last executing test programs: 8.976509146s ago: executing program 4 (id=5477): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x101ea8, 0x2f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[], 0x0, 0x51}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c25b3aa450ffc60", 0x14}], 0x1}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4000010}, 0x891) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x88, 0x67, 0x0, 0x0) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8947, &(0x7f00000002c0)={'bond0\x00', @random="d8b301000100"}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x6) 7.61489463s ago: executing program 4 (id=5492): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x101ea8, 0x2f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[], 0x0, 0x51}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c25b3aa450ffc60", 0x14}], 0x1}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4000010}, 0x891) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x88, 0x67, 0x0, 0x0) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8947, &(0x7f00000002c0)={'bond0\x00', @random="d8b301000100"}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x6) 7.22245724s ago: executing program 1 (id=5484): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f0000000440), 0x4) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0xd, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000940)={0x0, 0x80, 0xa, 0x3, 0x8, 0x8, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x101, 0x1, @perf_bp={&(0x7f00000003c0), 0x1}, 0x100000, 0x921e, 0x2, 0x4, 0x8c, 0xc, 0x5, 0x0, 0x16d, 0x0, 0x7}, r2, 0x10, 0xffffffffffffffff, 0x8) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1f00000007000000ff7f00000400000000020000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r3, @ANYBLOB="040500000100000000040000000000008000"/28], 0x50) r5 = socket$kcm(0xf, 0x3, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r0}, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x1b, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000003000000000000000200000018110000", @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="0000000200000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffff9f03000008000000b704000001000000850000008200000018fe059b40fa12e9af194651f3ae6a00000a0000000000000000000100bf91000000000000b70200395564136b320fd89fc7cedc79770001"], &(0x7f00000005c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000007c0)={0x1, 0xa, 0xffff, 0x1ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000840)=[r4, 0xffffffffffffffff, r0, r0, r4, r4], 0x0, 0x10, 0x6000}, 0x94) sendmsg$inet(r5, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0204000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x48004) setsockopt$sock_attach_bpf(r5, 0x1, 0x23, &(0x7f0000000000), 0x4) recvmsg(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xfede, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 6.122357728s ago: executing program 1 (id=5490): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = perf_event_open(0x0, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000800) socket$kcm(0x10, 0x2, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x4800) socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="09000000020000006d050000"], 0x50) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 5.920277743s ago: executing program 3 (id=5493): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000003e40)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x6, 0xd, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301002, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f00000002c0)=[{0x30, 0x1, 0x28, 0xffffbfff}, {0x6, 0x1, 0x0, 0x80007}]}) ioctl$TUNGETVNETLE(r4, 0x40107446, &(0x7f0000000180)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x4004743d, 0x110e22fff6) write$cgroup_type(r6, &(0x7f0000000280), 0x9) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) r7 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r7, 0x0, 0x0) 5.920032603s ago: executing program 4 (id=5494): perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000002000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x18) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$kcm(r0, 0x0, 0x810) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="1c0000001a0081044e81f782db4cb9041c5d0800fe007c05e8fe55a1080001000002010000000000080005007a010401a80016002000034004020000035c0461c9d6694f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace", 0x65}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0xc000000}, @struct={0x0, 0x0, 0x0, 0x9}]}}, 0x0, 0x3e, 0x0, 0x4}, 0x28) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 5.401955275s ago: executing program 1 (id=5495): socketpair(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8905, &(0x7f00000012c0)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) socket$kcm(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2a, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x440200, 0x0) sendmsg$inet(r3, &(0x7f0000000640)={&(0x7f0000000000)={0x2a, 0x0, @broadcast}, 0x10, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x0, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000080711029275bf0db750000000000950000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) sendmsg$tipc(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000240)="cf9a37a7805e9dfa339b1345cbbe06af9ba2b4e94aabb77d3f76a35f178f5ff6bd6da231bcc37a471d4067db34ac9ae4f68092c689bf44967baa474d5ebe27382de587bf97d4301ddf6d3a8f0d7423c9d6", 0x51}, {&(0x7f0000000300)="c35ed5a66bd80ff615fa16b39498f1d3b5b32b40f837fa26d8cc0488d092d671e1a0cbec381a35ad5a412db6b2f74ef5821a3173a361663b8ea77773980673c28787ca9cbaf9281554c1f930c2cf818ef22edcecb60cbba2b2f4b84e1d944a4ac3887d673d91077fa96fc2e122dcccfdcd7b748edbcae7906d1861797d80adc4b553e0eb237848a06f07d2090d3769589318ff80b8b4b9dc68241d6b52cb621a822e90f419b2cbb03e246fb4b7187a3d1517968aca4325a420bc026209fb11b82b93c722e2581a28e6be4d9aaac997fceca851", 0xd3}, {&(0x7f0000000400)="d90a3240ee7981540c4188f37c0e510f", 0x10}, {&(0x7f0000000500)="7c056ab516ed15c6311ecf50c1c63ffbc52dec220581a3736fb88708da97a1dbd151e74870016eed494dc7fd2831552098f2a4a43bd64ddb7d383573760e69ca500088b924a3800b9742df0e9b531dd6265d077701c1b0758eb4084128b905dc7c6e558f6582", 0x66}, {&(0x7f00000005c0)="225a65ecf85b1e8db31fb2bc2e454878899b819d100799aea6c53ff177ee9dc464ba3aa592d235f65d8331e8cb53963bcdcef27a91a9602718b6147932b5bad61052b6acfe4c52693b72bec815e0ca01e13682c1641ac41c19f269f2cf25cdc583e55c9f37684e9a814645ad8d7d7e6edad321a655b57a8d4d37a98d3a270fb314e2812c04f2c20c13ded9e0c4abbbd66d0b3faa2463e1be5cb43fc7f424027ead3b254d5fbdfc0e", 0xa8}, {&(0x7f00000006c0)="7e562cacc8b0f203384644a0e779823e9ad300bb6e4b7cf96d40ded7fdb0beef2009198d303798e150550d5723193d9012463a88d540ab6da73e4976bb1bea02bc2cb77e0c46ac390279feb8397e5de250fa54cb66b82d04c0dbfa3082f1da8a942d8661ae44ad005f3cba332213a25936566d0e338c173fbb96915558ddab1d132e7d7b3d9999a02ea82205b8e8fc2efd0f3f3b57a8b9b09e41a67cff278f8cfe0e79d2e5e0189ac41068b703cdc7ae316b296276c32c5817f5dc4246a0b031e4cae06643c858c6f7f287eb246005554d331e0b97b9ccaafe981f2e40bad6c1683c4b4a868f735ce2ecdd1f", 0xec}, {&(0x7f00000007c0)="18c2a15e73713d4e2b5557114408a73186f2878edba6885e869408a8ca047175e08e59287d941121f47226909167e5a1b394bb6cf3601386534748bd170c7027cc59ea591a15ea5c3b615ced4f3731b490ade96d978f4d426c1e1dcdfe7ffd44a30799a825d49bac2f1eccba0c6269231be9f5b50aaf6e52b72e6b98b2b678eb0ad6", 0x82}], 0x7, &(0x7f0000000980), 0x0, 0x4004010}, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0309004d8871ef2885634a8270e7112b00000000000000000000000000ac141401827511d5b4d3a9f536f45a"], 0xee8a) 5.320376998s ago: executing program 2 (id=5496): socket$kcm(0xa, 0x3, 0x11) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 5.257516949s ago: executing program 4 (id=5497): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x2, 0x0, 0x0, 0x2, 0x1000000, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c012, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000002c0)={&(0x7f0000000200)=@caif=@dgm={0x25, 0xe}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000140)="1895", 0x2}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) recvmsg(r1, &(0x7f0000000d00)={&(0x7f0000000500)=@nfc, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000a00)=""/134, 0x86}, {&(0x7f0000000ac0)=""/67, 0x43}, {&(0x7f0000000b40)=""/132, 0x84}], 0x3, &(0x7f0000000c40)=""/179, 0xb3}, 0x40011023) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000480)='syzkaller\x00'}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) perf_event_open(&(0x7f0000000380)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000340)=ANY=[@ANYRESOCT=r1, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6c69f68dc1cf3e78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, &(0x7f0000000540), 0x6c, r0}, 0x38) 5.2148538s ago: executing program 3 (id=5498): bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random="6a50bae0b3e5"}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, 0x0, 0x40) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.076968924s ago: executing program 0 (id=5499): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100) r2 = perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, r2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x4, 0x200}, 0x0, 0x200000000000001, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041a0000000000950000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000000c0)=0x6, 0x12) r5 = socket$kcm(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x10002) recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 5.025475115s ago: executing program 2 (id=5500): bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000300)=0xffffffffffffffff, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext, 0x1802, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x4080) recvmsg$kcm(r0, 0x0, 0x2020) r1 = socket$kcm(0x10, 0x3, 0x10) close(r1) recvmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a0000000400000008000000fcbc75c627ca74", @ANYRES32=0x1, @ANYBLOB='\x00'/15, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="180000", @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x7b64, &(0x7f0000000280)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d8fd8978f45225d9ee000000007ea60860160af36504000100080ec000000002009ee517c356a7b0251e61e659ad3af435cf01c937e786a6d0bdd7fcf50e4509c5cc68b7ed9c232d786c35fe000fff0000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 4.111050158s ago: executing program 2 (id=5501): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @empty, 0xffff7fff}, 0x80, 0x0}, 0x20000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) close(r1) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x14, &(0x7f0000000040), 0x3b) socket$kcm(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x141841, 0x0) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000100)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) close(r3) gettid() 4.110684338s ago: executing program 3 (id=5502): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, 0x0, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x101d0) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x101d0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x12cd) close(0x3) 4.110447308s ago: executing program 4 (id=5503): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x101ea8, 0x2f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[], 0x0, 0x51}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c25b3aa450ffc60", 0x14}], 0x1}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4000010}, 0x891) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x88, 0x67, 0x0, 0x0) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8947, &(0x7f00000002c0)={'bond0\x00', @random="d8b301000100"}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x6) 1.670982558s ago: executing program 0 (id=5504): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f0000000440), 0x4) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0xd, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000940)={0x0, 0x80, 0xa, 0x3, 0x8, 0x8, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x101, 0x1, @perf_bp={&(0x7f00000003c0), 0x1}, 0x100000, 0x921e, 0x2, 0x4, 0x8c, 0xc, 0x5, 0x0, 0x16d, 0x0, 0x7}, r2, 0x10, 0xffffffffffffffff, 0x8) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1f00000007000000ff7f00000400000000020000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r3, @ANYBLOB="040500000100000000040000000000008000"/28], 0x50) r5 = socket$kcm(0xf, 0x3, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r0}, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x1b, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000003000000000000000200000018110000", @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="0000000200000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffff9f03000008000000b704000001000000850000008200000018fe059b40fa12e9af194651f3ae6a00000a0000000000000000000100bf91000000000000b70200395564136b320fd89fc7cedc79770001"], &(0x7f00000005c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000007c0)={0x1, 0xa, 0xffff, 0x1ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000840)=[r4, 0xffffffffffffffff, r0, r0, r4, r4], 0x0, 0x10, 0x6000}, 0x94) sendmsg$inet(r5, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0204000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x48004) setsockopt$sock_attach_bpf(r5, 0x1, 0x23, &(0x7f0000000000), 0x4) recvmsg(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xfede, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 1.58360692s ago: executing program 1 (id=5505): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b80)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4041}, 0x80, 0x0}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251ef60a84c9f4d4930f0000004509c5bb0000000000001da2b2ae3ae74cc4e8c3c811", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48040) recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001340)=""/4067, 0xfe3}, {&(0x7f00000000c0)=""/68, 0x44}, {&(0x7f00000004c0)=""/131, 0x83}], 0x3}, 0x10020) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740)=0xffffffffffffffff, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff030000000000000000000000000001a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d", 0xd9}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c04) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xd, 0x0, 0x0, &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000a40)=0x5b06) recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x100) 1.549838811s ago: executing program 2 (id=5506): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = perf_event_open(0x0, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000800) socket$kcm(0x10, 0x2, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x4800) socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="09000000020000006d050000"], 0x50) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 1.444069574s ago: executing program 0 (id=5507): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000c40)=""/4096, 0x0, 0x1000, 0x1}, 0x28) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x2c}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)='b', 0x28}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2f00020b, 0x0, 0x0, 0x0, 0x0, 0xefdf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000840)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00"], 0xfdef) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNGETVNETLE(r1, 0x40107447, &(0x7f0000000180)) 977.703155ms ago: executing program 0 (id=5508): perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000002000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x18) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$kcm(r0, 0x0, 0x810) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="1c0000001a0081044e81f782db4cb9041c5d0800fe007c05e8fe55a1080001000002010000000000080005007a010401a80016002000034004020000035c0461c9d6694f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace", 0x65}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0xc000000}, @struct={0x0, 0x0, 0x0, 0x9}]}}, 0x0, 0x3e, 0x0, 0x4}, 0x28) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 976.741335ms ago: executing program 1 (id=5518): bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000300)=0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext, 0x1802, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r0, 0x0, 0x2020) socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="180000", @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 970.598146ms ago: executing program 2 (id=5519): bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b40), 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext, 0x1802, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876cff0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a70d251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362a", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r0, 0x0, 0x2020) close(0xffffffffffffffff) recvmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) 433.908839ms ago: executing program 0 (id=5509): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000003e40)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x6, 0xd, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301002, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f00000002c0)=[{0x30, 0x1, 0x28, 0xffffbfff}, {0x6, 0x1, 0x0, 0x80007}]}) ioctl$TUNGETVNETLE(r4, 0x40107446, &(0x7f0000000180)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x4004743d, 0x110e22fff6) write$cgroup_type(r6, &(0x7f0000000280), 0x9) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) r7 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r7, 0x0, 0x0) 433.630449ms ago: executing program 3 (id=5510): socket$kcm(0xa, 0x3, 0x11) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 433.071399ms ago: executing program 4 (id=5511): bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000300)=0xffffffffffffffff, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext, 0x1802, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r0, 0x0, 0x2020) r1 = socket$kcm(0x10, 0x3, 0x10) close(r1) recvmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a0000000400000008000000fcbc75c627ca74", @ANYRES32=0x1, @ANYBLOB='\x00'/15, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="180000", @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x7b64, &(0x7f0000000280)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d8fd8978f45225d9ee000000007ea60860160af36504000100080ec000000002009ee517c356a7b0251e61e659ad3af435cf01c937e786a6d0bdd7fcf50e4509c5cc68b7ed9c232d786c35fe000fff0000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 