last executing test programs: 19.16186019s ago: executing program 4 (id=6017): r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x572, @remote}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000040)="f4001100022b3325a6d5b02f3af865fe8007000000007afefff50000090000000000000000", 0x25}, {&(0x7f0000000080)="e3da9b", 0x3}, {0x0, 0xbb}], 0x3}, 0x0) 18.961159585s ago: executing program 4 (id=6023): r0 = socket$kcm(0x23, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x1, 0x0, 0x0, 0xfffffe00, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0, 0x2}, 0x4, 0xfffffffffffffffe, 0xc46, 0x5, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, r1, 0x0) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0xc0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f0000000340)=@ieee802154={0x24, @short={0x2, 0x2, 0xaaa0}}, 0x80, 0x0, 0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="1000000000000000020100000400000068000000000000001601000001000000d991758eea7bbe507f8de49ffcb97fe6fdf189c195d725e119b96ad3c95c55d03b6bfb3973fc0aabc3e971ba88df14fbc3aa79776f6ac094e985a810cec9bb42720e7387bf1d56c495d518a30051c15641dec549510000002800000000000000070100000400000065f6c0718978e3e3f74e6be592817114f4e78c08c5056fdf98000000000000001801000009000000018794a3d9ccce541d7ca50687cfdd126ac61fe209a1f8e2af5754e45a1e815fd3088ff6145d0b54a3139358b6394d6c3c57e2d0852d52d8d341b064a09ca701e0b265cdbf71114a0758e54b23fed6fc79b1d8b45526bd2d69e224a8ddd63c8de7f0d1e9c68ba4c2cccb01f1b5d9ecaa2460b7e939626b136887518b579288ad5b00000000000000c8050000000000001701000005000000bfcf6d1a572d60f6a4924fa03ded1bc644ea86b2b81a2fc37c1720e5fc8a343f1d6b9551914944c959f26aee8519116368535b4b04e7f0381e17f733e145245a875d126b16f14a763a208831e8ee38d263c51766f1cab7c711c6eed3adde9b5806bea7d07de8156237a143bc69c1b0e19b961b237cf75a50be884efcaf430a5583f62eda01339623e12fe71a1324088fbe9735ed74a243ff944344b6207fe7b93c525f0fd2a12bed249a8a3e70c2de7165cddf53bc82749e237c706c22e35399862956d9479c03328a40d6d2d631476b0107be7e426f82e90cac213d5769441df7b6bfac7f4dd01e1aac9839b3c1d848359e069d9b3637f616054da95d96812b0a551844e0a047e059ae4a17522e8eed7d3099bebeadee84e011d3859d0e8cafd0774985beaa50354d4ac92bc64b7c2b835d3ff37c21bd2f14613dc0738a1330a7de4fd01e70cfcdf3f605453ae59affa153aecdbce86e2735ba86f93a1f397693b4a4839d0f54ecb2586f35dd36cc08f8eb141d0ae96b476a1be1a9b32a323a5a7f7a1371e7dcedd22f9d42e43c4bcf5af2d6951f7bb2ccc9e3a1a9268506857eca1e5e1f8819a5e90084a0d38bbc9a6ba56c3060a97adda68c5b459fb0ff28b8a29f27d8bd0a0841fd493ec03f5ff8a00df934ecb262221493e2cfb486899c505c253fde157711df20092d92fb7cd775adef0d19bba4b2eea0daeb11860389acd53aad9f7ce99cc3d5765ef365ee67772d54ef405a521f95afd50744bb10b3965b06d64ba59ec06ea69c784869da8ea08650352fe30b071f86ad343e2ed3ceb7daefc8a0d80e707d8a904ab5d152f430e4ec0fa08c8b26fa53eca9d88986d7ecbd1af3b7439b2741657e03115b053600c8f4c1ef3360e536f621c927472452210a4e7d716534702e5a5400c0aa5d14807fda02718453f3de1ca6d8636c6e34bd92c5395b36e1a39780abb26f14599dd33dd15899693a2053c89cdda791331c4d1f76ea19750cb27fea48c40750929bbfd4c51c1e320ec8918ff9f982cb94e2efcee8fa6782d54451fcaef6f3bd164833864999e221150b5524d62aad79b4b92ad4bcc2ae45a9c94c79df4aadf0f768568c29f730131a0c193441994147ff7591ce079b8c438cdd5f6c81ab398c2712ba54da4945ce8fab6d8fe4f3e18c86d1446032d082ff0125b4b7bf60f61776086cbd788afed8ce2575ca34ede036fd5c494929cdb0e76de4d5446b3ed867760308867bd9a1a6c87c3815ea1c119d0ad6ad4a4db36b3f68ad2fff22e714a473a8af61feca9e2f9549d16b1bc88ad3da04f2cf4ff873405147e9e462e0bdfe6b0f886c608121ca5d175e1d7ae6d2a98aec5177c06f67ed56ed78c2fd7914749a2c07623d80d384bd77cd6093fcef3a8bec1b3ae83703fb1fe0f82ed2dd35cd9aeed4c5640875194f9e28f2a5d47bf942941251e46822fbc7ff0bdac5aab56914205e97051d6c29234f55a7bf7ffbad18b00bf5b301b53b1c5c09627302d8a140a0838a02f44eef66a170423b3632c228776ee094b85fbde06ecb77bc77ef5e63fb7f336d4c8b27b1f0c68ea3d1e7f9a023dea76b1706e77492faec282853cf9d758a9e396a2703070294aa4bb0fae91a0c5f0f5cc77f40673623d58e3385ec2caa5cfe807c9676468833dd346016e8732a839f299fa2ad9f12d461b6d099ddc70be9dfdff084fe674b9ad68d3b6943d557cca26017c5bdf29f7cdd218b41d8df8bb54638b0a2c7d28ce49a8b25c138c6bb3755dfaee608f4ebd1226154a64c4e0b6cf53c5abb57eefefd9f073649a30158819afec03e57bde71fd3a515e9d49616d1e4a97dd25d1b1ac7a7b76c3be985623fd4811e9378dba2399e6cc7d08d49d885d111d133c303adec035bf5cd6c832f6e6b8469762333b79d1e382ef3480b5cfdb77a77d974c83693a2a169f0a3188ed03cf61c9134f1fe6aa6d950c1de62f7af079e9b2a21f38ec63c856a6f53442e43923ac5adb3e0676e1656843c21fbd5613958a2950eebd4c507c970bf0bbe700a8ece037c00000000000000880000000000000035000000010000006379dd542c7842d3c36e0bd96611bad3001e472e49cbf63995ac9c28c689ee073856b9d986061afebae5bc0799315369e51afb36f2307f3b5843a9ccfd316b53603bf29aabcdba8a4ded727613a8727f477e66232d7eed3b92a14a8fa99147579208c2b80a7b643f677d602d3d90fbbb03f1dbef163f5900d00000000000000007010000000400005a7edbc47b9cb24163ded6b6acf4bd8a3426726d0793d05ff54fe83c477a548ea56475b11aa8648a3a936bd92476eea3aadfb3530a64f135b39fc5f2c55ba657abeaf83cdeb494d78dca2007030b844a1740d7efd9d41572716f86007b71e7e11aa599cdca9646db4c46611e8b7d15725c198a495b5b6a3b0f35dbea5b55abb8bc357c3650fbc778bc7b2932ccb5c7750eab023d2e89ea4ee9863f3551d1de4ed4ee0541dfb610ba2efaeec6bcee7bd267fa6385a7b8209836816d1ef51c558fb000000000000000110100005b000000d5b4e4c5f7005a0b518810db3a2f8448fa9cd8b2b92f28ff84b46fa3da3659c02612912c118be7ef5093520f3d1ab240c0dfe29cd5ba8b92df1589b85746b7b99da5dc3dd9cf4e88912a7a552bdd1cf9cfec75e75475d7f8d597ec40ae42ef4bec7bf38bd8cd4ebc0afbea1496c839681fb4c78dfa3415cbd21759688941efdd23cdcec0f4c74166e4148323722257aac053317a6c6e9d93cbfd4c812a7d30db00"/2312], 0x908}, 0x44811) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000070000000f00000004000085000200000800000000000008001000000800000004000000400000000c0000000300000009004a00050000000300000000000000002e3e30305f00"], &(0x7f0000000300)=""/180, 0x5b, 0xb4, 0x1}, 0x28) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f8, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0xc112, 0xac5d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000, 0x0, 0x3, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x45}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0xd}, 0x10485, 0x8, 0x0, 0x0, 0x8, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x15, 0x5, 0x0, &(0x7f0000000500)) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004025a9fff0000002e0000001126078f39b52d89f6fa0b83ff40c17ef57cec2d0f76a8c1829bec8355c379c44c32e54f8fe7ca6b82e3c3d34cd6daa3ebed0779fcb90acbb4199889ae9cda14dee23f5a698d09f0aa3a0d9a5e2423e77138f4b3bdd1c24d0cee4cdb9cbb6df138362de9f4774c461afb8f5a973af29f1d822f86bab67762e8dc6229971f9fd9627bb26a0f0d8a10850b0830b8fb", @ANYRES32, @ANYBLOB="8700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2100, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89ed, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) openat$cgroup_procs(r4, 0x0, 0x2, 0x0) 15.506267319s ago: executing program 4 (id=6030): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f0000000100), 0x120) (async) gettid() perf_event_open$cgroup(&(0x7f0000000600)={0x4, 0x80, 0x9, 0x1, 0x40, 0x5, 0x0, 0x4, 0x4000, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0x8, 0x5}, 0x80c0, 0x101, 0x8000002, 0x7, 0x44c, 0x1, 0x8, 0x0, 0x203, 0x0, 0x8}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x5) (async) socket$kcm(0xa, 0x5, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, @perf_config_ext, 0x10c002, 0x89, 0x0, 0x0, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x4ac5d, 0x8000, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x10}, 0xe0, 0x7, 0x80, 0x7, 0x2a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="06000000040000000600000005000000580682a4455a46adbba2c05bd4824b00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r1, 0x0, 0xa0028000}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xff9d}, 0x48) perf_event_open(&(0x7f0000000ac0)={0x0, 0x80, 0x4, 0x1, 0xfd, 0x0, 0x0, 0x0, 0x84908, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) (async) socketpair(0x1, 0x801, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x29, 0x15, &(0x7f0000000100), 0x3d) 13.291007324s ago: executing program 4 (id=6032): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x1001, 0x3, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000d00)=ANY=[@ANYBLOB="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", @ANYRES64=r1, @ANYRESDEC=r0, @ANYRES8=r0, @ANYRES16=r0], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r3, r2, 0x26}, 0x10) r4 = perf_event_open$cgroup(&(0x7f00000001c0)={0x5, 0x80, 0x8, 0x5, 0x81, 0xf8, 0x0, 0x6, 0x400, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp, 0xc6006e6d776a68df, 0x3, 0x200, 0x2, 0x669f, 0x2000, 0x5, 0x0, 0x895, 0x0, 0x6}, 0xffffffffffffffff, 0xe, r0, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x1) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008bc02580203bc32dd000000cac6d0040406570e413a47143771194250ed4e4021466940d0dd3a7a1da48bf2f070f359baaec7b443b67804134bd67826a3889283858da5fdb71af2bb57d75bc15fcf76fbf324ffa795a2f2a17a7a1ac9c1125448cc50496de1e8fcb29ca15ea60e14dc32567f63ad3f6ae32eee0365d374bff778e9", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x3, 0x0, r3, 0x4, '\x00', 0x0, r6, 0x0, 0x2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x17, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r7}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r7, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1c00ffb0, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1000000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x7ff}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.352655127s ago: executing program 4 (id=6038): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000f01eb791433a5ee4ce1b14d6d930dfe1d9683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909fdffcace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93456a92954b43370e9703920706f9a941c6fd6d7ac2946af9fc2eb5", 0xd8}], 0x1, 0x0, 0x0, 0x1000000}, 0x44) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001640)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x2}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)="8553f42c90e5c5bc0760", 0xa}], 0x1}, 0x41) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x44) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000005c0)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000700)=ANY=[@ANYBLOB='-', @ANYRESOCT], 0x27) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/123, 0x7b}], 0x1, &(0x7f0000000200)}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x4) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000040)=r4, 0x4) 9.265293252s ago: executing program 4 (id=6047): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0xffffffff, 0x0, 0x0, 0xdf61}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000dc0)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000500)=@raw=[@exit, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}], &(0x7f0000000540)='GPL\x00', 0x5, 0x2b, &(0x7f0000000580)=""/43, 0x41100, 0x1, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xa157, r2, 0x9, &(0x7f0000000840)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000d00)=[{0x2, 0x2, 0xa, 0x3}, {0x1, 0x1, 0x4, 0xc}, {0x2, 0x5, 0xb, 0x4}, {0x0, 0x4, 0xa, 0x3}, {0x1, 0x1, 0x9, 0xb}, {0x1, 0x2, 0x8, 0x9}, {0x3, 0x4, 0xc, 0x2}, {0x3, 0x5, 0x8, 0xc}, {0x5, 0x5, 0xb, 0x8}]}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000040000850000005200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r5) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0xffffffffffffffff, 0x4003, 0xffffff00}}, 0x10, 0x0}, 0x4040005) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000200d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee5de6ccd4d6e4ed6f3d93452a92954b43370e970189", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f00000014c0)=ANY=[@ANYBLOB="18000000000000000000000001000100b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000085000000a50000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x5, 0xffd, &(0x7f00000004c0)=""/4093, 0x0, 0x1}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20000) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110c230000) 5.482687795s ago: executing program 2 (id=6074): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) (async) close(r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2, 0x0, 0xfffffffe, 0x8}]}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40000040) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x8, 0x0, 0xff, 0x0, 0x3, 0x2c00c, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x1, @perf_bp={0x0, 0x1}, 0x91400, 0xca, 0xfffffffd, 0x9, 0xdf1e, 0xcb4, 0xfff7, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x5) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r5, &(0x7f00000005c0)=ANY=[@ANYRES8=r1, @ANYRES32=r4], 0x9a) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000029c0)=ANY=[], 0xa8}, 0x10) (async) sendmsg(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000029c0)=ANY=[], 0xa8}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f0000000180)=r6, 0x4) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000900)="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", 0x12f}, {&(0x7f0000000840)="07e0c09d2fb26efd27c7c50e0645f4335754ca82834344759da59f14df95330c16b1a26cc99b950d08367a004c14f2350afe2dc800db9334b452cd89e4edfa2a5d75281072c8fe6b4e281fd8f2cbc6d54499728aa91e0259258060703d827b2256a9e0bf8c4cff3e7bff0eda5486", 0x6e}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000900)="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", 0x12f}, {&(0x7f0000000840)="07e0c09d2fb26efd27c7c50e0645f4335754ca82834344759da59f14df95330c16b1a26cc99b950d08367a004c14f2350afe2dc800db9334b452cd89e4edfa2a5d75281072c8fe6b4e281fd8f2cbc6d54499728aa91e0259258060703d827b2256a9e0bf8c4cff3e7bff0eda5486", 0x6e}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xc8eb, '\x00', r9, r6, 0x4, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10}, 0x94) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x408) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8002}, [@call={0x85, 0x0, 0x0, 0xf}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffc1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r11}, 0x8) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r12 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x4, [@const={0xc, 0x0, 0x0, 0xa, 0x4}, @volatile={0xf, 0x0, 0x0, 0x9, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x7fff}}]}, {0x0, [0x2e, 0x2e]}}, &(0x7f0000000300)=""/71, 0x58, 0x47, 0x1}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x4, [@const={0xc, 0x0, 0x0, 0xa, 0x4}, @volatile={0xf, 0x0, 0x0, 0x9, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x7fff}}]}, {0x0, [0x2e, 0x2e]}}, &(0x7f0000000300)=""/71, 0x58, 0x47, 0x1}, 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r13) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r13) 5.150834273s ago: executing program 2 (id=6077): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000100)=[{&(0x7f0000000380)="5c00000010006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000010000000000000040000000850000006100000095"], &(0x7f0000001ac0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000580)="d2ff030760038d66b89e08f088a82b9486ddc722784070e9ce552773685db2982a3e3dfd281bed452ba39d96ae1dc41ae72d5ebdf5f1", 0x0, 0x7ff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f00000002c0), 0x12) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x8, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000080), 0xe}, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x200000007ff}, 0x10022, 0xac5f, 0x0, 0x0, 0x0, 0x67af}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdcc}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000180)={r6, r5}) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6, r5}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) r7 = socket$kcm(0x11, 0x2, 0x300) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) r9 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r9, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x2, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}, 0x0) 4.673655356s ago: executing program 1 (id=6081): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000010000006d05000002"], 0x48) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x9, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x2, 0x5}, 0x51f5, 0x0, 0xfffffffc, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10043) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000001c0)="5cdd3086ddffff6633c9bbac88a8", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5, 0xce, &(0x7f0000000b00)=""/206}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)="2d621bacd9edb397e44c6ea89907c6a1f0e726cbc6065f073ddd00946be13f7339b349e2d3e52c409cdd5ba4dc9ec48640e2d6d22747454c0a87e05aeba6fde90013ee8d", &(0x7f00000004c0), 0x1, r0, 0x0, 0x11000000}, 0x38) perf_event_open(0x0, 0x0, 0x0, r1, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000004680)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="1b0000001a007f049e3d4ba3e7", 0xd}, {&(0x7f0000000200)="68cafc816fb5690af30380a8ffff", 0xe}], 0x2}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$kcm(0x2, 0x5, 0x84) close(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(0x3) recvmsg$unix(r5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 4.670229266s ago: executing program 3 (id=6082): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x1000}, 0xfffffffffffffe7a, 0x0, 0xffffffffffffffff, 0x54}, 0x42) syz_clone(0x80001200, &(0x7f0000000b00)="543917e47a43b1bc487b3d15428dd2aa85dc6758dc7368bc9c423a42145f82ea5004f67cbc4ab8851b024c5ba4757283516447b80648bcc643638869abb20294b8f783c5783a98d65927995d59ad8882db616a043a3cdd71616c43ac5f1f6917cab2a6d08d72d489f6a5f2ddf3e3ef23c8602a012dd9c9ef06177eb7c73ea8fdee3dffaf7d0660f7d84e5a393f9d160a27d57ae0033bde4d3e3019dd2bbe4b1c307a6839d4c96bd601324150af6527ac4e1e1c453d83fc10b8a4675ae25b514f78789500216d0447", 0xc8, &(0x7f0000000c00), &(0x7f0000000c40), &(0x7f0000000e40)="6738b6d3f774835da7e8badcd881790d30a0f2ad1cca876e853ca7e95680abe50bc4cb432376788a89038ffdea6b4606491fb08e80490228b0f2cb1c4bf707d357057641c36258ebf55cb5bd4005cbbb93352d1b923022d7f281b909ae4edc1d9616fc03aa0cc656095165dbf8b4d0b750b7d234916e2d9679854187b6b77e69c2e89e7b543481217900") bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@ifindex, 0x1, 0x1, 0x11, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="05000000060000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000004a0850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)=0x8000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@fallback=r2, r0, 0x3d, 0x2015, r0, @value=r3, @void, @void, @void, r1}, 0x20) 4.116843569s ago: executing program 3 (id=6085): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="070000006500000000030000feffffff00000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000e6dd6b2d558b7470dbc5dd0de2fd0000000000003673a720c016a6e9bc6cadd3e07ad4de38ce196d945e718ecadedd001f4e711c8b21"], 0x50) r0 = socket$kcm(0xa, 0x2, 0x0) (async) socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000100)={0x2, 0x8, @private=0xa010104}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) (async) r1 = socket$kcm(0x10, 0x2, 0x4) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000300)}, 0x0, 0x4, 0x8, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x2, 0x5, 0x84) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) socket$kcm(0x10, 0x3, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYBLOB="0100000001000000037800"/28], 0x50) perf_event_open$cgroup(&(0x7f00000005c0)={0x1, 0x80, 0x3, 0xfb, 0x10, 0x5, 0x0, 0x5, 0x97, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x100000001, 0xa}, 0x10, 0x2, 0xffff, 0x3, 0xfffffffffffffffb, 0x8002, 0xd6f, 0x0, 0xfffffe01, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0xb) (async, rerun: 32) r3 = socket$kcm(0x10, 0x2, 0x4) (rerun: 32) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c000140010404000c0404009bbc7a46e3988285dcdf12f213e6f768fec601955fd80009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000001c0)='GPL\x00'}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000040000000200000000000091030000000000000000000000000000020100000002000000000000080200000000005f"], 