748977823d22c983c4ba3640f8c483e0c84cdb8f07670f1214ec17227c0ec54364dd18b129a7a1825df5aaf8422633f1cce366721b71da70cc7ebaf4e909492d2844ac9f8f15565d8e046f71531027c7201adbd196de9cc5fe1716bc1e87a0649caede31632fc32c97fffc64b277f99664f5e46cf0b1f3d886875596035dd1a15ca187c2e6944203e7c00df765128fbe10c24a3c84db822efee091003de5f193599409abcc29123a61d3"}, {0x90, 0x112, 0x0, "e310ae973194365e386f256c511ddd2781368fd56da8b0f6c15decbd4208c592ef9b19c09b9272bf0143ac2fc4cbf5f244fdc29ae37b57e445a7053f4a56d7120b055be7efd200fb9cb432ab7d9c0d4e7359012d5d7155f356dd992c45faa859dee07e791b04eafd399b82f0e3622ea5b83b3525a36256b802eafd"}, {0x68, 0x3a, 0x7fffffff, "e6fe31851dc42bdb7521134c7d7a528d92351ec36d929b98abd4d4b4cfac9a9a60f7a2748e453f12b61b6145a5dd6248b3480371aac1cbf0f1428026cca9ac09ec6b9adf13ac63ee195550485e036e1ece2d959397"}, {0x80, 0x3a, 0x5374f159, "2a43572754a61086099b52f976232daf0544ab7cc44f3446588300762e84f3872b6fc6a33854bb32c25b0c9bc83e77820a5f4bc2cb0171e9cc17f0f3b23087ec15da59412feabd2a4c77c46e36c28dabff888c5bdc8063bdfc15c31cac72116ed5a4f62f11ef2e0f964e0ae62b"}], 0x2a8}, 0x4040884) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x3, 0x0, 0x10, 0xfc, 0x0, 0x1, 0x20225, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200003, 0x1, @perf_bp={0x0, 0x3}, 0x4048, 0xc8, 0x9, 0x7, 0x2, 0xdc4, 0x0, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x80208, 0x0, 0x310c, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000000)={'macvtap0\x00', 0x400}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r4}, &(0x7f0000000340), &(0x7f0000000840)=r4}, 0x20) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f00000000c0)={'rose0\x00', @broadcast}) socket$kcm(0x29, 0x5, 0x0) write$cgroup_subtree(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="8f030000000000fc007538e486dd630ace2212102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa12006558"], 0xcfa4) socketpair(0x1f, 0x800, 0x3, &(0x7f0000000100)) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400), &(0x7f0000000440)=[0x0, 0x0], 0x0, 0x5a, &(0x7f0000000600), 0x0, 0x10, &(0x7f0000000100), &(0x7f0000000680), 0x8, 0x10d8, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) (async) sendmsg$kcm(r0, &(0x7f0000000800)={&(0x7f0000000140)=@xdp={0x2c, 0xa, r1, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000240)="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", 0xfe}, {&(0x7f0000000440)="f0854f64677d1ef8da49ca67081864309c8be4e90a5d2f4213111cf6097c140aef06e8671916fef835e960966b2be79778979235c604eab72cdfe1da416b1f1e36c30818b39816915bd3012e1924fa95912c711f5218222f4689792f70c6155a5a1c6a2f93cf50726c404fb1ac74693407184a9b39df70ae24496895881a85097f912ab7ed9bfe27252a3bb15d04d2a450cda9bbdc5d", 0x96}], 0x2, &(0x7f0000000540)=[{0x40, 0x110, 0x3, "2d9eb6e5bb171b0391f223f759d02b808b96c25547d60f3e4d47df431eff76d73069daecff7106cccb"}, {0xf0, 0x0, 0x3, "c5cbe0b7893af7d0ff9c21090a1d6bf91b22f51dd5f9dcec9010a35200140c1b9866d130bc9af25790a7c1a210125b12748977823d22c983c4ba3640f8c483e0c84cdb8f07670f1214ec17227c0ec54364dd18b129a7a1825df5aaf8422633f1cce366721b71da70cc7ebaf4e909492d2844ac9f8f15565d8e046f71531027c7201adbd196de9cc5fe1716bc1e87a0649caede31632fc32c97fffc64b277f99664f5e46cf0b1f3d886875596035dd1a15ca187c2e6944203e7c00df765128fbe10c24a3c84db822efee091003de5f193599409abcc29123a61d3"}, {0x90, 0x112, 0x0, "e310ae973194365e386f256c511ddd2781368fd56da8b0f6c15decbd4208c592ef9b19c09b9272bf0143ac2fc4cbf5f244fdc29ae37b57e445a7053f4a56d7120b055be7efd200fb9cb432ab7d9c0d4e7359012d5d7155f356dd992c45faa859dee07e791b04eafd399b82f0e3622ea5b83b3525a36256b802eafd"}, {0x68, 0x3a, 0x7fffffff, "e6fe31851dc42bdb7521134c7d7a528d92351ec36d929b98abd4d4b4cfac9a9a60f7a2748e453f12b61b6145a5dd6248b3480371aac1cbf0f1428026cca9ac09ec6b9adf13ac63ee195550485e036e1ece2d959397"}, {0x80, 0x3a, 0x5374f159, "2a43572754a61086099b52f976232daf0544ab7cc44f3446588300762e84f3872b6fc6a33854bb32c25b0c9bc83e77820a5f4bc2cb0171e9cc17f0f3b23087ec15da59412feabd2a4c77c46e36c28dabff888c5bdc8063bdfc15c31cac72116ed5a4f62f11ef2e0f964e0ae62b"}], 0x2a8}, 0x4040884) (async) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x3, 0x0, 0x10, 0xfc, 0x0, 0x1, 0x20225, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200003, 0x1, @perf_bp={0x0, 0x3}, 0x4048, 0xc8, 0x9, 0x7, 0x2, 0xdc4, 0x0, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) close(r3) (async) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x80208, 0x0, 0x310c, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) (async) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000000)={'macvtap0\x00', 0x400}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r4}, &(0x7f0000000340), &(0x7f0000000840)=r4}, 0x20) (async) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f00000000c0)={'rose0\x00', @broadcast}) (async) socket$kcm(0x29, 0x5, 0x0) (async) write$cgroup_subtree(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="8f030000000000fc007538e486dd630ace2212102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa12006558"], 0xcfa4) (async) 5.762273734s ago: executing program 3 (id=4900): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x2, 0x0, 0x0, 0x0, 0x66d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair(0x25, 0x1, 0x2, &(0x7f0000000200)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x2, 0x0, 0x0, 0x0, 0x66d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) socket$kcm(0xa, 0x5, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) socketpair(0x25, 0x1, 0x2, &(0x7f0000000200)) (async) 5.338166864s ago: executing program 4 (id=4901): perf_event_open(&(0x7f0000000fc0)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x1000000009, 0x8}, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcd, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000600), &(0x7f0000000900), 0x8, 0x8c, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000980)=ANY=[@ANYRES8, @ANYRES16=0x0], 0x0, 0x40003836, 0x0, 0x0, 0x41000, 0x3f, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x29, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x3, 0x8, 0x10, 0x9}, {0x3a63, 0xa3, 0x7}, {0x407, 0x9, 0x2, 0x6}, {0xffff, 0x3, 0x99, 0xfffffff9}, {0x1, 0x9, 0x7, 0x5}]}) r3 = socket$kcm(0xa, 0x2, 0x73) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x11, &(0x7f0000000140)=r4, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1}, 0x480c0) syz_clone(0x8000000, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)="ecf94da393fb2424b69d2b9a49ea15988949fadd610574a4332a5f648c499398b7ff95aa71078207431ef70cd8cae857e60930db6718564bac513c47e7b46c62fa9ab1f73aff20335bc311654cb5ddbf527b3eb8004d75156d732b1bc4ee0347e2e1c9dea5e690391a1172666ce7f9a93259ebab3efb834db72ade7b1ea75f858cdc3b1d9241b02a129495") recvmsg$kcm(r4, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000000500)=""/198, 0xc6}, {&(0x7f0000000680)=""/98, 0x62}, {&(0x7f0000000700)=""/182, 0xb6}, {&(0x7f00000007c0)=""/42, 0xfffffffffffffd2a}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f0000000800)=""/221, 0xdd}, {&(0x7f00000034c0)=""/120, 0x78}], 0x8, &(0x7f0000000240)=""/79, 0x4f}, 0x2000) 5.177290628s ago: executing program 0 (id=4902): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113900000000eb845ad2ff8fc476945db510000002"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x5, 0x0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r1, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x50, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x21, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1cc300005e0007"], 0xfe33) 5.118615699s ago: executing program 1 (id=4903): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181e"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x0, 0x80, 0x4, 0x10, 0x7, 0x1, 0x0, 0x9, 0x44480, 0xe, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext={0x0, 0x14ec}, 0x100249, 0x7fffffffffffffff, 0x48, 0x5, 0x7, 0x100, 0x2, 0x0, 0x8, 0x0, 0x2}) r4 = socket$kcm(0x10, 0x2, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x40305828, &(0x7f0000000340)={'lo\x00', @random="3f2f94c100"}) r6 = getpid() write$cgroup_pid(r5, &(0x7f0000000140)=r6, 0x12) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc0080019000900000006001cc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) 4.918454854s ago: executing program 3 (id=4904): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000002500)={&(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x44}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="ec", 0x1}], 0x1}, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x4}, 0x0, 0xac5e, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x7400}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0x20, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd28}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @generic={0x53, 0x7, 0xe, 0x2, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000400)='GPL\x00', 0x5, 0x10, &(0x7f0000000440)=""/16, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x3, 0x6, 0xff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, 0x1, r1], 0x0, 0x10, 0x6}, 0x94) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000640)=@generic={&(0x7f0000000600)='./file0\x00'}, 0x18) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r5, r6, 0x0, r7}, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b07d25a806f8c6394f90424fc602f0000000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x39, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18040000000000000000000000008000408000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x82, &(0x7f0000000200)=""/130, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) 4.764100128s ago: executing program 1 (id=4906): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000600)="d8000000100081044ed5f782db44b904021d080b04000000e8fe55a1010115000600142603600e120800040000001101a8001600110ce2fdd365b6b0c5c60a00034006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0ed08e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e43bf66f282ac027812cfbd3f0eeb4edbb57a5000000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0a72a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff90850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/20}, 0x20) mkdir(&(0x7f0000000000)='./file0\x00', 0x80) 4.497163464s ago: executing program 1 (id=4907): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10884, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0xc8, 0x10001, 0x7, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000002, 0x0, 0x7, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=""/257, 0x2a, 0x101, 0x6}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x20}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001a80)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 4.456092905s ago: executing program 2 (id=4908): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x5) write$cgroup_subtree(r1, 0x0, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711211000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x3) close(0x4) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000274573b076fc57810000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x98, &(0x7f00000002c0)=""/152}, 0x90) 4.447780475s ago: executing program 4 (id=4909): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close(0x4) (async) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40000100) (async) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001340)=""/4108, 0x100c}], 0x1}, 0x60) r1 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89ed, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4c02, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xd, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="8500000089000000760000000000000027000000000800009500000000000000667f0c7ee76ae58cc18062bce3975ba022fb733e72b1f275f5083d567b4ad780d7664fe81ef35f0b0bec1128d351df080aaab6a7f1356be8408e34a4e722c145d8219bca1ac6a9e3da3565043c4294b2246562c9f623a0739bb9217fecce9cef022d82c78335ca782a727387814d284a345419a6e8200ccf1ea757a73f0d9405c63a16168e406cb668694f52dc3d4ed80e1c6f"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) socketpair(0x22, 0x2, 0x2, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x14, &(0x7f0000000540)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000080), 0x0}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8982, &(0x7f0000000080)) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b05d25a806f8c6394f90824fc602f0000000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000057000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector}, 0x48) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup, 0x20, 0x0, 0x7fff, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0]}, 0x40) 4.163528572s ago: executing program 3 (id=4910): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x202000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0xc411}) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0x200000000000001, 0x106) syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x4c, 0x0, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x202000, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0xc411}) (async) socket$kcm(0xa, 0x5, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) socket$kcm(0x2, 0x200000000000001, 0x106) (async) syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) (async) socket$kcm(0xa, 0x2, 0x0) (async) setsockopt$sock_attach_bpf(r2, 0x29, 0x4c, 0x0, 0x4) (async) 4.162905612s ago: executing program 0 (id=4911): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0xb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = syz_clone(0x40000000, &(0x7f0000000180)="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", 0x1000, &(0x7f0000001180), &(0x7f00000011c0), &(0x7f0000001200)="517eaeec2c3ac065a83c1d6f97b72786113dc762466e703be5e98b74792f57f822cec49fd7df20fa4263b9d37f99413d637c1f6e2882bc372d032e64fa9b9f3d0019ed0ad5d90315ba3e19ad702e917c56eb2166352e046ef16e1a59db0f413fc11f896f64a4f76302d67d1563eab84fc4691b2ba874e92e84effa03fab07c1961f1adf2ed60c5b919701a67aaab3fc7487c6ebfa4173c3becc2b705e09a25d29fb1a9c75d10b0beab4f108ae6c53c9851e966f41e806f1d86596ddb306282699507a617c02eba586318c360fded125b8d97289629") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x5, 0x6, 0x2, 0xc, 0x0, 0x7f, 0x500, 0x12, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x3, 0x54}, 0x4004, 0x5, 0x6d, 0x5, 0x9, 0x4, 0x400, 0x0, 0xfa6, 0x0, 0x4}, r1, 0xc, r2, 0x8) 3.975970256s ago: executing program 2 (id=4912): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0x12b) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x80000005}]}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000300000000000000000000008500000011000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000170000009500000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x3, 0x5, &(0x7f0000000240)) close(0xffffffffffffffff) r1 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x541b, &(0x7f0000000240)) socket$kcm(0xa, 0x2, 0x73) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300001304000000042c53000a0000009200000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70000000000850000000c000000b70000001d0c8cd310af0896bc77108fce4d9000000000851000000300000018000000000000000000000000000000950000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000007f0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r5, &(0x7f0000000500), 0x0}, 0x20) r6 = socket$kcm(0xa, 0x2, 0x0) close(r6) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) r7 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x1a, 0x3}, 0x80, 0x0}, 0x26004055) setsockopt$sock_attach_bpf(r6, 0x0, 0x4, 0x0, 0x0) r8 = socket$kcm(0x2b, 0x1, 0x0) close(r8) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) 3.778754951s ago: executing program 4 (id=4913): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xe59}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0x1000, r0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 3.561137636s ago: executing program 3 (id=4914): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000db0745000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0xc0189436, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="140000000000000029"], 0x18}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x7b, &(0x7f0000000000)=r5, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x1}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0x18, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0x1ff, 0x3f, &(0x7f0000000340)=""/63, 0x41000, 0x4, '\x00', r6, 0x0, r7, 0x8, &(0x7f0000000480)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x1bf9f, r0, 0x2, &(0x7f0000000540)=[r8], &(0x7f0000000580)=[{0x3, 0x4, 0x5, 0x7}, {0x2, 0x5, 0xa, 0xb}], 0x10, 0x2}, 0x94) 3.433024579s ago: executing program 1 (id=4915): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9f}}, &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e817782db4cb904021d0800067c7c09e8fe0ba10a0007000200142603600e1208001e0003070401a8000600200e02400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4ebef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x2002c040) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x1c}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0xc}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0xfffffffb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x5}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x870be37197ebdfa6}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="0095c3e84df86df01f75d7ff218dffff00"], &(0x7f0000000c00)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x47}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000000)=ANY=[@ANYRESOCT=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000b00)="0000003a000e3d0000385ba997a8", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc60100c034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r5, 0x5}, 0x50) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="cb000000150081054e81f782db44b904021f08010a000000040000a118000200ac141414ffff0d1208000f0100810401880016ea1f0006ea7f400303000803600cfab94dcf5c046181d67f6f94007134cf6ee080005c4ab0f45312b3429fa0e408f456211bef32d4760000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd60100730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x44804) 3.067583528s ago: executing program 2 (id=4916): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0b00000000010000081100000900000001000000", @ANYRES32, @ANYBLOB="00000000000000000000c3000000000000000000db4933b08a5046cba564521b4a1249e29519a6993de3dc4596f5e17e9edf9238238829ee3cdeb25bb73e7a90555e81d9c761c3e53a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a", 0x43}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r2}, 0x38) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001e40)={r1, 0x0, 0x1000, 