295.605682ms ago: executing program 3 (id=5512): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1400"], 0x5000}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="06000000040000"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r7 = openat$cgroup_procs(r5, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000005c0)=r2, 0x12) r8 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x1, 0x12) 177.697035ms ago: executing program 0 (id=5513): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0xfffffffffffffffd}, 0x100080, 0x0, 0x0, 0x9, 0x0, 0x3ff, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0xe, 0x0, 0x6, 0x7602, 0x0, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000400)={0x6, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000600), 0x12) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x20, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xd}, 0x0, 0x0, 0x0, 0x6, 0x4, 0x80000000, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000020006fb0a0002000a0ada1b40d803000000000000", 0x2d}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 10.308529ms ago: executing program 1 (id=5514): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x105d30, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x9}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x830, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000002c00000095000000000000003d789ade838a5ad00c21f97a9d6f55528c474cb385573d9f5ec0798d497a5d0ab93dbb637fd8de14970b4f76b599911df77098a8cd51e5ee070239f048bff4c9d6d337c8759d1737b62deae7412f1b5c334ef76307b8139d8f019360bea59a74b86ce453bc8964c32f955d410083f7567775a2ca15dbbf01550310a78644e80171753107cee23ecb376879ae14b9e1ab987023c7db41925c55b0a4141ae3c08d264831d0f6365469c3562185000000000000004f78cd03163b2d00101e000000000000000000000000000000001a18f6de00bb8c95f8bdc2a5effe88e5bc3a969a35af8033d11474cfa5d73d92c9bd2b72c3ce63d47075ae7c59d82cea124301000000000000000cb56281877934e99919c82bfdffaedc4df6f74e8f286454fcd2967415b826a6300d100e7eb8717c8528e445fbefe6a3139191529f22e4c0435e5c53e469f70c08bdff633307bbf119ffdb2e1d717eb268ee7fee0486fa294b41c1d4dc44a9801c34ada4ed759f4312dd000000000000000000000000f4ad23f3df7cdc65edcb81f103ef861a5d12eb4e1f33f6b43b6661b680850fc55aa8465b0500000000000000a17b60f43b4b2a2afc8730a587525ba1fd296b7aa4cc8936da97ff62885b8586b67e3e9b5b8d4f18df39f65ef75a42bb84587a838b828024ece8f64d74a1502d74f7e42d103e469920ae8c58f7418e67918676abfe37c9a619c27ff1a82d78431843ae38f5ba8207978a16ec9c1fc0dc752684576c8830e8e4e480b4b1649717078100000000000000001900000000ecdc068efc4f590529f07f581874420767f696a260fde832f3bbd50b84d2f0e03d75459da25aee1d3e99d41da9938eb84dfb58dbca8d9d4f1a23e6ce8b6e7e95034e6c1c"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xff0, &(0x7f000062b000)=""/4080, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x3d) recvmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c}}], 0x20}, 0x40000062) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYRES8=r6], 0x12) 1.5213ms ago: executing program 2 (id=5515): perf_event_open(&(0x7f0000000140)={0x2, 0x2b, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x12cd) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x297f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r2 = socket$kcm(0x11, 0x20000000000000a, 0x300) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@hci={0x1f, 0xdd86, 0x9}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000080)="27030200f00f00000600002fb9088965c7297a05a2019e6bafedef4e39ffffffffe1053742e0e4650058f700000088641100114408000300b8bf", 0x3a}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x28, &(0x7f0000000000), 0x4) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'cpuacct'}, {0x2b, 'memory'}]}, 0x11) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa, 0x0, 0x4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xa4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x18000000000002a0, 0x5b8, 0x0, &(0x7f0000010000)="b9fa0307110800a6a4321ab9a703c8e0ffff00124000638477fbac141416e00003f511f8be4c73c30e251f5ce0fa0a", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0xa, 0x5, 0x0) 0s ago: executing program 3 (id=5516): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r0}, 0xfed0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x31) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x3}, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000080)) kernel console output (not intermixed with test programs): bridge0: port 1(bridge_slave_0) entered disabled state [ 275.732692][ T6150] netlink: 'syz.0.568': attribute type 39 has an invalid length. [ 276.841754][ T6164] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.571'. [ 276.887630][ T6164] net_ratelimit: 3 callbacks suppressed [ 276.887651][ T6164] netlink: zone id is out of range [ 276.921197][ T6164] netlink: zone id is out of range [ 276.950708][ T6164] netlink: zone id is out of range [ 276.956699][ T6164] netlink: zone id is out of range [ 276.990799][ T6164] netlink: zone id is out of range [ 277.017380][ T6164] netlink: zone id is out of range [ 277.047814][ T6164] netlink: zone id is out of range [ 277.093749][ T6164] netlink: zone id is out of range [ 277.113582][ T6164] netlink: zone id is out of range [ 277.148686][ T6164] netlink: zone id is out of range [ 280.441545][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 282.212730][ T6204] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.221059][ T6204] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.018946][ T4278] Bluetooth: hci1: Malformed Event: 0x2f [ 285.951257][ T6250] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.974311][ T6250] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.499819][ T26] audit: type=1800 audit(1785506852.229:2): pid=6242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.601" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0 [ 286.534331][ T6242] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 286.697237][ T6242] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4 [ 286.709316][ T6252] device bridge_slave_1 left promiscuous mode [ 286.777287][ T6252] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.787809][ T6242] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s [ 286.844092][ T6252] device bridge_slave_0 left promiscuous mode [ 286.918203][ T6252] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.286228][ T6259] netlink: 'syz.4.604': attribute type 4 has an invalid length. [ 287.447065][ T6242] syz.2.601 (6242) used greatest stack depth: 16656 bytes left [ 287.467526][ T6259] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.604'. [ 290.187114][ T4278] Bluetooth: hci2: Malformed Event: 0x2f [ 290.890505][ T6310] device bridge_slave_1 left promiscuous mode [ 290.929127][ T6310] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.324646][ T6316] netlink: 'syz.0.618': attribute type 4 has an invalid length. [ 291.461736][ T6316] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.618'. [ 291.570957][ T6310] device bridge_slave_0 left promiscuous mode [ 291.726470][ T6310] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.778351][ T4278] Bluetooth: hci3: unexpected event 0x36 length: 15 > 7 [ 293.931446][ T6349] netlink: 'syz.4.641': attribute type 2 has an invalid length. [ 294.012064][ T6348] netlink: 'syz.2.629': attribute type 10 has an invalid length. [ 294.106143][ T6348] netlink: 40 bytes leftover after parsing attributes in process `syz.2.629'. [ 294.182153][ T6348] batman_adv: batadv0: Adding interface: veth0_vlan [ 294.203006][ T6348] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.262363][ T6348] batman_adv: batadv0: Interface activated: veth0_vlan [ 294.739563][ T6349] device 0 entered promiscuous mode [ 296.104087][ T4278] Bluetooth: hci0: Malformed Event: 0x2f [ 296.572096][ T6380] netlink: 'syz.3.636': attribute type 4 has an invalid length. [ 296.602500][ T6380] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.636'. [ 298.130295][ T4278] Bluetooth: hci4: unexpected event 0x36 length: 15 > 7 [ 298.401891][ T6402] netlink: 'syz.2.647': attribute type 2 has an invalid length. [ 299.028383][ T6402] device 0 entered promiscuous mode [ 299.050121][ T6405] netlink: 'syz.4.648': attribute type 10 has an invalid length. [ 299.097491][ T6405] netlink: 40 bytes leftover after parsing attributes in process `syz.4.648'. [ 299.173900][ T6405] batman_adv: batadv0: Adding interface: veth0_vlan [ 299.197520][ T6405] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.375530][ T6405] batman_adv: batadv0: Interface activated: veth0_vlan [ 300.357046][ T6425] IPv6: Can't replace route, no match found [ 303.238149][ T57] wlan1: Trigger new scan to find an IBSS to join [ 305.180792][ T6483] netlink: 'syz.0.671': attribute type 10 has an invalid length. [ 305.254088][ T6483] netlink: 40 bytes leftover after parsing attributes in process `syz.0.671'. [ 305.379407][ T6483] batman_adv: batadv0: Adding interface: veth0_vlan [ 305.441944][ T6483] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.525900][ T6483] batman_adv: batadv0: Interface activated: veth0_vlan [ 306.771474][ T6501] IPv6: Can't replace route, no match found [ 307.263664][ T9] wlan1: Trigger new scan to find an IBSS to join [ 307.861176][ T47] wlan1: Creating new IBSS network, BSSID 32:2a:aa:11:a6:7f [ 309.536796][ T6533] netlink: 'syz.1.688': attribute type 10 has an invalid length. [ 309.560925][ T6533] netlink: 40 bytes leftover after parsing attributes in process `syz.1.688'. [ 309.669631][ T6533] net_ratelimit: 3 callbacks suppressed [ 309.669801][ T6533] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 315.344060][ T6592] IPv6: Can't replace route, no match found [ 316.001982][ T6608] device syzkaller0 entered promiscuous mode [ 317.780164][ T6635] netlink: 'syz.4.734': attribute type 10 has an invalid length. [ 318.062416][ T6635] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.100018][ T6640] netlink: 'syz.0.724': attribute type 2 has an invalid length. [ 318.179751][ T6635] bond0: (slave team0): Enslaving as an active interface with an up link [ 318.680770][ T6640] device 0 entered promiscuous mode [ 319.434282][ T6655] IPv6: Can't replace route, no match found [ 322.630835][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.640928][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.147609][ T6696] netlink: 'syz.1.741': attribute type 11 has an invalid length. [ 324.177776][ T6696] netlink: 184220 bytes leftover after parsing attributes in process `syz.1.741'. [ 324.837479][ T6692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.636192][ T6707] netlink: 'syz.0.757': attribute type 2 has an invalid length. [ 326.511259][ T6707] device 1 entered promiscuous mode [ 327.192115][ T6723] IPv6: Can't replace route, no match found [ 329.956399][ T6759] netlink: 'syz.1.763': attribute type 10 has an invalid length. [ 330.008511][ T6759] netlink: 55 bytes leftover after parsing attributes in process `syz.1.763'. [ 330.695953][ T6757] netlink: 'syz.4.762': attribute type 11 has an invalid length. [ 330.740997][ T6757] netlink: 184220 bytes leftover after parsing attributes in process `syz.4.762'. [ 331.088453][ T6755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.534165][ T6770] IPv6: Can't replace route, no match found [ 335.886142][ T6816] netlink: 'syz.3.782': attribute type 2 has an invalid length. [ 335.905636][ T6808] netlink: 'syz.2.778': attribute type 11 has an invalid length. [ 335.949297][ T6816] netlink: 'syz.3.782': attribute type 8 has an invalid length. [ 336.007195][ T6808] netlink: 184220 bytes leftover after parsing attributes in process `syz.2.778'. [ 336.027777][ T6816] netlink: 132 bytes leftover after parsing attributes in process `syz.3.782'. [ 336.083918][ T6808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.219580][ T6837] netlink: 'syz.1.788': attribute type 3 has an invalid length. [ 338.307557][ T6837] netlink: 132 bytes leftover after parsing attributes in process `syz.1.788'. [ 346.019045][ T6886] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 346.187266][ T6886] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4 [ 346.390960][ T6886] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s [ 350.148600][ T6929] netlink: 'syz.1.825': attribute type 2 has an invalid length. [ 350.208942][ T6929] netlink: 'syz.1.825': attribute type 8 has an invalid length. [ 350.260835][ T6929] netlink: 132 bytes leftover after parsing attributes in process `syz.1.825'. [ 353.182893][ T6955] netlink: 'syz.3.822': attribute type 10 has an invalid length. [ 354.149568][ T6955] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.252746][ T6955] bond0: (slave team0): Enslaving as an active interface with an up link [ 355.168957][ T6966] netlink: 'syz.2.829': attribute type 10 has an invalid length. [ 355.381480][ T6966] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.489756][ T6966] bond0: (slave team0): Enslaving as an active interface with an up link [ 355.933683][ T6978] netlink: 'syz.0.833': attribute type 3 has an invalid length. [ 355.968274][ T6978] netlink: 132 bytes leftover after parsing attributes in process `syz.0.833'. [ 359.518955][ T6994] netlink: 'syz.2.836': attribute type 2 has an invalid length. [ 359.537660][ T6994] netlink: 'syz.2.836': attribute type 8 has an invalid length. [ 359.590491][ T6994] netlink: 132 bytes leftover after parsing attributes in process `syz.2.836'. [ 360.060096][ T7010] netlink: 'syz.0.840': attribute type 10 has an invalid length. [ 360.552994][ T7010] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.605861][ T7010] bond0: (slave team0): Enslaving as an active interface with an up link [ 361.117179][ T7022] netlink: 'syz.2.844': attribute type 10 has an invalid length. [ 361.638050][ T7024] netlink: 'syz.0.856': attribute type 10 has an invalid length. [ 362.333781][ T7030] netlink: 'syz.4.849': attribute type 3 has an invalid length. [ 362.423026][ T7030] netlink: 132 bytes leftover after parsing attributes in process `syz.4.849'. [ 364.036305][ T7054] netlink: 152 bytes leftover after parsing attributes in process `syz.4.855'. [ 364.687241][ T7054] netlink: 'syz.4.855': attribute type 10 has an invalid length. [ 364.717240][ T7054] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 364.904214][ T7063] netlink: 'syz.1.859': attribute type 10 has an invalid length. [ 365.158515][ T7063] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.254335][ T7063] bond0: (slave team0): Enslaving as an active interface with an up link [ 366.433963][ T7081] netlink: 'syz.0.873': attribute type 10 has an invalid length. [ 367.154870][ T7085] netlink: 'syz.2.863': attribute type 3 has an invalid length. [ 367.350406][ T7085] netlink: 132 bytes leftover after parsing attributes in process `syz.2.863'. [ 369.487671][ T7093] netlink: 'syz.0.878': attribute type 3 has an invalid length. [ 369.537410][ T7093] netlink: 152 bytes leftover after parsing attributes in process `syz.0.878'. [ 371.672658][ T7121] netlink: 'syz.0.872': attribute type 2 has an invalid length. [ 371.727461][ T7121] netlink: 'syz.0.872': attribute type 8 has an invalid length. [ 371.867417][ T7121] netlink: 132 bytes leftover after parsing attributes in process `syz.0.872'. [ 371.999253][ T7129] IPv6: Can't replace route, no match found [ 375.845374][ T7160] netlink: 'syz.4.889': attribute type 3 has an invalid length. [ 375.897025][ T7160] netlink: 152 bytes leftover after parsing attributes in process `syz.4.889'. [ 380.331854][ T7214] netlink: 'syz.2.906': attribute type 3 has an invalid length. [ 380.396967][ T7214] netlink: 152 bytes leftover after parsing attributes in process `syz.2.906'. [ 381.516084][ T4278] Bluetooth: hci3: unexpected event 0x17 length: 15 > 6 [ 381.596421][ T7249] netlink: 152 bytes leftover after parsing attributes in process `syz.3.917'. [ 381.759522][ T7250] netlink: 'syz.3.917': attribute type 10 has an invalid length. [ 381.857113][ T7250] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 382.585469][ T7265] sctp: [Deprecated]: syz.4.924 (pid 7265) Use of struct sctp_assoc_value in delayed_ack socket option. [ 382.585469][ T7265] Use struct sctp_sack_info instead [ 383.028066][ T7268] netlink: 'syz.3.925': attribute type 3 has an invalid length. [ 383.054914][ T7268] netlink: 'syz.3.925': attribute type 1 has an invalid length. [ 383.145377][ T7268] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.925'. [ 383.838279][ T7274] netlink: 'syz.1.926': attribute type 3 has an invalid length. [ 383.869387][ T7274] netlink: 152 bytes leftover after parsing attributes in process `syz.1.926'. [ 383.891149][ T7275] delete_channel: no stack [ 384.043668][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.050577][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.555142][ T7290] netlink: 'syz.4.930': attribute type 2 has an invalid length. [ 384.589157][ T7296] netlink: 152 bytes leftover after parsing attributes in process `syz.0.933'. [ 384.607919][ T7290] netlink: 'syz.4.930': attribute type 8 has an invalid length. [ 384.645238][ T7290] netlink: 132 bytes leftover after parsing attributes in process `syz.4.930'. [ 384.733967][ T7296] netlink: 'syz.0.933': attribute type 10 has an invalid length. [ 384.792722][ T7296] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 385.856495][ T7315] sctp: [Deprecated]: syz.3.938 (pid 7315) Use of struct sctp_assoc_value in delayed_ack socket option. [ 385.856495][ T7315] Use struct sctp_sack_info instead [ 386.889409][ T7324] netlink: 'syz.3.944': attribute type 3 has an invalid length. [ 386.926960][ T7324] netlink: 152 bytes leftover after parsing attributes in process `syz.3.944'. [ 388.107112][ T7347] netlink: 152 bytes leftover after parsing attributes in process `syz.2.952'. [ 388.180474][ T7347] netlink: 'syz.2.952': attribute type 10 has an invalid length. [ 388.203416][ T7347] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 388.966106][ T7364] netlink: 'syz.0.960': attribute type 21 has an invalid length. [ 389.001989][ T7364] netlink: 168 bytes leftover after parsing attributes in process `syz.0.960'. [ 389.588234][ T7375] netlink: 'syz.1.964': attribute type 10 has an invalid length. [ 391.351292][ T7400] netlink: 'syz.0.973': attribute type 3 has an invalid length. [ 391.484000][ T7400] netlink: 'syz.0.973': attribute type 1 has an invalid length. [ 391.556377][ T7400] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.973'. [ 391.826333][ T7412] netlink: 'syz.3.978': attribute