0x0, 0x44}, 0x28) (async) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x4, 0x5c5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$kcm(0x10, 0x2, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x54}, 0x28) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000070006bcd9e3fe3dc6e0800a4070900000d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000120000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 4.035621321s ago: executing program 2 (id=6086): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r0], 0x0, 0x0}, 0x94) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r2, 0x20, &(0x7f00000000c0)={&(0x7f0000000040)=""/38, 0x26, 0x0, &(0x7f0000000080)=""/9, 0x9}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9, 0x0, &(0x7f0000000800)="000000000000000002", 0x0}, 0x50) 3.649700141s ago: executing program 0 (id=6088): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xdf61}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f0000000300)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x18}]}, &(0x7f0000000380)='GPL\x00', 0x7, 0x9c, &(0x7f00000003c0)=""/156}, 0x80) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40000002) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xdf61}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f0000000300)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x18}]}, &(0x7f0000000380)='GPL\x00', 0x7, 0x9c, &(0x7f00000003c0)=""/156}, 0x80) (async) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40000002) (async) 3.425380656s ago: executing program 0 (id=6089): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000002c0)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c9", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) 3.244928671s ago: executing program 0 (id=6090): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8b1493eec8921ef5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8000000000000000}, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0xc}, 0x18010, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0xffff, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x541b, &(0x7f0000000100)) r4 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e21}}, 0x80, 0x0}, 0x0) close(0x3) openat$cgroup_devices(r1, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0x3}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x80000}, 0x10}, 0x94) syz_clone(0x200200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f00000000c0), &(0x7f0000000100)='%-010d \x00'}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0], 0x0, 0x2b, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x7b, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) 3.089719244s ago: executing program 1 (id=6091): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) sendmsg$tipc(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f00000004c0)}, {0x0}, {0x0}, {&(0x7f0000002440)="e0390f8cb2497a57", 0x8}, {&(0x7f00000024c0)="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", 0x925}], 0x5, 0x0, 0x0, 0x4000041}, 0x20000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f00000000c0)='cpuset.memory_spread_page\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0xc, 0x2005, 0x7, 0xc1, 0xffffffffffffffff, 0xffffffff}, 0x50) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xaa, 0xaa, 0x3, [@datasec={0xe, 0x5, 0x0, 0xf, 0x2, [{0x2, 0x3, 0x10}, {0x4, 0x2, 0xf9}, {0x2, 0x5, 0xffffffff}, {0x1, 0x6, 0xbe}, {0x3, 0x9, 0x4}], "896c"}, @struct={0x0, 0x6, 0x0, 0x4, 0x1, 0x7fffffff, [{0x5, 0x5, 0x2}, {0xa, 0x1, 0x3}, {0x7, 0x4, 0x7e}, {0xe, 0x5, 0xc}, {0xa, 0x4, 0x2}, {0xe, 0x3, 0xff}]}, @float={0x10, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0xe16c48b410f8bbf1]}}, &(0x7f0000000680)=""/147, 0xc7, 0x93, 0x0, 0x1, 0x10000, @value=r2}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) ioctl$SIOCSIFHWADDR(r6, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x3, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x77}}, &(0x7f0000000000)='GPL\x00'}, 0x94) 3.061729265s ago: executing program 3 (id=6092): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x99}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) socketpair(0x22, 0x2, 0x25, &(0x7f0000000840)) 2.820708241s ago: executing program 2 (id=6093): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000008400000005"], 0x18}, 0x41) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xa, 0x0, 0x4) ioctl$TUNSETDEBUG(r1, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r1, 0x400454cd, 0x308) 2.757741902s ago: executing program 3 (id=6094): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e0000002e00"], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb=0xffffff7f}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x1, 0x0, 0x0, 0x1f00, 0x4, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRESDEC=r0], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r1, 0x8) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) 2.166708657s ago: executing program 0 (id=6095): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.stat\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x77, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x67, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x1, '\x00', r2, 0xffffffffffffffff, 0x2, 0x3}, 0x50) mkdirat$cgroup(r1, &(0x7f0000000440)='syz0\x00', 0x1ff) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000004c0)=@generic={&(0x7f0000000480)='./file0\x00', r1}, 0x18) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000500)={'veth1_macvtap\x00', @local}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r1, 0x0, 0x3b, 0x5b, &(0x7f0000000540)="64569c8b2938065facd28bee41880731ad20c767d46db6e02ecb19439970fef84cd9f53d44d5bc8c51e7f232f62db715ac0ee84b513b9deac1fb56", &(0x7f0000000580)=""/91, 0xc04, 0x0, 0xc8, 0xbd, &(0x7f0000000600)="c44a80592dce04d34e31c0eefc2b5ee77118fb3da80e36d436484b0fe5cbd4e4fa78302beb6bbdf71dddfd6926a5fc006cd8501106ffdcaf023b524de0c57276760244c6fca84d99ad9952968c66d062b24dcb9e7e917f1d38deb0a9eaf40c392864124ff79ed0675bb2132cdc78df5a10c30effa83c7a015d5f28c735bd620de6fa79045658fc217ed5b4d83eea12e8baf28ff4571cd9566da7cafcd7e3bb2c4e50a1aee63cd82a7cb872ba3c4754c98bc38aec6da0f584e83a0cf4560c586512886ddd30d94691", &(0x7f0000000700)="b8da937b09190ce31e876b788392ad88717bf27a3a7747d6d7420499b682e43dde3cbb12f559385ede28f4a11365fc3e5c2b233e54451b2435c4de3d22f887875c0560df5623cc26cde73444367deb2cc2cb0ab50f77f79a116e3ec6d2a869a017a2252fd213f8b7fa28d35bf214c7f1e0167a2c2195186459a39a46173a667d53aa7bbe4e82689357b0095fa4e571a00947cf0d85ae46d3a60d220e035ef9068a615c7afc2209dca5ca241a5b3aeb4908f76eba8c58c869fcf612cbc8", 0x5}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000940)={r4, &(0x7f0000000840)="3330401f6a1cc8f8eb285af9be1d9230530d1535fdbd146ca72c422fdfdd2087065cfb41a2b3cf85672e669feb92fd5f6e0c606afa87c1697b7dfd47c7bd405451492c8bc2588c5bfabca2a9075260640c671a49411844e7d8", &(0x7f00000008c0)=""/108}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x4, &(0x7f0000000980)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}], &(0x7f00000009c0)='GPL\x00', 0x0, 0xc0, &(0x7f0000000a00)=""/192, 0x41000, 0x14, '\x00', r2, @fallback=0x26, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ac0)={0x0, 0x1, 0x6, 0x5}, 0x10, r3, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)=[r1, r1], &(0x7f0000000b40)=[{0x2, 0x2, 0x0, 0x2}, {0x5, 0x1, 0xe, 0x9}, {0x2, 0x3, 0xc, 0xd}, {0x1, 0x4, 0x2, 0x6}, {0x5, 0x1, 0x4, 0x2}, {0x1, 0x4, 0x5, 0xb}, {0x0, 0x4, 0x0, 0xc}, {0x5, 0x1, 0xe, 0x4}], 0x10, 0xf4d}, 0x94) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000c80), 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000d40)={r4, &(0x7f0000000cc0)="546d2c4d5d9b6c7a", &(0x7f0000000d00)=""/43}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001000)={0x18, 0x4, &(0x7f0000000d80)=@raw=[@func, @initr0={0x18, 0x0, 0x0, 0x0, 0x132d}, @exit], &(0x7f0000000dc0)='GPL\x00', 0x4, 0xc6, &(0x7f0000000e00)=""/198, 0x1e00, 0x2c, '\x00', r2, 0x0, r1, 0x8, &(0x7f0000000f00)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000f40)={0x2, 0xa, 0x3, 0x5}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000f80)=[{0x2, 0x4, 0x3, 0x1}, {0x5, 0x4, 0x9, 0xa}, {0x2, 0x5, 0x8, 0x1}, {0x1, 0x1, 0x0, 0x2}, {0x2, 0x4, 0xd, 0xc}, {0x2, 0x5, 0xf, 0xa}], 0x10, 0xffff}, 0x94) socket$kcm(0x29, 0x7, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000010c0)={r1, r1}, 0xc) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000001100), 0x38100, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000001140)={'syz_tun\x00', 0x1}) r7 = perf_event_open$cgroup(&(0x7f0000001180)={0x3, 0x80, 0x0, 0x3d, 0xb0, 0x14, 0x0, 0x3, 0x41604, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x4, 0x5}, 0x8020, 0x834, 0x4, 0x9, 0x8001, 0x7fffffff, 0xfff4, 0x0, 0x3, 0x0, 0x5}, r0, 0xffffffffffffffff, r1, 0x4) r8 = perf_event_open$cgroup(&(0x7f0000001240)={0x2, 0x80, 0xa5, 0x3, 0x4, 0xbe, 0x0, 0x0, 0x100, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9f, 0x0, @perf_bp={&(0x7f0000001200), 0x3}, 0x800, 0x800, 0xf815, 0x9, 0x7f, 0x80, 0x9, 0x0, 0x35c, 0x0, 0x5}, r1, 0xd, r7, 0x2) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000012c0)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x0, '\x00', r2, r1, 0x3, 0x1, 0x5}, 0x50) r10 = perf_event_open(&(0x7f0000001380)={0x3, 0x80, 0xf2, 0x7, 0x20, 0x6, 0x0, 0x8000000000000000, 0x42010, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000001340), 0x8}, 0x2040, 0x7, 0xe2d, 0x5, 0xa35a, 0xb, 0x3, 0x0, 0x7, 0x0, 0xb0}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0xc) perf_event_open$cgroup(&(0x7f0000001440)={0x0, 0x80, 0x29, 0xa4, 0x6, 0xe, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={&(0x7f0000001400), 0x2}, 0x200, 0x4f3, 0x7be6, 0x4, 0x6, 0x7, 0x3, 0x0, 0xffff, 0x0, 0x6}, r0, 0x7, r8, 0x1) write$cgroup_devices(r1, &(0x7f00000014c0)={'c', ' *:* ', 'w\x00'}, 0x8) openat$cgroup_subtree(r0, &(0x7f0000001500), 0x2, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x11, 0xb, &(0x7f0000001540)=@raw=[@generic={0xf, 0x7, 0x2, 0x2, 0x8}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @alu={0x7, 0x0, 0xc, 0x9, 0x4, 0xffffffffffffffff}, @generic={0x1, 0x1, 0xf, 0x4, 0x5}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx_val={0x18, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f00000015c0)='syzkaller\x00', 0x7f, 0x5c, &(0x7f0000001600)=""/92, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001680)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000016c0)={0x4, 0x8, 0x3, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001700)=[r1], 0x0, 0x10, 0xdcf9}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001880)={r9, 0x58, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) close(r10) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000018c0)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, '\x00', r12, r5, 0x1, 0x4}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001c00)=@bpf_tracing={0x1a, 0x26, &(0x7f0000001940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, r13}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x14703397}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x2, 0x3, 0x2, 0x0, 0x1, 0x18, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001a80)='GPL\x00', 0x4, 0x4c, &(0x7f0000001ac0)=""/76, 0x40f00, 0x4, '\x00', r12, 0x18, r1, 0x8, &(0x7f0000001b40)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000001b80)={0x1, 0xf, 0xfffffff8, 0x1}, 0x10, 0x5007, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 2.088600419s ago: executing program 1 (id=6096): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg$kcm(r1, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)=""/80, 0x50}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000b40)=ANY=[@ANYRESDEC, @ANYBLOB='b'], 0x31) sendmsg$inet(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000340)="b8", 0x1}], 0x1}, 0x4000001) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0) close(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x73) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 1.961755882s ago: executing program 0 (id=6097): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x2, 0x73, &(0x7f0000000000)) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="2e0000003e000511d25a80698c6394090324fc602f6e35", 0x17}], 0x1, 0x0, 0x0, 0x39c}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a4", 0x35}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 1.802003246s ago: executing program 2 (id=6098): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0d2e0020fdcc6177d93790ff", @ANYRES32, @ANYBLOB="0800000000000000950000000000000045"], 0x0}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='.'}, 0x30) (async, rerun: 32) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) (async, rerun: 32) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xa, 0x5, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000018000000850000002300000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x35, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.792019316s ago: executing program 1 (id=6099): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000002c0)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c9", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) 1.703110058s ago: executing program 3 (id=6100): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc6007020f", 0x17}], 0x1, 0x0, 0x0, 0x400300}, 0x4040000) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000001280)=ANY=[@ANYBLOB="620ac4ff00000000711053000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xe74}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(r1, &(0x7f0000000400)={&(0x7f0000000340)=@file={0x1, './cgroup/../file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001880)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x80}, 0x20008841) r2 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r2, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000034000b47564cb6281406000007000000", 0x14}], 0x1}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e040000000000000000000000000000020000000002000000000000080200000000000000000000090300000000005f0061"], 0x0, 0x52}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r3, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0xc, 0x100022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xe86, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x80, 0x4, 0x6, 0x4, 0x7, 0x0, 0x100000, 0x10, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x200, 0x0, @perf_config_ext={0x5993, 0x8}, 0x80, 0x7, 0x0, 0x9, 0x3, 0xffffffff, 0x8000, 0x0, 0x5, 0x0, 0x9}, r4, 0xc, r4, 0x0) close(r4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406020000f8ff0e002900", 0x24}, {&(0x7f0000000080)="e46c0000", 0x4}, {&(0x7f00000001c0)="22903ecc2c1c", 0x6}], 0x3}, 0x40042) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) ioctl$SIOCSIFHWADDR(r6, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) 1.590980721s ago: executing program 1 (id=6101): socket$kcm(0x10, 0x3, 0x10) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x3, 0x1}, 0x40, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x200004, 0x4, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffffffffffff, 0xa9bc}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xa, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x0, 0x4}, 0x10c708, 0x89, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="f0f605748aed0000000000000c00000045"], 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r2, &(0x7f0000000300)={&(0x7f0000000380)={0x2, 0x4e9b, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f00000003c0)="b9ed02d814a1fbf4e8f747cc8c30bd0840608b590101080a97b960ace1cd8816", 0xffeb}], 0x1}, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) 87.841488ms ago: executing program 0 (id=6102): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x30009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x108006, 0xac5d, 0x1, 0x0, 0x0, 0xfffffe00, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd200000006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000200)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000001040)=[{&(0x7f0000000a00)="d574e8c1d1d356019b27173686d240c8526a1b7c044ea01bbcde6ffbacbe50697818fe5755522cbedff6d960df1d0758225067361845d654950a696c777f95a7c1f2d1d3892719ddd0c384cbb091937905f723d33748a3515ef178c8fc7257a36cabd77b1f0e6552c5b7ee20a3101ee3a78cd90c80934f972fda461ac94a1be7ef561d6c2fb45f83f98833d84147064aa12ba3fa9215f49d688cc152f114ddf1d21b2bf8e6ae7cb82270", 0xaa}, {&(0x7f0000000ac0)}, {&(0x7f0000000b00)}, {&(0x7f0000000b80)="7a44bbace74365e85b7fcf52ad9c4ef64d4f54da66d5efc350688292a6cce52b", 0x20}, {&(0x7f0000000bc0)="9c60ba75d81df2481b84004dcb2a2aad9ae563534df4e07b64df236fe46e693f51784b8b5b70a2a9ded05a94c68a9a4310a28a219c39a42a846999f6259b0f4b5fa9dacef13cbd443945611dfe3e70e15a8ecea8c7a98d6ad9abc824168d100283e620fc1be2926658425ef0a77afe1519f911e03c61ce43241846a59e116d651f5d447a3c9d97401ce697935955303559a38140e98aced439630b5b09156b90e3bec11624994bb1ca4dea7efd8f5322e3129b3c64a6015cec586bcf8de6", 0xbe}, {&(0x7f0000000c80)="7641c8e8f3da4d9f7561a84f7a58866deef24a6a6bcd9b8c484d6464cc5729680c06b28cb293ef70f557204d836046f5b167e9ac6effed952d931c8ed375e25b3d6251f9bb031e8d9a766d4ecc83ed92025c57d50e8cf86491949527b4726286cce6e8a884b145a504dc5ed8a1152a750bb246caa7ecd88f4e8e5ea7c402ccc8b5f0e9a1977e51dc8e0426185626999d8d0ee7a7ee9b9e425e637598a1530c995b687f9346f9f51314eade45f4d935ad21ed8f0bf7e7f172439de5b414950b11063b3e", 0xc3}, {&(0x7f0000000d80)="78189900087771686e0147757b010fde609386021498a7f54bf238127deda7db374c516163b15c422a6fd99822f641a0a4d41ab421964266a7b8ed7c08b3e43ca91edf2a3e59b4ff5bd487fa0d7879865352969935e0981daae45e66bb47ddc27008381fc8847331aaee1ffb26569cd17696fcce64a1e1d3f776cff881b2f68ae7dcec4bff4b4333f9dbe4713a9240c24ec0b83d71ff64c020561ec3ae49e9ec7dca80bc8c7bd6302a85f6d30126a3089a09f32656a2944efc6ddbf30dc59afa9974de45dcadfc9f68a2b87940522329241ec1b96372e115c3f95803", 0xdc}, {&(0x7f0000000e80)="c34fedf1fdaeb57474c15ed43783ce4caf332aaef9ad48ffaea1c6c2cdd8636f4e57a5ad9c27d878115668e2b18f26a486bdc718db1667b8be5417a6f5a3d356088850d9c0e0da267a11b4e2157677f1c15ec51090d6b30489a8f9e6320a5b9b95587fa1c9cdb869822761c26484c850c61a6cc0f6590cbcbb1fb9180136ab10baa23aea29f28b11ce774d659f4f4516b2fcd3139429def0031468b0361fbf", 0x9f}, {&(0x7f0000000100)="b62c4027c8768691913afd4f7c5f7579110c", 0x12}, {&(0x7f0000000f80)="53763f48bcd8e5c946f76f1cac5a2d6d8d61c322618deb58eb2d0f48692e19168579c518e52158d3ff99378ba960b3b993788f611473da02db43aed4c59f7bc58790c707fad4af23defba6040972fc5641b7bf942e082ff6cfa7", 0x5a}], 0xa, &(0x7f00000006c0)=ANY=[], 0xe8}, 0x4000001) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x2805, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000004080)=@base={0x8, 0x4, 0x4, 0xbf23, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0x4}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001680)={0xffffffffffffffff, 0x20, &(0x7f0000001640)={&(0x7f0000000940)=""/179, 0xb3, 0x0, &(0x7f0000001540)=""/209, 0xd1}}, 0x10) 87.565828ms ago: executing program 3 (id=6103): r0 = socket$kcm(0x10, 0x400000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6020, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="ef0084976d0091"], 0xfe33) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@ifindex, 0x11, 0x0, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], 0x0}, 0x40) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1, 0x12) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@cgroup=r7, r4, 0x21, 0x2004, r4, @value=r8, @void, @void, @void, r5}, 0x20) 87.224208ms ago: executing program 2 (id=6104): r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x572, @remote}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000040)="f4001100022b3325a6d5b02f3af865fe8007000000007afefff50000090000000000000000", 0x25}, {&(0x7f0000000080)="e3da9b", 0x3}, {0x0, 0xbb}], 0x3}, 0x0) 0s ago: executing program 1 (id=6105): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x9}]}}, 0x0, 0x26, 0x0, 0x0, 0x7, 0x10000}, 