0xff, &(0x7f0000000b40)="f15875a6a60dba52fdf339e473972725d909d482ffc03c3242aff49c62f8e975197b392fcc7fc414686cd59ed2bbfda959dbc18d0e5d473b89fc020004fa1710054ab8f7eb393fa8fa897adf6b7701457935bb327a5bb35a28b2e9346575ae8a1df6f2892d84a6cb0cf42e71884c706a333ba72c392f479feca97ed811bd3c245a79674f0e63a137aab130ff2d027b8717f4b0c81586f925d699ee13a2c27d2c0ee87644016c21d564225c453cd3fee2703773cb3bce3bdc1eafe8abb6635826bfc66ed3f09a4912031cd32d7195f14d50675af40ac31c0c087d9f3b051864f4e6d7d576a525f017a1301584035205e31e9898d1a2f833fe826baf7e93a54664e976626df91fd7636b7bc8419c64de05d9deabe1c87de8efaa9fbecf99221b4ad4766a4c2f46251ecf38caac2d0cb4224487f3ae8248e45ef8b16a5d42a37911b13e179a81dc5dd0e1260bf7365049c4e719691c308c70af82a62cf14f184858038b3546e04bab1decbef4f8dc92e9b67b6627ae8e7c2c35287298843e6a94a7a4c8ff5d6110d2f4d652492482c61a385bafd0602f819ac92b3134e5d75d8edbc2b677e4c2bcdadbadf380042e918a00f6a6e45f57aa243ed0aa0f098efa6e99b9d6e43d0aa978c0cc87d020bba8644c158211c0d6a11f4c3cc11e4702613d2be22bbeb2f6b1a1a21f0510f520109c77afaf7c923f6b54ab2914a19188229345b6a96dcffa9940f4bab0db7ad7f59f21e85dc0f94ddd2eec9fb201a38bd015685620aa51451a983302f38254e93fbc582eb1bb014110c5c3fd6271ee3556faf100f6e3abedfdd839bc798b32bf0689b34027867df4e6659ea7b4e713847bdd3b1d5dc0102aebdf6da3bc8ba089763e2161d70d34071d7deecde15a57f0c5070332b495f42e529094a2fd116a3f3c13ee8366550ebba94b5bf1d8534d1f99d7208314a7bc9a6e299452a611a05cd9a208117de8f23f7517028d9728e57adc1ca7f6e93011e3fd753132fe1b9856fe64a1d461021e6c5149656a4b5fe2def8ccbec57dd21f2478d8cafd6cc14c497de9551f92f4d339f0d6773c0d19b3b79e3daa5f25f37dff6141b9ce855add658605037c2a75a89e36765ea4a25b92de2f1c5ee75731b19397f0310973df72387c1d65d0b014b4146127a1b1a22f886c4d33a22f03276027312867f312e674413a3a188999c885a320fb5ba56cf81ed7066a722aa2957f9dcc49d01a6ff684786380b61ac83e888e13da890d618c24c3a4c11397cb243c7b2c3b4d27988e8863a5e84b8a2563173c12b089460c5b540eb94ec52d9a00d7ea19792d82fcd0899d695dbf39ed30d7490a1dac3b7f9760b8a431a59347c4c83deb9303c1828f04786392980e1e98be8d0f339ea4cb825a02eba60969d4be642e3f4520b7b370e1a9f931286e96dd01a1be4104fb315298a9d859ab0b9777b68f14cb846bbc124745429e345043844b28249f1163dd8fe8d7d31fbfda61677f5217f642e575c3173b427b32e1f9170852b2e32cf327bbe1d476a800908e630b65b60447a7c197509908c4e252ab9667cc7bdd527c94a46e97d480f0c2f669c31fe315b50c81e6cf14762753d0eb9ce35ccbb9e9831b1281548dcbd7d7c41984a32647dc7d90b675647ffdefc452cc654d41f038af9986c3de5e96e9426dd05114154c6d03d13f1b5a986d8eecb318f4bd50b820e26a1054047aa47b1dfafd5bc22878c169c71f21d7f7c5937da17ccbe5bbda60e51cda80c97f67c54da412c6111ea4d59cb536c29615d9296fbfe2790d799b36f80a008f7a8019b53d1552786fcb5393aa0cd1ae714be06b28f489b62ca617591b93a28c2461ea951d805568489d55d2107f76e6e63c75f420dd7fd4d09c7c618d4458a110080141afb3193c802b7de199b474055fbdccc89384629dfb3b2e4155c0754feed6b32407452995c80e35abd8d67209f59cd7fd1a379f07f99542ba586714c5ff30d50eaa029c2f7a4cfdc25d638e4bfe72f39c88ec792ee6cbc8f87ead1822c397222df3ecb3f39775a8e34b950dc7fe197620820af373721071f2d9fbf01621c40b97318233b5c10721d290d8ee88b78531bf445c828b6f9db28622f5ece2c6980a5d5ea1ddf8f8210801f873a43d25b2cbf1eab1bc4fd8c2a7ebe1f709447ce4da06c46f96cd9287a61e33c9949ef9d84053a26eed9b838d788e13426d8a52a3f174b2ecbdc7a1bfaad8dbaa971af0b6f9f8b3b63fe2787b3cf99d93d978d18d45dec8de41ae1316bc3414fd26019b423170d78db4bbfac22f7812eb4d1ddeb968d85f0a3bf2b2c6c099fd6708ba918c0b03688c9151ba681f998968be49dd155bb25e82b7f11ef0d827301c7f4f087b62b708c10aeee25e79f1ea194462c2a672832becf7dfe4eb126fba16fdb12b887974d98953806f74c82578ef04a59c7e093917ebcd125787c67d73c0cb058d4918db82cd658f817af1a4eda25a4216835c09835ee025b2b67a3016d96b5062c387cfaf2b072b39e859b89b7f37839bbc9b0d5fba02d165252faabc201364dde973c7b9dc64541d4aa88888431e99199d545d4da0c9b0c4fb4ee2563263448218366e152fb8a3827c1f90f4b52b619a577c479dc67c50001c51d8afd355708eaab7b49eaa584f27ae4db53f148da081b4f76e852a0524874d56da85e499bf69bf2490cce8c16798c91fdb2da0f42c1b7b222984bdf4daef0f3b3018ff4ea58652097c8fde56888e9b51666c88be905709bc116a22fd8b1a5f3f12a65e1ea41f8e6e06088d89f21a122c67302f65eb88deac81b9021f1c8ea420a0fbeaf9fa42747b2471b6f3c7a899421fe48785cb356358c2de1ffddfdc7f3d4f077cee59b50920e4f5fd8cc7f07baef9dd2ffc2ee784f07abb631f9ea0e2cba54ea947359c12dc1d18532e74e1d61709a6ad373528e881a549ed92255c3f1d386177ccd51e4a5c98b9cf2c384d768171d8421529dc8d769510f327b1c48b7e180499f35014664966f859165512a80733d0b918d25569b17b233477ebd7cecd807ed3b38679c10799dc73c688b200dc691cf26fec625b33d67d89b0632643a2fb86c5bbe5e31574d6dfc4a06c562c09d8c3f2772033cb31d25ad18c6a9e4acf6563928959d2887a949e1fddf84d49d852fef37cfd5d8766ce11437f3bb9daac2acf38e9f67893e2140e4b54d985ae3da908ba34d60f9e26daa628a811b780c1723b64d78d46981a6084e90ee03d567027684cdeb0ff278d4bd1ecdc71b303eb690fdae027b661f8c9040fe38e1368074494524ee3b4a54cf409e66586fca8538bc972b2c57e41c40473af7d14a04de40bdbbcbae3597b54e0f69af5dfefc7a6984b439277ed645c25c1171e61991e4419973b1c8f0daf74a921fa2a7c7a4253c453e31df5bcc8316b57888895367f5755c49c6ccc24cd1f553aa5238a8401e2329c8036f10599c94805362c33df46d396b1b127563c5f5c119d5c14a189a705b8ac196306cbea7fcf7cb221b419ec000e7af1330b0dc9f6ffbea4446446a3235d3697b2e6bc811832b7d2aa1805d9b6d9cbc46505729abd67d2032544e9c0de56a8565fba29191ab6b8fdb036ad08e72dfaf9f42e9702aa8582827428407d68168587f1fe3e6e2e95d95adff784df6a1b9874c5690663e3b2cc232b72333409032e8e4d90572fcabdaafcad0e1f3ec738134f3de829d603a223718e5993dd9cec87c9166fec796049dd8361e55a9ec083c747727afbdede1789e0b6bf4365c392c2de71b8a1eacc8cfc506f0c52924bf9728b1946dd3d6e7a58eaade5d453b7b9cd90728b178165d82466de70010673ba75b1aa137e7b2eda3c2ce7f0bf5d5ed830a5023bbc86c5556ab3b2274991dad572c4ebb86f7c65a304f49ef883e66c7fe12d77adcd1563d373852df765220c4050a6841541ef5896bb6735d15ca7d53c9e86a9481be6719c2b72707b71f299a249207792855beb748745674f817c6d4bc08453c7b7119749a5607ac27118cf660a02844f86a53c3fd9589698d1310a3a54826b3efde978f2fd21fdb12171dd11bd62655c2e7e0971e5530e648fe1b1039deadd83804437878c3151ccaf04050539667a15977ac43135b9f415e94507d05ea86f29dbf3a8e3266d6fca284ba958e510c2265eedded67262d66bb4a61d146c24519787a242e12ad5fe4e32b95e93768773cb066b625c721945cd38a89ebefe07289777dba1eff15a8e810f0376f6134c340fea3030e74f952f2d699c552eb98fbaa781a0e7bd2b8d89d478db3b301b4ef99c7aec6a9d799610b1f94755a9c0869889ae0b385ecce89a1417303e86edc5dde6a778f70ef84014f92276ab45bbac26427c052b6727a9fa803b818ae73cf48f6091ae1155edeac5c165957606febde840d09fd7f41183719c72880ad5ffb987ddd9ba514af52266e671ffc886681d1d8e754834c26e9689bb6c760eabfc921974862bc9ba0a0059924a181b8a8d2a64b984c50f9d8c15b079f553609f442411768cbfa5740652dfa3fe314fd8e632a11a5529ab89d32070f6aa7bdf3164a90d7a6d8b446652b92f922ccfa5e65d8cf6604566b43fdfd4ff9f6bf82c65067081247556f22ad0a81ad2e7d29538d58504d6f9b7bd2c37bea182bfb596c7bad2d698e5ef1b40a7d9725e27309408c18ed9101de0c48f04570712b76c02cb5a6b9a1705dde5748bb4d9597276086e2bef00996d6dcd62c2aa675e8afd4b1d0aa76495bee2a92f5cc6a27d66a8016c15b4a15c76f48185db1ae12ae472d6c6ac82d229302935935b4754cd4347c4a95ca801a2c44a567dbd659ed7d90aa211a6dfb0a2ea61bdbc08d6e60b38dac1cf2f4f59d0861d746f1a85c3cbab197f258d1179eb5ec105e9f623ae82aaff8eb522b0620e5f04b1a39604030015db430c3b4b8ed0985f9a91dce184ffd75b7e7c1b412d8dbea512d198a485df9631d5de4cd7a28eda0998eaf9d4e9e8e573c88a0d75995d181d3919973f72421d912a7a4997ab63c4d88d308e0e2a5529ddca02ec0b695d3a28d04516a627a41786c30b903459df7b803c37a949253fba562b00d2830211f2a6cdd7cf1936e85ce86c1cba60ffebca9d551df7f2d7d1fbe02b05adc54fe536a69fd5bce59a1a58a2d91cba0e501c49e092fa1bebccdb72391b974d440c81356887027bf65c6cfe82cdb16f398fa91bbc594fbdd15fc04d84505ebecc212ca815c8e5650257228dc3c1fdc4bfb0ea7f98736159df462961211f7de375524a8a36b5166c68bf200ab5d58d6ea98e3cc9b14fa7c5fcea7400dd62ab2a58d90419cd220927659df176e6067b0e34b6b3b8885f1dd2f236cff8b2bc6208b1912754eaa724ffaa4dde3c46120dae1fec251dbe92406b77e270746d6910aceab1018c6f616050ff05d4d1080e2eacf986d7e87f8e23fe45385374bc6c209787949f4630c01c0ba8e99138e7bb327054a77868e4d19e7fe9eb1dbaf22141a2bf36f8a287c98ddc9974978691a7e5d8835d35d451e647ae2e44c24aedab9baa941f6efc0e70965223fd844874047602e75b125f1add12b7554fcee206f1f9a170d3fc17e81f1bfa252feabd99a25a052262e00f524425ab087fbdcb8e2fd7b2661b26df001d4e7c3b0a2a9c38e8cb00b69f8273bfc9115ec1360367cf5e3236704c53861f2e0c0d63d4c37fa3ef088bdafac465d7892ae00e71d5cb37b636cb67053cd12df779a295bde1e977d74974829cefe859d39e47ad2df8decbfb35be112d4c2acf6129446e78f84cb77aa45b3bbb4a6126003d", &(0x7f0000001b40)=""/255, 0x6, 0x0, 0xda, 0xf5, &(0x7f0000001c40)="87447cfb5026c78425cf85499bb8f83a156fa8de1ab9f0f591ce040171c9a80ab2bf96a1fd69ddf22c09aee46d6bd84d22fad130b7589c06ee9e74509494f141e1975da596fcedd6d35b480df83bcf04749bee394519e07862b8da7374d7f905f94db82df2ac2bed3dacb74e22ab59a05b9d996c05170dd2f62bcae99f501f54089886ae27010a4622d860a5abeae60382650772fb393a48167c64b8cf35100d38d4ebfac24507ba2d34853580cd6cc519680fe06fecde6d242248cf01add5ad07a3d92ebcef2c3730ff988d357af57c5284d5448f5059e8be1f", &(0x7f0000001d40)="bbbfc6cc26259e70400706ce38adb4596ade4d4df6fd797727262ee379d5ae63a4fc3540d417833028a3e0c675c437cb935e258d40cddb182218fe541d8141aca36a8961695950021a643ed4ce15170e20e89430d07d29e169e1c062a07617f519558a4fae6a32900858a1dbbfa6827e418d7719ca16ebc99542262a4818b42e90c264a3bacbaf5651c2c9099b9f95a6e42ca17e61328acb7296160af79fd890c56b9099fd2563f9e1b082697dbc72cf77d47d89dde96df5d5304f086cc60b40567e05717f7377084d5d38cd5ef0692ed21d6b1f97efc80d799a57890f3b762e213e40c231502efb6a110e57e2bceb2a07d0388d16", 0x1, 0x0, 0x5}, 0x50) r3 = perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1005e2, 0x2, 0x0, 0x0, 0x2, 0x1000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 2.53325859s ago: executing program 4 (id=4917): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e03fe"], 0xffdd) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x12802, 0x0, 0xc2ba, 0x0, 0x3fffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100810, 0x0, 0x100, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0xd1, 0x7f, 0x2, 0x8, 0x0, 0x0, 0x1100, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x4, 0x6}, 0x80, 0x7, 0x40, 0x4, 0x1ff, 0x68000000, 0x7, 0x0, 0x1, 0x0, 0x6}, 0x0, 0xb, r2, 0x3) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x1, 0x7, 0x40, 0x7, 0x0, 0x0, 0x8000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100806, 0x6ff, 0x59, 0x7, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r3, 0xb) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x2, 0x240d0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6f5f, 0x200, 0x0, 0xffffffffffffffff, 0x1000}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000b00)={&(0x7f0000000340)=@abs, 0x6e, &(0x7f0000000900)=[{&(0x7f00000003c0)=""/174, 0xae}, {&(0x7f0000000500)=""/51, 0x33}, {&(0x7f0000000540)=""/129, 0x81}, {&(0x7f0000000600)=""/77, 0x4d}, {&(0x7f0000000680)=""/101, 0x65}, {&(0x7f0000000700)=""/34, 0x22}, {&(0x7f0000000740)=""/21, 0x15}, {&(0x7f0000000780)=""/170, 0xaa}, {&(0x7f0000000840)=""/190, 0xbe}], 0x9, &(0x7f0000000a40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}, 0x2042) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c03400c410000002000149215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) 2.501873341s ago: executing program 2 (id=4918): r0 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60004, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e00073fe6"], 0xfe33) socket$kcm(0x1e, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x308) r3 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r3, &(0x7f00000025c0)={&(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000002500)=ANY=[@ANYBLOB="2c000000000000000000000007000000008903b80717e8ac1e00017f0000010a0101007f000001e000000100000000001c00000000000000000000000800", @ANYRES32=0x0], 0x50}, 0x20000044) socket$kcm(0x10, 0x2, 0x10) (async) socket$kcm(0xf, 0x3, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60004, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) (async) socket$kcm(0x10, 0x400000002, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e00073fe6"], 0xfe33) (async) socket$kcm(0x1e, 0x1, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x308) (async) socket$kcm(0x2, 0x2, 0x0) (async) sendmsg$inet(r3, &(0x7f00000025c0)={&(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000002500)=ANY=[@ANYBLOB="2c000000000000000000000007000000008903b80717e8ac1e00017f0000010a0101007f000001e000000100000000001c00000000000000000000000800", @ANYRES32=0x0], 0x50}, 0x20000044) (async) 2.437601803s ago: executing program 1 (id=4919): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7eaa00000000110061101c00000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) 2.373338084s ago: executing program 3 (id=4920): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x2, @empty}, 0x80, 0x0}, 0x20000001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0xa, 0x1, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2212102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000088a8"], 0xcfa4) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0xec) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) r6 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x6, 0x8, &(0x7f0000000000)=r6, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000007c0)="140000001c000b63d25a285348e3a100e71773ff", 0x14}], 0x1}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0xbcf865683e5ba2fa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket$kcm(0xa, 0x6, 0x0) 2.200947848s ago: executing program 1 (id=4921): socket$kcm(0x10, 0x2, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x3, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14690, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xb3b, 0xffffffffffbffff8}, 0x842, 0x0, 0x6, 0x0, 0x0, 0x101, 0xa6f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0xffffffff, 0x8aaffaf6124a895d, 0x8000, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e00000004000000080000000500000000000000", @ANYRES32, @ANYBLOB="000000000000d7ff00000000000000000000000067b27e14a9c0c6e50c5157b4ca98c0bd728e36d642a44043070b9b7c98962fd74444ed85343c69ea236493a2a9cf206dc3d9b06762364775df3e4360138b1d1ab592aeda0a99716a8aa9b68bcbb45ee68d3b3f1dbbc0ed079721", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r0, r0, 0x500}, 0xc) r2 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002e2f0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r4 = socket$kcm(0xa, 0x6, 0x0) close(r4) socket$kcm(0x2, 0x2, 0x73) setsockopt$sock_attach_bpf(r4, 0x0, 0x4, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xc4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x1, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6f5f, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 1.449482996s ago: executing program 2 (id=4922): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x5) write$cgroup_subtree(r1, 0x0, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711211000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x3) close(0x4) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000274573b076fc57810000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x98, &(0x7f00000002c0)=""/152}, 0x90) 0s ago: executing program 2 (id=4923): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x0) kernel console output (not intermixed with test programs): type 10 has an invalid length. [ 742.335486][T17501] team0: Device wg1 is of different type [ 742.351904][T17517] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3123'. [ 742.409763][T17508] netlink: 'syz.1.3119': attribute type 29 has an invalid length. [ 742.470130][T17517] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3123'. [ 742.510040][T17520] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3123'. [ 743.189415][ T7960] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 743.206565][ T7960] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 743.334978][T17267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 743.400842][ T5389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 743.422228][ T5389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 743.504947][ T7960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 743.523761][ T7960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 743.558462][T17267] device veth0_vlan entered promiscuous mode [ 743.574378][ T7960] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 743.588470][ T7960] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 743.676772][T17267] device veth1_vlan entered promiscuous mode [ 743.754388][T17557] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.3131'. [ 743.810683][ T7960] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 743.820065][ T7960] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 743.833581][ T7960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 743.865086][ T7960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 743.897459][T17267] device veth0_macvtap entered promiscuous mode [ 743.929473][T17267] device veth1_macvtap entered promiscuous mode [ 743.982697][T17267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 744.003559][T17267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.061617][T17267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 744.089699][T17267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.113808][T17267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 744.166055][T17267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.207768][T17267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 744.218698][T17267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.231168][T17267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 744.246766][ T7960] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 744.277393][ T7960] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 744.309032][ T7960] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 744.335183][ T7960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 744.384105][T17267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 744.405243][T17267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.431363][T17267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 744.464973][T17267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.487763][T17267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 744.507111][T17267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.518237][T17267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 744.549310][T17267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.582100][T17267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 744.610541][ T7982] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 744.641031][ T7982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 744.716317][T17267] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.751421][T17267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.790759][T17267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.821102][T17267] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.031430][ T7960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 745.056679][ T7960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.093030][ T5389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 745.136221][ T5389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 745.153607][ T5389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.177207][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 745.324520][T17602] netlink: 'syz.4.3140': attribute type 10 has an invalid length. [ 745.365275][T17602] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3140'. [ 745.446388][T17602] netlink: 'syz.4.3140': attribute type 10 has an invalid length. [ 745.477578][T17602] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3140'. [ 745.888518][T17625] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.3144'. [ 746.739859][ T7960] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.799585][ T49] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 746.809188][ T49] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 746.817101][ T49] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 746.833497][ T49] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 746.841568][ T49] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 746.848942][ T49] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 747.063067][ T7960] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.224098][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.230516][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.269947][ T7960] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.483426][ T7960] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.955009][ T7960] device 0 left promiscuous mode [ 748.020760][T17679] netlink: 'syz.3.3156': attribute type 10 has an invalid length. [ 748.039170][T17679] netlink: 'syz.3.3156': attribute type 11 has an invalid length. [ 748.064329][T17679] netlink: 5145 bytes leftover after parsing attributes in process `syz.3.3156'. [ 748.131524][ T7960] device .