type 10 has an invalid length. [ 392.567365][ T7419] netlink: 'syz.2.980': attribute type 10 has an invalid length. [ 392.575733][ T7419] netlink: 40 bytes leftover after parsing attributes in process `syz.2.980'. [ 392.647234][ T7419] device dummy0 entered promiscuous mode [ 392.654829][ T7419] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 393.111664][ T7431] netlink: 'syz.4.983': attribute type 3 has an invalid length. [ 393.205442][ T7430] netlink: 152 bytes leftover after parsing attributes in process `syz.1.981'. [ 393.405511][ T7431] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.983'. [ 393.746431][ T7434] netlink: 'syz.1.981': attribute type 10 has an invalid length. [ 393.776963][ T7434] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 397.730155][ T7456] netlink: 'syz.4.992': attribute type 3 has an invalid length. [ 397.823914][ T7456] netlink: 'syz.4.992': attribute type 1 has an invalid length. [ 397.843728][ T7456] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.992'. [ 398.488603][ T7477] netlink: 152 bytes leftover after parsing attributes in process `syz.1.999'. [ 398.557153][ T7477] netlink: 'syz.1.999': attribute type 10 has an invalid length. [ 398.613000][ T7477] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 398.954796][ T7483] netlink: 'syz.4.1000': attribute type 21 has an invalid length. [ 399.017007][ T7483] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1000'. [ 402.451961][ T4278] Bluetooth: hci4: unexpected event 0x12 length: 15 > 8 [ 403.821798][ T7530] netlink: 'syz.4.1014': attribute type 10 has an invalid length. [ 403.964875][ T7527] netlink: 'syz.2.1012': attribute type 3 has an invalid length. [ 403.977641][ T7530] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1014'. [ 404.001987][ T7527] netlink: 'syz.2.1012': attribute type 1 has an invalid length. [ 404.019239][ T7535] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1015'. [ 404.040586][ T7530] device dummy0 entered promiscuous mode [ 404.059384][ T7527] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.1012'. [ 404.108242][ T7530] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 404.249882][ T7536] netlink: 'syz.1.1015': attribute type 10 has an invalid length. [ 404.267131][ T7536] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 404.321384][ T7539] netlink: 'syz.0.1018': attribute type 10 has an invalid length. [ 409.045063][ T7579] netlink: 'syz.3.1032': attribute type 10 has an invalid length. [ 409.570623][ T4278] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8 [ 411.114343][ T7608] netlink: 'syz.2.1046': attribute type 10 has an invalid length. [ 412.459412][ T7627] netlink: 'syz.4.1062': attribute type 10 has an invalid length. [ 413.107034][ T7634] netlink: 'syz.0.1052': attribute type 10 has an invalid length. [ 413.116517][ T7634] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1052'. [ 413.169354][ T7634] device dummy0 entered promiscuous mode [ 413.204559][ T7634] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 413.535777][ T7640] netlink: 'syz.1.1067': attribute type 10 has an invalid length. [ 415.531277][ T7673] netlink: 'syz.2.1072': attribute type 10 has an invalid length. [ 415.621368][ T7678] netlink: 'syz.4.1073': attribute type 10 has an invalid length. [ 418.669148][ T7716] netlink: 'syz.4.1085': attribute type 10 has an invalid length. [ 418.749422][ T7720] netlink: 'syz.3.1087': attribute type 10 has an invalid length. [ 419.128716][ T7727] netlink: 'syz.0.1100': attribute type 10 has an invalid length. [ 421.114980][ T7764] netlink: 'syz.0.1102': attribute type 10 has an invalid length. [ 423.948846][ T7775] netlink: 'syz.4.1105': attribute type 10 has an invalid length. [ 425.816653][ T7799] netlink: 'syz.1.1114': attribute type 3 has an invalid length. [ 425.866595][ T7810] netlink: 'syz.0.1118': attribute type 10 has an invalid length. [ 425.904126][ T7799] netlink: 'syz.1.1114': attribute type 1 has an invalid length. [ 425.958398][ T7799] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.1114'. [ 426.192416][ T7813] netlink: 'syz.2.1119': attribute type 10 has an invalid length. [ 430.180679][ T7847] netlink: 'syz.3.1130': attribute type 10 has an invalid length. [ 430.211100][ T7850] netlink: 'syz.2.1132': attribute type 10 has an invalid length. [ 430.692350][ T7855] netlink: 'syz.3.1133': attribute type 3 has an invalid length. [ 430.766520][ T7855] netlink: 'syz.3.1133': attribute type 1 has an invalid length. [ 430.809033][ T7855] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.1133'. [ 432.164077][ T7882] netlink: 'syz.3.1144': attribute type 10 has an invalid length. [ 432.603722][ T7885] netlink: 'syz.0.1145': attribute type 10 has an invalid length. [ 434.689201][ T7913] netlink: 'syz.4.1156': attribute type 10 has an invalid length. [ 434.750107][ T7916] netlink: 'syz.2.1158': attribute type 10 has an invalid length. [ 436.621005][ T7951] netlink: 'syz.4.1170': attribute type 10 has an invalid length. [ 438.297276][ T7961] netlink: 'syz.4.1172': attribute type 10 has an invalid length. [ 438.573340][ T7966] device syzkaller0 entered promiscuous mode [ 442.492296][ T7996] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 442.534821][ T7996] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 442.578489][ T7996] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 442.829552][ T8006] netlink: 'syz.3.1184': attribute type 10 has an invalid length. [ 445.482882][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.491891][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.285395][ T8023] syzkaller0: mtu less than device minimum [ 447.392515][ T8048] netlink: 'syz.0.1200': attribute type 10 has an invalid length. [ 451.617426][ T8077] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1210'. [ 451.703802][ T8077] device caif0 entered promiscuous mode [ 451.738704][ T8077] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 452.035781][ T8092] netlink: 'syz.3.1213': attribute type 10 has an invalid length. [ 452.636040][ T8103] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.1218'. [ 454.126360][ T8135] syzkaller0: mtu less than device minimum [ 454.153722][ T8134] netlink: 'syz.1.1228': attribute type 10 has an invalid length. [ 454.502142][ T8140] netlink: 'syz.1.1230': attribute type 9 has an invalid length. [ 454.566640][ T8140] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.1230'. [ 455.824669][ T8160] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.1237'. [ 455.979135][ T8160] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 456.892105][ T8174] netlink: 'syz.4.1242': attribute type 10 has an invalid length. [ 461.579453][ T8214] netlink: 'syz.0.1257': attribute type 10 has an invalid length. [ 463.351576][ T8237] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1264'. [ 463.405335][ T8237] device caif0 entered promiscuous mode [ 463.505668][ T8237] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 467.023762][ T8255] netlink: 'syz.1.1272': attribute type 10 has an invalid length. [ 471.503948][ T8280] device syzkaller0 entered promiscuous mode [ 471.544319][ T8287] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1282'. [ 472.430106][ T8287] device caif0 entered promiscuous mode [ 472.447625][ T8287] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 472.750704][ T4278] Bluetooth: hci3: unexpected event 0x0f length: 151 > 4 [ 479.002682][ T8297] netlink: 'syz.0.1284': attribute type 10 has an invalid length. [ 479.216380][ T8311] device syzkaller0 entered promiscuous mode [ 479.466321][ T8322] netlink: 'syz.4.1292': attribute type 9 has an invalid length. [ 479.492258][ T8322] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.1292'. [ 482.981166][ T8342] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1297'. [ 483.056362][ T8342] device caif0 entered promiscuous mode [ 483.087054][ T8342] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 483.261141][ T8346] netlink: 'syz.2.1300': attribute type 10 has an invalid length. [ 485.730475][ T8375] netlink: 'syz.0.1309': attribute type 9 has an invalid length. [ 485.799836][ T8375] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.1309'. [ 486.064187][ T8388] netlink: 'syz.1.1315': attribute type 10 has an invalid length. [ 488.277721][ T8427] netlink: 'syz.4.1329': attribute type 10 has an invalid length. [ 490.714196][ T8468] netlink: 'syz.0.1342': attribute type 10 has an invalid length. [ 496.247927][ T8515] netlink: 'syz.2.1357': attribute type 10 has an invalid length. [ 498.282170][ T8543] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1367'. [ 498.403968][ T8543] delete_channel: no stack [ 498.924870][ T8550] netlink: 'syz.1.1369': attribute type 10 has an invalid length. [ 501.092642][ T8562] netlink: 'syz.0.1383': attribute type 10 has an invalid length. [ 506.920358][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.928185][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.366145][ T8614] netlink: 'syz.0.1388': attribute type 10 has an invalid length. [ 510.249895][ T8649] netlink: 'syz.4.1402': attribute type 10 has an invalid length. [ 513.767495][ T8663] netlink: 'syz.4.1416': attribute type 10 has an invalid length. [ 515.212681][ T8680] netlink: 'syz.2.1413': attribute type 10 has an invalid length. [ 516.261957][ T8700] netlink: 'syz.4.1419': attribute type 10 has an invalid length. [ 517.421914][ T8721] netlink: 'syz.2.1426': attribute type 10 has an invalid length. [ 518.798255][ T8731] netlink: 'syz.2.1440': attribute type 10 has an invalid length. [ 519.023392][ T8742] netlink: 'syz.3.1432': attribute type 10 has an invalid length. [ 523.836433][ T8780] netlink: 'syz.2.1445': attribute type 10 has an invalid length. [ 523.880131][ T8781] netlink: 'syz.4.1446': attribute type 10 has an invalid length. [ 526.482238][ T8817] netlink: 'syz.3.1460': attribute type 10 has an invalid length. [ 526.533309][ T8821] netlink: 'syz.1.1459': attribute type 10 has an invalid length. [ 527.088536][ T8833] netlink: 'syz.1.1463': attribute type 10 has an invalid length. [ 527.117932][ T8833] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1463'. [ 527.209659][ T8833] device veth0_vlan left promiscuous mode [ 528.600886][ T8861] netlink: 'syz.2.1473': attribute type 10 has an invalid length. [ 528.772639][ T8864] netlink: 'syz.1.1474': attribute type 10 has an invalid length. [ 532.114238][ T8872] delete_channel: no stack [ 533.150816][ T8892] netlink: 'syz.3.1486': attribute type 10 has an invalid length. [ 533.760380][ T8903] netlink: 'syz.3.1489': attribute type 10 has an invalid length. [ 535.390951][ T8919] delete_channel: no stack [ 536.086003][ T8936] netlink: 'syz.3.1499': attribute type 10 has an invalid length. [ 536.544479][ T8940] netlink: 'syz.2.1500': attribute type 10 has an invalid length. [ 536.587265][ T8940] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1500'. [ 537.564122][ T8948] netlink: 'syz.4.1504': attribute type 3 has an invalid length. [ 537.617692][ T8948] netlink: 42732 bytes leftover after parsing attributes in process `syz.4.1504'. [ 537.799483][ T8955] delete_channel: no stack [ 537.995333][ T8960] netlink: 'syz.1.1510': attribute type 4 has an invalid length. [ 538.048303][ T8960] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1510'. [ 539.800262][ T8989] netlink: 'syz.3.1520': attribute type 10 has an invalid length. [ 539.867284][ T8989] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1520'. [ 539.900952][ T8989] device veth0_vlan left promiscuous mode [ 540.552799][ T8996] delete_channel: no stack [ 541.395556][ T9009] netlink: 'syz.1.1528': attribute type 3 has an invalid length. [ 541.475907][ T9009] netlink: 42775 bytes leftover after parsing attributes in process `syz.1.1528'. [ 543.113894][ T9041] netlink: 'syz.4.1537': attribute type 10 has an invalid length. [ 543.133224][ T9041] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1537'. [ 544.738171][ T9080] netlink: 'syz.3.1552': attribute type 4 has an invalid length. [ 544.752202][ T9080] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1552'. [ 545.923788][ T9105] netlink: 'syz.1.1559': attribute type 4 has an invalid length. [ 545.986579][ T9105] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1559'. [ 546.095981][ T9104] netlink: 'syz.0.1558': attribute type 10 has an invalid length. [ 546.110836][ T9104] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1558'. [ 546.141523][ T9104] device veth0_vlan left promiscuous mode [ 546.594794][ T9114] device veth0_vlan left promiscuous mode [ 546.660913][ T9115] batman_adv: The newly added mac address (00:20:10:00:00:00) already exists on: veth0_vlan [ 546.731818][ T9115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.670660][ T9125] netlink: 'syz.4.1568': attribute type 4 has an invalid length. [ 547.709867][ T9125] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1568'. [ 549.390908][ T9155] netlink: 'syz.1.1580': attribute type 10 has an invalid length. [ 549.467352][ T9155] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1580'. [ 551.250999][ T9179] netlink: 'syz.0.1590': attribute type 3 has an invalid length. [ 551.281072][ T9179] netlink: 42732 bytes leftover after parsing attributes in process `syz.0.1590'. [ 552.451685][ T9208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1599'. [ 552.497213][ T9208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1599'. [ 552.547796][ T9208] netlink: 33 bytes leftover after parsing attributes in process `syz.3.1599'. [ 552.585846][ T9208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1599'. [ 552.624971][ T9208] netlink: 33 bytes leftover after parsing attributes in process `syz.3.1599'. [ 552.756137][ T9208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1599'. [ 552.788070][ T9208] netlink: 33 bytes leftover after parsing attributes in process `syz.3.1599'. [ 552.992095][ T9220] netlink: 'syz.2.1604': attribute type 4 has an invalid length. [ 553.051715][ T9220] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1604'. [ 554.645933][ T9254] netlink: 'syz.3.1616': attribute type 4 has an invalid length. [ 554.656899][ T9254] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1616'. [ 555.046336][ T9256] batman_adv: The newly added mac address (00:20:10:00:00:00) already exists on: veth0_vlan [ 555.091557][ T9256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.459106][ T9281] netlink: 'syz.2.1624': attribute type 21 has an invalid length. [ 556.507600][ T9281] netlink: 'syz.2.1624': attribute type 6 has an invalid length. [ 556.567382][ T9281] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1624'. [ 557.747520][ T9313] netlink: 'syz.2.1633': attribute type 4 has an invalid length. [ 557.856993][ T9313] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1633'. [ 559.356061][ T9328] netlink: 'syz.0.1640': attribute type 4 has an invalid length. [ 559.419430][ T9328] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1640'. [ 560.513347][ T9350] netlink: 'syz.4.1647': attribute type 10 has an invalid length. [ 560.573340][ T9350] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1647'. [ 560.691723][ T9350] device team0 entered promiscuous mode [ 560.762324][ T9350] device team_slave_0 entered promiscuous mode [ 560.861947][ T9350] device team_slave_1 entered promiscuous mode [ 561.104713][ T9350] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.280522][ T9350] bond0: (slave team0): Releasing backup interface [ 561.492306][ T9350] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 561.701528][ T9367] netlink: 'syz.0.1651': attribute type 4 has an invalid length. [ 561.788181][ T9367] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1651'. [ 562.035188][ T9376] netlink: 'syz.2.1655': attribute type 10 has an invalid length. [ 563.335623][ T9376] team0: Port device macvlan0 added [ 563.634063][ T9391] netlink: 'syz.0.1662': attribute type 21 has an invalid length. [ 563.673813][ T9391] netlink: 'syz.0.1662': attribute type 6 has an invalid length. [ 563.723923][ T9391] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1662'. [ 565.847874][ T9431] netlink: 'syz.3.1674': attribute type 10 has an invalid length. [ 566.103071][ T4278] Bluetooth: hci3: unexpected cc 0x1004 length: 12 > 11 [ 566.118175][ T9431] team0: Port device macvlan0 added [ 566.424706][ T9442] netlink: 'syz.4.1678': attribute type 21 has an invalid length. [ 566.442238][ T9442] netlink: 'syz.4.1678': attribute type 6 has an invalid length. [ 566.457990][ T9442] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1678'. [ 568.291773][ T9477] netlink: 'syz.2.1689': attribute type 10 has an invalid length. [ 568.313377][ T9477] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1689'. [ 568.352198][ T9477] device team0 entered promiscuous mode [ 568.363452][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.363564][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.449543][ T9477] device team_slave_0 entered promiscuous mode [ 568.552809][ T9477] device team_slave_1 entered promiscuous mode [ 568.563352][ T9477] device macvlan0 entered promiscuous mode [ 568.774077][ T9477] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.293149][ T9477] bond0: (slave team0): Releasing backup interface [ 569.650952][ T9477] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 569.678228][ T9491] netlink: 'syz.0.1693': attribute type 10 has an invalid length. [ 569.750007][ T9491] team0: Port device macvlan0 added [ 570.118780][ T4278] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 570.127993][ T4278] Bluetooth: hci3: Injecting HCI hardware error event [ 570.137736][ T4278] Bluetooth: hci3: hardware error 0x00 [ 572.784667][ T9508] Bluetooth: hci2: unexpected cc 0x1004 length: 12 > 11 [ 572.900156][ T9532] device veth0_vlan left promiscuous mode [ 572.924763][ T9532] batman_adv: The newly added mac address (00:20:10:00:00:00) already exists on: veth0_vlan [ 572.952722][ T9532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.977487][ T9532] batman_adv: The newly added mac address (00:20:10:00:00:00) already exists on: veth0_vlan [ 573.006598][ T9532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.247484][ T4278] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 574.142061][ T9548] netlink: 'syz.4.1712': attribute type 4 has an invalid length. [ 574.187230][ T9548] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1712'. [ 574.502834][ T4278] Bluetooth: hci0: unexpected cc 0x1004 length: 12 > 11 [ 575.451867][ T9569] netlink: 'syz.0.1720': attribute type 10 has an invalid length. [ 575.468992][ T9569] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1720'. [ 575.490405][ T9569] device team0 entered promiscuous mode [ 575.496636][ T9569] device team_slave_0 entered promiscuous mode [ 575.524575][ T9569] device team_slave_1 entered promiscuous mode [ 575.544326][ T9569] device macvlan0 entered promiscuous mode [ 575.602581][ T9569] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.809035][ T9569] bond0: (slave team0): Releasing backup interface [ 575.996627][ T9569] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 576.844936][ T9584] netlink: 'syz.0.1726': attribute type 29 has an invalid length. [ 576.855790][ T4278] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 576.866492][ T4278] Bluetooth: hci2: Injecting HCI hardware error event [ 576.876597][ T9508] Bluetooth: hci2: hardware error 0x00 [ 577.230984][ T9584] netlink: 'syz.0.1726': attribute type 29 has an invalid length. [ 577.665204][ T9602] netlink: 'syz.1.1732': attribute type 10 has an invalid length. [ 577.762580][ T9602] team0: Port device macvlan0 added [ 578.523715][ T4278] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 578.532951][ T4278] Bluetooth: hci0: Injecting HCI hardware error event [ 578.542953][ T4278] Bluetooth: hci0: hardware error 0x00 [ 579.156959][ T9508] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 581.077079][ T4278] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 582.455047][ T9662] netlink: 'syz.3.1752': attribute type 10 has an invalid length. [ 582.478750][ T9662] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1752'. [ 582.493916][ T9662] device team0 entered promiscuous mode [ 582.502697][ T9662] device team_slave_0 entered promiscuous mode [ 582.529216][ T9662] device team_slave_1 entered promiscuous mode [ 582.538099][ T9662] device macvlan0 entered promiscuous mode [ 582.551849][ T9662] 8021q: adding VLAN 0 to HW filter on device team0 [ 582.669100][ T9662] bond0: (slave team0): Releasing backup interface [ 582.780575][ T9662] bridge0: port 3(team0) entered blocking state [ 582.895885][ T9662] bridge0: port 3(team0) entered disabled state [ 582.940260][ T9669] netlink: 'syz.1.1755': attribute type 29 has an invalid length. [ 583.070629][ T9669] netlink: 'syz.1.1755': attribute type 29 has an invalid length. [ 592.220968][ T9772] netlink: 'syz.1.1791': attribute type 10 has an invalid length. [ 592.288750][ T9772] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1791'. [ 592.454350][ T9772] device team0 entered promiscuous mode [ 592.516298][ T9772] device team_slave_0 entered promiscuous mode [ 592.598068][ T9772] device team_slave_1 entered promiscuous mode [ 592.794282][ T9772] device macvlan0 entered promiscuous mode [ 592.963029][ T9780] netlink: 'syz.3.1792': attribute type 4 has an invalid length. [ 593.029929][ T9780] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1792'. [ 593.066558][ T9772] 8021q: adding VLAN 0 to HW filter on device team0 [ 593.448979][ T9772] bond0: (slave team0): Releasing backup interface [ 593.580389][ T9772] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 593.607242][ T9779] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 593.644374][ T9779] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 593.657978][ T9779] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 598.268253][ T9829] netlink: 'syz.1.1810': attribute type 10 has an invalid length. [ 598.309811][ T9829] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1810'. [ 598.460915][ T9829] 8021q: adding VLAN 0 to HW filter on device team0 [ 598.644667][ T9829] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 599.329618][ T9847] netlink: 'syz.3.1817': attribute type 4 has an invalid length. [ 599.356822][ T9847] netlink: 'syz.3.1817': attribute type 8 has an invalid length. [ 599.367336][ T9847] netlink: 109560 bytes leftover after parsing attributes in process `syz.3.1817'. [ 599.493171][ T9852] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1818'. [ 603.377791][ T9880] netlink: 'syz.2.1829': attribute type 10 has an invalid length. [ 603.429283][ T9880] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1829'. [ 603.545170][ T9880] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.646289][ T9880] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 603.705127][ T9888] tipc: Started in network mode [ 603.725010][ T9888] tipc: Node identity 9215a268, cluster identity 4711 [ 603.739485][ T9888] tipc: Node number set to 2450891368 [ 604.097801][ T9897] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1833'. [ 606.525556][ T9913] netlink: 'syz.2.1836': attribute type 2 has an invalid length. [ 606.534146][ T9913] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.1836'. [ 607.037394][ T9925] netlink: 'syz.2.1844': attribute type 4 has an invalid length. [ 607.123584][ T9925] netlink: 'syz.2.1844': attribute type 8 has an invalid length. [ 607.150102][ T9925] netlink: 109560 bytes leftover after parsing attributes in process `syz.2.1844'. [ 608.037853][ T9947] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1852'. [ 608.434830][ T9960] netlink: 'syz.1.1855': attribute type 2 has an invalid length. [ 608.447767][ T9960] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.1855'. [ 611.613309][ T9999] netlink: 'syz.2.1869': attribute type 10 has an invalid length. [ 611.654177][ T9999] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1869'. [ 611.749192][ T9999] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 613.591882][T10020] netlink: 'syz.0.1873': attribute type 2 has an invalid length. [ 613.637991][T10020] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.1873'. [ 614.561056][T10049] tipc: Started in network mode [ 614.566392][T10049] tipc: Node identity 9215a268, cluster identity 4711 [ 614.600452][T10049] tipc: Node number set to 2450891368 [ 616.202101][T10069] netlink: 'syz.2.1892': attribute type 10 has an invalid length. [ 616.865204][T10079] netlink: 'syz.3.1893': attribute type 2 has an invalid length. [ 616.883235][T10069] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 616.997413][T10079] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.1893'. [ 617.468578][T10095] netlink: 'syz.3.1901': attribute type 10 has an invalid length. [ 617.507047][T10095] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1901'. [ 617.608898][T10095] bridge0: port 3(team0) entered blocking state [ 617.616437][T10095] bridge0: port 3(team0) entered forwarding state [ 617.634566][T10095] 8021q: adding VLAN 0 to HW filter on device team0 [ 619.556311][T10141] netlink: 'syz.4.1914': attribute type 2 has an invalid length. [ 619.574913][T10141] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.1914'. [ 620.229866][T10153] netlink: 'syz.1.1918': attribute type 10 has an invalid length. [ 620.270569][T10153] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1918'. [ 620.345457][T10153] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 627.109916][T10241] netlink: 'syz.4.1946': attribute type 10 has an invalid length. [ 627.223131][T10241] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 629.859702][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.866170][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.275840][T10290] netlink: 'syz.1.1959': attribute type 10 has an invalid length. [ 630.484809][T10290] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 632.559599][T10323] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1969'. [ 632.948652][T10323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 632.979819][T10323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 633.002801][T10323] bond0 (unregistering): Released all slaves [ 635.182887][T10378] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1989'. [ 637.326917][T10427] netlink: 'syz.0.2001': attribute type 2 has an invalid length. [ 637.345154][T10431] netlink: 'syz.0.2001': attribute type 2 has an invalid length. [ 640.966205][T10454] device syzkaller0 entered promiscuous mode [ 651.346467][T10546] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.2038'. [ 654.198585][ T33] wlan1: Trigger new scan to find an IBSS to join [ 657.887034][T10620] device syzkaller0 entered promiscuous mode [ 658.198196][ T4426] wlan1: Trigger new scan to find an IBSS to join [ 660.609912][ T4345] wlan1: Creating new IBSS network, BSSID fe:95:8a:09:85:63 [ 682.062596][T10870] netlink: 'syz.2.2131': attribute type 21 has an invalid length. [ 684.752903][ T4278] Bluetooth: hci4: unexpected event 0x08 length: 151 > 4 [ 688.632826][T10927] netlink: 'syz.1.2148': attribute type 21 has an invalid length. [ 691.251072][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.257575][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 693.799112][ T4329] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 699.900480][T11014] device syzkaller0 entered promiscuous mode [ 710.023373][T11090] netlink: 'syz.2.2195': attribute type 3 has an invalid length. [ 710.066226][T11090] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2195'. [ 711.449520][T11095] device syzkaller0 entered promiscuous mode [ 715.404271][T11152] netlink: 'syz.3.2221': attribute type 3 has an invalid length. [ 715.412802][T11152] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2221'. [ 718.889256][T11199] netlink: 'syz.1.2238': attribute type 3 has an invalid length. [ 718.930746][T11199] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2238'. [ 720.565273][T11071] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 723.974066][T11260] netlink: 'syz.0.2260': attribute type 3 has an invalid length. [ 723.996222][T11260] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2260'. [ 725.800066][ T4329] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 729.437694][T11334] netlink: 'syz.3.2286': attribute type 10 has an invalid length. [ 729.521200][T11334] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.563831][T11334] device bridge_slave_1 left promiscuous mode [ 729.592434][T11334] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.251719][ T4278] Bluetooth: hci1: Malformed Event: 0x13 [ 745.345305][ T4278] Bluetooth: hci4: Malformed Event: 0x13 [ 752.783626][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.790074][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.221937][ T7350] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 759.532516][T11747] netlink: 'syz.4.2427': attribute type 10 has an invalid length. [ 759.546317][T11747] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2427'. [ 759.594677][T11747] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 759.810979][T11745] netlink: 'syz.0.2426': attribute type 10 has an invalid length. [ 769.831486][T11859] netlink: 'syz.4.2462': attribute type 10 has an invalid length. [ 775.233185][T11901] netlink: 'syz.2.2474': attribute type 10 has an invalid length. [ 775.261646][T11901] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2474'. [ 775.282032][T11901] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 775.672413][T11908] netlink: 'syz.1.2488': attribute type 10 has an invalid length. [ 775.712215][T11908] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2488'. [ 775.757581][T11908] device dummy0 entered promiscuous mode [ 775.819693][T11908] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 778.585543][T11958] netlink: 'syz.2.2496': attribute type 29 has an invalid length. [ 778.597078][T11958] netlink: 'syz.2.2496': attribute type 29 has an invalid length. [ 778.614339][T11959] netlink: 'syz.2.2496': attribute type 29 has an invalid length. [ 778.628915][T11958] netlink: 'syz.2.2496': attribute type 29 has an invalid length. [ 778.650050][T11958] netlink: 'syz.2.2496': attribute type 29 has an invalid length. [ 782.593898][T11994] netlink: 'syz.1.2508': attribute type 2 has an invalid length. [ 782.617094][T11994] netlink: 'syz.1.2508': attribute type 8 has an invalid length. [ 782.633539][T11994] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2508'. [ 782.732019][T11998] netlink: 'syz.1.2508': attribute type 2 has an invalid length. [ 782.750260][T11998] netlink: 'syz.1.2508': attribute type 8 has an invalid length. [ 782.782766][T11998] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2508'. [ 786.848186][T12039] netlink: 'syz.0.2532': attribute type 46 has an invalid length. [ 786.864740][T12039] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2532'. [ 788.519719][ T4329] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 788.712142][T12056] netlink: 'syz.2.2526': attribute type 2 has an invalid length. [ 788.735276][T12056] netlink: 'syz.2.2526': attribute type 8 has an invalid length. [ 788.746980][T12056] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2526'. [ 788.777099][T12059] netlink: 'syz.2.2526': attribute type 2 has an invalid length. [ 788.784928][T12059] netlink: 'syz.2.2526': attribute type 8 has an invalid length. [ 788.877439][T12059] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2526'. [ 789.488123][T12079] netlink: 'syz.3.2536': attribute type 10 has an invalid length. [ 789.518483][T12079] bridge0: port 3(team0) entered disabled state [ 789.528077][T12079] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.631199][T12079] team0: Device bridge0 is already an upper device of the team interface [ 791.905857][T12124] netlink: 'syz.3.2546': attribute type 2 has an invalid length. [ 791.926207][T12124] netlink: 'syz.3.2546': attribute type 8 has an invalid length. [ 791.947052][T12124] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2546'. [ 791.981692][T12125] netlink: 'syz.3.2546': attribute type 2 has an invalid length. [ 792.007015][T12125] netlink: 'syz.3.2546': attribute type 8 has an invalid length. [ 792.050130][T12125] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2546'. [ 792.068233][T12130] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.854347][T12146] netlink: 'syz.2.2553': attribute type 10 has an invalid length. [ 793.126237][T12152] À: port 1(vlan0) entered blocking state [ 793.137203][T12152] À: port 1(vlan0) entered disabled state [ 793.144720][T12152] device vlan0 entered promiscuous mode [ 793.162647][T12152] device veth0_vlan entered promiscuous mode [ 794.559998][T12178] netlink: 'syz.0.2566': attribute type 2 has an invalid length. [ 794.728546][T12178] netlink: 'syz.0.2566': attribute type 8 has an invalid length. [ 794.752484][T12178] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2566'. [ 796.120141][T12194] netlink: 'syz.4.2571': attribute type 10 has an invalid length. [ 796.205828][T12198] netlink: 'syz.1.2574': attribute type 29 has an invalid length. [ 796.395773][T12194] device geneve1 entered promiscuous mode [ 796.421788][T12194] team0: Port device geneve1 added [ 796.468029][T12198] netlink: 'syz.1.2574': attribute type 29 has an invalid length. [ 796.501297][T12202] netlink: 'syz.1.2574': attribute type 29 has an invalid length. [ 796.513704][T12204] netlink: 'syz.1.2574': attribute type 29 has an invalid length. [ 796.545839][T12209] netlink: 'syz.1.2574': attribute type 29 has an invalid length. [ 796.830104][T12217] À: port 1(vlan0) entered blocking state [ 796.880922][T12217] À: port 1(vlan0) entered disabled state [ 796.913326][T12217] device vlan0 entered promiscuous mode [ 796.936391][T12217] device veth0_vlan entered promiscuous mode [ 798.781213][T12231] netlink: 'syz.4.2582': attribute type 46 has an invalid length. [ 798.813866][T12231] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2582'. [ 798.841073][T12233] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.2585'. [ 799.320164][T12244] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2588'. [ 799.340908][T12246] netlink: 'syz.0.2589': attribute type 10 has an invalid length. [ 799.372313][T12247] netlink: 105 bytes leftover after parsing attributes in process `syz.3.2588'. [ 799.536273][T12246] device geneve1 entered promiscuous mode [ 799.562174][T12246] team0: Port device geneve1 added [ 799.586817][T12247] netlink: 105 bytes leftover after parsing attributes in process `syz.3.2588'. [ 799.672068][T12251] netlink: 'syz.1.2591': attribute type 10 has an invalid length. [ 800.184414][T12251] device team_slave_0 left promiscuous mode [ 800.319297][T12251] team0 (unregistering): Port device team_slave_0 removed [ 800.378643][T12251] device team_slave_1 left promiscuous mode [ 800.450543][T12251] team0 (unregistering): Port device team_slave_1 removed [ 800.462924][T12251] device macvlan0 left promiscuous mode [ 800.502670][T12251] team0 (unregistering): Port device macvlan0 removed [ 801.648515][T12288] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.017862][T12294] netlink: 'syz.2.2606': attribute type 2 has an invalid length. [ 802.041806][T12294] netlink: 'syz.2.2606': attribute type 8 has an invalid length. [ 802.055576][T12294] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2606'. [ 803.359449][T12323] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.2614'. [ 804.352800][T12342] netlink: 'syz.1.2620': attribute type 2 has an invalid length. [ 804.398087][T12342] netlink: 'syz.1.2620': attribute type 8 has an invalid length. [ 804.461203][T12342] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2620'. [ 804.477228][T12340] netlink: 'syz.0.2619': attribute type 2 has an invalid length. [ 804.485113][T12340] netlink: 'syz.0.2619': attribute type 8 has an invalid length. [ 804.494876][T12340] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2619'. [ 804.515153][T12341] netlink: 'syz.0.2619': attribute type 2 has an invalid length. [ 804.524490][T12341] netlink: 'syz.0.2619': attribute type 8 has an invalid length. [ 804.532689][T12341] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2619'. [ 804.869090][T12347] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 804.875054][T12347] dvmrp1: ignored: set checksum disabled [ 804.910106][T12349] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2623'. [ 804.945284][T12349] netlink: 105 bytes leftover after parsing attributes in process `syz.2.2623'. [ 804.985226][T12349] netlink: 105 bytes leftover after parsing attributes in process `syz.2.2623'. [ 805.834966][T12364] netlink: 'syz.3.2629': attribute type 10 has an invalid length. [ 806.113276][T12364] bridge0: port 3(team0) entered disabled state [ 806.191558][T12364] device team_slave_0 left promiscuous mode [ 806.250831][T12364] team0 (unregistering): Port device team_slave_0 removed [ 806.263270][T12364] device team_slave_1 left promiscuous mode [ 806.432975][T12364] team0 (unregistering): Port device team_slave_1 removed [ 806.455545][T12364] device macvlan0 left promiscuous mode [ 