0x28) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r0 = socket$kcm(0x2b, 0x1, 0x0) close(0xffffffffffffffff) (async) setsockopt$sock_attach_bpf(r0, 0x6, 0x24, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004cfe050000000000002f77fbac141416e000030a94079f03b1800044150510e0845013f2325f003909050b038da1880b251865589d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xffffff3e}, 0x2c) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4008, r2}, 0x18) kernel console output (not intermixed with test programs): in process `syz.3.3852'. [ 799.365287][T19462] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.3852'. [ 799.386645][T19462] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3852'. [ 799.444634][T19470] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.3852'. [ 799.472685][T19470] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.3852'. [ 799.509858][T19470] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3852'. [ 799.698922][T19487] netlink: 'syz.0.3857': attribute type 275 has an invalid length. [ 799.893622][T19503] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.3860'. [ 800.020135][T19504] netlink: 'syz.2.3860': attribute type 27 has an invalid length. [ 800.117546][T19504] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 800.254697][T19514] netlink: 'syz.3.3862': attribute type 5 has an invalid length. [ 800.519552][T19519] netlink: 'syz.3.3864': attribute type 10 has an invalid length. [ 800.550884][T19519] device caif0 entered promiscuous mode [ 800.590241][T19522] netlink: 'syz.3.3864': attribute type 11 has an invalid length. [ 800.608685][T19519] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 800.732906][T19532] __nla_validate_parse: 3 callbacks suppressed [ 800.732927][T19532] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3868'. [ 801.023877][T19547] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3870'. [ 802.356735][T19581] netlink: 63579 bytes leftover after parsing attributes in process `syz.3.3881'. [ 803.460181][T19619] netlink: 'syz.2.3894': attribute type 2 has an invalid length. [ 803.503952][T19619] netlink: 'syz.2.3894': attribute type 1 has an invalid length. [ 803.573368][T19619] netlink: 'syz.2.3894': attribute type 4 has an invalid length. [ 803.654062][T19619] netlink: 208312 bytes leftover after parsing attributes in process `syz.2.3894'. [ 804.354329][T19644] netlink: 49920 bytes leftover after parsing attributes in process `syz.0.3900'. [ 804.831938][T19664] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.839586][T19664] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.998312][T19666] device syzkaller0 entered promiscuous mode [ 805.676662][T19688] sock: sock_timestamping_bind_phc: sock not bind to device [ 807.654216][T19686] netlink: 'syz.1.3914': attribute type 21 has an invalid length. [ 807.662571][T19686] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3914'. [ 807.673162][T19688] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3915'. [ 808.529864][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.536314][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.613923][T19713] netlink: 'syz.1.3923': attribute type 21 has an invalid length. [ 808.623750][T19713] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3923'. [ 808.669557][T19715] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3924'. [ 809.369137][T19735] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 810.101063][T19753] netlink: 'syz.4.3931': attribute type 3 has an invalid length. [ 810.115200][T19753] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.3931'. [ 810.605508][ T4279] Bluetooth: hci0: command 0x0406 tx timeout [ 810.724665][T19780] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.3939'. [ 810.734565][T19781] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.3939'. [ 810.797400][T19781] netlink: 4068 bytes leftover after parsing attributes in process `syz.2.3939'. [ 810.812861][T19782] netlink: 4068 bytes leftover after parsing attributes in process `syz.2.3939'. [ 810.999444][T19787] device syzkaller0 entered promiscuous mode [ 815.478963][T19857] netlink: 'syz.0.3963': attribute type 2 has an invalid length. [ 815.502995][T19870] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3965'. [ 815.526739][T19857] netlink: 'syz.0.3963': attribute type 3 has an invalid length. [ 815.562053][T19857] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3963'. [ 816.201286][ T4279] Bluetooth: hci4: unexpected event 0x0b length: 15 > 11 [ 817.824256][T19919] tap0: tun_chr_ioctl cmd 1074812118 [ 817.853489][T19921] Ÿë: port 1(ip6gretap0) entered blocking state [ 817.870029][T19921] Ÿë: port 1(ip6gretap0) entered disabled state [ 817.884283][T19921] device ip6gretap0 entered promiscuous mode [ 817.905834][T19919] tap0: tun_chr_ioctl cmd 1074025677 [ 817.912522][T19919] tap0: linktype set to 6 [ 819.825852][T19971] netlink: 63579 bytes leftover after parsing attributes in process `syz.2.3996'. [ 820.195866][T19989] netlink: 'syz.2.4000': attribute type 11 has an invalid length. [ 820.203946][T19989] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4000'. [ 821.434584][T20024] netlink: 63579 bytes leftover after parsing attributes in process `syz.1.4012'. [ 823.142429][T20057] netlink: 'syz.3.4019': attribute type 11 has an invalid length. [ 823.255173][T20057] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4019'. [ 825.510688][T20112] netlink: 'syz.2.4032': attribute type 41 has an invalid length. [ 826.551820][T20133] netlink: 'syz.2.4040': attribute type 2 has an invalid length. [ 826.943532][T20143] netlink: 'syz.0.4042': attribute type 7 has an invalid length. [ 827.145429][T20143] netlink: 191184 bytes leftover after parsing attributes in process `syz.0.4042'. [ 827.706112][T20163] netlink: 'syz.3.4046': attribute type 41 has an invalid length. [ 827.800803][T20164] netlink: 'syz.1.4047': attribute type 39 has an invalid length. [ 828.136391][T20167] device wlan1 entered promiscuous mode [ 828.726502][T20189] netlink: 'syz.4.4053': attribute type 1 has an invalid length. [ 828.791572][T20189] netlink: 157116 bytes leftover after parsing attributes in process `syz.4.4053'. [ 829.742060][T20202] netlink: 'syz.4.4057': attribute type 11 has an invalid length. [ 829.761501][T20202] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4057'. [ 830.298826][T20198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 831.030826][T20185] netlink: 184 bytes leftover after parsing attributes in process `syz.1.4052'. [ 831.060791][T20190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4050'. [ 831.181422][T20190] tc_dump_action: action bad kind [ 832.220195][T20230] netlink: 'syz.4.4060': attribute type 7 has an invalid length. [ 832.235746][T20230] netlink: 191184 bytes leftover after parsing attributes in process `syz.4.4060'. [ 833.221872][T20261] netlink: 'syz.2.4074': attribute type 10 has an invalid length. [ 833.300067][T20265] netlink: 'syz.4.4073': attribute type 1 has an invalid length. [ 833.331580][T20265] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.4073'. [ 833.554890][T20261] device veth0_vlan left promiscuous mode [ 833.640871][T20261] device veth0_vlan entered promiscuous mode [ 833.739142][T20261] team0: Device veth0_vlan failed to register rx_handler [ 835.238270][T20310] netlink: 'syz.3.4086': attribute type 49 has an invalid length. [ 835.276433][T20320] netlink: 'syz.2.4089': attribute type 6 has an invalid length. [ 835.295279][T20320] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4089'. [ 835.370154][T20324] netlink: 'syz.1.4090': attribute type 10 has an invalid length. [ 836.336485][T20340] netlink: 'syz.2.4093': attribute type 5 has an invalid length. [ 836.344404][T20342] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4093'. [ 836.359637][T20342] bridge_slave_1: default FDB implementation only supports local addresses [ 836.522266][T20357] FAULT_INJECTION: forcing a failure. [ 836.522266][T20357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 836.555245][T20357] CPU: 1 PID: 20357 Comm: syz.2.4098 Not tainted syzkaller #0 [ 836.562780][T20357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 836.572867][T20357] Call Trace: [ 836.576190][T20357] [ 836.579150][T20357] dump_stack_lvl+0x188/0x24e [ 836.583861][T20357] ? show_regs_print_info+0x12/0x12 [ 836.589090][T20357] ? load_image+0x410/0x410 [ 836.593632][T20357] ? __lock_acquire+0x7ea0/0x7ea0 [ 836.598692][T20357] should_fail_ex+0x390/0x4c0 [ 836.603404][T20357] _copy_from_user+0x2c/0x170 [ 836.608107][T20357] __sys_bpf+0x2ea/0x780 [ 836.612387][T20357] ? bpf_link_show_fdinfo+0x380/0x380 [ 836.617830][T20357] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 836.624035][T20357] __x64_sys_bpf+0x78/0x90 [ 836.628512][T20357] do_syscall_64+0x4c/0xa0 [ 836.632955][T20357] ? clear_bhb_loop+0x60/0xb0 [ 836.637658][T20357] ? clear_bhb_loop+0x60/0xb0 [ 836.642375][T20357] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 836.648295][T20357] RIP: 0033:0x7f375e79e159 [ 836.652735][T20357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 836.672385][T20357] RSP: 002b:00007f375f5c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 836.680827][T20357] RAX: ffffffffffffffda RBX: 00007f375ea25fa0 RCX: 00007f375e79e159 [ 836.688821][T20357] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000005 [ 836.696820][T20357] RBP: 00007f375f5c8090 R08: 0000000000000000 R09: 0000000000000000 [ 836.704824][T20357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 836.712826][T20357] R13: 00007f375ea26038 R14: 00007f375ea25fa0 R15: 00007fff87af46a8 [ 836.720836][T20357] [ 837.117448][T20370] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4102'. [ 839.159006][T20426] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4121'. [ 841.128000][T20474] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4134'. [ 841.203025][T20477] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4135'. [ 843.486267][T20528] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.4148'. [ 844.901398][T20538] device netdevsim0 left promiscuous mode [ 845.020938][T20538] bridge0: port 4(netdevsim0) entered disabled state [ 845.296671][T20538] bridge0: port 3(hsr0) entered disabled state [ 845.382289][T20538] device bridge_slave_1 left promiscuous mode [ 845.415948][T20538] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.569200][T20538] device bridge_slave_0 left promiscuous mode [ 845.616616][T20538] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.119739][T20557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4154'. [ 848.273372][T20612] netlink: 'syz.2.4164': attribute type 3 has an invalid length. [ 848.347836][T20612] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4164'. [ 848.635697][T20621] netlink: 'syz.0.4166': attribute type 21 has an invalid length. [ 848.907727][T20624] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4168'. [ 849.988925][T20678] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4185'. [ 850.125486][T20678] device bridge_slave_1 entered promiscuous mode [ 850.697272][T20703] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4192'. [ 850.789065][T20705] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4193'. [ 850.815323][T20705] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4193'. [ 850.880269][T20709] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4193'. [ 850.910301][T20705] netlink: 'syz.4.4193': attribute type 21 has an invalid length. [ 850.933127][T20705] netlink: 'syz.4.4193': attribute type 4 has an invalid length. [ 850.967631][T20705] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4193'. [ 850.999580][T20710] netlink: 15203 bytes leftover after parsing attributes in process `syz.3.4194'. [ 851.027395][T20720] netlink: 'syz.4.4193': attribute type 21 has an invalid length. [ 851.048228][T20720] netlink: 'syz.4.4193': attribute type 4 has an invalid length. [ 851.159475][T20725] __nla_validate_parse: 1 callbacks suppressed [ 851.159515][T20725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4198'. [ 851.969465][T20730] netlink: 'syz.4.4203': attribute type 21 has an invalid length. [ 853.583196][T20754] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 854.774132][T20783] -1: renamed from syzkaller0 [ 854.816483][T20780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4212'. [ 855.871055][T20808] netlink: 'syz.3.4218': attribute type 21 has an invalid length. [ 856.099848][T20808] netlink: 'syz.3.4218': attribute type 29 has an invalid length. [ 856.177935][T20808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4218'. [ 856.247866][T20808] netlink: 'syz.3.4218': attribute type 29 has an invalid length. [ 856.335794][T20808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4218'. [ 857.800136][T20838] netlink: 3529 bytes leftover after parsing attributes in process `syz.1.4226'. [ 857.837266][T20838] netlink: 52477 bytes leftover after parsing attributes in process `syz.1.4226'. [ 858.006878][T20838] netlink: 71676 bytes leftover after parsing attributes in process `syz.1.4226'. [ 858.879389][ T4279] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 860.694835][T20866] netlink: 'syz.1.4233': attribute type 21 has an invalid length. [ 860.746482][T20871] netlink: 'syz.1.4233': attribute type 29 has an invalid length. [ 860.807923][T20871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4233'. [ 861.230759][T20871] netlink: 'syz.1.4233': attribute type 29 has an invalid length. [ 861.260818][T20871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4233'. [ 861.690774][T20884] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4237'. [ 861.921459][T20886] tap0: tun_chr_ioctl cmd 2147767520 [ 865.048191][T20929] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4258'. [ 865.140919][T20930] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4258'. [ 865.473494][T20938] netlink: 'syz.2.4249': attribute type 29 has an invalid length. [ 865.515450][T20938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4249'. [ 865.639302][T20934] netlink: 'syz.2.4249': attribute type 21 has an invalid length. [ 865.686123][T20935] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4260'. [ 865.735640][T20938] netlink: 'syz.2.4249': attribute type 29 has an invalid length. [ 865.754186][T20938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4249'. [ 867.107120][T20953] netlink: 'syz.3.4253': attribute type 2 has an invalid length. [ 867.184958][T20953] device .*! entered promiscuous mode [ 868.142927][T20975] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4264'. [ 868.237901][T20978] netlink: 'syz.0.4265': attribute type 2 has an invalid length. [ 868.307692][T20978] netlink: 'syz.0.4265': attribute type 1 has an invalid length. [ 868.349702][T20979] netlink: 'syz.0.4265': attribute type 1 has an invalid length. [ 868.415202][T20979] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.4265'. [ 868.765278][T20991] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4268'. [ 868.873623][T20991] team0: Port device team_slave_0 removed [ 868.889681][T20991] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 868.913432][T20986] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4267'. [ 868.987660][T20992] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4267'. [ 869.774538][T21012] netlink: 'syz.2.4273': attribute type 2 has an invalid length. [ 869.845444][T21012] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4273'. [ 869.977543][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.983915][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.995755][T21032] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.4278'. [ 871.043690][T21032] netlink: 6324 bytes leftover after parsing attributes in process `syz.4.4278'. [ 871.083822][T21032] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4278'. [ 871.255210][T21033] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.4278'. [ 871.485721][ T12] rcu_tasks_wait_gp: rcu_tasks grace period 17 is 1031 jiffies old. [ 872.351729][T21051] netlink: 'syz.3.4284': attribute type 2 has an invalid length. [ 872.634290][T21071] netlink: 'syz.4.4288': attribute type 39 has an invalid length. [ 873.527561][T21102] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4297'. [ 873.696632][T21108] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.4298'. [ 873.774506][T21108] netlink: zone id is out of range [ 873.795364][T21108] netlink: zone id is out of range [ 873.817602][T21108] netlink: zone id is out of range [ 873.836933][T21108] netlink: zone id is out of range [ 873.843081][T21108] netlink: get zone limit has 8 unknown bytes [ 874.798043][T21142] : port 1(ip6gretap0) entered blocking state [ 874.808205][T21142] : port 1(ip6gretap0) entered disabled state [ 874.817960][T21142] device ip6gretap0 entered promiscuous mode [ 875.707558][T21161] netlink: 'syz.1.4311': attribute type 21 has an invalid length. [ 875.801360][T21177] netlink: 'syz.1.4311': attribute type 1 has an invalid length. [ 875.825989][T21161] IPv6: NLM_F_CREATE should be specified when creating new route [ 875.872799][T21161] IPv6: Can't replace route, no match found [ 875.890703][T21173] netlink: 'syz.3.4313': attribute type 3 has an invalid length. [ 875.907072][T21177] netlink: 14207 bytes leftover after parsing attributes in process `syz.1.4311'. [ 875.952127][T21173] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4313'. [ 875.993737][T21161] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4311'. [ 877.682888][T21215] netlink: 15487 bytes leftover after parsing attributes in process `syz.4.4324'. [ 877.781753][T21217] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.4324'. [ 877.865891][T21215] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.4324'. [ 878.378219][T21223] netlink: 68520 bytes leftover after parsing attributes in process `syz.1.4326'. [ 878.504337][T21230] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 878.547712][T21230] syzkaller1: linktype set to 5 [ 878.583348][T21232] netlink: 'syz.0.4329': attribute type 27 has an invalid length. [ 878.626988][T21232] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4329'. [ 878.923813][T21244] netlink: 'syz.3.4330': attribute type 10 has an invalid length. [ 878.953141][T21251] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.4333'. [ 879.216095][T21258] netlink: 'syz.4.4336': attribute type 10 has an invalid length. [ 879.249641][T21258] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4336'. [ 879.401132][T21263] netlink: 'syz.2.4338': attribute type 10 has an invalid length. [ 879.412985][T21262] netlink: 'syz.0.4337': attribute type 11 has an invalid length. [ 879.480120][T21263] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 879.544942][T21262] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4337'. [ 879.810023][T21273] netlink: 'syz.3.4340': attribute type 10 has an invalid length. [ 879.860707][T21273] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4340'. [ 879.906538][T21273] device team0 entered promiscuous mode [ 879.942598][T21273] device team_slave_0 entered promiscuous mode [ 879.982046][T21273] device team_slave_1 entered promiscuous mode [ 879.995807][T21259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 880.057522][T21273] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 880.755595][T21282] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.4341'. [ 881.016176][T21298] netlink: 'syz.4.4346': attribute type 10 has an invalid length. [ 881.034758][T21298] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4346'. [ 881.065637][T21298] device ipvlan1 entered promiscuous mode [ 881.106803][T21298] bridge0: port 3(ipvlan1) entered blocking state [ 881.135761][T21298] bridge0: port 3(ipvlan1) entered disabled state [ 881.171721][T21298] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 881.846490][T21321] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 881.951809][T21318] netlink: 'syz.3.4352': attribute type 21 has an invalid length. [ 882.098517][T21326] netlink: 'syz.1.4354': attribute type 