*! left promiscuous mode [ 748.831311][T17686] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.3157'. [ 748.840764][T17651] chnl_net:caif_netlink_parms(): no params data found [ 748.857574][T17690] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.3158'. [ 748.901629][ T49] Bluetooth: hci1: command 0x0409 tx timeout [ 748.957940][T17697] -1: renamed from syzkaller0 [ 749.054550][ T7960] tipc: Left network mode [ 750.724037][T17651] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.731404][T17651] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.751444][T17651] device bridge_slave_0 entered promiscuous mode [ 750.783990][T17651] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.801581][T17651] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.820134][T17651] device bridge_slave_1 entered promiscuous mode [ 750.946333][T17651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 750.984586][ T49] Bluetooth: hci1: command 0x041b tx timeout [ 751.087017][T17651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 751.217005][T17651] team0: Port device team_slave_0 added [ 751.249987][T17651] team0: Port device team_slave_1 added [ 752.142004][T17651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 752.149035][T17651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 752.223905][T17651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 752.246915][T17651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 752.254098][T17651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 752.344656][T17651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 752.356822][T17756] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.3171'. [ 752.636151][T17651] device hsr_slave_0 entered promiscuous mode [ 752.657652][T17651] device hsr_slave_1 entered promiscuous mode [ 752.682021][T17651] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 752.699952][T17651] Cannot create hsr debugfs directory [ 752.988434][T17777] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3176'. [ 753.061790][ T49] Bluetooth: hci1: command 0x040f tx timeout [ 753.150206][T17778] netlink: 'syz.0.3176': attribute type 21 has an invalid length. [ 753.170004][T17769] netlink: 'syz.3.3175': attribute type 10 has an invalid length. [ 753.742789][T17800] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3180'. [ 753.970634][T17806] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3180'. [ 754.780452][T17832] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.3183'. [ 755.142034][ T49] Bluetooth: hci1: command 0x0419 tx timeout [ 755.164138][T17651] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 755.223310][T17651] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 755.320315][ T7960] device hsr_slave_0 left promiscuous mode [ 755.375343][ T7960] device hsr_slave_1 left promiscuous mode [ 755.400945][ T7960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 755.438883][ T7960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 755.461521][ T7960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 755.479729][ T7960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 755.497670][ T7960] device bridge_slave_0 left promiscuous mode [ 755.539090][ T7960] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.870751][ T7960] device veth1_macvtap left promiscuous mode [ 755.887008][ T7960] device veth0_macvtap left promiscuous mode [ 755.899723][ T7960] device veth1_vlan left promiscuous mode [ 755.910275][ T7960] device veth0_vlan left promiscuous mode [ 757.366515][T17651] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 757.421105][T17651] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 757.604107][T17902] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.3196'. [ 757.746263][T17651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 757.812974][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 757.821109][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 757.867190][T17651] 8021q: adding VLAN 0 to HW filter on device team0 [ 757.908353][T17914] netlink: 'syz.2.3197': attribute type 11 has an invalid length. [ 757.917213][T17914] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3197'. [ 757.986197][T15507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 758.004682][T15507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 758.031201][T15507] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.038495][T15507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 758.071194][T15507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 758.144921][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 758.183535][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 758.206146][ T4319] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.213413][ T4319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 758.234608][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 758.306260][T17919] netlink: 'syz.3.3198': attribute type 10 has an invalid length. [ 758.367875][T17919] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.382019][T17919] device bridge_slave_1 left promiscuous mode [ 758.396862][T17919] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.481167][ T7960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 758.522998][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 758.539405][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 758.552977][T17931] netlink: 'syz.1.3201': attribute type 13 has an invalid length. [ 758.561045][T17931] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.3201'. [ 758.599451][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 758.643186][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 758.667856][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 758.704792][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 758.727243][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 758.764550][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 758.817484][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 758.843909][T17651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 758.891892][T17942] netlink: 'syz.2.3203': attribute type 21 has an invalid length. [ 758.912173][T17942] netlink: 'syz.2.3203': attribute type 6 has an invalid length. [ 758.922376][T17942] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3203'. [ 759.215365][T17961] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.3207'. [ 759.709798][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 759.718943][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 759.776964][T17651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 759.799154][T17989] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3213'. [ 759.935354][T17994] netlink: 'syz.2.3214': attribute type 1 has an invalid length. [ 760.461785][T18006] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3217'. [ 760.511028][T18006] netlink: zone id is out of range [ 760.559119][T18006] netlink: zone id is out of range [ 760.594517][T18006] netlink: zone id is out of range [ 760.614108][T18006] netlink: zone id is out of range [ 760.658465][T18006] netlink: zone id is out of range [ 760.708361][T18006] netlink: zone id is out of range [ 760.762931][T18006] netlink: zone id is out of range [ 760.782243][T18006] netlink: zone id is out of range [ 760.806003][T18006] netlink: zone id is out of range [ 760.855081][T18006] netlink: zone id is out of range [ 761.191882][ T7960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 761.216174][ T7960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 761.262849][ T7960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 761.279756][ T7960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 761.298180][T17651] device veth0_vlan entered promiscuous mode [ 761.306254][ T7960] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 761.328475][ T7960] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 761.346946][T17651] device veth1_vlan entered promiscuous mode [ 761.390105][ T7960] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 761.407899][ T7960] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 761.419564][ T7960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 761.441105][ T7960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 761.460287][T17651] device veth0_macvtap entered promiscuous mode [ 761.476148][T17651] device veth1_macvtap entered promiscuous mode [ 761.512090][T17651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 761.529150][T17651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.549875][T17651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 761.562927][T17651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.577430][T17651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 761.590700][T17651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.604674][T17651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 761.616555][T17651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.639014][T17651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 761.677018][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 761.686584][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 761.705486][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 761.747064][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 761.766612][T17651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.814313][T17651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.843273][T17651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.921491][T17651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.960771][T17651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.989284][T17651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.006968][T18027] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3219'. [ 762.039988][T17651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.073251][T17651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.096197][T17651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 762.149331][ T5389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 762.175123][ T5389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 762.223863][T17651] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.251512][T17651] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.260397][T17651] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.280822][T17651] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.300926][T18032] tap0: tun_chr_ioctl cmd 2147767517 [ 762.563890][T18034] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.3223'. [ 762.805287][T18040] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3226'. [ 762.917737][T18036] netlink: 'syz.0.3225': attribute type 21 has an invalid length. [ 762.957496][T18036] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3225'. [ 762.975742][T18036] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3225'. [ 763.222005][ T7967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.229982][ T7967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.272244][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 763.324756][T18050] netlink: 'syz.3.3229': attribute type 10 has an invalid length. [ 763.516542][T18050] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 763.607458][ T5389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.628630][ T5389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.711503][ T7982] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 764.093018][T18072] netlink: 'syz.4.3145': attribute type 2 has an invalid length. [ 764.472138][T18087] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.3238'. [ 764.795223][T18097] netlink: 'syz.1.3240': attribute type 46 has an invalid length. [ 765.115625][T18110] netlink: 'syz.3.3244': attribute type 12 has an invalid length. [ 765.215664][T18110] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3244'. [ 765.317535][T18123] netlink: 'syz.1.3247': attribute type 3 has an invalid length. [ 765.349572][T18123] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3247'. [ 766.110067][T18142] netlink: 'syz.1.3253': attribute type 21 has an invalid length. [ 766.256405][T18148] netlink: 'syz.4.3254': attribute type 10 has an invalid length. [ 766.281445][T18148] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3254'. [ 766.327595][T18148] bridge0: port 3(veth0_vlan) entered blocking state [ 766.369306][T18148] bridge0: port 3(veth0_vlan) entered disabled state [ 766.498809][T18148] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 766.784868][T18158] netlink: 'syz.2.3257': attribute type 3 has an invalid length. [ 766.820207][T18158] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3257'. [ 767.255641][T18163] delete_channel: no stack [ 767.266574][T18169] netlink: 'syz.4.3260': attribute type 29 has an invalid length. [ 767.282550][T18169] netlink: 'syz.4.3260': attribute type 29 has an invalid length. [ 767.507183][T18171] device veth1_macvtap left promiscuous mode [ 767.609966][T18174] netlink: 143932 bytes leftover after parsing attributes in process `syz.1.3262'. [ 767.664900][T18174] netlink: zone id is out of range [ 767.670559][T18174] netlink: zone id is out of range [ 767.702198][T18174] netlink: zone id is out of range [ 767.718185][T18174] netlink: zone id is out of range [ 767.731718][T18174] netlink: zone id is out of range [ 767.737244][T18174] netlink: zone id is out of range [ 767.758278][T18174] netlink: zone id is out of range [ 767.778701][T18174] netlink: zone id is out of range [ 767.797713][T18174] netlink: zone id is out of range [ 767.895099][T18172] device veth1_macvtap entered promiscuous mode [ 767.914299][T18172] device macsec0 entered promiscuous mode [ 768.282084][T18194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3263'. [ 768.465889][T18202] validate_nla: 2 callbacks suppressed [ 768.465909][T18202] netlink: 'syz.0.3267': attribute type 3 has an invalid length. [ 768.511570][T18202] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3267'. [ 768.610422][T18199] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3265'. [ 768.712458][T18199] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 768.759842][T18206] netlink: 'syz.0.3267': attribute type 25 has an invalid length. [ 768.783755][T18206] netlink: 'syz.0.3267': attribute type 29 has an invalid length. [ 768.846092][T18212] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3267'. [ 770.089316][T18244] netlink: 'syz.1.3277': attribute type 3 has an invalid length. [ 770.131678][T18244] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3277'. [ 770.990657][T18253] netlink: 'syz.2.3279': attribute type 29 has an invalid length. [ 771.214669][T18253] netlink: 'syz.2.3279': attribute type 29 has an invalid length. [ 771.246512][T18263] netlink: 'syz.2.3279': attribute type 21 has an invalid length. [ 771.409937][T18262] netlink: 'syz.2.3279': attribute type 29 has an invalid length. [ 771.593655][T18277] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3285'. [ 771.660727][T18281] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3285'. [ 771.691801][T18278] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3284'. [ 771.845709][T18286] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.853298][T18286] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.708546][T18298] netlink: 'syz.4.3289': attribute type 11 has an invalid length. [ 772.756841][T18302] netlink: 'syz.3.3293': attribute type 10 has an invalid length. [ 772.760989][T18298] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3289'. [ 772.777341][T18302] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3293'. [ 772.806645][T18303] netlink: 'syz.3.3293': attribute type 10 has an invalid length. [ 772.971157][T18303] team0: Port device wlan1 added [ 773.192993][T18297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 773.620127][T18314] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 773.983751][T18336] __nla_validate_parse: 3 callbacks suppressed [ 773.983768][T18336] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3297'. [ 774.032117][T18337] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3297'. [ 774.774962][T18343] validate_nla: 3 callbacks suppressed [ 774.774983][T18343] netlink: 'syz.2.3298': attribute type 21 has an invalid length. [ 774.867803][T18344] netlink: 65027 bytes leftover after parsing attributes in process `syz.2.3298'. [ 775.138930][T18362] netlink: 7994 bytes leftover after parsing attributes in process `syz.0.3304'. [ 775.342714][T18367] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3306'. [ 775.467236][T18367] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 775.541694][T18367] CPU: 1 PID: 18367 Comm: syz.2.3306 Not tainted syzkaller #0 [ 775.549248][T18367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 775.559363][T18367] Call Trace: [ 775.562675][T18367] [ 775.565633][T18367] dump_stack_lvl+0x188/0x24e [ 775.570345][T18367] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 775.576533][T18367] ? show_regs_print_info+0x12/0x12 [ 775.581760][T18367] ? load_image+0x410/0x410 [ 775.586334][T18367] ? sysfs_warn_dup+0x61/0xa0 [ 775.591049][T18367] sysfs_warn_dup+0x8a/0xa0 [ 775.595664][T18367] sysfs_do_create_link_sd+0xc0/0x110 [ 775.601072][T18367] device_add+0x83b/0x1050 [ 775.605518][T18367] wiphy_register+0x1d8b/0x2aa0 [ 775.610524][T18367] ? cfg80211_event_work+0x40/0x40 [ 775.615678][T18367] ? _dev_printk+0x1/0x175 [ 775.620155][T18367] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 775.626269][T18367] ieee80211_register_hw+0x2d48/0x39f0 [ 775.631785][T18367] ? ieee80211_register_hw+0xf71/0x39f0 [ 775.637371][T18367] ? ieee80211_register_hw+0xe71/0x39f0 [ 775.642954][T18367] ? ieee80211_tasklet_handler+0x20/0x20 [ 775.648630][T18367] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 775.654818][T18367] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 