806.560921][T12364] team0 (unregistering): Port device macvlan0 removed [ 808.836233][T12398] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2640'. [ 808.890513][T12406] netlink: 105 bytes leftover after parsing attributes in process `syz.4.2640'. [ 811.799881][T12406] netlink: 105 bytes leftover after parsing attributes in process `syz.4.2640'. [ 812.110288][T12421] netlink: 'syz.4.2645': attribute type 2 has an invalid length. [ 812.234204][T12421] netlink: 'syz.4.2645': attribute type 8 has an invalid length. [ 812.267178][T12421] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2645'. [ 812.327928][T12423] netlink: 'syz.4.2645': attribute type 2 has an invalid length. [ 812.392279][T12423] netlink: 'syz.4.2645': attribute type 8 has an invalid length. [ 812.442982][T12423] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2645'. [ 813.196035][T12443] netlink: 'syz.2.2654': attribute type 10 has an invalid length. [ 813.449467][T12443] device geneve1 entered promiscuous mode [ 813.480485][T12443] team0: Port device geneve1 added [ 813.795298][T12449] netlink: 'syz.0.2657': attribute type 10 has an invalid length. [ 814.034160][T12449] device team_slave_0 left promiscuous mode [ 814.143686][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.150143][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.269339][T12449] team0 (unregistering): Port device team_slave_0 removed [ 814.297898][T12449] device team_slave_1 left promiscuous mode [ 815.944895][T12449] team0 (unregistering): Port device team_slave_1 removed [ 815.953609][T12449] device macvlan0 left promiscuous mode [ 815.963280][T12449] team0 (unregistering): Port device macvlan0 removed [ 815.971078][T12449] device geneve1 left promiscuous mode [ 816.011556][T12449] team0 (unregistering): Port device geneve1 removed [ 817.319822][T12497] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 817.346867][T12497] dvmrp1: ignored: set checksum disabled [ 817.488179][T12500] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2674'. [ 817.521031][T12503] netlink: 105 bytes leftover after parsing attributes in process `syz.1.2674'. [ 817.564961][T12503] netlink: 105 bytes leftover after parsing attributes in process `syz.1.2674'. [ 818.071680][T12516] netlink: 'syz.2.2679': attribute type 10 has an invalid length. [ 819.640274][T12516] device team_slave_0 left promiscuous mode [ 819.667883][T12516] team0 (unregistering): Port device team_slave_0 removed [ 819.718210][T12516] device team_slave_1 left promiscuous mode [ 819.778880][T12516] team0 (unregistering): Port device team_slave_1 removed [ 819.796276][T12516] device macvlan0 left promiscuous mode [ 819.842502][T12516] team0 (unregistering): Port device macvlan0 removed [ 819.863996][T12516] device geneve1 left promiscuous mode [ 819.928906][T12516] team0 (unregistering): Port device geneve1 removed [ 820.396407][T12545] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 820.418800][T12545] dvmrp1: ignored: set checksum disabled [ 820.525012][ T4426] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 821.145434][T12556] : port 1(syz_tun) entered blocking state [ 821.157295][T12556] : port 1(syz_tun) entered disabled state [ 821.192874][T12556] device syz_tun entered promiscuous mode [ 821.269163][T12564] device syz_tun left promiscuous mode [ 821.284777][T12564] : port 1(syz_tun) entered disabled state [ 822.186945][T12583] netlink: 'syz.4.2702': attribute type 10 has an invalid length. [ 822.264184][T12583] device team_slave_0 left promiscuous mode [ 822.279522][T12583] team0 (unregistering): Port device team_slave_0 removed [ 822.287706][T12583] device team_slave_1 left promiscuous mode [ 822.324348][T12583] team0 (unregistering): Port device team_slave_1 removed [ 822.343612][T12583] device geneve1 left promiscuous mode [ 822.381787][T12583] team0 (unregistering): Port device geneve1 removed [ 822.418271][T12581] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 822.424668][T12581] dvmrp1: ignored: set checksum disabled [ 824.664268][T12625] netlink: 'syz.4.2719': attribute type 10 has an invalid length. [ 825.282345][T12634] netlink: 'syz.0.2731': attribute type 10 has an invalid length. [ 825.322285][T12635] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 825.351130][T12635] dvmrp1: ignored: set checksum disabled [ 828.805327][T12686] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 828.811483][T12686] dvmrp1: ignored: set checksum disabled [ 830.421344][T12720] : port 1(syz_tun) entered blocking state [ 830.465135][T12720] : port 1(syz_tun) entered disabled state [ 830.527589][T12720] device syz_tun entered promiscuous mode [ 830.597561][T12723] device syz_tun left promiscuous mode [ 830.664831][T12723] : port 1(syz_tun) entered disabled state [ 831.149852][T12734] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 831.155739][T12734] dvmrp1: ignored: set checksum disabled [ 832.392412][T12758] device syzkaller0 entered promiscuous mode [ 834.988655][T12775] : port 1(syz_tun) entered blocking state [ 834.994715][T12775] : port 1(syz_tun) entered disabled state [ 835.035672][T12775] device syz_tun entered promiscuous mode [ 835.104494][T12776] device syz_tun left promiscuous mode [ 835.111523][T12776] : port 1(syz_tun) entered disabled state [ 835.443713][T12784] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 835.474977][T12784] dvmrp1: ignored: set checksum disabled [ 837.871155][T12792] netlink: 'syz.0.2775': attribute type 10 has an invalid length. [ 838.156225][T12805] netlink: 'syz.0.2782': attribute type 10 has an invalid length. [ 838.571829][T12815] device lo entered promiscuous mode [ 838.610954][T12815] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 839.666311][T12835] netlink: 'syz.4.2793': attribute type 10 has an invalid length. [ 844.902091][T12866] netlink: 'syz.2.2800': attribute type 33 has an invalid length. [ 844.914267][T12866] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2800'. [ 844.934147][T12869] netdevsim netdevsim4: Direct firmware load for Ö failed with error -2 [ 844.953281][T12869] netdevsim netdevsim4: Falling back to sysfs fallback for: Ö [ 845.412078][T12886] netlink: 'syz.3.2809': attribute type 10 has an invalid length. [ 847.115840][T12911] netlink: 'syz.1.2814': attribute type 10 has an invalid length. [ 847.336008][T12917] device lo entered promiscuous mode [ 847.367449][T12917] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 850.915633][T12941] Illegal XDP return value 4294967294 on prog (id 1782) dev N/A, expect packet loss! [ 852.519195][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 853.771814][T12946] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 853.782310][T12946] dvmrp1: ignored: set checksum disabled [ 855.615293][T12975] device syzkaller0 left promiscuous mode [ 857.646114][T13010] device lo entered promiscuous mode [ 857.668160][T13010] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 860.026361][T13042] netlink: 'syz.1.2865': attribute type 19 has an invalid length. [ 860.034901][T13042] netlink: 14552 bytes leftover after parsing attributes in process `syz.1.2865'. [ 868.295191][T13181] netlink: 'syz.4.2919': attribute type 10 has an invalid length. [ 873.642246][T13253] netlink: 'syz.3.2948': attribute type 19 has an invalid length. [ 873.652057][T13253] netlink: 14552 bytes leftover after parsing attributes in process `syz.3.2948'. [ 873.833534][T13255] netlink: 'syz.0.2949': attribute type 10 has an invalid length. [ 874.056119][T13259] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.597120][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.603537][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 877.000558][T13317] netlink: 'syz.2.2973': attribute type 10 has an invalid length. [ 881.214375][T13389] netlink: 'syz.4.2999': attribute type 19 has an invalid length. [ 881.251426][T13389] netlink: 14552 bytes leftover after parsing attributes in process `syz.4.2999'. [ 882.730697][T13408] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.126383][T13432] netlink: 'syz.3.3016': attribute type 10 has an invalid length. [ 884.517908][ T4329] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 893.865974][T13594] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.745175][T13601] device syzkaller0 entered promiscuous mode [ 903.290530][T13680] netlink: 'syz.3.3108': attribute type 25 has an invalid length. [ 903.345164][T13680] netlink: 'syz.3.3108': attribute type 29 has an invalid length. [ 903.390523][T13683] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3108'. [ 909.348579][T13787] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3153'. [ 909.385532][T13785] device syzkaller0 entered promiscuous mode [ 909.596495][T13787] netlink: 'syz.3.3153': attribute type 10 has an invalid length. [ 909.614120][T13787] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3153'. [ 910.124189][T13787] device vlan0 left promiscuous mode [ 910.130787][T13787] device veth0_vlan left promiscuous mode [ 910.138314][T13787] À: port 1(vlan0) entered disabled state [ 912.668021][T13797] device veth1_macvtap left promiscuous mode [ 915.291354][T13843] netlink: 'syz.0.3172': attribute type 10 has an invalid length. [ 915.362571][T13846] netlink: 'syz.1.3173': attribute type 16 has an invalid length. [ 915.415036][T13846] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3173'. [ 915.463077][T13846] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 919.506820][ T4278] Bluetooth: hci1: unexpected subevent 0x12 length: 150 > 5 [ 921.316308][T13926] netlink: 'syz.2.3201': attribute type 10 has an invalid length. [ 923.118142][T13965] netlink: 'syz.1.3217': attribute type 10 has an invalid length. [ 923.458922][T13968] netlink: 'syz.3.3213': attribute type 16 has an invalid length. [ 923.484468][T13968] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3213'. [ 923.525118][T13968] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 925.305094][T14001] netlink: 'syz.3.3230': attribute type 10 has an invalid length. [ 925.712794][T14010] device veth1_macvtap left promiscuous mode [ 926.238719][T14023] netlink: 'syz.0.3247': attribute type 16 has an invalid length. [ 926.270708][T14023] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3247'. [ 926.307386][T14023] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 926.864654][T14041] netlink: 'syz.4.3243': attribute type 10 has an invalid length. [ 927.067909][T14048] netlink: 'syz.3.3248': attribute type 29 has an invalid length. [ 927.111243][T14048] netlink: 'syz.3.3248': attribute type 29 has an invalid length. [ 927.161019][T14052] netlink: 'syz.3.3248': attribute type 29 has an invalid length. [ 927.569002][T14056] device veth1_macvtap left promiscuous mode [ 928.898255][ T4278] Bluetooth: hci4: unexpected subevent 0x12 length: 150 > 5 [ 930.927959][T14096] netlink: 'syz.2.3256': attribute type 16 has an invalid length. [ 930.958322][T14096] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3256'. [ 931.006207][T14096] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 932.812159][T14126] netlink: 'syz.2.3279': attribute type 29 has an invalid length. [ 932.877214][T14126] netlink: 'syz.2.3279': attribute type 29 has an invalid length. [ 933.429767][T14146] netlink: 180900 bytes leftover after parsing attributes in process `syz.1.3287'. [ 933.440060][T14146] openvswitch: netlink: Flow actions attr not present in new flow. [ 933.878247][T14158] netlink: 'syz.2.3290': attribute type 10 has an invalid length. [ 934.642278][T14179] netlink: 'syz.4.3300': attribute type 29 has an invalid length. [ 934.685395][T14179] netlink: 'syz.4.3300': attribute type 29 has an invalid length. [ 934.921953][T14186] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3303'. [ 934.975309][T14186] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 935.027299][T14186] CPU: 1 PID: 14186 Comm: syz.3.3303 Not tainted syzkaller #0 [ 935.034855][T14186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 935.044977][T14186] Call Trace: [ 935.048384][T14186] [ 935.051473][T14186] dump_stack_lvl+0x188/0x24e [ 935.056320][T14186] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 935.062601][T14186] ? show_regs_print_info+0x12/0x12 [ 935.067932][T14186] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 935.074176][T14186] sysfs_warn_dup+0x8a/0xa0 [ 935.078765][T14186] sysfs_do_create_link_sd+0xc0/0x110 [ 935.084219][T14186] device_add+0x83b/0x1050 [ 935.088793][T14186] wiphy_register+0x1d8b/0x2aa0 [ 935.093799][T14186] ? cfg80211_event_work+0x40/0x40 [ 935.099006][T14186] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 935.105236][T14186] ? ieee80211_register_hw+0x2ca9/0x39f0 [ 935.111040][T14186] ieee80211_register_hw+0x2d48/0x39f0 [ 935.116573][T14186] ? ieee80211_register_hw+0xee1/0x39f0 [ 935.122172][T14186] ? ieee80211_register_hw+0xee1/0x39f0 [ 935.127916][T14186] ? ieee80211_tasklet_handler+0x20/0x20 [ 935.133609][T14186] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 935.139567][T14186] ? __debug_object_init+0xed/0x440 [ 935.144949][T14186] ? memset+0x1e/0x40 [ 935.149047][T14186] ? __hrtimer_init+0x189/0x270 [ 935.154006][T14186] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 935.159862][T14186] ? memcpy+0x3c/0x60 [ 935.163892][T14186] hwsim_new_radio_nl+0xab7/0xc90 [ 935.169003][T14186] genl_family_rcv_msg_doit+0x22f/0x350 [ 935.174689][T14186] ? end_current_label_crit_section+0x170/0x170 [ 935.181122][T14186] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 935.187079][T14186] ? bpf_lsm_capable+0x5/0x10 [ 935.191931][T14186] ? security_capable+0x85/0xb0 [ 935.196894][T14186] genl_rcv_msg+0x601/0x790 [ 935.201458][T14186] ? genl_bind+0x360/0x360 [ 935.205940][T14186] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 935.212348][T14186] netlink_rcv_skb+0x1ef/0x440 [ 935.217356][T14186] ? genl_bind+0x360/0x360 [ 935.221827][T14186] ? netlink_ack+0x1160/0x1160 [ 935.226669][T14186] ? down_read+0x1a8/0x2d0 [ 935.231161][T14186] genl_rcv+0x24/0x40 [ 935.235185][T14186] netlink_unicast+0x7ad/0x920 [ 935.240043][T14186] netlink_sendmsg+0x8ad/0xbd0 [ 935.244876][T14186] ? netlink_getsockopt+0x550/0x550 [ 935.250398][T14186] ? apparmor_socket_sendmsg+0x8a/0x330 [ 935.256009][T14186] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 935.261340][T14186] ? security_socket_sendmsg+0x7c/0xa0 [ 935.266959][T14186] ? netlink_getsockopt+0x550/0x550 [ 935.272225][T14186] ____sys_sendmsg+0x5ed/0x9a0 [ 935.277148][T14186] ? __sys_sendmsg_sock+0x30/0x30 [ 935.282223][T14186] ? __import_iovec+0x306/0x510 [ 935.287195][T14186] ? import_iovec+0x6f/0xa0 [ 935.291760][T14186] ___sys_sendmsg+0x2a2/0x360 [ 935.296501][T14186] ? __sys_sendmsg+0x2a0/0x2a0 [ 935.301373][T14186] __se_sys_sendmsg+0x1c3/0x2b0 [ 935.306281][T14186] ? ct_nmi_exit+0x145/0x1c0 [ 935.310923][T14186] ? __x64_sys_sendmsg+0x80/0x80 [ 935.315927][T14186] ? lockdep_hardirqs_on+0x94/0x140 [ 935.321174][T14186] do_syscall_64+0x4c/0xa0 [ 935.325645][T14186] ? clear_bhb_loop+0x60/0xb0 [ 935.330375][T14186] ? clear_bhb_loop+0x60/0xb0 [ 935.335140][T14186] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 935.341099][T14186] RIP: 0033:0x7f7bc299e019 [ 935.345711][T14186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 935.365500][T14186] RSP: 002b:00007f7bc393c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 935.374128][T14186] RAX: ffffffffffffffda RBX: 00007f7bc2c25fa0 RCX: 00007f7bc299e019 [ 935.382151][T14186] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 935.390169][T14186] RBP: 00007f7bc2a3500c R08: 0000000000000000 R09: 0000000000000000 [ 935.398187][T14186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 935.406208][T14186] R13: 00007f7bc2c26038 R14: 00007f7bc2c25fa0 R15: 00007ffed1ecb248 [ 935.414314][T14186] [ 935.813304][T14200] netlink: 'syz.1.3318': attribute type 29 has an invalid length. [ 935.828978][T14200] netlink: 'syz.1.3318': attribute type 29 has an invalid length. [ 935.935505][T14202] device veth1_macvtap left promiscuous mode [ 937.005103][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.017498][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.394875][T14246] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.3325'. [ 937.483230][T14246] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 937.495415][T14252] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.3332'. [ 937.527941][T14256] netlink: 'syz.0.3330': attribute type 29 has an invalid length. [ 937.535685][T14252] openvswitch: netlink: Flow actions attr not present in new flow. [ 937.771848][T14256] netlink: 'syz.0.3330': attribute type 29 has an invalid length. [ 937.795289][T14257] netlink: 'syz.0.3330': attribute type 29 has an invalid length. [ 939.888141][T14299] netlink: 'syz.3.3349': attribute type 25 has an invalid length. [ 939.936183][T14299] netlink: 'syz.3.3349': attribute type 29 has an invalid length. [ 940.000779][T14304] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3349'. [ 942.187080][T14332] device syzkaller0 entered promiscuous mode [ 946.742944][T14387] device syzkaller0 entered promiscuous mode [ 948.593650][T14418] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3392'. [ 949.178362][T14431] netlink: 'syz.4.3398': attribute type 29 has an invalid length. [ 949.313329][T14431] netlink: 'syz.4.3398': attribute type 29 has an invalid length. [ 949.887790][T14450] netlink: 'syz.2.3404': attribute type 29 has an invalid length. [ 949.891143][T14446] netlink: 'syz.2.3404': attribute type 1 has an invalid length. [ 949.997352][T14446] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3404'. [ 950.018910][T14447] netlink: 'syz.4.3403': attribute type 10 has an invalid length. [ 950.056841][T14447] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3403'. [ 950.088029][T14447] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 950.289270][T14447] batman_adv: batadv0: Removing interface: veth0_vlan [ 950.435545][T14450] netlink: 'syz.2.3404': attribute type 29 has an invalid length. [ 951.770754][T14469] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3409'. [ 952.345031][T14479] netlink: 'syz.1.3416': attribute type 10 has an invalid length. [ 952.893783][T14492] netlink: 'syz.4.3420': attribute type 1 has an invalid length. [ 952.935321][T14492] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.3420'. [ 953.022062][T14500] netlink: 'syz.4.3420': attribute type 29 has an invalid length. [ 953.218553][T14500] netlink: 'syz.4.3420': attribute type 29 has an invalid length. [ 954.368489][T14518] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3426'. [ 955.645153][T14539] netlink: 