21 has an invalid length. [ 882.126913][T21326] IPv6: NLM_F_CREATE should be specified when creating new route [ 882.196073][T21326] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 882.203707][T21326] IPv6: NLM_F_CREATE should be set when creating new route [ 882.211626][T21326] IPv6: NLM_F_CREATE should be set when creating new route [ 882.219336][T21326] IPv6: NLM_F_CREATE should be set when creating new route [ 882.634514][T21344] netlink: 'syz.4.4361': attribute type 21 has an invalid length. [ 884.843656][T21373] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4367'. [ 884.854260][T21373] device team_slave_0 left promiscuous mode [ 884.898847][T21373] team0: Port device team_slave_0 removed [ 884.905709][T21373] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 887.098218][T21394] netlink: 'syz.2.4372': attribute type 39 has an invalid length. [ 887.243366][T21402] netlink: 'syz.3.4383': attribute type 1 has an invalid length. [ 887.254703][T21402] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.4383'. [ 887.345833][T21400] netlink: 'syz.4.4373': attribute type 10 has an invalid length. [ 887.399383][T21400] device bridge_slave_1 left promiscuous mode [ 887.409496][T21400] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.928813][T21419] netlink: 'syz.4.4376': attribute type 1 has an invalid length. [ 887.942361][T21419] netlink: 15998 bytes leftover after parsing attributes in process `syz.4.4376'. [ 888.908532][T21453] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.4384'. [ 889.258625][T21460] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.4386'. [ 889.326627][T21460] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 889.634076][T21463] IPv6: NLM_F_CREATE should be specified when creating new route [ 889.742846][T21463] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 889.750299][T21463] IPv6: NLM_F_CREATE should be set when creating new route [ 889.757758][T21463] IPv6: NLM_F_CREATE should be set when creating new route [ 889.765086][T21463] IPv6: NLM_F_CREATE should be set when creating new route [ 889.925115][T21466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 891.325231][T21489] netlink: 180 bytes leftover after parsing attributes in process `syz.1.4395'. [ 891.619740][T21496] device syzkaller0 left promiscuous mode [ 892.478429][T21524] netlink: 'syz.1.4401': attribute type 21 has an invalid length. [ 893.424068][T21534] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4404'. [ 893.465462][T21534] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4404'. [ 893.762566][T21546] netlink: 'syz.4.4408': attribute type 275 has an invalid length. [ 893.847531][T21547] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4409'. [ 893.859218][T21549] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4409'. [ 894.072745][T21557] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.4411'. [ 896.694892][T21612] netlink: 'syz.3.4426': attribute type 2 has an invalid length. [ 896.737868][T21612] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4426'. [ 896.833763][T21616] netlink: 'syz.3.4426': attribute type 2 has an invalid length. [ 896.858562][T21616] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4426'. [ 896.939297][T21622] netlink: 'syz.4.4428': attribute type 21 has an invalid length. [ 896.976364][T21622] netlink: 'syz.4.4428': attribute type 21 has an invalid length. [ 896.984264][T21622] netlink: 'syz.4.4428': attribute type 4 has an invalid length. [ 897.372260][T21635] netlink: 'syz.2.4433': attribute type 3 has an invalid length. [ 897.392140][T21635] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4433'. [ 897.423560][ T4279] Bluetooth: hci2: ISO packet for unknown connection handle 3848 [ 897.436328][T21635] netlink: 'syz.2.4433': attribute type 21 has an invalid length. [ 898.116223][T21656] netlink: 1030 bytes leftover after parsing attributes in process `syz.1.4439'. [ 898.169127][T21656] bridge: RTM_NEWNEIGH with invalid ether address [ 898.195296][T21657] netlink: 1030 bytes leftover after parsing attributes in process `syz.1.4439'. [ 898.219471][T21657] bridge: RTM_NEWNEIGH with invalid ether address [ 898.568781][T21668] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4442'. [ 898.613947][T21668] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 898.654134][T21671] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.4442'. [ 898.735874][T21668] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 898.740629][T21671] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 900.066188][T21697] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4451'. [ 900.127885][T21698] netlink: 'syz.3.4451': attribute type 10 has an invalid length. [ 900.209897][T21698] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4451'. [ 900.295767][T21699] device sit0 entered promiscuous mode [ 901.168231][T21715] netlink: 'syz.3.4456': attribute type 29 has an invalid length. [ 901.197864][T21719] netlink: 'syz.3.4456': attribute type 29 has an invalid length. [ 901.249392][T21715] netlink: 'syz.3.4456': attribute type 29 has an invalid length. [ 902.098078][T21732] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4463'. [ 902.119651][T21732] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4463'. [ 902.140626][T21732] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 903.220554][T21758] netlink: 'syz.4.4469': attribute type 21 has an invalid length. [ 903.419482][T21761] netlink: 'syz.4.4472': attribute type 10 has an invalid length. [ 903.452891][T21761] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4472'. [ 903.471874][T21761] ¥: port 1(team0) entered disabled state [ 903.505780][T21767] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.4470'. [ 903.513996][T21761] bridge0: port 2(team0) entered blocking state [ 903.548185][T21761] bridge0: port 2(team0) entered disabled state [ 903.590619][T21762] netlink: 'syz.4.4472': attribute type 10 has an invalid length. [ 903.636051][T21762] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4472'. [ 903.693174][T21782] netlink: 'syz.1.4484': attribute type 10 has an invalid length. [ 903.840667][T21782] team0: Device vxcan1 is of different type [ 904.258462][T21791] netlink: 'syz.4.4476': attribute type 21 has an invalid length. [ 905.138518][T21818] netlink: 'syz.3.4482': attribute type 10 has an invalid length. [ 905.234085][T21818] device vxcan1 entered promiscuous mode [ 905.254822][T21818] team0: Device vxcan1 is of different type [ 906.117807][T21839] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 906.124763][T21839] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 906.870363][T21872] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.4494'. [ 906.982993][T21872] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 907.569657][T21880] netlink: 'syz.0.4495': attribute type 2 has an invalid length. [ 907.662251][T21885] netlink: 'syz.4.4498': attribute type 10 has an invalid length. [ 907.681657][T21885] device macvlan0 entered promiscuous mode [ 907.707249][T21885] bond0: (slave macvlan0): Error -22 calling dev_set_mtu [ 908.588127][T21910] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4504'. [ 908.739358][T21916] netlink: 'syz.1.4506': attribute type 29 has an invalid length. [ 908.761422][T21916] netlink: 'syz.1.4506': attribute type 29 has an invalid length. [ 908.910670][T21923] netlink: 'syz.1.4506': attribute type 29 has an invalid length. [ 909.130351][T21916] device sit0 left promiscuous mode [ 909.691842][T21930] netlink: 'syz.0.4510': attribute type 10 has an invalid length. [ 909.704522][T21930] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4510'. [ 909.751213][T21936] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.4511'. [ 911.007500][T21979] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 911.048414][T21981] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.4524'. [ 911.958516][T22006] netlink: 'syz.3.4533': attribute type 21 has an invalid length. [ 912.016181][T22006] netlink: 'syz.3.4533': attribute type 20 has an invalid length. [ 914.513131][T22057] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4543'. [ 916.079969][T22113] netlink: 'syz.0.4558': attribute type 1 has an invalid length. [ 916.109174][T22113] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.4558'. [ 916.149309][T22118] netlink: 'syz.1.4561': attribute type 3 has an invalid length. [ 916.169863][T22118] netlink: 'syz.1.4561': attribute type 1 has an invalid length. [ 916.189210][T22118] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4561'. [ 916.552592][T22139] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.4565'. [ 916.627026][T22139] netlink: zone id is out of range [ 916.632388][T22139] netlink: zone id is out of range [ 916.641871][T22139] netlink: zone id is out of range [ 916.648533][T22139] netlink: zone id is out of range [ 916.654034][T22139] netlink: zone id is out of range [ 916.663483][T22139] netlink: zone id is out of range [ 916.670575][T22139] netlink: zone id is out of range [ 916.680341][T22139] netlink: zone id is out of range [ 916.747194][T22139] netlink: del zone limit has 4 unknown bytes [ 916.932149][T22149] netlink: 'syz.2.4568': attribute type 21 has an invalid length. [ 916.954017][T22149] netlink: 'syz.2.4568': attribute type 5 has an invalid length. [ 917.932417][T22172] netlink: 'syz.1.4575': attribute type 21 has an invalid length. [ 917.978199][ T4279] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 918.001224][T22173] netlink: 'syz.4.4574': attribute type 3 has an invalid length. [ 918.019353][T22173] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4574'. [ 918.039068][T22175] netlink: 'syz.2.4576': attribute type 29 has an invalid length. [ 918.059340][T22173] netlink: 'syz.4.4574': attribute type 3 has an invalid length. [ 918.071093][T22175] netlink: 'syz.2.4576': attribute type 29 has an invalid length. [ 918.105376][T22173] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4574'. [ 918.107314][T22176] netlink: 'syz.4.4574': attribute type 3 has an invalid length. [ 918.145510][T22177] netlink: 'syz.2.4576': attribute type 29 has an invalid length. [ 918.196537][T22176] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4574'. [ 918.765684][T22189] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.4579'. [ 920.332566][T22244] netlink: 'syz.4.4588': attribute type 21 has an invalid length. [ 920.352831][T22244] netlink: 'syz.4.4588': attribute type 1 has an invalid length. [ 921.130117][T22260] netlink: 'syz.2.4593': attribute type 10 has an invalid length. [ 921.659622][T22260] team0: Port device geneve1 added [ 921.929726][T22287] sctp: [Deprecated]: syz.2.4600 (pid 22287) Use of int in max_burst socket option deprecated. [ 921.929726][T22287] Use struct sctp_assoc_value instead [ 921.992457][T22288] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4601'. [ 922.028734][T22287] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4600'. [ 925.329674][T22310] validate_nla: 3 callbacks suppressed [ 925.329692][T22310] netlink: 'syz.0.4604': attribute type 29 has an invalid length. [ 925.393910][T22310] netlink: 'syz.0.4604': attribute type 29 has an invalid length. [ 925.439779][T22313] netlink: 'syz.4.4605': attribute type 10 has an invalid length. [ 925.470494][T22313] team0: Device bridge0 is already an upper device of the team interface [ 925.534309][T22316] netlink: 'syz.0.4604': attribute type 29 has an invalid length. [ 925.562065][T22322] netlink: 'syz.2.4608': attribute type 39 has an invalid length. [ 926.072088][T22328] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.4610'. [ 927.301512][T22348] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.4613'. [ 927.317127][T22348] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.4613'. [ 927.330521][T22348] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4613'. [ 927.854414][T22368] mac80211_hwsim hwsim47 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 928.256231][T22379] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4622'. [ 928.434525][T22384] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4625'. [ 928.787709][T22397] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4628'. [ 928.835381][T22397] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4628'. [ 928.877128][T22402] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4628'. [ 928.995426][T22406] netlink: 'syz.1.4630': attribute type 10 has an invalid length. [ 929.041770][T22406] device dummy0 entered promiscuous mode [ 929.078575][T22406] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 931.244558][T22461] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4644'. [ 931.419605][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.426086][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.726452][ T5197] wlan1: Trigger new scan to find an IBSS to join [ 934.233724][T22562] netlink: 'syz.4.4671': attribute type 39 has an invalid length. [ 934.567382][T22565] netlink: 'syz.0.4673': attribute type 10 has an invalid length. [ 934.669150][T22565] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 934.769038][ T5199] wlan1: Trigger new scan to find an IBSS to join [ 935.031823][T22587] device netdevsim0 entered promiscuous mode [ 935.918137][T22578] delete_channel: no stack [ 935.924955][ T9877] wlan1: Creating new IBSS network, BSSID 0e:f8:bd:d2:c9:94 [ 937.301262][T22616] netlink: 'syz.3.4683': attribute type 10 has an invalid length. [ 937.348674][T22616] device macvlan0 entered promiscuous mode [ 937.440867][T22616] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 937.588088][T22624] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.4686'. [ 939.455888][T22664] netlink: 'syz.2.4698': attribute type 5 has an invalid length. [ 940.197600][T22688] netlink: 'syz.0.4704': attribute type 29 has an invalid length. [ 940.289736][T22688] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 940.602221][T22702] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4708'. [ 940.643352][T22702] ksmbd: Unknown IPC event: 10, ignore. [ 941.701241][T22722] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.4715'. [ 941.775306][T22722] netlink: 6332 bytes leftover after parsing attributes in process `syz.2.4715'. [ 941.827948][T22722] tc_dump_action: action bad kind [ 941.960960][T22734] netlink: 'syz.0.4717': attribute type 9 has an invalid length. [ 941.979902][T22734] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.4717'. [ 942.493705][T22758] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4722'. [ 942.654777][T22761] netlink: 'syz.3.4727': attribute type 10 has an invalid length. [ 943.165450][T22781] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4732'. [ 944.670517][T22822] netlink: 'syz.3.4740': attribute type 22 has an invalid length. [ 944.694954][T22822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4740'. [ 944.762931][T22827] netlink: 'syz.4.4741': attribute type 29 has an invalid length. [ 944.773419][T22826] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4741'. [ 944.834719][T22827] netlink: 'syz.4.4741': attribute type 29 has an invalid length. [ 944.961855][T22836] netlink: 'syz.4.4741': attribute type 29 has an invalid length. [ 945.036783][T22831] netlink: 'syz.4.4741': attribute type 29 has an invalid length. [ 945.053259][T22825] netlink: 'syz.4.4741': attribute type 29 has an invalid length. [ 945.913673][T22854] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4746'. [ 946.496358][T22870] netlink: 'syz.0.4751': attribute type 21 has an invalid length. [ 946.986679][T22887] netlink: 5427 bytes leftover after parsing attributes in process `syz.0.4755'. [ 947.000503][T22887] netlink: 52477 bytes leftover after parsing attributes in process `syz.0.4755'. [ 947.028370][T22887] netlink: 71676 bytes leftover after parsing attributes in process `syz.0.4755'. [ 948.613726][T22904] netlink: 'syz.4.4759': attribute type 21 has an invalid length. [ 948.635742][T22904] IPv6: NLM_F_CREATE should be specified when creating new route [ 948.675819][T22904] IPv6: Can't replace route, no match found [ 948.710187][T22907] netlink: 'syz.3.4760': attribute type 10 has an invalid length. [ 948.764491][T22907] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 948.860537][T22908] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4759'. [ 950.184879][ T4279] Bluetooth: hci1: unexpected event 0x05 length: 151 > 4 [ 950.859597][T22972] netlink: 'syz.3.4776': attribute type 9 has an invalid length. [ 950.973665][T22972] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.4776'. [ 951.422908][T22981] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4777'. [ 951.667988][T23004] tun0: tun_chr_ioctl cmd 2147767507 [ 951.790469][T23012] netlink: 192 bytes leftover after parsing attributes in process `syz.3.4784'. [ 952.028048][T23015] netlink: 'syz.1.4796': attribute type 3 has an invalid length. [ 952.763438][T23030] FAULT_INJECTION: forcing a failure. [ 952.763438][T23030] name failslab, interval 1, probability 0, space 0, times 0 [ 952.849103][T23030] CPU: 1 PID: 23030 Comm: syz.1.4787 Not tainted syzkaller #0 [ 952.856663][T23030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 952.866771][T23030] Call Trace: [ 952.870099][T23030] [ 952.873074][T23030] dump_stack_lvl+0x188/0x24e [ 952.877820][T23030] ? show_regs_print_info+0x12/0x12 [ 952.883080][T23030] ? load_image+0x410/0x410 [ 952.887649][T23030] ? __might_sleep+0xd0/0xd0 [ 952.892304][T23030] ? __lock_acquire+0x7ea0/0x7ea0 [ 952.897401][T23030] should_fail_ex+0x390/0x4c0 [ 952.902149][T23030] should_failslab+0x5/0x20 [ 952.906704][T23030] slab_pre_alloc_hook+0x59/0x300 [ 952.911785][T23030] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 952.917564][T23030] __kmem_cache_alloc_node+0x4f/0x270 [ 952.923006][T23030] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 952.928791][T23030] __kmalloc+0xa3/0x240 [ 952.933005][T23030] tomoyo_realpath_from_path+0xe2/0x5c0 [ 952.938645][T23030] ? tomoyo_domain+0xd2/0x120 [ 952.943380][T23030] ? tomoyo_path_number_perm+0x205/0x650 [ 952.949050][T23030] tomoyo_path_number_perm+0x22f/0x650 [ 952.954542][T23030] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 952.960032][T23030] ? ksys_write+0x1ce/0x260 [ 952.964595][T23030] ? common_file_perm+0x171/0x1c0 [ 952.969695][T23030] ? __fget_files+0x28/0x460 [ 952.974353][T23030] security_file_ioctl+0x6c/0xa0 [ 952.979372][T23030] __se_sys_ioctl+0x48/0x170 [ 952.984036][T23030] do_syscall_64+0x4c/0xa0 [ 952.988508][T23030] ? clear_bhb_loop+0x60/0xb0 [ 952.993215][T23030] ? clear_bhb_loop+0x60/0xb0 [ 952.997921][T23030] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 953.003842][T23030] RIP: 0033:0x7f3adbf9e159 [ 953.008289][T23030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 953.027932][T23030] RSP: 002b:00007f3adcdc0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 953.036377][T23030] RAX: ffffffffffffffda RBX: 00007f3adc226180 RCX: 00007f3adbf9e159 [ 953.044557][T23030] RDX: 0000200000000040 RSI: 00000000000089e0 RDI: 0000000000000008 [ 953.052552][T23030] RBP: 00007f3adcdc0090 R08: 0000000000000000 R09: 0000000000000000 [ 953.060587][T23030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 953.068586][T23030] R13: 00007f3adc226218 R14: 00007f3adc226180 R15: 00007ffe4b5e5c38 [ 953.076632][T23030] [ 953.094157][T23030] ERROR: Out of memory at tomoyo_realpath_from_path. [ 953.343077][T23042] netlink: 'syz.0.4794': attribute type 1 has an invalid length. [ 953.351904][T23042] netlink: 'syz.0.4794': attribute type 1 has an invalid length. [ 953.362226][T23042] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.4794'. [ 953.867239][T23047] netlink: 'syz.4.4797': attribute type 21 has an invalid length. [ 953.895191][T23047] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4797'. [ 953.909734][T23047] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4797'. [ 954.009626][T23061] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4801'. [ 954.022859][T23061] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4801'. [ 