775.660569][T18367] ? memcpy+0x3c/0x60 [ 775.664576][T18367] hwsim_new_radio_nl+0xab7/0xc90 [ 775.669643][T18367] genl_family_rcv_msg_doit+0x22f/0x350 [ 775.675218][T18367] ? end_current_label_crit_section+0x170/0x170 [ 775.681487][T18367] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 775.687404][T18367] ? bpf_lsm_capable+0x5/0x10 [ 775.692109][T18367] ? security_capable+0x85/0xb0 [ 775.697018][T18367] genl_rcv_msg+0x601/0x790 [ 775.701573][T18367] ? genl_bind+0x360/0x360 [ 775.706006][T18367] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 775.712382][T18367] netlink_rcv_skb+0x1ef/0x440 [ 775.717181][T18367] ? genl_bind+0x360/0x360 [ 775.721640][T18367] ? netlink_ack+0x1160/0x1160 [ 775.726447][T18367] ? down_read+0x1a8/0x2d0 [ 775.730891][T18367] genl_rcv+0x24/0x40 [ 775.734890][T18367] netlink_unicast+0x7ad/0x920 [ 775.739688][T18367] netlink_sendmsg+0x8ad/0xbd0 [ 775.744477][T18367] ? netlink_getsockopt+0x550/0x550 [ 775.749700][T18367] ? apparmor_socket_sendmsg+0x8a/0x330 [ 775.755278][T18367] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 775.760583][T18367] ? security_socket_sendmsg+0x7c/0xa0 [ 775.766093][T18367] ? netlink_getsockopt+0x550/0x550 [ 775.771340][T18367] ____sys_sendmsg+0x5ed/0x9a0 [ 775.776147][T18367] ? __sys_sendmsg_sock+0x30/0x30 [ 775.781198][T18367] ? __import_iovec+0x306/0x510 [ 775.786083][T18367] ? import_iovec+0x6f/0xa0 [ 775.790621][T18367] ___sys_sendmsg+0x2a2/0x360 [ 775.795330][T18367] ? __sys_sendmsg+0x2a0/0x2a0 [ 775.800141][T18367] ? ktime_get+0x7b/0x270 [ 775.804536][T18367] __se_sys_sendmsg+0x1c3/0x2b0 [ 775.809456][T18367] ? ct_nmi_exit+0x145/0x1c0 [ 775.814108][T18367] ? __x64_sys_sendmsg+0x80/0x80 [ 775.819102][T18367] ? lockdep_hardirqs_on+0x94/0x140 [ 775.824335][T18367] do_syscall_64+0x4c/0xa0 [ 775.828773][T18367] ? clear_bhb_loop+0x60/0xb0 [ 775.833480][T18367] ? clear_bhb_loop+0x60/0xb0 [ 775.838189][T18367] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 775.844116][T18367] RIP: 0033:0x7fa0a259e159 [ 775.848550][T18367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.868180][T18367] RSP: 002b:00007fa0a3518028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 775.876638][T18367] RAX: ffffffffffffffda RBX: 00007fa0a2825fa0 RCX: 00007fa0a259e159 [ 775.884634][T18367] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 775.892623][T18367] RBP: 00007fa0a2635024 R08: 0000000000000000 R09: 0000000000000000 [ 775.900627][T18367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 775.908616][T18367] R13: 00007fa0a2826038 R14: 00007fa0a2825fa0 R15: 00007ffd9e8c8a28 [ 775.916800][T18367] [ 776.071335][T18372] device veth1_macvtap left promiscuous mode [ 776.194365][T18374] device veth1_macvtap entered promiscuous mode [ 776.233817][T18374] device macsec0 entered promiscuous mode [ 776.252758][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 776.333830][T18378] netlink: 'syz.4.3308': attribute type 10 has an invalid length. [ 776.649452][T18386] netlink: 'syz.0.3311': attribute type 11 has an invalid length. [ 776.683530][T18386] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3311'. [ 776.819343][T18378] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 777.318565][T18384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 777.358263][T18389] netlink: 'syz.0.3311': attribute type 10 has an invalid length. [ 777.494811][T18389] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 777.712555][T18394] netlink: 'syz.3.3315': attribute type 13 has an invalid length. [ 777.731598][T18394] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3315'. [ 777.895724][T18394] syz_tun: refused to change device tx_queue_len [ 777.919641][T18394] net_ratelimit: 3662 callbacks suppressed [ 777.919661][T18394] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 780.172469][T18443] netlink: 'syz.1.3327': attribute type 11 has an invalid length. [ 780.195390][T18444] netlink: 'syz.1.3327': attribute type 10 has an invalid length. [ 780.199679][T18443] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3327'. [ 780.320504][T18442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 780.608617][ T4319] tipc: Subscription rejected, illegal request [ 782.418356][T18476] netlink: 'syz.4.3336': attribute type 39 has an invalid length. [ 785.952671][T18476] device hsr_slave_1 left promiscuous mode [ 786.314761][T18502] netlink: 'syz.4.3343': attribute type 10 has an invalid length. [ 786.341203][T18502] team0: Device nlmon0 is of different type [ 786.378213][T18500] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3342'. [ 786.617489][T18510] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3344'. [ 786.661721][T18513] IPv6: pim6reg1: Disabled Multicast RS [ 790.835151][T18593] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3366'. [ 791.246719][T18605] netlink: 'syz.0.3370': attribute type 1 has an invalid length. [ 791.295044][T18605] netlink: 'syz.0.3370': attribute type 1 has an invalid length. [ 791.331350][T18605] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.3370'. [ 791.458487][T18600] netlink: 'syz.4.3368': attribute type 14 has an invalid length. [ 791.478612][T18600] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3368'. [ 793.362371][T18641] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3379'. [ 794.722948][T18653] syz.4.3383[18653] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 794.723097][T18653] syz.4.3383[18653] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 794.770982][T18647] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3380'. [ 794.810592][T18655] netlink: 'syz.0.3382': attribute type 29 has an invalid length. [ 794.822351][T18647] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3380'. [ 794.846394][T18655] netlink: 'syz.0.3382': attribute type 29 has an invalid length. [ 794.869184][T18656] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3380'. [ 794.911062][T18657] netlink: 'syz.0.3382': attribute type 29 has an invalid length. [ 794.950491][T18655] netlink: 'syz.0.3382': attribute type 29 has an invalid length. [ 794.979605][T18655] netlink: 'syz.0.3382': attribute type 29 has an invalid length. [ 795.076994][T18659] netlink: 'syz.2.3384': attribute type 29 has an invalid length. [ 795.172588][T18659] netlink: 'syz.2.3384': attribute type 29 has an invalid length. [ 795.251722][T18660] netlink: 'syz.2.3384': attribute type 29 has an invalid length. [ 795.276255][T18673] netlink: 'syz.1.3387': attribute type 6 has an invalid length. [ 796.054871][T18684] device syzkaller0 entered promiscuous mode [ 796.078311][T18682] netlink: 8192 bytes leftover after parsing attributes in process `syz.1.3389'. [ 798.487214][T18695] validate_nla: 4 callbacks suppressed [ 798.487266][T18695] netlink: 'syz.2.3392': attribute type 1 has an invalid length. [ 798.502791][T18695] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3392'. [ 798.523593][T18697] netlink: 'syz.2.3392': attribute type 10 has an invalid length. [ 798.590887][T18697] device veth0_vlan left promiscuous mode [ 798.617578][T18697] device veth0_vlan entered promiscuous mode [ 798.642446][T18697] team0: Device veth0_vlan failed to register rx_handler [ 798.665289][T18715] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3397'. [ 798.667334][T18707] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 798.693857][T18707] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 798.705243][T18734] delete_channel: no stack [ 798.729904][T18707] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 799.000630][T18749] netlink: 146340 bytes leftover after parsing attributes in process `syz.1.3407'. [ 799.020793][T18749] openvswitch: netlink: Key type 386 is out of range max 32 [ 799.385233][T18760] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3409'. [ 799.417104][T18761] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.3411'. [ 799.590919][T18763] netlink: 'syz.0.3409': attribute type 10 has an invalid length. [ 799.604166][T18763] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3409'. [ 799.626989][T18763] device team0 entered promiscuous mode [ 799.635609][T18763] device team_slave_0 entered promiscuous mode [ 799.661568][T18763] device team_slave_1 entered promiscuous mode [ 799.700988][T18763] bridge0: port 3(team0) entered blocking state [ 799.709487][T18764] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3411'. [ 799.727960][T18763] bridge0: port 3(team0) entered disabled state [ 800.146170][T18780] device pim6reg1 entered promiscuous mode [ 800.215939][T18780] netlink: 'syz.4.3414': attribute type 39 has an invalid length. [ 800.613401][T18782] netlink: 'syz.0.3415': attribute type 14 has an invalid length. [ 800.672117][T18782] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3415'. [ 800.827602][T18795] netlink: 'syz.3.3420': attribute type 3 has an invalid length. [ 800.859938][T18795] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3420'. [ 801.222905][T18806] netlink: 'syz.2.3425': attribute type 3 has an invalid length. [ 801.231049][T18806] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3425'. [ 801.917497][T18842] netlink: 'syz.3.3432': attribute type 10 has an invalid length. [ 801.974606][T18842] batman_adv: batadv0: Adding interface: vlan1 [ 801.995450][T18842] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 802.072875][T18842] batman_adv: batadv0: Interface activated: vlan1 [ 802.400374][T18860] netlink: 'syz.3.3438': attribute type 6 has an invalid length. [ 802.951778][T18884] netlink: 'syz.0.3445': attribute type 49 has an invalid length. [ 807.232727][T18952] validate_nla: 4 callbacks suppressed [ 807.232744][T18952] netlink: 'syz.4.3462': attribute type 3 has an invalid length. [ 807.296306][T18952] __nla_validate_parse: 4 callbacks suppressed [ 807.296326][T18952] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3462'. [ 808.671325][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.677764][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.733269][T18962] device sit0 entered promiscuous mode [ 809.999583][T18965] netlink: 'syz.1.3466': attribute type 46 has an invalid length. [ 810.021706][T18965] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3466'. [ 813.812528][T19007] netlink: 'syz.0.3477': attribute type 21 has an invalid length. [ 813.871498][T19007] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3477'. [ 813.894574][T19013] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.3477'. [ 813.952520][T19007] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3477'. [ 813.978109][T19010] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 813.984350][T19010] pim6reg0: linktype set to 780 [ 814.029923][T19016] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.3480'. [ 814.220198][T19024] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.3483'. [ 814.810963][T19033] delete_channel: no stack [ 815.631789][T19074] netlink: 8207 bytes leftover after parsing attributes in process `syz.2.3498'. [ 815.863348][T16419] Bluetooth: hci0: command 0x0406 tx timeout [ 816.226388][T19081] netlink: 'syz.3.3499': attribute type 1 has an invalid length. [ 816.345098][T19081] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3499'. [ 817.272866][T19098] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3502'. [ 817.834925][T19110] mac80211_hwsim hwsim62 »»»»»»: renamed from wlan0 [ 819.765971][T19172] netlink: 'syz.1.3524': attribute type 10 has an invalid length. [ 820.262851][T16419] Bluetooth: hci4: ISO packet for unknown connection handle 62 [ 820.264731][T19188] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3529'. [ 820.759369][T19172] team0: Device gre0 is of different type [ 821.567785][T19221] netlink: 'syz.0.3534': attribute type 3 has an invalid length. [ 821.602532][T19221] netlink: 'syz.0.3534': attribute type 1 has an invalid length. [ 821.633864][T19221] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.3534'. [ 822.909396][T19251] netlink: 'syz.1.3544': attribute type 17 has an invalid length. [ 822.933415][T19251] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3544'. [ 822.944993][T19251] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 822.985062][T19251] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 823.675258][T19270] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.3546'. [ 823.752629][T19270] netlink: 6328 bytes leftover after parsing attributes in process `syz.1.3546'. [ 823.813045][T19273] mac80211_hwsim hwsim63 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 823.905412][T19274] netlink: 763 bytes leftover after parsing attributes in process `syz.4.3548'. [ 825.610732][T19296] device syzkaller0 entered promiscuous mode [ 826.213413][T19328] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3562'. [ 828.614772][T19328] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 828.628964][T19331] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 828.635409][T19331] syzkaller1: linktype set to 786 [ 828.640739][T19329] netlink: 'syz.2.3561': attribute type 10 has an invalid length. [ 828.676077][T19329] team0: Port device geneve1 added [ 828.960126][T19354] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3564'. [ 828.971528][T19354] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 828.994915][T19354] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 829.559750][T19373] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3573'. [ 829.607209][T19373] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3573'. [ 829.655815][T19379] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3573'. [ 829.699557][T19382] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3573'. [ 829.892318][T19389] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3576'. [ 830.057613][T19389] netlink: 134268 bytes leftover after parsing attributes in process `syz.1.3576'. [ 831.896734][T19438] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.3583'. [ 831.951462][T19429] netlink: 'syz.0.3583': attribute type 4 has an invalid length. [ 832.011704][T19429] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3583'. [ 832.095487][T19429] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 832.257615][T19452] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3588'. [ 832.851794][T19472] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3594'. [ 833.740289][T19493] netlink: 'syz.4.3599': attribute type 1 has an invalid length. [ 833.821855][T19493] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3599'. [ 833.910780][T19497] netlink: 'syz.1.3600': attribute type 2 has an invalid length. [ 833.941138][T19497] netlink: 'syz.1.3600': attribute type 1 has an invalid length. [ 833.986452][T19497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 834.023754][T19496] netlink: 'syz.4.3599': attribute type 10 has an invalid length. [ 834.066179][T19496] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3599'. [ 834.144813][T19503] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.3601'. [ 834.192172][T19496] batman_adv: batadv0: Adding interface: vlan1 [ 834.311404][T19496] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 834.540115][T19496] batman_adv: batadv0: Interface activated: vlan1 [ 834.868253][T19508] IPv6: NLM_F_CREATE should be specified when creating new route [ 835.032583][T19503] netlink: 6955 bytes leftover after parsing attributes in process `syz.0.3601'. [ 835.225653][T19530] IPv6: Can't replace route, no match found [ 835.620352][T19542] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3609'. [ 836.341890][ T49] Bluetooth: hci4: command 0x0406 tx timeout [ 838.267646][T19571] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.3613'. [ 838.301594][T19573] netlink: 'syz.1.3616': attribute type 3 has an invalid length. [ 838.347028][T19573] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.3616'. [ 838.468573][ T49] Bluetooth: hci3: Malformed Event: 0x02 [ 838.830409][T19579] netlink: 'syz.0.3615': attribute type 2 has an invalid length. [ 838.896638][T19579] netlink: 'syz.0.3615': attribute type 1 has an invalid length. [ 838.973615][T19579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 839.047773][T19592] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3623'. [ 839.058215][T19596] IPv6: NLM_F_CREATE should be specified when creating new route [ 839.149441][T19597] netlink: 'syz.2.3622': attribute type 7 has an invalid length. [ 839.180023][T19592] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3623'. [ 839.205538][T19598] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3623'. [ 839.233343][T19592] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3623'. [ 839.406498][T19607] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3626'. [ 839.419965][T19607] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3626'. [ 839.429651][T19607] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3626'. [ 839.452553][T19607] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3626'. [ 842.175257][T19639] netlink: 'syz.2.3631': attribute type 21 has an invalid length. [ 842.289474][T19639] netlink: 'syz.2.3631': attribute type 4 has an invalid length. [ 842.305248][T19639] netlink: 'syz.2.3631': attribute type 5 has an invalid length. [ 843.047845][T19657] netlink: 'syz.1.3635': attribute type 10 has an invalid length. [ 843.077937][T19657] netlink: 'syz.1.3635': attribute type 19 has an invalid length. [ 843.384660][T19669] netlink: 'syz.4.3638': attribute type 2 has an invalid length. [ 843.474220][T19673] netlink: 'syz.2.3640': attribute type 29 has an invalid length. [ 843.512217][T19669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 843.661535][T19688] IPv6: NLM_F_CREATE should be specified when creating new route [ 844.110465][T19694] validate_nla: 5 callbacks suppressed [ 844.110505][T19694] netlink: 'syz.2.3643': attribute type 2 has an invalid length. [ 845.265685][T19710] device syzkaller0 entered promiscuous mode [ 845.811136][T19736] netlink: 'syz.1.3654': attribute type 29 has an invalid length. [ 846.786470][T19752] netlink: 'syz.3.3655': attribute type 3 has an invalid length. [ 846.822037][T19752] __nla_validate_parse: 8 callbacks suppressed [ 846.822056][T19752] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3655'. [ 849.433852][T19718] netlink: 'syz.4.3650': attribute type 15 has an invalid length. [ 849.442085][T19718] netlink: 'syz.4.3650': attribute type 7 has an invalid length. [ 849.461445][T19736] netlink: 'syz.1.3654': attribute type 29 has an invalid length. [ 849.474922][T19738] netlink: 'syz.1.3654': attribute type 21 has an invalid length. [ 849.513940][T19741] netlink: 5427 bytes leftover after parsing attributes in process `syz.1.3654'. [ 849.526221][T19741] netlink: 52477 bytes leftover after parsing attributes in process `syz.1.3654'. [ 849.535878][T19741] netlink: 71676 bytes leftover after parsing attributes in process `syz.1.3654'. [ 849.956331][T19758] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 849.983990][T19768] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.3660'. [ 850.114650][T19758] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 