'syz.0.3435': attribute type 29 has an invalid length. [ 955.671684][T14537] netlink: 'syz.0.3435': attribute type 1 has an invalid length. [ 955.739144][T14537] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.3435'. [ 955.791142][T14539] netlink: 'syz.0.3435': attribute type 29 has an invalid length. [ 955.999543][T14550] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3438'. [ 957.140379][T14550] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3438'. [ 957.182525][T14551] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3438'. [ 957.469966][T14561] netlink: 'syz.4.3441': attribute type 11 has an invalid length. [ 957.487473][T14561] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3441'. [ 957.891076][T14577] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.3448'. [ 957.913640][T14577] openvswitch: netlink: Flow actions attr not present in new flow. [ 958.413321][T14589] netlink: 'syz.1.3451': attribute type 29 has an invalid length. [ 958.498257][T14589] netlink: 'syz.1.3451': attribute type 29 has an invalid length. [ 958.591108][T14588] netlink: 'syz.0.3450': attribute type 10 has an invalid length. [ 959.091242][T14604] netlink: 'syz.1.3457': attribute type 11 has an invalid length. [ 959.137325][T14604] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3457'. [ 959.515228][T14612] netlink: 'syz.0.3459': attribute type 10 has an invalid length. [ 959.564286][T14612] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3459'. [ 959.623878][T14612] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 960.247595][T14612] device vlan0 left promiscuous mode [ 960.262709][T14612] device veth0_vlan left promiscuous mode [ 960.280234][T14612] À: port 1(vlan0) entered disabled state [ 960.322354][T14612] batman_adv: batadv0: Removing interface: veth0_vlan [ 960.447839][T14617] netlink: 'syz.3.3472': attribute type 11 has an invalid length. [ 960.466270][T14617] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3472'. [ 960.535594][T14629] Ÿë: port 1(veth0_to_team) entered blocking state [ 960.583944][T14629] Ÿë: port 1(veth0_to_team) entered disabled state [ 960.607915][T14629] device veth0_to_team entered promiscuous mode [ 963.586132][T14645] netlink: 'syz.4.3468': attribute type 10 has an invalid length. [ 964.175421][T14657] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3470'. [ 964.434741][T14665] netlink: 'syz.3.3474': attribute type 1 has an invalid length. [ 964.605766][T14664] IPv6: NLM_F_CREATE should be specified when creating new route [ 965.399501][T14670] netlink: 'syz.2.3478': attribute type 10 has an invalid length. [ 965.416454][T14670] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3478'. [ 965.432029][T14670] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 966.269512][T14670] batman_adv: batadv0: Removing interface: veth0_vlan [ 967.180984][T14705] netlink: 'syz.3.3488': attribute type 29 has an invalid length. [ 967.207464][T14703] netlink: 'syz.3.3488': attribute type 1 has an invalid length. [ 967.269034][T14703] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.3488'. [ 967.354146][T14705] netlink: 'syz.3.3488': attribute type 29 has an invalid length. [ 967.479665][T14712] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.3492'. [ 967.522353][T14712] openvswitch: netlink: Flow actions attr not present in new flow. [ 969.322509][T14745] netlink: 'syz.3.3502': attribute type 10 has an invalid length. [ 969.372142][T14745] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3502'. [ 969.731054][T14749] netlink: 'syz.1.3507': attribute type 1 has an invalid length. [ 969.785392][T14749] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.3507'. [ 969.821926][T14754] netlink: 'syz.1.3507': attribute type 29 has an invalid length. [ 969.860675][T14754] netlink: 'syz.1.3507': attribute type 29 has an invalid length. [ 970.829324][T14764] Ÿë: port 1(veth0_to_team) entered blocking state [ 970.836219][T14764] Ÿë: port 1(veth0_to_team) entered disabled state [ 970.864325][T14764] device veth0_to_team entered promiscuous mode [ 971.264451][T14773] netlink: 'syz.2.3526': attribute type 1 has an invalid length. [ 971.290566][T14777] netlink: 'syz.2.3526': attribute type 29 has an invalid length. [ 971.313995][T14773] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3526'. [ 971.396861][T14777] netlink: 'syz.2.3526': attribute type 29 has an invalid length. [ 974.375563][T14820] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3525'. [ 974.574335][T14823] Ÿë: port 1(gretap0) entered blocking state [ 974.620973][T14823] Ÿë: port 1(gretap0) entered disabled state [ 974.649459][T14823] device gretap0 entered promiscuous mode [ 974.731456][T14825] Ÿë: port 2(veth0_to_team) entered blocking state [ 974.810857][T14825] Ÿë: port 2(veth0_to_team) entered disabled state [ 974.894031][T14825] device veth0_to_team entered promiscuous mode [ 977.007388][T14855] netlink: 'syz.4.3532': attribute type 29 has an invalid length. [ 977.032213][T14848] netlink: 'syz.4.3532': attribute type 1 has an invalid length. [ 977.051253][T14855] netlink: 'syz.4.3532': attribute type 29 has an invalid length. [ 977.106804][T14848] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.3532'. [ 977.735519][T14871] netlink: 'syz.2.3546': attribute type 29 has an invalid length. [ 977.816340][T14871] netlink: 'syz.2.3546': attribute type 29 has an invalid length. [ 977.977073][T14877] netlink: 'syz.2.3546': attribute type 29 has an invalid length. [ 978.033063][T14881] Ÿë: port 1(gretap0) entered blocking state [ 978.049875][T14881] Ÿë: port 1(gretap0) entered disabled state [ 978.081270][T14881] device gretap0 entered promiscuous mode [ 978.130864][T14875] Ÿë: port 2(veth0_to_team) entered blocking state [ 978.181226][T14875] Ÿë: port 2(veth0_to_team) entered disabled state [ 978.277471][T14875] device veth0_to_team entered promiscuous mode [ 982.733357][T14953] netlink: 'syz.0.3573': attribute type 29 has an invalid length. [ 982.806388][T14953] netlink: 'syz.0.3573': attribute type 29 has an invalid length. [ 982.818167][T14954] netlink: 'syz.0.3573': attribute type 29 has an invalid length. [ 982.858596][T14953] netlink: 'syz.0.3573': attribute type 29 has an invalid length. [ 982.966636][T14954] netlink: 'syz.0.3573': attribute type 29 has an invalid length. [ 990.520755][T15025] IPv6: NLM_F_CREATE should be specified when creating new route [ 994.090640][T15076] IPv6: NLM_F_CREATE should be specified when creating new route [ 997.568633][T15126] device veth1_macvtap entered promiscuous mode [ 997.630959][T15126] device macsec0 entered promiscuous mode [ 997.649381][T10622] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 998.460643][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.467786][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1002.114537][T15204] netlink: 'syz.3.3662': attribute type 29 has an invalid length. [ 1002.197246][T15204] netlink: 'syz.3.3662': attribute type 29 has an invalid length. [ 1002.260842][T15210] netlink: 'syz.3.3662': attribute type 29 has an invalid length. [ 1002.345129][T15213] netlink: 'syz.3.3662': attribute type 29 has an invalid length. [ 1002.382554][T15204] netlink: 'syz.3.3662': attribute type 29 has an invalid length. [ 1009.809741][T15317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3711'. [ 1009.858616][T15317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3711'. [ 1009.907524][T15317] netlink: 33 bytes leftover after parsing attributes in process `syz.1.3711'. [ 1009.943990][T15317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3711'. [ 1010.002859][T15317] netlink: 33 bytes leftover after parsing attributes in process `syz.1.3711'. [ 1010.045816][T15317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3711'. [ 1010.084344][T15317] netlink: 33 bytes leftover after parsing attributes in process `syz.1.3711'. [ 1012.625955][T15373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3722'. [ 1012.655971][T15373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3722'. [ 1012.682110][T15373] netlink: 33 bytes leftover after parsing attributes in process `syz.0.3722'. [ 1013.738281][T15385] netlink: 'syz.3.3725': attribute type 25 has an invalid length. [ 1013.774450][T15385] netlink: 'syz.3.3725': attribute type 28 has an invalid length. [ 1015.372219][T15414] __nla_validate_parse: 5 callbacks suppressed [ 1015.372434][T15414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3737'. [ 1015.439574][T15414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3737'. [ 1015.471237][T15414] netlink: 33 bytes leftover after parsing attributes in process `syz.3.3737'. [ 1015.497978][T15414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3737'. [ 1015.554848][T15414] netlink: 33 bytes leftover after parsing attributes in process `syz.3.3737'. [ 1015.573798][T15414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3737'. [ 1015.586389][T15414] netlink: 33 bytes leftover after parsing attributes in process `syz.3.3737'. [ 1023.312485][T15565] raw_sendmsg: syz.2.3788 forgot to set AF_INET. Fix it! [ 1024.788018][T15594] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3797'. [ 1030.475627][T15687] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1034.174869][T15791] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3838'. [ 1034.664905][T15802] netlink: 'syz.4.3843': attribute type 10 has an invalid length. [ 1034.796506][T15802] device veth0_macvtap left promiscuous mode [ 1045.447047][T15977] netlink: 'syz.1.3904': attribute type 10 has an invalid length. [ 1045.514391][T15977] device veth0_macvtap left promiscuous mode [ 1046.714208][T16027] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3909'. [ 1048.525495][T16060] netlink: 'syz.3.3924': attribute type 10 has an invalid length. [ 1048.572247][T16060] device veth0_macvtap left promiscuous mode [ 1052.163391][T16160] syz.4.3951 (16160) used obsolete PPPIOCDETACH ioctl [ 1055.685332][T16209] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.3979'. [ 1055.761858][T16213] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3970'. [ 1056.603271][T16232] netlink: 'syz.3.3977': attribute type 21 has an invalid length. [ 1056.664464][T16232] netlink: 'syz.3.3977': attribute type 12 has an invalid length. [ 1056.688873][T16232] netlink: 'syz.3.3977': attribute type 13 has an invalid length. [ 1056.697623][T16232] netlink: 'syz.3.3977': attribute type 14 has an invalid length. [ 1056.705520][T16232] netlink: 'syz.3.3977': attribute type 15 has an invalid length. [ 1056.724201][T16232] netlink: 'syz.3.3977': attribute type 16 has an invalid length. [ 1056.748616][T16232] netlink: 'syz.3.3977': attribute type 19 has an invalid length. [ 1056.788959][T16232] netlink: 'syz.3.3977': attribute type 6 has an invalid length. [ 1056.806786][T16232] netlink: 9618 bytes leftover after parsing attributes in process `syz.3.3977'. [ 1059.702039][T16289] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3992'. [ 1059.879812][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.886302][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.287447][T16307] netlink: 'syz.0.3998': attribute type 21 has an invalid length. [ 1060.295367][T16307] netlink: 'syz.0.3998': attribute type 12 has an invalid length. [ 1060.308595][T16307] netlink: 9618 bytes leftover after parsing attributes in process `syz.0.3998'. [ 1062.964733][T16336] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4007'. [ 1063.092023][T16342] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4009'. [ 1066.324539][T16354] validate_nla: 7 callbacks suppressed [ 1066.324647][T16354] netlink: 'syz.4.4014': attribute type 1 has an invalid length. [ 1067.884397][T16378] netdevsim netdevsim1: Direct firmware load for .net/syz1 failed with error -2 [ 1067.956736][T16378] netdevsim netdevsim1: Falling back to sysfs fallback for: .net/syz1 [ 1068.227013][T16391] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4029'. [ 1071.616072][T16411] netlink: 'syz.0.4035': attribute type 1 has an invalid length. [ 1072.650516][T16419] netlink: 180 bytes leftover after parsing attributes in process `syz.4.4038'. [ 1072.665533][T16422] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4038'. [ 1073.463059][T16433] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1073.567327][T16433] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1073.816679][T16439] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4044'. [ 1073.856113][T16445] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4044'. [ 1073.915137][T16444] can: request_module (can-proto-0) failed. [ 1073.922866][T16445] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1073.943547][T16445] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1074.365734][T16456] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4048'. [ 1076.218049][T16466] netlink: 180 bytes leftover after parsing attributes in process `syz.1.4052'. [ 1076.229705][T16469] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4052'. [ 1077.138195][T16486] can: request_module (can-proto-0) failed. [ 1077.242878][T16490] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4060'. [ 1077.294388][T16500] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4060'. [ 1077.304600][T16500] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1077.331584][T16500] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1077.359344][T16492] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1077.424253][T16492] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1077.596838][T16508] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4064'. [ 1078.381530][T16525] netdevsim netdevsim4: Direct firmware load for .net/syz1 failed with error -2 [ 1078.423446][T16525] netdevsim netdevsim4: Falling back to sysfs fallback for: .net/syz1 [ 1079.490093][T16538] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1080.489223][T16546] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4074'. [ 1080.543165][T16546] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4074'. [ 1080.555421][T16546] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1080.635386][T16546] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1080.781355][T16554] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4073'. [ 1081.097538][T16556] can: request_module (can-proto-0) failed. [ 1081.784407][T16577] netlink: 'syz.3.4081': attribute type 25 has an invalid length. [ 1081.808368][T16577] netlink: 'syz.3.4081': attribute type 29 has an invalid length. [ 1081.848320][T16579] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4081'. [ 1082.131792][T16581] netdevsim netdevsim2: Direct firmware load for .net/syz1 failed with error -2 [ 1082.207197][T16581] netdevsim netdevsim2: Falling back to sysfs fallback for: .net/syz1 [ 1083.812862][T16601] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 1083.862728][T16601] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 1083.906112][T16601] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1084.444078][T16614] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4096'. [ 1084.720457][T16621] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4097'. [ 1086.033217][T10622] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 1086.041945][T16636] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1086.066767][T10622] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1086.284336][T16644] netdevsim netdevsim0: Direct firmware load for .net/syz1 failed with error -2 [ 1086.386322][T16644] netdevsim netdevsim0: Falling back to sysfs fallback for: .net/syz1 [ 1087.313484][T16660] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4110'. [ 1089.790805][T16681] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1089.844484][T16681] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1089.870712][T16679] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1090.240469][T16694] netdevsim netdevsim3: Direct firmware load for .net/syz1 failed with error -2 [ 1090.262076][T16688] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1090.271612][T16694] netdevsim netdevsim3: Falling back to sysfs fallback for: .net/syz1 [ 1090.281784][T16688] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1090.311837][T16688] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1091.675527][T16712] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4126'. [ 1091.718443][T16718] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4126'. [ 1091.759471][T16718] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1091.779063][T16718] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1092.803781][T16743] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1092.813030][T16743] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1092.823005][T16743] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1093.089059][T16750] netdevsim netdevsim0: Direct firmware load for .net/syz1 failed with error -2 [ 1093.108275][T16750] netdevsim netdevsim0: Falling back to sysfs fallback for: .net/syz1 [ 1094.411854][T16771] netlink: 'syz.2.4147': attribute type 11 has an invalid length. [ 1094.457295][T16771] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4147'. [ 1095.518323][T16790] IPv6: pim6reg1: Disabled Multicast RS [ 1096.640328][T16803] netdevsim netdevsim2: Direct firmware load for .net/syz1 failed with error -2 [ 1096.650656][T16803] netdevsim netdevsim2: Falling back to sysfs fallback for: .net/syz1 [ 1099.681010][T16863] netdevsim netdevsim3: Direct firmware load for .net/syz1 failed with error -2 [ 1099.691464][T16863] netdevsim netdevsim3: Falling back to sysfs fallback for: .net/syz1 [ 1099.781285][T16862] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1099.792332][T16862] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1099.802237][T16862] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1102.230351][T16910] IPv6: pim6reg1: Disabled Multicast RS [ 1102.819798][T16919] device syzkaller0 entered promiscuous mode [ 1105.490564][T16928] netdevsim netdevsim0: Direct firmware load for .net/syz1 failed with error -2 [ 1105.490756][T16927] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1105.500297][T16928] netdevsim netdevsim0: Falling back to sysfs fallback for: .net/syz1 [ 1105.508257][T16927] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1105.524981][T16927] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1105.769719][T16932] netlink: 'syz.4.4199': attribute type 11 has an invalid length. [ 1105.805251][T16932] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4199'. [ 1107.620991][T16966] -: renamed from syzkaller0 [ 1107.710402][T16967] netlink: 