954.057111][T23063] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4801'. [ 954.316563][T23081] netlink: 68520 bytes leftover after parsing attributes in process `syz.2.4803'. [ 954.721145][T23088] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4805'. [ 954.730635][T23088] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4805'. [ 954.740256][T23087] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4805'. [ 955.443645][T23109] FAULT_INJECTION: forcing a failure. [ 955.443645][T23109] name failslab, interval 1, probability 0, space 0, times 0 [ 955.465391][T23109] CPU: 0 PID: 23109 Comm: syz.2.4810 Not tainted syzkaller #0 [ 955.472954][T23109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 955.483062][T23109] Call Trace: [ 955.486387][T23109] [ 955.489368][T23109] dump_stack_lvl+0x188/0x24e [ 955.494109][T23109] ? show_regs_print_info+0x12/0x12 [ 955.499459][T23109] ? load_image+0x410/0x410 [ 955.504046][T23109] ? __might_sleep+0xd0/0xd0 [ 955.508685][T23109] ? __lock_acquire+0x7ea0/0x7ea0 [ 955.513781][T23109] should_fail_ex+0x390/0x4c0 [ 955.518530][T23109] should_failslab+0x5/0x20 [ 955.523088][T23109] slab_pre_alloc_hook+0x59/0x300 [ 955.528184][T23109] ? tomoyo_encode+0x28a/0x550 [ 955.533011][T23109] __kmem_cache_alloc_node+0x4f/0x270 [ 955.538449][T23109] ? tomoyo_encode+0x28a/0x550 [ 955.543273][T23109] __kmalloc+0xa3/0x240 [ 955.547525][T23109] tomoyo_encode+0x28a/0x550 [ 955.552180][T23109] tomoyo_realpath_from_path+0x578/0x5c0 [ 955.557866][T23109] ? tomoyo_domain+0xd2/0x120 [ 955.562615][T23109] ? tomoyo_path_number_perm+0x205/0x650 [ 955.568284][T23109] tomoyo_path_number_perm+0x22f/0x650 [ 955.573777][T23109] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 955.579272][T23109] ? ksys_write+0x1ce/0x260 [ 955.583810][T23109] ? common_file_perm+0x171/0x1c0 [ 955.588898][T23109] ? __fget_files+0x28/0x460 [ 955.593532][T23109] security_file_ioctl+0x6c/0xa0 [ 955.598505][T23109] __se_sys_ioctl+0x48/0x170 [ 955.603135][T23109] do_syscall_64+0x4c/0xa0 [ 955.607581][T23109] ? clear_bhb_loop+0x60/0xb0 [ 955.612284][T23109] ? clear_bhb_loop+0x60/0xb0 [ 955.616994][T23109] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 955.622922][T23109] RIP: 0033:0x7f375e79e159 [ 955.627414][T23109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 955.647056][T23109] RSP: 002b:00007f375f586028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 955.655507][T23109] RAX: ffffffffffffffda RBX: 00007f375ea26180 RCX: 00007f375e79e159 [ 955.663505][T23109] RDX: 0000200000000040 RSI: 00000000000089e0 RDI: 0000000000000008 [ 955.671509][T23109] RBP: 00007f375f586090 R08: 0000000000000000 R09: 0000000000000000 [ 955.679511][T23109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 955.687540][T23109] R13: 00007f375ea26218 R14: 00007f375ea26180 R15: 00007fff87af46a8 [ 955.695556][T23109] [ 955.765243][T23109] ERROR: Out of memory at tomoyo_realpath_from_path. [ 955.804139][T23116] netlink: 'syz.0.4814': attribute type 22 has an invalid length. [ 955.832611][T23116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4814'. [ 955.896225][T23118] netlink: 'syz.1.4815': attribute type 10 has an invalid length. [ 956.004641][T23120] netlink: 'syz.0.4816': attribute type 10 has an invalid length. [ 956.516237][T23140] netlink: 'syz.3.4821': attribute type 39 has an invalid length. [ 957.235594][T23153] openvswitch: netlink: Flow key attr not present in new flow. [ 957.965274][T23171] netlink: 'syz.2.4830': attribute type 21 has an invalid length. [ 957.999530][T23171] netlink: 'syz.2.4830': attribute type 2 has an invalid length. [ 958.074730][T23174] netlink: 'syz.2.4830': attribute type 21 has an invalid length. [ 958.112742][T23174] netlink: 'syz.2.4830': attribute type 2 has an invalid length. [ 958.578553][T23180] FAULT_INJECTION: forcing a failure. [ 958.578553][T23180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 958.625191][T23180] CPU: 0 PID: 23180 Comm: syz.2.4831 Not tainted syzkaller #0 [ 958.632747][T23180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 958.642854][T23180] Call Trace: [ 958.646167][T23180] [ 958.649119][T23180] dump_stack_lvl+0x188/0x24e [ 958.653829][T23180] ? show_regs_print_info+0x12/0x12 [ 958.659058][T23180] ? load_image+0x410/0x410 [ 958.663638][T23180] ? __lock_acquire+0x7ea0/0x7ea0 [ 958.668699][T23180] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 958.674378][T23180] should_fail_ex+0x390/0x4c0 [ 958.679098][T23180] _copy_from_user+0x2c/0x170 [ 958.683804][T23180] kcm_ioctl+0x345/0xfd0 [ 958.688148][T23180] ? __kmem_cache_free+0xb6/0x200 [ 958.693201][T23180] ? tomoyo_path_number_perm+0x205/0x650 [ 958.698865][T23180] ? kcm_release+0x5a0/0x5a0 [ 958.703489][T23180] ? tomoyo_path_number_perm+0x5a4/0x650 [ 958.709170][T23180] ? tomoyo_path_number_perm+0x205/0x650 [ 958.714833][T23180] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 958.720330][T23180] sock_do_ioctl+0xfb/0x320 [ 958.724868][T23180] ? sock_show_fdinfo+0xb0/0xb0 [ 958.729768][T23180] sock_ioctl+0x48a/0x700 [ 958.734128][T23180] ? sock_poll+0x420/0x420 [ 958.738609][T23180] ? bpf_lsm_file_ioctl+0x5/0x10 [ 958.743576][T23180] ? security_file_ioctl+0x7c/0xa0 [ 958.748717][T23180] ? sock_poll+0x420/0x420 [ 958.753163][T23180] __se_sys_ioctl+0xfa/0x170 [ 958.757793][T23180] do_syscall_64+0x4c/0xa0 [ 958.762238][T23180] ? clear_bhb_loop+0x60/0xb0 [ 958.766939][T23180] ? clear_bhb_loop+0x60/0xb0 [ 958.771647][T23180] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 958.777572][T23180] RIP: 0033:0x7f375e79e159 [ 958.782011][T23180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 958.801647][T23180] RSP: 002b:00007f375c9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 958.810092][T23180] RAX: ffffffffffffffda RBX: 00007f375ea26270 RCX: 00007f375e79e159 [ 958.818139][T23180] RDX: 0000200000000040 RSI: 00000000000089e0 RDI: 0000000000000008 [ 958.826137][T23180] RBP: 00007f375c9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 958.834160][T23180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 958.842163][T23180] R13: 00007f375ea26308 R14: 00007f375ea26270 R15: 00007fff87af46a8 [ 958.850184][T23180] [ 960.903610][T23191] netlink: 'syz.2.4834': attribute type 13 has an invalid length. [ 960.924602][T23191] __nla_validate_parse: 7 callbacks suppressed [ 960.924643][T23191] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4834'. [ 961.353300][T23206] device syzkaller0 entered promiscuous mode [ 961.530982][T23215] netlink: 126288 bytes leftover after parsing attributes in process `syz.2.4840'. [ 961.543455][T23211] netlink: 'syz.4.4839': attribute type 20 has an invalid length. [ 962.164724][T23232] FAULT_INJECTION: forcing a failure. [ 962.164724][T23232] name failslab, interval 1, probability 0, space 0, times 0 [ 962.195138][T23232] CPU: 0 PID: 23232 Comm: syz.1.4845 Not tainted syzkaller #0 [ 962.202686][T23232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 962.212797][T23232] Call Trace: [ 962.216122][T23232] [ 962.219104][T23232] dump_stack_lvl+0x188/0x24e [ 962.223871][T23232] ? show_regs_print_info+0x12/0x12 [ 962.229148][T23232] ? load_image+0x410/0x410 [ 962.233726][T23232] ? __might_sleep+0xd0/0xd0 [ 962.238372][T23232] ? __lock_acquire+0x7ea0/0x7ea0 [ 962.243509][T23232] should_fail_ex+0x390/0x4c0 [ 962.248261][T23232] should_failslab+0x5/0x20 [ 962.252819][T23232] slab_pre_alloc_hook+0x59/0x300 [ 962.257906][T23232] ? __local_bh_enable_ip+0x136/0x1c0 [ 962.263428][T23232] kmem_cache_alloc+0x56/0x2f0 [ 962.268262][T23232] ? kcm_ioctl+0x942/0xfd0 [ 962.272746][T23232] kcm_ioctl+0x942/0xfd0 [ 962.277050][T23232] ? tomoyo_path_number_perm+0x205/0x650 [ 962.282742][T23232] ? kcm_release+0x5a0/0x5a0 [ 962.287382][T23232] ? tomoyo_path_number_perm+0x5a4/0x650 [ 962.293079][T23232] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 962.298619][T23232] sock_do_ioctl+0xfb/0x320 [ 962.303184][T23232] ? sock_show_fdinfo+0xb0/0xb0 [ 962.308099][T23232] sock_ioctl+0x48a/0x700 [ 962.312582][T23232] ? sock_poll+0x420/0x420 [ 962.317064][T23232] ? bpf_lsm_file_ioctl+0x5/0x10 [ 962.322060][T23232] ? security_file_ioctl+0x7c/0xa0 [ 962.327226][T23232] ? sock_poll+0x420/0x420 [ 962.331696][T23232] __se_sys_ioctl+0xfa/0x170 [ 962.336366][T23232] do_syscall_64+0x4c/0xa0 [ 962.340841][T23232] ? clear_bhb_loop+0x60/0xb0 [ 962.345548][T23232] ? clear_bhb_loop+0x60/0xb0 [ 962.350261][T23232] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 962.356277][T23232] RIP: 0033:0x7f3adbf9e159 [ 962.360716][T23232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 962.380438][T23232] RSP: 002b:00007f3adcd9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 962.388903][T23232] RAX: ffffffffffffffda RBX: 00007f3adc226270 RCX: 00007f3adbf9e159 [ 962.396937][T23232] RDX: 0000200000000040 RSI: 00000000000089e0 RDI: 0000000000000008 [ 962.404935][T23232] RBP: 00007f3adcd9f090 R08: 0000000000000000 R09: 0000000000000000 [ 962.413022][T23232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 962.421021][T23232] R13: 00007f3adc226308 R14: 00007f3adc226270 R15: 00007ffe4b5e5c38 [ 962.429035][T23232] [ 967.075611][T23220] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.4842'. [ 967.085405][T23225] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.4842'. [ 967.105289][T23241] netlink: 'syz.4.4849': attribute type 10 has an invalid length. [ 967.113275][T23241] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.4849'. [ 967.789727][T23273] netlink: 'syz.1.4858': attribute type 2 has an invalid length. [ 967.798161][T23273] netlink: 'syz.1.4858': attribute type 1 has an invalid length. [ 967.807022][T23273] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.4858'. [ 969.175187][ T9839] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 970.638566][T23279] netlink: 'syz.2.4861': attribute type 4 has an invalid length. [ 970.679838][T23284] netlink: 'syz.4.4862': attribute type 21 has an invalid length. [ 970.802683][T23284] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4862'. [ 970.810417][T23289] netlink: 'syz.4.4862': attribute type 2 has an invalid length. [ 970.902098][T23289] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4862'. [ 971.055824][T23285] netlink: 'syz.4.4862': attribute type 21 has an invalid length. [ 971.086884][T23285] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4862'. [ 971.138879][T23299] netlink: 'syz.2.4864': attribute type 8 has an invalid length. [ 971.155832][T23296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 971.189025][T23299] netlink: 91080 bytes leftover after parsing attributes in process `syz.2.4864'. [ 971.754470][T23340] FAULT_INJECTION: forcing a failure. [ 971.754470][T23340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 971.958622][T23340] CPU: 1 PID: 23340 Comm: syz.4.4865 Not tainted syzkaller #0 [ 971.966186][T23340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 971.976289][T23340] Call Trace: [ 971.979614][T23340] [ 971.982581][T23340] dump_stack_lvl+0x188/0x24e [ 971.987328][T23340] ? show_regs_print_info+0x12/0x12 [ 971.992584][T23340] ? load_image+0x410/0x410 [ 971.997165][T23340] ? __lock_acquire+0x7ea0/0x7ea0 [ 972.002355][T23340] ? snprintf+0xe5/0x140 [ 972.006663][T23340] should_fail_ex+0x390/0x4c0 [ 972.011406][T23340] _copy_to_user+0x2c/0x130 [ 972.015968][T23340] simple_read_from_buffer+0xe3/0x150 [ 972.021387][T23340] proc_fail_nth_read+0x1a6/0x220 [ 972.026452][T23340] ? proc_fault_inject_write+0x310/0x310 [ 972.032138][T23340] ? fsnotify_perm+0x248/0x550 [ 972.036936][T23340] ? proc_fault_inject_write+0x310/0x310 [ 972.042593][T23340] vfs_read+0x2db/0x960 [ 972.046784][T23340] ? kernel_read+0x1e0/0x1e0 [ 972.051423][T23340] ? __fget_files+0x28/0x460 [ 972.056055][T23340] ? __fget_files+0x3fc/0x460 [ 972.060774][T23340] ? __fdget_pos+0x2ae/0x360 [ 972.065422][T23340] ? ksys_read+0x70/0x260 [ 972.069788][T23340] ksys_read+0x14d/0x260 [ 972.074070][T23340] ? vfs_write+0x9a0/0x9a0 [ 972.078521][T23340] ? lockdep_hardirqs_on+0x94/0x140 [ 972.083753][T23340] do_syscall_64+0x4c/0xa0 [ 972.088193][T23340] ? clear_bhb_loop+0x60/0xb0 [ 972.092898][T23340] ? clear_bhb_loop+0x60/0xb0 [ 972.097602][T23340] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 972.103522][T23340] RIP: 0033:0x7f320195e98e [ 972.107965][T23340] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 972.127607][T23340] RSP: 002b:00007f32027d3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 972.136062][T23340] RAX: ffffffffffffffda RBX: 00007f32027d46c0 RCX: 00007f320195e98e [ 972.144059][T23340] RDX: 000000000000000f RSI: 00007f32027d40a0 RDI: 000000000000000b [ 972.152054][T23340] RBP: 00007f32027d4090 R08: 0000000000000000 R09: 0000000000000000 [ 972.160045][T23340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 972.168130][T23340] R13: 00007f3201c26308 R14: 00007f3201c26270 R15: 00007ffe6f56a528 [ 972.176140][T23340] [ 972.316887][T23342] netlink: 'syz.2.4866': attribute type 3 has an invalid length. [ 972.402779][T23342] netlink: 'syz.2.4866': attribute type 1 has an invalid length. [ 972.472208][T23342] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.4866'. [ 973.058209][T23367] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4874'. [ 974.034124][T23386] netlink: 'syz.4.4880': attribute type 9 has an invalid length. [ 974.061655][T23386] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.4880'. [ 977.240198][T23424] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.4893'. [ 978.955648][T23460] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.4902'. [ 978.973905][T23460] netlink: zone id is out of range [ 978.996723][T23460] netlink: zone id is out of range [ 979.002089][T23460] netlink: zone id is out of range [ 979.053424][T23460] netlink: zone id is out of range [ 979.059121][T23460] netlink: zone id is out of range [ 979.064503][T23460] netlink: zone id is out of range [ 979.071283][T23460] netlink: get zone limit has 8 unknown bytes [ 979.109115][T23467] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 979.116517][T23467] IPv6: NLM_F_CREATE should be set when creating new route [ 979.123808][T23467] IPv6: NLM_F_CREATE should be set when creating new route [ 979.131156][T23467] IPv6: NLM_F_CREATE should be set when creating new route [ 979.181459][T23467] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 985.232053][T23559] netlink: 'syz.3.4925': attribute type 2 has an invalid length. [ 985.260233][T23559] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4925'. [ 985.990267][T23585] netlink: 'syz.4.4932': attribute type 29 has an invalid length. [ 986.050465][T23584] netlink: 'syz.4.4932': attribute type 29 has an invalid length. [ 986.160295][T23585] netlink: 'syz.4.4932': attribute type 29 has an invalid length. [ 986.665458][T23587] netlink: 'syz.4.4932': attribute type 29 has an invalid length. [ 986.851947][T23588] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.4932'. [ 988.468366][T23602] device syzkaller0 entered promiscuous mode [ 989.196433][ T4279] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 990.771128][T23655] netlink: 3529 bytes leftover after parsing attributes in process `syz.0.4946'. [ 990.795359][T23655] netlink: 52477 bytes leftover after parsing attributes in process `syz.0.4946'. [ 990.815243][T23655] netlink: 71676 bytes leftover after parsing attributes in process `syz.0.4946'. [ 992.848086][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.854465][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.018927][T23695] netlink: 'syz.3.4955': attribute type 9 has an invalid length. [ 994.084396][T23695] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.4955'. [ 994.362072][T23709] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.4958'. [ 994.604069][T23719] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.4960'. [ 994.733558][T23719] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1001.620064][T23752] netlink: 'syz.1.4970': attribute type 13 has an invalid length. [ 1001.635202][T23752] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4970'. [ 1002.173159][T23788] æ: port 1(team0) entered blocking state [ 1002.185357][T23788] æ: port 1(team0) entered disabled state [ 1002.252990][T23788] device team0 entered promiscuous mode [ 1002.351605][T23788] device team_slave_1 entered promiscuous mode [ 1002.402647][T23788] device virt_wifi0 entered promiscuous mode [ 1002.487839][T23792] device team0 left promiscuous mode [ 1002.493244][T23792] device team_slave_1 left promiscuous mode [ 1002.601891][T23792] device virt_wifi0 left promiscuous mode [ 1002.669924][T23792] æ: port 1(team0) entered disabled state [ 1003.939733][T23852] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.4984'. [ 1005.547201][T23852] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1005.573993][T23852] CPU: 1 PID: 23852 Comm: syz.0.4984 Not tainted syzkaller #0 [ 1005.581556][T23852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1005.591733][T23852] Call Trace: [ 1005.595070][T23852] [ 1005.598032][T23852] dump_stack_lvl+0x188/0x24e [ 1005.602771][T23852] ? show_regs_print_info+0x12/0x12 [ 1005.608115][T23852] ? load_image+0x410/0x410 [ 1005.612707][T23852] sysfs_warn_dup+0x8a/0xa0 [ 1005.617248][T23852] sysfs_do_create_link_sd+0xc0/0x110 [ 1005.622665][T23852] device_add+0x83b/0x1050 [ 1005.627129][T23852] wiphy_register+0x1d8b/0x2aa0 [ 1005.632030][T23852] ? cfg80211_event_work+0x40/0x40 [ 1005.637182][T23852] ? minstrel_ht_alloc+0x894/0xa20 [ 1005.642345][T23852] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1005.648457][T23852] ieee80211_register_hw+0x2e33/0x3b00 [ 1005.653968][T23852] ? ieee80211_register_hw+0xf61/0x3b00 [ 1005.659538][T23852] ? ieee80211_register_hw+0xf61/0x3b00 [ 1005.665120][T23852] ? ieee80211_tasklet_handler+0x20/0x20 [ 1005.670784][T23852] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1005.676709][T23852] ? __debug_object_init+0xed/0x440 [ 1005.682030][T23852] ? memset+0x1e/0x40 [ 1005.686041][T23852] ? __hrtimer_init+0x189/0x270 [ 1005.690924][T23852] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1005.696689][T23852] ? memcpy+0x3c/0x60 [ 1005.700711][T23852] hwsim_new_radio_nl+0xab7/0xc90 [ 1005.705780][T23852] genl_family_rcv_msg_doit+0x22f/0x350 [ 1005.711364][T23852] ? end_current_label_crit_section+0x170/0x170 [ 1005.717649][T23852] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1005.723583][T23852] ? bpf_lsm_capable+0x5/0x10 [ 1005.728294][T23852] ? security_capable+0x85/0xb0 [ 1005.733183][T23852] genl_rcv_msg+0x601/0x790 [ 1005.737751][T23852] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1005.743949][T23852] ? genl_bind+0x360/0x360 [ 1005.748395][T23852] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1005.754761][T23852] ? lock_acquire+0x226/0x4a0 [ 1005.759483][T23852] netlink_rcv_skb+0x1ef/0x440 [ 1005.764280][T23852] ? genl_bind+0x360/0x360 [ 1005.768728][T23852] ? netlink_ack+0x1160/0x1160 [ 1005.773535][T23852] ? down_read+0x1a8/0x2d0 [ 1005.778009][T23852] genl_rcv+0x24/0x40 [ 1005.782022][T23852] netlink_unicast+0x7ad/0x920 [ 1005.786826][T23852] netlink_sendmsg+0x8ad/0xbd0 [ 1005.791643][T23852] ? aa_sock_msg_perm+0x94/0x150 [ 1005.796621][T23852] ? netlink_getsockopt+0x550/0x550 [ 1005.801853][T23852] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1005.807439][T23852] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1005.812754][T23852] ? security_socket_sendmsg+0x7c/0xa0 [ 1005.818245][T23852] ? netlink_getsockopt+0x550/0x550 [ 1005.823475][T23852] ____sys_sendmsg+0x5ed/0x9a0 [ 1005.828272][T23852] ? iovec_from_user+0x270/0x360 [ 1005.833257][T23852] ? __sys_sendmsg_sock+0x30/0x30 [ 1005.838309][T23852] ? __import_iovec+0x306/0x510 [ 1005.843200][T23852] ? import_iovec+0x6f/0xa0 [ 1005.847746][T23852] ___sys_sendmsg+0x2a2/0x360 [ 1005.852461][T23852] ? __sys_sendmsg+0x2a0/0x2a0 [ 1005.857262][T23852] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1005.863284][T23852] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1005.869475][T23852] ? lockdep_hardirqs_on+0x94/0x140 [ 1005.874714][T23852] ? __se_sys_sendmsg+0xee/0x2b0 [ 1005.879683][T23852] ? kasan_check_range+0x13/0x290 [ 1005.884757][T23852] __se_sys_sendmsg+0x1c3/0x2b0 [ 1005.889639][T23852] ? __x64_sys_sendmsg+0x80/0x80 [ 1005.894604][T23852] ? lockdep_hardirqs_on+0x94/0x140 [ 1005.899854][T23852] ? __x64_sys_sendmsg+0x69/0x80 [ 1005.904838][T23852] do_syscall_64+0x4c/0xa0 [ 1005.909285][T23852] ? clear_bhb_loop+0x60/0xb0 [ 1005.913993][T23852] ? clear_bhb_loop+0x60/0xb0 [ 1005.918715][T23852] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1005.924635][T23852] RIP: 0033:0x7f6e4f59e159 [ 1005.929082][T23852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1005.948803][T23852] RSP: 002b:00007f6e503a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1005.957251][T23852] RAX: ffffffffffffffda RBX: 00007f6e4f826180 RCX: 00007f6e4f59e159 [ 1005.965253][T23852] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 1005.973257][T23852] RBP: 00007f6e4f63506b R08: 0000000000000000 R09: 0000000000000000 [ 1005.981261][T23852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1005.989281][T23852] R13: 00007f6e4f826218 R14: 00007f6e4f826180 R15: 00007ffe47fa0e28 [ 1005.997321][T23852] [ 1006.311747][T23867] netlink: 'syz.4.4986': attribute type 29 has an invalid length. [ 1006.496091][T23867] netlink: 'syz.4.4986': attribute type 29 has an invalid length. [ 1006.686991][T23863] netlink: 'syz.4.4986': attribute type 29 has an invalid length. [ 1009.466351][T23933] netlink: 'syz.3.5009': attribute type 21 has an invalid length. [ 1009.626284][T23941] netlink: 'syz.1.5012': attribute type 1 has an invalid length. [ 1009.644617][T23941] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.5012'. [ 1010.183962][T23961] netlink: 'syz.1.5021': attribute type 25 has an invalid length. [ 1010.215433][T23961] netlink: 'syz.1.5021': attribute type 25 has an invalid length. [ 1010.619413][T23979] netlink: 'syz.3.5029': attribute type 2 has an invalid length. [ 1010.659486][T23979] netlink: 'syz.3.5029': attribute type 8 has an invalid length. [ 1010.703457][T23979] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5029'. [ 1010.759191][T23985] netlink: 'syz.3.5029': attribute type 2 has an invalid length. [ 1010.781006][T23985] netlink: 'syz.3.5029': attribute type 8 has an invalid length. [ 1010.794425][T23985] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5029'. [ 1012.091474][T24023] netlink: 'syz.2.5050': attribute type 2 has an invalid length. [ 1012.141985][T24023] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.5050'. [ 1013.971589][T24096] netlink: 'syz.3.5081': attribute type 5 has an invalid length. [ 1014.021673][T24096] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5081'. [ 1014.349396][T24112] netlink: 'syz.0.5088': attribute type 3 has an invalid length. [ 1014.367523][T24112] netlink: 'syz.0.5088': attribute type 1 has an invalid length. [ 1014.385400][T24112] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.5088'. [ 1014.412591][T24117] netlink: 'syz.1.5090': attribute type 29 has an invalid length. [ 1014.442070][T24117] netlink: 'syz.1.5090': attribute type 29 has an invalid length. [ 1014.474639][T24120] netlink: 'syz.1.5090': attribute type 29 has an invalid length. [ 1014.879170][T24132] netlink: 'syz.0.5096': attribute type 29 has an invalid length. [ 1014.914060][T24132] netlink: 'syz.0.5096': attribute type 29 has an invalid length. [ 1014.939641][T24133] netlink: 'syz.0.5096': attribute type 29 has an invalid length. [ 1015.505111][T24160] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5109'. [ 1015.556052][T24160] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.563450][T24160] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.633579][T24160] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.640854][T24160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1015.648395][T24160] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.655609][T24160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1015.818554][T24160] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1016.799676][T24188] delete_channel: no stack [ 1017.758448][T24233] validate_nla: 1 callbacks suppressed [ 1017.758466][T24233] netlink: 'syz.2.5139': attribute type 10 has an invalid length. [ 1017.793577][T24233] team0: Device vxcan1 is of different type [ 1020.887558][T24252] netlink: 'syz.1.5147': attribute type 10 has an invalid length. [ 1020.951753][T24252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1020.982767][T24252] team0: Port device batadv0 added [ 1021.019932][T24255] netlink: 'syz.3.5148': attribute type 2 has an invalid length. [ 1021.045494][T24255] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5148'. [ 1022.466941][T24305] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.5167'. [ 1022.488884][T24303] netlink: 'syz.1.5166': attribute type 39 has an invalid length. [ 1025.248364][T24326] netlink: 'syz.0.5176': attribute type 4 has an invalid length. [ 1026.287832][T24368] netlink: 'syz.1.5193': attribute type 2 has an invalid length. [ 1026.353374][T24370] netlink: 'syz.0.5194': attribute type 1 has an invalid length. [ 1026.382154][T24370] netlink: 'syz.0.5194': attribute type 4 has an invalid length. [ 1026.399692][T24370] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.5194'. [ 1026.624012][T24381] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5199'. [ 1026.662462][T24381] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1026.691690][T24390] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.5203'. [ 1026.827680][T24387] device syzkaller0 entered promiscuous mode [ 1026.905944][T24395] netlink: 'syz.1.5204': attribute type 29 has an invalid length. [ 1027.093887][T24395] netlink: 'syz.1.5204': attribute type 29 has an invalid length. [ 1029.902746][T24398] netlink: 'syz.1.5204': attribute type 29 has an invalid length. [ 1029.995719][T24413] device syzkaller0 entered promiscuous mode [ 1032.401315][T24436] netlink: 'syz.4.5217': attribute type 10 has an invalid length. [ 1032.420023][T24436] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1032.465247][T24453] netlink: 'syz.2.5223': attribute type 27 has an invalid length. [ 1032.641885][T24457] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.5226'. [ 1032.655968][T24453] bond0: (slave bond_slave_0): Releasing backup interface [ 1033.822830][T24520] netlink: 'syz.3.5235': attribute type 10 has an invalid length. [ 1033.868945][T24520] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5235'. [ 1033.957569][T24520] device ipvlan1 entered promiscuous mode [ 1034.175643][T24520] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1034.368129][T24529] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.5237'. [ 1034.850594][T24537] netlink: 'syz.4.5240': attribute type 10 has an invalid length. [ 1034.929929][T24537] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1035.429302][T24552] netlink: 'syz.2.5250': attribute type 10 has an invalid length. [ 1035.479247][T24552] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5250'. [ 1035.545569][T24552] bridge0: port 3(ipvlan1) entered blocking state [ 1035.575956][T24552] bridge0: port 3(ipvlan1) entered disabled state [ 1035.632373][T24552] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1036.094368][T24574] delete_channel: no stack [ 1036.115208][T24574] delete_channel: no stack [ 1041.853929][T24576] device syzkaller0 entered promiscuous mode [ 1041.864384][T24582] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5258'. [ 1044.068143][T24586] device syzkaller0 entered promiscuous mode [ 1047.255134][T24631] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5276'. [ 1047.264323][T24631] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1047.283015][T24631] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1047.507223][T24639] device syzkaller0 entered promiscuous mode [ 1047.773500][T24645] netlink: 'syz.1.5283': attribute type 3 has an invalid length. [ 1047.787545][T24645] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5283'. [ 1048.442892][T24663] netlink: 'syz.1.5290': attribute type 3 has an invalid length. [ 1048.462176][T24663] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5290'. [ 1050.273218][T24661] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5290'. [ 1050.438910][T24665] netlink: 'syz.2.5292': attribute type 10 has an invalid length. [ 1050.569051][T24669] device syzkaller0 entered promiscuous mode [ 1050.685346][T24676] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.5296'. [ 1053.428294][T24692] netlink: 'syz.4.5301': attribute type 10 has an invalid length. [ 1054.184340][T24741] device syzkaller0 entered promiscuous mode [ 1054.287900][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.294271][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.349943][T24748] netlink: 'syz.2.5337': attribute type 3 has an invalid length. [ 1054.372568][T24748] netlink: 'syz.2.5337': attribute type 1 has an invalid length. [ 1054.399607][T24748] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.5337'. [ 1057.396286][T24763] device syzkaller0 entered promiscuous mode [ 1060.204533][T24786] netlink: 'syz.1.5341': attribute type 1 has an invalid length. [ 1060.212622][T24786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5341'. [ 1060.913493][T24828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5357'. [ 1060.982050][T24830] device syzkaller0 entered promiscuous mode [ 1061.071732][T24836] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1061.944244][T24871] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1061.990364][T24871] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1062.239229][T24882] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5382'. [ 1062.266956][T24882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5382'. [ 1062.782997][T24896] delete_channel: no stack [ 1063.759430][T24939] netlink: 'syz.0.5409': attribute type 3 has an invalid length. [ 1063.767759][T24939] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.5409'. [ 1063.982504][T24950] tun0: tun_chr_ioctl cmd 1074025694 [ 1064.534035][T24975] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1064.587466][T24975] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1067.930727][T25010] netlink: 'syz.4.5439': attribute type 2 has an invalid length. [ 1068.124581][T25019] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1068.171704][T25019] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1068.793133][T25037] device syzkaller0 entered promiscuous mode [ 1071.725246][T25059] netlink: 'syz.1.5461': attribute type 10 has an invalid length. [ 1071.818481][T25059] team0: Device hsr_slave_0 failed to register rx_handler [ 1072.127281][T25072] netlink: 3554 bytes leftover after parsing attributes in process `syz.1.5466'. [ 1072.196854][T25082] netlink: 'syz.3.5468': attribute type 29 has an invalid length. [ 1072.223066][T25070] device syzkaller0 entered promiscuous mode [ 1072.231787][T25075] tun0: tun_chr_ioctl cmd 1074025694 [ 1072.257807][T25082] netlink: 'syz.3.5468': attribute type 29 has an invalid length. [ 1072.364795][T25083] netlink: 'syz.3.5468': attribute type 29 has an invalid length. [ 1074.959053][T25094] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1074.974174][T25094] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1074.998255][T25111] netlink: 'syz.3.5479': attribute type 10 has an invalid length. [ 1076.043553][T25142] netlink: 'syz.4.5493': attribute type 2 has an invalid length. [ 1076.095593][T25142] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5493'. [ 1076.366328][T25148] device syzkaller0 entered promiscuous mode [ 1076.420454][T25158] netlink: 'syz.1.5500': attribute type 3 has an invalid length. [ 1076.429139][T25158] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5500'. [ 1076.493562][T25153] netlink: 'syz.0.5497': attribute type 10 has an invalid length. [ 1076.507897][T25153] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5497'. [ 1076.610028][T25153] team0: Port device virt_wifi0 removed [ 1079.157945][T25163] device sit0 entered promiscuous mode [ 1079.191605][T25171] netlink: 'syz.3.5504': attribute type 2 has an invalid length. [ 1079.199853][T25171] netlink: 119 bytes leftover after parsing attributes in process `syz.3.5504'. [ 1079.874362][T25209] netlink: 'syz.0.5518': attribute type 3 has an invalid length. [ 1079.936256][T25209] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5518'. [ 1080.138224][T25214] device sit0 entered promiscuous mode [ 1081.145381][T25242] netlink: 160 bytes leftover after parsing attributes in process `syz.3.5532'. [ 1081.291047][T25248] delete_channel: no stack [ 1081.440773][T25254] netlink: 'syz.3.5536': attribute type 2 has an invalid length. [ 1081.644477][T25263] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.5540'. [ 1081.858051][T25268] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5542'. [ 1082.309192][T25287] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.5550'. [ 1083.330815][T25311] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5562'. [ 1083.336759][T25309] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5561'. [ 1083.366980][T25315] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.5563'. [ 1083.380301][T25315] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.5563'. [ 1083.893527][T25338] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1083.928890][T25338] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1084.110333][T25346] device sit0 entered promiscuous mode [ 1084.492353][T25351] netlink: 'syz.4.5579': attribute type 39 has an invalid length. [ 1085.477951][T25389] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1085.530905][T25389] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1085.758694][T25398] netlink: 'syz.3.5597': attribute type 10 has an invalid length. [ 1085.786085][T25398] __nla_validate_parse: 2 callbacks suppressed [ 1085.786105][T25398] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5597'. [ 1085.861247][T25404] netlink: 'syz.0.5598': attribute type 2 has an invalid length. [ 1085.878186][T25404] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.5598'. [ 1086.541611][T25422] device syzkaller0 left promiscuous mode [ 1086.659376][T25428] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1086.699243][T25428] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1086.789463][T25430] netlink: 'syz.3.5611': attribute type 10 has an invalid length. [ 1086.817903][T25430] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5611'. [ 1087.529268][T25456] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.5622'. [ 1087.546251][T25456] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1087.882412][T25465] netlink: 'syz.2.5627': attribute type 10 has an invalid length. [ 1087.905145][T25465] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5627'. [ 1087.925228][T25465] device hsr0 entered promiscuous mode [ 1087.940386][T25465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1087.972890][T25465] bridge0: port 3(hsr0) entered blocking state [ 1087.982120][T25477] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.5632'. [ 1087.995146][T25465] bridge0: port 3(hsr0) entered disabled state [ 1088.003692][T25465] bridge0: port 3(hsr0) entered blocking state [ 1088.010035][T25465] bridge0: port 3(hsr0) entered forwarding state [ 1088.096219][T25481] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1088.123025][T25481] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1088.480456][T25486] netlink: 'syz.2.5635': attribute type 6 has an invalid length. [ 1089.207835][T25511] netlink: 'syz.4.5646': attribute type 10 has an invalid length. [ 1089.221299][T25511] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5646'. [ 1089.239025][T25511] device hsr0 entered promiscuous mode [ 1089.266567][T25511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1089.280775][T25511] bridge0: port 3(hsr0) entered blocking state [ 1089.296368][T25511] bridge0: port 3(hsr0) entered disabled state [ 1089.342848][T25520] netlink: 'syz.0.5650': attribute type 3 has an invalid length. [ 1089.365769][T25520] netlink: 'syz.0.5650': attribute type 6 has an invalid length. [ 1089.385241][T25520] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.5650'. [ 1089.506519][T25527] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5653'. [ 1089.699634][T25534] delete_channel: no stack [ 1089.710656][T25534] delete_channel: no stack [ 1090.403102][T25543] device syzkaller0 entered promiscuous mode [ 1090.445405][T25554] netlink: 'syz.1.5663': attribute type 10 has an invalid length. [ 1090.463780][T25554] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5663'. [ 1090.473183][T25554] device hsr0 entered promiscuous mode [ 1090.483854][T25554] bridge0: port 3(hsr0) entered blocking state [ 1090.493048][T25554] bridge0: port 3(hsr0) entered disabled state [ 1090.506551][T25554] bridge0: port 3(hsr0) entered blocking state [ 1090.512872][T25554] bridge0: port 3(hsr0) entered forwarding state [ 1092.188708][T25573] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.5671'. [ 1093.810511][T25563] netlink: 'syz.4.5667': attribute type 2 has an invalid length. [ 1093.819551][T25563] netlink: 'syz.4.5667': attribute type 4 has an invalid length. [ 1093.829116][T25563] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5667'. [ 1094.049666][T25580] netlink: 'syz.1.5675': attribute type 1 has an invalid length. [ 1094.075305][T25580] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.5675'. [ 1094.240097][T25590] netlink: 'syz.0.5676': attribute type 39 has an invalid length. [ 1094.260644][T25590] device macvlan0 entered promiscuous mode [ 1094.277504][T25590] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1094.298626][T25590] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1094.673004][T25602] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5682'. [ 1094.735748][T25602] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5682'. [ 1094.757309][T25603] netlink: 209608 bytes leftover after parsing attributes in process `syz.0.5683'. [ 1095.394417][T25621] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.5687'. [ 1095.483264][T25623] device syzkaller0 entered promiscuous mode [ 1095.541060][T25619] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1095.629240][T25619] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1095.926152][T25634] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1095.979597][T25634] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1096.036752][T25621] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1096.564542][T25653] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5696'. [ 1098.431941][T25653] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5696'. [ 1098.562618][T25655] netlink: 'syz.3.5698': attribute type 21 has an invalid length. [ 1098.570643][T25655] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5698'. [ 1098.847824][T25660] netlink: 'syz.2.5700': attribute type 19 has an invalid length. [ 1098.967356][T25665] netlink: 'syz.2.5700': attribute type 14 has an invalid length. [ 1099.018029][T25665] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5700'. [ 1099.717484][T25677] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1099.752495][T25677] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1099.934794][T25679] netlink: 'syz.1.5707': attribute type 10 has an invalid length. [ 1100.266761][T25679] 8021q: adding VLAN 0 to HW filter on device team0 [ 1100.415955][T25679] device team0 entered promiscuous mode [ 1100.422203][T25679] device team_slave_1 entered promiscuous mode [ 1100.462659][T25679] device batadv0 entered promiscuous mode [ 1100.466823][T16633] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1100.478823][T16633] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1100.570661][T25679] bond0: (slave team0): Enslaving as an active interface with an up link [ 1100.651886][T25685] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1100.736196][T25685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1100.780341][T25693] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5710'. [ 