850.171995][T19767] netlink: 'syz.3.3660': attribute type 3 has an invalid length. [ 850.179820][T19767] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3660'. [ 850.736684][T19786] netlink: 'syz.1.3659': attribute type 4 has an invalid length. [ 850.762486][T19786] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3659'. [ 851.132715][T19802] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.3671'. [ 851.229803][T19800] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 851.487285][T19811] netlink: 'syz.4.3676': attribute type 10 has an invalid length. [ 852.211644][T19814] can: request_module (can-proto-0) failed. [ 854.429785][T19811] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 854.458566][T19823] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3678'. [ 854.481975][T19823] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3678'. [ 854.539649][T19828] netlink: 'syz.1.3680': attribute type 3 has an invalid length. [ 854.572675][T19828] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3680'. [ 854.684244][ T49] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18 [ 854.778798][T19828] netlink: 'syz.1.3680': attribute type 3 has an invalid length. [ 854.831728][T19849] netlink: 'syz.2.3683': attribute type 29 has an invalid length. [ 854.847742][T19828] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3680'. [ 854.878883][T19849] netlink: 'syz.2.3683': attribute type 29 has an invalid length. [ 854.896961][T16419] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18 [ 854.904796][T16419] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 854.914530][T19850] netlink: 'syz.2.3683': attribute type 29 has an invalid length. [ 854.958907][T19828] netlink: 'syz.1.3680': attribute type 3 has an invalid length. [ 855.021081][T19828] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3680'. [ 855.052166][T19849] netlink: 'syz.2.3683': attribute type 29 has an invalid length. [ 855.074044][T19828] netlink: 'syz.1.3680': attribute type 3 has an invalid length. [ 855.101464][T19828] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3680'. [ 855.186032][T19828] netlink: 'syz.1.3680': attribute type 3 has an invalid length. [ 855.208883][T19828] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3680'. [ 855.250293][T19828] netlink: 'syz.1.3680': attribute type 3 has an invalid length. [ 855.303299][T19828] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3680'. [ 855.316257][T19828] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3680'. [ 855.855289][T19879] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.3692'. [ 856.824334][T16419] Bluetooth: hci5: command 0x0406 tx timeout [ 859.687948][T20004] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 860.618005][T20022] device syzkaller0 entered promiscuous mode [ 863.755036][T20046] validate_nla: 9 callbacks suppressed [ 863.755056][T20046] netlink: 'syz.2.3733': attribute type 2 has an invalid length. [ 863.824100][T20046] __nla_validate_parse: 7 callbacks suppressed [ 863.824119][T20046] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.3733'. [ 866.765165][T20042] bridge0: port 3(team0) entered blocking state [ 866.771656][T20042] bridge0: port 3(team0) entered forwarding state [ 866.778327][T20042] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.785547][T20042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 866.793084][T20042] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.800275][T20042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 866.808362][T20042] device bridge0 entered promiscuous mode [ 867.100336][T20068] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3739'. [ 867.163184][T20071] netlink: 'syz.4.3737': attribute type 10 has an invalid length. [ 867.268594][T20071] team0: Device wg1 is of different type [ 867.306028][T20063] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.3737'. [ 867.429963][T20077] netlink: 'syz.4.3737': attribute type 46 has an invalid length. [ 867.464280][T20079] netlink: 'syz.1.3742': attribute type 21 has an invalid length. [ 867.483505][T20079] netlink: 'syz.1.3742': attribute type 1 has an invalid length. [ 867.492780][T20079] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3742'. [ 867.766482][T20096] netlink: 'syz.1.3746': attribute type 2 has an invalid length. [ 867.852833][T20098] device hsr0 entered promiscuous mode [ 867.870162][T20096] device 0 entered promiscuous mode [ 868.006747][T20104] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3750'. [ 868.632570][T20127] netlink: 26 bytes leftover after parsing attributes in process `syz.3.3755'. [ 868.879516][T20130] netlink: 'syz.0.3756': attribute type 3 has an invalid length. [ 868.961517][T20130] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3756'. [ 870.106492][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.117637][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.856600][T20197] netlink: 'syz.0.3775': attribute type 22 has an invalid length. [ 872.185962][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 873.109507][T20236] netlink: 'syz.1.3782': attribute type 1 has an invalid length. [ 873.159721][T20236] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3782'. [ 875.570556][T20210] netlink: 'syz.2.3777': attribute type 30 has an invalid length. [ 875.583076][T20239] netlink: 'syz.0.3784': attribute type 6 has an invalid length. [ 875.594893][T20243] netlink: 'syz.0.3784': attribute type 6 has an invalid length. [ 876.457263][T20266] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3790'. [ 876.883574][T20283] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.3795'. [ 877.090201][T20292] can: request_module (can-proto-3) failed. [ 878.032401][T20316] netlink: 'syz.0.3803': attribute type 21 has an invalid length. [ 878.060745][T20316] netlink: 'syz.0.3803': attribute type 6 has an invalid length. [ 878.081325][T20316] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3803'. [ 878.255911][T20320] netlink: 'syz.1.3805': attribute type 10 has an invalid length. [ 880.887596][T20333] netlink: 'syz.3.3807': attribute type 2 has an invalid length. [ 880.911604][T20333] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3807'. [ 881.094376][T20340] netlink: 'syz.0.3810': attribute type 10 has an invalid length. [ 881.617589][T20358] device syzkaller0 entered promiscuous mode [ 881.689124][T20360] netlink: 'syz.0.3816': attribute type 29 has an invalid length. [ 883.771155][T20360] netlink: 'syz.0.3816': attribute type 29 has an invalid length. [ 884.192654][T20387] netlink: 69136 bytes leftover after parsing attributes in process `syz.1.3823'. [ 884.212785][T20385] netlink: 'syz.0.3824': attribute type 16 has an invalid length. [ 884.246479][T20385] netlink: 'syz.0.3824': attribute type 4 has an invalid length. [ 884.258522][T20385] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3824'. [ 884.261830][T20387] netlink: zone id is out of range [ 884.327917][T20387] netlink: zone id is out of range [ 884.382515][T20387] netlink: zone id is out of range [ 884.387812][T20387] netlink: zone id is out of range [ 884.471329][T20387] netlink: zone id is out of range [ 884.476646][T20387] netlink: zone id is out of range [ 884.512284][T20387] netlink: zone id is out of range [ 884.551531][T20387] netlink: zone id is out of range [ 884.556740][T20387] netlink: zone id is out of range [ 884.580092][T20387] netlink: zone id is out of range [ 885.039686][T20413] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.3830'. [ 885.208920][T20413] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3830'. [ 885.916138][T20440] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.3835'. [ 888.235518][T20450] netlink: 'syz.3.3840': attribute type 10 has an invalid length. [ 888.450164][T20450] team0: Device wg1 is of different type [ 888.629509][T20458] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3838'. [ 888.640682][T20458] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 889.263116][T20489] netlink: 'syz.2.3850': attribute type 3 has an invalid length. [ 889.336272][T20489] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3850'. [ 889.620676][T20507] netlink: 'syz.3.3852': attribute type 17 has an invalid length. [ 889.634097][T20510] netlink: 'syz.2.3853': attribute type 11 has an invalid length. [ 889.643224][T20507] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3852'. [ 889.663419][T20510] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3853'. [ 889.723183][T20510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 889.925759][T20503] device syzkaller0 entered promiscuous mode [ 894.740498][T20571] netlink: 'syz.2.3868': attribute type 1 has an invalid length. [ 894.821303][T20571] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.3868'. [ 894.844831][T20572] netlink: 'syz.2.3868': attribute type 7 has an invalid length. [ 897.299801][T20591] netlink: 'syz.2.3875': attribute type 3 has an invalid length. [ 897.321675][T20591] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3875'. [ 897.369722][T20592] netlink: 'syz.3.3874': attribute type 4 has an invalid length. [ 897.378378][T20592] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3874'. [ 897.666518][T20607] netlink: 'syz.2.3878': attribute type 10 has an invalid length. [ 898.354197][T20612] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.735427][T20628] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3884'. [ 899.105063][T20656] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.3889'. [ 899.209329][T20659] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.3890'. [ 899.469442][T20664] netlink: 'syz.3.3892': attribute type 29 has an invalid length. [ 899.561085][T20664] netlink: 'syz.3.3892': attribute type 29 has an invalid length. [ 899.602018][T20668] netlink: 'syz.3.3892': attribute type 29 has an invalid length. [ 899.670762][T20664] netlink: 'syz.3.3892': attribute type 29 has an invalid length. [ 899.721360][T20668] netlink: 'syz.3.3892': attribute type 29 has an invalid length. [ 900.823610][T20703] netlink: 'syz.4.3899': attribute type 3 has an invalid length. [ 900.942496][T20703] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3899'. [ 904.740942][T20717] netlink: 'syz.0.3902': attribute type 1 has an invalid length. [ 904.749803][T20717] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.3902'. [ 905.892732][T20701] netlink: 'syz.4.3899': attribute type 21 has an invalid length. [ 905.900752][T20701] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3899'. [ 905.910008][T20701] netlink: 'syz.4.3899': attribute type 4 has an invalid length. [ 905.918461][T20701] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3899'. [ 906.089560][T20724] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 906.160569][T20724] pim6reg0: linktype set to 780 [ 906.316881][T20731] netlink: 'syz.0.3907': attribute type 3 has an invalid length. [ 906.336845][T20731] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3907'. [ 907.154589][T20750] netlink: 'syz.3.3913': attribute type 3 has an invalid length. [ 907.228935][T20750] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3913'. [ 907.726855][T20765] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3916'. [ 907.744573][T20768] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3916'. [ 907.925200][T20762] netlink: 'syz.4.3915': attribute type 10 has an invalid length. [ 907.975794][T20762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 907.984923][T20774] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.3917'. [ 908.027221][T20762] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 908.615304][T20794] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.3922'. [ 908.682820][T20794] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 908.982424][T20802] device syzkaller0 entered promiscuous mode [ 914.136795][T20866] netlink: 'syz.3.3940': attribute type 21 has an invalid length. [ 914.160122][T20866] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.3940'. [ 914.210757][T20867] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3941'. [ 919.125374][T20912] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 921.952440][T20949] netlink: 15998 bytes leftover after parsing attributes in process `syz.2.3960'. [ 922.015240][T20949] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3960'. [ 922.691827][T20970] netlink: 'syz.4.3966': attribute type 21 has an invalid length. [ 922.733483][T20970] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3966'. [ 924.996600][T20990] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3970'. [ 925.012365][T20990] net_ratelimit: 3544 callbacks suppressed [ 925.012382][T20990] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 925.054499][T20992] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.3971'. [ 925.090899][T20996] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.3971'. [ 925.374504][T21002] netlink: 'syz.2.3973': attribute type 10 has an invalid length. [ 925.490256][T21007] netlink: 'syz.1.3976': attribute type 39 has an invalid length. [ 925.564308][T21010] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3976'. [ 927.630390][T21058] netlink: 'syz.2.3989': attribute type 29 has an invalid length. [ 927.665119][T21058] netlink: 'syz.2.3989': attribute type 29 has an invalid length. [ 927.723752][T21056] netlink: 'syz.2.3989': attribute type 29 has an invalid length. [ 928.519025][T21067] netlink: 'syz.3.3993': attribute type 1 has an invalid length. [ 928.537349][T21067] netlink: 'syz.3.3993': attribute type 4 has an invalid length. [ 928.578779][T21067] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3993'. [ 929.315551][T21087] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.3999'. [ 929.890176][T21101] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4001'. [ 930.321107][T21114] netlink: 'syz.4.4007': attribute type 9 has an invalid length. [ 930.370389][T21114] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.4007'. [ 931.543952][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.550433][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.789374][T21137] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.4012'. [ 932.841284][T21138] netlink: 'syz.1.4013': attribute type 3 has an invalid length. [ 932.850191][T21138] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4013'. [ 932.980995][T21133] netlink: 'syz.4.4011': attribute type 5 has an invalid length. [ 933.439717][T21156] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.4017'. [ 933.459689][T21156] netlink: zone id is out of range [ 933.472974][T21156] netlink: zone id is out of range [ 933.485314][T21156] netlink: zone id is out of range [ 933.508684][T21156] netlink: get zone limit has 8 unknown bytes [ 933.631405][T21172] netlink: 'syz.3.4019': attribute type 19 has an invalid length. [ 933.812397][T21177] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4022'. [ 934.316691][T21193] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4027'. [ 934.343681][T21181] device syzkaller0 entered promiscuous mode [ 934.422280][T21193] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4027'. [ 934.452007][T21196] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4027'. [ 934.461578][T21194] netlink: 'syz.4.4025': attribute type 10 has an invalid length. [ 939.316594][T21226] netlink: 'syz.3.4034': attribute type 10 has an invalid length. [ 939.343633][T21225] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4036'. [ 939.361341][T21226] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4034'. [ 939.443852][T21226] netlink: 15478 bytes leftover after parsing attributes in process `syz.3.4034'. [ 939.582942][T21227] netlink: 'syz.3.4034': attribute type 10 has an invalid length. [ 940.796526][T21253] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4041'. [ 941.130548][T21257] netlink: 3752 bytes leftover after parsing attributes in process `syz.3.4042'. [ 941.429403][T21261] netlink: 'syz.1.4044': attribute type 7 has an invalid length. [ 941.469618][T21274] netlink: 'syz.3.4047': attribute type 10 has an invalid length. [ 941.949249][T21287] netlink: 'syz.4.4049': attribute type 29 has an invalid length. [ 942.021321][T21287] netlink: 'syz.4.4049': attribute type 29 has an invalid length. [ 942.820042][T21318] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4056'. [ 942.851070][T21318] netlink: 'syz.2.4056': attribute type 21 has an invalid length. [ 942.867777][T21318] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4056'. [ 942.937251][T21322] sctp: [Deprecated]: syz.4.4055 (pid 21322) Use of struct sctp_assoc_value in delayed_ack socket option. [ 942.937251][T21322] Use struct sctp_sack_info instead [ 943.092978][T21321] netlink: 'syz.1.4057': attribute type 2 has an invalid length. [ 943.115760][T21321] netlink: 'syz.1.4057': attribute type 3 has an invalid length. [ 943.130000][T21321] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4057'. [ 943.148801][T21323] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.4057'. [ 943.246905][T21339] netlink: 'syz.0.4058': attribute type 19 has an invalid length. [ 943.663031][T21351] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4064'. [ 944.525276][T21369] validate_nla: 1 callbacks suppressed [ 944.525296][T21369] netlink: 'syz.1.4068': attribute type 29 has an invalid length. [ 950.633673][T21369] netlink: 'syz.1.4068': attribute type 29 has an invalid length. [ 950.667304][T21393] netlink: 'syz.2.4074': attribute type 10 has an invalid length. [ 950.739813][T21393] team0 (unregistering): Port device team_slave_0 removed [ 950.783955][T21393] team0 (unregistering): Port device team_slave_1 removed [ 950.827473][T21393] team0 (unregistering): Port device geneve1 removed [ 950.854227][T21401] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4076'. [ 950.863956][T21395] netlink: 'syz.3.4075': attribute type 41 has an invalid length. [ 951.293846][T21425] netlink: 'syz.0.4091': attribute type 27 has an invalid length. [ 951.599376][T21425] bond0: (slave bond_slave_0): Releasing backup interface [ 951.723393][T21431] netlink: 'syz.4.4083': attribute type 21 has an invalid length. [ 953.352240][T21475] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4093'. [ 953.616072][T21475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 953.671881][T21475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 953.722183][T21475] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 953.775929][T21475] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 953.857532][T21475] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 953.883143][T21475] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 953.905157][T21475] bond0 (unregistering): Released all slaves [ 953.915895][T21484] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4093'. [ 954.086462][ T49] Bluetooth: hci5: ISO packet for unknown connection handle 2622 [ 954.432271][T21517] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.4103'. [ 954.511906][T21519] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4102'. [ 954.719354][T21532] netlink: 'syz.4.4106': attribute