'syz.3.4212': attribute type 10 has an invalid length. [ 1108.015323][T16975] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.4216'. [ 1109.207944][T17000] device syzkaller0 entered promiscuous mode [ 1110.398632][T17022] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.4233'. [ 1113.275890][T17035] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1115.106642][T17026] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4234'. [ 1115.141225][T17033] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4237'. [ 1115.151305][T17034] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4237'. [ 1117.012192][T17070] netlink: 'syz.0.4248': attribute type 2 has an invalid length. [ 1117.100972][T17066] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.4247'. [ 1117.126104][T17066] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1119.501822][T17070] device 0 entered promiscuous mode [ 1120.016102][T17087] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1120.724037][T17078] device syzkaller0 entered promiscuous mode [ 1120.774307][T17085] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4252'. [ 1120.814778][T17086] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4252'. [ 1121.325306][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.331831][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1125.280401][T17120] netlink: 'syz.1.4265': attribute type 2 has an invalid length. [ 1126.150679][T17120] device 0 entered promiscuous mode [ 1126.160749][T17136] -: renamed from syzkaller0 [ 1127.260815][T17154] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4272'. [ 1127.280513][T17154] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4272'. [ 1127.314506][T17154] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1130.385319][T17195] netlink: 'syz.2.4285': attribute type 2 has an invalid length. [ 1130.418751][T17193] -: renamed from syzkaller0 [ 1130.902434][T17202] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4288'. [ 1130.995713][T17208] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1131.102358][T17195] device 0 entered promiscuous mode [ 1131.190707][T17206] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4288'. [ 1133.473318][T17226] device syzkaller0 entered promiscuous mode [ 1137.861445][T17262] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4305'. [ 1137.907737][T17262] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4305'. [ 1137.980278][T17262] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1142.324933][T17283] device syzkaller0 entered promiscuous mode [ 1142.362934][T17295] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4317'. [ 1142.386912][T17295] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1142.635289][T17296] device syzkaller0 entered promiscuous mode [ 1149.380617][T17353] device syzkaller0 entered promiscuous mode [ 1155.491580][T17421] device syzkaller0 entered promiscuous mode [ 1159.567550][T17449] device syzkaller0 entered promiscuous mode [ 1160.732487][T17474] netlink: 'syz.4.4377': attribute type 2 has an invalid length. [ 1162.899768][T17474] device 0 entered promiscuous mode [ 1163.180387][T17485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1163.237406][T17485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1163.269666][T17485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1163.317823][T17485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1163.635814][T17498] device syzkaller0 entered promiscuous mode [ 1168.192103][T17540] netlink: 'syz.3.4396': attribute type 2 has an invalid length. [ 1168.387616][T17539] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4411'. [ 1169.191164][T17540] device 0 entered promiscuous mode [ 1169.897678][T17558] device syzkaller0 entered promiscuous mode [ 1173.555389][T17599] device syzkaller0 entered promiscuous mode [ 1173.635371][T17602] netlink: 'syz.0.4417': attribute type 10 has an invalid length. [ 1177.542208][T17635] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4430'. [ 1179.186236][T17667] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.4442'. [ 1179.884832][T17689] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4452'. [ 1180.059518][T17699] Ÿë: port 2(gretap0) entered blocking state [ 1180.075637][T17699] Ÿë: port 2(gretap0) entered disabled state [ 1180.128847][T17699] device gretap0 entered promiscuous mode [ 1181.827633][T17708] device syzkaller0 entered promiscuous mode [ 1182.224916][T17717] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.4462'. [ 1182.759409][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.765889][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1185.107614][T17736] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4466'. [ 1185.540425][T17743] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4468'. [ 1185.718570][T17749] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.4482'. [ 1186.064820][T17760] Ÿë: port 1(gretap0) entered blocking state [ 1186.102717][T17760] Ÿë: port 1(gretap0) entered disabled state [ 1186.133311][T17760] device gretap0 entered promiscuous mode [ 1187.460686][T17784] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4485'. [ 1187.860676][T17788] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4496'. [ 1188.418961][T17797] netlink: 'syz.2.4488': attribute type 27 has an invalid length. [ 1189.127606][T17797] bond0: (slave bond_slave_0): Releasing backup interface [ 1189.429406][T17806] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.4492'. [ 1190.018421][T17819] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4495'. [ 1190.433715][T17828] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4500'. [ 1190.787933][T17837] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4513'. [ 1190.905008][T17836] netlink: 'syz.4.4504': attribute type 10 has an invalid length. [ 1191.486836][T17859] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4511'. [ 1191.549285][T17861] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.4510'. [ 1192.184783][T17868] device syzkaller0 entered promiscuous mode [ 1196.124614][T17888] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4523'. [ 1196.598139][T17898] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4528'. [ 1196.728599][T17900] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4527'. [ 1197.115578][T17903] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1197.123551][T17903] IPv6: NLM_F_CREATE should be set when creating new route [ 1197.131472][T17903] IPv6: NLM_F_CREATE should be set when creating new route [ 1197.139553][T17903] IPv6: NLM_F_CREATE should be set when creating new route [ 1197.336200][T17907] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.4530'. [ 1197.507815][T17913] Ÿë: port 2(gretap0) entered blocking state [ 1197.518747][T17913] Ÿë: port 2(gretap0) entered disabled state [ 1197.698090][T17913] device gretap0 entered promiscuous mode [ 1198.010512][T17923] netlink: 'syz.0.4535': attribute type 10 has an invalid length. [ 1198.215273][T17932] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4538'. [ 1199.169924][T17952] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.4547'. [ 1199.873156][T17966] netlink: 'syz.3.4552': attribute type 10 has an invalid length. [ 1200.185640][T17975] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4555'. [ 1200.671821][T17989] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.4559'. [ 1201.273473][T18001] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.4564'. [ 1202.124642][T18026] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.4574'. [ 1203.532841][T18046] netlink: 'syz.3.4581': attribute type 9 has an invalid length. [ 1203.598160][T18046] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.4581'. [ 1203.952654][T18052] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.4582'. [ 1204.585695][T18061] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.4586'. [ 1205.333419][T18083] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4591'. [ 1205.532689][T18093] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.4596'. [ 1206.474020][T18100] delete_channel: no stack [ 1207.164756][T18121] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1207.172506][T18121] IPv6: NLM_F_CREATE should be set when creating new route [ 1207.181121][T18121] IPv6: NLM_F_CREATE should be set when creating new route [ 1207.189161][T18121] IPv6: NLM_F_CREATE should be set when creating new route [ 1207.294744][T18123] netlink: 5427 bytes leftover after parsing attributes in process `syz.2.4611'. [ 1207.323934][T18123] netlink: 52477 bytes leftover after parsing attributes in process `syz.2.4611'. [ 1207.353470][T18123] netlink: 71676 bytes leftover after parsing attributes in process `syz.2.4611'. [ 1208.279257][T18134] netlink: 'syz.2.4614': attribute type 9 has an invalid length. [ 1208.314775][T18134] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.4614'. [ 1208.508820][T18141] netlink: 'syz.1.4617': attribute type 10 has an invalid length. [ 1208.566719][T18141] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4617'. [ 1209.176844][T18146] device syzkaller0 entered promiscuous mode [ 1209.242149][T18158] netlink: 'syz.3.4624': attribute type 1 has an invalid length. [ 1209.650463][T18166] delete_channel: no stack [ 1210.488992][T18181] netlink: 'syz.4.4631': attribute type 9 has an invalid length. [ 1210.513895][T18181] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.4631'. [ 1210.843616][T18192] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.4636'. [ 1213.305975][T18165] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1213.313305][T18165] IPv6: NLM_F_CREATE should be set when creating new route [ 1213.320692][T18165] IPv6: NLM_F_CREATE should be set when creating new route [ 1213.327998][T18165] IPv6: NLM_F_CREATE should be set when creating new route [ 1213.337824][T18190] netlink: 'syz.3.4634': attribute type 27 has an invalid length. [ 1213.455727][T18190] bond0: (slave bond_slave_0): Releasing backup interface [ 1213.952063][T18213] netlink: 'syz.2.4643': attribute type 10 has an invalid length. [ 1214.760121][T18220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1214.850428][T18220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1214.881724][T18220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1214.914052][T18220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1215.385452][T18230] delete_channel: no stack [ 1216.100290][T18237] device syzkaller0 entered promiscuous mode [ 1216.128478][T18239] netlink: 'syz.0.4654': attribute type 1 has an invalid length. [ 1216.164231][T18249] netlink: 'syz.3.4656': attribute type 10 has an invalid length. [ 1216.175450][T18249] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4656'. [ 1219.839946][T18255] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.4657'. [ 1220.195484][T18274] netlink: 'syz.1.4668': attribute type 10 has an invalid length. [ 1220.373614][T18280] netlink: 'syz.4.4669': attribute type 1 has an invalid length. [ 1221.614483][T18297] netlink: 'syz.3.4675': attribute type 3 has an invalid length. [ 1221.623884][T18297] netlink: 'syz.3.4675': attribute type 1 has an invalid length. [ 1221.634133][T18297] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.4675'. [ 1222.714852][T18310] netlink: 5427 bytes leftover after parsing attributes in process `syz.4.4681'. [ 1222.747899][T18310] netlink: 52477 bytes leftover after parsing attributes in process `syz.4.4681'. [ 1222.782932][T18310] netlink: 71676 bytes leftover after parsing attributes in process `syz.4.4681'. [ 1222.903217][T18314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1222.993353][T18314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1223.074195][T18314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1223.082083][T18314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1223.907287][T18328] netlink: 'syz.2.4686': attribute type 1 has an invalid length. [ 1225.808595][T18357] netlink: 5427 bytes leftover after parsing attributes in process `syz.0.4697'. [ 1225.835640][T18357] netlink: 52477 bytes leftover after parsing attributes in process `syz.0.4697'. [ 1225.891439][T18357] netlink: 71676 bytes leftover after parsing attributes in process `syz.0.4697'. [ 1226.097610][T18369] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.4700'. [ 1227.755031][ T4278] Bluetooth: hci4: unexpected event 0x1c length: 15 > 5 [ 1228.782583][T18416] netlink: 'syz.4.4719': attribute type 3 has an invalid length. [ 1228.818489][T18416] netlink: 'syz.4.4719': attribute type 1 has an invalid length. [ 1228.861897][T18416] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.4719'. [ 1230.348052][T18437] netlink: 5427 bytes leftover after parsing attributes in process `syz.1.4726'. [ 1230.367628][T18437] netlink: 52477 bytes leftover after parsing attributes in process `syz.1.4726'. [ 1230.389637][T18437] netlink: 71676 bytes leftover after parsing attributes in process `syz.1.4726'. [ 1231.823460][T18471] netlink: 'syz.1.4739': attribute type 3 has an invalid length. [ 1231.870772][T18471] netlink: 'syz.1.4739': attribute type 1 has an invalid length. [ 1231.900171][T18471] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.4739'. [ 1232.954681][T18482] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.4744'. [ 1232.994683][T18485] netlink: 'syz.1.4745': attribute type 10 has an invalid length. [ 1234.898237][T18522] netlink: 'syz.1.4753': attribute type 1 has an invalid length. [ 1235.621987][T18537] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.4759'. [ 1237.452857][T18567] netlink: 'syz.4.4771': attribute type 1 has an invalid length. [ 1237.872142][T18581] netlink: 'syz.0.4787': attribute type 1 has an invalid length. [ 1241.265210][T18654] netlink: 5427 bytes leftover after parsing attributes in process `syz.3.4802'. [ 1241.302958][T18654] netlink: 52477 bytes leftover after parsing attributes in process `syz.3.4802'. [ 1241.341861][T18654] netlink: 71676 bytes leftover after parsing attributes in process `syz.3.4802'. [ 1242.948757][T18694] tipc: Started in network mode [ 1242.966769][T18694] tipc: Node identity 9215a268, cluster identity 4711 [ 1242.973857][T18694] tipc: Node number set to 2450891368 [ 1243.103128][T18695] delete_channel: no stack [ 1244.235418][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.241929][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.600027][T18733] netlink: 'syz.3.4836': attribute type 2 has an invalid length. [ 1245.351142][T18733] device 1 entered promiscuous mode [ 1246.404407][T18755] netlink: 'syz.2.4844': attribute type 29 has an invalid length. [ 1246.442780][T18755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4844'. [ 1246.534105][T18755] netlink: 'syz.2.4844': attribute type 29 has an invalid length. [ 1246.561762][T18755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4844'. [ 1248.533294][T18792] delete_channel: no stack [ 1248.595073][T18795] tipc: Started in network mode [ 1248.605036][T18795] tipc: Node identity 9215a268, cluster identity 4711 [ 1248.626633][T18795] tipc: Node number set to 2450891368 [ 1250.299647][T18834] netlink: 'syz.4.4874': attribute type 2 has an invalid length. [ 1251.043016][T18834] device 1 entered promiscuous mode [ 1252.025701][T18851] netlink: 'syz.2.4879': attribute type 3 has an invalid length. [ 1252.170566][T18851] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4879'. [ 1252.790983][T18867] delete_channel: no stack [ 1252.908400][T18870] netlink: 'syz.3.4890': attribute type 3 has an invalid length. [ 1252.959414][T18870] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.4890'. [ 1253.283641][T18878] netlink: 'syz.2.4892': attribute type 2 has an invalid length. [ 1254.059161][T18878] device 1 entered promiscuous mode [ 1255.307875][T18909] delete_channel: no stack [ 1255.447889][T18912] netlink: 'syz.4.4903': attribute type 29 has an invalid length. [ 1255.455841][T18912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4903'. [ 1255.478125][T18912] netlink: 'syz.4.4903': attribute type 29 has an invalid length. [ 1255.486048][T18912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4903'. [ 1257.769125][T18950] delete_channel: no stack [ 1258.079957][T18962] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4926'. [ 1258.856091][T18966] device syzkaller0 left promiscuous mode [ 1259.361890][T18989] delete_channel: no stack [ 1259.589632][T18994] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4937'. [ 1259.733890][T18996] delete_channel: no stack [ 1261.201473][T19024] netlink: 'syz.0.4946': attribute type 2 has an invalid length. [ 1261.669162][T19034] netlink: 'syz.2.4951': attribute type 3 has an invalid length. [ 1261.778680][T19034] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.4951'. [ 1262.126080][T19024] device 1 entered promiscuous mode [ 1263.577344][T19062] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4962'. [ 1263.695873][T19064] netlink: 'syz.3.4963': attribute type 10 has an invalid length. [ 1263.790077][T19064] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1264.595154][T19085] netlink: 'syz.1.4969': attribute type 2 has an invalid length. [ 1265.485573][T19085] device 1 entered promiscuous mode [ 1265.493341][T19090] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4971'. [ 1267.677043][T19144] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4997'. [ 1268.159812][T19156] netlink: 'syz.2.5002': attribute type 10 has an invalid length. [ 1268.201477][T19156] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1268.572255][T19169] netlink: 'syz.0.5009': attribute type 3 has an invalid length. [ 1268.624544][T19169] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.5009'. [ 1271.516968][T19237] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5034'. [ 1273.017253][T19267] netlink: 'syz.4.5048': attribute type 3 has an invalid length. [ 1273.053336][T19267] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.5048'. [ 1275.144823][T19319] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.5066'. [ 1276.070409][T19337] netlink: 'syz.1.5074': attribute type 10 has an invalid length. [ 1276.184958][T19337] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1277.968579][T19375] netlink: 'syz.1.5083': attribute type 3 has an invalid length. [ 1278.010930][T19375] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.5083'. [ 1279.067236][T19386] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5090'. [ 1279.161049][T19385] netlink: 'syz.0.5088': attribute type 10 has an invalid length. [ 