1100.822114][T25693] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5710'. [ 1101.073107][T25700] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1101.092465][T25700] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1101.893828][T25712] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1102.002919][T25712] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1103.344752][T25741] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1103.371486][T25741] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1105.648231][T25761] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1105.684494][T25761] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1105.707269][T25760] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1105.746677][T25766] netlink: 'syz.3.5732': attribute type 3 has an invalid length. [ 1105.763874][T25766] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.5732'. [ 1105.769369][T25760] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1105.832520][T25767] netlink: 'syz.0.5731': attribute type 10 has an invalid length. [ 1105.976515][T25767] bridge0: port 2(bridge_slave_1) entered blocking state [ 1105.984836][T25767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1105.996363][T25767] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.004904][T25767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1106.109989][T25767] team0: Port device bridge0 added [ 1106.165631][T16633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1107.114254][T25781] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1107.171493][T25781] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1108.201720][T25813] netlink: 16046 bytes leftover after parsing attributes in process `syz.2.5744'. [ 1110.495249][T25791] delete_channel: no stack [ 1110.711433][T25815] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5745'. [ 1110.798606][T25826] netlink: 'syz.4.5749': attribute type 10 has an invalid length. [ 1110.809626][T25826] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5749'. [ 1110.823086][T25826] bond0: (slave bridge0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1110.851224][T25826] bridge0: port 3(hsr0) entered blocking state [ 1110.857655][T25826] bridge0: port 3(hsr0) entered listening state [ 1110.864255][T25826] bridge0: port 2(team0) entered blocking state [ 1110.870736][T25826] bridge0: port 2(team0) entered listening state [ 1110.877464][T25826] bridge0: port 1(bridge_slave_0) entered blocking state [ 1110.884715][T25826] bridge0: port 1(bridge_slave_0) entered listening state [ 1110.917026][T25826] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1111.036654][T25835] netlink: 'syz.1.5748': attribute type 10 has an invalid length. [ 1111.211766][T25840] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1111.240547][T25840] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1111.973598][T25856] netlink: 'syz.1.5758': attribute type 25 has an invalid length. [ 1111.989326][T25856] netlink: 'syz.1.5758': attribute type 29 has an invalid length. [ 1112.000917][T25859] netlink: 'syz.4.5757': attribute type 16 has an invalid length. [ 1112.022026][T25859] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5757'. [ 1112.042781][T25856] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5758'. [ 1112.309450][T25871] netlink: 'syz.4.5762': attribute type 13 has an invalid length. [ 1112.319726][T25871] netlink: 'syz.4.5762': attribute type 14 has an invalid length. [ 1112.329425][T25871] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5762'. [ 1112.362713][T25871] netlink: 65023 bytes leftover after parsing attributes in process `syz.4.5762'. [ 1114.237692][T25926] netlink: 'syz.4.5780': attribute type 17 has an invalid length. [ 1114.265874][T25926] netlink: 'syz.4.5780': attribute type 16 has an invalid length. [ 1114.302785][T25926] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5780'. [ 1114.927517][T25931] netlink: 'syz.2.5782': attribute type 10 has an invalid length. [ 1114.967295][T15249] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1114.977760][T15249] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1114.986787][T15249] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1114.996763][T15249] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1115.004492][T15249] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1115.013293][T15249] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1115.147102][T25931] 8021q: adding VLAN 0 to HW filter on device team0 [ 1115.199643][T25931] bond0: (slave team0): Enslaving as an active interface with an up link [ 1115.519286][T25941] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5784'. [ 1115.580778][T25941] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5784'. [ 1115.610150][T25941] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5784'. [ 1115.795745][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.802135][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.853833][ T9877] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.923778][T25941] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5784'. [ 1116.126037][ T9877] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.334772][ T9877] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.531464][ T9877] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.850660][T25937] chnl_net:caif_netlink_parms(): no params data found [ 1116.997904][T25979] netlink: 'syz.4.5792': attribute type 21 has an invalid length. [ 1117.009278][T25979] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5792'. [ 1117.085394][ T4279] Bluetooth: hci1: command 0x0409 tx timeout [ 1117.467487][T25937] bridge0: port 1(bridge_slave_0) entered blocking state [ 1117.525515][T25937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.601438][T25937] device bridge_slave_0 entered promiscuous mode [ 1117.664969][T25937] bridge0: port 2(bridge_slave_1) entered blocking state [ 1117.672151][T25937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.895692][T25937] device bridge_slave_1 entered promiscuous mode [ 1118.166105][T25937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1118.263197][T25937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1118.538781][T25937] team0: Port device team_slave_0 added [ 1118.602500][T25937] team0: Port device team_slave_1 added [ 1119.174824][ T4279] Bluetooth: hci1: command 0x041b tx timeout [ 1121.245070][ T4279] Bluetooth: hci1: command 0x040f tx timeout [ 1121.792655][T25937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1121.803008][T25937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1121.833631][T25937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1121.875182][T26026] netlink: 'syz.0.5800': attribute type 21 has an invalid length. [ 1121.895723][T26026] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5800'. [ 1121.915629][T25937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1121.922653][T25937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1121.983950][T25937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1122.001434][ T9877] device 0 left promiscuous mode [ 1122.122309][T25937] device hsr_slave_0 entered promiscuous mode [ 1122.159109][T25937] device hsr_slave_1 entered promiscuous mode [ 1122.173324][T25937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1122.185750][T25937] Cannot create hsr debugfs directory [ 1122.191549][ T9877] device .*! left promiscuous mode [ 1122.475698][T26046] netlink: 'syz.0.5805': attribute type 21 has an invalid length. [ 1122.490191][T26046] netlink: 14530 bytes leftover after parsing attributes in process `syz.0.5805'. [ 1123.326704][ T4279] Bluetooth: hci1: command 0x0419 tx timeout [ 1123.963279][T25937] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1124.255516][T25937] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1124.288261][T25937] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1124.333275][T25937] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1124.411944][T26120] netlink: 'syz.2.5818': attribute type 29 has an invalid length. [ 1124.432304][T26112] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.5816'. [ 1124.615318][T26120] netlink: 'syz.2.5818': attribute type 29 has an invalid length. [ 1124.735951][T26129] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.5819'. [ 1124.779305][T26122] netlink: 'syz.2.5818': attribute type 29 has an invalid length. [ 1124.845623][ T9877] device hsr_slave_0 left promiscuous mode [ 1124.878311][ T9877] device hsr_slave_1 left promiscuous mode [ 1124.886636][ T9877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1124.916938][ T9877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1124.924884][ T9877] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1125.127751][ T9877] device veth1_vlan left promiscuous mode [ 1125.133847][ T9877] device veth0_vlan left promiscuous mode [ 1125.967624][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 1125.976194][ C1] bridge0: port 2(team0) entered learning state [ 1125.982649][ C1] bridge0: port 3(hsr0) entered learning state [ 1126.236935][ T9877] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 1126.740505][ T9877] device team_slave_1 left promiscuous mode [ 1126.751734][ T9877] team0 (unregistering): Port device team_slave_1 removed [ 1126.826187][ T9877] device team_slave_0 left promiscuous mode [ 1126.833800][ T9877] team0 (unregistering): Port device team_slave_0 removed [ 1126.893100][ T9877] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1126.959436][ T9877] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1127.338109][ T9877] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1127.405689][ T9877] bond0 (unregistering): Released all slaves [ 1127.449885][T26146] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5822'. [ 1127.502293][T26150] netlink: 'syz.4.5823': attribute type 10 has an invalid length. [ 1127.511264][T26150] device macvlan0 left promiscuous mode [ 1127.523654][T26156] netlink: 'syz.1.5824': attribute type 10 has an invalid length. [ 1127.535462][T26156] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5824'. [ 1127.572529][T26156] bond0: (slave team0): Releasing backup interface [ 1127.615879][T26156] bridge0: port 4(team0) entered blocking state [ 1127.632499][T26156] bridge0: port 4(team0) entered disabled state [ 1127.767175][T25937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1127.854471][ T9875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1127.868269][ T9875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1127.902896][T25937] 8021q: adding VLAN 0 to HW filter on device team0 [ 1127.941196][ T9875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1127.958829][ T9875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1127.984130][ T9875] bridge0: port 1(bridge_slave_0) entered blocking state [ 1127.991421][ T9875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1128.040974][ T9875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1128.076253][ T9875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1128.111013][ T9875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1128.144424][ T9875] bridge0: port 2(bridge_slave_1) entered blocking state [ 1128.151769][ T9875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1128.198740][ T9875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1128.265188][ T9875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1128.351711][T23826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1128.416240][T26196] netlink: 'syz.0.5829': attribute type 2 has an invalid length. [ 1128.454480][T23826] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1128.511563][T23826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1128.556857][T23826] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1128.596180][T23826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1128.674079][T23826] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1128.734741][T25937] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1128.797541][T25937] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1128.876582][T26196] device .*! entered promiscuous mode [ 1128.911974][T26198] netlink: 'syz.2.5832': attribute type 21 has an invalid length. [ 1128.933967][T26198] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5832'. [ 1128.969757][T23826] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1128.990928][T23826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1129.038886][T23826] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1129.058416][T26205] device ipvlan1 left promiscuous mode [ 1129.916706][T26227] mac80211_hwsim hwsim47 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1130.186637][T23826] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1130.194346][T23826] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1130.261914][T25937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1130.380285][ T9877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1130.400721][ T9877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1130.491609][T23826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1130.519312][T23826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1130.572934][T25937] device veth0_vlan entered promiscuous mode [ 1130.607690][T23826] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1130.632524][T23826] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1130.683490][T25937] device veth1_vlan entered promiscuous mode [ 1130.834022][ T8862] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1130.868708][ T8862] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1130.881324][ T8862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1130.893569][ T8862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1130.921890][T25937] device veth0_macvtap entered promiscuous mode [ 1131.054653][T25937] device veth1_macvtap entered promiscuous mode [ 1131.395805][T26270] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5850'. [ 1131.451050][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1131.478838][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1131.561431][T26270] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5850'. [ 1131.979882][T26288] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1131.987079][T26288] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1133.729671][ T57] wlan1: Trigger new scan to find an IBSS to join [ 1134.442599][T25937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1134.453776][T25937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.463803][T25937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1134.474288][T25937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.484851][T25937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1134.495705][T25937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.507332][T25937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1134.514863][T26273] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5850'. [ 1134.561712][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1134.606023][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1134.636316][T25937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1134.653023][T25937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.663843][T25937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1134.699471][T25937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.720064][T25937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1134.752483][T25937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.788363][T25937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1134.817162][T25937] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.835246][T25937] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.856641][T26314] netlink: 'syz.4.5858': attribute type 29 has an invalid length. [ 1134.864614][T25937] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.873829][T25937] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.014755][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1135.038572][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1135.126578][T26304] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5855'. [ 1135.145732][T26314] netlink: 'syz.4.5858': attribute type 29 has an invalid length. [ 1135.439954][T26331] netlink: 'syz.4.5858': attribute type 29 has an invalid length. [ 1135.462883][T26331] netlink: 'syz.4.5858': attribute type 16 has an invalid length. [ 1135.484844][T26331] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5858'. [ 1136.281369][T26311] netlink: 'syz.4.5858': attribute type 29 has an invalid length. [ 1136.306838][T26315] netlink: 'syz.4.5858': attribute type 29 has an invalid length. [ 1136.398285][T26336] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5864'. [ 1136.601755][ T9877] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1136.643014][ T9877] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1136.685630][ T9877] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1136.764126][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1136.773737][ T9877] wlan1: Trigger new scan to find an IBSS to join [ 1136.798622][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1136.853945][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1137.050081][T26347] netlink: 'syz.4.5867': attribute type 13 has an invalid length. [ 1137.601188][T26358] device syzkaller0 entered promiscuous mode [ 1137.760911][ T9875] wlan1: Creating new IBSS network, BSSID 26:65:05:be:bb:fc [ 1138.018432][T26364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5871'. [ 1138.035589][T26364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5871'. [ 1138.055023][T26364] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5871'. [ 1138.118124][T26364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5871'. [ 1138.187477][T26362] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.5872'. [ 1138.216068][T26364] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5871'. [ 1138.246614][T26362] netlink: zone id is out of range [ 1138.253802][T26362] netlink: zone id is out of range [ 1138.345925][T26362] netlink: zone id is out of range [ 1138.417293][T26362] netlink: zone id is out of range [ 1138.632243][T26362] netlink: del zone limit has 4 unknown bytes [ 1140.593577][T26439] netlink: 'syz.4.5890': attribute type 3 has an invalid length. [ 1140.635955][T26439] __nla_validate_parse: 10 callbacks suppressed [ 1140.635973][T26439] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5890'. [ 1140.678186][T26443] netlink: 'syz.4.5890': attribute type 3 has an invalid length. [ 1140.725731][T26443] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5890'. [ 1140.754783][T26439] netlink: 'syz.4.5890': attribute type 3 has an invalid length. [ 1140.791925][T26439] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5890'. [ 1140.862546][T26443] netlink: 'syz.4.5890': attribute type 3 has an invalid length. [ 1140.928470][T26451] netlink: 'syz.4.5890': attribute type 3 has an invalid length. [ 1140.990863][T26447] netlink: 'syz.4.5890': attribute type 3 has an invalid length. [ 1141.039504][T26443] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5890'. [ 1141.105670][T26447] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5890'. [ 1141.160718][T26451] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5890'. [ 1141.325883][ C1] bridge0: port 3(hsr0) entered forwarding state [ 1141.332371][ C1] bridge0: topology change detected, propagating [ 1141.339364][ C1] bridge0: port 2(team0) entered forwarding state [ 1141.345880][ C1] bridge0: topology change detected, propagating [ 1141.352471][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1141.359753][ C1] bridge0: topology change detected, propagating [ 1142.588556][T26476] netlink: 'syz.4.5899': attribute type 21 has an invalid length. [ 1142.648221][T26476] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.5899'. [ 1143.819847][T26488] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5900'. [ 1144.830036][T26514] netlink: 