type 16 has an invalid length. [ 954.731932][T21532] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4106'. [ 955.089471][T21539] netlink: 186044 bytes leftover after parsing attributes in process `syz.2.4107'. [ 955.102769][T21539] netlink: zone id is out of range [ 955.108206][T21539] netlink: zone id is out of range [ 955.114671][T21539] netlink: zone id is out of range [ 955.120149][T21539] netlink: zone id is out of range [ 955.127950][T21539] netlink: zone id is out of range [ 955.139867][T21539] netlink: zone id is out of range [ 955.149336][T21539] netlink: zone id is out of range [ 955.155771][T21539] netlink: zone id is out of range [ 955.161114][T21539] netlink: zone id is out of range [ 955.199260][T21539] netlink: zone id is out of range [ 955.568319][T21541] netlink: 'syz.0.4108': attribute type 2 has an invalid length. [ 956.134691][T21567] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.4116'. [ 957.530383][T21594] netlink: 'syz.1.4122': attribute type 21 has an invalid length. [ 957.550748][T21594] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.4122'. [ 957.682360][T21598] __sock_release: fasync list not empty! [ 957.807133][T21608] netlink: 'syz.1.4125': attribute type 2 has an invalid length. [ 957.835804][T21608] netlink: 'syz.1.4125': attribute type 1 has an invalid length. [ 957.858897][T21608] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4125'. [ 957.933801][T21614] netlink: 'syz.4.4126': attribute type 21 has an invalid length. [ 958.076309][T21614] netlink: 'syz.4.4126': attribute type 21 has an invalid length. [ 958.256757][T21632] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.4128'. [ 958.572399][T21637] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4129'. [ 962.080034][T21670] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.4139'. [ 962.422732][T21672] netlink: 'syz.0.4140': attribute type 2 has an invalid length. [ 962.430851][T21672] netlink: 'syz.0.4140': attribute type 8 has an invalid length. [ 962.477697][T21672] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4140'. [ 962.511067][T21673] delete_channel: no stack [ 962.546059][T21685] netlink: 'syz.0.4140': attribute type 2 has an invalid length. [ 962.625165][T21685] netlink: 'syz.0.4140': attribute type 8 has an invalid length. [ 962.706692][T21685] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4140'. [ 964.029170][T21713] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.4152'. [ 964.627820][T21724] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.4155'. [ 964.706029][T21727] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.4155'. [ 964.843369][T21737] syzkaller0: create flow: hash 607072941 index 1 [ 964.918588][T13569] syzkaller0: tun_net_xmit 76 [ 964.937639][T13569] syzkaller0: tun_net_xmit 48 [ 964.964375][ T4360] syzkaller0: tun_net_xmit 76 [ 965.098950][T13569] syzkaller0: tun_net_xmit 76 [ 965.158011][T13569] syzkaller0: tun_net_xmit 76 [ 965.172955][T13570] syzkaller0: tun_net_xmit 76 [ 965.204630][T21732] syzkaller0: delete flow: hash 607072941 index 1 [ 968.300146][T21768] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.4167'. [ 969.541083][T21804] netlink: 'syz.3.4178': attribute type 2 has an invalid length. [ 969.570439][T21804] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4178'. [ 970.552979][T21823] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.4181'. [ 970.834968][T21833] netlink: 'syz.2.4183': attribute type 3 has an invalid length. [ 970.872037][T21833] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4183'. [ 970.894420][T21833] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4183'. [ 971.107460][T21842] netlink: 'syz.0.4187': attribute type 46 has an invalid length. [ 974.037762][T21863] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4191'. [ 974.065130][T21865] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.4192'. [ 974.397479][T21882] netlink: 'syz.0.4195': attribute type 22 has an invalid length. [ 974.436660][T21882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4195'. [ 974.510576][T21883] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4195'. [ 974.724875][T21890] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.4201'. [ 974.751786][T21890] net_ratelimit: 108 callbacks suppressed [ 974.751851][T21890] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 974.827335][T21888] netlink: 763 bytes leftover after parsing attributes in process `syz.2.4200'. [ 975.027773][T21896] netlink: 'syz.0.4204': attribute type 1 has an invalid length. [ 975.056241][T21896] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4204'. [ 975.212620][T21903] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.4205'. [ 976.866343][T21932] netlink: 'syz.2.4214': attribute type 10 has an invalid length. [ 977.946269][T21942] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.4216'. [ 978.396605][T21953] netlink: 'syz.2.4218': attribute type 29 has an invalid length. [ 978.458189][T21953] netlink: 'syz.2.4218': attribute type 29 has an invalid length. [ 978.515543][T21959] netlink: 'syz.2.4218': attribute type 29 has an invalid length. [ 978.568488][T21961] netlink: 'syz.2.4218': attribute type 29 has an invalid length. [ 979.211136][T21973] netlink: 'syz.3.4224': attribute type 6 has an invalid length. [ 979.237949][T21973] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4224'. [ 980.353912][T21990] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4226'. [ 982.332378][T21994] netlink: 'syz.1.4228': attribute type 21 has an invalid length. [ 982.383116][T21994] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.4228'. [ 982.702046][T22003] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4230'. [ 982.753414][T22009] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.4231'. [ 982.778239][T22003] bond0: (slave bond_slave_0): Releasing backup interface [ 982.841876][T22018] netlink: 'syz.4.4233': attribute type 2 has an invalid length. [ 982.867793][T22009] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 982.887130][T22003] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 982.961564][T22004] netlink: 'syz.3.4230': attribute type 7 has an invalid length. [ 983.936497][T22051] netlink: 'syz.4.4243': attribute type 4 has an invalid length. [ 983.968079][T22051] netlink: 55023 bytes leftover after parsing attributes in process `syz.4.4243'. [ 984.188905][T22065] netlink: 'syz.3.4245': attribute type 16 has an invalid length. [ 984.210766][T22065] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4245'. [ 985.190190][T22078] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4249'. [ 985.432205][T22078] bond0: (slave bond_slave_0): Releasing backup interface [ 985.501020][T22078] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 985.641235][T22086] netlink: 'syz.1.4249': attribute type 7 has an invalid length. [ 986.084131][T22117] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.4258'. [ 986.612602][T22122] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4260'. [ 986.771053][T22133] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4263'. [ 986.819215][T22133] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4263'. [ 986.941693][T22134] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4263'. [ 986.964361][T22148] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.4266'. [ 987.053118][T22148] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 987.060930][T22148] CPU: 1 PID: 22148 Comm: syz.1.4266 Not tainted syzkaller #0 [ 987.068435][T22148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 987.078537][T22148] Call Trace: [ 987.081854][T22148] [ 987.084825][T22148] dump_stack_lvl+0x188/0x24e [ 987.089561][T22148] ? show_regs_print_info+0x12/0x12 [ 987.094818][T22148] ? load_image+0x410/0x410 [ 987.099393][T22148] sysfs_warn_dup+0x8a/0xa0 [ 987.103956][T22148] sysfs_do_create_link_sd+0xc0/0x110 [ 987.109388][T22148] device_add+0x83b/0x1050 [ 987.113866][T22148] wiphy_register+0x1d8b/0x2aa0 [ 987.118812][T22148] ? cfg80211_event_work+0x40/0x40 [ 987.123985][T22148] ? minstrel_ht_alloc+0x894/0xa20 [ 987.129168][T22148] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 987.135314][T22148] ieee80211_register_hw+0x2d48/0x39f0 [ 987.140847][T22148] ? ieee80211_register_hw+0xf71/0x39f0 [ 987.146455][T22148] ? ieee80211_register_hw+0xe71/0x39f0 [ 987.152072][T22148] ? ieee80211_tasklet_handler+0x20/0x20 [ 987.157776][T22148] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 987.163739][T22148] ? __debug_object_init+0xed/0x440 [ 987.168970][T22148] ? memset+0x1e/0x40 [ 987.172997][T22148] ? __hrtimer_init+0x189/0x270 [ 987.177879][T22148] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 987.183644][T22148] ? memcpy+0x3c/0x60 [ 987.187662][T22148] hwsim_new_radio_nl+0xab7/0xc90 [ 987.192768][T22148] genl_family_rcv_msg_doit+0x22f/0x350 [ 987.198381][T22148] ? end_current_label_crit_section+0x170/0x170 [ 987.204672][T22148] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 987.210609][T22148] ? bpf_lsm_capable+0x5/0x10 [ 987.215315][T22148] ? security_capable+0x85/0xb0 [ 987.220207][T22148] genl_rcv_msg+0x601/0x790 [ 987.224756][T22148] ? genl_bind+0x360/0x360 [ 987.229200][T22148] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 987.235573][T22148] netlink_rcv_skb+0x1ef/0x440 [ 987.240384][T22148] ? genl_bind+0x360/0x360 [ 987.244828][T22148] ? netlink_ack+0x1160/0x1160 [ 987.249653][T22148] ? down_read+0x1a8/0x2d0 [ 987.254107][T22148] genl_rcv+0x24/0x40 [ 987.258117][T22148] netlink_unicast+0x7ad/0x920 [ 987.262928][T22148] netlink_sendmsg+0x8ad/0xbd0 [ 987.267732][T22148] ? netlink_getsockopt+0x550/0x550 [ 987.272957][T22148] ? apparmor_socket_sendmsg+0x8a/0x330 [ 987.278538][T22148] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 987.283849][T22148] ? security_socket_sendmsg+0x7c/0xa0 [ 987.289341][T22148] ? netlink_getsockopt+0x550/0x550 [ 987.294575][T22148] ____sys_sendmsg+0x5ed/0x9a0 [ 987.299385][T22148] ? __sys_sendmsg_sock+0x30/0x30 [ 987.304469][T22148] ? __import_iovec+0x306/0x510 [ 987.309398][T22148] ? import_iovec+0x6f/0xa0 [ 987.313941][T22148] ___sys_sendmsg+0x2a2/0x360 [ 987.318667][T22148] ? __sys_sendmsg+0x2a0/0x2a0 [ 987.323514][T22148] __se_sys_sendmsg+0x1c3/0x2b0 [ 987.328404][T22148] ? __x64_sys_sendmsg+0x80/0x80 [ 987.333395][T22148] ? lockdep_hardirqs_on+0x94/0x140 [ 987.338629][T22148] do_syscall_64+0x4c/0xa0 [ 987.343085][T22148] ? clear_bhb_loop+0x60/0xb0 [ 987.347794][T22148] ? clear_bhb_loop+0x60/0xb0 [ 987.352504][T22148] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 987.358432][T22148] RIP: 0033:0x7f813b19e159 [ 987.362869][T22148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 987.382507][T22148] RSP: 002b:00007f81393f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 987.390948][T22148] RAX: ffffffffffffffda RBX: 00007f813b426270 RCX: 00007f813b19e159 [ 987.398950][T22148] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 987.406947][T22148] RBP: 00007f813b235024 R08: 0000000000000000 R09: 0000000000000000 [ 987.414952][T22148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 987.422954][T22148] R13: 00007f813b426308 R14: 00007f813b426270 R15: 00007ffd015aed28 [ 987.430990][T22148] [ 988.030988][T22167] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4269'. [ 988.191664][T22171] netlink: 'syz.4.4269': attribute type 7 has an invalid length. [ 988.309436][T22180] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.4272'. [ 989.048875][T22214] device syzkaller0 entered promiscuous mode [ 989.131649][T22216] syzkaller0: mtu less than device minimum [ 989.156054][ T62] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 990.396417][T22233] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.4283'. [ 990.875418][T22246] netlink: 'syz.1.4287': attribute type 21 has an invalid length. [ 990.955348][T22244] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4287'. [ 990.999637][T22252] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4286'. [ 991.100584][T22253] netlink: 'syz.0.4286': attribute type 7 has an invalid length. [ 991.820952][T22264] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.4289'. [ 991.902616][T22265] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4289'. [ 992.009260][T22265] team0: Port device team_slave_0 removed [ 992.125095][T22265] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 992.436678][T22274] netlink: 'syz.4.4294': attribute type 20 has an invalid length. [ 992.682071][T22285] netlink: 61775 bytes leftover after parsing attributes in process `syz.3.4295'. [ 992.986431][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.992909][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.932543][T22311] netlink: 3752 bytes leftover after parsing attributes in process `syz.4.4304'. [ 994.427725][T22327] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4309'. [ 994.740187][T22334] netlink: 61775 bytes leftover after parsing attributes in process `syz.3.4311'. [ 995.314658][T22351] netlink: 'syz.3.4312': attribute type 2 has an invalid length. [ 995.381102][T22351] netlink: 'syz.3.4312': attribute type 8 has an invalid length. [ 995.459413][T22351] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4312'. [ 996.904613][T22367] netlink: 'syz.0.4317': attribute type 41 has an invalid length. [ 997.221598][T22376] netlink: 'syz.3.4321': attribute type 2 has an invalid length. [ 997.229437][T22376] netlink: 'syz.3.4321': attribute type 1 has an invalid length. [ 997.267457][T22376] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.4321'. [ 997.550985][T22382] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.4323'. [ 997.623271][T22380] netlink: 61775 bytes leftover after parsing attributes in process `syz.2.4322'. [ 999.658757][T22425] netlink: 'syz.4.4333': attribute type 3 has an invalid length. [ 999.670476][T22425] netlink: 'syz.4.4333': attribute type 1 has an invalid length. [ 999.691374][T22425] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4333'. [ 1000.154214][T22437] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.4337'. [ 1000.300781][T22440] netlink: 'syz.3.4338': attribute type 41 has an invalid length. [ 1000.616122][T22442] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4339'. [ 1000.730921][T22454] netlink: 'syz.1.4340': attribute type 29 has an invalid length. [ 1000.827515][T22454] netlink: 'syz.1.4340': attribute type 29 has an invalid length. [ 1001.002052][T22458] device bridge_slave_1 left promiscuous mode [ 1001.016381][T22458] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.039984][T22458] device bridge_slave_0 left promiscuous mode [ 1001.062088][T22458] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.360120][T22455] netlink: 'syz.1.4340': attribute type 29 has an invalid length. [ 1004.665235][T22504] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.4349'. [ 1005.645120][T22532] netlink: 'syz.0.4356': attribute type 10 has an invalid length. [ 1005.677786][T22532] team0: Device ipvlan1 failed to register rx_handler [ 1005.729939][T22533] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4355'. [ 1005.744625][T22535] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4357'. [ 1005.833648][T22540] netlink: 'syz.2.4358': attribute type 21 has an invalid length. [ 1006.174321][T22543] netlink: 'syz.0.4356': attribute type 2 has an invalid length. [ 1006.196294][T22543] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4356'. [ 1006.313674][T22550] netlink: 'syz.4.4362': attribute type 10 has an invalid length. [ 1006.379583][T22555] netlink: 'syz.4.4362': attribute type 21 has an invalid length. [ 1006.422712][T22555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4362'. [ 1006.493858][T22551] netlink: 'syz.4.4362': attribute type 21 has an invalid length. [ 1006.523351][T22560] netlink: 'syz.3.4365': attribute type 1 has an invalid length. [ 1006.548968][T22560] netlink: 'syz.3.4365': attribute type 3 has an invalid length. [ 1006.564138][T22560] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4365'. [ 1006.576854][T22551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4362'. [ 1006.660601][T22561] netlink: 146340 bytes leftover after parsing attributes in process `syz.2.4363'. [ 1006.679606][T22561] openvswitch: netlink: Key type 386 is out of range max 32 [ 1006.712073][T22565] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.4364'. [ 1007.256127][T22580] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.4369'. [ 1007.308304][T22580] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1007.715661][T22593] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.4370'. [ 1007.832173][T22594] netlink: 'syz.0.4374': attribute type 5 has an invalid length. [ 1008.473870][T22606] netlink: 'syz.1.4378': attribute type 21 has an invalid length. [ 1010.166310][T22658] netlink: 'syz.1.4388': attribute type 3 has an invalid length. [ 1015.566501][T22698] __nla_validate_parse: 6 callbacks suppressed [ 1015.566519][T22698] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.4392'. [ 1015.583902][T22702] validate_nla: 2 callbacks suppressed [ 1015.583917][T22702] netlink: 'syz.4.4395': attribute type 17 has an invalid length. [ 1015.611235][T22702] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4395'. [ 1015.624764][T22702] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1015.648132][T22702] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1016.373526][T22723] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4401'. [ 1016.696743][ T49] Bluetooth: hci3: Malformed HCI Event [ 1017.250810][T22747] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.4408'. [ 1017.558902][T22754] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4410'. [ 1017.816426][T22769] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.4413'. [ 1018.218559][T22778] netlink: 15866 bytes leftover after parsing attributes in process `syz.4.4415'. [ 1018.901896][T22804] netlink: 'syz.3.4422': attribute type 21 has an invalid length. [ 1018.920410][T22804] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4422'. [ 1019.067220][T22810] netlink: 'syz.1.4424': attribute type 2 has an invalid length. [ 1019.096709][T22810] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4424'. [ 1020.040310][T22813] netlink: 'syz.1.4424': attribute type 21 has an invalid length. [ 1020.124132][T22813] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4424'. [ 1022.962644][T22841] __nla_validate_parse: 1 callbacks suppressed [ 1022.962663][T22841] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4429'. [ 1023.033404][T22841] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1023.186923][T22848] netlink: 'syz.1.4430': attribute type 5 has an invalid length. [ 1023.231750][T22855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4432'. [ 1024.601922][T22885] netlink: 'syz.1.4439': attribute type 4 has an invalid length. [ 1024.627266][T22883] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.4438'. [ 1024.646600][T22885] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4439'. [ 1024.747009][T22885] netlink: 'syz.1.4439': attribute type 4 has an