1279.298282][T19385] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1281.201053][T19424] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.5107'. [ 1282.226565][T19436] netlink: 'syz.4.5109': attribute type 10 has an invalid length. [ 1282.707439][T19450] netlink: 188 bytes leftover after parsing attributes in process `syz.1.5114'. [ 1283.337764][T19461] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.5122'. [ 1283.468440][T19464] netlink: 'syz.4.5123': attribute type 13 has an invalid length. [ 1283.536286][T19464] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5123'. [ 1283.749424][T19464] syz_tun: refused to change device tx_queue_len [ 1283.771016][T19464] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1287.889154][T19503] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5136'. [ 1288.778857][T19514] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.5139'. [ 1288.884109][T19520] netlink: 'syz.1.5148': attribute type 10 has an invalid length. [ 1290.457889][T19536] netlink: 'syz.2.5144': attribute type 13 has an invalid length. [ 1290.476941][T19536] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5144'. [ 1290.506155][T19536] syz_tun: refused to change device tx_queue_len [ 1290.519229][T19536] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1291.199789][T19553] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5149'. [ 1291.290858][T19554] netlink: 'syz.4.5151': attribute type 19 has an invalid length. [ 1294.579965][T19572] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5157'. [ 1295.748839][T19594] netlink: 'syz.2.5164': attribute type 19 has an invalid length. [ 1296.441215][T19597] netlink: 'syz.0.5163': attribute type 13 has an invalid length. [ 1296.456976][T19597] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5163'. [ 1296.503694][T19597] syz_tun: refused to change device tx_queue_len [ 1296.546586][T19597] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1296.674088][T19605] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5167'. [ 1300.930453][T19627] netlink: 188 bytes leftover after parsing attributes in process `syz.4.5175'. [ 1302.399953][T19646] netlink: 'syz.1.5179': attribute type 19 has an invalid length. [ 1302.618912][T19648] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5182'. [ 1303.268765][T19673] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5189'. [ 1303.392819][T19675] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5199'. [ 1304.618860][T19694] netlink: 'syz.3.5193': attribute type 29 has an invalid length. [ 1304.686167][T19694] netlink: 'syz.3.5193': attribute type 29 has an invalid length. [ 1304.750228][T19699] netlink: 'syz.3.5193': attribute type 29 has an invalid length. [ 1304.911772][T19699] netlink: 'syz.3.5193': attribute type 29 has an invalid length. [ 1304.964048][T19700] netlink: 'syz.3.5193': attribute type 29 has an invalid length. [ 1305.024158][T19699] netlink: 'syz.3.5193': attribute type 29 has an invalid length. [ 1305.044616][T19694] can: request_module (can-proto-0) failed. [ 1305.376532][T19712] netlink: 'syz.3.5200': attribute type 19 has an invalid length. [ 1305.726358][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.733108][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1310.688224][T19777] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5224'. [ 1315.901472][T19886] netlink: 'syz.2.5262': attribute type 10 has an invalid length. [ 1320.543239][T19939] netlink: 'syz.2.5283': attribute type 29 has an invalid length. [ 1320.564709][T19939] netlink: 'syz.2.5283': attribute type 29 has an invalid length. [ 1320.615483][T19939] netlink: 'syz.2.5283': attribute type 29 has an invalid length. [ 1320.729800][T19944] netlink: 'syz.2.5283': attribute type 29 has an invalid length. [ 1320.786027][T19945] netlink: 'syz.2.5283': attribute type 29 has an invalid length. [ 1320.858826][T19944] netlink: 'syz.2.5283': attribute type 29 has an invalid length. [ 1320.962980][T19939] can: request_module (can-proto-0) failed. [ 1322.338881][T19962] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5290'. [ 1322.370604][T19962] device hsr_slave_0 left promiscuous mode [ 1322.389134][T19962] device hsr_slave_1 left promiscuous mode [ 1322.989833][T19979] netlink: 'syz.4.5296': attribute type 29 has an invalid length. [ 1323.017102][T19979] netlink: 'syz.4.5296': attribute type 29 has an invalid length. [ 1323.045168][T19979] netlink: 'syz.4.5296': attribute type 29 has an invalid length. [ 1323.271713][T19983] netlink: 'syz.4.5296': attribute type 29 has an invalid length. [ 1323.295131][T19981] can: request_module (can-proto-0) failed. [ 1323.318333][T19981] netlink: 'syz.4.5296': attribute type 29 has an invalid length. [ 1323.329501][T19981] netlink: 'syz.4.5296': attribute type 29 has an invalid length. [ 1325.557078][T19987] netlink: 'syz.1.5298': attribute type 10 has an invalid length. [ 1327.874880][T20020] netlink: 'syz.0.5311': attribute type 10 has an invalid length. [ 1330.004254][T20066] netlink: 'syz.3.5328': attribute type 10 has an invalid length. [ 1330.841865][T20085] netlink: 'syz.0.5335': attribute type 21 has an invalid length. [ 1331.812930][T20107] netlink: 'syz.4.5346': attribute type 10 has an invalid length. [ 1331.838915][T20108] netlink: 'syz.0.5348': attribute type 29 has an invalid length. [ 1331.886794][T20108] netlink: 'syz.0.5348': attribute type 29 has an invalid length. [ 1331.935060][T20108] netlink: 'syz.0.5348': attribute type 29 has an invalid length. [ 1332.035576][T20112] netlink: 'syz.0.5348': attribute type 29 has an invalid length. [ 1332.089295][T20112] netlink: 'syz.0.5348': attribute type 29 has an invalid length. [ 1332.139778][T20112] netlink: 'syz.0.5348': attribute type 29 has an invalid length. [ 1332.182434][T20108] can: request_module (can-proto-0) failed. [ 1336.335792][T20151] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.5360'. [ 1337.238880][T20158] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5366'. [ 1341.241009][T20231] netlink: 'syz.4.5391': attribute type 2 has an invalid length. [ 1342.085274][T20231] device 2 entered promiscuous mode [ 1345.668410][T20295] netlink: 'syz.3.5411': attribute type 2 has an invalid length. [ 1346.523911][T20295] device 2 entered promiscuous mode [ 1346.869904][T20307] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5415'. [ 1347.171698][T20311] tap0: tun_chr_ioctl cmd 1074025675 [ 1347.181553][T20311] tap0: persist disabled [ 1347.528824][T20329] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.5423'. [ 1348.444216][T20346] netlink: 'syz.2.5429': attribute type 2 has an invalid length. [ 1349.018262][T20346] device 2 entered promiscuous mode [ 1349.556341][T20357] netlink: 'syz.3.5433': attribute type 10 has an invalid length. [ 1350.428443][T20381] netlink: 'syz.1.5442': attribute type 29 has an invalid length. [ 1350.547263][T20380] device sit0 entered promiscuous mode [ 1350.673627][T20381] netlink: 'syz.1.5442': attribute type 29 has an invalid length. [ 1350.701798][T20383] netlink: 'syz.1.5442': attribute type 29 has an invalid length. [ 1350.720109][T20386] can: request_module (can-proto-0) failed. [ 1350.786888][T20389] netlink: 'syz.1.5442': attribute type 29 has an invalid length. [ 1350.843819][T20381] netlink: 'syz.1.5442': attribute type 29 has an invalid length. [ 1350.890308][T20383] netlink: 'syz.1.5442': attribute type 29 has an invalid length. [ 1351.017635][T20396] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.5444'. [ 1351.921479][T20406] netlink: 'syz.2.5449': attribute type 10 has an invalid length. [ 1351.973269][T20408] netlink: 'syz.1.5448': attribute type 2 has an invalid length. [ 1352.821412][T20408] device 2 entered promiscuous mode [ 1352.928079][T20427] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5457'. [ 1355.402401][T20453] tap0: tun_chr_ioctl cmd 1074025675 [ 1355.418405][T20453] tap0: persist disabled [ 1355.765182][T20464] validate_nla: 4 callbacks suppressed [ 1355.765197][T20464] netlink: 'syz.1.5468': attribute type 29 has an invalid length. [ 1355.860465][T20464] netlink: 'syz.1.5468': attribute type 29 has an invalid length. [ 1355.891597][T20469] netlink: 'syz.1.5468': attribute type 29 has an invalid length. [ 1356.011883][T20469] netlink: 'syz.1.5468': attribute type 29 has an invalid length. [ 1356.053486][T20469] netlink: 'syz.1.5468': attribute type 29 has an invalid length. [ 1356.101396][T20469] netlink: 'syz.1.5468': attribute type 29 has an invalid length. [ 1356.250743][T20464] can: request_module (can-proto-0) failed. [ 1356.532658][T20479] netlink: 'syz.0.5471': attribute type 2 has an invalid length. [ 1356.606228][T20481] netlink: 'syz.4.5475': attribute type 10 has an invalid length. [ 1356.828541][T20478] netlink: 'syz.3.5473': attribute type 10 has an invalid length. [ 1356.870145][T20478] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5473'. [ 1356.983137][T20484] device sit0 entered promiscuous mode [ 1357.529648][T20479] device 2 entered promiscuous mode [ 1358.061397][T20498] tap0: tun_chr_ioctl cmd 1074025675 [ 1358.076731][T20498] tap0: persist disabled [ 1358.383500][T20513] netlink: 'syz.3.5482': attribute type 29 has an invalid length. [ 1358.714943][T20513] can: request_module (can-proto-0) failed. [ 1359.600967][T20533] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5485'. [ 1360.383255][T20543] device sit0 entered promiscuous mode [ 1360.944426][T20572] validate_nla: 11 callbacks suppressed [ 1360.944449][T20572] netlink: 'syz.0.5499': attribute type 29 has an invalid length. [ 1361.009303][T20559] device syzkaller0 entered promiscuous mode [ 1361.025018][T20572] netlink: 'syz.0.5499': attribute type 29 has an invalid length. [ 1361.034738][T20574] netlink: 'syz.0.5499': attribute type 29 has an invalid length. [ 1361.208450][T20572] can: request_module (can-proto-0) failed. [ 1364.183277][T20574] netlink: 'syz.0.5499': attribute type 29 has an invalid length. [ 1364.330726][T20593] netlink: 'syz.0.5504': attribute type 10 has an invalid length. [ 1364.402884][T20595] netlink: 'syz.1.5505': attribute type 29 has an invalid length. [ 1364.413095][T20595] netlink: 'syz.1.5505': attribute type 29 has an invalid length. [ 1364.442958][T20595] netlink: 'syz.1.5505': attribute type 29 has an invalid length. [ 1364.491649][T20595] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5505'. [ 1364.567464][T20595] netlink: 'syz.1.5505': attribute type 29 has an invalid length. [ 1364.743882][T20597] netlink: 'syz.2.5506': attribute type 10 has an invalid length. [ 1364.769032][T20601] device sit0 entered promiscuous mode [ 1365.938511][T20623] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5513'. [ 1366.206660][ T4278] Bluetooth: hci1: unexpected event 0x16 length: 15 > 6 [ 1367.081589][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1367.103763][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1369.019954][T20625] ------------[ cut here ]------------ [ 1369.025614][T20625] WARNING: CPU: 0 PID: 20625 at kernel/events/core.c:6592 perf_pending_task+0x353/0x480 [ 1369.035656][T20625] Modules linked in: [ 1369.039681][T20625] CPU: 0 PID: 20625 Comm: syz.3.5516 Not tainted syzkaller #0 [ 1369.047890][T20625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1369.058319][T20625] RIP: 0010:perf_pending_task+0x353/0x480 [ 1369.064107][T20625] Code: e8 d2 82 da ff 84 db 75 10 e8 69 80 da ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 59 80 da ff e8 ac d5 58 ff eb e9 e8 4d 80 da ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 1369.084070][T20625] RSP: 0018:ffffc900043d78e8 EFLAGS: 00010293 [ 1369.090272][T20625] RAX: ffffffff81a7add3 RBX: ffff888078d5e458 RCX: ffff88802880bc00 [ 1369.098351][T20625] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1369.106461][T20625] RBP: ffff888078d5e220 R08: ffff8880b8e3580b R09: 1ffff110171c6b01 [ 1369.114511][T20625] R10: dffffc0000000000 R11: ffffed10171c6b02 R12: ffff88802880bc00 [ 1369.122657][T20625] R13: ffff888055b60960 R14: 0000000000000000 R15: 1ffff1100f1abc44 [ 1369.130742][T20625] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1369.139890][T20625] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1369.146616][T20625] CR2: 00005627f1e49640 CR3: 000000007cf16000 CR4: 00000000003506f0 [ 1369.154654][T20625] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1369.162780][T20625] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1369.170881][T20625] Call Trace: [ 1369.174229][T20625] [ 1369.177572][T20625] task_work_run+0x1d0/0x260 [ 1369.182384][T20625] ? task_work_cancel+0x220/0x220 [ 1369.187561][T20625] ? do_raw_spin_unlock+0x11d/0x230 [ 1369.192866][T20625] do_exit+0x9d5/0x2570 [ 1369.197237][T20625] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1369.203308][T20625] ? put_task_struct+0x80/0x80 [ 1369.208226][T20625] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1369.214461][T20625] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1369.220776][T20625] ? lockdep_hardirqs_on+0x94/0x140 [ 1369.226046][T20625] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1369.232371][T20625] do_group_exit+0x229/0x2e0 [ 1369.237186][T20625] ? _raw_spin_unlock_irq+0x25/0x40 [ 1369.242464][T20625] get_signal+0x1259/0x1340 [ 1369.247138][T20625] arch_do_signal_or_restart+0xc4/0x1310 [ 1369.252972][T20625] ? do_futex+0x310/0x320 [ 1369.257549][T20625] ? get_sigframe_size+0x10/0x10 [ 1369.262616][T20625] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1369.268958][T20625] ? exit_to_user_mode_loop+0x3b/0x110 [ 1369.274622][T20625] exit_to_user_mode_loop+0x70/0x110 [ 1369.280051][T20625] exit_to_user_mode_prepare+0xee/0x180 [ 1369.285688][T20625] syscall_exit_to_user_mode+0x16/0x40 [ 1369.291307][T20625] do_syscall_64+0x58/0xa0 [ 1369.295806][T20625] ? clear_bhb_loop+0x60/0xb0 [ 1369.300636][T20625] ? clear_bhb_loop+0x60/0xb0 [ 1369.305397][T20625] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1369.311427][T20625] RIP: 0033:0x7f7bc299e019 [ 1369.315917][T20625] Code: Unable to access opcode bytes at 0x7f7bc299dfef. [ 1369.323154][T20625] RSP: 002b:00007f7bc393c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1369.331675][T20625] RAX: fffffffffffffe00 RBX: 00007f7bc2c25fa8 RCX: 00007f7bc299e019 [ 1369.339762][T20625] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7bc2c25fa8 [ 1369.347939][T20625] RBP: 00007f7bc2c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1369.356063][T20625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1369.364196][T20625] R13: 00007f7bc2c26038 R14: 00007ffed1ecb160 R15: 00007ffed1ecb248 [ 1369.372324][T20625] [ 1369.375382][T20625] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1369.382797][T20625] CPU: 0 PID: 20625 Comm: syz.3.5516 Not tainted syzkaller #0 [ 1369.390546][T20625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1369.400620][T20625] Call Trace: [ 1369.403922][T20625] [ 1369.406882][T20625] dump_stack_lvl+0x188/0x24e [ 1369.411588][T20625] ? memcpy+0x3c/0x60 [ 1369.415586][T20625] ? show_regs_print_info+0x12/0x12 [ 1369.420812][T20625] ? load_image+0x410/0x410 [ 1369.425380][T20625] panic+0x2d3/0x710 [ 1369.429347][T20625] ? bpf_jit_dump+0xd0/0xd0 [ 1369.433910][T20625] __warn+0x2f8/0x4f0 [ 1369.437918][T20625] ? perf_pending_task+0x353/0x480 [ 1369.443068][T20625] ? perf_pending_task+0x353/0x480 [ 1369.448243][T20625] report_bug+0x2ba/0x4f0 [ 1369.452648][T20625] ? perf_pending_task+0x353/0x480 [ 1369.457799][T20625] handle_bug+0x3a/0x70 [ 1369.461993][T20625] exc_invalid_op+0x16/0x40 [ 1369.466537][T20625] asm_exc_invalid_op+0x16/0x20 [ 1369.471425][T20625] RIP: 0010:perf_pending_task+0x353/0x480 [ 1369.477185][T20625] Code: e8 d2 82 da ff 84 db 75 10 e8 69 80 da ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 59 80 da ff e8 ac d5 58 ff eb e9 e8 4d 80 da ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 1369.496823][T20625] RSP: 0018:ffffc900043d78e8 EFLAGS: 00010293 [ 1369.502923][T20625] RAX: ffffffff81a7add3 RBX: ffff888078d5e458 RCX: ffff88802880bc00 [ 1369.511029][T20625] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1369.519040][T20625] RBP: ffff888078d5e220 R08: ffff8880b8e3580b R09: 1ffff110171c6b01 [ 1369.527579][T20625] R10: dffffc0000000000 R11: ffffed10171c6b02 R12: ffff88802880bc00 [ 1369.535604][T20625] R13: ffff888055b60960 R14: 0000000000000000 R15: 1ffff1100f1abc44 [ 1369.543616][T20625] ? perf_pending_task+0x353/0x480 [ 1369.548781][T20625] ? perf_pending_task+0x353/0x480 [ 1369.553926][T20625] task_work_run+0x1d0/0x260 [ 1369.558560][T20625] ? task_work_cancel+0x220/0x220 [ 1369.563742][T20625] ? do_raw_spin_unlock+0x11d/0x230 [ 1369.569013][T20625] do_exit+0x9d5/0x2570 [ 1369.573218][T20625] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1369.579244][T20625] ? put_task_struct+0x80/0x80 [ 1369.584056][T20625] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1369.590253][T20625] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1369.596621][T20625] ? lockdep_hardirqs_on+0x94/0x140 [ 1369.601865][T20625] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1369.608088][T20625] do_group_exit+0x229/0x2e0 [ 1369.612744][T20625] ? _raw_spin_unlock_irq+0x25/0x40 [ 1369.617978][T20625] get_signal+0x1259/0x1340 [ 1369.622535][T20625] arch_do_signal_or_restart+0xc4/0x1310 [ 1369.628215][T20625] ? do_futex+0x310/0x320 [ 1369.632591][T20625] ? get_sigframe_size+0x10/0x10 [ 1369.637580][T20625] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1369.643782][T20625] ? exit_to_user_mode_loop+0x3b/0x110 [ 1369.649373][T20625] exit_to_user_mode_loop+0x70/0x110 [ 1369.654703][T20625] exit_to_user_mode_prepare+0xee/0x180 [ 1369.660295][T20625] syscall_exit_to_user_mode+0x16/0x40 [ 1369.665993][T20625] do_syscall_64+0x58/0xa0 [ 1369.670457][T20625] ? clear_bhb_loop+0x60/0xb0 [ 1369.675190][T20625] ? clear_bhb_loop+0x60/0xb0 [ 1369.680008][T20625] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1369.685957][T20625] RIP: 0033:0x7f7bc299e019 [ 1369.690413][T20625] Code: Unable to access opcode bytes at 0x7f7bc299dfef. [ 1369.697459][T20625] RSP: 002b:00007f7bc393c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1369.705916][T20625] RAX: fffffffffffffe00 RBX: 00007f7bc2c25fa8 RCX: 00007f7bc299e019 [ 1369.713938][T20625] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7bc2c25fa8 [ 1369.722146][T20625] RBP: 00007f7bc2c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1369.730179][T20625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1369.738209][T20625] R13: 00007f7bc2c26038 R14: 00007ffed1ecb160 R15: 00007ffed1ecb248 [ 1369.746930][T20625] [ 1369.750700][T20625] Kernel Offset: disabled [ 1369.755090][T20625] Rebooting in 86400 seconds..