'syz.3.5908': attribute type 7 has an invalid length. [ 1145.070512][T26523] netlink: 'syz.0.5911': attribute type 10 has an invalid length. [ 1145.079750][T26523] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5911'. [ 1145.089913][T26523] netlink: 'syz.0.5911': attribute type 10 has an invalid length. [ 1145.115695][T26523] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5911'. [ 1145.407186][T26532] can: request_module (can-proto-0) failed. [ 1147.349070][T26601] IPv6: pim6reg1: Disabled Multicast RS [ 1147.747341][T26625] device bond0 left promiscuous mode [ 1147.767374][T26625] device bond_slave_0 left promiscuous mode [ 1147.785227][T26625] device bond_slave_1 left promiscuous mode [ 1147.802780][T26625] device dummy0 left promiscuous mode [ 1147.840648][T26625] ¥: port 1(bond0) entered disabled state [ 1148.116256][T26637] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 1148.129983][T26637] dvmrp1: linktype set to 769 [ 1148.214000][T26637] dvmrp1: tun_chr_ioctl cmd 1074025673 [ 1148.255944][T26646] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 1148.289673][T26646] dvmrp1: linktype set to 769 [ 1148.482104][T26652] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5945'. [ 1148.589836][T26661] netlink: 'syz.4.5948': attribute type 29 has an invalid length. [ 1148.609059][T26661] netlink: 'syz.4.5948': attribute type 29 has an invalid length. [ 1148.629283][T26656] netlink: 'syz.4.5948': attribute type 29 has an invalid length. [ 1148.737555][T26660] device syzkaller0 entered promiscuous mode [ 1148.746024][T26664] netlink: 'syz.4.5948': attribute type 29 has an invalid length. [ 1148.768079][T26656] netlink: 'syz.4.5948': attribute type 29 has an invalid length. [ 1148.777773][T26670] netlink: 'syz.3.5951': attribute type 29 has an invalid length. [ 1148.800543][T26661] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.5948'. [ 1148.811396][T26670] netlink: 'syz.3.5951': attribute type 29 has an invalid length. [ 1148.828396][T26661] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.5948'. [ 1148.844284][T26656] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.5948'. [ 1148.861410][T26656] netlink: 'syz.4.5948': attribute type 29 has an invalid length. [ 1148.959047][T26667] netlink: 'syz.3.5951': attribute type 29 has an invalid length. [ 1152.902990][T26695] device sit0 left promiscuous mode [ 1152.931942][T26700] device sit0 entered promiscuous mode [ 1152.992933][T26710] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5965'. [ 1153.076914][T26710] team0: Port device team_slave_0 removed [ 1153.083239][T26710] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1153.278794][T26731] netlink: 'syz.4.5970': attribute type 10 has an invalid length. [ 1153.312885][T26731] bridge0: port 2(team0) entered disabled state [ 1153.393514][T26731] bridge0: port 2(team0) entered disabled state [ 1153.404398][T26731] device team_slave_1 left promiscuous mode [ 1153.448481][T26731] team0 (unregistering): Port device team_slave_1 removed [ 1153.471146][T26731] device geneve1 left promiscuous mode [ 1153.492325][T26731] team0 (unregistering): Port device geneve1 removed [ 1154.069445][T26741] netlink: 'syz.1.5973': attribute type 10 has an invalid length. [ 1154.176253][T26741] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1154.280760][T26747] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1154.371043][T26747] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1154.712823][T26766] netlink: 'syz.1.5980': attribute type 10 has an invalid length. [ 1154.741361][T26766] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5980'. [ 1154.835772][T26766] netlink: 'syz.1.5980': attribute type 10 has an invalid length. [ 1154.915377][T26766] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5980'. [ 1155.122861][T26776] netlink: 'syz.4.5984': attribute type 10 has an invalid length. [ 1155.164709][T26776] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1155.323794][T26770] device syzkaller0 entered promiscuous mode [ 1155.341718][T26784] netlink: 'syz.2.5987': attribute type 16 has an invalid length. [ 1155.350173][T26784] netlink: 'syz.2.5987': attribute type 3 has an invalid length. [ 1155.360152][T26784] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5987'. [ 1156.612555][T26808] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.5995'. [ 1158.652922][T26791] netlink: 'syz.0.5990': attribute type 10 has an invalid length. [ 1158.672949][T26791] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1158.688609][T26805] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1158.717341][T26805] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1158.755952][T26808] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1158.766051][T26814] netlink: 'syz.2.5996': attribute type 41 has an invalid length. [ 1158.785378][T26808] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1158.805867][T26808] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1159.165075][T26829] netlink: 'syz.4.6001': attribute type 10 has an invalid length. [ 1159.697695][T26848] netlink: 'syz.2.6007': attribute type 11 has an invalid length. [ 1159.745330][T26848] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.6007'. [ 1159.884477][T26845] device syzkaller0 entered promiscuous mode [ 1160.297306][T26852] netlink: 'syz.4.6009': attribute type 10 has an invalid length. [ 1160.337910][T26852] device wlan1 left promiscuous mode [ 1160.394742][T26852] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1160.459298][T26857] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1160.489585][T26857] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1162.980684][T26878] netlink: 'syz.4.6015': attribute type 10 has an invalid length. [ 1164.052344][T26888] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1164.073634][T26888] device syzkaller0 entered promiscuous mode [ 1166.331714][T26912] device syzkaller0 entered promiscuous mode [ 1166.433394][T26923] netlink: 'syz.1.6025': attribute type 10 has an invalid length. [ 1166.473961][T26923] bond0: (slave wlan1): Releasing backup interface [ 1166.486965][T26923] device wlan1 entered promiscuous mode [ 1166.495928][T26923] team0: Port device wlan1 added [ 1166.505940][T26925] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1166.535380][T26925] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1166.690401][T26934] netlink: 'syz.1.6028': attribute type 3 has an invalid length. [ 1166.706393][T26934] netlink: 'syz.1.6028': attribute type 1 has an invalid length. [ 1166.723473][T26934] netlink: 198452 bytes leftover after parsing attributes in process `syz.1.6028'. [ 1166.741838][T26944] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6028'. [ 1168.889182][T26929] mac80211_hwsim hwsim67 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1168.912518][T26944] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6028'. [ 1169.018496][T26945] device syzkaller0 entered promiscuous mode [ 1169.252018][ T30] tipc: Subscription rejected, illegal request [ 1172.689113][ T30] wlan1: Trigger new scan to find an IBSS to join [ 1172.828517][T26961] IPv6: Can't replace route, no match found [ 1172.839275][T26975] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6038'. [ 1173.033164][T26999] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6043'. [ 1173.057839][T26994] netlink: 'syz.2.6043': attribute type 12 has an invalid length. [ 1173.091286][T26994] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6043'. [ 1173.176851][T27005] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1173.195394][T27005] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1173.210441][T27005] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1173.228674][T27004] netlink: 'syz.4.6047': attribute type 12 has an invalid length. [ 1173.290160][T27004] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6047'. [ 1173.423071][T27019] netlink: 'syz.3.6050': attribute type 29 has an invalid length. [ 1173.449833][T27019] netlink: 'syz.3.6050': attribute type 29 has an invalid length. [ 1174.765209][ T9875] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.783920][ T4279] Bluetooth: hci4: unexpected event 0x34 length: 15 > 6 [ 1174.786524][ T4279] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1174.804149][ T4279] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1174.812851][ T4279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1174.835493][ T4279] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1174.844194][ T4279] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1174.855267][ T4279] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1175.111205][ T9875] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.248377][T27068] netlink: 'syz.0.6062': attribute type 2 has an invalid length. [ 1175.285280][T27067] netlink: 'syz.0.6062': attribute type 2 has an invalid length. [ 1175.293120][T27067] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6062'. [ 1175.361669][T27068] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6062'. [ 1175.373560][ T9875] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.531178][ T9875] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.586717][T27074] netlink: 'syz.2.6065': attribute type 4 has an invalid length. [ 1175.594512][T27074] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6065'. [ 1175.604682][T27079] netlink: 'syz.3.6067': attribute type 3 has an invalid length. [ 1175.619485][T27079] netlink: 'syz.3.6067': attribute type 1 has an invalid length. [ 1175.632167][T27079] netlink: 198452 bytes leftover after parsing attributes in process `syz.3.6067'. [ 1175.633118][T27080] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6067'. [ 1175.717154][T27074] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1175.861190][T27080] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6067'. [ 1176.419327][T27094] netlink: 'syz.0.6068': attribute type 10 has an invalid length. [ 1176.516870][T27094] team0: Port device geneve1 added [ 1176.670026][T27054] chnl_net:caif_netlink_parms(): no params data found [ 1176.765170][ T30] wlan1: Trigger new scan to find an IBSS to join [ 1176.874490][ T57] wlan1: Creating new IBSS network, BSSID 7e:bb:8e:65:bd:22 [ 1176.925506][ T4279] Bluetooth: hci3: command 0x0409 tx timeout [ 1177.010735][T27054] bridge0: port 1(bridge_slave_0) entered blocking state [ 1177.019767][T27054] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.028416][T27054] device bridge_slave_0 entered promiscuous mode [ 1177.153158][T27054] bridge0: port 2(bridge_slave_1) entered blocking state [ 1177.161557][T27054] bridge0: port 2(bridge_slave_1) entered disabled state [ 1177.170434][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.176830][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.226344][T27054] device bridge_slave_1 entered promiscuous mode [ 1177.454836][T27054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1177.488646][T27054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1177.666332][T27054] team0: Port device team_slave_0 added [ 1177.686775][T27054] team0: Port device team_slave_1 added [ 1177.844828][T27054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1177.859887][T27054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1177.976730][T27054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1178.058542][T27054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1178.081538][T27054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1178.195126][T27054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1178.496944][T27054] device hsr_slave_0 entered promiscuous mode [ 1178.557048][T27054] device hsr_slave_1 entered promiscuous mode [ 1178.570652][T27054] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1178.602495][T27054] Cannot create hsr debugfs directory [ 1178.654717][T27167] __nla_validate_parse: 5 callbacks suppressed [ 1178.654739][T27167] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6085'. [ 1179.006306][ T4279] Bluetooth: hci3: command 0x041b tx timeout [ 1179.332336][T27190] delete_channel: no stack [ 1179.352689][T27190] delete_channel: no stack [ 1179.523302][ T9875] bond0: (slave wlan1): Releasing backup interface [ 1179.588541][T27188] bridge0: port 3(hsr0) entered disabled state [ 1179.595996][T27188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1179.605536][T27188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1179.764698][T27194] bridge0: port 4(team0) entered disabled state [ 1179.856890][T27194] bridge0: port 3(hsr0) entered disabled state [ 1179.882615][T27194] bridge0: port 2(bridge_slave_1) entered disabled state [ 1179.902380][T27194] device bridge_slave_0 left promiscuous mode [ 1179.914088][T27194] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.009080][T27204] tap0: tun_chr_ioctl cmd 1074025677 [ 1180.017832][T27197] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1180.036781][T27197] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1180.037566][T27204] tap0: linktype set to 776 [ 1180.055314][T27197] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1180.312433][ T9875] device hsr_slave_0 left promiscuous mode [ 1180.334844][ T9875] device hsr_slave_1 left promiscuous mode [ 1180.361991][ T9875] bridge0: port 3(hsr0) entered disabled state [ 1180.389408][ T9875] device bridge_slave_0 left promiscuous mode [ 1180.414848][ T9875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.533429][ T9875] device veth1_macvtap left promiscuous mode [ 1180.555222][ T9875] device veth0_macvtap left promiscuous mode [ 1180.561476][ T9875] device veth1_vlan left promiscuous mode [ 1180.590479][ T9875] device veth0_vlan left promiscuous mode [ 1181.085441][ T4279] Bluetooth: hci3: command 0x040f tx timeout [ 1181.547366][ T9875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1181.602028][ T9875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1181.656139][ T9875] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1181.886072][ T9875] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1181.917801][ T9875] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1181.926820][ T9875] bond0 (unregistering): (slave bridge0): last VLAN challenged slave left bond - VLAN blocking is removed [ 1181.938582][ T9875] bond0 (unregistering): Released all slaves [ 1182.007848][T27215] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1182.024400][T27215] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1182.067608][T27227] validate_nla: 3 callbacks suppressed [ 1182.067626][T27227] netlink: 'syz.3.6100': attribute type 41 has an invalid length. [ 1182.090529][ T8862] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 1182.101798][ T8862] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1182.266251][ T30] ------------[ cut here ]------------ [ 1182.272745][ T30] WARNING: CPU: 0 PID: 30 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x419/0x4a0 [ 1182.282681][ T30] Modules linked in: [ 1182.286777][ T30] CPU: 0 PID: 30 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 1182.294202][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1182.304366][ T30] Workqueue: cfg80211 cfg80211_event_work [ 1182.310227][ T30] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0 [ 1182.316492][ T30] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 40 ae e7 f7 0f 0b eb bf e8 37 ae e7 f7 <0f> 0b eb b6 e8 2e ae e7 f7 0f 0b e9 82 fd ff ff e8 22 ae e7 f7 0f [ 1182.336206][ T30] RSP: 0018:ffffc90000a6fac0 EFLAGS: 00010293 [ 1182.342344][ T30] RAX: ffffffff899a9849 RBX: 1ffff9200014df5c RCX: ffff88801b2e1e00 [ 1182.350465][ T30] RDX: 0000000000000000 RSI: ffffffff8a8c18a0 RDI: ffffffff8adf6de0 [ 1182.358538][ T30] RBP: ffffc90000a6fb70 R08: ffffffff90b332af R09: 1ffffffff2166655 [ 1182.366623][ T30] R10: dffffc0000000000 R11: fffffbfff2166656 R12: ffff888081d6b5f8 [ 1182.374683][ T30] R13: dffffc0000000000 R14: 000000000000001f R15: ffff8880786f0c90 [ 1182.382777][ T30] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1182.391822][ T30] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1182.398513][ T30] CR2: 0000000000000000 CR3: 000000000c88e000 CR4: 00000000003506f0 [ 1182.406587][ T30] DR0: 0000000000000002 DR1: 0000000000000000 DR2: 0000200000000300 [ 1182.414621][ T30] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1182.422705][ T30] Call Trace: [ 1182.426060][ T30] [ 1182.429048][ T30] ? trace_rdev_return_void+0x240/0x240 [ 1182.434681][ T30] cfg80211_process_wdev_events+0x359/0x4d0 [ 1182.440803][ T30] ? process_one_work+0x7b4/0x1160 [ 1182.446023][ T30] cfg80211_process_rdev_events+0x9d/0x110 [ 1182.451899][ T30] cfg80211_event_work+0x2b/0x40 [ 1182.456959][ T30] process_one_work+0x8ab/0x1160 [ 1182.461975][ T30] ? worker_detach_from_pool+0x240/0x240 [ 1182.467735][ T30] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1182.472828][ T30] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1182.478507][ T30] ? wq_worker_running+0x97/0x190 [ 1182.483596][ T30] worker_thread+0xaf5/0x12a0 [ 1182.488425][ T30] kthread+0x29d/0x330 [ 1182.492560][ T30] ? worker_clr_flags+0x1a0/0x1a0 [ 1182.497712][ T30] ? kthread_blkcg+0xd0/0xd0 [ 1182.502373][ T30] ret_from_fork+0x1f/0x30 [ 1182.506994][ T30] [ 1182.510087][ T30] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1182.517400][ T30] CPU: 0 PID: 30 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 1182.524815][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1182.534920][ T30] Workqueue: cfg80211 cfg80211_event_work [ 1182.540691][ T30] Call Trace: [ 1182.543994][ T30] [ 1182.546949][ T30] dump_stack_lvl+0x188/0x24e [ 1182.551662][ T30] ? memcpy+0x3c/0x60 [ 1182.555677][ T30] ? show_regs_print_info+0x12/0x12 [ 1182.560926][ T30] ? load_image+0x410/0x410 [ 1182.565479][ T30] panic+0x2d3/0x710 [ 1182.569405][ T30] ? bpf_jit_dump+0xd0/0xd0 [ 1182.573939][ T30] ? __warn+0x2e0/0x4f0 [ 1182.578131][ T30] __warn+0x2f8/0x4f0 [ 1182.582229][ T30] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 1182.587808][ T30] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 1182.593406][ T30] report_bug+0x2ba/0x4f0 [ 1182.597815][ T30] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 1182.603394][ T30] handle_bug+0x3a/0x70 [ 1182.607577][ T30] exc_invalid_op+0x16/0x40 [ 1182.612109][ T30] asm_exc_invalid_op+0x16/0x20 [ 1182.616980][ T30] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0 [ 1182.623166][ T30] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 40 ae e7 f7 0f 0b eb bf e8 37 ae e7 f7 <0f> 0b eb b6 e8 2e ae e7 f7 0f 0b e9 82 fd ff ff e8 22 ae e7 f7 0f [ 1182.642795][ T30] RSP: 0018:ffffc90000a6fac0 EFLAGS: 00010293 [ 1182.648884][ T30] RAX: ffffffff899a9849 RBX: 1ffff9200014df5c RCX: ffff88801b2e1e00 [ 1182.656901][ T30] RDX: 0000000000000000 RSI: ffffffff8a8c18a0 RDI: ffffffff8adf6de0 [ 1182.664893][ T30] RBP: ffffc90000a6fb70 R08: ffffffff90b332af R09: 1ffffffff2166655 [ 1182.672893][ T30] R10: dffffc0000000000 R11: fffffbfff2166656 R12: ffff888081d6b5f8 [ 1182.680894][ T30] R13: dffffc0000000000 R14: 000000000000001f R15: ffff8880786f0c90 [ 1182.688904][ T30] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 1182.694494][ T30] ? trace_rdev_return_void+0x240/0x240 [ 1182.700100][ T30] cfg80211_process_wdev_events+0x359/0x4d0 [ 1182.706029][ T30] ? process_one_work+0x7b4/0x1160 [ 1182.711185][ T30] cfg80211_process_rdev_events+0x9d/0x110 [ 1182.717024][ T30] cfg80211_event_work+0x2b/0x40 [ 1182.721984][ T30] process_one_work+0x8ab/0x1160 [ 1182.726964][ T30] ? worker_detach_from_pool+0x240/0x240 [ 1182.732641][ T30] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1182.737700][ T30] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1182.743283][ T30] ? wq_worker_running+0x97/0x190 [ 1182.748334][ T30] worker_thread+0xaf5/0x12a0 [ 1182.753065][ T30] kthread+0x29d/0x330 [ 1182.757154][ T30] ? worker_clr_flags+0x1a0/0x1a0 [ 1182.762227][ T30] ? kthread_blkcg+0xd0/0xd0 [ 1182.766838][ T30] ret_from_fork+0x1f/0x30 [ 1182.771296][ T30] [ 1182.774917][ T30] Kernel Offset: disabled [ 1182.779357][ T30] Rebooting in 86400 seconds..