invalid length. [ 1024.768853][T22885] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4439'. [ 1025.393329][T22899] device lo entered promiscuous mode [ 1025.453259][T22899] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1025.860540][T16419] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1025.881249][T16419] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1025.890433][T16419] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1025.898731][T16419] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1025.911117][T16419] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1025.923497][T16419] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1026.433156][T22911] chnl_net:caif_netlink_parms(): no params data found [ 1026.673989][T22911] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.691416][T22911] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.747914][T22911] device bridge_slave_0 entered promiscuous mode [ 1026.960962][T22911] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.973641][T22911] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.984121][T22911] device bridge_slave_1 entered promiscuous mode [ 1027.070981][T22938] device wlan1 entered promiscuous mode [ 1027.184409][T22911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1027.287958][T22911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1027.321797][T22943] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.4451'. [ 1027.477669][ T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.577441][T22942] netlink: 'syz.3.4449': attribute type 3 has an invalid length. [ 1027.605533][T22942] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.4449'. [ 1027.800049][ T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.859763][T22911] team0: Port device team_slave_0 added [ 1027.872053][T22911] team0: Port device team_slave_1 added [ 1027.920685][ T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.021657][T16419] Bluetooth: hci2: command 0x0409 tx timeout [ 1028.033507][ T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.119052][T22911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1028.134970][T22911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1028.191953][T22911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1028.207400][T22911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1028.215276][T22911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1028.247419][T22911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1028.545423][T22911] device hsr_slave_0 entered promiscuous mode [ 1028.591551][T22911] device hsr_slave_1 entered promiscuous mode [ 1028.614740][T22911] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1028.624960][T22911] Cannot create hsr debugfs directory [ 1028.974412][ T62] device 0 left promiscuous mode [ 1029.056380][ T62] device 0 left promiscuous mode [ 1029.125746][T22975] tipc: Started in network mode [ 1029.143855][T22975] tipc: Node identity 9215a268, cluster identity 4711 [ 1029.177723][T22975] tipc: Node number set to 2450891368 [ 1029.220426][ T62] device 1 left promiscuous mode [ 1030.103072][T16419] Bluetooth: hci2: command 0x041b tx timeout [ 1030.675422][T22994] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.4461'. [ 1032.181669][T16419] Bluetooth: hci2: command 0x040f tx timeout [ 1032.451393][T23030] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4466'. [ 1032.497817][T23035] netlink: 'syz.3.4469': attribute type 10 has an invalid length. [ 1032.534547][T23035] team0: Device wg1 is of different type [ 1032.638492][T23033] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1032.976155][T23063] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.4472'. [ 1033.008706][T22911] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1033.229852][T22911] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1033.264181][T23069] netlink: 'syz.3.4474': attribute type 21 has an invalid length. [ 1033.281463][T23069] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4474'. [ 1033.378784][T22911] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1033.411081][T22911] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1033.734153][T22911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1033.939725][ T5389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1033.962141][ T5389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1033.993985][T22911] 8021q: adding VLAN 0 to HW filter on device team0 [ 1034.197266][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1034.214626][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1034.238388][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.245670][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1034.261688][T16419] Bluetooth: hci2: command 0x0419 tx timeout [ 1034.360754][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1034.379127][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1034.417149][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1034.445588][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.452852][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1034.479796][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1034.549926][ T7966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1034.582493][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1034.605467][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1034.624938][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1034.633688][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1034.663565][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1034.703939][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1034.724048][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1034.792866][ T5389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1034.818636][ T5389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1034.837525][T22911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1035.308057][T23112] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.4485'. [ 1035.594120][T23106] netlink: 'syz.4.4484': attribute type 6 has an invalid length. [ 1035.653464][T23106] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.4484'. [ 1035.717194][ T5386] tipc: Subscription rejected, illegal request [ 1035.850222][ T5389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1035.868934][ T5389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1036.078001][T22911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1037.076956][ T62] device hsr_slave_0 left promiscuous mode [ 1037.091845][ T62] device hsr_slave_1 left promiscuous mode [ 1037.104676][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1037.131237][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1037.152682][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1037.160202][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1037.203798][ T62] device bridge_slave_1 left promiscuous mode [ 1037.210167][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.230005][ T62] device bridge_slave_0 left promiscuous mode [ 1037.301909][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.788706][T23153] netlink: 'syz.3.4493': attribute type 1 has an invalid length. [ 1037.798819][T23153] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4493'. [ 1038.729571][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1038.752723][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1038.779684][T22911] device veth0_vlan entered promiscuous mode [ 1038.948962][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1038.958704][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1038.982579][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1038.990600][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1039.022829][T22911] device veth1_vlan entered promiscuous mode [ 1039.043955][T23161] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.4495'. [ 1039.205182][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1039.219536][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1039.238849][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1039.260683][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1039.273306][T22911] device veth0_macvtap entered promiscuous mode [ 1039.324192][T22911] device veth1_macvtap entered promiscuous mode [ 1039.396373][T22911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1039.407136][T22911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.419820][T22911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1039.451449][T22911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.461636][T22911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1039.481346][T22911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.499367][T22911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1039.509953][T22911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.530048][T22911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1039.542626][ T5386] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1039.561924][ T5386] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1039.608563][ T5386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1039.628280][ T5386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1039.650652][T22911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1039.674839][T22911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.732381][T22911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1039.757679][T22911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.771324][T22911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1039.788740][T22911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.799583][T22911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1039.820409][T22911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.839437][T22911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1039.850825][T23168] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4498'. [ 1039.871481][T23168] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1039.898240][T23168] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1039.921039][ T5386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1039.943720][ T5386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1040.004350][T22911] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.031894][T22911] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.040901][T22911] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.080423][T22911] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.378923][ T5386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.401215][ T5386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1040.429235][ T7960] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1040.479322][T23180] netlink: 'syz.4.4501': attribute type 16 has an invalid length. [ 1040.498910][T23180] netlink: 'syz.4.4501': attribute type 25 has an invalid length. [ 1040.528393][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.570832][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1040.579059][T23180] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4501'. [ 1040.632406][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1041.513861][T23204] netlink: 60519 bytes leftover after parsing attributes in process `syz.0.4505'. [ 1042.053045][T23222] netlink: 'syz.1.4507': attribute type 39 has an invalid length. [ 1042.300268][T23227] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.4508'. [ 1042.570428][T23235] device bridge_slave_0 left promiscuous mode [ 1042.580190][T23235] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.403159][T23269] can: request_module (can-proto-5) failed. [ 1043.898667][T23288] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.4524'. [ 1044.167610][T23294] netlink: 'syz.2.4527': attribute type 21 has an invalid length. [ 1044.175895][T23294] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4527'. [ 1045.056105][T23315] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.4532'. [ 1045.126605][T23315] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1046.095580][T23352] delete_channel: no stack [ 1046.796178][T23383] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4551'. [ 1047.117634][T23412] netlink: 763 bytes leftover after parsing attributes in process `syz.1.4559'. [ 1047.685338][T23432] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.4563'. [ 1047.739938][T23431] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.4563'. [ 1048.062279][T23439] netlink: 'syz.0.4564': attribute type 15 has an invalid length. [ 1048.082425][T23439] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4564'. [ 1048.197782][T23439] netlink: 'syz.0.4564': attribute type 15 has an invalid length. [ 1048.261979][T23439] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4564'. [ 1049.072391][T23490] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.4575'. [ 1054.423929][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.430364][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1058.076288][T23595] netlink: 'syz.1.4614': attribute type 21 has an invalid length. [ 1058.092568][T23595] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4614'. [ 1058.099783][T23594] netlink: 'syz.0.4615': attribute type 1 has an invalid length. [ 1058.121082][T23594] netlink: 'syz.0.4615': attribute type 1 has an invalid length. [ 1058.129566][T23594] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.4615'. [ 1058.166898][T23588] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.4612'. [ 1065.180731][T23596] netlink: 'syz.1.4614': attribute type 21 has an invalid length. [ 1065.188703][T23596] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4614'. [ 1065.223628][T23607] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4617'. [ 1065.254980][T23639] netlink: 184 bytes leftover after parsing attributes in process `syz.4.4624'. [ 1065.481837][T23648] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4627'. [ 1065.577900][T23648] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4627'. [ 1068.640135][T23653] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.4628'. [ 1068.649929][T23648] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4627'. [ 1068.862142][ T5389] tipc: Subscription rejected, illegal request [ 1069.631567][T23684] netlink: 'syz.3.4636': attribute type 46 has an invalid length. [ 1069.647465][T23684] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4636'. [ 1069.881517][T23692] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4638'. [ 1070.092055][T23699] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.4640'. [ 1072.676682][T23754] netlink: 61687 bytes leftover after parsing attributes in process `syz.1.4652'. [ 1072.957837][T23767] netlink: 'syz.4.4653': attribute type 1 has an invalid length. [ 1072.999918][T23767] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.4653'. [ 1073.313035][T23773] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4656'. [ 1073.490004][T23781] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.4658'. [ 1073.598231][T23786] netlink: 120540 bytes leftover after parsing attributes in process `syz.4.4659'. [ 1073.665642][T23786] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1073.709388][T23786] CPU: 0 PID: 23786 Comm: syz.4.4659 Not tainted syzkaller #0 [ 1073.716958][T23786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1073.727065][T23786] Call Trace: [ 1073.730392][T23786] [ 1073.733366][T23786] dump_stack_lvl+0x188/0x24e [ 1073.738120][T23786] ? show_regs_print_info+0x12/0x12 [ 1073.743376][T23786] ? load_image+0x410/0x410 [ 1073.747953][T23786] sysfs_warn_dup+0x8a/0xa0 [ 1073.752518][T23786] sysfs_do_create_link_sd+0xc0/0x110 [ 1073.757958][T23786] device_add+0x83b/0x1050 [ 1073.762443][T23786] wiphy_register+0x1d8b/0x2aa0 [ 1073.767398][T23786] ? cfg80211_event_work+0x40/0x40 [ 1073.772583][T23786] ? minstrel_ht_alloc+0x894/0xa20 [ 1073.777767][T23786] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1073.783904][T23786] ieee80211_register_hw+0x2d48/0x39f0 [ 1073.789444][T23786] ? ieee80211_register_hw+0xf71/0x39f0 [ 1073.795052][T23786] ? ieee80211_register_hw+0xe71/0x39f0 [ 1073.800671][T23786] ? ieee80211_tasklet_handler+0x20/0x20 [ 1073.806364][T23786] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1073.812317][T23786] ? __debug_object_init+0xed/0x440 [ 1073.817568][T23786] ? memset+0x1e/0x40 [ 1073.821602][T23786] ? __hrtimer_init+0x189/0x270 [ 1073.826520][T23786] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1073.832318][T23786] ? memcpy+0x3c/0x60 [ 1073.836363][T23786] hwsim_new_radio_nl+0xab7/0xc90 [ 1073.841463][T23786] genl_family_rcv_msg_doit+0x22f/0x350 [ 1073.847063][T23786] ? end_current_label_crit_section+0x170/0x170 [ 1073.853381][T23786] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1073.859338][T23786] ? bpf_lsm_capable+0x5/0x10 [ 1073.864071][T23786] ? security_capable+0x85/0xb0 [ 1073.868992][T23786] genl_rcv_msg+0x601/0x790 [ 1073.873597][T23786] ? genl_bind+0x360/0x360 [ 1073.878063][T23786] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1073.884474][T23786] netlink_rcv_skb+0x1ef/0x440 [ 1073.889312][T23786] ? genl_bind+0x360/0x360 [ 1073.893787][T23786] ? netlink_ack+0x1160/0x1160 [ 1073.898641][T23786] ? down_read+0x1a8/0x2d0 [ 1073.903109][T23786] genl_rcv+0x24/0x40 [ 1073.907153][T23786] netlink_unicast+0x7ad/0x920 [ 1073.911990][T23786] netlink_sendmsg+0x8ad/0xbd0 [ 1073.916812][T23786] ? netlink_getsockopt+0x550/0x550 [ 1073.922067][T23786] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1073.927682][T23786] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1073.933031][T23786] ? security_socket_sendmsg+0x7c/0xa0 [ 1073.938557][T23786] ? netlink_getsockopt+0x550/0x550 [ 1073.943818][T23786] ____sys_sendmsg+0x5ed/0x9a0 [ 1073.948662][T23786] ? __sys_sendmsg_sock+0x30/0x30 [ 1073.953752][T23786] ? __import_iovec+0x306/0x510 [ 1073.958689][T23786] ? import_iovec+0x6f/0xa0 [ 1073.963267][T23786] ___sys_sendmsg+0x2a2/0x360 [ 1073.968015][T23786] ? __sys_sendmsg+0x2a0/0x2a0 [ 1073.972907][T23786] __se_sys_sendmsg+0x1c3/0x2b0 [ 1073.977828][T23786] ? __x64_sys_sendmsg+0x80/0x80 [ 1073.982846][T23786] ? lockdep_hardirqs_on+0x94/0x140 [ 1073.988104][T23786] do_syscall_64+0x4c/0xa0 [ 1073.992676][T23786] ? clear_bhb_loop+0x60/0xb0 [ 1073.997414][T23786] ? clear_bhb_loop+0x60/0xb0 [ 1074.002155][T23786] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1074.008116][T23786] RIP: 0033:0x7f5ce919e159 [ 1074.012586][T23786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1074.032256][T23786] RSP: 002b:00007f5ce9fdf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1074.040730][T23786] RAX: ffffffffffffffda RBX: 00007f5ce9426270 RCX: 00007f5ce919e159 [ 1074.048761][T23786] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1074.056788][T23786] RBP: 00007f5ce9235024 R08: 0000000000000000 R09: 0000000000000000 [ 1074.064818][T23786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1074.072865][T23786] R13: 00007f5ce9426308 R14: 00007f5ce9426270 R15: 00007ffd270cbb28 [ 1074.080906][T23786] [ 1074.440612][T23815] netlink: 'syz.0.4663': attribute type 3 has an invalid length. [ 1074.485033][T23815] netlink: 'syz.0.4663': attribute type 1 has an invalid length. [ 1074.521421][T23815] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.4663'. [ 1074.731290][T23821] pimreg: tun_chr_ioctl cmd 1074025677 [ 1074.737022][T23821] pimreg: linktype set to 270 [ 1074.789477][T23821] netlink: 15998 bytes leftover after parsing attributes in process `syz.3.4667'. [ 1074.804987][T23826] netlink: 'syz.2.4664': attribute type 3 has an invalid length. [ 1074.871950][T23826] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4664'. [ 1075.503857][T23844] delete_channel: no stack [ 1075.518713][T23844] delete_channel: no stack [ 1075.593247][T23847] netlink: 'syz.0.4673': attribute type 10 has an invalid length. [ 1075.624360][T23844] netlink: 13951 bytes leftover after parsing attributes in process `syz.2.4672'. [ 1075.869576][T23847] device vxcan1 entered promiscuous mode [ 1075.916870][T23847] team0: Device vxcan1 is of different type [ 1076.102957][T23855] device wg2 entered promiscuous mode [ 1077.570249][T23907] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4689'. [ 1077.801325][T23915] __nla_validate_parse: 2 callbacks suppressed [ 1077.801356][T23915] netlink: 134268 bytes leftover after parsing attributes in process `syz.0.4691'. [ 1077.868494][T23916] netlink: 134268 bytes leftover after parsing attributes in process `syz.0.4691'. [ 1079.643280][T23958] netlink: 'syz.2.4703': attribute type 1 has an invalid length. [ 1079.821362][T23966] netlink: 'syz.2.4703': attribute type 3 has an invalid length. [ 1079.829208][T23966] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4703'. [ 1079.892477][T23967] netlink: 10238 bytes leftover after parsing attributes in process `syz.0.4698'. [ 1083.620663][T23980] netlink: 'syz.3.4707': attribute type 2 has an invalid length. [ 1083.682261][T23985] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4707'. [ 1083.974257][T23985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1084.051228][T23985] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 1084.080529][T23985] bond0 (unregistering): Released all slaves [ 1084.108030][T23991] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.4709'. [ 1084.974395][T24015] netlink: 'syz.2.4719': attribute type 21 has an invalid length. [ 1085.110380][T24017] netlink: 'syz.0.4716': attribute type 29 has an invalid length. [ 1085.248409][T24017] netlink: 'syz.0.4716': attribute type 29 has an invalid length. [ 1085.298299][T24018] netlink: 'syz.0.4716': attribute type 29 has an invalid length. [ 1085.893375][T24044] netlink: 'syz.3.4724': attribute type 49 has an invalid length. [ 1085.986099][T24044] netlink: 'syz.3.4724': attribute type 29 has an invalid length. [ 1086.027021][T24044] netlink: 'syz.3.4724': attribute type 29 has an invalid length. [ 1086.109292][T24044] netlink: 'syz.3.4724': attribute type 29 has an invalid length. [ 1086.201467][T24053] netlink: 'syz.0.4725': attribute type 10 has an invalid length. [ 1086.437500][T24053] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.569454][T24053] device bridge_slave_1 left promiscuous mode [ 1086.590945][T24053] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.018549][T24053] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1087.086349][T24056] device sit0 entered promiscuous mode [ 1088.544578][T24094] netlink: 'syz.3.4737': attribute type 10 has an invalid length. [ 1088.564096][T24094] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4737'. [ 1088.624762][T24094] batman_adv: batadv0: Interface deactivated: vlan1 [ 1089.060975][T24094] batman_adv: batadv0: Removing interface: vlan1 [ 1090.130569][T24122] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1092.637571][T24135] netlink: 'syz.3.4746': attribute type 20 has an invalid length. [ 1092.754047][T24146] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.4746'. [ 1092.799980][T24147] syz.4.4749 (24147) used obsolete PPPIOCDETACH ioctl [ 1092.807539][T24146] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.4746'. [ 1092.877753][T24135] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.4746'. [ 1096.106934][T24165] netlink: 'syz.4.4753': attribute type 10 has an invalid length. [ 1096.132256][T24165] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4753'. [ 1096.269280][T24179] netlink: 'syz.1.4756': attribute type 21 has an invalid length. [ 1096.298314][T24179] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4756'. [ 1096.323607][T24179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4756'. [ 1096.500455][T24185] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.4759'. [ 1098.238085][T24254] netlink: 49920 bytes leftover after parsing attributes in process `syz.2.4775'. [ 1098.316295][T24254] netlink: 'syz.2.4775': attribute type 11 has an invalid length. [ 1098.401269][T24254] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4775'. [ 1098.419649][T24260] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.4776'. [ 1100.090692][T24307] netlink: 'syz.0.4786': attribute type 39 has an invalid length. [ 1100.878837][T24347] netlink: 'syz.0.4795': attribute type 1 has an invalid length. [ 1100.921712][T24347] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.4795'. [ 1101.967300][T24358] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4798'. [ 1102.117555][T24369] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.4800'. [ 1102.268205][T24357] __sock_release: fasync list not empty! [ 1102.660703][T24381] netlink: 'syz.2.4803': attribute type 10 has an invalid length. [ 1102.835000][T24381] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1102.969068][T24387] netlink: 'syz.4.4805': attribute type 10 has an invalid length. [ 1103.716822][T24387] team0: Device gre0 is of different type [ 1103.833582][T24410] netlink: 'syz.1.4808': attribute type 21 has an invalid length. [ 1103.851251][T24410] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4808'. [ 1103.889139][T24412] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4808'. [ 1104.221642][T24412] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1104.283577][T24412] bond0 (unregistering): Released all slaves [ 1104.522734][T24408] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4808'. [ 1104.714481][T24408] team0: Port device team_slave_0 removed [ 1104.882032][T24442] netlink: 'syz.0.4815': attribute type 33 has an invalid length. [ 1104.889953][T24442] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4815'. [ 1105.709814][T24474] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4821'. [ 1105.848523][T24479] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.4821'. [ 1107.027777][T24490] netlink: 'syz.3.4826': attribute type 10 has an invalid length. [ 1108.332205][T24517] netlink: 'syz.0.4832': attribute type 29 has an invalid length. [ 1108.412187][T24517] netlink: 'syz.0.4832': attribute type 29 has an invalid length. [ 1108.465725][T24522] netlink: 'syz.0.4832': attribute type 29 has an invalid length. [ 1108.764853][T24530] device syzkaller0 entered promiscuous mode [ 1108.786342][T24530] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 1110.492557][T24567] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4846'. [ 1111.008044][T24588] netlink: 'syz.4.4853': attribute type 49 has an invalid length. [ 1111.087641][T24588] netlink: 'syz.4.4853': attribute type 49 has an invalid length. [ 1114.672299][T24624] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4860'. [ 1114.711551][T24624] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1115.035738][T24624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1115.866710][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.873304][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.969120][T24646] mac80211_hwsim hwsim85 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1116.277673][T24655] device syzkaller0 entered promiscuous mode [ 1116.573479][T24661] batman_adv: batadv0: Interface deactivated: vlan1 [ 1117.471298][T24661] batman_adv: batadv0: Removing interface: vlan1 [ 1119.867406][ T7960] wlan1: Trigger new scan to find an IBSS to join [ 1121.383824][T24683] netlink: 'syz.3.4877': attribute type 2 has an invalid length. [ 1121.446447][T24683] netlink: 'syz.3.4877': attribute type 1 has an invalid length. [ 1121.496541][T24683] netlink: 'syz.3.4877': attribute type 4 has an invalid length. [ 1121.526450][T24683] netlink: 'syz.3.4877': attribute type 6 has an invalid length. [ 1121.561274][T24683] netlink: 'syz.3.4877': attribute type 7 has an invalid length. [ 1121.581287][T24683] netlink: 'syz.3.4877': attribute type 5 has an invalid length. [ 1121.589143][T24683] netlink: 206468 bytes leftover after parsing attributes in process `syz.3.4877'. [ 1122.144850][T24701] netlink: 'syz.4.4882': attribute type 21 has an invalid length. [ 1122.263451][T24701] netlink: 'syz.4.4882': attribute type 21 has an invalid length. [ 1122.293778][T24701] netlink: 'syz.4.4882': attribute type 21 has an invalid length. [ 1122.321439][T24701] netlink: 'syz.4.4882': attribute type 21 has an invalid length. [ 1122.902769][ T62] wlan1: Trigger new scan to find an IBSS to join [ 1123.810800][ T5393] wlan1: Creating new IBSS network, BSSID 56:c1:fc:6c:ed:e1 [ 1123.880409][T24763] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.4894'. [ 1127.286658][T24855] validate_nla: 61 callbacks suppressed [ 1127.286683][T24855] netlink: 'syz.1.4915': attribute type 7 has an invalid length. [ 1127.362153][T24855] netlink: 'syz.1.4915': attribute type 6 has an invalid length. [ 1127.619041][T24855] netlink: 'syz.1.4915': attribute type 3 has an invalid length. [ 1127.657292][T24855] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4915'. [ 1127.838567][T24856] netlink: 'syz.1.4915': attribute type 2 has an invalid length. [ 1127.871703][T24856] netlink: 119 bytes leftover after parsing attributes in process `syz.1.4915'. [ 1128.778190][T24885] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.4921'. [ 1142.522305][ T49] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1142.538931][ T49] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1142.551402][ T49] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1142.559688][ T49] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1142.568024][ T49] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1142.575601][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1144.661510][ T4287] Bluetooth: hci3: command 0x0409 tx timeout [ 1145.359528][T16419] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1145.369742][T16419] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1145.388601][ T49] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1145.397193][ T49] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1145.407461][T16419] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1145.414994][T16419] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1145.644088][ T49] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1145.660636][ T49] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1145.669951][ T49] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1145.678579][ T49] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1145.687086][ T49] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1145.694669][ T49] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1145.898017][ T49] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1145.911781][ T49] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1145.920816][ T49] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1145.929823][ T49] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1145.937911][ T49] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1145.946076][ T49] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1146.741322][ T49] Bluetooth: hci3: command 0x041b tx timeout [ 1147.127579][ T4287] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1147.147582][ T4287] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1147.156263][ T4287] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1147.166538][ T4287] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1147.174632][ T4287] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1147.182650][ T4287] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1147.461388][ T49] Bluetooth: hci6: command 0x0409 tx timeout [ 1147.781358][ T49] Bluetooth: hci7: command 0x0409 tx timeout [ 1148.021380][ T49] Bluetooth: hci8: command 0x0409 tx timeout [ 1148.661439][ T49] Bluetooth: hci2: command 0x0406 tx timeout [ 1148.821360][ T49] Bluetooth: hci3: command 0x040f tx timeout [ 1149.221344][ T49] Bluetooth: hci9: command 0x0409 tx timeout [ 1149.541284][ T49] Bluetooth: hci6: command 0x041b tx timeout [ 1149.861338][ T49] Bluetooth: hci7: command 0x041b tx timeout [ 1150.101283][ T49] Bluetooth: hci8: command 0x041b tx timeout [ 1150.901275][ T49] Bluetooth: hci3: command 0x0419 tx timeout [ 1151.301274][ T49] Bluetooth: hci9: command 0x041b tx timeout [ 1151.621373][ T49] Bluetooth: hci6: command 0x040f tx timeout [ 1151.941326][ T49] Bluetooth: hci7: command 0x040f tx timeout [ 1152.181299][ T49] Bluetooth: hci8: command 0x040f tx timeout [ 1153.381349][ T49] Bluetooth: hci9: command 0x040f tx timeout [ 1153.701309][ T49] Bluetooth: hci6: command 0x0419 tx timeout [ 1153.802597][ T7970] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1154.021264][ T49] Bluetooth: hci7: command 0x0419 tx timeout [ 1154.261319][ T49] Bluetooth: hci8: command 0x0419 tx timeout [ 1155.461310][ T49] Bluetooth: hci9: command 0x0419 tx timeout [ 1155.541419][T15720] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2645 jiffies s: 116481 root: 0x1/. [ 1155.567803][T15720] rcu: blocking rcu_node structures (internal RCU debug): [ 1155.578200][T15720] Sending NMI from CPU 1 to CPUs 0: [ 1155.583662][ C0] NMI backtrace for cpu 0 [ 1155.583674][ C0] CPU: 0 PID: 24878 Comm: syz.4.4917 Not tainted syzkaller #0 [ 1155.583693][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1155.583704][ C0] RIP: 0010:native_apic_msr_eoi_write+0xb/0x10 [ 1155.583733][ C0] Code: 8b 06 bf f0 03 00 00 89 de 5b 41 5e 41 5f ff e0 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b9 0b 08 00 00 31 c0 31 d2 0f 30 0f 1f 40 00 81 ff cf 00 00 00 7f 0c 83 ff 20 74 2a 83 ff 30 74 [ 1155.583749][ C0] RSP: 0018:ffffc90000007fd0 EFLAGS: 00000046 [ 1155.583772][ C0] RAX: 0000000000000000 RBX: ffffffff8c660b30 RCX: 000000000000080b [ 1155.583785][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000b0 [ 1155.583796][ C0] RBP: 0000000000000000 R08: ffffffff8fa28008 R09: ffffffff8fa28018 [ 1155.583809][ C0] R10: ffffffff8fa28010 R11: ffffffff8fa28003 R12: 0000000000000000 [ 1155.583822][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 1155.583834][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1155.583850][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1155.583862][ C0] CR2: 00007f813b1eb840 CR3: 00000000810b7000 CR4: 00000000003506f0 [ 1155.583878][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1155.583889][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1155.583901][ C0] Call Trace: [ 1155.583906][ C0] [ 1155.583912][ C0] __sysvec_irq_work+0x53/0x350 [ 1155.583935][ C0] sysvec_irq_work+0x98/0xc0 [ 1155.583953][ C0] [ 1155.583958][ C0] [ 1155.583964][ C0] asm_sysvec_irq_work+0x16/0x20 [ 1155.583990][ C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 1155.584010][ C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 12 7c 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 1155.584025][ C0] RSP: 0018:ffffc90005ca7320 EFLAGS: 00000206 [ 1155.584039][ C0] RAX: 8c7fbe259e825100 RBX: 1ffff92000b94e6c RCX: 8c7fbe259e825100 [ 1155.584052][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c1820 RDI: ffffffff8adf6220 [ 1155.584065][ C0] RBP: ffffc90005ca7420 R08: ffffffff90b13247 R09: 1ffffffff2162648 [ 1155.584079][ C0] R10: dffffc0000000000 R11: fffffbfff2162649 R12: 0000000000000246 [ 1155.584091][ C0] R13: dffffc0000000000 R14: ffff8880b8e3bb00 R15: 0000000000000001 [ 1155.584119][ C0] ? lock_downgrade+0x820/0x830 [ 1155.584144][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 1155.584168][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 1155.584191][ C0] ? page_ext_get+0x1de/0x2a0 [ 1155.584217][ C0] __rcu_read_unlock+0x78/0xd0 [ 1155.584239][ C0] page_ext_put+0x91/0xb0 [ 1155.584263][ C0] unmap_page_range+0x1905/0x25b0 [ 1155.584307][ C0] unmap_vmas+0x260/0x390 [ 1155.584333][ C0] ? unmap_vmas+0x1bd/0x390 [ 1155.584360][ C0] ? unmap_page_range+0x25b0/0x25b0 [ 1155.584387][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 1155.584422][ C0] exit_mmap+0x20d/0x970 [ 1155.584446][ C0] ? vm_brk+0x20/0x20 [ 1155.584468][ C0] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1155.584492][ C0] ? exit_mm+0x23d/0x350 [ 1155.584522][ C0] ? uprobe_clear_state+0x274/0x290 [ 1155.584552][ C0] __mmput+0x118/0x3a0 [ 1155.584570][ C0] exit_mm+0x24d/0x350 [ 1155.584594][ C0] ? sysctl_delayacct+0x220/0x220 [ 1155.584620][ C0] ? do_exit+0x2570/0x2570 [ 1155.584647][ C0] ? tty_audit_exit+0x149/0x1f0 [ 1155.584668][ C0] do_exit+0x958/0x2570 [ 1155.584699][ C0] ? put_task_struct+0x80/0x80 [ 1155.584742][ C0] ? ct_nmi_exit+0x145/0x1c0 [ 1155.584768][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1155.584793][ C0] ? _raw_spin_lock_irq+0x86/0xf0 [ 1155.584815][ C0] ? lock_chain_count+0x20/0x20 [ 1155.584839][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1155.584862][ C0] do_group_exit+0x229/0x2e0 [ 1155.584886][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1155.584906][ C0] get_signal+0x1259/0x1340 [ 1155.584938][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 1155.584967][ C0] arch_do_signal_or_restart+0xc4/0x1310 [ 1155.584990][ C0] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 1155.585020][ C0] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 1155.585048][ C0] ? get_sigframe_size+0x10/0x10 [ 1155.585069][ C0] ? perf_trace_preemptirq_template+0x268/0x320 [ 1155.585106][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 1155.585134][ C0] exit_to_user_mode_loop+0x70/0x110 [ 1155.585160][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 1155.585186][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 1155.585207][ C0] do_syscall_64+0x58/0xa0 [ 1155.585232][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1155.585256][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1155.585282][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1155.585306][ C0] RIP: 0033:0x7f5ce919e159 [ 1155.585320][ C0] Code: Unable to access opcode bytes at 0x7f5ce919e12f. [ 1155.585329][ C0] RSP: 002b:00007f5cea0210e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1155.585345][ C0] RAX: fffffffffffffe00 RBX: 00007f5ce9426098 RCX: 00007f5ce919e159 [ 1155.585358][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5ce9426098 [ 1155.585370][ C0] RBP: 00007f5ce9426090 R08: 0000000000000000 R09: 0000000000000000 [ 1155.585381][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1155.585392][ C0] R13: 00007f5ce9426128 R14: 00007ffd270cba40 R15: 00007ffd270cbb28 [ 1155.585414][ C0]